CN113438248B - A self-checking management system for the network IP address of the master station - Google Patents

Abstract

The invention discloses a network IP address self-checking management system convenient for a master station, which belongs to the technical field of data management and comprises an equipment information collection module, an intelligent management module, a vulnerability detection feedback module, a repair log generation module, a data processing module and a retrieval calling module, wherein the intelligent management module is respectively in communication connection with the equipment information collection module, the vulnerability detection feedback module and the data processing module; the invention automatically manages each IP address, avoids misoperation when workers manually manage, reduces safety risk, reduces the number of manual management tasks, improves the working efficiency of the workers, does not need the workers to manually troubleshoot and position leak positions, saves the time of the workers, improves the processing speed of the workers and improves information safety.

Description

A self-checking management system for the network IP address of the master station

technical field

The invention relates to the technical field of data management, in particular to a self-checking management system for a network IP address of a master station.

Background technique

With the expansion of the company's business scale, the continuous development of the level of informatization, and the rapid expansion of network equipment, the existing network management tools of the company can no longer meet the current management. At present, the Network Security Department of the System Operation Department is still using conventional management tools. and management methods, that is, by manually recording IP addresses and managing IP address status, work efficiency is low, and there are inevitable security risks. Accurate tracking of IP addresses in the network and efficient management of IP planning are very important for network security operation and maintenance personnel. Important; therefore, it is particularly important to invent a self-check management system for the master station network IP address;

After searching, Chinese Patent No. CN105872127A discloses an IP address management system. Although the invention makes the total server data more accurate and comprehensive, and has high fault tolerance, it requires staff to manage the IP address manually, which may lead to work problems. Safety risk of personnel misoperation; in addition, when an abnormal operation occurs during the management of each IP address by the existing IP address self-check management system of the master station network, the system cannot be terminated in time and the abnormal data can be fed back to the staff. Manual inspection of erroneous data and vulnerability location and repair increase the workload of the staff, and the risk of information security is high. For this reason, we propose a self-inspection management system for the network IP address of the main station.

SUMMARY OF THE INVENTION

The purpose of the present invention is to propose a self-checking management system for the network IP address of the master station in order to solve the defects existing in the prior art.

In order to achieve the above object, the present invention adopts the following technical solutions:

A self-checking management system for the network IP address of the main station is convenient, including a device information collection module, an intelligent management module, a vulnerability detection feedback module, a repair log generation module, a data processing module and a retrieval calling module;

The intelligent management module is respectively connected in communication with the device information collection module, the vulnerability detection feedback module and the data processing module, the vulnerability detection feedback module is in communication connection with the repair log generation module, and the retrieval calling module is respectively connected with the data processing module and the repair log generation module communication connection;

The device information collection module includes a data collection unit and a management list update unit.

Further, the management list update unit is used to receive the management list uploaded by the staff, and update the data of the management list stored in the external server, and the specific steps of the data update are as follows:

Step 1: the management list update unit receives the management list uploaded by the user, and starts to extract the past management list from the external server;

Step 2: Compare the data of the two sets of management lists, and delete the duplicate IP addresses. After the deletion is complete, start to integrate the data to generate a new management list, and upload it to the server for storage;

The data collection unit is used to detect and collect various information of the user equipment in real time, and to classify and mark it. The specific steps of the classification and marking are as follows:

Step (1): the data collection unit starts to call the IP address management list stored in the external server, and starts to collect information on the user equipment corresponding to the IP address in the list;

Step (2): classify the collected information according to the device name, device connection status and device operation data, and mark them as A, B, and C respectively;

Step (3): marking is completed, and different operation rights are assigned to the user equipment according to the user identity information to which the user equipment belongs.

Further, the user equipment is specifically one of a notebook computer, a mobile Ipad or a smart phone.

Further, the intelligent management module is used to receive A, B and C, and perform intelligent management on them, and the specific steps of the intelligent management are as follows:

Step 1: The intelligent management module starts to analyze the data of B and C according to the internal script data. If there is an abnormality in B or C, it starts to query the relevant device name A;

Step 2: After the device name A query is completed, start tracking the corresponding IP address and delete or modify it.

