CN106534362B

CN106534362B - Software resource sharing method and device based on cloud platform

Info

Publication number: CN106534362B
Application number: CN201611153516.5A
Authority: CN
Inventors: 顾长鸿; 周新星; 智伟威; 杨磊; 杜楠; 汤冬晓
Original assignee: Space Communication Center
Current assignee: Space Communication Center
Priority date: 2016-12-14
Filing date: 2016-12-14
Publication date: 2020-03-27
Anticipated expiration: 2036-12-14
Also published as: CN106534362A

Abstract

The invention discloses a software resource sharing method and device based on a cloud platform. Wherein, the method comprises the following steps: acquiring hardware resources, wherein the hardware resources comprise at least one of the following: storage resources, computing resources, network resources; mapping the hardware resources into virtual resources; receiving software or application uploaded by a first user through an interface; and allocating the required virtual resources for the software or the application according to the requirements of the software or the application. The invention solves the technical problems of high software cost, reduced user acceptance, large post maintenance and poor expandability of software deployment caused by the software deployment mode of the traditional architecture.

Description

Software resource sharing method and device based on cloud platform

Technical Field

The invention relates to the field of software processing, in particular to a method and a device for sharing software resources based on a cloud platform.

Background

With the increasingly fine specialized division and the increasing emphasis on efficiency and benefits in manufacturing industry, software tools are widely applied and play an important role, and by using the software tools with strong functions, high integration, flexibility and easy use, technical innovation and application capability can be greatly improved, the production period of products is shortened, the production cost of the products is reduced, and the efficiency and benefits in manufacturing industry are greatly improved.

At present, widely used software tools can be classified into a B/S architecture and a C/S architecture according to software architectures, wherein the software tools belong to the C/S architecture, such as industrial aided design software CAD, quality reliability software ReliaSoft series (BlockSim, XFMEA, ALTA, MPC, RCM + +), data analysis software MiniTab, Matlab, and the like, and the software tools belong to the B/S architecture, such as OA (office automation), ERP (enterprise resource management), CRM (customer relationship management); the deployment, maintenance and upgrade of B/S architecture software requires a management server, and a client configures a browser to realize remote maintenance, upgrade and sharing. The deployment mode of the C/S architecture software is that a client program is installed on each computer, and the client needs to perform data interaction with the server.

The traditional software deployment mode of the B/S architecture is influenced by bandwidth limitation when used in the Internet environment, the security aspect also faces challenges, and the capital investment is large; the software operation effect of the traditional C/S architecture deployment mode is restricted by the performance of computer hardware. A plurality of problems also exist in the popularization and application of software tools, such as high use cost and reduced user acceptance; the software supply objects are relatively dispersed, so that the software is repeatedly purchased and the later maintenance and upgrading investment is huge; the expandability of software deployment is poor, and software resources are scattered; slow software running speed and the like.

For some common software such as office software, development software, security protection software and the like, due to the fact that the required copy quantity is huge, the software cannot be fully covered, all or part of functions of the software cannot be used, or the software is tedious to use and maintain at a later stage. For software which is used infrequently, in order to guarantee the legal version, the software may be used only twice after being purchased, so that the cost benefit of investment is low, and the software cannot be used for 'pay lease' sparingly. The new software deployment often needs to expand the bandwidth, sometimes needs to open a special port, the firewall configuration is complicated, and the software running speed is very slow due to the limited local computing resources and computing capacity.

In view of the above problems, no effective solution has been proposed.

Disclosure of Invention

The embodiment of the invention provides a method and a device for sharing software resources based on a cloud platform, which at least solve the technical problems of high software cost, reduced user acceptance, large post-maintenance and poor expandability of software deployment caused by a software deployment mode of a traditional architecture.

According to an aspect of the embodiments of the present invention, there is provided a method for sharing software resources based on a cloud platform, including:

acquiring hardware resources, wherein the hardware resources comprise at least one of the following: storage resources, computing resources, network resources; mapping the hardware resources into virtual resources, wherein the virtual resources are logic resources mapped by the hardware resources, and the virtual resources include at least one of the following: virtual storage, virtual servers, virtual networks; the virtual storage is obtained by mapping the storage resources, and the storage resources are managed by managing the virtual storage; the virtual server is obtained by mapping the computing resources, and the computing resources are managed by managing the virtual server; the virtual network is obtained by mapping the network resources, and the network resources are managed by managing the virtual network; software or applications uploaded by a first user through an interface; and allocating the required virtual resources for the software or the application according to the requirements of the software or the application.

Further, in a case where the requirement includes operation information of the software or the application, the method further includes: providing operation service for the software or the application through a service operation management system according to the operation information, wherein the service operation management system operates on the virtual resource and is used for managing the uploaded software; the management includes at least one of: version management, billing management, software or application usage analysis.

Further, before providing the operation service for the software or the application through the business operation management system, the method further comprises: providing a registration service, wherein the registration service is used for indicating a first user to register in a business operation management system; the first user is made a registered user through the registration service.

Further, the method further comprises: receiving a software or application use request of a second user through a service operation management system; displaying part or all of the operation information of the application or the software to a second user through a service operation management system, wherein the displayed operation information is used for expressing the requirement on the software or the application user; and under the condition that the second user accepts the requirement, managing the software or application used by the second user through the service operation management system.

Further, the method further comprises: determining the safety level of the software or the application according to the running or using condition of the software or the application on the virtual resource; and adjusting the virtual resources corresponding to the software or the application according to the security level of the software or the application.

