Data processing method and device based on configuration information, equipment and medium

Abstract

The embodiment of the invention discloses a data processing method and device based on configuration information, equipment and a medium, and can be applied to scenes such as intelligent traffic, auxiliary driving, cloud technology and artificial intelligence. The method comprises the following steps: acquiring to-be-checked hash data from a target controlled party, wherein the to-be-checked hash data is obtained by performing hash operation on to-be-checked configuration information by the target controlled party based on a specified hash algorithm; obtaining target hash data matched with the target controlled party from the storage area, wherein the target hash data is obtained by performing hash operation on target configuration information corresponding to the to-be-checked configuration information by the control party based on a specified hash algorithm; and checking the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information. According to the technical scheme, the checking efficiency of the configuration information is improved, and the data processing reliability based on the configuration information is high.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular to a data processing method based on configuration information, a data processing apparatus based on configuration information, an electronic device, and a computer readable medium. BACKGROUND

[0002] Currently, a control party (for example, a controller) can generate configuration information and send the configuration information to a controlled party (for example, a network device), and then the controlled party can use the configuration information to meet daily operation requirements.

[0003] In related technologies, in order to ensure the correctness of the configuration information on the controlled party side, the configuration information on the controlled party side is actively or passively sent to the control party, and then the configuration information on the controlled party side is checked by the control party, but the checking efficiency is low.

[0004] Therefore, how to improve the checking efficiency of the configuration information to improve the data processing reliability based on the configuration information is a problem to be solved. SUMMARY

[0005] Embodiments of the present application provide a data processing method, apparatus, device and medium based on configuration information, which improves the checking efficiency of the configuration information and has high data processing reliability based on the configuration information.

[0006] In a first aspect, embodiments of the present application provide a data processing method based on configuration information, which includes: obtaining to-be-checked hash data from a target controlled party, the to-be-checked hash data being obtained by the target controlled party based on a specified hash algorithm on to-be-checked configuration information; obtaining target hash data matched with the target controlled party from a storage area, the target hash data being obtained by a control party based on the specified hash algorithm on target configuration information corresponding to the to-be-checked configuration information; and checking the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information.

[0007] In a second aspect, embodiments of the present application provide a data processing method based on configuration information, which includes: obtaining to-be-checked configuration information; performing hash operation on the to-be-checked configuration information based on a specified hash algorithm to obtain to-be-checked hash data; and sending the to-be-checked hash data to a control party, so that the control party obtains target hash data matched with a target controlled party from a storage area and checks the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information, the target hash data being obtained by the control party based on the specified hash algorithm on target configuration information corresponding to the to-be-checked configuration information.

[0008] In a third aspect, the embodiments of the present application provide a data processing apparatus based on configuration information, the apparatus comprising: a first obtaining module configured to obtain to-be-checked hash data from a target controlled party, the to-be-checked hash data being obtained by the target controlled party based on a specified hash algorithm on to-be-checked configuration information; a second obtaining module configured to obtain target hash data matched with the target controlled party from a storage area, the target hash data being obtained by a controller based on the specified hash algorithm on target configuration information corresponding to the to-be-checked configuration information; and a checking module configured to check the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information.

[0009] In an embodiment of the present application, based on the foregoing scheme, the checking module is specifically configured to: if the target hash data and the to-be-checked hash data match successfully, a checking result for indicating that the to-be-checked configuration information is correct is obtained; and if the target hash data and the to-be-checked hash data fail to match, a checking result for indicating that the to-be-checked configuration information is incorrect is obtained.

[0010] In an embodiment of the present application, based on the foregoing scheme, the checking module is specifically configured to: obtain to-be-checked version information associated with the to-be-checked hash data, and obtain target version information associated with the target hash data; and if the target version information and the to-be-checked version information match successfully, the to-be-checked hash data is checked based on the target hash data to obtain a checking result for the to-be-checked configuration information.

[0011] In an embodiment of the present application, based on the foregoing scheme, the to-be-checked hash data includes to-be-checked service hash data and to-be-checked route hash data, the to-be-checked service hash data being obtained by the target controlled party performing hash operation on the to-be-checked service configuration information based on a first hash algorithm, and the to-be-checked route hash data being obtained by the target controlled party performing hash operation on the to-be-checked route configuration information based on a second hash algorithm; the target hash data includes target service hash data and target route hash data, the target service hash data being obtained by the target controlled party performing hash operation on target service configuration information corresponding to the to-be-checked service configuration information based on the first hash algorithm, and the target route hash data being obtained by the target controlled party performing hash operation on target route configuration information corresponding to the to-be-checked route configuration information based on the second hash algorithm; the checking module is specifically configured to check the to-be-checked service hash data based on the target service hash data to obtain a checking result for the to-be-checked service configuration information, and check the to-be-checked route hash data based on the target route hash data to obtain a checking result for the to-be-checked route configuration information.

[0012] In an embodiment of the present application, based on the foregoing scheme, the device further includes a storage module configured to generate a plurality of target configuration information respectively corresponding to controlled parties, perform hash operation on each target configuration information based on the specified hash algorithm to obtain target hash data matched with each controlled party, and store the target hash data matched with each controlled party into a storage area. Correspondingly, the second acquisition module is specifically configured to extract the target hash data matched with the target controlled party from the plurality of target hash data.

[0013] In an embodiment of the present application, based on the foregoing scheme, the storage module is specifically configured to, for each target configuration information, if the target configuration information includes target service configuration information and target route configuration information, perform hash operation on the target service configuration information based on a first hash algorithm to obtain target service hash data, and perform hash operation on the target route configuration information based on a second hash algorithm to obtain target route hash data; and combine the target service hash data and the target route hash data to obtain the target hash data matched with each controlled party.

[0014] In an embodiment of the present application, based on the foregoing scheme, the first acquisition module is specifically configured to receive a user datagram protocol connection request sent by a target controlled party to establish a user datagram protocol connection with the controlled party based on the user datagram protocol connection request, and receive to-be-checked hash data sent by the target controlled party through the user datagram protocol connection.

[0015] In an embodiment of the present application, based on the foregoing scheme, the apparatus further comprises a receiving module configured to: if an acquisition request of the to-be-checked configuration information of the specified object for the target controlled party is received, send the acquisition request to the target controlled party, so that the target controlled party combines the to-be-checked configuration information and the to-be-checked hash data to obtain a data set; correspondingly, the first acquisition module is specifically configured to: receive the data set sent by the target controlled party, and extract the to-be-checked hash data and the to-be-checked configuration information from the data set; and send the to-be-checked configuration information to the specified object.

[0016] In an embodiment of the present application, based on the foregoing scheme, the apparatus further comprises a first sending module configured to: if the check result indicates that the to-be-checked configuration information is incorrect, generate first alarm information based on the check result; and send the first alarm information to a specified object, so that the specified object performs security management on the target controlled party based on the first alarm information.

[0017] In an embodiment of the present application, based on the foregoing scheme, the apparatus further comprises a second sending module configured to: acquire a receiving time for the to-be-checked hash data, the receiving time being obtained by recording a time of receiving the to-be-checked hash data sent by the target controlled party; if it is detected that no other to-be-checked hash data sent by the target controlled party is received within a preset time period after the receiving time, generate second alarm information; and send the second alarm information to a specified object, so that the specified object performs security management on the target controlled party based on the second alarm information.

[0018] In a fourth aspect, the embodiments of the present application provide a data processing apparatus based on configuration information, comprising: an acquisition module configured to acquire to-be-checked configuration information; an operation module configured to perform hash operation on the to-be-checked configuration information based on a specified hash algorithm to obtain to-be-checked hash data; and a sending module configured to send the to-be-checked hash data to a controller, so that the controller acquires target hash data matched with a target controlled party from a storage area, and checks the to-be-checked hash data based on the target hash data to obtain a check result for the to-be-checked configuration information, the target hash data being obtained by the controller performing hash operation on target configuration information corresponding to the to-be-checked configuration information based on the specified hash algorithm.

[0019] In an embodiment of the present application, based on the foregoing scheme, the operation module is specifically configured to: if the to-be-checked configuration information comprises to-be-checked service configuration information and to-be-checked routing configuration information, perform hash operation on the to-be-checked service configuration information based on a first hash algorithm to obtain to-be-checked service hash data, and perform hash operation on the to-be-checked routing configuration information based on a second hash algorithm to obtain to-be-checked routing hash data; and combine the to-be-checked service hash data and the to-be-checked routing hash data to obtain to-be-checked hash data.

[0020] In an embodiment of the present application, based on the foregoing scheme, the sending module is specifically configured to: send a user datagram protocol connection request to a control party to establish a user datagram protocol connection with the control party based on the user datagram protocol connection request; and send the to-be-checked hash data to the control party through the user datagram protocol connection.

[0021] In a fifth aspect, an embodiment of the present application provides an electronic device, including one or more processors; a memory for storing one or more programs, when the one or more programs are executed by the one or more processors, the electronic device implements the configuration information-based data processing method as described above.

[0022] In a sixth aspect, an embodiment of the present application provides a computer readable medium, which stores a computer program, when the computer program is executed by a processor, the configuration information-based data processing method as described above is implemented.

[0023] In a seventh aspect, an embodiment of the present application provides a computer program product, including computer instructions, when the computer instructions are executed by a processor, the configuration information-based data processing method as described above is implemented.

[0024] In the technical scheme provided by the embodiments of the present application:

[0025] The target controlled party performs hash operation on the to-be-checked configuration information by using a specified hash algorithm to obtain to-be-checked hash data, and the control party also performs hash operation on the target configuration information corresponding to the to-be-checked configuration information by using the specified hash algorithm to obtain target hash data, and then when the target controlled party sends the to-be-checked hash data to the control party, the control party can check the to-be-checked hash data by using the target hash data to obtain a checking result for the to-be-checked configuration information, thereby realizing the checking of the configuration information through the hash operation of the configuration information.

[0026] On one aspect, because the data amount of the hash data corresponding to the configuration information is small, the data amount of the transmission is small, thereby avoiding the low transmission efficiency and low checking efficiency caused by the large data amount of the direct transmission of the configuration information, improving the checking efficiency of the configuration information, and especially in the scene where the configuration information checking is more frequent, the checking efficiency of the configuration information is greatly improved. Moreover, the checking efficiency of checking by using the hash data is simpler, thereby further improving the checking efficiency of the configuration information.

[0027] On one aspect, because the data amount of the hash data corresponding to the configuration information is small, the data amount of the transmission is small, thereby avoiding the low transmission efficiency and low checking efficiency caused by the large data amount of the direct transmission of the configuration information, improving the checking efficiency of the configuration information, and especially in the scene where the configuration information checking is more frequent, the checking efficiency of the configuration information is greatly improved. Moreover, the checking efficiency of checking by using the hash data is simpler, thereby further improving the checking efficiency of the configuration information.

[0028] It should be understood that the foregoing general description and the following detailed description are only exemplary and explanatory, and cannot limit the present application. BRIEF DESCRIPTION OF DRAWINGS

[0029] Figure 1 is a schematic diagram of an exemplary implementation environment to which the technical solutions of the embodiments of the present application can be applied.

[0030] Figure 2 is a flowchart of a data processing method based on configuration information according to an exemplary embodiment of the present application.

[0031] Figure 3 is a flowchart of a data processing method based on configuration information according to another exemplary embodiment of the present application.

