Method and device for determining credibility of device, server and storage medium

Abstract

The invention discloses a device credibility determination method and device, a server and a storage medium. The method is applied to a first server, and the first server is in communication connection with a second server. Comprising the following steps: determining a device mapping structure of the hardware equipment according to a board card type of each board card in the hardware equipment and a technical architecture of each device in each board card; a device mapping relation fed back by the second server according to the device mapping structure and a credibility file corresponding to each device are received, the device mapping relation comprises the device mapping structure and device information corresponding to each device in the device mapping structure, and the credibility file is used for representing production information of the device; and according to the device information corresponding to each device and the credibility file, determining the credibility corresponding to each device, and marking the credibility corresponding to each device in the device mapping relation. According to the method, the credibility of all the devices in the equipment is determined, and the key effect of guaranteeing data privacy is achieved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of hardware design, and in particular to a device credibility determination method and device, a server and a storage medium. BACKGROUND

[0002] A router is a computer network device mainly used for connecting multiple networks and forwarding data packets between different networks to realize communication and resource sharing between networks.

[0003] Since there are many devices involved in the router, the device provider will purchase or manufacture the devices required by the router according to the requirements of the device user, and assemble each device according to the router device architecture.

[0004] However, the device user cannot determine the supply chain geographical location information of each device in the important manufacturing link when the device provider purchases or manufactures the devices required by the router, which may cause the risk of data privacy leakage when the device user uses the router provided by the device provider due to the abnormal origin of the devices in the router. SUMMARY

[0005] The present application provides a device credibility determination method and device, a server and a storage medium, which solves the problem of data privacy leakage risk when directly using devices containing abnormal origin, realizes the determination of the supply chain geographical location of all devices in the device and the credibility of the device, improves the security of the device user when using the device, and plays a key role in protecting data privacy.

[0006] According to an aspect of the present application, a device credibility determination method is provided, which is applied to a first server, and the first server is in communication connection with a second server; the method comprises:

[0007] According to the board card type of each board card in the hardware device and the technical architecture of each device in each board card, the device mapping structure of the hardware device is determined.

[0008] The device mapping relationship and the credibility file corresponding to each device fed back by the second server according to the device mapping structure are received, wherein the device mapping relationship includes the device mapping structure and the device information corresponding to each device in the device mapping structure, and the credibility file is used to represent the production information of the device.

[0009] According to the device information and the credibility file corresponding to each device, the credibility corresponding to each device is determined, and the credibility corresponding to each device is marked in the device mapping relationship.

[0010] The device credibility determination method provided by the embodiment of the application comprises the following steps: determining a device mapping structure of a hardware device according to a board type of each board in the hardware device and a technical architecture of each device in each board; receiving a device mapping relationship and a credibility file corresponding to each device, which are fed back by a second server according to the device mapping structure; determining the credibility corresponding to each device according to the device information corresponding to each device and the credibility file, and marking the credibility corresponding to each device in the device mapping relationship. The technical solution has the following advantages. On the one hand, the devices in the hardware device are classified into large and small categories based on the technical architecture of each device and the board type to which each device belongs, the devices in the complex hardware device are standardized and modularized according to a structured thinking, and the credibility of each device can be determined based on the standardized and modularized device mapping structure. On the other hand, the device mapping structure is sent to the second server, the second server fills in the device information of each device of the hardware device according to the standardized device mapping structure, the second server also feeds back the credibility file corresponding to each device to the first server, and the credibility of each device can be determined based on the credibility file corresponding to each device provided by the second server. Finally, the supply chain geographical location information of each device in an important manufacturing link can be determined according to the device information corresponding to each device and the credibility file corresponding to each device provided by the second server, and it is determined whether the device containing the devices is credible according to the geographical location information, thereby solving the problem that a device user cannot determine the supply chain geographical location information of the devices in the important manufacturing link and directly using the device containing the devices may cause a data privacy leakage risk. The supply chain geographical location of all the devices in the device and the credibility of the devices are determined, the security of the device used by the device user is improved, and the key role of protecting data privacy is played.

[0011] According to another aspect of the application, a device credibility determination apparatus is provided, which is applied to a first server in communication connection with a second server, and comprises:

[0012] A structure determination module is configured to determine a device mapping structure of a hardware device according to a board type of each board in the hardware device and a technical architecture of each device in each board.

[0013] A receiving module is configured to receive a device mapping relationship and a credibility file corresponding to each device, which are fed back by a second server according to the device mapping structure, wherein the device mapping relationship comprises the device mapping structure and the device information corresponding to each device in the device mapping structure, and the credibility file is used to represent production information of the device.

[0014] The credibility determination module is configured to determine the credibility of each device according to the device information and the credibility file of each device, and mark the credibility of each device in the device mapping relationship.

[0015] According to another aspect of the present application, there is provided a server, the server comprising:

[0016] at least one processor; and

[0017] a memory in communication with the at least one processor; wherein

[0018] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor to enable the at least one processor to perform the device credibility determination method of any of the embodiments of the present application.

[0019] According to another aspect of the present application, there is provided a computer readable storage medium storing computer instructions for enabling a processor to perform the device credibility determination method of any of the embodiments of the present application when executed by the processor.

[0020] According to another aspect of the present application, there is provided a computer program product comprising a computer program for enabling a processor to perform the device credibility determination method of any of the embodiments of the present application when executed by the processor.

[0021] It should be understood that the content described in this section is not intended to identify key or important features of the embodiments of the present application, nor is it used to limit the scope of the present application. Other features of the present application will become apparent from the following description. BRIEF DESCRIPTION OF DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed in the embodiment description will be briefly introduced as follows. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative effort on the basis of these drawings.

[0023] Figure 1 A flowchart of the device credibility determination method provided by the embodiments of the present application is shown in the figure.

[0024] Figure 2 Another flowchart of the device credibility determination method provided by the embodiments of the present application is shown in the figure.

[0025] Figure 3 A structure diagram of the device credibility determination apparatus provided by the embodiments of the present application is shown in the figure.

[0026] Figure 4A structural schematic diagram of a server provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0027] In order to enable persons skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by persons skilled in the art without creative work should fall within the scope of protection of the present application.

[0028] It should be noted that the terms "first", "second", and the like in the specification and claims of the present application and the above-described drawings are used to distinguish similar objects, and do not necessarily indicate a specific order or a chronological sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product, or device including a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to the process, method, product, or device.