According to another aspect of the embodiments of the present invention, there is also provided a device for sharing software resources based on a cloud platform, including:

an obtaining unit, configured to obtain a hardware resource, where the hardware resource includes at least one of: storage resources, computing resources, network resources; a mapping unit, configured to map a hardware resource into a virtual resource, where the virtual resource is a logic resource mapped by the hardware resource, and the virtual resource includes at least one of: virtual storage, virtual servers, virtual networks; the virtual storage is obtained by mapping the storage resources, and the storage resources are managed by managing the virtual storage; the virtual server is obtained by mapping the computing resources, and the computing resources are managed by managing the virtual server; the virtual network is obtained by mapping the network resources, and the network resources are managed by managing the virtual network;

the receiving unit is used for receiving software or application uploaded by a first user through an interface;

and the allocation unit is used for allocating the required virtual resources to the software or the application according to the requirements of the software or the application.

Further, in a case where the requirement includes operation information of the software or the application, the apparatus further includes:

the system comprises a providing unit, a service operation management unit and a service processing unit, wherein the providing unit is used for providing operation service for software or application through a service operation management system according to operation information, and the service operation management system runs on virtual resources and is used for managing uploaded software; the management includes at least one of: version management, billing management, software or application usage analysis.

Further, the apparatus further comprises: the system comprises a registration unit, a service management unit and a service management unit, wherein the registration unit is used for providing registration service, and the registration service is used for indicating a first user to register in a service operation management system; the first user is made a registered user through the registration service.

Further, the apparatus further comprises: a second receiving unit, configured to receive, through the service operation management system, a software or application use request from a second user; the display unit is used for displaying part or all of the operation information of the application or the software to a second user through the service operation management system, wherein the displayed operation information is used for expressing the requirements of the software or the application user; and under the condition that the second user accepts the requirement, managing the software or application used by the second user through the service operation management system.

Further, the apparatus further comprises: the determining unit is used for determining the safety level of the software or the application according to the running or using condition of the software or the application on the virtual resource; and the adjusting unit is used for adjusting the virtual resources corresponding to the software or the application according to the security level of the software or the application.

In the embodiment of the invention, hardware resources are acquired, the hardware resources are mapped into virtual resources, virtual storage is obtained by mapping storage resources, and the storage resources are managed by managing the virtual storage; the virtual server is obtained by mapping the computing resources, and the computing resources are managed by managing the virtual server; the virtual network is obtained by mapping the network resources, and the network resources are managed by managing the virtual network; software or applications uploaded by a first user through an interface; the method for distributing the needed virtual resources for the software or the application according to the requirements of the software or the application achieves the purposes of integrating software resources and minimizing the investment on software popularization and application compared with the existing software under the condition of ensuring the same software use benefit by establishing a cloud platform and having a matched service operation management system, thereby realizing the technical effects of software resource sharing and software resource value transfer based on the cloud platform, promoting the manufacturing industry digitization and intellectualization to drive business decisions, and further solving the technical problems of high software cost, low user acceptance, large later maintenance and poor software deployment expandability caused by the software deployment mode of the traditional architecture.

Drawings

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the invention without limiting the invention. In the drawings:

FIG. 1 is a flowchart of a method for sharing software resources based on a cloud platform according to an embodiment of the present invention;

FIG. 2 is a schematic diagram of a cloud platform based software tool service system according to an embodiment of the invention;

FIG. 3 is an illustration of a cloud platform based software tool service system usage graph according to an embodiment of the invention;

FIG. 4 is a schematic diagram of a software provider use case specification and constraints, according to an embodiment of the invention;

FIG. 5 is a schematic diagram of a user use case specification and constraints, according to an embodiment of the invention;

FIG. 6 is a timing diagram of a cloud platform based software tool service system according to an embodiment of the present invention;

FIG. 7 is a diagram of a virtual resource management function according to an embodiment of the invention;

FIG. 8 is a cloud platform architecture diagram according to an embodiment of the present invention;

FIG. 9 is a modeling description of a business system operations system according to an embodiment of the invention;

FIG. 10 is a flowchart of a method for uploading software to a business operations management system according to an embodiment of the invention;

FIG. 11 is a flowchart of a software purchase and payment method according to an embodiment of the present invention;

FIG. 12 is a diagram of a business operations management system architecture, in accordance with an embodiment of the present invention;

FIG. 13 is a diagram of an operation and maintenance monitoring and security architecture according to an embodiment of the present invention;

FIG. 14 is a schematic diagram of a cloud platform relating to security issues, according to an embodiment of the present invention;

FIG. 15 is a schematic diagram of a cloud platform relating to a list of security issues, in accordance with an embodiment of the present invention;

FIG. 16 is a block diagram of a cloud platform backup network according to an embodiment of the present invention;

FIG. 17 is a schematic illustration of a machine room infrastructure security in accordance with an embodiment of the present invention; and

fig. 18 is a schematic diagram of an apparatus for sharing software resources based on a cloud platform according to an embodiment of the present invention.

Detailed Description

In order to make the technical solutions of the present invention better understood, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used is interchangeable under appropriate circumstances such that the embodiments of the invention described herein are capable of operation in sequences other than those illustrated or described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

Example 1

In accordance with an embodiment of the present invention, there is provided a method embodiment for cloud platform-based software resource sharing, it should be noted that the steps illustrated in the flowchart of the drawings may be performed in a computer system such as a set of computer-executable instructions and that, although a logical order is illustrated in the flowchart, in some cases, the steps illustrated or described may be performed in an order different than here.

