Business resource configuration method and device, computer device and storage medium

CN123035170APending Publication Date: 2026-11-03CHINA TELECOM CORP LTD TECHNOLOGY INNOVATION CENTER +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202610993801.5
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-07-06
Publication Date
2026-11-03

AI Technical Summary

Technical Problem

Existing traditional optical line terminals (OLTs) adopt an unconditional trust mechanism for the service priority values ​​reported or configured locally by optical network units (ONUs), lacking corresponding legality verification methods. This allows malicious users to tamper with terminal parameters to forge high-priority service traffic, illegally seize the operator's dedicated guaranteed bandwidth, and affect the fair use of the network and the security of the operator's value-added service operation.

Method used

After receiving a service resource configuration request from a user terminal, the management platform generates resource configuration information containing a verification code and bandwidth configuration information. It then performs security verification through an optical line terminal and executes the service resource configuration only after the verification passes, ensuring its legitimacy.

Benefits of technology

Verification codes are used to authenticate the legitimacy of service configurations, intercept forged or tampered illegal service configuration requests, improve the security of network service resource scheduling, ensure that legitimate users' target services are allocated the corresponding bandwidth resources normally, and balance the flexibility of service activation with the security of network resource management.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN123035170A_ABST
    Figure CN123035170A_ABST
Patent Text Reader

Abstract

The application discloses a service resource configuration method and device, computer equipment and a storage medium. It belongs to the technical field of network security. The method can specifically include: in the case that a service resource configuration request for a target service is received from a user terminal, determining resource configuration information of the target service according to the service resource configuration request; wherein the resource configuration information includes a check code and bandwidth configuration information. The resource configuration information is sent to an optical line terminal; wherein the resource configuration information is used for the optical line terminal to perform security check based on the check code, and in the case that the check result is passed, the optical line terminal performs service resource configuration for the target service based on the bandwidth configuration information. The application can realize the linkage of service bandwidth configuration issuing, security check and resource deployment process, so that the target service of a legal user can be normally allocated corresponding bandwidth resources, and the flexibility of service opening and the safety of network resource management and control are taken into account.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of network security technology, specifically to a business resource configuration method, apparatus, computer equipment, and storage medium. Background Technology

[0002] With the rapid popularization of new services such as high-quality video conferencing, ultra-high-definition live streaming, cloud e-sports, and high-speed enterprise data transmission, market demand is forcing major operators to launch scenario-based flexible broadband value-added services and gradually build a flexible and intelligent broadband operation system.

[0003] Traditional optical line terminals (OLTs) rely on an unconditional trust mechanism for service priority values ​​reported or configured locally by optical network units (ONUs), lacking corresponding legitimacy verification measures. Malicious users can tamper with terminal parameters to forge high-priority service traffic, illegally seizing the operator's dedicated bandwidth. This not only results in the theft of network bandwidth resources but also easily causes congestion and increased latency for ordinary users, seriously affecting fair network use and the security of operators' value-added services. Summary of the Invention

[0004] Therefore, it is necessary to provide a business resource configuration method, apparatus, computer equipment, and storage medium to improve the security of business resource configuration in response to the above-mentioned technical problems.

[0005] Firstly, this application provides a business resource configuration method applied to a management platform, the method comprising:

[0006] Upon receiving a service resource configuration request for a target service from a user terminal, the resource configuration information for the target service is determined based on the service resource configuration request; wherein, the resource configuration information includes a checksum and bandwidth configuration information;

[0007] Send resource configuration information to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and if the verification result is successful, to perform service resource configuration for the target service based on the bandwidth configuration information.

[0008] In one embodiment, sending resource configuration information to the optical line terminal includes:

[0009] Resource configuration information is sent to the optical network unit so that the optical network unit can send an OMCI message carrying the resource configuration information to the optical line terminal.

[0010] In one embodiment, the method further includes:

[0011] Based on the service resource configuration request, obtain the MAC information of the optical network unit associated with the user terminal;

[0012] Generate a checksum based on MAC information.

[0013] In one embodiment, the service resource configuration request carries at least one of the following: the bandwidth value, the activation time, and the service type corresponding to the service.

[0014] In one embodiment, the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0015] Secondly, this application provides another method for configuring service resources in an optical line terminal, the method comprising:

[0016] Receive resource configuration information initiated by the management platform; wherein, the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a check code and bandwidth configuration information;

[0017] Based on the checksum, the security of the resource configuration information is verified to obtain the verification result.

[0018] If the verification result is successful, service resources are configured for the target service based on the bandwidth configuration information.

[0019] In one embodiment, the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0020] In one embodiment, the resource configuration information is security verified based on a checksum to obtain the verification result, including:

[0021] Determine the verification field based on the verification code;

[0022] The matching result is obtained by matching the verification field with the MAC information in the resource configuration information;

[0023] Based on the matching results, determine the verification result.

[0024] In one embodiment, service resource configuration for the target service is performed based on bandwidth configuration information, including:

[0025] Based on the CoS value and VLAN identifier in the bandwidth configuration information, determine the DSCP value of the service data packet corresponding to the target service.

[0026] In one embodiment, receiving resource configuration information initiated by the management platform includes:

[0027] The system receives OMCI messages sent by the optical network unit (ONU); the OMCI messages carry resource configuration information; the OMCI messages are sent by the ONU after receiving resource configuration information from the management platform.

[0028] In one embodiment, if the verification result is successful, the method further includes:

[0029] Send a verification pass message to the optical network unit so that the optical network unit can perform service resource configuration for the target service based on the resource configuration information.

[0030] Thirdly, this application provides a business resource configuration device configured on a management platform, the device comprising:

[0031] The first determining module is used to determine the resource configuration information of the target service based on the service resource configuration request sent by the user terminal; wherein the resource configuration information includes a check code and bandwidth configuration information.

