License node communication method and device based on end-to-end operation and maintenance all-in-one machine, and medium

Abstract

The invention discloses a communication method and device based on license nodes of an end-to-end operation and maintenance all-in-one machine, and a medium, and the method comprises the steps: searching all nodes with license deployed in a network, finding out an expired license node, employing a recommendation method based on node similarity to find out an associated license node whose similarity with the expired license node is higher than a threshold value, and forming a node set; socket API communication is adopted between the privacy calculation module and the Socket, and a Socket communication link is allocated to each node of the node set to enable the nodes to be intercommunicated; the privacy calculation module comprises a trusted execution environment layer and a privacy calculation layer, and the privacy calculation layer is responsible for performing privacy calculation on data in the node set; the trusted execution environment layer is responsible for trusted computing of an upper-layer application; and storing the privacy calculation result in a database table. According to the method, for potential safety hazards brought to enterprises by license safety limitation of commercial software, commercial applications are isolated through privacy calculation hierarchy, and the potential safety hazards are effectively solved while commercial benefits are guaranteed.

Description

Technical Field

[0001] This invention belongs to the field of privacy computing, specifically relating to a method, device, and medium for communication between license nodes of an end-to-end integrated operation and maintenance machine. Background Technology

[0002] CIO, short for Concurrent Input / Output, is an important part of the Omron PLC's memory. It is primarily used to store data for input / output operations with external devices (such as sensors and actuators). The setting range is between -20 and 20. To alleviate the "ping-pong switching" phenomenon in socket data transmission, setting it to 20 reduces the switching delay.

[0003] An end-to-end monitoring platform refers to a monitoring system that integrates multiple monitoring components and tools, enabling comprehensive monitoring and management of the entire application system, including the entire application chain from the client to the server.

[0004] The core of the "Information Technology Application Innovation Database" lies in its compliance with national information security and data autonomy requirements. It must support domestic independent research and development and technological innovation, and be able to replace foreign products in critical information infrastructure, thereby ensuring national information security. Specifically, the "Information Technology Application Innovation Database" follows domestic standards and specifications, is well-compatible with domestically produced hardware platforms, and possesses independent intellectual property rights through independent research and development and innovation.

[0005] A wide table, literally speaking, is a database table with a large number of fields. It typically refers to a database table that links together metrics, dimensions, and attributes related to a business theme.

[0006] Data redistribution: Data redistribution refers to the process of redistributing the data of one or more tables to various nodes according to the distribution key in the optimal plan when performing distributed computing on multiple tables in a distributed database.

[0007] CN (Coordinator Node): A node in a distributed database that is responsible for coordinating and managing the entire distributed database cluster. It is responsible for receiving requests from clients, coordinating the operations of other nodes in the cluster, and finally returning the results to the client.

[0008] DN (Datanode Node): A node in a distributed database that is responsible for storing data.

[0009] SQL (Structured Query Language) is a standardized language for managing and manipulating relational databases. SQL provides users with the ability to perform various database operations, including querying data, updating data, inserting new data, deleting data, and managing database structures.

[0010] Join: An SQL statement used to combine data from a set of license nodes based on common fields between these tables.

[0011] Node_ID (Node Number): A globally unique number assigned to each license node in the cluster in the distributed database.

[0012] Privacy computation (or privacy-preserving computation) is a technology that enables data analysis and computation while ensuring that the data is not disclosed to the public.

[0013] With the rapid development of intelligent operation and maintenance, cloud computing, and big data computing, the data demand of various industries is rising sharply, and the increasing accumulation of central data is placing higher and higher demands on the deployment and delivery of integrated machines. Domestically developed databases are widely used in various industries, covering finance, telecommunications, government, manufacturing, healthcare, and many other fields. By providing high-performance, secure, and stable database solutions, domestically developed databases help enterprises improve their data management capabilities and ensure information security. With the continuous development of information technology and the advancement of the national information security strategy, the market prospects for domestically developed databases are very broad. However, commercial software licenses may include specific update and maintenance terms, which may limit an enterprise's ability to obtain the latest features or security updates. If an enterprise wants to keep the software up-to-date, it may need to pay additional fees or accept the vendor's control. The security restrictions of commercial software licenses pose security risks to enterprises. Summary of the Invention

[0014] This invention addresses the security risks posed to enterprises by license security restrictions on commercial software by providing a method, device, and medium for end-to-end operation and maintenance appliance license node communication. It isolates commercial applications through privacy computing layers, protecting commercial interests while effectively solving security risks.