[0029] Figure 1 A flowchart of a device credibility determination method provided in an embodiment of the present application, the embodiment can be applicable to a case where a user determines the credibility of a device in a router after the router is provided by a router provider. The method can be performed by a device credibility determination apparatus, which can be realized in the form of hardware and / or software, and can be configured in a first server. In the embodiment, the first server is a server of a router user, and the second server is a server of a router provider. The server can be a computer or a terminal device. As shown in the figure, the method comprises: Figure 1

[0030] S101, determining a device mapping structure of the hardware device according to the board card types of the various board cards in the hardware device and the technical architectures of the various devices in the various board cards.

[0031] ​The hardware device is a visible, touchable physical component for realizing functions such as data input, processing, storage, output and transmission. In this embodiment, the hardware device refers to a router, such as a frame router, a box router and a distributed router. The board type refers to the types of various boards involved in a router. In this embodiment, the board type includes a master control board, a switching network board, a complete machine, a line board and the like. The technical architecture of the device refers to the combination mode, mutual connection relationship of the device in the hardware device, and the technical rules and logical framework followed when they work together. The device mapping structure is a structure used when structuring the device information in the hardware device.

[0032] Specifically, after the provider delivers the hardware device to the user, in order to ensure that the sources of various devices in the hardware device are compliant or meet the requirements of the user, the user will check the credibility of various devices in the hardware device. In this way, the user can avoid the important data or important information transmitted by the user being leaked due to the use of a hardware device containing a device with poor credibility. Therefore, the devices can be classified and summarized according to the board type of each board in the hardware device and the technical architecture of each device, to obtain the device mapping structure of the hardware device.

[0033] For example, according to the technical architecture of each device, the devices are classified, and the association between each device and each device is determined to obtain device association information. Then, in a hardware device, there are multiple boards with different functions, each board can correspond to a board type, and each device in a hardware device belongs to different boards according to the function and type of each board. Therefore, the board type can be used as a large category, in each board, the devices included in the board are determined, and the devices included in the board are classified into small categories according to the device association information, and finally the device mapping structure can be obtained.

[0034] In this embodiment, based on the technical architecture of each device and the board type to which each device belongs, the devices are classified into large and small categories, which can realize the standardized and modular processing of the devices in the complex hardware device according to the structured thinking. In addition, the device mapping structure can provide a basis for determining the credibility of each device based on the standardized and modular device mapping structure.

[0035] S102, receiving the device mapping relationship and the credibility file corresponding to each device fed back by the second server according to the device mapping structure.

[0036] The first server is in communication connection with the second server. The device mapping relationship includes a device mapping structure and device information corresponding to each device in the device mapping structure, and the credibility file is used to represent the production information of the device. In this embodiment, the device information is provided by the router provider. The credibility file includes an integrated circuit layout registration certificate, a certificate of origin, a domestic foundry contract / agreement, and a foundry declaration file, etc.

[0037] Specifically, after the first server determines the device mapping structure, the device mapping structure can be sent to the second server. After the second server receives the device mapping structure, the router provider of the second server can manually fill in the device information corresponding to each device in the device information column of the device mapping structure. Alternatively, the second server can automatically fill in the device information in the device information column of the device mapping structure according to the device information of each device of the hardware equipment pre-stored by the router provider. After filling in the device information in the device information column of the device mapping structure, the device mapping relationship is obtained. At this time, the second server can send the device mapping relationship to the first server. Meanwhile, after the second server receives the device mapping structure, the second server can also search for the credibility file corresponding to the device according to the device name in the device mapping structure, and send all the credibility files corresponding to the device to the first server. The credibility file corresponding to one device can be one or more, and all the credibility files corresponding to the device need to be sent to the first server.

[0038] In this embodiment, the device mapping structure is sent to the second server, and the second server fills in the device information of each device of the hardware equipment according to the standardized device mapping structure. In this way, it can be ensured that the provider fills in the required device information according to the standardized structure given by the user. At the same time, the second server also feeds back the credibility file corresponding to each device to the first server, which provides a basis for determining the credibility of each device by the first server later.

[0039] S103, determining the credibility of each device according to the device information corresponding to each device and the credibility file, and marking the credibility of each device in the device mapping relationship.

[0040] In this embodiment, whether a device is credible or not refers to whether the manufacturing place of the device is in the target country (the home country) when the device is in important manufacturing links such as the design link and the tape-out link. If the device is imported in one of the two links, the credibility reduction degree will change according to different links and import places.

[0041] Specifically, according to the device information corresponding to each device, the manufacturer information corresponding to the device can be queried from different query platforms, and the manufacturer information includes, for example, manufacturer name and registered address and the like, therefore, the manufacturer information can be compared with the credibility file to determine whether they are consistent. Alternatively, the manufacturer information corresponding to the device can also be queried from multiple query platforms, the query results of the multiple query platforms are compared first, and then according to the information such as the place of origin marked in the credibility file, it is determined whether the device is credible. Among them, since the integrated circuit layout registration certificate in the credibility file can determine the right holder corresponding to the device in the design link, therefore, the manufacturing place corresponding to the device in the design link can be determined accordingly. And since the information such as the country and region marked on the certificate of origin in the credibility file can directly correspond to the foundry place, therefore, the foundry place corresponding to the device in the foundry link can be directly determined according to the credibility file. After determining the credibility of each device, the credibility of each device can be marked in the device mapping relationship, and the credibility of each device corresponding to the relationship.

[0042] In the embodiment, according to the device information corresponding to each device and the credibility file corresponding to each device provided by the second server, the supply chain geographical location information of each device in the important manufacturing link can be realized, and according to the geographical location information, it is determined whether the device containing these devices is credible, solves the problem that the current device user cannot determine the supply chain geographical location information of the device in the important manufacturing link, and if the device containing these devices is directly used, there is a risk of data privacy leakage, realizes the determination of the supply chain geographical location of all devices in the device and the determination of the credibility of the device, improves the security of the device when the device user uses the device, and plays a key role in protecting data privacy.

