Data processing method and data processing system and apparatus

Abstract

A data processing method, a data processing system, a data processing apparatus, a computer program product and an electronic device, relating to the technical field of network security. The method may comprise: verifying a business information check value in a data block (S110); when the verification has passed, broadcasting a verification result (S120); and, when the number of verification results reaches a preset number, the data block can be uploaded to the chain (S130). Thus, in the case of a failure occurring in a business execution process, the present disclosure can avoid the problems of low fault tracing efficiency and low service activation efficiency due to a non-trust relationship between management domains; that is, the characteristics of multi-node storage and tamper-proofness of block-chain technology can be used to ensure that all operations can be traced, and operation records cannot be tampered with, thereby facilitating enhancing the efficiency of failure tracing and service activation. Furthermore, the present disclosure can improve the resistance of entire networks against malicious attacks and information tampering, thereby improving trust between different management domains.

Description

Data processing method, data processing system, and device

[0001] Cross-reference to Related Applications

[0002] The present disclosure claims priority to Chinese Patent Application No. 202410733424.2, filed on June 6, 2024, entitled “Data processing method, data processing system, and device,” the entire contents of which are incorporated herein by reference in its entirety. TECHNICAL FIELD

[0003] The present disclosure relates to the technical field of network security, and in particular, to a data processing method, a data processing system, a data processing device, a computer program product, and an electronic device. BACKGROUND

[0004] Generally, a large network usually contains multiple management domains, a management domain is a collection of some resources, behaviors within the domain are subject to a system management policy, and the management domain contains a corresponding controller.

[0005] Networks of different management domains are managed by different controllers, and in order to ensure data security, the relationship between each management domain is an untrusted relationship. However, for cross-domain services, if there is an execution failure, the untrusted relationship between each management domain easily affects the fault tracing efficiency and service enablement efficiency.

[0006] SUMMARY

[0007] According to an aspect of the present disclosure, a data processing method is provided, the method comprising:

[0008] In response to a data block, verifying a service information check value in the data block;

[0009] If the verification is passed, broadcasting a local verification result and receiving other verification results broadcast by each domain orchestrator and each controller;

[0010] When the number of received other verification results reaches a preset number, chaining the data block.

[0011] In an exemplary embodiment of the present disclosure, verifying the service information check value in the data block comprises:

[0012] Parsing a user ID and a service ID from the service information check value;

[0013] If the user ID is consistent with the user ID carried in the data block, and the service ID is consistent with the service ID carried in the data block, it is determined that the verification is passed.

[0014] In an exemplary embodiment of the present disclosure, further comprising:

[0015] If the user ID is inconsistent with the user ID carried in the data block, or the service ID is inconsistent with the service ID carried in the data block, it is determined that the verification fails.

[0016] In an exemplary embodiment of the present disclosure, further comprising:

[0017] The data block is stored in the user service data block warehouse function module.

[0018] In an exemplary embodiment of the present disclosure, wherein: the data block is generated by a target controller, the target controller is configured to verify the data block through a distributed ledger consensus mechanism, and broadcast a data block verification result to the central orchestrator, the domain orchestrators, and the controllers.

[0019] In an exemplary embodiment of the present disclosure, wherein: the domain orchestrators and the controllers are connected through a full-mesh connection mode; and the full-mesh connection is used to transmit the data block.

[0020] According to an aspect of the present disclosure, a data processing system is provided, comprising:

[0021] The target domain orchestrator / target controller broadcasts the data block.

[0022] The other controllers verify the service information check value in the data block in response to the data block; if the verification passes, broadcast the local verification result, and receive other verification results broadcast by the domain orchestrators and the controllers; and when the number of received other verification results reaches a preset number, chain the data block.

[0023] According to an aspect of the present disclosure, a data processing apparatus is provided, comprising:

[0024] The verification unit is configured to verify the service information check value in the data block in response to the data block.

[0025] The broadcast unit is configured to broadcast the local verification result if the verification passes, and receive other verification results broadcast by the domain orchestrators and the controllers.