[0032] Figure 4 is a flowchart of a data processing method based on configuration information according to another exemplary embodiment of the present application.

[0033] Figure 5 is a flowchart of a data processing method based on configuration information according to another exemplary embodiment of the present application.

[0034] Figure 6 is a flowchart of a data processing method based on configuration information according to another exemplary embodiment of the present application.

[0035] Figure 7 is a flowchart of a data processing method based on configuration information according to another exemplary embodiment of the present application.

[0036] Figure 8 is a flowchart of a data processing method based on configuration information according to another exemplary embodiment of the present application.

[0037] Figure 9 is a flowchart of a data processing method based on configuration information according to an exemplary embodiment of the present application.

[0038] Figure 10 is a schematic diagram of an exemplary implementation environment to which the technical solutions of the embodiments of the present application can be applied.

[0039] Figure 11 is a flow chart of a data processing method based on configuration information according to another exemplary embodiment of the present application.

[0040] Figure 12 is a schematic diagram of a data processing method based on configuration information according to another exemplary embodiment of the present application.

[0041] Figure 13 is a block diagram of a data processing apparatus based on configuration information according to an exemplary embodiment of the present application.

[0042] Figure 14 is a block diagram of a data processing apparatus based on configuration information according to an exemplary embodiment of the present application.

[0043] Figure 15 is a structural schematic diagram of a computer system of an electronic device suitable for implementing the embodiments of the present application. DETAILED DESCRIPTION

[0044] The exemplary embodiments will be described in detail herein below with reference to the drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of apparatuses and methods consistent with some aspects of the present application as detailed in the appended claims.

[0045] In the embodiments of the present application, the term "module" or "unit" refers to a computer program or a part of a computer program with a predetermined function, and works together with other related parts to achieve a predetermined target, and can be implemented in whole or in part by using software, hardware (such as a processing circuit or a memory), or a combination thereof. Similarly, one processor (or multiple processors or memories) can be used to implement one or more modules or units. In addition, each module or unit can be a part of an integral module or unit that includes the functions of the module or unit.

[0046] The block diagrams shown in the drawings are merely functional entities, and do not necessarily have to correspond to physically independent entities. That is, these functional entities can be implemented in the form of software, or in one or more hardware modules or integrated circuits, or in different network and / or processor apparatuses and / or microcontroller apparatuses.

[0047] The flowchart shown in the drawing is only an exemplary illustration, and does not necessarily include all contents and operations / steps, nor does it necessarily need to be executed in the order described. For example, some operations / steps can be further decomposed, and some operations / steps can be combined or partially combined, so the actual execution order can be changed according to actual conditions.

[0048] It should be noted that "multiple" mentioned in the present application refers to two or more. The association relationship of "and / or" describes the associated objects, which means that there can be three relationships, for example, A and / or B can represent the following three cases: A exists alone, A and B exist together, and B exists alone. The character " / " generally represents that the associated objects before and after are in an "or" relationship.

[0049] Currently, the control party (for example, the controller) can generate configuration information and send the configuration information to the controlled party (for example, the network device), and then the controlled party can use the configuration information to achieve daily operation requirements. In related technologies, in order to ensure the correctness of the configuration information on the controlled party side, the configuration information on the controlled party side is usually actively or passively sent to the control party, and then the configuration information on the controlled party side is checked by the control party, but the checking efficiency is low.

[0050] Therefore, in order to improve the checking efficiency of the configuration information and improve the reliability of data processing based on the configuration information, the present application provides a data processing scheme based on configuration information. Please refer to Figure 1 , Figure 1 is a schematic diagram of an implementation environment related by the present application. The implementation environment mainly includes a controlled party 101, a control party 102, and a designated object 103; wherein:

[0051] The controlled party 101 refers to a party that receives the configuration information sent by the control party 102 and uses the configuration information to achieve daily operation requirements. Among them, the controlled party 101 includes but is not limited to network devices or application programs (which can be applets) on network devices, and the number of controlled parties 101 can be one or more.

[0052] The control party 102 refers to a party that generates configuration information on the controlled party 101 side and manages and controls the controlled party 101 based on the configuration information. Among them, relative to the network device corresponding to the controlled party 101, the control party 102 usually has a network device with more computing resources and / or more storage resources.

[0053] Exemplarily, the network device corresponding to the controlled party 101 can be a terminal device or a server, and the network device corresponding to the control party 102 can be a terminal device or a server. The terminal device includes but is not limited to a smartphone, a computer (a tablet computer, a notebook computer, a desktop computer, etc.), a smart home device (a television, a refrigerator, an air conditioner, a washing machine, a sweeping and mopping robot, etc.), a smart wearable device (a bracelet, a watch, etc.), and the like. The server can be a standalone physical server, or a server cluster or a distributed system formed by multiple physical servers, where the server cluster or the distributed system includes a cloud server for providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, a content delivery network (CDN), and big data and artificial intelligence platforms. In an embodiment of the present application, when the controlled party 101 is an edge terminal device, the control party 102 can be a central server.

[0054] The designated object 103 refers to an object / part that can interact with the control party 102 and / or the controlled party 101, which can join to make corresponding management decisions and the like at appropriate times, and usually corresponds to a user such as an operation and management personnel.

[0055] It can be understood that the controlled party 101, the control party 102, and the designated object 103 establish a communication connection through a wired or wireless network. Exemplarily, the wireless network or the wired network uses standard communication technologies and / or protocols. The network is usually the Internet, but can also be any other network, including but not limited to a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a mobile, wired or wireless network, a private network or any combination of virtual private networks, and the like.

[0056] In an embodiment of the present application, the data processing method based on the configuration information can be jointly executed by the controlled party 101 and the control party 102, specifically:

[0057] The controlled party 101 can obtain to-be-checked configuration information, then perform a hash operation on the to-be-checked configuration information based on a specified hash algorithm to obtain to-be-checked hash data, and then send the to-be-checked hash data to the control party 102. Correspondingly, the control party 102 can obtain the to-be-checked hash data from the controlled party 101, then obtain target hash data matched with the controlled party 101 from a storage area, the target hash data being obtained by performing a hash operation on target configuration information corresponding to the to-be-checked configuration information based on the specified hash algorithm, and then check the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information.

[0058] It should be clear that, Figure 1 The number of the controlled party 101, the control party 102, and the specified object 103 in the embodiment is only illustrative, and any number of the controlled party 101, the control party 102, and the specified object 103 can be provided according to actual needs.

[0059] Figure 1 The technical solution of the embodiment can be applied to various scenarios, including but not limited to smart traffic, assisted driving, cloud technology, and artificial intelligence, etc. In actual application, corresponding adjustments can be made according to specific application scenarios.

[0060] Illustratively, if applied to a smart traffic or assisted driving scenario, the controlled party 101 can be an application program on a vehicle terminal or a navigation terminal, the control party 102 can be a computer, and the specified object 103 can be a traffic business manager, etc. For example, an application program can obtain to-be-checked configuration information related to driving operation requirements, then perform a hash operation on the to-be-checked configuration information based on a specified hash algorithm to obtain to-be-checked hash data, and then send the to-be-checked hash data to a computer. Correspondingly, the computer can obtain the to-be-checked hash data related to driving operation requirements from the application program, then obtain target hash data matched with the application program from a storage area, the target hash data being obtained by performing a hash operation on target configuration information corresponding to the to-be-checked configuration information based on the specified hash algorithm, and then check the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information.

[0061] Exemplarily, if applied in a cloud technology or an artificial intelligence scenario, the controlled party 101 can be an application program on a smart phone, etc., the control party 102 can be a cloud server, etc., and the designated object 103 can be a game service manager, etc. For example, an application program can obtain to-be-checked configuration information related to a game operation demand, then perform a hash operation on the to-be-checked configuration information based on a designated hash algorithm to obtain to-be-checked hash data, and then send the to-be-checked hash data to a cloud server. Correspondingly, the cloud server can obtain to-be-checked hash data related to a game operation demand from an application program, then obtain target hash data matched with the application program from a storage area, where the target hash data is obtained by performing a hash operation on target configuration information corresponding to the to-be-checked configuration information by the cloud server based on a designated hash algorithm, and then check the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information.

[0062] It should be noted that in the specific embodiments of the present application, data related to users is involved, and when the embodiments of the present application are applied to specific products or technologies, user permission or consent needs to be obtained, and the collection, use and processing of related data need to comply with relevant laws, regulations and standards of countries and regions.

[0063] The various implementation details of the technical solutions of the embodiments of the present application are described in detail as follows:

[0064] Please refer to Figure 2 , Figure 2 is a flowchart of a configuration information-based data processing method shown in an embodiment of the present application, which can be executed by the control party 102. As shown in Figure 2 , the configuration information-based data processing method at least includes S201 to S203, which are described in detail as follows:

[0065] S201, obtaining to-be-checked hash data from a target controlled party, the to-be-checked hash data being obtained by the target controlled party by performing a hash operation on to-be-checked configuration information based on a designated hash algorithm.

[0066] It can be understood that in actual applications, the number of controlled parties is usually multiple, and therefore the target controlled party in the embodiments of the present application refers to any one of the multiple controlled parties. For example, there are 1000 controlled parties, and each of the 1000 controlled parties is a target controlled party.

[0067] The to-be-verified hash data in the embodiments of the present application refers to hash data obtained by performing hash operation on the to-be-verified configuration information of the target controlled party by using a specified hash algorithm, wherein the to-be-verified configuration information refers to configuration information actually required to be verified by the target controlled party; for example, V-Bu-Ro represents the to-be-verified configuration information, and Hash represents the specified hash algorithm, and the to-be-verified hash data is Hash(V-Bu-Ro).

[0068] It can be understood that, in order to reduce the amount of transmitted data and speed up the verification, in the embodiments of the present application, the controller verifies the to-be-verified hash data corresponding to the to-be-verified configuration information, and when the to-be-verified hash data is correct, it indicates that the to-be-verified configuration information is correct, and when the to-be-verified hash data is incorrect, it indicates that the to-be-verified configuration information is incorrect.

[0069] In an embodiment of the present application, the process of obtaining the to-be-verified hash data from the target controlled party in S201 can include:

[0070] receiving the to-be-verified hash data sent by the target controlled party; or

[0071] sending a verification request to the target controlled party, so that the target controlled party returns the to-be-verified hash data based on the verification request.

[0072] That is, in the optional embodiment, the target controlled party can actively send the to-be-verified hash data to the controller, or passively send the to-be-verified hash data to the controller. In actual application, the way in which the controller obtains the to-be-verified hash data from the target controlled party can be flexibly adjusted according to specific application scenarios.

[0073] In this way, by implementing the optional embodiment, the controller can conveniently obtain the to-be-verified hash data from the target controlled party, thereby providing strong support for the verification of the to-be-verified configuration information.

[0074] S202, obtaining target hash data matched with the target controlled party from a storage area, wherein the target hash data is obtained by performing hash operation on target configuration information corresponding to the to-be-verified configuration information by using a specified hash algorithm by the controller.

[0075] In the embodiments of the present application, the controller obtains the to-be-verified hash data from the target controlled party, and then obtains the target hash data matched with the target controlled party from the storage area.