[0032] The first sending module is used to send resource configuration information to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and to perform service resource configuration for the target service based on the bandwidth configuration information if the verification result is successful.

[0033] Fourthly, this application provides another method for configuring service resources in an optical line terminal, the device comprising:

[0034] The first receiving module is used to receive resource configuration information initiated by the management platform. The resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service. The resource configuration information includes a checksum and bandwidth configuration information.

[0035] The verification module is used to perform security verification on resource configuration information based on the verification code and obtain the verification result.

[0036] The configuration module is used to configure service resources for the target service based on the bandwidth configuration information, provided that the verification result is satisfactory.

[0037] Fifthly, this application also provides a computer device, which includes a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0038] Upon receiving a service resource configuration request for a target service from a user terminal, the resource configuration information for the target service is determined based on the service resource configuration request; wherein, the resource configuration information includes a checksum and bandwidth configuration information;

[0039] Send resource configuration information to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and if the verification result is successful, to perform service resource configuration for the target service based on the bandwidth configuration information.

[0040] Sixthly, this application also provides another computer device, which includes a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0041] Receive resource configuration information initiated by the management platform; wherein, the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a check code and bandwidth configuration information;

[0042] Based on the checksum, the resource configuration information is security verified to obtain the verification result.

[0043] If the verification result is successful, service resources are configured for the target service based on the bandwidth configuration information.

[0044] In a seventh aspect, this application also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, performs the following steps:

[0045] Upon receiving a service resource configuration request for a target service from a user terminal, the resource configuration information for the target service is determined based on the service resource configuration request; wherein, the resource configuration information includes a checksum and bandwidth configuration information;

[0046] Send resource configuration information to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and if the verification result is successful, to perform service resource configuration for the target service based on the bandwidth configuration information.

[0047] Eighthly, this application also provides another computer-readable storage medium on which a computer program is stored, which, when executed by a processor, performs the following steps:

[0048] Receive resource configuration information initiated by the management platform; wherein, the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a check code and bandwidth configuration information;

[0049] Based on the checksum, the resource configuration information is security verified to obtain the verification result.

[0050] If the verification result is successful, service resources are configured for the target service based on the bandwidth configuration information.

[0051] Ninthly, this application also provides a computer program product comprising a computer program that, when executed by a processor, performs the following steps:

[0052] Upon receiving a service resource configuration request for a target service from a user terminal, the resource configuration information for the target service is determined based on the service resource configuration request; wherein, the resource configuration information includes a checksum and bandwidth configuration information;

[0053] Send resource configuration information to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and if the verification result is successful, to perform service resource configuration for the target service based on the bandwidth configuration information.

[0054] In a tenth aspect, this application also provides another computer program product, which includes a computer program that, when executed by a processor, performs the following steps:

[0055] Receive resource configuration information initiated by the management platform; wherein, the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a check code and bandwidth configuration information;

[0056] Based on the checksum, the resource configuration information is security verified to obtain the verification result.

[0057] If the verification result is successful, service resources are configured for the target service based on the bandwidth configuration information.

[0058] The aforementioned service resource configuration method, apparatus, computer equipment, and storage medium, upon receiving a service resource configuration request for a target service from a user terminal, determine the resource configuration information for the target service based on the request; wherein the resource configuration information includes a checksum and bandwidth configuration information. The resource configuration information is then sent to the optical line terminal; wherein the resource configuration information is used by the optical line terminal to perform security verification based on the checksum, and, if the verification result is successful, to perform service resource configuration for the target service based on the bandwidth configuration information. In this application, the management platform first generates resource information containing a verification code and bandwidth configuration based on the user's target service configuration request and sends it to the optical line terminal. The optical line terminal first completes security verification through the verification code. Only after the verification is successful can the service bandwidth resources of the target service be deployed. This can solve the technical problems of existing networks where devices lack pre-verification and configuration information is easily tampered with, resulting in illegal occupation of service bandwidth resources. On the one hand, the verification code is used to identify the legitimacy of service configuration and intercept forged or tampered illegal service configuration requests, thereby improving the security of network service resource scheduling. On the other hand, it realizes the linkage of service bandwidth configuration distribution, security verification, and resource deployment processes, ensuring that legitimate users' target services can be allocated corresponding bandwidth resources normally, balancing the flexibility of service activation and the security of network resource management. Attached Figure Description

[0059] Figure 1 This is an application environment diagram of a business resource configuration method provided in this embodiment;

[0060] Figure 2 This is a flowchart illustrating the first business resource configuration method provided in this embodiment;

[0061] Figure 3 This is a schematic diagram of the process for generating a verification code provided in this embodiment;

[0062] Figure 4 This is a flowchart illustrating the second business resource configuration method provided in this embodiment;

[0063] Figure 5 This is a schematic diagram illustrating the process by which an optical network unit, based on resource configuration information, performs service resource configuration for a target service in this embodiment.

[0064] Figure 6 This is a signaling interaction diagram of the service resource configuration method provided in this embodiment;

[0065] Figure 7 This is a structural block diagram of a service resource configuration device provided in this embodiment;

[0066] Figure 8 This is a structural block diagram of another service resource configuration device provided in this embodiment;

[0067] Figure 9 This is an internal structural diagram of the computer device provided in this embodiment. Detailed Implementation

[0068] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0069] The service resource configuration method provided in this application embodiment can be applied to, for example, Figure 1 In the application environment shown, when a user terminal has a service resource configuration requirement (e.g., additional dedicated bandwidth is needed to improve the gaming experience), it sends a service resource configuration request to the management platform. Upon receiving the service resource configuration request for the target service from the user terminal, the management platform determines the resource configuration information for the target service based on the request. This resource configuration information includes a checksum and bandwidth configuration information. The management platform then sends the resource configuration information to the optical line terminal (OLT). This resource configuration information is used by the OLT to perform security verification based on the checksum, and if the verification passes, the OLT executes the service resource configuration for the target service based on the bandwidth configuration information.