Fig. 1 is a method for sharing software resources based on a cloud platform according to an embodiment of the present invention, as shown in fig. 1, the method includes the following steps:

step S102, obtaining hardware resources, wherein the hardware resources include at least one of the following: storage resources, computing resources, network resources.

In an alternative provided by step S102, a management system resource corresponding to the hardware resource, a security system for maintaining the hardware resource, and a management system for monitoring the hardware resource are also obtained, for example: a software tool service system based on a cloud platform; the software tool service system based on the cloud platform can mean that the cloud platform is built, software services are packaged, converted, popularized and operated, and the software and the cloud platform are maintained.

In an alternative embodiment, taking the cloud platform-based software tool service system as an example, as shown in fig. 2, the cloud platform-based software tool service system has five parties including a leader and a supervisor, a cloud service provider, a software provider, an evaluator, and a user; the leader and the supervisor are responsible for specifying a policy and service specification system, permitting the joining of all parties in the ecological chain and supervising all parties in the ecological chain; the cloud platform service party is responsible for the construction, service operation, operation maintenance and release popularization of the cloud platform; the evaluation party provides evaluation work in aspects of a security and secrecy system and the like; the software provider is responsible for designing and developing software, maintaining and upgrading software and describing basic software resources; the user is only interested in purchasing services, functional usage and rating services.

In a software tool service system based on a cloud platform, a mode of 'division of labor and cooperation and each other' is fully mapped: for a user, only paying attention to and defining own business requirements, selecting and purchasing or leasing required software services and using various functions provided by the software services, and the operation maintenance of the cloud service platform and the update and upgrade of the software programs are not related to the user any more; the software provider needs to be responsible for the design and development work of the software program, and the energy is not dispersed in the aspects of market promotion, sales and the like of software products; and the cloud service provider is responsible for building a cloud platform, packaging, converting, popularizing and operating the software service, and maintaining the software and the cloud platform.

In an alternative embodiment, taking a usage graph of a cloud platform-based software tool service system as an example, as shown in fig. 3, a service flow situation is described in detail for usage graphs of a software provider, a cloud service provider, and a user.

The software provider needs to describe the software resource to be released according to the software resource description template so as to realize the access of the software resource; software provider use case specification and constraints, as shown in FIG. 4; the user can know that the software product carries out online experience in the experience special area through the cloud service platform; purchasing a product required for use selection after confirming the order; user use case specification and constraints are shown in FIG. 5.

The cloud service provider operates and promotes different types of virtual software services on the platform according to the resources of the cloud platform, the management platform checks payment information with the online payment subsystem, after an order is confirmed, an instruction is sent to a business background, the background automatically selects equipment with the best performance, configures related services, automatically associates user accounts, establishes an ordering binding relationship, manages users, learns account information, checks statistical reports according to different requirements, and analyzes business development conditions.

In an alternative embodiment, taking a time sequence diagram of a software tool service system based on a cloud platform as an example, as shown in fig. 6, a service passes through a non-standard terminal layer, a terminal admission layer, a controlled standard terminal layer and a service application layer in common; the whole process passes through 10 steps, whether a client sending a request is a valid client IP needs to be judged on a non-standard terminal layer, if the client is the valid client IP, the message is continuously transmitted, otherwise, the message is directly discarded; and judging whether the terminal is in the security domain or not in a terminal access layer, if so, performing the security domain message transmission, and otherwise, directly discarding.

Through the step S102, the new user can become a regular user of the cloud platform software tool service system through registration in the cloud platform software tool service system, and after logging in an account, the cloud platform software tool service system can be accessed to browse software, view software and rent the software; the cloud platform software tool service system can store the account information of the user, the use information of the software and data generated in the process of using the software in a 'cloud storage' mode.

Step S104, mapping the hardware resource into a virtual resource, wherein the virtual resource is a logic resource mapped by the hardware resource, and the virtual resource comprises at least one of the following: virtual storage, virtual servers, virtual networks; the virtual storage is obtained by mapping the storage resources, and the storage resources are managed by managing the virtual storage; the virtual server is obtained by mapping the computing resources, and the computing resources are managed by managing the virtual server; the virtual network is obtained by mapping the network resources, and the network resources are managed by managing the virtual network.

In an alternative provided by the step S104, the virtual resource is managed by a virtual resource management system; the virtual resource management system is a plug-in supporting platform system which is used for realizing management of a virtual machine and a system deployed in the virtual machine and unified management of storage resources based on a virtualization technology.

In an alternative embodiment, taking the virtual resource management function diagram as an example, as shown in fig. 7, the virtual resource management function diagram includes: resource management, resource monitoring, resource analysis, monitoring alarms, and acceptance delivery.

The resource management provides asset information and configuration discovery of servers, networks, storage, software and applications in a cloud platform software tool service system and provides relationship analysis among all discovery objects; asset query and maintenance functions are provided through a good interface; and (5) monitoring resources.

The virtual resource monitoring is a non-interference state reading behavior on the running state of the virtual environment; configuration parameters and operation parameters of a virtual data center, a computing node, a physical host, a virtual host and virtual storage can be obtained through monitoring; the virtual resource monitoring realizes showing the configuration, performance indexes and historical data of a virtual machine, a physical machine and a computing node; the virtual resource monitoring realizes the connection dependency among the virtual machine, the physical machine and the computing node; monitoring virtual resources to realize a spatial distribution view of the virtual resources; and displaying the service-related virtual machine and physical machine resource running views according to the service relationship.

Setting a prediction threshold and analyzing statistical resource trends in resource analysis, wherein the setting of the prediction threshold analyzes the virtual resource trends through a virtual resource management system, and the prediction threshold is set; and counting the resource trend, and making virtual resource trend statistics through a virtual resource management system.