[0076] The target hash data in the embodiments of the present application refers to hash data obtained by performing hash operation on target configuration information by the control party using a specified hash algorithm, wherein the target configuration information refers to configuration information generated on the control party side, i.e., configuration information that should be issued by the control party to the target controlled party; for example, T-Bu-Ro represents the target configuration information, and Hash represents the specified hash algorithm, and then the target hash data is Hash(T-Bu-Ro).

[0077] It can be understood that, normally, the target configuration information should be the same as the to-be-checked configuration information (i.e., the to-be-checked configuration information is correct), but due to network or program errors and the like, the target configuration information may be different from the to-be-checked configuration information (i.e., the to-be-checked configuration information is incorrect), and therefore, the to-be-checked configuration information needs to be checked to avoid operation-related problems caused by incorrect to-be-checked configuration information.

[0078] In the embodiments of the present application, the storage area can store target hash data corresponding to a plurality of controlled parties respectively, and therefore, the control party can obtain target hash data matched with the target controlled party from the storage area.

[0079] S203, checking the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information.

[0080] In the embodiments of the present application, the control party obtains the target hash data and the to-be-checked hash data, and then can check the to-be-checked hash data using the target hash data to obtain a checking result for the to-be-checked configuration information.

[0081] In an embodiment of the present application, the process of checking the to-be-checked hash data based on the target hash data in S203 to obtain a checking result for the to-be-checked configuration information can include:

[0082] If the target hash data and the to-be-checked hash data match successfully, a checking result for indicating that the to-be-checked configuration information is correct is obtained;

[0083] If the target hash data and the to-be-checked hash data fail to match, a checking result for indicating that the to-be-checked configuration information is incorrect is obtained.

[0084] That is, in the optional embodiments, the control party checks the to-be-checked hash data using the target hash data to obtain a checking result for the to-be-checked configuration information, which can include two cases:

[0085] Case 1: If the target hash data and the to-be-checked hash data match successfully, i.e., the target hash data and the to-be-checked hash data are the same, it indicates that the to-be-checked configuration information corresponding to the to-be-checked hash data is correct, and therefore, a checking result for indicating that the to-be-checked configuration information is correct is obtained.

[0086] Case 2, if the target hash data fails to match the to-be-checked hash data, i.e., the target hash data is different from the to-be-checked hash data, it indicates that the to-be-checked configuration information corresponding to the to-be-checked hash data is incorrect, so the checking result obtained at this time is used to indicate that the to-be-checked configuration information is incorrect.

[0087] For example, taking the foregoing example, if Hash(V-Bu-Ro) = Hash(T-Bu-Ro), i.e., V-Bu-Ro = T-Bu-Ro, the checking result obtained at this time is used to indicate that the to-be-checked configuration information V-Bu-Ro is correct; if Hash(V-Bu-Ro) ≠ Hash(T-Bu-Ro), i.e., V-Bu-Ro ≠ T-Bu-Ro, the checking result obtained at this time is used to indicate that the to-be-checked configuration information V-Bu-Ro is incorrect.

[0088] In this way, by implementing the optional embodiment, the checking result of the to-be-checked configuration information can be obtained simply and accurately.

[0089] In an embodiment of the present application, the process of checking the to-be-checked hash data based on the target hash data in S203 to obtain the checking result of the to-be-checked configuration information can include:

[0090] obtaining to-be-checked version information associated with the to-be-checked hash data, and obtaining target version information associated with the target hash data;

[0091] If the target version information matches the to-be-checked version information, the to-be-checked hash data is checked based on the target hash data to obtain the checking result of the to-be-checked configuration information.

[0092] In the optional embodiment, the controller can update the configuration information, and in order to distinguish the configuration information before and after the update, the corresponding version information can be generated each time the configuration information is updated; for example, the version information corresponding to the first generated configuration information is V0, wherein after the configuration information of the V0 version information is updated, the version information corresponding to the generated updated configuration information is V1, and after the configuration information of the V1 version information is updated, the version information corresponding to the generated updated configuration information is V2, and so on.

[0093] In the optional embodiment, the to-be-checked version information refers to the version information corresponding to the to-be-checked configuration information, and similarly, the target version information refers to the version information corresponding to the target configuration information.

[0094] That is, in the optional embodiment, the controller obtains the to-be-verified version information at the same time / after obtaining the to-be-verified hash data, and obtains the target version information at the same time / after obtaining the target hash data, and verifies the to-be-verified version information by using the target version information. If the target version information matches the to-be-verified version information, that is, the target version information is the same as the to-be-verified version information, the to-be-verified hash data is verified by using the target hash data to obtain the verification result of the to-be-verified configuration information. If the target version information does not match the to-be-verified version information, that is, the target version information is different from the to-be-verified version information, the to-be-verified hash data does not need to be verified by using the target hash data to obtain the verification result of the to-be-verified configuration information.

[0095] For example, as described in the foregoing example, the to-be-verified version information is represented by V-v (that is, the version information of the to-be-verified configuration information V-Bu-Ro is V-v), and the target version information is represented by T-v (that is, the version information of the target configuration information T-Bu-Ro is T-v). If V-v=T-v, it is determined whether Hash(V-Bu-Ro) and Hash(T-Bu-Ro) are the same. If V-v≠T-v, it is not necessary to determine whether Hash(V-Bu-Ro) and Hash(T-Bu-Ro) are the same.

[0096] In this way, by implementing the optional embodiment, the verification of the to-be-verified hash data is triggered only when the to-be-verified version information is verified, and since the verification of the to-be-verified version information is simpler, the verification efficiency of the configuration information is improved.

[0097] In an embodiment of the present application, after the process of verifying the to-be-verified hash data based on the target hash data in S203 to obtain the verification result of the to-be-verified configuration information, the process can further include:

[0098] sending the verification result of the to-be-verified configuration information to the target controlled party.

[0099] That is, in the optional embodiment, the controller can send the obtained verification result of the to-be-verified configuration information to the target controlled party, and correspondingly, the target controlled party receives the verification result of the to-be-verified configuration information sent by the controller.

[0100] In optional embodiments, the process of sending the verification result of the to-be-verified configuration information to the target controlled party can include: if the verification result indicates that the to-be-verified configuration information is incorrect, sending the verification result indicating that the to-be-verified configuration information is incorrect to the target controlled party. That is, in the case where the to-be-verified configuration information is incorrect, the controller sends the verification result indicating that the to-be-verified configuration information is incorrect to the target controlled party. It can be understood that in other embodiments, the controller can also send the verification result indicating that the to-be-verified configuration information is correct to the target controlled party in the case where the to-be-verified configuration information is correct. In actual applications, it can be flexibly adjusted according to specific application scenarios.

[0101] In this way, through the optional embodiments, the controller sends the verification result of the to-be-verified configuration information to the target controlled party, and the target controlled party can determine the specific verification situation based on the verification result, which is more flexible.

[0102] In the embodiments of the present application, the amount of data of the hash data corresponding to the configuration information is small, so the amount of data transmitted is small, thereby avoiding the low transmission efficiency and low verification efficiency caused by directly transmitting the configuration information due to the large amount of configuration information data, improving the verification efficiency of the configuration information; and the verification efficiency of using hash data for verification is simpler, thereby further improving the verification efficiency of the configuration information; in addition, since the hash data corresponding to the configuration information is transmitted, the risk of configuration information leakage caused by directly transmitting the configuration information is avoided, and the verification security of the configuration information is improved.

[0103] In an embodiment of the present application, another configuration information-based data processing method is provided, which can be executed by the controller 102. As shown in Figure 3 The configuration information-based data processing method can include S301-S302, S201-S202.

[0104] The configuration information in the embodiments of the present application includes at least one of, but is not limited to, service configuration information and routing configuration information. The service configuration information refers to basic configuration information related to a service, and includes at least one of, but is not limited to, a Virtual Network Identifier (VNI) of the service, a table (such as a routing table, a forwarding table, an access control table, etc.), and identification information (Mark) of service traffic (i.e., in routing and forwarding decision, different policies or rules can be marked, such as a quality of service policy, a security policy, a load balancing policy, etc.). The routing configuration information refers to detailed configuration information related to routing, and generally records routing information of service traffic to different destinations; and includes at least one of, but is not limited to, a destination park (i.e., a target network area or location to which service traffic is to be sent), a detailed route (i.e., a specific path or next hop of service traffic in a network), and Tag information (it can be understood that different labels can be attached to the routing of different destination parks, and these labels can be used to identify specific routing or service traffic, so as to be distinguished in the network).

[0105] The to-be-checked hash data in the embodiments of the present application includes to-be-checked service hash data and to-be-checked routing hash data; wherein:

[0106] The to-be-checked service hash data refers to hash data obtained by performing hash operation on to-be-checked service configuration information by the target controlled party using a first hash algorithm, and the to-be-checked service configuration information refers to service configuration information actually required to be checked on the target controlled party side; for example, V-Bu represents the to-be-checked service configuration information, and hash1 represents the first hash algorithm, and the to-be-checked service hash data is hash1(V-Bu).

[0107] The to-be-checked routing hash data refers to hash data obtained by performing hash operation on to-be-checked routing configuration information by the target controlled party using a second hash algorithm, and the to-be-checked routing configuration information refers to routing configuration information actually required to be checked on the target controlled party side; for example, V-Ro represents the to-be-checked routing configuration information, and hash2 represents the second hash algorithm, and the to-be-checked routing hash data is hash2(V-Ro).

[0108] The target hash data in the embodiments of the present application includes target service hash data and target routing hash data; wherein:

[0109] The target service hash data refers to hash data obtained by performing hash operation on target service configuration information by the control party using a first hash algorithm, and the target service configuration information refers to service configuration information generated on the control party side, i.e., service configuration information that should be sent to the target controlled party by the control party; for example, T-Bu represents the target service configuration information, and hash1 represents the first hash algorithm, and the target service hash data is hash1(T-Bu).

[0110] The target route hash data refers to hash data obtained by performing hash operation on target route configuration information by the control party using a second hash algorithm, and the target route configuration information refers to route configuration information generated on the control party side, i.e., route configuration information that should be sent to the target controlled party by the control party; for example, T-Ro represents the target route configuration information, and hash2 represents the second hash algorithm, and the target route hash data is hash2(T-Ro).

[0111] It can be understood that the first hash algorithm and the second hash algorithm in the foregoing can be the same or different, and in actual application, can be flexibly adjusted according to specific application scenarios.

[0112] S301 to S302 are described in detail as follows:

[0113] S301, verifying the to-be-verified service hash data based on the target service hash data to obtain a verification result for the to-be-verified service configuration information.

[0114] In the embodiment of the present application, if the target hash data includes the target service hash data, the control party can verify the to-be-verified service hash data using the target service hash data, thereby obtaining the verification result for the to-be-verified service configuration information.

[0115] For example, if hash1(V-Bu) = hash1(T-Bu), i.e., V-Bu = T-Bu, a verification result for indicating that the to-be-verified service configuration information V-Bu is correct is obtained; if hash1(V-Bu) ≠ hash1(T-Bu), i.e., V-Bu ≠ T-Bu, a verification result for indicating that the to-be-verified service configuration information V-Bu is incorrect is obtained.

[0116] S302, verifying the to-be-verified route hash data based on the target route hash data to obtain a verification result for the to-be-verified route configuration information.

[0117] In the embodiment of the present application, if the target hash data includes the target route hash data, the control party can verify the to-be-verified route hash data using the target route hash data, thereby obtaining the verification result for the to-be-verified route configuration information.