[0026] The chaining unit is configured to chain the data block when the number of received other verification results reaches a preset number.

[0027] In an exemplary embodiment of the present disclosure, the verification unit verifies the service information check value in the data block, comprising:

[0028] The user ID and the service ID are parsed from the service information check value.

[0029] If the user ID is consistent with the user ID carried in the data block, and the service ID is consistent with the service ID carried in the data block, it is determined that the verification is passed.

[0030] In an exemplary embodiment of the present disclosure, further comprising:

[0031] The determination unit is configured to determine that the verification is not passed if the user ID is inconsistent with the user ID carried in the data block, or the service ID is inconsistent with the service ID carried in the data block.

[0032] In an exemplary embodiment of the present disclosure, further comprising:

[0033] The storage unit is configured to store the data block in the user service data block warehouse function module.

[0034] In an exemplary embodiment of the present disclosure, wherein: the data block is generated by a target controller, the target controller is configured to verify the data block through a distributed ledger consensus mechanism, and broadcast the data block verification result to the central orchestrator, each domain orchestrator, and each controller.

[0035] In an exemplary embodiment of the present disclosure, wherein: the domain orchestrator and the controller are connected through a full-mesh connection mode; and the full-mesh connection is used for transmitting the data block.

[0036] According to an aspect of the present disclosure, a computer program product is provided, comprising a computer program, the computer program being executed by a processor to implement the method of any one of the above.

[0037] According to an aspect of the present disclosure, an electronic device is provided, comprising: a processor; and a memory configured to store executable instructions of the processor; wherein the processor is configured to execute the method of any one of the above via execution of the executable instructions. BRIEF DESCRIPTION OF DRAWINGS

[0038] FIG. 1 schematically shows a flowchart of a data processing method according to an embodiment of the present disclosure;

[0039] FIG. 2 schematically shows a management domain architecture diagram of the related art;

[0040] FIG. 3 schematically shows a management domain architecture diagram according to an embodiment of the present disclosure;

[0041] FIG. 4 schematically shows a content diagram of a data block according to an embodiment of the present disclosure;

[0042] FIG. 5 schematically shows a data block transmission mode characterized by an architecture according to an embodiment of the present disclosure;

[0043] FIG. 6 schematically shows an application scenario architecture diagram according to one embodiment of the present disclosure;

[0044] FIG. 7 schematically shows a flow chart of a data processing method according to another embodiment of the present disclosure;

[0045] FIG. 8 schematically shows a structure diagram of a data processing system according to one embodiment of the present disclosure;

[0046] FIG. 9 schematically shows a structure block diagram of a data processing apparatus in one embodiment of the present disclosure;

[0047] FIG. 10 schematically shows a structure diagram of a computer system of an electronic device suitable for implementing embodiments of the present disclosure. DETAILED DESCRIPTION

[0048] Example implementations will now be described more fully with reference to the accompanying drawings. Example implementations can be implemented in any

[0049] Moreover, the drawings are not necessarily to scale. Like reference numerals designate like parts throughout the several views. Like components are designated with like reference numerals thus redundant descriptions thereof will be omitted. Some of the block diagrams shown in the drawings are functional entities that do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software, or in one or more hardware modules or integrated circuits, or in different network and / or processor apparatuses and / or microcontroller apparatuses.

[0050] Referring to FIG. 1, FIG. 1 schematically shows a flow chart of a data processing method according to one embodiment of the present disclosure. As shown in FIG. 1, the data processing method can include steps S110-S130.

[0051] Step S110: verifying a service information check value in a data block in response to the data block.

[0052] Step S120: If the verification is passed, the local verification result is broadcasted, and other verification results broadcasted by the domain orchestrators and the controllers are received.

[0053] Step S130: When the number of received other verification results reaches a preset number, the data block is chained.