Monitoring alarm can be realized by monitoring virtual resources in real time, setting a monitoring threshold value, alarming when the monitoring alarm exceeds the threshold value to generate an alarm event, and sending event information to the ITSM operation and maintenance management platform; sending an event notification mail, sending alarm event information and sending the event notification mail, and informing related personnel of event processing; and counting the alarm events and generating an event report.

The acceptance and delivery can realize the functions of the user for applying and using the virtual resources on line, and the virtual host resources are applied and used on line through the acceptance and delivery platform and are obtained.

Through the step S104, the purpose of managing the network resources through the management virtual network can be achieved.

And step S106, receiving the software or the application uploaded by the first user through the interface, and distributing the required virtual resources for the software or the application according to the requirements of the software or the application.

In an alternative solution provided in step S106, a request instruction of software or application uploaded by the first user is received through an interface, and the virtual resource is allocated according to a requirement of the software or application corresponding to the request instruction.

In an alternative embodiment, taking a cloud platform as an example, as shown in fig. 8, the cloud platform includes eight modules; from bottom to top are computer lab infrastructure, physical layer, virtual layer and application layer in proper order, and the management system who corresponds with it includes: machine room management, virtual resource management and operation and maintenance monitoring guarantee system, the left part in the figure is a cloud security system of a system architecture, wherein the cloud security system comprises a cloud security management platform and a system for each layer of the cloud platform, such as: a machine room, a physical layer, a virtual layer, an application layer and a system layer.

Specifically, the cloud security management platform manages a security system in a cloud platform architecture from compliance and security policy prevention; running logs and updating of the cloud platform are recorded, and monitoring and prediction are carried out by using a big data analysis algorithm, so that the security situation of the cloud platform is sensed and predicted; an emergency response is generated immediately upon monitoring a safety issue.

Each layer of security protection system of the cloud platform aims at the security related to each layer in the cloud platform architecture; the safety of the cloud platform is ensured through the omnibearing safety strategy protection of layered defense and depth defense; namely a service operation management system, an application layer, a virtual layer and a physical layer aiming at a cloud platform; from the technical point of view, a sustainable and reliable security guarantee system is established; from the perspective of policy, organization and flow, a closed-circuit monitoring and access control system and a cloud post and watch security strategy are adopted for a machine room.

The business operation management system divides services provided by the cloud platform into software application services, unified software services, general services and other services aiming at the business process and business mode of the cloud platform, and makes a detailed operation scheme by referring to the whole operation mode to the existing telephone and broadband services of the aerospace private network, so as to provide software leasing services, computing services and storage services for users and provide differentiated services for the requirements of each service level; in addition, the user may request services, view service status, perform changes, pay fees, and credit ratings.

The application layer deploys typical general software and autonomous software; such as trusted software, management software, and other desktop applications.

The virtual layer is based on the hardware of the mature architecture, and comprises the following steps: the server, the storage and the network equipment are completely virtualized, a shared infrastructure resource facility distributed according to needs is established, and resources can be distributed and automatically increased according to needs; and meanwhile, a distributed data storage system is built for storing and accessing mass data.

The physical layer is a self-built network with reasonable main structure, safety and stability, and a complete modern machine room infrastructure, and provides a good hardware foundation and an implementation environment for establishing a cloud platform on the physical level.

The virtual resource management system mainly manages virtual resources under the cloud platform, so that the operation cost can be reduced; the method provides a perfect support platform for optimizing key service processes and workflows in the cloud platform; in addition, the virtual management system has the option of providing proper management function, so that the requirements of different system structures with different scales can be met; the virtual management platform can be used for aggregating network, storage, memory and CPU resources and managing the resources as a resource set which can be dynamically allocated based on business requirements.

The operation and maintenance monitoring and guaranteeing system can be oriented to monitoring and managing software; the system follows the network management technical specification; the system can automatically, accurately and timely find the platform network topology structure, and continuously monitor and report the operation condition of the service; analyzing and counting the historical performance parameters of the service operation, and providing a scientific basis for system capacity expansion and optimization; and man-machine binding is realized through functions such as IP/MAC address binding, and the like, so that the safe and reliable operation of an information system deployed on the platform is guaranteed.

Through the step S106, the purpose of allocating the required virtual resources to the software or the application according to the requirement of the software or the application can be achieved.

In the solutions disclosed in the above steps S102 to S106, the hardware resources are obtained, the hardware resources are mapped into virtual resources, the virtual storage is obtained by mapping the storage resources, and the storage resources are managed by managing the virtual storage; the virtual server is obtained by mapping the computing resources, and the computing resources are managed by managing the virtual server; the virtual network is obtained by mapping the network resources, and the network resources are managed by managing the virtual network; software or applications uploaded by a first user through an interface; the method for distributing the needed virtual resources for the software or the application according to the requirements of the software or the application achieves the purposes of integrating software resources and minimizing the investment on software popularization and application compared with the existing software under the condition of ensuring the same software use benefit by establishing a cloud platform and having a matched service operation management system, thereby realizing the technical effects of software resource sharing and software resource value transfer based on the cloud platform, promoting the manufacturing industry digitization and intellectualization to drive business decisions, and further solving the technical problems of high software cost, low user acceptance, large later maintenance and poor software deployment expandability caused by the software deployment mode of the traditional architecture.

In an optional embodiment, in the case that the requirement includes operation information of the software or the application, the method further includes: providing operation service for the software or the application through a service operation management system according to the operation information, wherein the service operation management system operates on the virtual resource and is used for managing the uploaded software; the management includes at least one of: version management, billing management, software or application usage analysis.

