CN107094095B - Network management system and network management method - Google Patents
Network management system and network management method Download PDFInfo
- Publication number
- CN107094095B CN107094095B CN201710251385.2A CN201710251385A CN107094095B CN 107094095 B CN107094095 B CN 107094095B CN 201710251385 A CN201710251385 A CN 201710251385A CN 107094095 B CN107094095 B CN 107094095B
- Authority
- CN
- China
- Prior art keywords
- network
- identification code
- information
- exchange
- terminal
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/04—Network management architectures or arrangements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- General Health & Medical Sciences (AREA)
- Medical Informatics (AREA)
- Health & Medical Sciences (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Small-Scale Networks (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The invention provides a network management system and a network management method. The network management system provided by the invention is used for generating a stable current network identification code, and comprises the following components: at least one switching terminal; and a network management terminal, wherein each switching terminal includes: the network management terminal includes: a management-side communication unit, a storage unit, a network identification code generation unit, an identification code information generation unit, a determination unit, and a storage control unit. The network management system and the network management method can automatically update the network identification code of the exchange terminal, and the access of all equipment can be automatically incorporated into an information processing network or realized through standardized management. Even if the network equipment is replaced, the network information of the equipment can be automatically configured again, and the situation that newly accessed equipment and collided equipment cannot access the network due to configuration information errors is avoided.
Description
Technical Field
The present invention relates to a network management system and a network management method.
Background
At present, in the operation of rail transit vehicles, hardware structures of all devices in a vehicle-mounted network system are different, and stored software and the like are not uniform in the aspects of standards, functions, installation, human-computer interfaces, maintenance management and the like, so that in order to ensure the operation of the vehicle-mounted network system, the access of all the devices needs human intervention, and the access of all the devices cannot be automatically incorporated into an information processing network or realized through standardized management.
In addition, when the rail transit vehicle-mounted network equipment is maintained, each equipment needs to be maintained independently, and the maintenance efficiency is low. Moreover, once a device is replaced, the device network information needs to be reconfigured, and a failure that a newly accessed device and a collided device cannot access the network due to a configuration information error is likely to occur.
Disclosure of Invention
The present invention has been made to solve the above-described problems, and an object of the present invention is to provide a network management system and a network management method.
The invention provides a network management system for generating a stable current network identification code, which is characterized by comprising the following components: at least one exchange terminal, which has unique initial identification information, obtains other initial identification information of all other exchange terminals directly connected with the exchange terminal through a communication network, and sends the initial identification information and corresponding connection information; and a network management terminal connected to the switching terminal and other switching terminals through a communication network, acquiring all the initial identification information and corresponding connection information, and generating identification code information including a plurality of temporary network identification codes according to all the initial identification information and the corresponding connection information according to a first predetermined rule, wherein each switching terminal includes: the network management terminal includes: a management-side communication unit that receives other initial identification information of all other switching terminals connected to the switching terminal via a communication network, a storage unit that receives the initial identification information and connection information transmitted from the switching terminal, a network identification code generation unit that generates connection information based on the other initial identification information corresponding to the initial identification information, a determination unit that generates connection information based on the other initial identification information corresponding to the initial identification information, a storage control unit that controls the storage unit to store the initial identification information and connection information, a network identification code generation unit that generates a network topology map and generates a plurality of temporary network identification codes corresponding to each other according to a first predetermined rule, an identification code information generation unit that generates identification code information by associating the plurality of temporary network identification codes with the initial identification information one by one based on the connection information, the management side communication part sends the identification code information to the exchange terminal, the exchange side communication part receives the identification code information sent by the network management terminal, the information obtaining part obtains a corresponding temporary network identification code from the identification code information according to the initial identification information, the information setting part sets the temporary network identification code as a network identification code to be verified, the exchange side communication part sends the initial identification information and the network identification code to be verified to the network management terminal, the management side communication part receives the initial identification information and the network identification code to be verified, the judging part generates a judging result for judging whether the network identification code to be verified is consistent with the temporary network identification code, when the judging result is consistent, the storage control part controls the storage part to correspondingly store the network identification code to be verified, the management side communication part sends the consistent judging result to the exchange terminal, and the exchange side communication part receives the consistent judging result, and the information setting part sets the network identification code to be verified according to the consistent judgment result and a second preset rule to obtain the current network identification code.
The network management system provided by the present invention may further have the following features: when the judgment unit generates the judgment result of the inconsistency, the exchange-side communication unit receives the initial identification information of all other exchange terminals connected to the exchange terminal again through the communication network.
The network management system provided by the present invention may further have the following features: wherein the first predetermined rule is: when the exchange terminal is directly connected with the network management terminal, the temporary network identification code of the exchange terminal is defined as an initial network identification code.
The network management system provided by the present invention may further have the following features: wherein the second predetermined rule is: and when the judgment part generates a consistent judgment result, the network identification code to be verified after the solidification zone bit is added is defined as the current network identification code.
The network management system provided in the present invention may further include: at least one access terminal, which is provided on the mobile device, has unique access identification information, acquires initial identification information and sets access identification information through the switched communication network, and receives management of the network management terminal through the communication network.
The network management system provided by the present invention may further have the following features: wherein, the access terminal includes: the access side communication unit receives the current network identification code sent by the exchange side communication unit, the access identification code generation unit generates an access identification code according to a third preset rule according to the current network identification code, the access identification information generation unit generates access identification information according to the access identification code, and the access side communication unit sends the access identification information to the network management terminal through the communication network.