[0070] The management platform refers to the comprehensive management and control system (business management platform) for flexible intelligent connected services deployed on the operator's side. It is an upper-layer business scheduling and management device, independent of the Optical Line Terminal (OLT) and Optical Network Unit (ONU) access layer hardware. It is the core service device that connects to user terminals and generates and distributes flexible service configurations. The Optical Line Terminal (OLT) is the core hardware device of the GPON (Gigabit-capable Passive Optical Network) central office, deployed in the operator's data center. It is a central office aggregation device for Passive Optical Network (PON), connecting to the operator's metropolitan area network / backbone network upstream and the Optical Distribution Network (ODN) downstream, uniformly managing all user-side ONUs / optical modem terminals.

[0071] In one embodiment, Figure 2 This is a flowchart illustrating a business resource configuration method according to an embodiment of this application, applied to... Figure 1 Taking the management platform in the example, this method includes the following steps:

[0072] S201: Upon receiving a service resource configuration request for a target service from a user terminal, determine the resource configuration information for the target service based on the service resource configuration request.

[0073] The resource configuration information includes a checksum and bandwidth configuration information. A user terminal refers to a user-side terminal device with service resource configuration requirements (e.g., elastic bandwidth configuration requirements), such as a mobile phone, computer, or other smart terminal device, or a smart wearable device such as a smartwatch or smart bracelet. The target service refers to the service that requires elastic bandwidth resource configuration, such as games or video services. A service resource configuration request refers to a resource configuration request message sent when there is a need to optimize the service experience.

[0074] Optionally, in this embodiment, the user terminal may send a business resource configuration request to the management platform based on a client application or other online channels.

[0075] Optionally, in this embodiment, the service resource configuration request carries at least one of the following: the bandwidth value corresponding to the service, the activation time (e.g., 1 day, 1 month, 2 months, 1 year, etc.), and the service type. The bandwidth value corresponding to the service refers to the bandwidth value corresponding to the target service, such as 1G, 2G, etc.

[0076] Optionally, in this embodiment, the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier. DIPA (Destination IP Address) refers to the IP address of the target service associated with it, such as the IP address of a cloud gaming server. CoS (Class of Service) value refers to the service priority; the higher the priority, the higher the CoS value. For example, CoS=3 for high-priority services and CoS=0 for ordinary internet access. MAC information refers to the MAC (Media Access Control Address) information of the optical network unit associated with the target service, such as 00:1A:2B:3C:4D:5E. VLAN (Virtual Local Area Network) identifier refers to the identifier of the virtual local area network associated with the target service.

[0077] An optional implementation involves sending a query request to a query device upon receiving a service resource configuration request for a target service from a user terminal, so that the query device can provide the management platform with the resource configuration information for the target service based on the service resource configuration request.

[0078] Another optional implementation involves determining the resource configuration information for the target service based on the service resource configuration request and associated mapping rules upon receiving a service resource configuration request from a user terminal. Specifically, based on the service type and associated mapping rules, DIPA, CoS value, and VLAN identifier can be obtained. The principle is as follows: different services have different latency and bandwidth requirements, and the platform presets fixed mapping relationships: for example, cloud e-sports services are bound to a dedicated server destination IP (DIPA=10.200.12.198), with high priority CoS=3 and dedicated isolation VLAN configured as VLAN=100; ordinary internet access matches low priority parameters. Based on the bandwidth value corresponding to the service, a DBA template is determined. The principle is as follows: the elastic bandwidth value requested by the user is automatically converted into GPON uplink scheduling parameters Assure (guaranteed bandwidth) and Max (peak bandwidth), and matched with the corresponding DBA (Dynamic Bandwidth Allocation) dynamic bandwidth allocation template. Subsequently, the OLT allocates dedicated uplink bandwidth resources to the service through the DBA.

[0079] S202, send resource configuration information to the optical line terminal.

[0080] Among them, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and to perform service resource configuration for the target service based on the bandwidth configuration information if the verification result is successful.

[0081] One possible implementation is that the management platform directly sends resource configuration information to the optical line terminal.

[0082] Another alternative implementation involves sending resource configuration information to an intermediate device (e.g., an optical network unit). This allows the intermediate device to forward the resource configuration information to the optical line terminal.

[0083] Another optional implementation involves sending resource configuration information to the optical network unit (ONU) so that the ONU can send an OMCI (ONU Management and Control Interface) message carrying the resource configuration information to the optical line terminal (OLT). In this embodiment, upon receiving the resource configuration information from the management platform, the ONU generates an OMCI message based on the resource configuration information and the OMCI template, and then sends the OMCI message to the OLU.

[0084] In this embodiment, one optional implementation of the security verification based on the checksum by the optical line terminal is to determine whether the checksum is in the whitelist; if so, the verification result is passed; otherwise, the verification result is failed. Another optional implementation is to decrypt the checksum using a public key pre-sent by the management platform to obtain a verification code. The resource configuration information also carries a standard code. The verification code is compared with the standard code, and the verification result is determined based on the comparison result.