In the scheme, the operation information comprises software description, and the reference quotation cost of the corresponding operation service is provided through the software description; the software description comprises basic software information, software performance information and software use information;

specifically, the software basic information may refer to a software name, a software provider, and a software profile.

The software performance information may describe the related performance of the software so as to provide necessary reference information for users, and may include the maximum number of users, that is, the maximum online user usage amount that the software can bear in the same time period; maximum storage capacity, i.e. the maximum value of the software storage physical space; response time, i.e., the average time required for the software to run formally from startup.

The software use information can be the description of software service process information and can contain the price of the software service, namely the cost required to be paid to a software provider when the software is used; the software service use time is determined according to different time limits of software attributes and different time cost of the software attributes when the software is not limited, and the software time when the software is not limited can have no requirement; the software service transaction content is the range restriction of the service content in the software transaction process.

It should be noted that, taking the service operation management system as an example, as shown in fig. 9, the service operation management system is a virtual software product which is made by a service operator according to the resources of the platform and the cost accounting, and is released on the platform; after the user registers and logs in, the user knows the software product through the cloud platform and experiences online in the experience special area to know the characteristics of the software product; after confirming the ordering intention, selecting a needed product, wherein the product can use the parameters of self-defining adjustment of flexible boundaries, setting of service life, adjustment of virtual machine configuration, increase/decrease of CPU (Central processing Unit), internal memory, hardware space size and the like; making purchases through a payment channel; the management platform checks payment information with the payment channel, sends an instruction to the background after checking and confirming, automatically selects equipment with the best performance according to the use condition of the cloud platform resources, configures related services, automatically associates user accounts and establishes an ordering binding relationship; the user can log in and manage the purchased products and check the balance, and is convenient to handle the procedures of renewal; the operator can analyze the service development condition by managing the background, managing the user, knowing the accounting information, checking the statistical form according to different requirements.

In the above scheme, because the service operation management system runs on the virtual resource, the software is uploaded, as shown in fig. 10, which may be implemented by the following steps:

step S201, after logging in the service operation management system, filling in software description information including basic software information and software performance information according to the software resource description template.

And step S203, filling the quotation and delivery mode of the software, wherein the delivery mode can be divided into a limited use mode and an unlimited use mode.

Step S205, the service operation management system prompts the software publisher to verify the software description information, if the software description information is verified correctly, the software is published, otherwise, the service operation management system sends prompt information to the user and executes step S201.

And step S207, software is released, if the software is successfully released, the user is prompted to successfully release the software, otherwise, error information of the software release is sent to the user, and the step S207 is repeated.

Through the solutions disclosed in the above steps S201 to S207, the purpose of distributing software in the service operation management system can be achieved.

In an alternative embodiment, the service operation management system uses the service flow and the payment receipt flow for the user software, as shown in fig. 11, and the method can be implemented by the following steps:

step S301, logging in a service operation management system, selecting required software and purchasing online.

Step S303, after the business operation management system verifies the information and the order provided by the user, the business operation management system prompts the user to successfully purchase the software; and the service operation management system sends the verification code to the user.

Step S305, inputting the obtained verification code into a software use interface, namely using the software according to the purchased service and the purchased time length, wherein the service operation management system manages, records and judges the software use time length in the background; the user needs to measure and calculate the software use duration and the software use function in advance; after the software is successfully purchased, the corresponding functions of the software can be used only in the purchased range.

Step S307, the verification code is invalid after the purchase duration is used up; the business operation management system can launch prompt information to the user and suggest the user to evaluate the software service.

Step S309, if the purchase or the reselection of new software service is needed, repeat the above steps S301 to S307.

In the solutions disclosed in the above steps S301 to S309, the purpose of providing software purchasing service can be achieved.

In an optional embodiment, before providing the operation service to the software or the application through the business operation management system, the method further includes: providing a registration service, wherein the registration service is used for indicating a first user to register in a business operation management system; the first user is made a registered user through the registration service.

In the scheme, whether the first user is a new user or not is judged when the first user logs in the service operation management system; if the user is a new user, prompting to register; and after the registration is successful, the service operation management system can be successfully logged in.

Through the scheme disclosed by the embodiment, the aim of user registration can be fulfilled.

In an optional embodiment, the method further comprises: receiving a software or application use request of a second user through a service operation management system; displaying part or all of the operation information of the application or the software to a second user through a service operation management system, wherein the displayed operation information is used for expressing the requirement on the software or the application user; and under the condition that the second user accepts the requirement, managing the software or application used by the second user through the service operation management system.

In the above scheme, managing the software or application used by the second user through the service operation management system includes: software application services, unified software services, generic services, and other services; the software application service can refer to software leasing management, software online support, software billing service, software operation analysis and user account management; unified software services may refer to the support system providing service usage of software, software maintenance, and evaluation of software services; the general service can be used for providing online antivirus, online software upgrade and real-time software maintenance service; other services: the cloud platform provides an online payment system, a service evaluation system and an online communication forum for services.

In an alternative embodiment, the business operation management system architecture, as shown in fig. 12, the business services that can be enjoyed after registration service and single sign-on mainly include software application services, unified software services, general services, and other services.

In an optional embodiment, the method further comprises: determining the safety level of the software or the application according to the running or using condition of the software or the application on the virtual resource; and adjusting the virtual resources corresponding to the software or the application according to the security level of the software or the application.