[0054] By implementing the method shown in FIG. 1, the service information check value in the data block can be verified, and the verification result is broadcasted after the verification is passed. When the number of verification results reaches a preset number, the data block can be chained. In the case of a failure in the service execution process, the problem of low fault tracing efficiency and low service enabling efficiency caused by the untrusted relationship between the management domains can be avoided. That is, the multi-point storage and the non-tamperable characteristics of the blockchain technology can be used to ensure that each operation can be traced and the operation record cannot be tampered with, which is conducive to improving the fault tracing efficiency and the service enabling efficiency. In addition, the overall network resistance to malicious attacks and information tampering can be improved, and the trust between different management domains can be improved.

[0055] Next, the above steps of the present example embodiment are described in more detail.

[0056] In order to improve the trust between the management domains, the present disclosure proposes a user service data block warehouse function module, which is configured to execute the technical solution defined in steps S110-S130.

[0057] In the related art, each management domain does not include a user service data block warehouse function module. For details, refer to FIG. 2, which schematically shows a management domain architecture diagram of the related art. As shown in FIG. 2, the management domain of the related art includes a domain orchestrator 210, a network controller 220, and a network infrastructure 230. The network controller 220 includes a policy making module 221, a topology management module 222, a traffic scheduling and optimization module 223, a policy management module 224, a topology collection module 225, a traffic monitoring module 226, and a policy and rule translation module 227. The domain orchestrator 210 is configured to implement service orchestration functions, the network controller 220 is configured to control the network and the network infrastructure 230 is a device controlled by the network controller 220. The policy making module 221 is configured to define control policies, the topology management module 222 is configured to manage network topology, the traffic scheduling and optimization module 223 is configured to perform traffic scheduling and optimization, the policy management module 224 is configured to manage network control policies, the topology collection module 225 is configured to collect topology information, the traffic monitoring module 226 is configured to monitor traffic, and the policy and rule translation module 227 is configured to translate / standardize various policies and rules.

[0058] It can be seen that the user service data block warehouse function module is not included in FIG. 2, so it is difficult to realize data verification between management domains and increase the trust between management domains.

[0059] The user service data block warehouse function module is provided in the present disclosure, and specifically can be referred to FIG. 3, which schematically shows a management domain architecture diagram according to one embodiment of the present disclosure. As shown in FIG. 3, the management domain includes a domain orchestrator 310, a network controller 320, and a network infrastructure 330. The network controller 320 includes a policy making module 331, a topology management module 322, a traffic scheduling and optimization module 323, a policy management module 324, a topology collection module 325, a traffic monitoring module 326, a policy and rule translation module 327, and a user service data block warehouse function module 328. The user service data block warehouse function module 328 is arranged in each controller in the network and is configured to save all service data chains, verify the received user service data block, and chain the service data block that passes the verification. In addition, the user service data block warehouse function module 328 can also receive the user service data block sent by each domain orchestrator and each controller, and verify, store, and chain the same. In this way, in a large network across multiple management domains, the security and traceability of service configuration information can be improved, and the probability of malicious attacks and tampering of existing network service configuration information can be reduced. In addition, the trust between management domains is improved, which is beneficial to improving the configuration efficiency of services across management domains.

[0060] In step S110, the service information check value in the data block is verified in response to the data block.

[0061] Specifically, the data block delivers the data corresponding to the current service, and the content of the data block includes but is not limited to the user ID 410, the service ID 420, the service check value 430, and the service configuration information 440 shown in FIG. 4. The user ID 410 is used as a directional representation of the user initiating the service, the service ID 420 is used as a directional representation of the current service, the service check value 430 is used as a basis for checking the data block, and the service configuration information 440 is used to represent the configuration required by the current service.

[0062] In step S110, the data block is from a target controller / target domain orchestrator, and the target controller and the target domain orchestrator belong to the same management domain, which is any one of the multiple management domains.