[0085] The aforementioned service resource configuration method, upon receiving a service resource configuration request for a target service from a user terminal, determines the resource configuration information for the target service based on the request. This resource configuration information includes a checksum and bandwidth configuration information. The resource configuration information is then sent to the optical line terminal (OLT). This information is used by the OLT to perform security verification based on the checksum, and if the verification passes, to execute service resource configuration for the target service based on the bandwidth configuration information. In this application, the management platform first generates resource information containing a checksum and bandwidth configuration based on the user's target service configuration request and sends it to the OLT. The OLT first completes security verification using the checksum, and only after successful verification is the service bandwidth resource for the target service deployed. This solves the technical problems of existing networks where devices lack pre-verification and configuration information is easily tampered with, leading to illegal occupation of service bandwidth resources. On one hand, it uses the checksum to verify the legitimacy of service configuration, intercepting forged or tampered illegal service configuration requests and improving the security of network service resource scheduling. On the other hand, it achieves linkage between service bandwidth configuration distribution, security verification, and resource deployment processes, ensuring that legitimate users' target services can be allocated corresponding bandwidth resources normally, balancing service activation flexibility with network resource management security.

[0086] In one embodiment, to quickly generate a checksum, such as Figure 3 As shown, an optional implementation of a business resource configuration method includes:

[0087] S301: Based on the service resource configuration request, obtain the MAC information of the optical network unit associated with the user terminal.

[0088] An optional implementation is that the service resource configuration request carries the MAC information of the optical network unit associated with the user terminal or the target service.

[0089] Another alternative implementation is to determine the MAC information of the optical network unit associated with the user terminal based on the service type in the service resource configuration request and the associated mapping rules.

[0090] Another alternative implementation is to obtain the MAC information of the optical network unit associated with the user terminal based on the message forwarding path of the service resource configuration request.

[0091] S302 generates a checksum based on MAC information.

[0092] One possible implementation is to preprocess the MAC address to obtain a checksum. The preprocessing method can include encryption or hashing.

[0093] Another optional implementation involves converting the MAC information into an integer and multiplying it to obtain a calculation result. A checksum is generated based on this result. The calculation method is pre-sent to the optical line terminal (OLT) so that upon receiving the resource configuration information, the OLT can perform a symmetric operation on the checksum to obtain the corresponding check field. This check field is then compared with the target field in the MAC information, and the verification result is obtained based on the comparison result. Alternatively, the calculation method can be sent to the OLT so that upon receiving the resource configuration information, the OLT can perform the same calculation on the MAC information in the resource configuration information to obtain a verification code. This verification code is then compared with the checksum, and the verification result is obtained based on the comparison result. For example, an optional implementation for generating the checksum is to convert the entire 48-bit MAC address into a 48-bit unsigned large integer. An arithmetic operation is performed on this integer: MAC value = MAC value + 1. The last 8 bits of the result are then used as the checksum.

[0094] In this embodiment, by extracting the MAC information of the optical network unit corresponding to the user terminal and generating a verification code, the verification code can be strongly bound to the unique identifier of the device hardware. Each terminal generates an independent and exclusive verification certificate, avoiding the problems of verification code reuse and impersonation. This provides a reliable basis for verifying the legality of the configuration on the optical line terminal side, effectively distinguishing between legitimate terminals and illegal terminals that have forged and tampered with the configuration, improving the security of the flexible service configuration distribution process, and preventing unauthorized devices from stealing high-priority bandwidth resources.

[0095] In one embodiment, Figure 4 This is a flowchart illustrating a business resource configuration method according to an embodiment of this application, applied to... Figure 1 Taking the optical line terminal in the image as an example, the method includes the following steps:

[0096] S401 receives resource configuration information initiated by the management platform.

[0097] The resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes the check code and bandwidth configuration information.

[0098] One alternative implementation involves receiving resource configuration information directly sent by the management platform.

[0099] Another optional implementation is to receive an OMCI message sent by an optical network unit; wherein the OMCI message carries resource configuration information; the OMCI message is sent by the optical network unit upon receiving resource configuration information sent by the management platform.

[0100] Optionally, in this embodiment, the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0101] It should be noted that the specific method by which the management platform determines resource configuration information based on business resource configuration requests is described in detail in the above embodiments and will not be repeated here.

[0102] S402 performs security verification on resource configuration information based on the checksum and obtains the verification result.

[0103] One optional implementation involves obtaining a local whitelist, wherein the whitelist contains pre-configured verification codes that meet the requirements. The verification codes in the resource configuration information are matched with the verification codes in the local whitelist, and the verification result is determined based on the matching result. For example, if the matching result is successful, the verification result is considered passed.

[0104] Another alternative implementation involves obtaining the corresponding algorithm from the management platform beforehand, when the verification code is obtained by processing the MAC information on the management platform. The algorithm is then used to process the MAC information in the resource configuration information to obtain the verification code. The verification result is then determined based on the matching result between the verification code and the checksum.

[0105] Another optional implementation involves, when the checksum is obtained by the management platform after processing the MAC information, pre-obtaining the corresponding symmetric algorithm for the aforementioned processing, and performing an inverse operation on the checksum based on the symmetric algorithm to obtain the checksum field. The checksum field is then matched with the MAC information in the resource configuration information to obtain a matching result; specifically, the checksum field is matched with the target field of the integer converted from the MAC information in the resource configuration information to obtain a matching result. The verification result is determined based on the matching result. The checksum is a 48-bit integer obtained by the management platform after converting the MAC information as a whole, and the last 8 bits of the integer are then processed. Therefore, when performing verification, the optical line terminal only needs to match the checksum field with the last 8 bits of the integer converted from the MAC information; if the match is successful, the verification is considered successful.

[0106] S403, if the verification result is successful, performs service resource configuration for the target service based on the bandwidth configuration information.

[0107] One optional implementation involves determining the DSCP value of the service data packet corresponding to the target service based on the CoS value and VLAN identifier in the bandwidth configuration information, provided the verification result passes. Specifically, the CoS value plus the VLAN identifier is used as the DSCP value. Upon receiving the service data packet of the target service, the DSCP value is re-identified by combining the CoS value and the VLAN identifier to distinguish between ordinary traffic and elastic traffic.

