Operation and maintenance management method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention discloses an operation and maintenance management method and device, electronic equipment and a storage medium, and relates to the technical field of I T operation and maintenance management.The method comprises the steps that the full-life-cycle management requirement of information equipment is obtained, a storage model is designed, a form model is established, operation and maintenance data are stored and displayed in a structured mode, and a data management framework is obtained; obtaining confidentiality requirements of multiple levels of approval processes, encrypting operation and maintenance data level by level through an encryption algorithm, and controlling the authority of each process in combination with a transfer node private key decryption forwarding mechanism to obtain an approval process; obtaining the importance, the influence range and the emergency degree of the to-be-processed service, and carrying out weighted calculation on the flow priority to obtain an operation and maintenance scheduling strategy; and performing operation and maintenance management on the to-be-processed business according to the data management framework, the approval process and the operation and maintenance scheduling strategy, and synchronously updating the ledger. The problems that in the prior art, the equipment state is difficult to monitor, configuration change is difficult to track, meanwhile, efficiency is low, and data is prone to being leaked are solved.

Description

Technical Field

[0001] This invention relates to the field of IT operations and maintenance management and process optimization technology, and in particular to an operations and maintenance management method, device, electronic device and storage medium. Background Technology

[0002] As enterprises continue to deepen their informatization, the scale and complexity of hardware equipment are rising sharply, covering a variety of types such as servers, storage devices, and network equipment. Their interconnectivity and the difficulty of operation and maintenance are increasing day by day.

[0003] At the same time, enterprise networks are expanding rapidly, their topologies are becoming increasingly complex, and their network environments are becoming highly dynamic and volatile, posing severe challenges to the stable operation and security management of information equipment.

[0004] However, traditional information equipment management methods rely heavily on manual operation and decentralized systems, lacking a unified management platform. This makes it difficult to monitor equipment status in real time, accurately track configuration changes, and effectively handle complex processes throughout the equipment's lifecycle, such as network access, maintenance, and decommissioning. Furthermore, traditional methods have significant shortcomings in data protection; maintenance data is easily leaked or tampered with, and the loose access control at process nodes results in insufficient confidentiality and controllability.

[0005] Faced with the above problems, existing management methods are no longer sufficient to meet enterprises' needs for efficient, secure, and visualized management of information equipment.

[0006] Therefore, there is an urgent need for a process-driven operation and maintenance management method that can achieve precise control over the entire lifecycle of information equipment through standardized approval processes, data encryption, and dynamic access control. Summary of the Invention

[0007] The embodiments of this invention provide an operation and maintenance management method to address the problems of existing technologies, such as the lack of a unified management platform, difficulty in real-time monitoring of equipment status and tracking of configuration changes, insufficient data protection, and lax access control leading to low operation and maintenance efficiency and easy data leakage. The technical solution is as follows:

[0008] According to one aspect of the present invention, an operation and maintenance management method includes: acquiring the full lifecycle management requirements of information equipment, designing a storage model and establishing a form model, and performing structured storage and display of operation and maintenance data according to the management requirements and the form model to obtain a data management framework; the operation and maintenance data includes network access and decommissioning data, maintenance and repair data, and configuration change data; acquiring the confidentiality requirements of multi-level approval processes, encrypting the operation and maintenance data level by level according to the confidentiality requirements using an encryption algorithm, and dynamically controlling the permissions of each process node using a private key decryption and forwarding mechanism of a relay node to obtain an approval process; acquiring the importance, scope of impact, and urgency of pending business, calculating the process priority according to the importance, scope of impact, and urgency using a weighted formula and set weight coefficients, and obtaining an operation and maintenance scheduling strategy based on the process priority; performing operation and maintenance management of the pending business according to the data management framework, approval process, and operation and maintenance scheduling strategy, and synchronously updating the information equipment ledger and process ledger to obtain a data-visualized operation and maintenance management platform.

[0009] In one embodiment, the data management framework is obtained by acquiring the full lifecycle management requirements of information devices, designing a storage model and establishing a form model, and then performing structured storage and display of operation and maintenance data based on the management requirements and the form model. This is achieved through the following steps: acquiring the full lifecycle management requirements of information devices, designing a storage model by analyzing the field information to be displayed in each form, and establishing multiple associated storage models if the form has sub-tables; the management requirements include information device network access and decommissioning, maintenance and repair, and configuration changes; the field information includes order number, date, and personnel; establishing a form model by binding the storage model, clarifying the field structure of the operation and maintenance data based on the form model, and mapping and storing the operation and maintenance data with database tables through the storage model to obtain the data management framework; the field structure includes device type, network access time, and maintenance record.

[0010] In one embodiment, to obtain the confidentiality requirements of a multi-level approval process, the operation and maintenance data is encrypted level by level according to the confidentiality requirements using an encryption algorithm. Combined with the private key decryption and forwarding mechanism of the relay node, the permissions of each process node are dynamically controlled. The approval process is implemented through the following steps: multiple process nodes are established according to the information system operation procedures, and the operation rules of each process node are defined; the process nodes include information equipment network access, maintenance and repair, configuration change, encryption upgrade, and network deactivation; the operation rules include submission, approval, and return; according to the information integrity requirements of each approval stage, the operation and maintenance data is encrypted level by level using an asymmetric encryption algorithm and passed to the user of the approval process node for approval. If the approval fails, the data is returned to the user of the submission process node through a return process.