In the scheme, the security level of the determined software or application is obtained by analyzing the operation or use condition of the software or application on the virtual resource in the operation and maintenance monitoring and guaranteeing system and is stored in the client

It should be noted here that, in the operation and maintenance monitoring and ensuring system, as shown in fig. 13, the system automatically presents a real topology map of the network on the basis of topology discovery of the wide area network and the local area network, supports presentation of three layers of physical and VLAN network topologies, automatically tracks changes of the topologies, and provides a client management interface and intuitive WEB topology presentation. The system monitors the operation of a virtual machine, a network, physical equipment and the like, automatically acquires various operation configuration parameters, monitors and analyzes the health degree of the operation of the cloud platform, simultaneously provides cloud platform information browsing, supports real-time monitoring and snapshot monitoring, can display the operation configuration parameters in striking colors on a topological graph according to a user defined threshold value, simultaneously supports various performance indexes to be acquired and stored for a long time, provides a statistical analysis report form of the performance of a cloud platform software tool service system for a user through data storage, merging and analysis, and provides data reference for optimizing the performance of the cloud platform software tool service system; in addition, a fault discovery and positioning engine based on network topology derivation is built in the system, the system receives the fault discovery and positioning engine through active SNMP polling, passive TRAP and SysLog, collects various fault and early warning information, and accurately positions a fault source through correlation and fault pairing analysis technology of a topological link, and reasons can be quickly searched in the faults of the cloud platform software tool service system.

The operation and maintenance monitoring and guaranteeing system provides automatic discovery and monitoring for network equipment of multiple manufacturers; monitoring by a common operating system; the common database monitoring can also monitor other relational databases through standard SQL statements; monitoring of various middleware can meet the requirements of comprehensive monitoring functions of various IT systems; for an application system, a business service view from a host to a front-end to a client is graphically displayed, the running state and the dependency relationship of a system/equipment related to the business system are analyzed, and comprehensive and deep monitoring management is performed from three layers of application state and availability, system resource load and specific performance index analysis. When the cloud platform fails, the affected service can be quickly positioned.

According to the embodiment, the purpose of providing the original data for the upper-layer unified event cloud platform and integrally monitoring the cloud platform through the summarization and centralization of the original data can be achieved.

In an optional embodiment, taking a cloud platform as an example, analyzing security problems related to each layer in a cloud platform architecture and establishing a security protection system for each layer in a targeted manner to ensure the security of the cloud platform;

the security issues involved in the system layer, the application layer, the virtual layer and the physical layer in the cloud platform, as shown in fig. 14, involve eight types of security issues:

a system layer: the service management operation system, the operation and maintenance support system and the virtual resource management system all relate to user registration, login, identity, software service order management, delivery information, bill information summarization and the like, and personal information, passwords, demand information and software use information are encrypted to prevent the users from being attacked by external illegal attacks; the system layer is mainly concerned with data security and network security issues.

An application layer: reliability software, management software and other desktop application software can be deployed for users to use; the method comprises the following steps of (1) safety problems of cloud storage of intermediate process data and result data used by software, data transmission through a network and the like are involved; the application layer is concerned with application security, data security and network security issues in the security architecture.

Virtual layer: the virtual layer mainly pools virtual resources; data is centralized, users, applications and data resources are gathered, a virtual server is easy to be attacked, and disk data is difficult to recover; the security problems to be faced are network security, Hypervisor vulnerabilities and disk data recovery.

Physical layer: the system mainly comprises a development interface, middleware, a database and host equipment; mainly relates to the problems of configuration management, administrator identity stealing, insecure interfaces and the like in security.

In an optional embodiment, the cloud platform security protection system mainly comprises a cloud security management platform and a cloud platform security protection system; wherein, cloud security management platform includes: aiming at the safety system in the cloud platform architecture, from the compliance and safety strategy prevention management, the operation logs and the upgrade update of the cloud platform are recorded, and a big data analysis algorithm is used for monitoring and predicting, so that the safety situation of the cloud platform is sensed and predicted, and the risk protection is made in advance; generating an emergency response upon monitoring a safety problem;

each layer of security protection system of the cloud platform comprises: aiming at the safety problems related to each layer in the cloud platform architecture, the safety of the cloud platform is ensured through the omnibearing safety strategy protection of layered defense and depth defense; aiming at a service operation management system, an application layer, a virtual layer and a physical layer of a cloud platform, a sustainable and reliable security guarantee system is established from the technical point of view; from the perspective of policy, organization and flow, a closed-circuit monitoring and access control system and a cloud post and watch security strategy are adopted for the machine room.

In an alternative embodiment, the security protection measures for the service operation management system, as shown in fig. 15, include: data storage management and account authority management; as shown in fig. 16, the data retention management provides configurable data backup and storage policies for programs, configurations, data, and logs related to an operating system, a database, and an application system of the cloud platform, respectively;

the authority management of the account can mean that the system is used for identifying the user and managing the authority of the user; the account needs to be managed by different strategies; the application system implements reliable authentication on the login and operation of a common user; different account numbers are distributed, and a one-person one-account principle is realized; the operating system super user and the application work account are respectively used for executing high-authority management operation and running application service, and the operating system and the application system cannot be maintained directly by using the account; the maintenance personnel can log in the host computer by the personal account and perform switching operation by using the account provided by the system, and perform management and maintenance operation when the host computer is switched to the target account; limiting accounts which can execute switching operation and recording a switching log by an operating system;

in an alternative embodiment, when creating an account, it should be checked whether the required permissions can be obtained through the group; approval by the management layer needs to be solicited before granting the user rights.