[0015] To achieve the above objectives, the present invention adopts the following technical solution: A method for communication between license nodes of an end-to-end integrated operation and maintenance appliance, wherein the end-to-end integrated operation and maintenance appliance includes a license management module and a privacy computing module, the method comprising the following steps: Within the network, all nodes with deployed licenses are searched, expired license nodes are found, and then a recommendation method based on node similarity is used to find associated license nodes with a similarity higher than a threshold with the expired license nodes, forming a node set; The privacy computing module communicates with the Socket using the Socket API, allocating a Socket communication link to each node in the node set to enable the nodes to communicate with each other; The privacy computation module consists of a trusted execution environment layer and a privacy computation layer. The privacy computation layer is responsible for performing privacy computations on data within the node set; the trusted execution environment layer is responsible for trusted computations of upper-layer applications. The results of privacy calculations are stored in a database table.

[0016] To optimize the above technical solution, the specific measures also include: Furthermore, the recommendation method based on node similarity is specifically a collaborative filtering algorithm; the collaborative filtering algorithm scores the similarity of nodes and recommends associated license nodes based on the similarity.

[0017] Furthermore, the similarity metric is cosine similarity, and the expression for cosine similarity is as follows: sim(i,j)=cos( c i , c j ) In the formula, sim(i,j) represents the similarity between the i-th node and the j-th node, and cos( c i , c j ) represents the i-th node c i and the j-th node c j Cosine similarity between them.

[0018] Furthermore, the similarity is measured by the Pearson correlation coefficient.

[0019] Furthermore, in the privacy computing module, different encodings of the Socket are used to represent the opening and closing of the end-to-end operation and maintenance integrated machine control interface, so as to realize the request to send or receive different control command information.

[0020] Furthermore, the privacy computation layer is responsible for performing privacy computations on the data within the node set, specifically as follows: Privacy computation is achieved through cryptographic and blockchain technologies, including homomorphic encryption, differential privacy, and stealth transmission; and smart contracts and consortium blockchains.

[0021] Furthermore, the trusted execution environment layer is responsible for trusted computing in upper-layer applications, specifically as follows: A CPU-based trust chain is constructed during system startup and runtime, passing the trust relationship up from the CPU's embedded instructions all the way to the operating system layer. Simultaneously, by extending the Linux operating system and enabling integrity measurement functionality, the trust chain is extended to the application layer, and all integrity measurement values ​​are stored within the hardware device. Finally, a trusted execution environment is built through remote authentication technology to achieve trusted computing for upper-layer applications.

[0022] Furthermore, storing the privacy computation results in a database table specifically involves: The license node information is stored in the data table demo_userprofilecrowd, which is used for user profile analysis. The calculate labels field in this data table records the list of profile labels to be analyzed in the form of a JSON array. The profile analysis results are stored in the data table demo userprofile crowd overview. The overview.result field stores the profile analysis results for the specified labels, and the userprofile date field records the date of the data used for profile analysis.

[0023] The present invention also proposes an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, it implements the method described above for communication between license nodes of an end-to-end integrated operation and maintenance machine.

[0024] The present invention also proposes a computer-readable storage medium storing a computer program that enables a computer to execute the method described above for communication between end-to-end operation and maintenance appliance license nodes.

[0025] The beneficial effects of this invention are: This invention addresses the security risks posed by commercial software license security restrictions to enterprises by isolating commercial applications through layered privacy computing. This effectively resolves security risks while protecting commercial interests. The invention reduces computational complexity while ensuring the security of privacy data computation. The privacy computing module performs layered computation using domestically produced equipment. The privacy computing layer is responsible for performing privacy computations on data within the node set. The trusted execution environment layer utilizes Zhaoxin ZX-TCT trusted computing technology for remote authentication, constructing a more controllable trusted execution environment to achieve trusted computation for upper-layer applications. Finally, the privacy computing results are stored in the form of a wide data table, optimizing the retrieval of all license nodes participating in privacy computing and related data within the network. Attached Figure Description

[0026] Figure 1 This is the overall architecture diagram of the end-to-end operation and maintenance appliance.