Further, the vulnerability detection feedback module is used for real-time monitoring of the intelligent management module, and the monitoring results are fed back to the staff. The specific steps of the real-time monitoring are as follows:

S1: The intelligent management module starts to run, and the vulnerability detection feedback module starts to monitor it in real time. If there is an abnormality in processing, the operation of the intelligent management module will be interrupted, and the staff will be fed back that "manual changes are required";

S2: Locating data for processing exceptions, and feeding it back to the staff, at the same time, the staff's repair operations are processed through data conversion to generate record data, and sent to the repair log generation module;

The repair log generation module is used to generate a vulnerability repair log by itself, and record the date of discovery of the vulnerability, the type of the vulnerability, the location of the vulnerability, the date of repair, and the name of the repairer, and at the same time, the generated vulnerability repair log is numbered and uploaded to an external server for processing. storage.

Further, the data processing module is used to receive the processing information of each IP address, and perform data recording on it, and generate a processing log at the same time, and the specific steps of its data recording are as follows:

SS1: Collect data manually processed by staff and automatically processed by intelligent management module;

SS2: After the collection is completed, extract the IP address, user device name, abnormal operation information and processing results from the two sets of data, import them into the table, and generate processing logs;

SS3: Number the generated processing logs and upload them to an external server for storage.

Further, the retrieval and calling module is used for the staff to call and view the repair log and the processing log, and the specific steps of the call and view are as follows:

P1: The staff enters the file type to be viewed through the external input device, and the retrieval calling module starts to detect and judge it, and classify it according to the repair log and processing log, and mark them as X and Y respectively;

P2: The judgment is completed, and the user enters the generation date Z and the file number N of the file to be viewed again;

P3: The retrieval calling module starts to accurately retrieve the files stored in the external server according to the X or Y, Z and N input by the user, and feeds back the retrieval results to the staff for viewing.

Further, the input device is specifically one of a keyboard, an electronic pen or a touch screen.

Compared with the prior art, the beneficial effects of the present invention are:

1. The present invention is provided with an intelligent management module, the equipment information collection module completes the collection of user equipment information according to the IP address list, and at the same time, intelligently allocates the permissions of each user equipment, and the intelligent management module receives the relevant user equipment information and starts to carry out the user equipment. Real-time monitoring, if the device connection status and device operation data are abnormal, the intelligent management module starts to delete or modify the IP address corresponding to the user device according to the internal script data, and can manage each IP address by itself to avoid staff Misoperations occur during manual management, reduce security risks, reduce the number of manual management tasks, and improve staff work efficiency;

2. The present invention is provided with a vulnerability detection feedback module. When the intelligent management module has an abnormal operation in the process of managing the IP address corresponding to the user equipment, the vulnerability monitoring feedback module starts to interrupt the operation of the intelligent management module, and the IP address of the error processing is processed. The address information is fed back to the staff, and the data loopholes are automatically located and fed back to the staff. At the same time, the staff is reminded to repair the data. There is no need for the staff to manually check and locate the vulnerability location, saving staff time and improving staff handling. speed and improve information security.

Description of drawings

The accompanying drawings are used to provide a further understanding of the present invention, and constitute a part of the specification, and are used to explain the present invention together with the embodiments of the present invention, and do not constitute a limitation to the present invention.

Fig. 1 is a kind of system block diagram that is convenient for the self-check management system of the main station network IP address proposed by the present invention;

FIG. 2 is a schematic structural diagram of a device information collection module in a self-check management system for a network IP address of a master station according to the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments.

In the description of the present invention, it should be understood that the terms "upper", "lower", "front", "rear", "left", "right", "top", "bottom", "inside", " The orientation or positional relationship indicated by "outside" is based on the orientation or positional relationship shown in the accompanying drawings, and is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the indicated device or element must have a specific orientation, so as to The specific orientation configuration and operation are therefore not to be construed as limitations of the present invention.