[0043] The device credibility determination method provided by the embodiment of the present application can determine the device mapping structure of the hardware device according to the board card types of each board card in the hardware device and the technical architecture of each device in each board card; receive the device mapping relationship and the credibility file corresponding to each device fed back by the second server according to the device mapping structure; determine the credibility corresponding to each device according to the device information and the credibility file corresponding to each device, and mark the credibility corresponding to each device in the device mapping relationship. The above technical solution can divide the devices into large and small categories based on the technical architecture of each device and the board card type to which each device belongs, so as to realize the standardized and modularized processing of the devices in the complex hardware device according to the structured thinking. In addition, the device mapping structure can be obtained, which can provide a basis for determining the credibility of each device. On the other hand, the device mapping structure is sent to the second server, and the second server fills in the device information of each device of the hardware device according to the standardized device mapping structure, so that the provider can fill in the required device information according to the standardized structure given by the user. At the same time, the second server also feeds back the credibility file corresponding to each device to the first server, which provides a basis for the first server to determine the credibility of each device. Finally, according to the device information corresponding to each device and the credibility file corresponding to each device provided by the second server, the supply chain geographical location information of each device in the important manufacturing link can be realized, and according to the geographical location information, it is determined whether the device containing the devices is credible, which solves the problem that the device user cannot determine the supply chain geographical location information of the devices in the important manufacturing link, and if the device containing the devices is directly used, there is a risk of data privacy leakage. The supply chain geographical location of all devices in the device and the credibility of the device are determined, the security of the device user when using the device is improved, and the key role of protecting data privacy is played.

[0044] Figure 2 Another flowchart of the device credibility determination method provided by the embodiment of the present application is provided, and the steps of "determining the device mapping structure of the hardware device" and "determining the credibility corresponding to each device" are described in detail on the basis of the above embodiment and other examples. As shown in the figure, the method comprises the following steps. Figure 2

[0045] S201, determine the device category of each device according to the technical positioning of each device.

[0046] ​The technical architecture includes a technical path, a technical role, and a technical positioning. In this embodiment, the technical path refers to a specific technical route, principle, and method adopted to realize the function of the device. The technical role refers to the specific function, role, and contribution to the performance of the device assumed by the device in the hardware equipment. The technical positioning is used for classifying the device. One device category corresponds to one technical positioning.

[0047] Specifically, in a hardware equipment, a plurality of technical positionings are determined according to the application scenarios and the technical system of the hardware equipment. According to the technical positionings, the devices can be classified. Therefore, one device category corresponds to one technical positioning.

[0048] For example, in a hardware equipment, there are devices with a technical positioning for assuming the functions of device configuration, protocol processing, and system management. These devices need to comply with the network management protocol and routing protocol standards. This technical positioning belongs to the control plane technical path. Therefore, the device category can be a management control module integrated circuit. There are devices with a technical positioning for performing the functions of forwarding, filtering, and hardware acceleration of data frames / Internet protocol packets. These devices need to comply with the data link layer standards and Internet protocol routing and forwarding technical specifications. This technical positioning belongs to the data plane technical path. Therefore, the device category can be a data plane module integrated circuit. There are devices with a technical positioning for realizing the functions of physical layer signal access, electrical signal processing, and terminal equipment power supply. These devices need to comply with the physical layer standards and power supply specifications. This technical positioning belongs to the physical layer and interface technical path. Therefore, the device category can be a service interface module integrated circuit. There are devices with a technical positioning for being responsible for data exchange and electrical interconnection between different boards in a router. This technical positioning belongs to the data plane technical path and the basic support technical path, and needs to comply with the backplane protocol and signal integrity design standards. Therefore, the device category can be a system connection component. There are devices with a technical positioning for providing the energy, heat dissipation, and physical structure support required for the operation of the equipment. These devices need to comply with the hardware engineering technical specifications such as heat design and power supply engineering. This technical positioning belongs to the physical support technical path. Therefore, the device category can be a whole machine component. There are also devices with a technical positioning for providing basic technical support such as storage, clock synchronization, and electrical interconnection, which belongs to the basic support technical path and complies with the semiconductor storage technology, clock circuit design, and printed circuit board manufacturing standards. Therefore, it belongs to an auxiliary component.

[0049] In this embodiment, according to the different technical positionings of the hardware equipment, the device category corresponding to the hardware equipment is determined, which can provide an accurate basis for the subsequent structured division of the devices.

[0050] S202, determining device association information according to the device category, the technical path of each device, and the technical role.

[0051] In particular, each device has its technical path and technical role. Exemplarily, in a router, the following devices are included, and the technical path and technical role of each device are as follows:

[0052] (1) Central Processing Unit (CPU), the technical path is to run the control plane software (such as routing protocol stack), then issue routing strategy to forwarding chip through bus, and finally maintain control plane data structure such as routing table and address resolution protocol table; the technical role is to act as the core processor of the control plane, to realize logical decision and resource scheduling of the device. (2) Dynamic Random Access Memory (DRAM), the technical path is to provide running memory for CPU, then store routing protocol message, real-time configuration data and statistical information, and finally support fast read and write to respond to real-time needs of the control plane; the technical role is to act as the data cache carrier of the control plane, to guarantee the efficiency of software running. (3) Forwarding chip, the technical path is to receive frame data input by physical layer chip, then analyze Media Access Control (MAC) address / Internet Protocol (IP) address, and finally query MAC address table / routing table and forward to target port; the technical role is to realize high-speed line-speed forwarding. Optionally, the forwarding chip can be divided into Application Specific Integrated Circuit (ASIC), Field-Programmable Gate Array (FPGA) and Network Processor (NP) according to function and use scenario, and its role is different when the forwarding chip is of different technical types. (4) Ternary Content Addressable Memory (TCAM), the technical path is to work with forwarding chip, to perform hardware accelerated longest prefix matching of routing table and access control list rule lookup, and then reduce software microsecond-level query delay to nanosecond level; the technical role is to act as the performance optimization component of the data plane, to solve the efficiency bottleneck of traditional memory table lookup. (5) Physical Layer Chip (PHY), the technical path is to convert 8-bit binary data into 10-bit symbols through encoding and clock recovery, then convert into frame data conforming to MAC layer specification and transmit to forwarding chip; the technical role is to act as the interface hub of physical layer and data link layer, to guarantee signal integrity and protocol compatibility.(6) Wireless chip, technical path is responsible for signal frequency conversion, amplification and filtering, performing orthogonal frequency division multiplexing modulation and demodulation, multiple input multiple output signal processing, MAC layer encapsulation, transmitting to the forwarding chip through the interface, and the forwarding chip encapsulating the wireless frame into IP packet and forwarding to the target network through the switching network chip; technical effect is to realize the radio frequency processing of wireless signal, the operation of baseband protocol stack and the integration with wired network, and to comply with network protocol standards. (7) Optical module, technical path is to receive optical signals transmitted by optical fiber, convert the optical signals into electrical signals, and then connect with the PHY chip through the interface; technical effect is to serve as a signal conversion component of the physical layer, supporting interface adaptation of different transmission media (optical fiber / copper cable). (8) Switching network chip, technical path is to receive data from the line card forwarding chip, realize cross-card traffic scheduling through backplane bus, support equal multi-path load balancing, quality of service queue management and congestion control; technical effect is to serve as the "data exchange center" of the router, solve the bandwidth bottleneck between multiple cards, realize cross-card link aggregation, and improve network reliability. (9) Backplane connector, technical path is to realize the electrical interconnection of the main control board, switching network board and line card at the physical layer, supporting high-speed differential signal transmission; technical effect is to ensure the integrity of cross-card signal transmission, provide mechanical support, and ensure the contact reliability during card insertion and removal. (10) Fan, technical path is to use axial / centrifugal fan forced convection to remove the heat of CPU, forwarding chip and other heat generating devices, and cooperate with the heat sink to realize heat conduction and maintain the internal temperature of the device within the technical specification range (such as 0℃~40℃); technical effect is to serve as an active cooling component of thermal management, ensuring the long-term reliable operation of the device. (11) Power module (AC / DC power supply), technical path is to input external power (such as 220V AC) through PFC circuit, switching power module, and convert it into the required DC voltage (such as 12V / 5V) of the device, and output stable power through the filtering circuit and supply power to the whole device; technical effect is to serve as an energy supply component to ensure the stability and electromagnetic compatibility of power supply. (12) Flash memory (NOR Flash / NAND Flash), technical path is to support data reading and storage after CPU power-on or communication with CPU through the interface; technical effect is to serve as a basic component of non-volatile storage, carrying necessary data for device software operation. (13) Clock chip, technical path is to generate reference clock signal (such as 25MHz reference clock) through crystal oscillator, and provide synchronous clock for PHY chip, forwarding chip, CPU, etc. through frequency division / multiplication circuit; technical effect is to serve as a reference source for system synchronization, avoiding data transmission errors caused by clock deviation (such as frame misalignment caused by clock drift).(14) Printed Circuit Board (PCB), the technical path is multi-layer board design (such as 12 layers), power layer and ground layer isolation, signal layer using characteristic impedance control (such as 50Ω impedance matching), through via / wire to realize the electrical connection of components, and carry surface mount technology (SMT) welding device; the technical effect is to serve as a physical carrier of the hardware system, to achieve the technical balance of signal integrity, power integrity and mechanical structure stability.