[0011] In one embodiment, the asymmetric encryption algorithm is used to encrypt the operation and maintenance data step by step through the following steps: at the submission process node, an RSA key pair is generated based on the operation and maintenance data, the public key and username of each process node are obtained, and the corresponding form fields and approval paths are specified; at the submission process node, the corresponding username and form fields are encrypted using the public key, and nested with the information of subsequent process nodes to generate an encryption chain; a random message sequence code is generated for the encryption chain, and the encryption chain and the message sequence code are combined to obtain an encryption request packet; the encryption request packet is decrypted using the private key.

[0012] In one embodiment, the approval process is implemented by passing the request to the user at each approval process node through the following steps: sending the encrypted request packet from the submission process node to the user at the approval process node; the encrypted request packet from the submission process node includes the public key of the approval process node encrypting the form information and the approver's username; after receiving the encrypted request packet, the process node decrypts the outer layer using the private key to obtain the information of the next process node and the remaining encrypted packet, reassembles the encrypted request packet and forwards it to the next process node, until each of the approval process nodes decrypts the encrypted request packet to obtain the complete form for approval.

[0013] In one embodiment, the process priority is calculated based on the importance, scope of influence, and urgency using a weighted formula and set weight coefficients through the following steps: weights are set for the importance, scope of influence, and urgency respectively; the importance, scope of influence, and urgency are weighted and summed according to the weights to obtain the process priority; the importance is used to assess the degree of relevance of the process to the core business; the scope of influence is used to assess the scope of impact of the process on departments and personnel; and the urgency is used to assess the timeliness requirements of the process response.

[0014] In one embodiment, the pending business is managed and maintained according to the data management framework, approval process, and operation and maintenance scheduling strategy, and the information equipment ledger and process ledger are updated synchronously through the following steps: A process ledger is automatically generated based on the data management framework and approval process; the process ledger includes application number, date, personnel, and department; the process ledger is used to grant query permissions to the information management department, supporting process status tracking and historical approval details; an information equipment ledger is established, and when the equipment status changes, the equipment ledger is updated after the pending business is completed; the equipment ledger is used for departmental coordination and individual query of equipment under their name; the equipment ledger includes asset number, name, and responsible person.

[0015] According to one aspect of the present invention, an operation and maintenance management device includes: a data model construction module, used to acquire the full lifecycle management requirements of information equipment, design a storage model and establish a form model, and perform structured storage and display of operation and maintenance data according to the management requirements and the form model to obtain a data management framework; the operation and maintenance data includes network access and decommissioning data, maintenance and repair and configuration change data; a process encryption and access control module, used to acquire the confidentiality requirements of multi-level approval processes, encrypt the operation and maintenance data level by level according to the confidentiality requirements through an encryption algorithm, and combine the private key decryption and forwarding mechanism of the relay node to dynamically control the permissions of each process node to obtain the approval process; a priority dynamic calculation module, used to acquire the importance, scope of impact and urgency of the pending business, calculate the process priority according to the importance, scope of impact and urgency through a weighted formula and set weight coefficients, and obtain the operation and maintenance scheduling strategy according to the process priority; and a ledger update and visualization module, used to perform operation and maintenance management of the pending business according to the data management framework, approval process and operation and maintenance scheduling strategy, and synchronously update the information equipment ledger and process ledger to obtain a data-visualized operation and maintenance management platform.

[0016] According to one aspect of the present invention, an electronic device includes at least one processor and at least one memory, wherein computer-readable instructions are stored on the memory; the computer-readable instructions are executed by one or more of the processors to enable the electronic device to implement the operation and maintenance management method as described above.

[0017] According to one aspect of the present invention, a storage medium has computer-readable instructions stored thereon, which are executed by one or more processors to implement the operation and maintenance management method as described above.

[0018] The beneficial effects of the technical solution provided by this invention are:

[0019] In the above technical solution, this invention first obtains the full lifecycle management requirements of information equipment, designs storage and form models, realizes structured storage and display of operation and maintenance data, and constructs a data management framework. Based on this, to address the confidentiality requirements of multi-level approval processes, an asymmetric encryption algorithm is used to encrypt operation and maintenance data level by level, combined with a private key decryption and forwarding mechanism at relay nodes, dynamically controlling the permissions of each process node to ensure the security of the approval process. Simultaneously, based on the importance, scope of impact, and urgency of the pending business, a weighted formula is used to calculate process priorities and formulate operation and maintenance scheduling strategies to achieve efficient resource allocation. Finally, relying on the data management framework, approval processes, and operation and maintenance scheduling strategies, comprehensive operation and maintenance management of pending business is implemented, and the information equipment ledger and process ledger are updated synchronously, realizing a data-visualized operation and maintenance management platform. This not only improves operation and maintenance efficiency and service quality but also ensures the availability, integrity, and confidentiality of information equipment data, effectively solving problems such as low efficiency and easy data leakage in traditional management methods. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention, and those skilled in the art can obtain other drawings based on these drawings without creative effort.

[0021] Figure 1 This is a flowchart illustrating an operation and maintenance management method according to an exemplary embodiment;

[0022] Figure 2 This is a block diagram of an operation and maintenance management device according to an exemplary embodiment;

[0023] Figure 3 This is a hardware structure diagram of an electronic device according to an exemplary embodiment;

[0024] Figure 4 This is a block diagram illustrating an electronic device according to an exemplary embodiment. Detailed Implementation

[0025] Embodiments of the present invention are described in detail below. Examples of these embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and should not be construed as limiting the present invention.