[0027] Figure 2 A basic flowchart for generating profile analysis for wide tables of data. Detailed Implementation

[0028] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0029] Example 1 This invention proposes a method for communication between license nodes of an end-to-end integrated operation and maintenance machine. The overall architecture of the end-to-end integrated operation and maintenance machine is as follows: Figure 1 As shown, it includes a license management module and a privacy computing module. The method includes the following steps: Within the network, all nodes with deployed licenses are searched to identify expired license nodes. Then, a node similarity-based recommendation method is used to find associated license nodes with a similarity higher than a threshold to the expired license nodes, forming a node set. The node similarity-based recommendation method is specifically a collaborative filtering algorithm. The collaborative filtering algorithm scores the similarity of nodes and recommends associated license nodes based on the similarity.

[0030] Similarity metrics can include cosine similarity or Pearson correlation coefficient, etc.

[0031] The expression for cosine similarity is as follows: sim(i,j)=cos( c i ,c j ) In the formula, sim(i,j) represents the similarity between the i-th node and the j-th node, and cos( c i , c j ) represents the i-th node c i and the j-th node c j Cosine similarity between them.

[0032] The privacy computing module and the Socket communicate via the Socket API. Each node in the node set is allocated a Socket communication link to enable inter-node communication. Within the privacy computing module, different Socket codes represent the opening and closing of the end-to-end integrated maintenance machine control interface, enabling the sending and receiving of different control command information. In this embodiment, Socket codes CIO00000 to CIO00003 represent the opening and closing of the integrated machine control interface, respectively. When the integrated machine stops or starts working, this method is used to send and receive different control command information, such as system data. CIO00100 to CIO00103 represent different integrated machine device numbers set in the underlying devices, and a specific integrated machine is started according to the command.

[0033] The privacy computing module comprises a trusted execution environment layer and a privacy computing layer. The privacy computing layer is responsible for performing privacy-preserving computations on data within the node set; the trusted execution environment layer is responsible for trusted computations in upper-layer applications; specifically, the privacy computing layer performs privacy-preserving computations on data within the node set through cryptographic and blockchain technologies. Cryptographic technologies include homomorphic encryption, differential privacy, and accidental transmission; blockchain technologies include smart contracts and consortium blockchains. Practical applications of privacy computing based on domestically produced chips demonstrate that, while avoiding the risk of data leakage, privacy computing can assist multiple parties in generating models suitable for their own businesses. This not only helps clients reduce additional costs incurred due to violations of data-related laws and regulations and data leakage, but also reduces the operational costs of marketing campaigns through accurate models.

[0034] The privacy computing task information table is shown in Table 1.

[0035] Table 1

[0036] The Trusted Execution Environment (TEX) layer is responsible for trusted computing in upper-layer applications, specifically as follows: Utilizing Zhaoxin's ZX-TCT trusted computing technology, a trust chain based on the Zhaoxin CPU is constructed during system startup and runtime, passing the trust relationship upwards from the Zhaoxin CPU's embedded instructions to the operating system layer. Simultaneously, by extending the Linux operating system and enabling Integrity Measurement (IMA) functionality, the trust chain is extended to the application layer. Furthermore, all integrity measurement values ​​are stored within domestically developed TPM2.0 hardware devices to ensure their trustworthiness and immutability. Finally, through remote authentication technology, a trusted execution environment is built to achieve trusted computing for upper-layer applications. All execution modules, node-defined operators, and node data of the platform are maintained within the trust chain to ensure their integrity and immutability.

[0037] The results of privacy-preserving computations are stored in a database table. Specifically: The basic process of generating profile analysis from wide data tables is as follows: Figure 2 As shown, license node information (such as license node distribution analysis and indicator analysis configuration) is stored in the data table demo_userprofilecrowd for user profile analysis. The calculate labels field in this data table records the list of profile labels to be analyzed in the form of a JSON array. The profile analysis results are stored in the data table demo userprofile crowd overview. The overview.result field stores the profile analysis results for the specified labels, and the userprofile date field records the date of the data used for profile analysis.

[0038] Example 2 This invention proposes an electronic device, including: a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the method for communication between license nodes of an end-to-end integrated operation and maintenance machine as described in Embodiment 1.

[0039] Example 3 This invention proposes a computer-readable storage medium storing a computer program that enables a computer to execute the method for communication between license nodes of an end-to-end integrated operation and maintenance machine as described in Embodiment 1.