[0063] Referring to FIG. 5, FIG. 5 schematically shows a data block transmission manner represented by an architecture according to an embodiment of the present disclosure. As shown in FIG. 5, similarly, the management domain includes a domain orchestrator 510, a network controller 520, and a network infrastructure 530. The network controller 520 includes a policy making module 351, a topology management module 522, a traffic scheduling and optimization module 523, a policy management module 524, a topology collection module 525, a traffic monitoring module 526, a policy and rule translation module 527, and a user service data block warehouse function module 528. The user service data block warehouse function module 528 can receive the data block sent by each domain orchestrator / each controller 540, verify the service information check value in the data block, and broadcast the verification result of the local side and receive other verification results broadcast by each domain orchestrator and each controller when the verification is passed.

[0064] Referring to FIG. 6, FIG. 6 schematically shows an application scenario architecture according to an embodiment of the present disclosure. As shown in FIG. 6, the architecture includes a central orchestrator 610, a domain orchestrator 621, a controller 622, an AS 623, a domain orchestrator 631, a controller 632, an AS 633, a domain orchestrator 641, a controller 642, and an AS 634. Taking the domain orchestrator 631 as an example, if the controller 632 generates a data block, the domain orchestrator 631 can broadcast the data block to the central orchestrator 610 and other domain orchestrators and controllers to trigger each party to verify the data block. The AS (autonomous system) system refers to a group of routers and networks under the control of a management institution, which can be implemented as a router directly connected to a LAN and also connected to the Internet. The AS can be a plurality of local area networks interconnected by an enterprise backbone network. All routers in an autonomous system are connected to each other, run the same routing protocol, and are assigned the same autonomous system number. Generally, an AS can only run one routing protocol.

[0065] As an optional embodiment, the data block is generated by a target controller, the target controller is configured to verify the data block by a distributed ledger consensus mechanism, and broadcast the data block verification result to the central orchestrator, each domain orchestrator, and each controller.

[0066] It can be seen that, by implementing the optional embodiment, the target domain orchestrator can broadcast the data block after verification based on the distributed ledger consensus mechanism, and use the blockchain technology to chain the data block, thereby solving the problem of difficulty in trusting between management domains.

[0067] Specifically, the distributed ledger is a database based on blockchain technology, which is stored in multiple nodes, and each node has a complete copy of the ledger. All nodes reach an agreement through a consensus mechanism to ensure the integrity and security of the ledger. The distributed ledger can record and store various types of data, including transaction records, identity information, ownership of goods, etc. The core of the distributed ledger is the blockchain technology, which specifically records data in continuous blocks in chronological order and protects data security and credibility through cryptographic technology and consensus mechanism. Each block contains the hash value of the previous block, forming a chain structure that cannot be tampered with, thereby ensuring the integrity and immutability of the data.

[0068] In addition, the central orchestrator manages each domain orchestrator, each management including a corresponding domain orchestrator and controller.

[0069] As an optional embodiment, wherein: the domain orchestrator and the controller are connected through a full-mesh connection mode; wherein the full-mesh connection is used to transmit data blocks.

[0070] It can be seen that by implementing this optional embodiment, the domain orchestrator and the controller can directly transmit data blocks, thereby facilitating the improvement of the transmission efficiency of the data blocks.

[0071] Specifically, the full-mesh connection mode (Full-mesh) represents a connection form of a network, that is, all nodes are connected in the form of direct connection. In the network structure described by Full-mesh, network devices are organized together in a mesh topology, and each network node has a physical circuit / virtual circuit connected to all other network nodes.

[0072] As an optional embodiment, verifying the service information check value in the data block includes:

[0073] Parsing the user ID and the service ID from the service information check value;

[0074] If the user ID is consistent with the user ID carried in the data block, and the service ID is consistent with the service ID carried in the data block, it is determined that the verification is passed.

[0075] It can be seen that by implementing this optional embodiment, information verification based on data blocks can be implemented, thereby facilitating the confirmation of the legitimacy of the data blocks.

[0076] Specifically, the service information check value is generated by the target controller based on the user ID and the service ID.

[0077] As an optional embodiment, it further includes:

[0078] If the user ID is inconsistent with the user ID carried in the data block, or the service ID is inconsistent with the service ID carried in the data block, it is determined that the verification is not passed.

[0079] It can be seen that the optional embodiment can avoid that the illegal data is verified to be passed.