[0118] For example, if hash1(V-Ro) = hash1(T-Ro), i.e. V-Ro = T-Ro is represented, a verification result for representing that the to-be-verified routing configuration information V-Ro is correct is obtained; if hash1(V-Ro) ≠ hash1(T-Ro), i.e. V-Ro ≠ T-Ro is represented, a verification result for representing that the to-be-verified routing configuration information V-Ro is incorrect is obtained.

[0119] It should be noted that, Figure 3 For details of S201 to S202, please refer to Figure 2 For details of S201 to S202, please refer to

[0120] In the embodiment of the application, the configuration information is divided into two categories: service configuration information and routing configuration information. In verification, the target service hash data is used to verify the to-be-verified service hash data to obtain a verification result for the to-be-verified service configuration information, and the target routing hash data is used to verify the to-be-verified routing hash data to obtain a verification result for the to-be-verified routing configuration information. Thus, targeted verification is realized, which is more flexible and can clearly determine whether the service configuration information and the routing configuration information are correct or not, which is more convenient for later processing and suitable for many scenarios.

[0121] In an embodiment of the application, another configuration information-based data processing method is provided, which can be executed by the controller 102. As shown in Figure 4 The configuration information-based data processing method can further include S401 to S403 before S202, and correspondingly, S404, S201 and S203.

[0122] S401 to S404 are described in detail as follows:

[0123] S401, generate target configuration information corresponding to each controlled party.

[0124] S402, perform hash operation on each target configuration information based on a specified hash algorithm to obtain target hash data matched with each controlled party.

[0125] As described in the foregoing embodiment, the storage area stores target hash data corresponding to each controlled party. The control party generates target configuration information corresponding to each controlled party, and then performs hash operation on the target configuration information corresponding to each controlled party based on a specified hash algorithm to obtain target hash data matched with each controlled party, and stores the target hash data matched with each controlled party in the storage area.

[0126] For example, one controlled party is represented by Cs1 and another controlled party is represented by Cs2, wherein target configuration information t-bu-ro1 is generated for the controlled party Cs1 and target configuration information t-bu-ro2 is generated for the controlled party Cs2; then the target configuration information t-bu-ro1 is hashed by using the specified hash algorithm hash to obtain the target hash data hash(t-bu-ro1) corresponding to the controlled party Cs1, and the target configuration information t-bu-ro2 is hashed by using the specified hash algorithm hash to obtain the target hash data hash(t-bu-ro2) corresponding to the controlled party Cs2; then the target hash data hash(t-bu-ro1) corresponding to the controlled party Cs1 and the target hash data hash(t-bu-ro2) corresponding to the controlled party Cs2 are stored in the storage area.

[0127] In an embodiment of the present application, the process of hashing each target configuration information based on the specified hash algorithm to obtain the target hash data corresponding to each controlled party in S402 can include:

[0128] For each target configuration information, if the target configuration information includes target service configuration information and target routing configuration information, the target service configuration information is hashed based on a first hash algorithm to obtain target service hash data, and the target routing configuration information is hashed based on a second hash algorithm to obtain target routing hash data.

[0129] The target service hash data and the target routing hash data are combined to obtain the target hash data corresponding to each controlled party.

[0130] That is, in the optional embodiment, the target configuration information includes but is not limited to at least one of the target service configuration information and the target routing configuration information, etc., in the process of hashing the target configuration information by the control party using the specified hash algorithm to obtain the target hash data.

[0131] In the optional embodiment, if the target configuration information includes the target service configuration information, the control party can hash the target service configuration information using the first hash algorithm to obtain the target service hash data.

[0132] For example, taking the foregoing example, assuming that the target configuration information t-bu-ro1 includes target service configuration information t-bu1, the target service hash data is hash1(t-bu1), and assuming that the target configuration information t-bu-ro2 includes target service configuration information t-bu2, the target service hash data is hash1(t-bu2).

[0133] In optional embodiments, if the target configuration information includes target route configuration information, the controller can perform a hash operation on the target route configuration information using a second hash algorithm to obtain target route hash data.

[0134] For example, taking the foregoing example, assume that the target configuration information t-bu-ro1 includes target route configuration information t-ro1, then the target route hash data is hash2(t-ro1), and assume that the target configuration information t-bu-ro2 includes target route configuration information t-ro2, then the target route hash data is hash2(t-ro2).

[0135] In optional embodiments, the controller obtains the target service hash data and the target route hash data, and then combines the target service hash data and the target route hash data to obtain the target hash data.

[0136] For example, taking the foregoing example, the target service hash data hash1(t-bu1) and the target route hash data hash2(t-ro1) corresponding to the controlled party Cs1 are combined to obtain the target hash data hash(t-bu-ro1) corresponding to the controlled party Cs1, which is {hash1(t-bu1), hash2(t-ro1)}, and the target service hash data hash1(t-bu2) and the target route hash data hash2(t-ro2) corresponding to the controlled party Cs2 are combined to obtain the target hash data hash(t-bu-ro2) corresponding to the controlled party Cs2, which is {hash1(t-bu2), hash2(t-ro2)}.

[0137] It can be understood that, in the corresponding examples of the embodiments of the present application, only two controlled parties are taken as examples for ease of description, and in actual applications, there are usually a large number of controlled parties, and the number of controlled parties can be flexibly adjusted according to specific application scenarios.

[0138] In this way, by implementing the optional embodiments, the target service configuration information and the target route configuration information are respectively subjected to hash operations, which provides strong support for subsequent targeted verification.

[0139] S403, storing the target hash data matched with each controlled party into a storage area.

[0140] S404, extracting the target hash data matched with the target controlled party from the plurality of target hash data.

[0141] The storage area in the embodiment of the application stores a plurality of target hash data corresponding to the controlled parties respectively, that is, the storage area stores a plurality of target hash data; therefore, the control party in the embodiment of the application extracts the target hash data corresponding to the target controlled party from the plurality of target hash data.

[0142] It should be noted that, Figure 4 The detailed introduction of S201 and S203 shown in the above table can be referred to Figure 2 The detailed introduction of S201 and S203 shown in the above table can be referred to

[0143] In the embodiment of the application, the target configuration information is subjected to hash operation in advance to obtain target hash data, and the target hash data is stored, so that when the to-be-checked configuration information needs to be checked, the target hash data is directly obtained to check the to-be-checked hash data, which improves the checking efficiency of the configuration information to a certain extent.

[0144] In an embodiment of the application, another configuration information-based data processing method is provided, which can be executed by the control party 102. As shown in the above table, Figure 5 The configuration information-based data processing method can include S501-S502, S202-S203.

[0145] S501-S502 are described in detail as follows:

[0146] S501, receiving a user datagram protocol connection request sent by a target controlled party, to establish a user datagram protocol connection with the control party based on the user datagram protocol connection request.

[0147] In the embodiment of the application, the target controlled party can select a transmission mode of the to-be-checked hash data, wherein the transmission mode includes but is not limited to a user datagram protocol (UDP) transmission mode, a transmission control protocol (TCP) transmission mode, or a stream control transmission protocol (SCTP) transmission mode, etc.

[0148] In the embodiment of the application, the target controlled party selects the UDP transmission mode, therefore, the target controlled party can generate a UDP connection request and send the UDP connection request to the control party; correspondingly, the control party receives the UDP connection request sent by the target controlled party, and then establishes a UDP connection with the target controlled party.

[0149] S502, receiving the to-be-checked hash data sent by the target controlled party through the user datagram protocol connection.

[0150] In the embodiment of the present application, the control party and the target controlled party establish a UDP connection, and then the target controlled party can send the to-be-checked hash data to the control party through the UDP connection. Correspondingly, the control party receives the to-be-checked hash data sent by the target controlled party through the UDP connection.

[0151] It should be noted that, Figure 5 For detailed introduction of S202 to S203, please refer to Figure 2 For detailed introduction of S202 to S203, please refer to

[0152] In the embodiment of the present application, the control party and the target controlled party transmit the to-be-checked hash data through the UDP connection. Since the UDP connection has the characteristic of high transmission efficiency, in the scenario where a large amount of configuration information needs to be frequently checked, the checking efficiency of the configuration information can be greatly improved, and the network overhead is reduced.

[0153] In an embodiment of the present application, another configuration information-based data processing method is provided, which can be executed by the control party 102. As shown in Figure 6 As shown in the figure, the configuration information-based data processing method can further include S601 before S201, and correspondingly, S602 to S603 and S202 to S203.

[0154] S601 to S603 are described in detail as follows:

[0155] S601, if the acquisition request of the to-be-checked configuration information of the target controlled party by the specified object is received, the acquisition request is sent to the target controlled party, so that the target controlled party combines the to-be-checked configuration information and the to-be-checked hash data to obtain a data set.

[0156] In the embodiment of the present application, when the specified object has the needs of viewing and modifying the to-be-checked configuration information of the target controlled party, it can generate an acquisition request for the to-be-checked configuration information of the target controlled party, and then send the acquisition request to the control party. Correspondingly, the control party receives the acquisition request sent by the specified object, and then sends the acquisition request to the target controlled party. Correspondingly, the target controlled party receives the acquisition request sent by the control party, and based on the acquisition request, it determines that it needs to report the to-be-checked configuration information and the to-be-checked hash data at the same time, wherein the to-be-checked configuration information and the to-be-checked hash data can be reported together or separately.

[0157] S602, receiving the data set sent by the target controlled party, and extracting the to-be-checked hash data and the to-be-checked configuration information from the data set.

[0158] In the embodiment of the present application, the target controlled party combines the to-be-checked configuration information and the to-be-checked hash data based on the received obtaining request to obtain a data set, and sends the data set to the controller (i.e., reports the to-be-checked configuration information and the to-be-checked hash data to the controller, so that the reporting efficiency is higher); correspondingly, the controller receives the data set sent by the target controlled party, and can extract the to-be-checked hash data and the to-be-checked configuration information from the data set.

[0159] S603, the to-be-checked configuration information is sent to the specified object.

[0160] In the embodiment of the present application, the controller extracts the to-be-checked configuration information, and then can send the to-be-checked configuration information to the specified object; correspondingly, the specified object receives the to-be-checked configuration information sent by the controller, and can perform operations such as viewing and modifying the to-be-checked configuration information.

[0161] In the embodiment of the present application, the controller extracts the to-be-checked hash data, and then can check the to-be-checked hash data by using the target hash data to obtain the checking result for the to-be-checked configuration information.

[0162] In an embodiment of the present application, the specified object can also send the obtaining request directly to the target controlled party; correspondingly, the target controlled party receives the obtaining request sent by the specified object, and sends the to-be-checked configuration information to the specified object based on the obtaining request.

[0163] In this way, the to-be-checked configuration information can be conveniently obtained by implementing the optional embodiment.

[0164] It should be noted that, Figure 6 For detailed introduction of S202 to S203, please refer to Figure 2 S202 to S203 shown in the figure will not be repeated here.

[0165] In the embodiment of the present application, the to-be-checked configuration information can also be obtained in the process of checking the to-be-checked hash data by using the target hash data to obtain the checking result for the to-be-checked configuration information, which is high in flexibility and suitable for many scenes.

[0166] In an embodiment of the present application, another configuration information-based data processing method is provided, which can be executed by the controller 102. As shown in the figure, Figure 7 The configuration information-based data processing method can further include S701 to S702 after S203.