[0053] Specifically, after determining the technical path and the technical effect of each device in a hardware device according to the above examples, the device category to which each device belongs can be determined according to the technical path and the technical effect of each device.

[0054] For example, since the technical path and the technical effect of the CPU and the DRAM are both biased towards the control plane technical path, the CPU and the DRAM can be determined to belong to the management control module integrated circuit. Since the technical path and the technical effect of the forwarding chip and the TCAM chip are both biased towards the data plane technical path, the forwarding chip and the TCAM chip can be determined to belong to the data plane module integrated circuit. Since the technical path and the technical effect of the PHY chip, the wireless chip and the optical module are all physical layer and interface technical path, the PHY chip, the wireless chip and the optical module can be determined to belong to the service interface module integrated circuit. Since the technical path and the technical effect of the switching network chip and the backplane connector are both biased towards the data plane technical path and the basic support technical path, the switching network chip and the backplane connector can be determined to belong to the system connection component. Since the technical path and the technical effect of the fan and the power module are both biased towards the physical support technical path, the fan and the power module can be determined to belong to the whole machine component. Since the technical path and the technical effect of the flash memory, the clock chip and the PCB are all biased towards the basic support technical path, the flash memory, the clock chip and the PCB can be determined to belong to the auxiliary component.

[0055] After classifying each device, the device association information can be determined according to the device classification and the technical architecture of each device.

[0056] For example, the device association information can be as follows:

[0057]

[0058] Among them, the core technology standard and protocol, that is, the technical standard and protocol required to be followed by the corresponding device.

[0059] In this embodiment, according to the technical positioning of the hardware device, the device category corresponding to the hardware device is determined, the functions of each device in the hardware device are clearly divided, which provides a basis for standardized selection and supply chain management, and at the same time, the description mode of the device can be positioned and unified based on the standardized selection. Further, according to the device category, the technical path and the technical role of each device, the device associated information can be determined, the devices are classified, and the importance of each device in the hardware device is clearly defined based on the standard protocol required by each classified device and the technical role, which provides a basis for determining the mapping structure of the device.

[0060] S203, determining the device mapping structure of the hardware device according to the board card type of the board card to which each device belongs, the device category of each device, and the device associated information.

[0061] The board card type can be classified according to the function of the board card to obtain the board card type corresponding to each board card. In this embodiment, the board card type includes a main control board, a switching network board, a whole machine, and a plurality of line card boards. Each line card board is a board card of different interface type. For example, in a router, in addition to the main control board, the switching network board and the whole machine, a plurality of line card boards are also included. For the plurality of line card boards, if the interface types of two line card boards are the same, the two line card boards are the same type of line card board, and their board card types are the same. If the interface types of two line card boards are different, the two line card boards are different types of line card boards, and their board card types are different.

[0062] Specifically, since a hardware device can be composed of multiple board cards, and each board card includes multiple devices, for example, each board card includes a CPU, in order to determine the credibility of each CPU, the board cards in the hardware device can be divided into multiple board card types according to the function, and each board card type corresponds to a board card or multiple board cards of the same function or the same interface type. Therefore, the device mapping structure of the hardware device can be determined according to the board card type to which each device belongs, the device category of each device, and the device associated information.

[0063] Exemplarily, according to the board card type of the board card to which each device belongs, the device category of each device, and the device associated information, the device mapping structure of the hardware device is specifically:

[0064] The device mapping structure of the hardware device is determined according to the board card type to which each device belongs, the device category of each device, and the device associated information.

[0065] Exemplarily, the device mapping structure of the hardware device is shown as follows. Wherein, the "board type", "device category", "device name" and "device information" are the table headers of the device mapping structure. The several boards under the "board type" are the boards in the router, wherein, the "line card 1…line card N" are the numbers corresponding to the line cards of different interface types in a router, and the specific number "N" is determined according to the requirements of the device user. Moreover, the number of each line card is agreed in advance by the device user and the device provider. The specific device category under the "device category" and the device corresponding to the specific device category under the "device name" are determined according to the board type from the device association information. And the "manufacturer name" and "product model" under the "device information" are the device information of each device provided by the provider required by the user, i.e. the to-be-determined information of each device. The "empty" in the table is the to-be-filled part.

[0066]

[0067] In the embodiment, the board type is taken as the main classification factor of the device mapping structure, which can ensure that each device in each board in the hardware device composed of multiple boards can be traversed, and prevent the missing problem of the credibility determination caused by that a device exists in different boards but only the credibility of the device in a certain board is determined, thereby providing a basis for increasing the accuracy and comprehensiveness of the credibility determination of each device in the hardware device.