[0080] Specifically, if the user ID is inconsistent with the user ID carried in the data block, or the service ID is inconsistent with the service ID carried in the data block, it can be determined that the data block is illegal, and thus it can be considered that the verification is not passed.

[0081] In step S120, if the verification is passed, the local verification result is broadcasted, and other verification results broadcasted by the domain orchestrators and the controllers are received.

[0082] Specifically, after the verification is passed, the other verification results broadcasted by the domain orchestrators and the controllers can be received at the same time, so as to count the number of the other verification results, and take the number as the basis for the chaining.

[0083] As an optional embodiment, the data processing method further comprises:

[0084] The data block is stored in the user service data block warehouse function module.

[0085] It can be seen that the optional embodiment can enrich the function types of the user service data block warehouse function module, and improve the capability of the user service data block warehouse function module.

[0086] Specifically, the user service data block warehouse function module has a storage function, and the data block is stored in the user service data block warehouse function module, which can facilitate direct calling.

[0087] In step S130, when the number of the received other verification results reaches a preset number, the data block is chained.

[0088] Specifically, the preset number can be half of the total number of the domain orchestrators and the controllers, and thus the preset number depends on the specific total number of the domain orchestrators and the controllers. When the number of the received other verification results reaches the preset number, it can be determined whether the user service data chain corresponding to the data block exists, and if it exists, the data block is directly chained, and if it does not exist, a new user service data chain is generated.

[0089] Referring to FIG. 7, FIG. 7 schematically shows a flowchart of a data processing method according to another embodiment of the present disclosure. As shown in FIG. 7, the data processing method comprises steps S710-S750.

[0090] Step S710: in response to the data block, parsing the user ID and the service ID from the service information check value; wherein the data block is generated by a target controller, the target controller is configured to verify the data block through a distributed ledger consensus mechanism, and broadcast a data block verification result to a central orchestrator, domain orchestrators, and controllers.

[0091] Step S720: if the user ID is consistent with the user ID carried in the data block, and the service ID is consistent with the service ID carried in the data block, it is determined that the verification is passed; if the user ID is inconsistent with the user ID carried in the data block, or the service ID is inconsistent with the service ID carried in the data block, it is determined that the verification is not passed.

[0092] Step S730: if the verification is passed, broadcasting the local verification result, and receiving other verification results broadcast by the domain orchestrators and the controllers.

[0093] Step S740: saving the data block in a user service data block warehouse function module.

[0094] Step S750: when the number of received other verification results reaches a preset number, chaining the data block.

[0095] It should be noted that steps S710-S750 correspond to the steps and embodiments shown in FIG. 1. For specific embodiments of steps S710-S750, please refer to the steps and embodiments shown in FIG. 1, which will not be repeated here.

[0096] It can be seen that by implementing the method shown in FIG. 7, the service information check value in the data block can be verified, and the verification result can be broadcast after the verification is passed. When the number of verification results reaches a preset number, the data block can be chained. In the case of a failure in the service execution process, the problem of low fault tracing efficiency and low service enablement efficiency caused by the untrusted relationship between management domains can be avoided. That is, the multi-point storage and non-tamperable characteristics of the blockchain technology can be used to ensure that each operation can be traced and the operation record cannot be tampered with, which is conducive to improving the fault tracing efficiency and service enablement efficiency. In addition, the overall network's resistance to malicious attacks and information tampering can be improved, thereby improving the trust between different management domains.

[0097] Please refer to FIG. 8, which schematically shows a structure diagram of a data processing system according to one embodiment of the present disclosure.

[0098] As shown in FIG. 8, the data processing system 800 includes:

[0099] A target domain orchestrator / target controller 810 broadcasts a data block.

[0100] The other controller 820 verifies the service information check value in the data block in response to the data block, broadcasts the verification result of the self if the verification is passed, receives other verification results broadcast by the domain orchestrator and the controllers, and chains the data block when the number of received other verification results reaches a preset number.