[0167] S701 to S702 are described in detail as follows:

[0168] S701, if the checking result indicates that the to-be-checked configuration information is incorrect, generating first alarm information based on the checking result.

[0169] S702, sending the first alarm information to a specified object, so that the specified object performs security management on the target controlled party based on the first alarm information.

[0170] As introduced in the foregoing embodiments, the controller can check the to-be-checked routing hash data by using the target routing hash data, and obtain a checking result for the to-be-checked routing configuration information.

[0171] In the case where the to-be-checked configuration information is incorrect, the controller can generate first alarm information based on the checking result of the incorrect to-be-checked configuration information, and send the first alarm information to a specified object. Correspondingly, the specified object receives the first alarm information sent by the controller, and can perform security management on the target controlled party by using the first alarm information. Exemplarily, the security management operation includes at least one of the following: anomaly detection and analysis, vulnerability repair, and permission management.

[0172] In an embodiment of the present application, in the case where the to-be-checked configuration information is incorrect, the controller can actively or passively send target configuration information corresponding to the to-be-checked configuration information to the target controlled party. Correspondingly, the target controlled party receives the target configuration information sent by the controller, and synchronizes the target configuration information (replaces the incorrect to-be-checked configuration information with the target configuration information, that is, updates the incorrect configuration information to correct configuration information).

[0173] In this way, by implementing the optional embodiments, the incorrect configuration information is corrected, the security and reliability of daily operation are ensured, and the automation and flexibility of correction are high.

[0174] It should be noted that, Figure 7 For detailed introduction of S201 to S203, please refer to Figure 2 For detailed introduction of S201 to S203, please refer to

[0175] In the embodiments of the present application, the controller alarms in the case where the to-be-checked configuration information is incorrect, and the specified object participates in security management, which improves the management reliability of the target controlled party and the security of the network environment.

[0176] In an embodiment of the present application, another configuration information-based data processing method is provided, which can be executed by the controller 102. As shown in Figure 8 The configuration information-based data processing method can further include S801 to S803 after S201.

[0177] Details of S801 to S803 are as follows:

[0178] S801, obtaining a receiving time for the to-be-checked hash data, the receiving time being obtained by recording a time of receiving the to-be-checked hash data sent by the target controlled party.

[0179] S802, if it is detected that no other to-be-checked hash data sent by the target controlled party is received within a preset time period after the receiving time, generating second alarm information.

[0180] S803, sending the second alarm information to a specified object, so that the specified object performs security management on the target controlled party based on the second alarm information.

[0181] In the embodiment of the application, the controller can record the receiving time when receiving the to-be-checked hash data sent by the target controlled party, and then can obtain the receiving time when needed, and detect whether other to-be-checked hash data sent by the target controlled party is received within a preset time period after the receiving time, and then use the detection result for corresponding processing.

[0182] In the embodiment of the application, using the detection result for corresponding processing can include two cases:

[0183] Case 1, if it is detected that no other to-be-checked hash data sent by the target controlled party is received within a preset time period after the receiving time, at this time the target controlled party may have an abnormal situation, so the controller can generate second alarm information, and send the second alarm information to a specified object; correspondingly, the specified object receives the second alarm information sent by the controller, and can use the second alarm information to perform security management operation on the target controlled party. Exemplarily, the security management operation includes at least one of, but is not limited to, anomaly detection and analysis, vulnerability repair, and permission management.

[0184] Case 2, if it is detected that no other to-be-checked hash data sent by the target controlled party is received within a preset time period after the receiving time, at this time the target controlled party does not have an abnormal situation for the time being, and no processing can be performed.

[0185] It should be noted that, Figure 8 Details of S201 to S203 shown in the above table are described in detail in the above table Figure 2 S201 to S203 shown in the above table, which will not be repeated here.

[0186] In the embodiment of the application, the controller alarms in the case where no other to-be-checked hash data sent by the target controlled party is received within a preset time period, and the security management is participated by the specified object, which improves the management reliability of the target controlled party and the security of the network environment.

[0187] It should be noted that Figures 2 to 8 The embodiments are described from the perspective of the controller. The following describes the implementation details of the technical solutions of the embodiments of the present application from the perspective of the controlled party: Figure 9 The implementation details of the technical solutions of the embodiments of the present application are described in detail from the perspective of the controlled party:

[0188] Please refer to Figure 9 , Figure 9 is a flowchart of a data processing method based on configuration information according to an embodiment of the present application, which can be executed by the controlled party 101. As Figure 9 shown, the data processing method based on configuration information at least includes S901 to S903, which are described in detail as follows:

[0189] S901, obtaining to-be-checked configuration information.

[0190] The checking of the configuration information in the embodiments of the present application can be periodic or aperiodic, and accordingly, the target controlled party can periodically or aperiodically obtain to-be-checked configuration information.

[0191] S902, performing a hash operation on the to-be-checked configuration information based on a specified hash algorithm to obtain to-be-checked hash data.

[0192] In the embodiments of the present application, after the target controlled party obtains the to-be-checked configuration information, the target controlled party can perform a hash operation on the to-be-checked configuration information by using a specified hash algorithm to obtain to-be-checked hash data; for example, using V-Bu-Ro to represent the to-be-checked configuration information, and using Hash to represent the specified hash algorithm, then the to-be-checked hash data is Hash(V-Bu-Ro).

[0193] In an embodiment of the present application, the process of performing a hash operation on the to-be-checked configuration information based on a specified hash algorithm to obtain to-be-checked hash data in S902 can include:

[0194] If the to-be-checked configuration information includes to-be-checked service configuration information and to-be-checked routing configuration information, performing a hash operation on the to-be-checked service configuration information based on a first hash algorithm to obtain to-be-checked service hash data, and performing a hash operation on the to-be-checked routing configuration information based on a second hash algorithm to obtain to-be-checked routing hash data;

[0195] Combining the to-be-checked service hash data and the to-be-checked routing hash data to obtain to-be-checked hash data.

[0196] That is, in the optional embodiment, in the process of performing a hash operation on the to-be-checked configuration information by using a specified hash algorithm to obtain to-be-checked hash data, the to-be-checked configuration information includes at least one of, but is not limited to, to-be-checked service configuration information and to-be-checked routing configuration information.

[0197] In optional embodiments, if the to-be-checked configuration information comprises to-be-checked service configuration information, the target controllee can perform a hash operation on the to-be-checked service configuration information using a first hash algorithm to obtain to-be-checked service hash data.

[0198] For example, if V-Bu represents the to-be-checked service configuration information, and hash1 represents the first hash algorithm, then the to-be-checked service hash data is hash1(V-Bu).

[0199] More specifically, if the target controllee is controllee Cs1, and the to-be-checked configuration information v-bu-ro1 corresponding to controllee Cs1 comprises to-be-checked service configuration information v-bu1, then the to-be-checked service hash data is hash1(v-bu1). Or if the target controllee is controllee Cs2, and the to-be-checked configuration information v-bu-ro2 corresponding to controllee Cs2 comprises to-be-checked service configuration information v-bu2, then the to-be-checked service hash data is hash1(v-bu2).

[0200] In optional embodiments, if the to-be-checked configuration information comprises to-be-checked routing configuration information, the target controllee can perform a hash operation on the to-be-checked routing configuration information using a second hash algorithm to obtain to-be-checked routing hash data.

[0201] For example, if V-Ro represents the to-be-checked routing configuration information, and hash2 represents the second hash algorithm, then the to-be-checked routing hash data is hash2(V-Ro).

[0202] More specifically, if the target controllee is controllee Cs1, and the to-be-checked configuration information v-bu-ro1 corresponding to controllee Cs1 comprises to-be-checked routing configuration information v-ro1, then the to-be-checked routing hash data is hash2(v-ro1). Or if the target controllee is controllee Cs2, and the to-be-checked configuration information v-bu-ro2 corresponding to controllee Cs2 comprises to-be-checked routing configuration information v-ro2, then the to-be-checked routing hash data is hash2(v-ro2).

[0203] In optional embodiments, the target controllee obtains the to-be-checked service hash data and the to-be-checked routing hash data, and then combines the to-be-checked service hash data and the to-be-checked routing hash data to obtain to-be-checked hash data.

[0204] For example, if the foregoing example is continued, the to-be-checked service hash data hash1(V-Bu) and the to-be-checked routing hash data hash2(V-Ro) are combined to obtain to-be-checked hash data Hash(V-Bu-Ro) = {hash1(V-Bu), hash2(V-Ro)}.

[0205] More specifically, the to-be-verified business hash data hash1(v-bu1) corresponding to the controlled party Cs1 and the to-be-verified routing hash data hash2(v-ro1) are combined to obtain the to-be-verified hash data hash(v-bu-ro1) corresponding to the controlled party Cs1, which is {hash1(v-bu1), hash2(v-ro1)}. Or the to-be-verified business hash data hash1(v-bu2) corresponding to the controlled party Cs2 and the to-be-verified routing hash data hash2(v-ro2) are combined to obtain the to-be-verified hash data hash(v-bu-ro2) corresponding to the controlled party Cs2, which is {hash1(v-bu2), hash2(v-ro2)}.

[0206] In this way, by implementing the optional embodiment, the to-be-verified business configuration information and the to-be-verified routing configuration information are subjected to hash operation respectively, which provides strong support for subsequent targeted verification.

[0207] S903, the to-be-verified hash data is sent to the control party, so that the control party obtains target hash data matching the target controlled party from a storage area, and verifies the to-be-verified hash data based on the target hash data to obtain a verification result for the to-be-verified configuration information, the target hash data being obtained by the control party based on a specified hash algorithm on target configuration information corresponding to the to-be-verified configuration information.

[0208] In the embodiment of the application, the target controlled party obtains the to-be-verified hash data, and then can send the to-be-verified hash data to the control party. Correspondingly, the control party receives the to-be-verified hash data sent by the target controlled party, and then verifies the to-be-verified hash data by using the target hash data to obtain a verification result for the to-be-verified configuration information. For specific details on the control party side, please refer to the foregoing embodiments, which will not be described here.

[0209] In an embodiment of the application, the process of sending the to-be-verified hash data to the control party in S903 can include:

[0210] Sending a user datagram protocol connection request to the control party to establish a user datagram protocol connection with the control party based on the user datagram protocol connection request;

[0211] Sending the to-be-verified hash data to the control party through the user datagram protocol connection.

[0212] That is, in the optional embodiment, the target controlled party can select a transmission mode of the to-be-verified hash data, wherein the transmission mode includes but is not limited to a UDP transmission mode, a TCP transmission mode, or an SCTP transmission mode, etc.

[0213] In optional embodiments, the target controlled party selects a UDP transmission mode, specifically, the target controlled party can generate a UDP connection request and send the UDP connection request to the controller; correspondingly, the controller receives the UDP connection request sent by the target controlled party, and then establishes a UDP connection with the target controlled party.

[0214] In this way, by implementing optional embodiments, the controller and the target controlled party transmit the to-be-checked hash data through a UDP connection. Since the UDP connection has the characteristic of high transmission efficiency, in scenarios where a large amount of configuration information needs to be frequently checked, the checking efficiency of the configuration information can be greatly improved, and network overheads and the like can be reduced.