[0040] In the embodiments disclosed in this application, a computer storage medium may be a tangible medium that may contain or store programs for use by or in conjunction with an instruction execution system, apparatus, or device. The computer storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of computer storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0041] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed in this application can be implemented in electronic hardware or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0042] The above are merely preferred embodiments of the present invention. The scope of protection of the present invention is not limited to the above embodiments. All technical solutions falling within the scope of the present invention's concept are within the scope of protection of the present invention. It should be noted that for those skilled in the art, any improvements and modifications made without departing from the principles of the present invention should be considered within the scope of protection of the present invention.

Claims

1. A method for communication between license nodes of an end-to-end integrated operation and maintenance machine, characterized in that, The end-to-end operation and maintenance appliance includes a license management module and a privacy computing module. The method includes the following steps: Within the network, all nodes with deployed licenses are searched, expired license nodes are found, and then a recommendation method based on node similarity is used to find associated license nodes with a similarity higher than a threshold with the expired license nodes, forming a node set; The privacy computing module communicates with the Socket using the Socket API, allocating a Socket communication link to each node in the node set to enable the nodes to communicate with each other; The privacy computation module consists of a trusted execution environment layer and a privacy computation layer. The privacy computation layer is responsible for performing privacy computations on data within the node set; the trusted execution environment layer is responsible for trusted computations of upper-layer applications. The results of privacy calculations are stored in a database table.

2. The method for communication between license nodes of an end-to-end integrated operation and maintenance machine as described in claim 1, characterized in that, The recommendation method based on node similarity is specifically a collaborative filtering algorithm; the collaborative filtering algorithm scores the similarity of nodes and recommends related license nodes based on the similarity.

3. The method for communication between license nodes of an end-to-end integrated operation and maintenance machine as described in claim 2, characterized in that, The similarity metric is cosine similarity, and the expression for cosine similarity is as follows: sim(i,j)=cos( c i , c j ) In the formula, sim(i,j) represents the similarity between the i-th node and the j-th node, and cos( c i , c j ) represents the i-th node c i and the j-th node c j Cosine similarity between them.

4. The method for communication between license nodes of an end-to-end integrated operation and maintenance machine as described in claim 2, characterized in that, The similarity metric is the Pearson correlation coefficient.

5. The method for communication between license nodes of an end-to-end integrated operation and maintenance machine as described in claim 1, characterized in that, In the privacy computing module, different encodings of the Socket are used to represent the opening and closing of the end-to-end operation and maintenance integrated machine control interface, so as to realize the request to send or receive different control command information.

6. The method for communication between license nodes of an end-to-end integrated operation and maintenance machine as described in claim 1, characterized in that, The privacy computation layer is responsible for performing privacy computations on the data within the node set, specifically as follows: Privacy computation is achieved through cryptographic and blockchain technologies, including homomorphic encryption, differential privacy, and stealth transmission; and smart contracts and consortium blockchains.

7. The method for communication between license nodes of an end-to-end integrated operation and maintenance machine as described in claim 1, characterized in that, The Trusted Execution Environment layer is responsible for trusted computing in upper-layer applications, specifically as follows: A CPU-based trust chain is constructed during system startup and runtime, passing the trust relationship up from the CPU's embedded instructions all the way to the operating system layer. Simultaneously, by extending the Linux operating system and enabling integrity measurement functionality, the trust chain is extended to the application layer, and all integrity measurement values ​​are stored within the hardware device. Finally, a trusted execution environment is built through remote authentication technology to achieve trusted computing for upper-layer applications.

8. The method for communication between license nodes based on an end-to-end integrated operation and maintenance machine as described in claim 1, characterized in that, The specific steps for storing the privacy calculation results in a database table are as follows: The license node information is stored in the data table demo_userprofilecrowd, which is used for user profile analysis. The calculate labels field in this data table records the list of profile labels to be analyzed in the form of a JSON array. The profile analysis results are stored in the data table demo userprofile crowd overview. The overview.result field stores the profile analysis results for the specified labels, and the userprofile date field records the date of the data used for profile analysis.

9. An electronic device, characterized in that, include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, it implements the method for end-to-end maintenance appliance license node communication as described in any one of claims 1-8.

10. A computer-readable storage medium storing a computer program, characterized in that, The computer program causes the computer to execute the method for end-to-end operation and maintenance integrated machine license node communication as described in any one of claims 1-8.

Images