[0026] Those skilled in the art will understand that, unless specifically stated otherwise, the singular forms “a,” “an,” “the,” and “the” used herein may also include the plural forms. It should be further understood that the term “comprising” as used in this disclosure means the presence of the stated features, integers, steps, operations, elements, and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof. It should be understood that when we say an element is “connected” or “coupled” to another element, it can be directly connected or coupled to the other element, or there may be intermediate elements. Furthermore, “connected” or “coupled” as used herein can include wireless connections or wireless coupling. The term “and / or” as used herein includes all or any units and all combinations of one or more associated listed items.

[0027] This invention provides an operation and maintenance management method. By constructing a data management framework, encrypting the approval process, and formulating operation and maintenance scheduling strategies, it achieves efficient operation and maintenance management and data visualization throughout the entire lifecycle of information equipment. This solves the problems of low efficiency, insufficient data protection, and coarse access control in traditional management methods, thereby improving the quality of operation and maintenance services. This operation and maintenance management method is applicable to operation and maintenance management devices, which can be electronic devices. The operation and maintenance management method in this invention can be applied to various scenarios, such as data center operation and maintenance management.

[0028] Please see Figure 1 This invention provides an operation and maintenance management method applicable to electronic devices.

[0029] In the following method embodiments, for ease of description, the execution subject of each step of the method is an electronic device, but this does not constitute a specific limitation.

[0030] like Figure 1 As shown, the method may include the following steps:

[0031] Step 110: Obtain the full lifecycle management requirements of information devices, design a storage model and establish a form model, and perform structured storage and display of operation and maintenance data according to management requirements and form model to obtain a data management framework.

[0032] One possible implementation involves obtaining the full lifecycle management requirements of information devices, designing a storage model by analyzing the field information to be displayed in each form, establishing multiple related storage models if the form has sub-tables, establishing a form model by binding the storage model, clarifying the field structure of the operation and maintenance data based on the form model, and mapping and storing the operation and maintenance data with the database tables through the storage model to obtain the data management framework.

[0033] The operation and maintenance data includes network entry and exit data, maintenance and repair and configuration change data, etc. The management requirements include information equipment network entry and exit, maintenance and repair, configuration changes, etc. The field structure includes equipment type, network entry time, maintenance record, etc. The field information includes order number, date, personnel, etc., none of which are specified here.

[0034] Specifically, the first step is to clarify the full lifecycle management requirements of information equipment from network access to network decommissioning, including key stages such as equipment network access, maintenance and repair, configuration changes, and network decommissioning. Based on the management requirements, the field information that each form needs to display is analyzed, such as equipment type, network access time, maintenance records, etc., and corresponding storage models are designed. If the form has sub-tables, multiple related storage models are established to ensure the integrity and relevance of the data.

[0035] Furthermore, the storage model is bound to the form model to clarify the field structure of the operation and maintenance data. The storage model is then used to map the operation and maintenance data to the database tables and store them in a structured manner, thus forming a data management framework.

[0036] In the above process, this embodiment of the invention ensures that the data management framework can comprehensively cover the entire lifecycle of the equipment by analyzing each aspect of information equipment management in detail. The storage model design considers the correlation and integrity of the data, while the form model ensures the readability and operability of the data. By comprehensively covering the management needs of the entire lifecycle of information equipment and designing a refined storage model and form model, operation and maintenance data can be stored and displayed in a structured manner, providing a clear and comprehensive data management framework and realizing the visualization and efficient management of operation and maintenance data.

[0037] Step 120: Obtain the confidentiality requirements of the multi-level approval process, encrypt the operation and maintenance data level by level according to the confidentiality requirements using encryption algorithms, and combine the private key decryption and forwarding mechanism of the transit node to dynamically control the permissions of each process node to obtain the approval process.

[0038] In one possible implementation, multiple process nodes are established according to the information system operation procedures, and the operation rules of each process node are defined. Based on the information integrity requirements of each approval stage, an asymmetric encryption algorithm is used to encrypt the operation and maintenance data level by level, and the data is transmitted to the user of the approval process node for approval. If the approval fails, the data is returned to the user who submitted the process node through a return process.

[0039] The process nodes include information equipment network access, maintenance and repair, configuration changes, encryption upgrades, network decommissioning, etc., and the operation rules include submission, approval, return, etc., none of which are specified here.

[0040] In one possible implementation, at the submission process node, an RSA key pair is generated based on the operation and maintenance data, the public key and username of each process node are obtained, and the corresponding form fields and approval paths are specified; at the submission process node, the corresponding username and form fields are encrypted with the public key, and nested with the information of subsequent process nodes to generate an encrypted chain; a random message sequence code is generated for the encrypted chain, and the encrypted chain and message sequence code are combined to obtain an encrypted request packet.

[0041] The encrypted request packet is decrypted using the private key.

[0042] Furthermore, the encrypted request packet of the submission process node is sent to the user of the approval process node. After receiving the encrypted request packet, the process node decrypts the outer layer with its private key to obtain the information of the next process node and the remaining encrypted packet, reassembles the encrypted request packet and forwards it to the next process node, until each approval process node decrypts the encrypted request packet to obtain the complete form for approval.

[0043] The encrypted request packet submitted to the process node includes the public key encrypted form information of the approval process node and the approver's username.

[0044] Specifically, based on the information system operating procedures, multiple process nodes are established, including information equipment network access, maintenance and repair, configuration changes, encryption upgrades, and network decommissioning, and operation rules for each node are defined, such as submission, approval, and return.

[0045] Furthermore, based on the information integrity requirements of each approval stage, asymmetric encryption algorithms (such as RSA) are used to encrypt the operation and maintenance data step by step. An RSA key pair is generated at the submission node to obtain the public key and username for each node, and the corresponding form fields and approval paths are defined.