Referring to Fig. 1-2, a self-check management system for the network IP address of the main station is convenient, including a device information collection module, an intelligent management module, a vulnerability detection feedback module, a repair log generation module, a data processing module, and a retrieval calling module;

The intelligent management module is respectively connected to the device information collection module, the vulnerability detection feedback module and the data processing module, the vulnerability detection feedback module is connected to the repair log generation module, and the retrieval call module is respectively connected to the data processing module and the repair log generation module. ;

The device information collection module includes a data collection unit and a management list update unit.

The management list updating unit is used for receiving the management list uploaded by the staff, and updating the data of the management list stored in the external server.

Specifically, the data update working principle of the management list update unit is as follows: the management list update unit receives the management list uploaded by the user, starts to extract the past management list from the external server, compares the data of the two sets of management lists, and repeats the IP address. After the address is deleted, the deletion is completed, and the data will be integrated to generate a new management list, which will be uploaded to the server for storage.

The data collection unit is used to detect and collect various information of the user equipment in real time, and classify and mark it.

This embodiment provides a classification marking method, and the specific working principle of the classification marking is as follows: the data collection unit starts to call the IP address management list stored in the external server, and starts to collect information on the user equipment corresponding to the IP addresses in the list , classify the collected information according to the device name, device connection status, and device operation data, and mark them as A, B, and C, respectively. The marking is completed, and different operation permissions are assigned to the user equipment according to the user identity information to which the user equipment belongs. .

Specifically, the user equipment provided in this embodiment is one of a notebook computer, a mobile Ipad, or a smart phone.

The intelligent management module is used to receive A, B and C, and manage them intelligently.

In this embodiment, an intelligent management method is disclosed. The intelligent management works as follows: the intelligent management module starts to perform data analysis on B and C according to the internal script data, and if there is an abnormality in B or C, it starts to analyze the relevant device name. A performs a query, the device name A query is completed, and the corresponding IP address is tracked and deleted or modified.

The vulnerability detection feedback module is used for real-time monitoring of the intelligent management module, and feedback the monitoring results to the staff.

A vulnerability monitoring feedback module is disclosed in this embodiment. The specific function of the vulnerability monitoring feedback module is: when the intelligent management module starts to run, the vulnerability detection feedback module starts to monitor it in real time, and if there is a processing abnormality, the intelligent management is interrupted. The module runs and feeds back to the staff that "manual changes are required", locates the data for processing exceptions, and feeds them back to the staff. At the same time, the staff's repair operations are processed through data conversion to generate record data and send it to the repairer. log generation module;

The repair log generation module is used to generate a vulnerability repair log by itself, and record the date of vulnerability discovery, vulnerability type, location of vulnerability occurrence, repair date, and the name of the repairer, and at the same time, the generated vulnerability repair log is numbered and uploaded to an external server for storage.

The data processing module is used to receive the processing information of each IP address, record the data, and generate a processing log at the same time.

Specifically, the specific data recording principle of the data processing module is as follows: Collect the data manually processed by the staff and the data automatically processed by the intelligent management module. After the collection is completed, the IP address, user device name, abnormal operation information, and processing information are extracted from the two sets of data. As a result, it is imported into the table at the same time, and a processing log is generated, and the generated processing log is numbered and uploaded to an external server for storage.

The retrieval call module is used by workers to call and view the repair log and processing log.

In this embodiment, a method for calling and viewing is disclosed, and its specific working principle is as follows: a worker inputs the file type to be viewed through an external input device, the retrieval and calling module starts to detect and judge it, and executes the process according to the repair log and the processing log. Classify and mark them as X and Y respectively. After the judgment is completed, the user enters the generation date Z and the file number N of the file to be viewed again, and the retrieval calling module starts to use the X or Y, Z and N input by the user to store in the external server. The documents are precisely searched, and the search results are fed back to the staff for review.

This embodiment discloses an input device, which is specifically one of a keyboard, an electronic pen or a touch screen.

The above description is only a preferred embodiment of the present invention, but the protection scope of the present invention is not limited to this. The equivalent replacement or change of the inventive concept thereof shall be included within the protection scope of the present invention.