[0108] Another alternative implementation is to determine the DSCP value based on the CoS value and the VLAN identifier. For example, if VLAN=100 and CoS=3, then the corresponding DSCP value is 24; the DSCP value is configured using a mapping method; that is, VLAN=100 and CoS=3 → DSCP=24.

[0109] Optionally, in this embodiment, in addition to configuring the DSCP value, a DBA (Dynamic Bandwidth Assignment) template can also be configured according to the bandwidth value corresponding to the service. The purpose is to increase elastic bandwidth for the target service. The DBA template is a configuration template that defines the GPON uplink bandwidth scheduling rules and is used to allocate guaranteed bandwidth and peak bandwidth to the T-CONT.

[0110] In this embodiment, the optical line terminal receives resource configuration data containing checksum and bandwidth configuration information from the management platform. It first performs configuration security verification based on the checksum. After successful verification, it deploys target service resources according to the bandwidth configuration. This solves the technical problems of existing access networks lacking a pre-verification mechanism, where service configurations are easily tampered with and forged, and terminals can illegally occupy elastic bandwidth and preempt high-quality network resources. On one hand, the checksum verifies the legitimacy of the configuration and intercepts unauthorized false service configuration requests, improving the network security control capabilities of elastic service bandwidth scheduling. On the other hand, it links service security verification with bandwidth resource configuration processes, ensuring that legitimate users' target services can be allocated corresponding bandwidth resources normally, balancing the flexible activation needs of elastic services with the security of underlying network resource usage.

[0111] In one implementation, to further optimize the service experience of the target service, it is also necessary to configure service resources for the optical network unit, such as... Figure 5 As shown, assuming the verification result is successful, one possible implementation of a business resource configuration method includes:

[0112] S501 sends a verification pass message to the optical network unit so that the optical network unit can perform service resource configuration for the target service based on the resource configuration information.

[0113] Optionally, in this embodiment, an optional implementation method for the optical network unit to perform service resource configuration for the target service based on resource configuration information is to use the combination of VLAN identifier and CoS value as a unique label to distinguish service traffic. For example, VLAN=100, CoS=3 specifically represents cloud e-sports elastic bandwidth traffic; the VLAN identifier and CoS=0 for ordinary internet access are in a separate group. Function: When the ONU receives a user packet, it first identifies the "VLAN tag + packet CoS value" to distinguish whether it is elastic service traffic. It then configures an independent GemPort (i.e., service virtual channel) for isolated transmission of the combination of VLAN identifier and CoS value; for example, ordinary internet access (VLANx, CoS=0) → GemPort1; cloud e-sports elastic service (VLAN100, CoS=3) → GemPort2. The advantage is that the elastic service traffic and ordinary internet traffic are physically isolated, do not compete for forwarding resources, and ensure low latency for high-priority services. The independent GemPort is bound to the uplink transport container, and the corresponding DBA template is configured for the bound uplink transport container based on the bandwidth value corresponding to the service. For example, a dedicated elastic bandwidth DBA template (Example: Assure:1GE, Max:1GE) is bound to the T-CONT2 of the target service; and a basic broadband DBA template is bound to the ordinary T-CONT1.

[0114] In this embodiment, after verifying the legality of the resource configuration information, the OLT sends a verification pass message to the optical network unit, thereby informing the optical network unit to enable the resource configuration information to complete the target service configuration. This enables the OLT's security verification result to be linked with the ONU's service configuration actions. The ONU-side traffic marking, channel mapping, and other service deployment processes are only triggered when the configuration verification is correct, preventing illegal or tampered configuration parameters from being executed on the optical network unit. This blocks the illegal occupation of elastic service bandwidth and high-priority scheduling resources from the terminal side, ensuring the safe and orderly execution of the entire elastic service configuration process.

[0115] In one embodiment, such as Figure 6 As shown, an optional implementation of a business resource configuration method includes:

[0116] S601: Upon receiving a service resource configuration request for a target service from a user terminal, the management platform determines the bandwidth configuration information of the target service based on the service resource configuration request and associated mapping rules. The service resource configuration request carries at least one of the following: the bandwidth value corresponding to the service, the activation time, and the service type. The bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0117] S602, the management platform generates a verification code based on MAC information.

[0118] S603, the management platform sends resource configuration information carrying checksum and bandwidth configuration information to the optical network unit.

[0119] S604, the optical network unit generates OMCI messages based on resource configuration information.

[0120] S605, the optical network unit sends an OMCI message carrying resource configuration information to the optical line terminal.

[0121] S606, the optical line terminal determines the verification field based on the check code.

[0122] S607, the optical line terminal matches the MAC information in the resource configuration information with the verification field to obtain the matching result.

[0123] S608, the optical line terminal determines the verification result based on the matching result.

[0124] S609: If the verification result is successful, the optical line terminal determines the DSCP value of the service data packet corresponding to the target service based on the CoS value and VLAN identifier in the bandwidth configuration information.

[0125] S610, the optical line terminal sends a verification pass message to the optical network unit.

[0126] S611, the optical network unit performs service resource configuration for the target service based on resource configuration information.