[0046] Furthermore, at the submission process node, the corresponding username and form fields are encrypted using a public key, and then nested with the information from subsequent process nodes to generate an encrypted chain. A random message sequence code is generated for the encrypted chain, and the encrypted request packet is obtained by combining them. The encrypted request packet is decrypted using a private key and passed level by level between process nodes to the approving user for approval.

[0047] The encrypted approval process design ensures the security and confidentiality of operational data during transmission and approval. The application of asymmetric encryption algorithms ensures that only users with the corresponding private key can decrypt and view form information, effectively preventing data leakage.

[0048] In the above process, the embodiments of the present invention employ asymmetric encryption algorithms and a hierarchical transmission mechanism to enable secure transmission and dynamic access control of operation and maintenance data in the approval process, providing a highly secure approval process and achieving confidentiality and controllability of operation and maintenance data.

[0049] Step 130: Obtain the importance, scope of impact, and urgency of the pending business. Calculate the process priority based on importance, scope of impact, and urgency using a weighted formula and set weight coefficients. Obtain the operation and maintenance scheduling strategy based on the process priority.

[0050] In one possible implementation, weights are set for importance, scope of impact, and urgency, and the process priority is obtained by weighted summation of importance, scope of impact, and urgency according to their respective weights.

[0051] Specifically, the weights of importance, scope of impact, and urgency are set to 0.4, 0.3, and 0.3, respectively, and the weighted sum of importance, scope of impact, and urgency is used to obtain the process priority.

[0052] Among them, importance is used to assess the degree of relevance of the process to the core business; scope of impact is used to assess the scope of the process's impact on departments and personnel; and urgency is used to assess the timeliness requirements of the process's response.

[0053] Specifically, the importance, scope of impact, and urgency of pending business are obtained. These factors are key indicators for evaluating process priority. The weights of importance, scope of impact, and urgency are set to 0.4, 0.3, and 0.3, respectively, to reflect the different degrees of influence of each factor on process priority.

[0054] Furthermore, the priority of each process node is calculated using the weighted formula: Process Priority = 0.4 × Importance + 0.3 × Scope of Impact + 0.3 × Urgency.

[0055] The weights for importance, scope of impact, and urgency can be set according to specific application scenarios and actual needs; no restrictions are imposed here.

[0056] Among these measures, the formulation of operation and maintenance scheduling strategies ensures that high-priority processes are allocated resources first, improving overall operation and maintenance efficiency. Quantitative evaluation of various business elements makes priority calculations more objective and accurate.

[0057] In the above process, the embodiments of the present invention quantify the importance, scope of impact and urgency of the business and set reasonable weight coefficients, making the calculation of process priority more scientific and objective, providing an efficient operation and maintenance scheduling strategy, and realizing optimized resource allocation and rapid response.

[0058] Step 140: Perform operation and maintenance management on the business to be processed according to the data management framework, approval process and operation and maintenance scheduling strategy, and update the information equipment ledger and process ledger in sync to obtain a data-visualized operation and maintenance management platform.

[0059] In one possible implementation, process ledgers are automatically generated based on the data management framework and approval process, and an information-based equipment ledger is established. When the equipment status changes, the equipment ledger is updated after the pending business is completed.

[0060] The process ledger includes the application number, date, personnel, and department; the process ledger is used to grant query permissions to the information management department, supporting process status tracking and historical approval details; the equipment ledger is used for the management department to coordinate and for individuals to query the equipment under their name; the equipment ledger includes the asset number, name, and responsible person.

[0061] Specifically, based on the data management framework and approval process, a process ledger is automatically generated, including information such as application number, date, personnel, and department. Access to the process ledger is restricted to the IT management department, supporting process status tracking and historical approval details. A master ledger and individual IT equipment ledgers are established, including asset number, name, and responsible person. When equipment status changes, the equipment ledger is updated after pending business transactions are completed. The synchronized updating of the process ledger and equipment ledger ensures that the management department can coordinate and individuals can query their own equipment.

[0062] The implementation of integrated operation and maintenance management and ledger updates ensured the transparency and traceability of the operation and maintenance process. The establishment of process ledgers and equipment ledgers enabled the management department to have a comprehensive grasp of equipment status and process progress, improving management efficiency.

[0063] In the above process, the embodiments of the present invention automatically generate process ledgers and establish equipment ledgers, and ensure that the two are updated synchronously, so that the operation and maintenance process can be fully recorded and tracked, providing transparent and traceable operation and maintenance management, and enabling the management department to have a comprehensive grasp of equipment status and process progress.

[0064] Through the above process, this invention achieves full lifecycle management of information equipment by constructing a data management framework, designing an encrypted approval process, formulating operation and maintenance scheduling strategies, and implementing comprehensive operation and maintenance management and ledger updates. This method ensures the security, integrity, and visibility of operation and maintenance data, improves operation and maintenance efficiency and service quality, and provides strong support for enterprise information transformation.

[0065] In one exemplary embodiment, the operation and maintenance management method of the present invention is shown to perform operation and maintenance management in an e-commerce order query system.

[0066] Specifically, it may include the following steps:

[0067] Step S1: Build a data management framework.

[0068] Specifically, the IT department of a large manufacturing enterprise first designed a detailed storage model to address its complex IT environment. For example, for server equipment, a storage model was established that included fields such as asset number, equipment model, IP address, responsible person, and maintenance records; for network equipment, fields such as device type, port status, and connection relationships were included. Furthermore, considering the complexity of the forms and the needs of the sub-tables—for example, maintenance records might contain detailed information from multiple maintenance sessions—an independent storage model was established for each sub-table.