[0101] It can be seen that the system shown in FIG. 8 can verify the service information check value in the data block, broadcast the verification result after the verification is passed, and chain the data block when the number of verification results reaches a preset number. In the case of a failure in the service execution process, the low efficiency of fault tracing and the low efficiency of service enablement caused by the untrusted relationship between the management domains can be avoided. That is, the multi-point storage and the non-tamperable characteristics of the blockchain technology can be used to ensure that each operation can be traced and the operation record cannot be tampered with, which is beneficial to improving the fault tracing efficiency and the service enablement efficiency. In addition, the resistance of the overall network to malicious attacks and information tampering can be improved, and the trust between different management domains can be improved.

[0102] Please refer to FIG. 9, which schematically shows a structural block diagram of a data processing apparatus in one embodiment of the present disclosure. The data processing apparatus 900 corresponds to the method shown in FIG. 1. As shown in FIG. 9, the data processing apparatus 900 comprises:

[0103] The verification unit 901 is configured to verify the service information check value in the data block in response to the data block;

[0104] The broadcast unit 902 is configured to broadcast the verification result of the self if the verification is passed, and receive other verification results broadcast by the domain orchestrator and the controllers;

[0105] The chaining unit 903 is configured to chain the data block when the number of received other verification results reaches a preset number.

[0106] It can be seen that the apparatus shown in FIG. 9 can verify the service information check value in the data block, broadcast the verification result after the verification is passed, and chain the data block when the number of verification results reaches a preset number. In the case of a failure in the service execution process, the low efficiency of fault tracing and the low efficiency of service enablement caused by the untrusted relationship between the management domains can be avoided. That is, the multi-point storage and the non-tamperable characteristics of the blockchain technology can be used to ensure that each operation can be traced and the operation record cannot be tampered with, which is beneficial to improving the fault tracing efficiency and the service enablement efficiency. In addition, the resistance of the overall network to malicious attacks and information tampering can be improved, and the trust between different management domains can be improved.

[0107] In an example embodiment of the present disclosure, the verification unit 901 verifies the service information check value in the data block, comprising:

[0108] The user ID and the service ID are parsed from the service information check value.

[0109] If the user ID is consistent with the user ID carried in the data block, and the service ID is consistent with the service ID carried in the data block, it is determined that the verification is passed.

[0110] It can be seen that the implementation of this embodiment can realize information verification based on data blocks, thereby facilitating the confirmation of the legitimacy of the data block.

[0111] In an example embodiment of the present disclosure, further comprising:

[0112] The determination unit is configured to determine that the verification is not passed if the user ID is inconsistent with the user ID carried in the data block, or the service ID is inconsistent with the service ID carried in the data block.

[0113] It can be seen that the implementation of this embodiment can avoid the verification of illegal data.

[0114] In an example embodiment of the present disclosure, further comprising:

[0115] The storage unit is configured to store the data block in the user service data block warehouse function module.

[0116] It can be seen that the implementation of this embodiment can enrich the function types of the user service data block warehouse function module and improve the capability of the user service data block warehouse function module.

[0117] In an example embodiment of the present disclosure, wherein: the data block is generated by a target controller, the target controller is configured to verify the data block through a distributed ledger consensus mechanism, and broadcast the data block verification result to a central orchestrator, each domain orchestrator, and each controller.

[0118] It can be seen that the implementation of this embodiment can enable the target domain orchestrator to broadcast the data block after verification based on the distributed ledger consensus mechanism, and use blockchain technology to chain the data block, thereby solving the problem of difficulty in trusting between management domains.

[0119] In an example embodiment of the present disclosure, wherein: the domain orchestrator and the controller are connected through a full-mesh connection mode; and the full-mesh connection is used for transmitting the data block.

[0120] It can be seen that the implementation of this embodiment can enable the domain orchestrator and the controller to directly transmit the data block, thereby facilitating the improvement of the transmission efficiency of the data block.

[0121] It should be noted that although several modules or units of the device configured to perform actions are mentioned in the above detailed description, such division is not mandatory. Indeed, according to embodiments of the present disclosure, features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, features and functions of one module or unit described above can be further divided into a plurality of modules or units.