[0068] S204, send the device mapping structure and the to-be-determined device information of each device to the second server, so that the second server determines the device mapping relationship according to the device mapping structure and the to-be-determined device information, and determines the credibility file corresponding to each device according to each device.

[0069] Specifically, the device mapping structure as shown in Table 2 is sent to the second server, and the to-be-determined information of each device can also be sent to the second server, so that the second server fills in the device information corresponding to each device in each device information under the "device information" in Table 2 according to the device mapping structure and the to-be-determined information. Moreover, the second server can also find the credibility file corresponding to each device according to the different board types and device categories in Table 2.

[0070] Exemplarily, in one implementation, the second server shows the device mapping structure to the provider and shows the to-be-determined information. Then, the second server directly receives the to-be-determined information provided by the provider, obtains the device mapping structure filled with the device information as the device mapping relationship. In another implementation, the provider pre-stores the device information corresponding to each hardware device, and the second server, upon receiving the device mapping structure, matches the corresponding hardware device according to the device mapping structure or determines the target hardware device according to the to-be-determined information of each device, and after determining the target hardware device, finds the device information corresponding to the target hardware device from the storage and fills it into the corresponding position of the device information of the device mapping structure to obtain the device mapping relationship. Then, the second server can also find the credibility file corresponding to each device from the storage according to the board type, the device category, the device name, and the device information corresponding to each device.

[0071] S205, receiving the device mapping relationship and the credibility file corresponding to each device sent by the second server.

[0072] Specifically, after obtaining the device mapping relationship, the second server sends the device mapping relationship and the credibility file corresponding to each device to the first server, and at this time, the first server can receive.

[0073] S206, for each device, obtaining the first credibility information from the first platform according to the device information corresponding to the device, and obtaining the second credibility information from the second platform.

[0074] The first platform and the second platform are different platforms for determining the production information of the device. In this embodiment, the first platform and the second platform are platforms that can obtain the registration address and enterprise credit status of the manufacturer corresponding to a device according to the manufacturer name of the device. The first credibility information is the information corresponding to the manufacturer name of a certain device in the first platform. The second credibility information is the information corresponding to the manufacturer name of a certain device in the second platform.

[0075] Specifically, for each device in the device mapping relationship fed back by the second server, the manufacturer name in the device information corresponding to the device in the device mapping relationship can be obtained first, and the first credibility information can be obtained from the first platform based on the manufacturer name, and the second credibility information can be obtained from the second platform based on the manufacturer name.

[0076] Exemplarily, in the first platform, the manufacturer name of a certain device is input, and the first platform can show the registration address and enterprise credit status corresponding to the manufacturer name of the device; and in the second platform, the manufacturer name of the device is input, and the first platform can show the registration address and enterprise credit status corresponding to the manufacturer name of the device.

[0077] S207, determining the first trustworthiness identifier of the device according to the first trustworthiness information and the second trustworthiness information.

[0078] The first trustworthiness identifier is mainly used to represent the untrustworthy device.

[0079] Specifically, normally, the trustworthiness information of the manufacturer name of each device obtained on different platforms should be the same. If not, it indicates that the manufacturer of the device has certain changes. For example, the manufacturer has cross-regional operation or the registered address is separated from the actual operation address, etc. Thus, the device of the manufacturer will have compliance risks or abnormal conditions. In addition, if the manufacturer address is not in the country, the device also has compliance risks. Therefore, the first trustworthiness identifier of the device can be determined according to the first trustworthiness information and the second trustworthiness information.

[0080] For example, the manufacturer information of a certain device is input on the first platform, and the registered address A is obtained. The manufacturer information of the device is input on the second platform, and in one case, the registered address A is obtained, and in another case, the registered address B is obtained. At this time, in one case, since the registered address of the device obtained from the first platform and the second platform is A, it can be determined whether A is in the country. If yes, the first trustworthiness identifier is "empty", and if not, the first trustworthiness identifier is "untrustworthy". In another case, the first trustworthiness identifier can be directly determined as "untrustworthy".

[0081] In addition, as shown in Table 2 above, after the first trustworthiness identifier is determined, a column of "trustworthiness degree" can be added to Table 2, and the first trustworthiness identifier is filled in the corresponding position. At this time, the first update of the device mapping structure can be as shown in Table 3 below.

[0082] As shown in Table 3, an example of part of the device mapping structure after the first update is shown. After determining the first trustworthiness identifier of each device according to the above steps, the first trustworthiness identifier corresponding to each device can be filled in the "trustworthiness degree" column in Table 3, and in the cell of the row of the device. In addition, if the first trustworthiness identifier is "untrustworthy", "untrustworthy" is directly filled in the cell, for example, the "trustworthiness degree" cells of the above "main control board-DRAM", "switch network board-switch network chip" and "line card 1-forwarding chip" are filled with "untrustworthy" cells. If the first trustworthiness identifier is "empty", it can be directly filled, for example, the "trustworthiness degree" cells of the above "trustworthiness degree" cells are empty.

[0083]

[0084] S208, determining whether the device belongs to a target device according to the production process of the device; if yes, performing S210; if not, performing S209.

[0085] The production flow of the hardware device includes design, tape-out, packaging and testing. In this embodiment, the focus is on the design and tape-out. In this embodiment, the target device is a device that does not involve design and tape-out. For example, PCB, backplane connector, fan and power supply, which are all finished products, i.e. devices that can be directly used when the hardware device is manufactured, which are devices in the mature supply chain system.

[0086] Specifically, according to the production flow of each device, it can be determined which devices belong to the target device. If it belongs to the target device, S210 is executed, and if it does not belong to the target device, S209 is executed.

[0087] S209, according to the credibility file corresponding to the device and the first credibility identifier of the device, determining the credibility corresponding to the device.

[0088] Specifically, the credibility corresponding to the device can be determined according to the following steps:

[0089] (I) Determine whether the first credibility identifier of the device is empty; if it is empty, execute (II); if it is not empty, execute (III).

[0090] Specifically, first determine whether the first credibility identifier of the device is empty, i.e. determine whether the device corresponds to "untrusted" or blank in the "credibility" column in Table 3. If it is blank, execute (II); if it is "untrusted", execute (III).

[0091] (II) According to the credibility file corresponding to the device, determine the design source and the tape-out place corresponding to the device, and according to the design source and the tape-out place, determine the credibility corresponding to the device.

[0092] Specifically, the different credibility files of each device obtained previously have information that can determine the credibility of the device.