[0069] Furthermore, based on these storage models, an intuitive and easy-to-use form model was designed, enabling applicants to clearly fill in application information such as equipment network access and maintenance, and allowing approvers to quickly understand the application content and make decisions.

[0070] In the above process, the embodiments of the present invention achieve comprehensive coverage and efficient management of operation and maintenance data through refined design of storage and form models.

[0071] Step S2: Design an encrypted approval process.

[0072] Specifically, based on the enterprise's information system operating procedures, a complete process model was established, including information equipment network access, maintenance, configuration changes, encryption upgrades, and network decommissioning. Through asymmetric encryption algorithms and dynamic access control, the confidentiality, integrity, and controllability of operational data during the approval process are ensured.

[0073] Specifically, firstly, based on the information system operating procedures, a multi-level approval process node is established, including: information equipment network access, maintenance and repair, configuration change, security upgrade, network deactivation, etc.; then, the operating rules for each node are defined: submission, approval, and return, and the visibility range of form information (inconsistent information completeness) for different approval stages is clarified.

[0074] Furthermore, to ensure the security of data transmission and approval processes, the RSA asymmetric encryption algorithm is used to encrypt the operation and maintenance data step by step. The specific algorithm is as follows: First, the applicant submits the application information...

[0075] The specific process of key generation includes: the sending node (applicant) using the RSA algorithm to generate a key pair (public key Ke). i With private key Kd i Then, path selection and information encapsulation are performed: when submitting information, the sending node selects the approval path (transfer node sequence T1, T2, ..., T...). n And obtain the public keys Ke1, Ke2, ..., Ke of each node. n and usernames Name1, Name2, ..., Name n .

[0076] Furthermore, nested encryption: This involves the complete form information P at the final approval node. n Using the auditor's public key Ke n Encryption generation R n =Ke n (P n For the information of the penultimate approval node, use its public key Ke. n-1 Encrypted Name n +P n-1 and R n Generate R n-1 =Ke n-1 (Name n +P n-1 R n This process continues, forming a nested encryption chain: R1 = Ke1(Name2+P1, Ke2(Name3+P2, Ke3(Name4+P3,..., Ke...). n-1 (Name n +P n-1 ,Ke n (P n ...)).

[0077] Further, request message generation: A machine message sequence code Seq is generated for the encrypted chain, which is then combined into a request message packet: REQ1 = (R1, Seq); the sending node then sends it to the first approval node T1. A loop algorithm is used to substitute i with values ​​from 0 to n-1. For each node i, at the intermediate node T... i Received request information REQ i =(R i After Seq), use the private key Kd i Decrypting R i The outermost layer obtains the username (Name) of the next approval node. i+1 And the form information that needs to be viewed P i :Kd i {R i} = Name i+1 +R i T1 then combines the remaining R2 and Seq into a new request message REQ2 and sends it to the next relay node T2, and so on, until all approval processes are completed; the request message received by the auditor is REQ. n =(R n (,Seq).

[0078] Among them, R n =Ke n (P n ), Kd n {Ke n (P n )}=Pn Each node can only decrypt information within its authorized scope and reassemble the request packet before passing it to the next node, ensuring that data remains encrypted throughout transmission. Only auditors can view the complete form; other nodes can only see partial information, ensuring end-to-end data security.

[0079] In the above process, this embodiment of the invention achieves information visibility isolation through the aforementioned encryption and access control mechanisms: different approval stages can only see the form fragments to be processed, ensuring data is not leaked; dynamic access management: each node can only decrypt data within its authorized scope, preventing unauthorized access. This ensures the confidentiality, integrity, and controllability of operational data in the approval process, preventing unauthorized access or data leakage. Through asymmetric encryption technology and a step-by-step decryption and forwarding mechanism, the security and controllability of the approval process are achieved.

[0080] Step S3: Develop an operation and maintenance scheduling strategy.

[0081] Specifically, to improve operational efficiency, the platform has introduced an operational process priority scheduling mechanism. Based on the importance, scope of impact, and urgency of the business, the system automatically calculates the priority of each process. For example, for processes that affect the company's core business and require a response within two hours, their priority Pn will be set to a higher value (such as 9 or 10).

[0082] Furthermore, the weights A, B, and C for importance, scope of impact, and urgency are set to 0.4, 0.3, and 0.3, respectively. Based on the weighted formula: process priority = 0.4 × importance + 0.3 × scope of impact + 0.3 × urgency, the process priority is calculated to be 8.7, and resources are allocated to process it first.

[0083] The process priority ranges from 1 to 10, with higher values ​​indicating higher priority. The importance of the business ranges from 1 to 10, with core business ranging from 7 to 10 and non-core business ranging from 1 to 6. The impact range of the process ranges from 1 to 10, with impact on all company users ranging from 7 to 10 and impact on department users ranging from 1 to 6. The urgency range of the process ranges from 1 to 10, with a response time of 7 to 10 within two hours and a response time of 1 to 6 within 48 hours. The weighting coefficient A+B+C = 1, with default values ​​of A = 0.4, B = 0.3, and C = 0.3.

[0084] In the above process, under the condition of limited resources, the system of this invention will prioritize the processing of high-priority processes to ensure the stable operation of critical businesses. Through quantitative evaluation and weighted calculation, the optimized allocation of operation and maintenance resources is achieved.

[0085] Step S4: Implement integrated operation and maintenance management and update ledgers.