[0215] In the embodiments of the present application, the amount of data of the hash data corresponding to the configuration information is small, so the amount of data transmitted is small, thereby avoiding the phenomenon of low transmission efficiency and low checking efficiency caused by directly transmitting the configuration information due to the large amount of data of the configuration information, and improving the checking efficiency of the configuration information. Furthermore, the checking efficiency of checking by using the hash data is simpler, thereby further improving the checking efficiency of the configuration information. In addition, since the hash data corresponding to the configuration information is transmitted, the risk of leakage of the configuration information caused by directly transmitting the configuration information is avoided, and the checking security of the configuration information is improved.

[0216] A specific scenario of the embodiments of the present application is described in detail below:

[0217] Please refer to Figure 10 , mainly including a vDCI-Border (vDCI-BD) controller of a virtual Data Center Interconnection (vDCI) server-level access that carries a core network, and a plurality of BDs. It can be understood that the DCI refers to a backbone network core platform used for internal interconnection between Tencent data centers, mainly used to carry the company's internal network cross-city multi-business, composed of dozens of backbone routers and hundreds of cross-provincial / cross-city dedicated circuits placed in China and overseas, which form a long connection to the internal network backbone of the company's IDC rooms located in China and some overseas IDC rooms. The vDCI realizes end-to-end delay optimization and traffic scheduling on the basis of the DCI. The BD refers to an application program running on a business server, which can receive configuration information issued by the BD controller to schedule traffic on the business server. In the embodiments of the present application, the BD controller is the controller in the foregoing embodiments, and the BD is the target controlled party in the foregoing embodiments.

[0218] As Figure 10As shown, the BDs can be classified according to the parks and the services, specifically, there are multiple BDs for processing service A and service B in park 1, and there are multiple BDs for processing service A and service C in park 2. Generally, the BD controller issues the same configuration information to the same service in the same park, and issues different configuration information to different services or different parks. For example, the configuration information corresponding to service A in park 1 is t-bu1-ro A , and accordingly, the multiple BDs for processing service A in park 1 all correspond to the configuration information t-bu1-ro A ; the configuration information corresponding to service B in park 1 is t-bu1-ro B , and accordingly, the multiple BDs for processing service B in park 1 all correspond to the configuration information t-bu1-ro B ; the configuration information corresponding to service A in park 2 is t-bu2-ro A , and accordingly, the multiple BDs for processing service A in park 2 all correspond to the configuration information t-bu2-ro A ; the configuration information corresponding to service C in park 2 is t-bu2-ro C , and accordingly, the multiple BDs for processing service C in park 1 all correspond to the configuration information t-bu2-ro C . A B A C .

[0219] It can be understood that each BD reports the hash data of the configuration information to the BD controller, and accordingly, the BD controller receives the hash data of the configuration information reported by each BD, and then checks each hash data to realize the checking of the configuration information, and returns the checking result of the configuration information to each BD. For example, a certain BD for processing service A in park 1 reports the hash data of the configuration information t-bu1-ro A to the BD controller, and accordingly, the BD controller returns the checking result of the configuration information t-bu1-ro A to the BD, or a certain BD for processing service A in park 2 reports the hash data of the configuration information t-bu2-ro A to the BD controller, and accordingly, the BD controller returns the checking result of the configuration information t-bu2-ro A to the BD; it can be understood that Figure 10 only two BDs report the hash data of the configuration information and are checked by the BD controller, and in actual application, each BD reports the hash data of the configuration information and is checked by the BD controller. It can be understood that each BD reports the hash data of the configuration information to the BD controller, and accordingly, the BD controller receives the hash data of the configuration information reported by each BD, and then checks each hash data to realize the checking of the configuration information, and returns the checking result of the configuration information to each BD. For example, a certain BD for processing service A in park 1 reports the hash data of the configuration information t-bu1-ro A to the BD controller, and accordingly, the BD controller returns the checking result of the configuration information t-bu1-ro A to the BD, or a certain BD for processing service A in park 2 reports the hash data of the configuration information t-bu2-ro A to the BD controller, and accordingly, the BD controller returns the checking result of the configuration information t-bu2-ro A to the BD; it can be understood that Figure 10 only two BDs report the hash data of the configuration information and are checked by the BD controller, and in actual application, each BD reports the hash data of the configuration information and is checked by the BD controller.

[0220] Based on Figure 10 the application environment, please refer to Figure 11 , Figure 11 is an embodiment of the flow chart of the data processing method based on configuration information. As Figure 11 shown, the data processing method based on configuration information at least includes S1101 to S1109, which are described in detail as follows:

[0221] S1101, the BD controller generates the target configuration information corresponding to each BD in the park for processing the service, and distributes the target configuration information to the BD; wherein the target configuration information includes target service configuration information and target routing configuration information.

[0222] For example, for example, as described above, for a BD in park one for processing service A, the BD controller generates target configuration information t-bu1-ro A , wherein t-bu1-ro A includes target service configuration information t-bu 1A and target routing configuration information t-ro 1A ; for a BD in park one for processing service B, the BD controller generates target configuration information t-bu1-ro B , wherein t-bu1-ro B includes target service configuration information t-bu 1B and target routing configuration information t-ro 1B ; for a BD in park two for processing service A, the BD controller generates target configuration information t-bu2-ro A , wherein t-bu2-ro A includes target service configuration information t-bu 2A and target routing configuration information t-ro 2A ; for a BD in park two for processing service C, the BD controller generates target configuration information t-bu2-ro C , wherein t-bu2-ro C includes target service configuration information t-bu 2C and target routing configuration information t-ro 2C .

[0223] S1102, the BD controller performs hash operation on each target service configuration information based on the first hash algorithm to obtain target service hash data, and performs hash operation on each target routing configuration information based on the second hash algorithm to obtain target routing hash data, and combines the target service hash data and the target routing hash data corresponding to the same service in the same park to obtain target hash data, and stores the target hash data in the storage area.

[0224] For example, taking the foregoing example, the target configuration information t-bu1-ro A For example, the BD controller uses a first hash algorithm hash1 to hash the target service configuration information t-bu 1A to obtain target service hash data hash1(t-bu 1A ), and uses a second hash algorithm hash2 to hash the target routing configuration information t-ro 1A to obtain target routing hash data hash2(t-ro 1A ), thereby obtaining target hash data Hash(t-bu1-ro A ) = {hash1(t-bu 1A ), hash2(t-ro 1A )} corresponding to the BD in park 1 for processing service A. In this way, the BD controller can obtain target hash data Hash(t-bu1-ro B ) = {hash1(t-bu 1B ), hash2(t-ro 1B )} corresponding to the BD in park 1 for processing service B, target hash data Hash(t-bu2-ro A ) = {hash1(t-bu 2A ), hash2(t-ro 2A )} corresponding to the BD in park 2 for processing service A, and target hash data Hash(t-bu2-ro C ) = {hash1(t-bu 2C ), hash2(t-ro 2C )} corresponding to the BD in park 2 for processing service C. Then, the plurality of target hash data are stored in a storage area.

[0225] In S1103, the BD hashes the to-be-checked service configuration information based on a first hash algorithm to obtain to-be-checked service hash data, hashes the to-be-checked routing configuration information based on a second hash algorithm to obtain to-be-checked routing hash data, and combines the to-be-checked service hash data and the to-be-checked routing hash data to obtain to-be-checked hash data.

[0226] It can be understood that the BD can receive the target configuration information issued by the BD controller. Due to reasons such as network and code, the configuration information on the BD side may not be consistent with the configuration information on the BD controller side, and therefore the configuration information on the BD side needs to be checked. For convenience of distinction, the configuration information on the BD side is the to-be-checked configuration information in the foregoing embodiments, and the configuration information on the BD controller side is the target configuration information in the foregoing embodiments.

[0227] For example, taking a certain BD in the park for processing business A as an example, the BD corresponds to to-be-verified configuration information v-bu1-ro A including to-be-verified business configuration information v-bu 1A and to-be-verified routing configuration information v-ro 1A , the BD performs hash operation on the to-be-verified business configuration information v-bu 1A using a first hash algorithm hash1 to obtain to-be-verified business hash data hash1(v-bu 1A ), and performs hash operation on the to-be-verified routing configuration information v-ro 1A using a second hash algorithm hash2 to obtain to-be-verified routing hash data hash2(v-ro 1A ), thereby obtaining to-be-verified hash data Hash(v-bu1-ro A ) of the BD in the park for processing business A corresponding to the BD, that is, Hash(v-bu1-ro 1A ) = {hash1(v-bu 1A ), hash2(v-ro A )}; the to-be-verified hash data of other BDs is obtained in the same way, which is not described herein.

[0228] S1104, the BD sends the to-be-verified hash data to the BD controller through the UDP connection.

[0229] In the embodiment of the application, the UDP connection can be established between the BD and the BD controller, and then the BD can send the to-be-verified hash data to the BD controller through the UDP connection.

[0230] In an optional embodiment, the BD performs hash operation periodically and reports the hash data to the BD controller, for example, performs operation and reports once every 5 minutes, and a corresponding concurrent read-write mechanism can be used to better cope with a large amount of to-be-verified hash data operation and reporting.

[0231] S1105, the BD controller receives the to-be-verified hash data sent by the BD through the UDP connection, and extracts to-be-verified business hash data and to-be-verified routing hash data from the to-be-verified hash data.

[0232] For example, taking the foregoing example as an example, the BD controller receives the to-be-verified hash data Hash(v-bu1-ro A ) = {hash1(v-bu 1A ), hash2(v-ro 1A )} sent by the BD through the UDP connection, and extracts the to-be-verified business hash data hash1(v-bu 1A ) and the to-be-verified routing hash data hash2(v-ro1A ).

[0233] S1106, the BD controller extracts target hash data that matches BD from multiple target hash data, and extracts target business hash data and target route hash data from the target hash data.

[0234] For example, continuing from the previous example, the BD controller can extract the target hash data Hash(t-bu1-ro) that matches the BD from multiple target hash data obtained in S1102. A )={hash1(t-bu 1A ), hash2(t-ro 1A )}, and extract the target business hash data hash1(t-bu) from it. 1A ) and target route hash data hash2(t-ro 1A ).

[0235] S1107, the BD controller obtains the version information to be verified associated with the hash data to be verified, and obtains the target version information associated with the target hash data; if the target version information and the version information to be verified are successfully matched, then S1108 is executed.

[0236] It is understandable that in practical applications, the BD controller will update the generated configuration information. Therefore, in this embodiment, the BD controller can first match the version information to be verified associated with the hash data to be verified with the target version information associated with the target hash data. If the two match successfully, further verification operations can be performed; that is, if the version information (pc_version) is correct, further verification operations can be performed.

[0237] In one of the optional embodiments, if the two fail to match, the process can be terminated or a version information verification failure result can be generated and returned to BD, etc. In practical applications, the information returned when the matching fails can be flexibly adjusted according to the specific application scenario.

[0238] In an optional embodiment, the BD controller can also detect at least one of the following: whether the business type processed by BD is correct, and whether the BD traffic redirection status (flow_stat) is correct. In practical applications, the specific content detected can be flexibly adjusted according to the specific application scenario.

[0239] S1108, the BD controller checks the hash data of the service to be checked based on the target service hash data to obtain the check result for the configuration information of the service to be checked, and checks the hash data of the route to be checked based on the target route hash data to obtain the check result for the configuration information of the route to be checked.