[0093] Exemplarily, first, the right holder name in the integrated circuit layout registration certificate is the design supplier, and the registered address of the design supplier can be determined according to the design supplier, and the registered address is added to the device mapping structure after the first update. If there are multiple right holder names, a determination instruction can be sent to the second server, the second server determines a unique right holder according to the multiple right holders in the determination instruction, and feeds back to the first server, and executes the above steps. Secondly, the country / region of origin in the certificate of origin can be determined as the foundry of the device, and the foundry of the device is added to the device mapping structure after the first update. Alternatively, the registered address of the factory can be determined according to the multiple factory names in the domestic foundry contract / agreement and the factory declaration file, and the "country / region" of the registered address is obtained and added to the device mapping structure after the first update.

[0094] Exemplarily, after adding the registered address and the foundry, part of the device mapping structure of the device mapping structure after the second update can be as shown in the following table.

[0095] As shown in Table 4, an example of part of the device mapping structure after the second update is shown. After determining the credibility of the device that does not belong to the target device according to the above steps, the right holder of the device based on the integrated circuit layout registration certificate, i.e. the registered address of the supplier, can be filled in "design supplier country / region". And the foundry of the foundry corresponding to the name of the factory of origin or the factory of origin based on the certificate of origin or based on the domestic foundry contract / agreement and the factory declaration file is filled in "foundry country / region". The crossed grid in the table is the "design supplier country / region" and "foundry country / region" corresponding to the target device, but since the target device is not involved in the design and foundry process, it can be crossed in this embodiment to show "none". The "empty" in the above is the blank to be filled.

[0096]

[0097] After filling in the contents in "design supplier country / region" and "foundry country / region" in Table 4 according to the above steps, the credibility of each device can be determined according to the contents in "design supplier country / region" and "foundry country / region".

[0098] Exemplarily, the following contents can be filled in:

[0099]

[0100] A country is the home country, B country is a country where the certificate of origin exists preferential policy, and C country is a country where the certificate of origin does not exist preferential policy. The preferential policy refers to the country and the home country signing the import device preferential policy. The above shows the "design supplier country / region", "tape-out country / region" and the degree of credibility of three devices. The degree of credibility can be determined according to the "design supplier country / region" and the "tape-out country / region". For example, if any one of the "design supplier country / region" and the "tape-out country / region" is not the home country, the degree of credibility is "non-domestic", if the "design supplier country / region" and the "tape-out country / region" are both the home country, the degree of credibility is "domestic", if the non-home country of the "tape-out country / region" and the home country have signed the import device preferential policy, the degree of credibility is modified to "non-domestic, with risk"; if the non-home country of the "tape-out country / region" and the home country have not signed the import device preferential policy, the degree of credibility is modified to "non-domestic, high risk".

[0101] (Three) determining that the degree of credibility of the device is untrusted.

[0102] Specifically, if the first degree of credibility of the non-target device is untrusted, the degree of credibility of the device can be directly determined as untrusted.

[0103] S210, determining the degree of credibility of the device according to the first degree of credibility of the device and the received second server determined supplementary information of the device.

[0104] The supplementary information can be "proof of foundry registration in the home country".

[0105] Specifically, if the device belongs to the target device, the second server can be sent an instruction to obtain the supplementary information of the device, and the second server feedback supplementary information is received. If the supplementary information can prove that the foundry of the device is in the home country, the degree of credibility of the device is "domestic"; if the supplementary information cannot prove that the foundry of the device is in the home country, it is determined that the degree of credibility of the device is "non-domestic, with risk".

[0106] S211, marking the degree of credibility of each device in the device mapping relationship.

[0107] Specifically, the degree of credibility of each device obtained can be marked in the "degree of credibility" column in Table 4.

[0108] In this embodiment, the trust level of the device is determined according to the geographical position of the device in the design process and in the tape-out process, and the trust level of each device is determined, so that the trust level of the hardware device including the devices can be known by the user of the hardware device before the hardware device is used.

[0109] In S212, the storage table name is determined according to the field name of the device mapping relationship.

[0110] The field name is, for example, the content of the first row in each table.

[0111] Specifically, the storage table name of each storage table in a storage file can be determined according to each field name in the device mapping relationship.

[0112] In S213, the storage table architecture and the storage table content are determined according to the field name and each device in the device mapping relationship.

[0113] Specifically, the storage table architecture can be determined according to the field name, and the specific content of the storage table can be determined according to the architecture of each device in the device mapping relationship under each field name.

[0114] In S214, the device mapping relationship is stored according to the storage table name, the storage table architecture, and the storage table content.

[0115] Specifically, after the storage table name, the storage table architecture, and the storage table content are obtained, the device mapping relationship can be stored.

[0116] For example, the steps of S212-S214 can be performed as follows:

[0117] (1) After the device mapping relationship is filled in, it can be converted into an electronic table file.

[0118] (2) The naming rule is: the name of the provider of the hardware device-the model of the hardware device-the device list-a standardized timestamp accurate to the minute-version number (major version, minor version, revision number)

[0119] (3) The design of the independent worksheet in the converted electronic table file:

[0120]

[0121] (4) Field definition and example of the device detail table:

[0122]

[0123] Optionally, after storage, and when the stored device mapping relationship needs to be searched, updated, or verified, the following steps can be performed:

[0124] (I) In the card total table, a set formula or keyword is used, such as device detail table, card type, etc. The number of devices is counted, such as: {COUNTIF (device detail table! A: A, main control board)} When the card type is added or deleted, the total table data is automatically updated.

[0125] (II) Add an auxiliary column in the device detail table, such as {IF (ISERROR (VLOOKUP (certificate file name, certificate index table! B: C, 2, FALSE)), "path missing", "valid")}, mark the "path missing" item in red, and prompt to supplement the certificate storage path.

[0126] Among them, {COUNTIF (device detail table! A: A, main control board)} and {IF (ISERROR (VLOOKUP (certificate file name, certificate index table! B: C, 2, FALSE)), "path missing", "valid")} are function expressions of the electronic table.

[0127] In this embodiment, the device mapping relationship is stored in the form of an electronic table file, which can realize fast data processing, flexible format setting and powerful calculation and analysis of each information in the device mapping relationship, and can meet various needs of using the device mapping relationship later.

[0128] Figure 3 The structure diagram of the device credibility determination device provided by the embodiment of the application is shown in FIG. 1. Figure 3 As shown in the figure, it is applied to a first server; the first server is in communication connection with a second server; and the device comprises:

[0129] The structure determination module 301 is configured to determine the device mapping structure of the hardware device according to the card types of the various cards in the hardware device and the technical architectures of the various devices in the various cards.