Claims (6)

1. A master station network IP address self-checking management system is convenient to use and is characterized by comprising an equipment information collection module, an intelligent management module, a vulnerability detection feedback module, a repair log generation module, a data processing module and a retrieval calling module;

the intelligent management module is respectively in communication connection with the equipment information collection module, the vulnerability detection feedback module and the data processing module, the vulnerability detection feedback module is in communication connection with the repair log generation module, and the retrieval calling module is respectively in communication connection with the data processing module and the repair log generation module;

the equipment information collection module comprises a data collection unit and a management list updating unit;

the management list updating unit is used for receiving the management list uploaded by the staff and updating data of the management list stored in the external server, and the data updating specifically comprises the following steps:

the method comprises the following steps: the management list updating unit receives the management list uploaded by the user and starts to extract the past management list from the external server;

step two: comparing the data of the two management lists, deleting the repeated IP addresses, starting to integrate the data to generate a new management list, and uploading the new management list to a server side for storage;

the data collection unit is used for detecting and collecting various information of the user equipment in real time and carrying out classification marking on the information, and the specific steps of the classification marking are as follows:

step (1): the data collection unit starts to call an IP address management list stored in an external server and starts to collect information of the user equipment corresponding to the IP address in the list;

step (2): classifying the collected information according to the device name, the device connection state and the device operation data, and respectively marking the information as A, B, C;

and (3): after marking is finished, different operation authorities are allocated to the user equipment according to the user identity information of the user equipment;

the intelligent management module is used for receiving A, B and C and performing intelligent management on the C, and the intelligent management comprises the following specific steps:

the first step is as follows: the intelligent management module starts to perform data analysis on the B and the C according to the internal script data, and if the B or the C is abnormal, the intelligent management module starts to inquire the related equipment name A;

the second step is that: and after the equipment name A is inquired, tracking the corresponding IP address, and deleting or modifying the corresponding IP address.

2. The system for facilitating self-check management of the network IP address of the master station as claimed in claim 1, wherein the user device is one of a laptop, a mobile Ipad, or a smart phone.

3. The system for facilitating self-check management of the IP address of the master station network according to claim 1, wherein the vulnerability detection feedback module is used for monitoring the intelligent management module in real time and feeding back a monitoring result to a worker, and the real-time monitoring comprises the following specific steps:

s1: the intelligent management module starts to operate, the vulnerability detection feedback module starts to monitor the vulnerability in real time, if processing abnormity exists, the operation of the intelligent management module is interrupted, and a worker is fed back to 'need to manually change';

s2: performing data positioning on the processing abnormity, feeding the processing abnormity back to a worker, generating recording data by performing data conversion processing on the repair operation of the worker, and sending the recording data to a repair log generation module;

the bug fixing log generating module is used for generating bug fixing logs by itself, recording bug finding date, bug types, bug generating positions, fixing dates and fixing personnel names, numbering the generated bug fixing logs and uploading the bug fixing logs to an external server for storage.

4. The system for facilitating self-check management of the IP address of the master station network according to claim 1, wherein the data processing module is configured to receive the processing information of each IP address, perform data recording on the processing information, and generate a processing log, and the data recording specifically comprises the following steps:

SS 1: collecting manual processing data of workers and automatic processing data of an intelligent management module;

SS 2: after the collection is finished, extracting an IP address, a user equipment name, abnormal operation information and a processing result from the two groups of data, importing the IP address, the user equipment name, the abnormal operation information and the processing result into a form, and generating a processing log;

SS 3: and numbering the generated processing logs, and uploading the processing logs to an external server for storage.

5. The system for facilitating self-check management of the IP address of the master station network according to claim 4, wherein the retrieval calling module is used for a worker to call and check the repair log and the processing log, and the specific steps of the call and check are as follows:

p1: the method comprises the following steps that a worker inputs a file type to be checked through an external input device, a retrieval calling module starts to detect and judge the file type, and the file type is classified according to a repair log and a processing log and is respectively marked as X, Y;

p2: after the judgment is finished, the user inputs the file generation date Z and the file number N which need to be checked again;

p3: the retrieval calling module starts to accurately retrieve the files stored in the external server according to X or Y, Z and N input by the user and feeds back the retrieval result to the staff for viewing.

6. The system for facilitating self-check management of the IP address of the master station as claimed in claim 5, wherein the input device is one of a keyboard, an electronic pen and a touch screen.

Images