[0240] The BD controller in the embodiments of the present application checks the to-be-checked service hash data based on the target service hash data, and obtains a checking result for the to-be-checked service configuration information, which can include: if the target service hash data and the to-be-checked service hash data match successfully, the BD controller obtains a checking result for indicating that the to-be-checked service configuration information is correct; if the target service hash data and the to-be-checked service hash data fail to match, the BD controller obtains a checking result for indicating that the to-be-checked service configuration information is incorrect.

[0241] For example, taking the foregoing example, if hash1(t-bu 1A )=hash1(v-bu 1A ), the BD controller obtains a checking result for indicating that the to-be-checked service configuration information v-bu 1A is correct; if hash1(t-bu 1A )≠hash1(v-bu 1A ), the BD controller obtains a checking result for indicating that the to-be-checked service configuration information v-bu 1A is incorrect.

[0242] The BD controller in the embodiments of the present application checks the to-be-checked route hash data based on the target route hash data, and obtains a checking result for the to-be-checked route configuration information, which can include: if the target route hash data and the to-be-checked route hash data match successfully, the BD controller obtains a checking result for indicating that the to-be-checked route configuration information is correct; if the target route hash data and the to-be-checked route hash data fail to match, the BD controller obtains a checking result for indicating that the to-be-checked route configuration information is incorrect.

[0243] For example, taking the foregoing example, if hash2(t-ro 1A )=hash2(v-ro 1A ), the BD controller obtains a checking result for indicating that the to-be-checked route configuration information v-ro 1A is correct; if hash2(t-ro 1A )≠hash2(v-ro 1A ), the BD controller obtains a checking result for indicating that the to-be-checked route configuration information v-ro 1A is incorrect.

[0244] S1109, the BD controller sends the checking result for the to-be-checked service configuration information and the checking result for the to-be-checked route configuration information to the BD through a UDP connection.

[0245] For ease of understanding, as Figure 12As shown, the BD controller stores target service hash data and target route hash data corresponding to the park, the service. The target service hash data is obtained by the BD controller performing hash operation on the to-be-checked service configuration information (i.e., service configuration) by using a first hash algorithm, such as PC_Hash1:xxxx. The target route hash data is obtained by the BD controller performing hash operation on the to-be-checked route configuration information (i.e., route configuration) by using a second hash algorithm, such as Route_Hash2:xxxx. Meanwhile, the BD controller can receive the to-be-checked service hash data PC_Hash1' and the to-be-checked route hash data Route_Hash2' sent by each BD (which can be obtained by each BD by using the Hash SDK), and find the target service hash data and the target route hash data corresponding to each BD according to the park where each BD is located and the type of service to which each BD belongs, so as to check the to-be-checked service configuration information and the to-be-checked route configuration information reported by each BD. It can be understood that the versions of the to-be-checked configuration information (i.e., the to-be-checked service configuration information and the to-be-checked route configuration information) corresponding to each BD (for example, the versions corresponding to BD1 and BD2 are V1, and the version corresponding to BD3 is V2) can be the same or different, and the to-be-checked service hash data PC_Hash1' obtained by operation can be the same or different, and / or the to-be-checked route hash data Route_Hash2' can be the same or different.

[0246] It should be noted that, Figure 11 The detailed introduction of S1101 to S1109 in the above embodiment is described above, and will not be repeated here.

[0247] The embodiments of the present application have at least the following beneficial effects:

[0248] (1) Because the data amount of the hash data corresponding to the configuration information is small, the data amount of transmission is small, thereby avoiding the phenomenon of low transmission efficiency and low checking efficiency caused by directly transmitting the configuration information due to large data amount of the configuration information, improving the checking efficiency of the configuration information; and the checking efficiency of checking by using the hash data is simpler, thereby further improving the checking efficiency of the configuration information; in addition, because the hash data corresponding to the configuration information is transmitted, the risk of configuration information leakage caused by directly transmitting the configuration information is avoided, and the checking security of the configuration information is improved.

[0249] (2) The configuration information is divided into service configuration information and routing configuration information, and when checking, the target service hash data is used to check the to-be-checked service hash data to obtain a checking result for the to-be-checked service configuration information, and the target routing hash data is used to check the to-be-checked routing hash data to obtain a checking result for the to-be-checked routing configuration information. In this way, targeted checking is realized, the flexibility is higher, and it can be determined whether the service configuration information and the routing configuration information are correct or not, which is more convenient for later processing and is suitable for many scenes.

[0250] (3) The BD controller and the BD transmit corresponding data such as to-be-checked hash data and / or checking results through a UDP connection. Since the UDP connection has the characteristic of high transmission efficiency, in the scene where a large amount of configuration information needs to be frequently checked, the checking efficiency of the configuration information can be greatly improved, and network overhead is reduced.

[0251] Figure 13 is a block diagram of a data processing apparatus based on configuration information according to an embodiment of the present application. As shown in Figure 13 , the apparatus is configured in a control party, and the apparatus comprises:

[0252] A first obtaining module 1301 is configured to obtain to-be-checked hash data from a target controlled party, wherein the to-be-checked hash data is obtained by the target controlled party based on a specified hash algorithm by performing hash operation on to-be-checked configuration information.

[0253] A second obtaining module 1302 is configured to obtain target hash data matched with the target controlled party from a storage area, wherein the target hash data is obtained by the control party based on the specified hash algorithm by performing hash operation on target configuration information corresponding to the to-be-checked configuration information.

[0254] A checking module 1303 is configured to check the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information.

[0255] In an embodiment of the present application, based on the foregoing scheme, the checking module 1303 is specifically configured to:

[0256] If the target hash data and the to-be-checked hash data match successfully, a checking result for indicating that the to-be-checked configuration information is correct is obtained.

[0257] If the target hash data and the to-be-checked hash data fail to match, a checking result for indicating that the to-be-checked configuration information is incorrect is obtained.

[0258] In an embodiment of the present application, based on the foregoing scheme, the checking module 1303 is specifically configured to:

[0259] obtain to-be-checked version information associated with the to-be-checked hash data, and obtain target version information associated with the target hash data;

[0260] If the target version information matches the to-be-checked version information successfully, the to-be-checked hash data is checked based on the target hash data, and a checking result for the to-be-checked configuration information is obtained.

[0261] In an embodiment of the present application, based on the foregoing scheme, the to-be-checked hash data includes to-be-checked service hash data and to-be-checked routing hash data, the to-be-checked service hash data is obtained by hashing the to-be-checked service configuration information based on a first hash algorithm by the target principal, and the to-be-checked routing hash data is obtained by hashing the to-be-checked routing configuration information based on a second hash algorithm by the target principal; the target hash data includes target service hash data and target routing hash data, the target service hash data is obtained by hashing target service configuration information corresponding to the to-be-checked service configuration information based on the first hash algorithm by the target principal, and the target routing hash data is obtained by hashing target routing configuration information corresponding to the to-be-checked routing configuration information based on the second hash algorithm by the target principal; the checking module 1303 is specifically configured to:

[0262] check the to-be-checked service hash data based on the target service hash data, and obtain a checking result for the to-be-checked service configuration information; and

[0263] check the to-be-checked routing hash data based on the target routing hash data, and obtain a checking result for the to-be-checked routing configuration information.

[0264] In an embodiment of the present application, based on the foregoing scheme, the apparatus further includes a storage module configured to:

[0265] generate target configuration information corresponding to each principal;

[0266] hash each target configuration information based on the specified hash algorithm, and obtain target hash data matched with each principal;

[0267] store the target hash data matched with each principal into a storage area;

[0268] Correspondingly, the second obtaining module 1302 is specifically configured to:

[0269] extract target hash data matched with the target principal from the plurality of target hash data.

[0270] In an embodiment of the present application, based on the foregoing scheme, the storage module is specifically configured to:

[0271] For each target configuration information, if the target configuration information comprises target service configuration information and target routing configuration information, the target service configuration information is subjected to a hash operation based on a first hash algorithm to obtain target service hash data, and the target routing configuration information is subjected to a hash operation based on a second hash algorithm to obtain target routing hash data.

[0272] The target service hash data and the target routing hash data are combined to obtain target hash data matched by each controlled party.

[0273] In an embodiment of the present application, based on the foregoing scheme, the first obtaining module 1301 is specifically configured to:

[0274] Receive a user datagram protocol connection request sent by a target controlled party, so as to establish a user datagram protocol connection with the controlled party based on the user datagram protocol connection request;

[0275] Receive, through the user datagram protocol connection, to-be-checked hash data sent by the target controlled party.

[0276] In an embodiment of the present application, based on the foregoing scheme, the apparatus further comprises a receiving module configured to:

[0277] If an obtaining request of to-be-checked configuration information of the target controlled party is received by a specified object, the obtaining request is sent to the target controlled party, so that the target controlled party combines the to-be-checked configuration information and the to-be-checked hash data to obtain a data set;

[0278] Correspondingly, the first obtaining module 1301 is specifically configured to:

[0279] Receive a data set sent by the target controlled party, and extract the to-be-checked hash data and the to-be-checked configuration information from the data set;

[0280] Send the to-be-checked configuration information to the specified object.

[0281] In an embodiment of the present application, based on the foregoing scheme, the apparatus further comprises a first sending module configured to:

[0282] If the check result indicates that the to-be-checked configuration information is incorrect, a first alarm information is generated based on the check result;

[0283] The first alarm information is sent to a designated object, so that the designated object performs security management on the target controlled party based on the first alarm information.

[0284] In an embodiment of the present application, based on the foregoing scheme, the apparatus further comprises a second sending module configured to:

[0285] acquire a receiving time for the to-be-checked hash data, the receiving time being obtained by recording a time at which the to-be-checked hash data sent by the target controlled party is received;

[0286] generate second alarm information if it is detected that no other to-be-checked hash data sent by the target controlled party is received within a preset time period after the receiving time;

[0287] The second alarm information is sent to a designated object, so that the designated object performs security management on the target controlled party based on the second alarm information.

[0288] Figure 14 is a block diagram of a data processing apparatus based on configuration information according to an embodiment of the present application. As shown in Figure 14 , the apparatus is configured in a target controlled party, and the apparatus comprises:

[0289] The acquiring module 1401 is configured to acquire to-be-checked configuration information.

[0290] The operation module 1402 is configured to perform hash operation on the to-be-checked configuration information based on a specified hash algorithm to obtain to-be-checked hash data.

[0291] The sending module 1403 is configured to send the to-be-checked hash data to a control party, so that the control party acquires target hash data matching the target controlled party from a storage area, and checks the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information, the target hash data being obtained by performing hash operation on target configuration information corresponding to the to-be-checked configuration information based on the specified hash algorithm.

[0292] In an embodiment of the present application, based on the foregoing scheme, the operation module 1402 is specifically configured to:

[0293] If the to-be-checked configuration information comprises to-be-checked service configuration information and to-be-checked routing configuration information, the to-be-checked service configuration information is subjected to hash operation based on a first hash algorithm to obtain to-be-checked service hash data, and the to-be-checked routing configuration information is subjected to hash operation based on a second hash algorithm to obtain to-be-checked routing hash data.

[0294] Combine the to-be-verified service hash data and the to-be-verified route hash data to obtain to-be-verified hash data.

[0295] In an embodiment of the present application, based on the foregoing scheme, the sending module 1403 is specifically configured to:

[0296] send a user datagram protocol connection request to a control party to establish a user datagram protocol connection with the control party based on the user datagram protocol connection request;

[0297] send the to-be-verified hash data to the control party through the user datagram protocol connection.