[0130] The receiving module 302 is configured to receive the device mapping relationship and the credibility files corresponding to the various devices, which are fed back by the second server according to the device mapping structure, wherein the device mapping relationship comprises the device mapping structure and the device information corresponding to the various devices in the device mapping structure, and the credibility files are used to represent the production information of the devices.

[0131] The credibility determination module 303 is configured to determine the credibility corresponding to each device according to the device information and the credibility files corresponding to each device, and mark the credibility corresponding to each device in the device mapping relationship.

[0132] Optionally, the technical architecture comprises a technical path, a technical function and a technical positioning; and the structure determination module 301 is specifically configured to:

[0133] determine a device category of each device according to a technical positioning of each device, determine device association information according to the device category, a technical path of each device, and a technical role, and determine a device mapping structure of the hardware device according to a board type of a board to which each device belongs, the device category of each device, and the device association information.

[0134] Optionally, the device mapping structure of the hardware device is determined according to the board type of the board to which each device belongs, the device category of each device, and the device association information; and the structure determination module 301 is specifically configured to:

[0135] determine to-be-determined device information of each device, and determine the device mapping structure of the hardware device according to the board type of the board to which each device belongs, the device category of each device, and the to-be-determined device information of each device;

[0136] The receiving module 302 is specifically configured to:

[0137] send the device mapping structure and the to-be-determined device information of each device to the second server, so that the second server determines a device mapping relationship according to the device mapping structure and the to-be-determined device information, and determines a corresponding credibility file of each device according to each device; and receive the device mapping relationship and the corresponding credibility file of each device sent by the second server.

[0138] Optionally, the credibility determination module 303 is specifically configured to:

[0139] for each device, acquire first credibility information from a first platform according to device information corresponding to the device, and acquire second credibility information from a second platform; and determine a first credibility identifier of the device according to the first credibility information and the second credibility information, wherein the first platform and the second platform are different platforms for determining production information of the device; and determine credibility corresponding to the device according to the credibility file corresponding to the device and the first credibility identifier of the device.

[0140] Optionally, before the credibility corresponding to the device is determined according to the credibility file corresponding to the device and the first credibility identifier of the device, the credibility determination module 303 is further configured to:

[0141] determine whether the device belongs to a target device according to a production process of the device; if the device belongs to the target device, determine the credibility corresponding to the device according to the first credibility identifier of the device and supplementary information of the device determined by the second server; and if the device does not belong to the target device, continue to perform the step of determining the credibility corresponding to the device according to the credibility file corresponding to the device and the first credibility identifier of the device.

[0142] Optionally, the trustworthiness of the device is determined according to the trustworthiness file corresponding to the device and the first trustworthiness identifier of the device, and the trustworthiness determination module 303 is specifically configured to:

[0143] It is determined whether the first trustworthiness identifier of the device is empty, and if the first trustworthiness identifier of the device is empty, the design source and the foundry of the device are determined according to the trustworthiness file corresponding to the device, and the trustworthiness of the device is determined according to the design source and the foundry; if the first trustworthiness identifier of the device is not empty, it is determined that the trustworthiness of the device is untrusted.

[0144] Optionally, the apparatus further comprises a storage module, after the trustworthiness of each device is marked in the device mapping relationship, the storage module is configured to:

[0145] The storage table name is determined according to the field name of the device mapping relationship, the storage table architecture and the storage table content are determined according to the field name and each device in the device mapping relationship, and the device mapping relationship is stored according to the storage table name, the storage table architecture and the storage table content.

[0146] The device trustworthiness determination apparatus provided by the embodiment of the present application can execute the device trustworthiness determination method provided by any embodiment of the present application, and has the corresponding function modules and beneficial effects of executing the method.

[0147] Figure 4 A structural schematic diagram of a server 10 is provided for the embodiment of the present application. The server is intended to represent various forms of digital computers, such as laptops, desktops, tablets, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The server can also represent various forms of mobile devices, such as personal digital assistants, cellular telephones, smartphones, wearable devices (such as headsets, glasses, watches, etc.), and other similar computing devices. The components shown here, their connections, and their functions, as well as the software implemented by the server, are shown by way of example only and are not intended to limit the implementations of the present application described and / or claimed in this document.

[0148] As Figure 4As shown, the server 10 includes at least one processor 11, and a memory, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., connected to the at least one processor 11 in communication. The memory stores computer programs executable by the at least one processor 11, which can perform various appropriate actions and processes according to the computer programs stored in the read-only memory (ROM) 12 or loaded from the storage unit 18 into the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the server 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0149] Various components in the server 10 are connected to the I / O interface 15, including an input unit 16, such as a keyboard, a mouse, etc., an output unit 17, such as various types of displays, speakers, etc., a storage unit 18, such as a magnetic disk, an optical disk, etc., and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the server 10 to exchange information / data with other devices through a computer network, such as the Internet, and / or various telecommunication networks.

[0150] The processor 11 can be various general and / or special-purpose processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 performs various methods and processes described above, such as the device trustworthiness determination method.

[0151] In some embodiments, the device trustworthiness determination method can be implemented as a computer program tangibly embodied in a computer readable storage medium, such as the storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed onto the server 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the device trustworthiness determination method described above can be performed. Alternatively, in other embodiments, the processor 11 can be configured to perform the device trustworthiness determination method by any other appropriate means, such as by means of firmware.

[0152] The various embodiments of the systems and techniques described above can be implemented in digital electronic circuitry, integrated circuitry, a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), a system on a chip (SOC), a load programmable logic device (CPLD), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include implementation in one or more computer programs that are executable and / or interpretable on a programmable system including at least one programmable processor, which can be special or general purpose, coupled to receive data and instructions from, and to transmit data and instructions to, a storage system, at least one input device, and at least one output device.

[0153] Computer programs used to implement the processes of the application can be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the computer program, when executed, can cause instructions defined in the flow charts and / or block diagrams to be implemented on the computer or other programmable apparatus. The computer programs can be executed entirely on a machine, partially on a machine, partially on a machine as a stand-alone software package, partially on a machine and partially on a remote machine or entirely on a remote machine or server.