[0086] Specifically, to facilitate process management and equipment tracking, the platform has established detailed process ledgers and equipment ledgers. The process ledger records the process status, approval history, processing time, and other information for each application, making it easier for the IT management department to monitor process progress and trace historical data. The equipment ledger includes a general ledger of IT equipment and individual personal IT equipment ledgers, which record detailed information such as the equipment's asset number, name, responsible person, and status. For example, when a server malfunctions and requires repair, administrators can quickly locate the equipment through the equipment ledger and view its historical maintenance records.

[0087] Meanwhile, the process log records the application, approval, and execution status of each maintenance, ensuring transparency and traceability throughout the process. The information management department can use the log query function to track the equipment's historical maintenance records and current status.

[0088] In the above process, the embodiments of the present invention realize the transparency and traceability of the operation and maintenance process through the synchronous update and query function of the ledger, and improve the standardization and efficiency of operation and maintenance management by establishing a complete ledger system.

[0089] Specifically, one day, the company's network department received a fault report for a core switch. The maintenance personnel submitted a device maintenance request through the IT operations and maintenance security management platform, selecting the "emergency repair" type and filling in a detailed description of the fault and its impact scope. Based on a preset priority calculation formula, the system automatically set the priority of this process to the highest level (Pn=10). Subsequently, the process underwent rapid approval by various levels of approvers, including the network supervisor and the head of the IT department, before finally reaching the maintenance team. Upon receiving the approval notification, the maintenance team immediately replaced and restored the switch's configuration. Throughout the process, the process log and device log were updated in real time with process status and device information, ensuring transparency and traceability of the maintenance process. Ultimately, the switch was restored to normal operation in a short time, without causing serious impact on the company's network.

[0090] Through the above process, this invention achieves structured storage and efficient management of operational data by constructing storage and form models; designs encrypted approval processes and access control mechanisms to ensure the security and controllability of the approval process; implements operational process priority scheduling strategies to optimize resource allocation and improve operational efficiency; and establishes process ledgers and equipment ledger systems to improve the standardization and transparency of operational management. In actual operational scenarios, this invention significantly improves enterprises' response speed and handling capabilities to IT failures, ensuring the continuity and stability of enterprise business.

[0091] The following are embodiments of the device of the present invention, which can be used to execute the operation and maintenance management method involved in the present invention. For details not disclosed in the embodiments of the device of the present invention, please refer to the method embodiments of the operation and maintenance management method involved in the present invention.

[0092] Please see Figure 2 This invention provides an operation and maintenance management device 800.

[0093] The operation and maintenance management device 800 includes, but is not limited to: a data model construction module 810, a process encryption and access control module 830, a priority dynamic calculation module 850, and a ledger update and visualization module 870.

[0094] Among them, the data model construction module 810 is used to obtain the full life cycle management requirements of information equipment, design the storage model and establish the form model, and perform structured storage and display of operation and maintenance data according to management requirements and form model to obtain the data management framework; operation and maintenance data includes network access and decommissioning data, maintenance and repair and configuration change data.

[0095] The process encryption and access control module 830 is used to obtain the confidentiality requirements of multi-level approval processes. It encrypts the operation and maintenance data level by level according to the confidentiality requirements through encryption algorithms, and combines the private key decryption and forwarding mechanism of the transit node to dynamically control the permissions of each process node to obtain the approval process.

[0096] The priority dynamic calculation module 850 is used to obtain the importance, scope of impact and urgency of the business to be processed. It calculates the process priority based on the importance, scope of impact and urgency by using a weighted formula and setting weight coefficients, and obtains the operation and maintenance scheduling strategy based on the process priority.

[0097] The ledger update and visualization module 870 is used to perform operation and maintenance management on the business to be processed according to the data management framework, approval process and operation and maintenance scheduling strategy, and to update the information equipment ledger and process ledger simultaneously to obtain a data-visualized operation and maintenance management platform.

[0098] It should be noted that the operation and maintenance management provided in the above embodiments is only an example of the division of the above functional modules. In actual applications, the above functions can be assigned to different functional modules as needed. That is, the internal structure of the operation and maintenance management device will be divided into different functional modules to complete all or part of the functions described above.

[0099] Furthermore, the operation and maintenance management device and operation and maintenance management method embodiments provided in the above embodiments belong to the same concept, and the specific way in which each module performs operations has been described in detail in the method embodiments, and will not be repeated here.

[0100] Figure 3 A schematic diagram of the structure of an electronic device according to an exemplary embodiment is shown.

[0101] It should be noted that this electronic device is merely an example adapted to the present invention and should not be construed as providing any limitation on the scope of use of the present invention. Furthermore, this electronic device should not be interpreted as requiring or depending on having... Figure 3 One or more components of the exemplary electronic device 2000 shown.

[0102] The hardware structure of electronic devices 2000 can vary significantly due to differences in configuration or performance, such as... Figure 3 As shown, the electronic device 2000 includes: a power supply 210, an interface 230, at least one memory 250, and at least one central processing unit (CPU) 270.

[0103] Specifically, power supply 210 is used to provide operating voltage for various hardware devices on electronic device 2000.

[0104] Interface 230 includes at least one wired or wireless network interface 231 for interacting with external devices. Of course, in other examples adapted to this invention, interface 230 may further include at least one serial-to-parallel conversion interface 233, at least one input / output interface 235, and at least one USB interface 237, etc. Figure 3 As shown, this does not constitute a specific limitation.

[0105] The memory 250 serves as a carrier for resource storage and can be a read-only memory, random access memory, disk, or optical disk, etc. The resources stored on it include the operating system 251, application programs 253, and data 255, etc., and the storage method can be temporary storage or permanent storage.