[0298] It should be noted that the apparatus provided in the foregoing embodiments and the method provided in the foregoing embodiments belong to the same concept, and the specific way in which various modules and units perform operations has been described in detail in the method embodiments.

[0299] Embodiments of the present application also provide an electronic device, including: one or more processors; a memory for storing one or more programs, when the one or more programs are executed by the one or more processors, the electronic device implements the foregoing data processing method based on configuration information.

[0300] Figure 15 is a structural schematic diagram of a computer system of an electronic device suitable for implementing embodiments of the present application.

[0301] It should be noted that, Figure 15 The computer system 1500 of the electronic device shown is only an example and should not limit the functions and use range of the embodiments of the present application.

[0302] As Figure 15 shown, the computer system 1500 includes a central processing unit (CPU) 1501, which can perform various appropriate actions and processes according to programs stored in a read-only memory (ROM) 1502 or programs loaded from a storage portion 1508 into a random access memory (RAM) 1503, such as performing the methods in the above embodiments. In the RAM 1503, various programs and data required for system operation are also stored. The CPU 1501, the ROM 1502, and the RAM 1503 are connected to each other through a bus 1504. An input / output (I / O) interface 1505 is also connected to the bus 1504.

[0303] The following components are connected to the I / O interface 1505: an input part 1506 including a keyboard, a mouse, etc.; an output part 1507 including a display such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), etc., and a speaker, etc.; a storage part 1508 including a hard disk, etc.; and a communication part 1509 including a network interface card such as a LAN (Local Area Network) card, a modem, etc. The communication part 1509 performs communication processing via a network such as the Internet. A drive 1510 is also connected to the I / O interface 1505 as necessary. A removable medium 1511 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc. is attached to the drive 1510 as necessary, so that a computer program read therefrom is installed in the storage part 1508 as necessary.

[0304] In particular, the processes described above with reference to the flowcharts can be implemented as a computer software program according to embodiments of the present application. For example, embodiments of the present application include a computer program product comprising a computer program carried on a computer readable medium, the computer program containing a computer program for executing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via the communication part 1509, and / or installed from the removable medium 1511. When the computer program is executed by the central processing unit (CPU) 1501, various functions defined in the system of the present application are executed.

[0305] It should be noted that the computer-readable medium in the embodiments of the present application can be a computer-readable signal medium or a computer-readable storage medium or any combination thereof. The computer-readable medium may, for example, be an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or apparatus, or any combination thereof. More specific examples of the computer-readable medium can include, but are not limited to, an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this application, the computer-readable medium can be any tangible medium that contains or stores a program that can be used by or in connection with an instruction execution system, apparatus, or device. In this application, the computer-readable signal medium can include a computer-readable computer program product that can propagate as data signals in baseband or as carrier waves in a propagated signal that can be received by a computer-readable medium. Such propagated data signals can take a variety of forms, including, but not limited to, electromagnetic signals, optical signals, or any suitable combination thereof. The computer-readable medium can also be any computer-readable medium other than the computer-readable storage medium that can transmit, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. The computer program contained in the computer-readable medium can be transmitted or propagated using any suitable medium, including, but not limited to, wireless, wired, or the like, or any suitable combination thereof.

[0306] The flowcharts and block diagrams in the drawings illustrate the possible architectures, functions, and operations of systems, methods, and computer program products according to various embodiments of the present application. Each block in the flowcharts or block diagrams can represent a module, a program segment, or a portion of code that contains one or more executable instructions for implementing the specified logical functions. It should also be noted that in some alternative implementations, the functions noted in the blocks can occur out of the order noted in the figures. For example, two blocks noted in succession can in fact be executed substantially concurrently or in the reverse order, depending on the functionality involved. It should also be noted that each block in the flowcharts or block diagrams, and combinations of blocks in the flowcharts or block diagrams, can be implemented by special-purpose hardware-based systems that perform the specified functions or operations, or can be implemented by a combination of special-purpose hardware and computer instructions.

[0307] The units described in the embodiments of the present application can be implemented in the form of software, or can be implemented in the form of hardware, and the described units can also be arranged in a processor. In some cases, the names of the units do not constitute a limitation on the units themselves.

[0308] Another aspect of the present application also provides a computer readable medium having a computer program stored thereon, the computer program being executed by a processor to implement the foregoing data processing method based on configuration information. The computer readable medium can be included in the electronic device described in the above embodiments, or can exist separately and not be assembled into the electronic device.

[0309] Another aspect of the present application also provides a computer program product or computer program, which includes computer instructions stored in a computer readable medium. The processor of the computer device reads the computer instructions from the computer readable medium, and the processor executes the computer instructions to enable the computer device to perform the data processing method based on configuration information provided in the above embodiments.

[0310] The above is only a preferred exemplary embodiment of the present application, and is not intended to limit the implementation of the present application. Those skilled in the art can easily make corresponding modifications or variations according to the main concept and spirit of the present application, and the protection scope of the present application should be subject to the protection scope required by the claims.

Claims

1. A data processing method based on configuration information, characterized by, The method comprises the following steps: obtaining to-be-checked hash data from a target controlled party, the to-be-checked hash data being obtained by the target controlled party based on a specified hash algorithm and to-be-checked configuration information; obtaining target hash data from a storage area, the target hash data being obtained by a control party based on the specified hash algorithm and target configuration information corresponding to the to-be-checked configuration information; checking the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information.

2. The method of claim 1, wherein, The checking the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information comprises the following steps: if the target hash data and the to-be-checked hash data match successfully, obtaining a checking result for indicating that the to-be-checked configuration information is correct; if the target hash data and the to-be-checked hash data fail to match, obtaining a checking result for indicating that the to-be-checked configuration information is incorrect.

3. The method of claim 1, wherein, The checking the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information comprises the following steps: obtaining to-be-checked version information associated with the to-be-checked hash data and target version information associated with the target hash data; if the target version information and the to-be-checked version information match successfully, checking the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information.

4. The method of claim 1, wherein, The to-be-checked hash data comprises to-be-checked service hash data and to-be-checked routing hash data, the to-be-checked service hash data being obtained by the target controlled party based on a first hash algorithm and the to-be-checked service configuration information, and the to-be-checked routing hash data being obtained by the target controlled party based on a second hash algorithm and the to-be-checked routing configuration information; The target hash data comprises target service hash data and target routing hash data, the target service hash data being obtained by the target controlled party based on the first hash algorithm and target service configuration information corresponding to the to-be-checked service configuration information, and the target routing hash data being obtained by the target controlled party based on the second hash algorithm and target routing configuration information corresponding to the to-be-checked routing configuration information; The checking the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information comprises the following steps: checking the to-be-checked service hash data based on the target service hash data to obtain a checking result for the to-be-checked service configuration information; and checking the to-be-checked routing hash data based on the target routing hash data to obtain a checking result for the to-be-checked routing configuration information. Before the obtaining target hash data from a storage area, the method further comprises the following steps:

5. The method of claim 1, wherein, generating target configuration information corresponding to a plurality of controlled parties respectively. ​ hashing each target configuration information based on the specified hash algorithm to obtain target hash data matched to each controlled party; storing the target hash data matched to each controlled party into a storage area; the obtaining, from the storage area, the target hash data matched to the target controlled party comprises: extracting, from the plurality of target hash data, the target hash data matched to the target controlled party.

6. The method of claim 5, wherein, the hashing each target configuration information based on the specified hash algorithm to obtain target hash data matched to each controlled party comprises: for each target configuration information, if the target configuration information comprises target service configuration information and target routing configuration information, hashing the target service configuration information based on a first hash algorithm to obtain target service hash data, and hashing the target routing configuration information based on a second hash algorithm to obtain target routing hash data; combining the target service hash data and the target routing hash data to obtain the target hash data matched to each controlled party.

7. The method of claim 1, wherein, the obtaining the to-be-checked hash data from the target controlled party comprises: receiving a user datagram protocol connection request sent by the target controlled party to establish a user datagram protocol connection with the controlled party based on the user datagram protocol connection request; receiving, through the user datagram protocol connection, the to-be-checked hash data sent by the target controlled party.

8. The method according to any one of claims 1 to 7, characterized in that, before the obtaining the to-be-checked hash data from the target controlled party, the method further comprises: if an obtaining request for to-be-checked configuration information of the target controlled party is received from a specified object, sending the obtaining request to the target controlled party, so that the target controlled party combines the to-be-checked configuration information and the to-be-checked hash data to obtain a data set; the obtaining the to-be-checked hash data from the target controlled party comprises: receiving the data set sent by the target controlled party, and extracting the to-be-checked hash data and the to-be-checked configuration information from the data set; sending the to-be-checked configuration information to the specified object.

9. The method according to any one of claims 1 to 7, characterized in that, after the checking the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information, the method further comprises: if the checking result indicates that the to-be-checked configuration information is incorrect, generating first alarm information based on the checking result; sending the first alarm information to a specified object, so that the specified object performs security management on the target controlled party based on the first alarm information.

10. The method according to any one of claims 1 to 7, characterized in that, after the obtaining the to-be-checked hash data from the target controlled party, the method further comprises: obtaining a receiving time for the to-be-checked hash data, the receiving time being obtained by recording a time at which the to-be-checked hash data sent by the target controlled party is received; if it is detected that no other to-be-checked hash data sent by the target controlled party is received within a preset time period after the receiving time, generating second alarm information; The second alarm information is sent to a specified object, so that the specified object performs security management on the target controlled party based on the second alarm information.

11. A data processing method based on configuration information, characterized by, The method comprises: obtaining to-be-checked configuration information; performing a hash operation on the to-be-checked configuration information based on a specified hash algorithm to obtain to-be-checked hash data; sending the to-be-checked hash data to a control party, so that the control party obtains target hash data matching a target controlled party from a storage area, and checks the to-be-checked hash data based on the target hash data to obtain a checking result for the to-be-checked configuration information, the target hash data being obtained by performing a hash operation on target configuration information corresponding to the to-be-checked configuration information based on the specified hash algorithm.

12. The method of claim 11, wherein, The method comprises: if the to-be-checked configuration information comprises to-be-checked service configuration information and to-be-checked routing configuration information, performing a hash operation on the to-be-checked service configuration information based on a first hash algorithm to obtain to-be-checked service hash data, and performing a hash operation on the to-be-checked routing configuration information based on a second hash algorithm to obtain to-be-checked routing hash data; combining the to-be-checked service hash data and the to-be-checked routing hash data to obtain to-be-checked hash data.

13. The method according to claim 11 or 12, characterized in that, The method comprises: sending a user datagram protocol connection request to a control party to establish a user datagram protocol connection with the control party based on the user datagram protocol connection request; sending the to-be-checked hash data to the control party through the user datagram protocol connection.

14. An electronic device, comprising: The method comprises: one or more processors; a memory for storing one or more programs, when the one or more programs are executed by the electronic device, the electronic device implements the configuration information-based data processing method as claimed in any one of claims 1 to 13.

15. A computer readable medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the configuration information-based data processing method as claimed in any one of claims 1 to 13.

16. A computer program product comprising computer instructions, characterized in that, The computer program is executed by the processor to implement the configuration information-based data processing method as claimed in any one of claims 1 to 13.

Images