[0127] The service resource configuration method of this embodiment, upon receiving a service resource configuration request for a target service sent by a user terminal, determines the resource configuration information of the target service based on the service resource configuration request; wherein, the resource configuration information includes a checksum and bandwidth configuration information. The resource configuration information is then sent to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the checksum, and if the verification result is successful, to execute service resource configuration for the target service based on the bandwidth configuration information. In this application, the management platform first generates resource information containing a checksum and bandwidth configuration based on the user's target service configuration request and sends it to the optical line terminal. The optical line terminal first completes security verification through the checksum, and only after successful verification is the service bandwidth resource for the target service deployed. This solves the technical problems of existing networks where devices lack pre-verification and configuration information is easily tampered with, leading to illegal occupation of service bandwidth resources. On the one hand, it uses the checksum to identify the legitimacy of service configuration, intercepting forged and tampered illegal service configuration requests, and improving the security of network service resource scheduling; on the other hand, it realizes the linkage of service bandwidth configuration distribution, security verification, and resource deployment processes, ensuring that legitimate users' target services can be normally allocated corresponding bandwidth resources, balancing service activation flexibility and network resource management security.

[0128] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0129] Based on the same inventive concept, this application also provides a business resource configuration apparatus for implementing the business resource configuration method described above. The solution provided by this apparatus is similar to the implementation scheme described in the above method; therefore, the specific limitations in one or more business resource configuration apparatus embodiments provided below can be found in the limitations of the business resource configuration method described above, and will not be repeated here.

[0130] In one embodiment, by Figure 7 A structural block diagram of a service resource configuration device in one embodiment is shown. Figure 7As shown, a service resource configuration device 1 is provided, which includes: a first determining module 11 and a first sending module 12, wherein:

[0131] The first determining module 11 is used to determine the resource configuration information of the target service based on the service resource configuration request when receiving a service resource configuration request for the target service sent by the user terminal; wherein the resource configuration information includes a check code and bandwidth configuration information.

[0132] The first sending module 12 is used to send resource configuration information to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and to perform service resource configuration for the target service based on the bandwidth configuration information if the verification result is successful.

[0133] In one embodiment, the first sending module is further specifically used for:

[0134] Resource configuration information is sent to the optical network unit so that the optical network unit can send an OMCI message carrying the resource configuration information to the optical line terminal.

[0135] In one embodiment, a service resource configuration device 1 further includes:

[0136] The acquisition module is used to obtain the MAC information of the optical network unit associated with the user terminal based on the service resource configuration request;

[0137] The generation module is used to generate a checksum based on MAC information.

[0138] In one embodiment, the service resource configuration request carries at least one of the following: the bandwidth value, the activation time, and the service type corresponding to the service.

[0139] In one embodiment, the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0140] In one embodiment, by Figure 8 A structural block diagram of a service resource configuration device in one embodiment is shown. Figure 8 As shown, a service resource configuration device 2 is provided, which includes: a first receiving module 21, a verification module 22, and a configuration module 23, wherein:

[0141] The first receiving module 21 is used to receive resource configuration information initiated by the management platform; wherein, the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a check code and bandwidth configuration information;

[0142] The verification module 22 is used to perform security verification on the resource configuration information based on the verification code and obtain the verification result;

[0143] Configuration module 23 is used to configure service resources for the target service based on bandwidth configuration information when the verification result is passed.

[0144] In one embodiment, the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0145] In one embodiment, the verification module is further specifically used for:

[0146] Determine the verification fields based on the verification code;

[0147] The matching result is obtained by matching the verification field with the MAC information in the resource configuration information;

[0148] Based on the matching results, determine the verification result.

[0149] In one embodiment, the configuration module is further specifically used for:

[0150] Based on the CoS value and VLAN identifier in the bandwidth configuration information, determine the DSCP value of the service data packet corresponding to the target service.

[0151] In one embodiment, the first receiving module is further specifically used for:

[0152] The system receives OMCI messages sent by the optical network unit (ONU); the OMCI messages carry resource configuration information; the OMCI messages are sent by the ONU after receiving resource configuration information from the management platform.

[0153] In one embodiment, if the verification result is successful, a service resource configuration device 2 further includes:

[0154] The second sending module is used to send a verification pass message to the optical network unit so that the optical network unit can perform service resource configuration for the target service based on the resource configuration information.

[0155] Each module in the aforementioned business resource configuration device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the operations corresponding to each module.

[0156] In one embodiment, a computer device is provided, which may be a platform-side device, and its internal structure diagram may be as follows: Figure 9 As shown, the computer device includes a processor, memory, and a network interface connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores business resource configuration information. The network interface communicates with external user devices via a network connection. When the computer program is executed by the processor, it implements a business resource configuration method.

[0157] Those skilled in the art will understand that Figure 9 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specifically, the computer device may include more or fewer components than shown in the figure, or combine certain components, or have different component arrangements.

[0158] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0159] Upon receiving a service resource configuration request for a target service from a user terminal, the resource configuration information for the target service is determined based on the service resource configuration request; wherein, the resource configuration information includes a checksum and bandwidth configuration information;

[0160] Send resource configuration information to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and if the verification result is successful, to perform service resource configuration for the target service based on the bandwidth configuration information.

[0161] In one embodiment, when the processor executes the computer program, it further performs the following steps: sending resource configuration information to the optical line terminal, including:

[0162] Resource configuration information is sent to the optical network unit so that the optical network unit can send an OMCI message carrying the resource configuration information to the optical line terminal.

[0163] In one embodiment, the processor, when executing a computer program, also performs the following steps:

[0164] Based on the service resource configuration request, obtain the MAC information of the optical network unit associated with the user terminal;

[0165] Generate a checksum based on MAC information.

[0166] In one embodiment, when the processor executes the computer program, it further performs the following steps: the service resource configuration request carries at least one of the following: the bandwidth value, the activation time, and the service type corresponding to the service.

[0167] In one embodiment, when the processor executes the computer program, it further implements the following steps: the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0168] In one embodiment, another computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0169] Receive resource configuration information initiated by the management platform; wherein, the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a check code and bandwidth configuration information;

[0170] Based on the checksum, the resource configuration information is security verified to obtain the verification result.