In an optional embodiment, the account number and the authority thereof are checked regularly; cleaning redundant account numbers and authorities; an administrator creates and maintains account numbers and permission lists in an operating system and an application system; and the default created account number controls the use range.

In an alternative embodiment, the security protection measures for the application layer include: identity Access Management (IAM) and monitoring, log auditing; the Identity Access Management (IAM) is a unified identity access management system (IAM) provided and consists of three modules of user identity management, identity alliance and cloud service access authentication; monitoring and log auditing means that an application system helps an administrator to confirm the current running state of the system through measures such as monitoring and log auditing and the like so as to timely and reasonably react to abnormal conditions of the system, ensure the safe running of the system and ensure the continuity of services; important, critical operations for application systems, such as: user management, authority management and the like all need to be provided with a log record; meanwhile, the log is recorded and safely stored, so that the log is prevented from being deleted or randomly tampered; and may be delivered to trusted devices in real-time messaging or batch mode by configuration, such as: a centralized log server for filing; according to the service type, the manager can inquire related logs from a database for storing the logs, and audit and analyze the logs.

In an alternative embodiment, the security measures of the virtual layer include: reinforcement and resource isolation of Hypervisor; the Hypervisor reinforcement integrates the Hypervisor and a virtualization management framework API several times aiming at virtual machine attack and blind spots, and performs configuration management, operation and division of trust areas, so that the virtual resources are ensured to be in a safe trust area; and (4) resource isolation, namely establishing a resource isolation operation model SVEE, and constraining the isolation of an operating system, transparent application, reproduction of a computing environment and tracking of the execution effect of an isolation program, so that the platform ensures the safety isolation and the safety of a virtual layer.

In an alternative embodiment, the security measures of the physical layer and the machine room infrastructure include: closed circuit monitoring, an access control system, a gate sentry and an on duty device; wherein, the closed circuit monitoring can mean that the machine room is provided with a closed circuit television to monitor the surrounding environment and the access passage of the machine room and the surrounding environment and the access passage are provided with necessary illumination so as to better monitor the abnormal intrusion of the machine room; the access control system can be arranged in a machine room, and the machine room enters the machine room after card swiping and identity recognition are completed;

the gate guard and the watch are arranged, as shown in fig. 17, in a courtyard or a building entrance of a data center where the machine room is located and an important machine room inside, the gate guard is arranged to check the personnel coming in and going out and the vehicles coming in and going out, and the personnel can enter after the personnel coming in and going out and the vehicles coming in and going out are registered; the gate post is responsible for checking the in-and-out conditions of courtyards and buildings and timely finding whether abnormal retention personnel exist.

Example 2

According to the embodiment of the invention, the embodiment of the device for sharing the software resources based on the cloud platform is also provided. The method for sharing software resources based on the cloud platform in embodiment 1 of the present invention may be implemented in the apparatus in embodiment 2 of the present invention.

Fig. 18 is a schematic structural diagram of an apparatus for sharing software resources based on a cloud platform according to an embodiment of the present invention, where the apparatus includes: an acquisition unit 302, a mapping unit 304, a receiving unit 306, and an allocation unit 308.

The obtaining unit 302 is configured to obtain a hardware resource, where the hardware resource includes at least one of: storage resources, computing resources, network resources;

a mapping unit 304, configured to map the hardware resource into a virtual resource, where the virtual resource is a logical resource to which the hardware resource is mapped, and the virtual resource includes at least one of: virtual storage, virtual servers, virtual networks; the virtual storage is obtained by mapping the storage resources, and the storage resources are managed by managing the virtual storage; the virtual server is obtained by mapping the computing resources, and the computing resources are managed by managing the virtual server; the virtual network is obtained by mapping the network resources, and the network resources are managed by managing the virtual network;

a receiving unit 306, configured to receive software or an application uploaded by a first user through an interface;

the allocating unit 308 is configured to allocate the required virtual resources to the software or the application according to the requirement of the software or the application.

In the above-mentioned allocation unit 308, the apparatus further includes: the system comprises a providing unit, a service operation management unit and a service processing unit, wherein the providing unit is used for providing operation service for software or application through a service operation management system according to operation information, and the service operation management system runs on virtual resources and is used for managing uploaded software; the management includes at least one of: version management, billing management, software or application usage analysis.

Optionally, in the apparatus, the apparatus further includes: the system comprises a registration unit, a service management unit and a service management unit, wherein the registration unit is used for providing registration service, and the registration service is used for indicating a first user to register in a service operation management system; the first user is made a registered user through the registration service.

Optionally, the apparatus further includes: a second receiving unit, configured to receive, through the service operation management system, a software or application use request from a second user; the display unit is used for displaying part or all of the operation information of the application or the software to a second user through the service operation management system, wherein the displayed operation information is used for expressing the requirements of the software or the application user; and under the condition that the second user accepts the requirement, managing the software or application used by the second user through the service operation management system.

Optionally, the apparatus further includes: the determining unit is used for determining the safety level of the software or the application according to the running or using condition of the software or the application on the virtual resource; and the adjusting unit is used for adjusting the virtual resources corresponding to the software or the application according to the security level of the software or the application.

The above-mentioned serial numbers of the embodiments of the present invention are merely for description and do not represent the merits of the embodiments.

In the above embodiments of the present invention, the descriptions of the respective embodiments have respective emphasis, and for parts that are not described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.

In the embodiments provided in the present application, it should be understood that the disclosed technology can be implemented in other ways. The above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units may be a logical division, and in actual implementation, there may be another division, for example, multiple units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, units or modules, and may be in an electrical or other form.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic or optical disk, and other various media capable of storing program codes.