[0122] Referring to FIG. 10, there is shown a structural schematic diagram of a computer system of an electronic device suitable for implementing embodiments of the present disclosure.

[0123] It should be noted that the computer system 1000 of the electronic device shown in FIG. 10 is only an example and should not impose any limitation on the functions and use range of embodiments of the present disclosure.

[0124] As shown in FIG. 10, the computer system 1000 includes a central processing unit (CPU) 1001, which can perform various appropriate actions and processes according to programs stored in a read-only memory (ROM) 1002 or loaded from a storage portion 1008 into a random access memory (RAM) 1003. Various programs and data required for system operation are also stored in the RAM 1003. The CPU 1001, the ROM 1002, and the RAM 1003 are connected to each other through a bus 1004. An input / output (I / O) interface 1005 is also connected to the bus 1004.

[0125] The following components are connected to the I / O interface 1005: an input portion 1006 including a keyboard, a mouse, and the like; an output portion 1007 including a cathode ray tube (CRT), a liquid crystal display (LCD), and the like, and a speaker, and the like; a storage portion 1008 including a hard disk, and the like; and a communication portion 1009 including a network interface card such as a LAN card, a modem, and the like. The communication portion 1009 performs communication processing via a network such as the Internet. A drive 1010 is also connected to the I / O interface 1005 as necessary. A removable recording medium 1011 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, and the like is attached to the drive 1010 as necessary, so that a computer program read therefrom is installed in the storage portion 1008 as necessary.

[0126] In particular, according to embodiments of the present disclosure, the processes described above with reference to the flowcharts can be implemented as a computer software program. For example, embodiments of the present disclosure include a computer program product including a computer program tangibly embodied on a computer readable medium, the computer program containing program code for executing the methods illustrated by the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network through the communication part 1009, and / or installed from the detachable medium 1011. When the computer program is executed by the central processing unit (CPU) 1001, various functions defined in the methods and apparatuses of the present disclosure are executed.

[0127] An exemplary embodiment of the present disclosure also provides a computer program product. The computer program product includes a computer program which, when executed by a processor, implements the above-described data processing method.

[0128] In an embodiment, the computer program product can be a tangible product containing the computer program, such as a computer readable storage medium storing the computer program. The readable storage medium can be a storage medium based on electrical, magnetic, optical, electromagnetic, infrared, and the like signals, including but not limited to random access memory (RAM), read only memory (ROM), magnetic tape, floppy disk, flash memory (Flash), mechanical hard disk (HDD), solid state disk (SSD), and the like. For example, the computer program product can be implemented as a non-volatile storage medium storing the computer program, such as a read only memory (ROM), a NAND flash memory, and the like.

[0129] In an embodiment, the computer program product can be an intangible product containing the computer program. For example, the computer program product can be implemented as a virtual digital product, such as an executable file, an installation package, and the like digital file storing the computer program.

[0130] The code of the computer program can be written in one or more programming languages. Programming languages such as C, Java, C++, and the like. The program code can be executed entirely on the user computing device, or partially on the user computing device, or as a separate software package, or partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case involving a remote computing device, the remote computing device can be connected to the user computing device through any kind of network, such as a local area network (LAN), a wide area network (WAN), and the like, or can be connected to an external computing device (for example, through an Internet connection provided by an operator).

[0131] The computer program can be carried or transmitted by an electric, magnetic, optical, electromagnetic, infrared, or the like signal. The electronic device can convert the signal carrying the computer program into a digital signal, and then run the computer program. When the computer program is run on the electronic device, its code is configured to make the electronic device perform (more specifically, can make the processor of the electronic device perform) the method steps of various exemplary embodiments of the present disclosure, such as can perform the above-mentioned data processing method, which includes the following steps: verifying the service information check value in the data block in response to the data block; if the verification is passed, broadcasting the verification result of the party, and receiving other verification results broadcast by each domain orchestrator and each controller; when the number of received other verification results reaches a preset number, chaining the data block.