[0154] In the context of the present application, a computer-readable storage medium can be a tangible medium that can contain or store computer programs for use by or in connection with an instruction execution system, apparatus, or device. Computer-readable storage media can include, but are not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium can be a machine-readable signal medium. More specific examples of the machine-readable storage medium will include one or more lines of electrical connections, portable computer disks, hard disk drives, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or Flash memory), optical fibers, portable compact disc read-only memories (CD-ROMs), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0155] To provide for interaction with a user, the systems and techniques described here can be implemented on a server having a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user and a keyboard and a pointing device (e.g., a mouse or a trackball) by which the user can provide input to the server. Other kinds of devices can be used to provide for interaction with a user as well; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form, including acoustic, speech, or tactile input.

[0156] The systems and techniques described here can be implemented in a computing system that includes a back end component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front end component (e.g., a user computer having a graphical user interface or a Web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such back end, middleware, or front end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network (LAN), a wide area network (WAN), blockchain network, and the Internet.

[0157] The computing system can include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. A server can be a cloud server, also known as cloud computing server or cloud host, which is a host product in the cloud computing service system, to solve the defects of large management difficulty and weak business scalability in traditional physical host and VPS service.

[0158] The embodiments of the present application also provide a computer program product, comprising a computer program which, when executed by a processor, implements the device credibility determination method provided by any of the embodiments of the present application.

[0159] The computer program code can also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce the computer implemented process such that the

[0160] It should be understood that the various forms of flow shown in the figures are illustrative examples of implementing the steps of the application. Several steps have been described as being performed by a single device. It will be understood that these steps can be performed by a single device or multiple devices. It will also be understood that the steps can be performed in a different order than that shown in the figures. It will also be understood that the steps can be performed concurrently or sequentially. It will also be understood that the steps can be performed by different entities. It will also be understood that the steps can be performed by a combination of hardware and software. It will also be understood that the steps can be performed by a combination of one or more devices and one or more computers.

[0161] The specific embodiments have been shown and described for the purposes of illustrating the physiological principles of the application. It will be understood that various modifications, combinations, sub-combinations, and alternatives can be made to the specific embodiments without departing from the spirit and principles of the application. Any modifications, equivalent substitutions, improvements, combinations or the like not described above are also encompassed within the scope of the application.

Claims

1. A method of determining device trustworthiness, the method comprising: The application is applied to a first server; The first server is in communication connection with a second server; the method comprises: According to the board card type of each board card in the hardware device and the technical architecture of each device in each board card, a device mapping structure of the hardware device is determined; Receiving a device mapping relationship and a credibility file corresponding to each device fed back by the second server according to the device mapping structure, wherein the device mapping relationship comprises the device mapping structure and device information corresponding to each device in the device mapping structure, and the credibility file is used to represent the production information of the device; According to the device information and the credibility file corresponding to each device, the credibility of each device is determined, and the credibility of each device is marked in the device mapping relationship.

2. The method of claim 1, wherein, The technical architecture comprises a technical path, a technical role and a technical positioning; and the determination of the device mapping structure of the hardware device according to the board card type of each board card in the hardware device and the technical architecture of each device in each board card comprises: According to the technical positioning of each device, the device category of each device is determined; According to the device category, the technical path and the technical role of each device, the device association information is determined; According to the board card type of the board card to which each device belongs, the device category of each device and the device association information, the device mapping structure of the hardware device is determined.

3. The method of claim 2, wherein, The determination of the device mapping structure of the hardware device according to the board card type of the board card to which each device belongs, the device category of each device and the device association information comprises: The to-be-determined device information of each device is determined, and the device mapping structure of the hardware device is determined according to the board card type of the board card to which each device belongs, the device category of each device and the to-be-determined device information of each device; The receiving of the device mapping relationship and the credibility file corresponding to each device fed back by the second server according to the device mapping structure comprises: The device mapping structure and the to-be-determined device information of each device are sent to the second server, so that the second server determines the device mapping relationship according to the device mapping structure and the to-be-determined device information, and determines the credibility file corresponding to each device according to each device; The device mapping relationship and the credibility file corresponding to each device sent by the second server are received.

4. The method of claim 1, wherein, The determination of the credibility of each device according to the device information and the credibility file corresponding to each device comprises: For each device, first credibility information is obtained from a first platform according to the device information corresponding to the device, and second credibility information is obtained from a second platform; According to the first credibility information and the second credibility information, a first credibility identifier of the device is determined, wherein the first platform and the second platform are different platforms for determining the production information of the device; According to the credibility file corresponding to the device and the first credibility identifier of the device, the credibility of the device is determined.

5. The method of claim 4, wherein, Before the credibility of the device is determined according to the credibility file corresponding to the device and the first credibility identifier of the device, the method further comprises: According to a production flow of the device, it is determined whether the device belongs to a target device; If the device belongs to the target device, according to the first credibility identifier of the device and the received supplementary information of the device determined by the second server, the credibility corresponding to the device is determined; If the device does not belong to the target device, the step of determining the credibility corresponding to the device according to the first credibility identifier of the device and the credibility file corresponding to the device is continued.

6. The method of claim 4, wherein, The step of determining the credibility corresponding to the device according to the first credibility identifier of the device and the credibility file corresponding to the device comprises: It is determined whether the first credibility identifier of the device is empty; If the first credibility identifier of the device is empty, the design source and the tape-out place corresponding to the device are determined according to the credibility file corresponding to the device, and the credibility corresponding to the device is determined according to the design source and the tape-out place; If the first credibility identifier of the device is not empty, it is determined that the credibility corresponding to the device is untrusted.

7. The method of claim 1, wherein, After the credibility corresponding to each device is marked in the device mapping relationship, the following steps are further included: According to the field name of the device mapping relationship, the storage table name is determined; According to the field name and each device in the device mapping relationship, the storage table architecture and the storage table content are determined; According to the storage table name, the storage table architecture and the storage table content, the device mapping relationship is stored.

8. A device for determining the reliability of a device, characterized in that, Applied to a first server; The first server is in communication connection with a second server; the device comprises: A structure determination module is configured to determine the device mapping structure of the hardware device according to the board card type of each board card in the hardware device and the technical architecture of each device in each board card; A receiving module is configured to receive the device mapping relationship and the credibility file corresponding to each device fed back by the second server according to the device mapping structure, wherein the device mapping relationship comprises the device mapping structure and the device information corresponding to each device in the device mapping structure, and the credibility file is used to represent the production information of the device; A credibility determination module is configured to determine the credibility corresponding to each device according to the device information and the credibility file corresponding to each device, and mark the credibility corresponding to each device in the device mapping relationship.

9. A server, characterized by Comprise: One or more processors; A memory for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the device credibility determination method according to any one of claims 1 to 7.

10. A readable storage medium, having stored thereon a computer program, characterized in that, The program is executed by the processor to implement the device credibility determination method according to any one of claims 1 to 7.

Images