The foregoing is only a preferred embodiment of the present invention, and it should be noted that, for those skilled in the art, various modifications and decorations can be made without departing from the principle of the present invention, and these modifications and decorations should also be regarded as the protection scope of the present invention.

Claims

1. A method for sharing software resources based on a cloud platform is characterized by comprising the following steps:

acquiring hardware resources, wherein the hardware resources comprise at least one of: storage resources, computing resources, network resources;

mapping the hardware resource to a virtual resource, wherein the virtual resource is a logic resource to which the hardware resource is mapped, and the virtual resource includes at least one of: the virtual storage is obtained by mapping the storage resources, the storage resources are managed by managing the virtual storage, the virtual server is obtained by mapping the computing resources, the computing resources are managed by managing the virtual server, the virtual network is obtained by mapping the network resources, and the network resources are managed by managing the virtual network;

receiving software or application uploaded by a first user through an interface;

distributing required virtual resources for the software or the application according to the requirement of the software or the application;

the method comprises the steps of obtaining management system resources corresponding to hardware resources, a safety system for maintaining the hardware resources and a management system for monitoring the hardware resources, wherein the management system is a software tool service system based on a cloud platform, and the service system comprises a leader and a supervisor, a cloud service provider, a software provider, an evaluator and a user; the leaders and supervisors are used for appointing a policy and service specification system, allowing the joining of all parties in the ecological chain and supervising all the parties in the ecological chain; the cloud platform service side is used for construction, service operation, operation maintenance and release popularization of a cloud platform; the evaluation party is used for providing evaluation work of a security and secrecy system; the software provider is used for designing and developing software, maintaining and upgrading software and describing basic resources of the software; the user pays attention to purchase service, function use and evaluation service;

the virtual resource management system is used for managing virtual resources under the cloud platform and providing a perfect support platform for optimizing key service processes and workflows in the cloud platform; the virtual management system has an option of providing a proper management function so as to meet the requirements of different system structures with different scales; the virtual management platform is used for aggregating network, storage, memory and CPU resources and managing the network, the storage, the memory and the CPU resources as a resource set which can be dynamically allocated based on business requirements;

the virtual resources are managed by a virtual resource management system; the virtual resource management system is a plug-in supporting platform system which is based on a virtualization technology and is used for realizing management of a virtual machine and a system deployed in the virtual machine and unified management of storage resources, and the virtual resource management function comprises the following functions: resource management, resource monitoring, resource analysis, monitoring alarms, and acceptance delivery.

2. The method of claim 1, wherein in the case that the requirement comprises operational information of the software or application, the method further comprises:

providing operation service for the software or the application through a service operation management system according to the operation information, wherein the service operation management system runs on the virtual resource and is used for managing the uploaded software; the managing comprises at least one of: version management, billing management, analysis of the software or application usage.

3. The method of claim 2, wherein prior to providing the operational service to the software or application through a business operations management system, the method further comprises:

providing a registration service, wherein the registration service is used for indicating the first user to register in the business operation management system;

the first user is made a registered user by the registration service.

4. The method of claim 2, further comprising:

receiving a software or application use request of a second user through the service operation management system;

displaying part or all of the operation information of the application or the software to the second user through the service operation management system, wherein the displayed operation information is used for representing the requirement of the software or the application user;

and under the condition that the second user accepts the requirement, managing the use of the software or the application by the second user through the service operation management system.

5. The method of any one of claims 1 to 4, further comprising:

determining the security level of the software or the application according to the running or using condition of the software or the application on the virtual resource;

and adjusting the virtual resources corresponding to the software or the application according to the security level of the software or the application.

6. A software resource sharing device based on a cloud platform is characterized by comprising:

an obtaining unit, configured to obtain a hardware resource, where the hardware resource includes at least one of: storage resources, computing resources, network resources;

a mapping unit, configured to map the hardware resource to a virtual resource, where the virtual resource is a logical resource to which the hardware resource is mapped, and the virtual resource includes at least one of: virtual storage, virtual servers, virtual networks; the virtual storage is obtained by mapping the storage resources, and the storage resources are managed by managing the virtual storage; the virtual server is obtained by mapping the computing resources, and the computing resources are managed by managing the virtual server; the virtual network is obtained by mapping the network resources, and the network resources are managed by managing the virtual network;

the allocation unit is used for allocating required virtual resources to the software or the application according to the requirements of the software or the application;

7. The apparatus of claim 6, wherein in the case that the requirement comprises operational information of the software or application, the apparatus further comprises:

a providing unit, configured to provide an operation service for the software or the application through a service operation management system according to the operation information, where the service operation management system runs on the virtual resource and is configured to manage uploaded software; the managing comprises at least one of: version management, billing management, analysis of the software or application usage.

8. The apparatus of claim 7, further comprising:

a registration unit, configured to provide a registration service, where the registration service is used to instruct the first user to register in the service operation management system; the first user is made a registered user by the registration service.

9. The apparatus of claim 7, further comprising:

a second receiving unit, configured to receive, through the service operation management system, a request for using the software or application by a second user;

a display unit, configured to display part or all of the operation information of the application or software to the second user through the service operation management system, where the displayed operation information is used to indicate a requirement for the software or application user;

10. The apparatus of any one of claims 6 to 9, further comprising:

a determining unit, configured to determine a security level of the software or the application according to an operation or usage of the software or the application on the virtual resource;

and the adjusting unit is used for adjusting the virtual resources corresponding to the software or the application according to the security level of the software or the application.