[0132] By executing the above-mentioned method steps by the computer program, the service information check value in the data block can be verified, and the verification result can be broadcast after the verification is passed, and when the number of each verification result reaches a preset number, the data block can be chained. In the case of a failure in the service execution process, the problem of low fault tracing efficiency and low service enablement efficiency caused by the untrusted relationship between the management domains can be avoided, that is, the multi-point storage, non-tamperable and other characteristics of the blockchain technology can be used to ensure that each operation can be traced and the operation record cannot be tampered with, which is beneficial to improve the fault tracing efficiency and service enablement efficiency. In addition, the overall network resistance to malicious attacks and information tampering can also be improved, thereby improving the trust between different management domains.

[0133] The flowcharts and block diagrams in the drawings illustrate the possible implementation architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagram can represent a module, a program segment, or a part of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions noted in the blocks can occur in different order than that shown in the drawings. For example, two blocks indicated in succession can actually be executed substantially in parallel, and sometimes they can be executed in reverse order, depending on the function involved. It should also be noted that each block in the block diagram or flowchart, and the combination of blocks in the block diagram or flowchart, can be implemented by a dedicated hardware-based system that performs the specified function or operation, or can be implemented by a combination of dedicated hardware and computer instructions.

[0134] The units described in the embodiments of the present disclosure can be implemented in the form of software, or can be implemented in the form of hardware, and the described units can also be arranged in a processor. In some cases, the names of these units do not constitute a limitation on the units themselves.

[0135] Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the features disclosed herein. It is intended that the disclosure be construed as including any variations, uses, or adaptations of the specific embodiments following, including equivalents thereof, which are within the scope of the disclosure and including such as come within the general scope of the following claims. The specification and examples are to be regarded as exemplary only, and the true scope and spirit of the disclosure being indicated by the following claims.

Claims

1. A data processing method, comprising: in response to a data block, verifying a service information check value in the data block; if the verification is passed, broadcasting a local verification result and receiving other verification results broadcast by domain orchestrators and controllers; when the number of received other verification results reaches a preset number, chaining the data block.

2. The method of claim 1, wherein, Verifying the service information check value in the data block comprises: parsing a user ID and a service ID from the service information check value; if the user ID is consistent with a user ID carried in the data block and the service ID is consistent with a service ID carried in the data block, determining that the verification is passed.

3. The method of claim 2, wherein, Further comprising: if the user ID is not consistent with the user ID carried in the data block or the service ID is not consistent with the service ID carried in the data block, determining that the verification is not passed.

4. The method of claim 1, wherein, Further comprising: storing the data block in a user service data block warehouse function module.

5. The method of claim 1, wherein, The data block is generated by a target controller, the target controller is configured to verify the data block through a distributed ledger consensus mechanism and broadcast a data block verification result to a central orchestrator, domain orchestrators and controllers.

6. The method according to any one of claims 1 to 5, wherein, The domain orchestrators and the controllers are connected through a full-mesh connection mode; wherein the full-mesh connection is used to transmit the data block. 7.A data processing system, comprising: a target domain orchestrator / target controller, broadcasting a data block; other controllers, in response to a data block, verifying a service information check value in the data block; if the verification is passed, broadcasting a local verification result and receiving other verification results broadcast by domain orchestrators and controllers; when the number of received other verification results reaches a preset number, chaining the data block. 8.A data processing apparatus, comprising: a verification unit configured to, in response to a data block, verify a service information check value in the data block; a broadcast unit configured to, if the verification is passed, broadcast a local verification result and receive other verification results broadcast by domain orchestrators and controllers; a chaining unit configured to, when the number of received other verification results reaches a preset number, chain the data block. 9.A computer program product, comprising a computer program, the computer program being executed by a processor to implement the method of any one of claims 1 to 6. 10.An electronic device, comprising: a processor; and a memory configured to store executable instructions of the processor; wherein the processor is configured to implement the method of any one of claims 1-6 by executing the executable instructions. ​

Images