[0106] The operating system 251 is used to manage and control the various hardware devices and application programs 253 on the electronic device 2000, so as to enable the central processing unit 270 to perform calculations and processing on the massive data 255 in the memory 250. It can be Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, etc.

[0107] Application 253 is a computer-readable instruction based on operating system 251 that performs at least one specific task, and may include at least one module ( Figure 3 (Not shown), each module may contain computer-readable instructions for the electronic device 2000. For example, the operation and maintenance management device may be considered as application 253 deployed on the electronic device 2000.

[0108] Data 255 may be signal information, etc., and is stored in memory 250.

[0109] The central processing unit 270 may include one or more processors and is configured to communicate with the memory 250 via at least one communication bus to read computer-readable instructions stored in the memory 250, thereby enabling the computation and processing of massive amounts of data 255 in the memory 250. For example, an operation and maintenance management method may be implemented by the central processing unit 270 reading a series of computer-readable instructions stored in the memory 250.

[0110] Furthermore, the present invention can also be implemented through hardware circuits or a combination of hardware circuits and software. Therefore, the implementation of the present invention is not limited to any specific hardware circuit, software, or combination thereof.

[0111] Please see Figure 4 This invention provides an electronic device 4000, which may include: a desktop computer, a laptop computer, a server, etc., with sensor recognition capabilities.

[0112] exist Figure 4 In this context, the electronic device 4000 includes at least one processor 4001 and at least one memory 4003.

[0113] The data interaction between the processor 4001 and the memory 4003 can be achieved through at least one communication bus 4002. This communication bus 4002 may include a path for transmitting data between the processor 4001 and the memory 4003. The communication bus 4002 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus, etc. The communication bus 4002 can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 4 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0114] Optionally, the electronic device 4000 may further include a transceiver 4004, which can be used for data interaction between the electronic device and other electronic devices, such as sending and / or receiving data. It should be noted that in practical applications, the transceiver 4004 is not limited to one type, and the structure of the electronic device 4000 does not constitute a limitation on the embodiments of the present invention.

[0115] Processor 4001 may be a CPU (Central Processing Unit), a general-purpose processor, a DSP (Digital Signal Processor), an ASIC (Application-Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. It can implement or execute the various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of this invention. Processor 4001 may also be a combination that implements computational functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0116] The memory 4003 may be a ROM (Read-Only Memory) or other type of static storage device capable of storing static information and instructions, RAM (Random Access Memory) or other type of dynamic storage device capable of storing information and instructions, or it may be an EEPROM (Electrically Erasable Programmable Read-Only Memory), a CD-ROM (Compact Disc Read-Only Memory) or other optical disc storage, optical disc storage (including compressed optical discs, laser discs, optical discs, digital universal optical discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program instructions or code in the form of instructions or data structures and accessible by the electronic device 4000, but not limited thereto.

[0117] The memory 4003 stores computer-readable instructions, and the processor 4001 can read the computer-readable instructions stored in the memory 4003 through the communication bus 4002.

[0118] The computer-readable instructions are executed by one or more processors 4001 to implement the operation and maintenance management methods in the above embodiments.

[0119] Furthermore, this embodiment of the invention provides a storage medium storing computer-readable instructions, which are executed by one or more processors to implement the operation and maintenance management method described above.

[0120] This invention provides a computer program product, which includes computer-readable instructions stored in a storage medium. One or more processors of an electronic device read the computer-readable instructions from the storage medium, load and execute the computer-readable instructions, thereby enabling the electronic device to implement the operation and maintenance management method described above.

[0121] Compared with related technologies, the beneficial effects of the present invention are:

[0122] 1. This invention can strengthen and standardize enterprise process-driven information equipment information management; by designing a process-driven IT operation and maintenance security management platform, it standardizes the approval processes for information equipment network access, maintenance, configuration changes, and information equipment decommissioning, ensuring the availability, integrity, and visibility of information equipment data.

[0123] 2. This invention improves operational efficiency and service quality; it automates process management through a platform, reduces manual intervention, speeds up approvals, and provides detailed process and equipment ledgers, facilitating timely viewing and management by the information management department, thereby enhancing overall operational efficiency and service quality.

[0124] 3. This invention can protect the integrity of data; by using an asymmetric encryption algorithm to encrypt operation and maintenance data and implementing strict access control at process nodes, it ensures that only authorized personnel can access specific data, effectively preventing data leakage and tampering, and protecting the integrity of data.

[0125] It should be understood that although the steps in the flowcharts of the accompanying figures are shown sequentially as indicated by the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the accompanying figures may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the sub-steps or stages of other steps.

[0126] The above description is only a partial embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. An operation and maintenance management method, characterized in that, The method includes: The system acquires the full lifecycle management requirements of information devices, designs a storage model and establishes a form model, and performs structured storage and display of operation and maintenance data based on the management requirements and the form model to obtain a data management framework; the operation and maintenance data includes network access and decommissioning data, maintenance and repair data, and configuration change data. The confidentiality requirements of the multi-level approval process are obtained. The operation and maintenance data are encrypted level by level according to the confidentiality requirements through an encryption algorithm. Combined with the private key decryption and forwarding mechanism of the transit node, the permissions of each process node are dynamically controlled to obtain the approval process. The importance, scope of impact, and urgency of pending business are obtained. The process priority is calculated based on the importance, scope of impact, and urgency using a weighted formula and set weight coefficients. The operation and maintenance scheduling strategy is obtained based on the process priority. The pending business is managed and operated based on the data management framework, approval process, and operation and maintenance scheduling strategy, and the information equipment ledger and process ledger are updated simultaneously to obtain a data-visualized operation and maintenance management platform.