[0171] If the verification result is successful, service resources are configured for the target service based on the bandwidth configuration information.

[0172] In one embodiment, when the processor executes the computer program, it further implements the following steps: the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0173] In one embodiment, when the processor executes the computer program, it further performs the following steps: performing a security verification on the resource configuration information based on a checksum, and obtaining a verification result, including:

[0174] Determine the verification fields based on the verification code;

[0175] The matching result is obtained by matching the verification field with the MAC information in the resource configuration information;

[0176] Based on the matching results, determine the verification result.

[0177] In one embodiment, when the processor executes the computer program, it further performs the following steps: configuring service resources for a target service based on bandwidth configuration information, including:

[0178] Based on the CoS value and VLAN identifier in the bandwidth configuration information, determine the DSCP value of the service data packet corresponding to the target service.

[0179] In one embodiment, when the processor executes the computer program, it further performs the following steps: receiving resource configuration information initiated by a management platform, including:

[0180] The system receives OMCI messages sent by the optical network unit (ONU); the OMCI messages carry resource configuration information; the OMCI messages are sent by the ONU after receiving resource configuration information from the management platform.

[0181] In one embodiment, when the processor executes the computer program, it further performs the following steps: if the verification result is passed, the method further includes:

[0182] Send a verification pass message to the optical network unit so that the optical network unit can perform service resource configuration for the target service based on the resource configuration information.

[0183] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, performs the following steps:

[0184] Upon receiving a service resource configuration request for a target service from a user terminal, the resource configuration information for the target service is determined based on the service resource configuration request; wherein, the resource configuration information includes a checksum and bandwidth configuration information;

[0185] Send resource configuration information to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and if the verification result is successful, to perform service resource configuration for the target service based on the bandwidth configuration information.

[0186] In one embodiment, when the computer program is executed by a processor, it further performs the following steps: sending resource configuration information to the optical line terminal, including:

[0187] Resource configuration information is sent to the optical network unit so that the optical network unit can send an OMCI message carrying the resource configuration information to the optical line terminal.

[0188] In one embodiment, when the computer program is executed by a processor, it further performs the following steps:

[0189] Based on the service resource configuration request, obtain the MAC information of the optical network unit associated with the user terminal;

[0190] Generate a checksum based on MAC information.

[0191] In one embodiment, when the computer program is executed by the processor, it further performs the following steps: the service resource configuration request carries at least one of the following: the bandwidth value, the activation time, and the service type corresponding to the service.

[0192] In one embodiment, when the computer program is executed by the processor, it further implements the following steps: the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0193] In one embodiment, another computer-readable storage medium is provided, on which a computer program is stored, which, when executed by a processor, performs the following steps:

[0194] Receive resource configuration information initiated by the management platform; wherein, the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a check code and bandwidth configuration information;

[0195] Based on the checksum, the resource configuration information is security verified to obtain the verification result.

[0196] If the verification result is successful, service resources are configured for the target service based on the bandwidth configuration information.

[0197] In one embodiment, when the computer program is executed by the processor, it further implements the following steps: the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0198] In one embodiment, when the computer program is executed by a processor, it further performs the following steps: performing a security verification on the resource configuration information based on a checksum, and obtaining a verification result, including:

[0199] Determine the verification fields based on the verification code;

[0200] The matching result is obtained by matching the verification field with the MAC information in the resource configuration information;

[0201] Based on the matching results, determine the verification result.

[0202] In one embodiment, when the computer program is executed by the processor, it further performs the following steps: configuring service resources for the target service based on bandwidth configuration information, including:

[0203] Based on the CoS value and VLAN identifier in the bandwidth configuration information, determine the DSCP value of the service data packet corresponding to the target service.

[0204] In one embodiment, when the computer program is executed by the processor, it further performs the following steps: receiving resource configuration information initiated by the management platform, including:

[0205] The system receives OMCI messages sent by the optical network unit (ONU); the OMCI messages carry resource configuration information; the OMCI messages are sent by the ONU after receiving resource configuration information from the management platform.

[0206] In one embodiment, when the computer program is executed by a processor, it further implements the following steps: if the verification result is passed, the method further includes:

[0207] Send a verification pass message to the optical network unit so that the optical network unit can perform service resource configuration for the target service based on the resource configuration information.

[0208] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, performs the following steps:

[0209] Upon receiving a service resource configuration request for a target service from a user terminal, the resource configuration information for the target service is determined based on the service resource configuration request; wherein, the resource configuration information includes a checksum and bandwidth configuration information;

[0210] Send resource configuration information to the optical line terminal; wherein, the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and if the verification result is successful, to perform service resource configuration for the target service based on the bandwidth configuration information.

[0211] In one embodiment, when the computer program is executed by a processor, it further performs the following steps: sending resource configuration information to the optical line terminal, including:

[0212] Resource configuration information is sent to the optical network unit so that the optical network unit can send an OMCI message carrying the resource configuration information to the optical line terminal.

[0213] In one embodiment, when the computer program is executed by a processor, it further performs the following steps:

[0214] Based on the service resource configuration request, obtain the MAC information of the optical network unit associated with the user terminal;

[0215] Generate a checksum based on MAC information.

[0216] In one embodiment, when the computer program is executed by the processor, it further performs the following steps: the service resource configuration request carries at least one of the following: the bandwidth value, the activation time, and the service type corresponding to the service.

[0217] In one embodiment, when the computer program is executed by the processor, it further implements the following steps: the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0218] In one embodiment, another computer program product is provided, including a computer program that, when executed by a processor, performs the following steps:

[0219] Receive resource configuration information initiated by the management platform; wherein, the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a check code and bandwidth configuration information;

[0220] Based on the checksum, the resource configuration information is security verified to obtain the verification result.

[0221] If the verification result is successful, service resources are configured for the target service based on the bandwidth configuration information.

[0222] In one embodiment, when the computer program is executed by the processor, it further implements the following steps: the bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

[0223] In one embodiment, when the computer program is executed by a processor, it further performs the following steps: performing a security verification on the resource configuration information based on a checksum, and obtaining a verification result, including:

[0224] Determine the verification fields based on the verification code;

[0225] The matching result is obtained by matching the verification field with the MAC information in the resource configuration information;

[0226] Based on the matching results, determine the verification result.

[0227] In one embodiment, when the computer program is executed by the processor, it further performs the following steps: configuring service resources for the target service based on bandwidth configuration information, including:

[0228] Based on the CoS value and VLAN identifier in the bandwidth configuration information, determine the DSCP value of the service data packet corresponding to the target service.

[0229] In one embodiment, when the computer program is executed by the processor, it further performs the following steps: receiving resource configuration information initiated by the management platform, including:

[0230] The system receives OMCI messages sent by the optical network unit (ONU); the OMCI messages carry resource configuration information; the OMCI messages are sent by the ONU after receiving resource configuration information from the management platform.

[0231] In one embodiment, when the computer program is executed by a processor, it further implements the following steps: if the verification result is passed, the method further includes:

[0232] A verification pass message is sent to the optical network unit (ONU) to enable the ONU to perform service resource configuration for the target service based on resource configuration information. Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory may include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0233] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0234] The above embodiments are merely illustrative of several implementation methods of this application, and their descriptions are relatively specific and detailed. However, they should not be construed as limiting the scope of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A method for configuring business resources, characterized in that, Applied to a management platform, the method includes: Upon receiving a service resource configuration request for a target service sent by a user terminal, the resource configuration information for the target service is determined based on the service resource configuration request; wherein, the resource configuration information includes a checksum and bandwidth configuration information; The resource configuration information is sent to the optical line terminal; wherein the resource configuration information is used by the optical line terminal to perform security verification based on the check code, and to perform service resource configuration for the target service based on the bandwidth configuration information if the verification result is successful.

2. The method according to claim 1, characterized in that, Sending the resource configuration information to the optical line terminal includes: The resource configuration information is sent to the optical network unit so that the optical network unit can send an ONU management control interface OMCI message carrying the resource configuration information to the optical line terminal.

3. The method according to claim 1, characterized in that, The method further includes: Based on the service resource configuration request, obtain the MAC information of the optical network unit associated with the user terminal; The verification code is generated based on the MAC information.

4. The method according to any one of claims 1-3, characterized in that, The service resource configuration request carries at least one of the following: the bandwidth value, the activation time, and the service type corresponding to the service.

5. The method according to any one of claims 1-3, characterized in that, The bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, the destination IP address DIPA, the service class CoS value, the physical address MAC information of the associated optical network unit, and the virtual local area network (VLAN) identifier.

6. A method for configuring business resources, characterized in that, Applied to optical line terminals, the method includes: The system receives resource configuration information initiated by the management platform; wherein the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a checksum and bandwidth configuration information. Based on the verification code, the resource configuration information is subjected to security verification to obtain the verification result; If the verification result is successful, service resource configuration for the target service is performed based on the bandwidth configuration information.

7. The method according to claim 6, characterized in that, The bandwidth configuration information includes at least one of the following: the bandwidth value corresponding to the service, DIPA, CoS value, MAC information of the associated optical network unit, and VLAN identifier.

8. The method according to claim 7, characterized in that, The step of performing security verification on the resource configuration information based on the verification code to obtain the verification result includes: Based on the verification code, determine the verification field; The matching result is obtained by matching the verification field with the MAC information in the resource configuration information; Based on the matching results, the verification result is determined.

9. The method according to claim 7, characterized in that, The step of configuring service resources for the target service based on the bandwidth configuration information includes: Based on the CoS value and VLAN identifier in the bandwidth configuration information, the Differential Service Code Point (DSCP) value of the service data packet corresponding to the target service is determined.

10. The method according to claim 6, characterized in that, The resource configuration information initiated by the receiving management platform includes: The system receives an OMCI message sent by an optical network unit (ONU); wherein the OMCI message carries the resource configuration information; the OMCI message is sent by the ONU upon receiving the resource configuration information sent by the management platform.

11. The method according to claim 10, characterized in that, If the verification result is successful, the method further includes: A verification pass message is sent to the optical network unit so that the optical network unit can perform service resource configuration for the target service based on the resource configuration information.

12. A business resource allocation device, characterized in that, Configured on a management platform, the device includes: The first determining module is configured to, upon receiving a service resource configuration request for a target service sent by a user terminal, determine the resource configuration information of the target service based on the service resource configuration request; wherein the resource configuration information includes a checksum and bandwidth configuration information; The first sending module is used to send the resource configuration information to the optical line terminal; wherein, the resource configuration information is used for the optical line terminal to perform security verification based on the check code, and to perform service resource configuration for the target service based on the bandwidth configuration information if the verification result is successful.

13. A business resource allocation device, characterized in that, The device, configured at an optical line terminal, includes: The first receiving module is used to receive resource configuration information initiated by the management platform; wherein, the resource configuration information is determined by the management platform based on the service resource configuration request sent by the user terminal for the target service; the resource configuration information includes a checksum and bandwidth configuration information; The verification module is used to perform security verification on the resource configuration information based on the verification code and obtain the verification result; The configuration module is used to configure service resources for the target service based on the bandwidth configuration information if the verification result is passed.

14. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 11.

15. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 11.

16. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 11.