2. The operation and maintenance management method as described in claim 1, characterized in that, Based on the full lifecycle management requirements of the information acquisition device, a storage model and a form model are designed. According to the management requirements and the form model, the operation and maintenance data is structured for storage and display, resulting in a data management framework, including: The system acquires the full lifecycle management requirements of information devices, and designs a storage model by analyzing the field information to be displayed in each form. If the form has sub-tables, multiple related storage models are established. The management requirements include information device network access and decommissioning, maintenance and repair, and configuration changes. The field information includes order number, date, and personnel. A form model is established by binding the storage model, and the field structure of the operation and maintenance data is defined based on the form model. The operation and maintenance data is then mapped and stored in a structured manner with the database table through the storage model to obtain a data management framework. The field structure includes device type, network access time, and maintenance records.

3. The operation and maintenance management method as described in claim 1, characterized in that, The confidentiality requirement for obtaining multi-level approval processes is addressed by encrypting the operation and maintenance data level by level using an encryption algorithm according to the confidentiality requirements. Combined with a private key decryption and forwarding mechanism at intermediate nodes, the permissions of each process node are dynamically controlled to obtain the approval process, including: Multiple process nodes are established according to the information system operation procedures, and operation rules for each process node are defined; the process nodes include information equipment network access, maintenance and repair, configuration change, encryption upgrade, and network decommissioning; the operation rules include submission, approval, and return. Based on the information integrity requirements of each approval stage, the operation and maintenance data is encrypted step by step using an asymmetric encryption algorithm and then transmitted to the user at each approval process node for approval. If the approval fails, the data is returned to the user at the submitting process node through a return process.

4. The operation and maintenance management method as described in claim 3, characterized in that, The step-by-step encryption of the operation and maintenance data using an asymmetric encryption algorithm includes: At each submission process node, an RSA key pair is generated based on the operation and maintenance data to obtain the public key and username of each process node, and to specify the corresponding form fields and approval paths. At the submission process node, the corresponding username and form field are encrypted using the public key, and then nested with the information of subsequent process nodes to generate an encrypted chain. A random message sequence code is generated for the encrypted chain, and the encrypted chain and the message sequence code are combined to obtain an encrypted request packet; the encrypted request packet is decrypted using the private key.

5. The operation and maintenance management method as described in claim 4, characterized in that, The approval process, which is passed down level by level to the user at each approval node, includes: The encrypted request packet of the submission process node is sent to the user of the approval process node; the encrypted request packet of the submission process node includes the public key of the approval process node encrypting the form information and the approver's username; After receiving the encrypted request packet, the process node decrypts the outer layer using the private key to obtain the information of the next process node and the remaining encrypted packet, reassembles the encrypted request packet and forwards it to the next process node, until each of the approval process nodes decrypts the encrypted request packet to obtain the complete form for approval.

6. The operation and maintenance management method as described in claim 1, characterized in that, The process priority calculation, which uses a weighted formula and set weighting coefficients to determine the importance, scope of influence, and urgency, includes: Weights are assigned to the importance, scope of impact, and urgency, respectively. The importance, scope of impact, and urgency are then weighted and summed according to their respective weights to obtain the process priority. The importance is used to assess the degree of relevance of the process to the core business. The scope of impact is used to assess the extent of the process's impact on departments and personnel. The urgency is used to assess the timeliness requirements of the process's response.

7. The operation and maintenance management method as described in claim 1, characterized in that, The step of performing operation and maintenance management on the pending business according to the data management framework, approval process, and operation and maintenance scheduling strategy, and synchronously updating the information equipment ledger and process ledger, includes: A process ledger is automatically generated based on the data management framework and approval process. The process ledger includes the application number, date, personnel, and department. The process ledger is used to grant query permissions to the information management department and supports process status tracking and historical approval details. An information-based equipment ledger is established. When the status of an equipment changes, the equipment ledger is updated after the pending business is completed. The equipment ledger is used for overall management by the management department and for individuals to query the equipment under their name. The equipment ledger includes asset number, name, and responsible person.

8. An operation and maintenance management device, characterized in that, The device includes: The data model building module is used to obtain the full lifecycle management requirements of information devices, design a storage model and establish a form model, and perform structured storage and display of operation and maintenance data according to the management requirements and the form model to obtain a data management framework; the operation and maintenance data includes network access and decommissioning data, maintenance and repair and configuration change data; The process encryption and access control module is used to obtain the confidentiality requirements of multi-level approval processes. It encrypts the operation and maintenance data level by level according to the confidentiality requirements through encryption algorithms, and combines the private key decryption and forwarding mechanism of the transit node to dynamically control the permissions of each process node to obtain the approval process. The priority dynamic calculation module is used to obtain the importance, scope of impact, and urgency of the business to be processed, calculate the process priority based on the importance, scope of impact, and urgency using a weighted formula and set weight coefficients, and obtain the operation and maintenance scheduling strategy based on the process priority. The ledger update and visualization module is used to perform operation and maintenance management on the pending business according to the data management framework, approval process and operation and maintenance scheduling strategy, and to update the information equipment ledger and process ledger simultaneously to obtain a data-visualized operation and maintenance management platform.

9. An electronic device, characterized in that, include: At least one processor and at least one memory, wherein, The memory stores computer-readable instructions; The computer-readable instructions are executed by one or more of the processors, causing the electronic device to implement the operation and maintenance management method as described in any one of claims 1 to 7.

10. A storage medium having computer-readable instructions stored thereon, characterized in that, The computer-readable instructions are executed by one or more processors to implement the operation and maintenance management method as described in any one of claims 1 to 7.

Images