The network management system provided by the present invention may further have the following features: wherein the third predetermined rule is: when the exchange terminal and the access terminal have different device identification information, the difference between the device identification information of the exchange terminal and the device identification information of the access terminal is defined as the difference between the current network identification code and the access identification code.
The network management system provided by the present invention may further have the following features: the temporary network identification code, the network identification code to be verified and the current network identification code are any one of an IP address, an MAC address, an MVB address and a service port number.
The present invention also provides a network management method, having the following features, comprising: receiving other initial identification information of all other exchange terminals connected to the exchange terminal through a communication network by using a exchange-side communication part, generating connection information based on the other initial identification information corresponding to the initial identification information by using a connection information generating part, transmitting the initial identification information and the corresponding connection information to a network management terminal by using the exchange-side communication part, receiving the initial identification information and the connection information transmitted from the exchange terminal by using a management-side communication part, storing the initial identification information and the connection information by using a storage part, generating a network topology map by using a network identification code generating part, and correspondingly generating a plurality of temporary network identification codes according to a first predetermined rule, generating identification code information by using an identification code information generating part in a one-to-one correspondence with the plurality of temporary network identification codes and the initial identification information based on the connection information, and transmitting the identification code information to the exchange terminal by using the management-side communication part, receiving identification code information sent by a network management terminal by using a communication part at a switching side, acquiring a corresponding temporary network identification code from the identification code information by using an information acquisition part according to initial identification information, setting the temporary network identification code as a network identification code to be verified by using an information setting part, sending the initial identification information and the network identification code to be verified to the network management terminal by using a communication part at the switching side, receiving the initial identification information and the network identification code to be verified by using a communication part at the management side, generating a judgment result for judging whether the network identification code to be verified is consistent with the temporary network identification code by using a judgment part, controlling a storage part to correspondingly store the network identification code to be verified by using a storage control part when the network identification code to be verified is consistent, sending the consistent judgment result to the switching terminal by using the communication part at the management side, receiving the consistent judgment result by using the communication part at the switching side, and entering the network identification code to be verified according to a second predetermined rule by And setting the line to obtain the current network identification code.
Action and Effect of the invention
According to the network management system and the network management method of the present invention, since there are provided the switching terminals and the network management terminals connected to the switching terminals through the communication network, each of the switching terminals includes: the network management terminal includes: the network management system and the network management method can automatically update the network identification code of the exchange terminal, and the access of all equipment can be automatically incorporated into an information processing network or realized through standardized management. And even if the network equipment is replaced, the equipment network information can be automatically configured again, so that the situation that newly accessed equipment and collided equipment cannot access the network due to configuration information errors is avoided.
In addition, the network management system and the network management method adopt the dynamic network identification code for authentication, and can also avoid potential safety hazards caused by leakage of identity marks by designers or implementers, thereby improving the safety of the network.
Drawings
FIG. 1 is a block diagram of a network management system in an embodiment of the invention;
fig. 2 is a block diagram of a switching terminal in an embodiment of the invention;
fig. 3 is a block diagram of a network management terminal in an embodiment of the invention;
FIG. 4 is a block diagram of an access terminal in an embodiment of the invention; and
fig. 5 is a flow chart of the actions of the network management system in an embodiment of the invention.
Detailed Description
In order to make the technical means, the creation features, the achievement purposes and the effects of the present invention easy to understand, the following embodiments specifically describe the network management system and the network management method of the present invention with reference to the accompanying drawings.
Fig. 1 is a block diagram of a network management system in an embodiment of the invention.
As shown in fig. 1, in the present embodiment, the network management system 100 is configured to generate a stable current network identifier, and includes a plurality of switch terminals 10, a network management terminal 20, a communication network 30 connecting the plurality of switch terminals 10 and the network management terminal 20, a plurality of access terminals 40, and a switch communication network 50 connecting the switch terminals 10 and the plurality of access terminals 40.
The switching terminal 10 has unique initial identification information, which may be device information, an IP address, a MAC address, an MVB address, a service port number, and the like. The switching terminal 10 obtains other initial identification information of all other switching terminals directly connected thereto through the communication network 30. In this embodiment, the initial identification information is IP address information. The Switch terminal 10 is a vehicle mounted Managed Switch (MS). In the present embodiment, the plurality of switch terminals 10 have the same structure, and only one switch terminal 10 will be explained herein. In addition, the switching terminal 10 is connected to the network management terminal 20 via the communication network 30. In order to avoid confusion, other switch terminals connected to the switch terminal 10 will be collectively referred to as other switch terminals 10'.
Fig. 2 is a block diagram of a switching terminal in an embodiment of the invention.
As shown in fig. 2, the switching terminal 10 includes a switching-side communication unit 11, a connection information generation unit 12, an information acquisition unit 13, an information setting unit 14, a switching-side temporary storage unit 15, and a switching-side control unit 16 that controls the above units.
The Network management terminal 20 is a vehicle-mounted Network Management Center (NMC), and is connected to the switching terminal 10 and other switching terminals through a communication Network 30. The network management terminal 20 also has unique management identification information. In this embodiment, the management identification information is also IP address information.
Fig. 3 is a block diagram of a network management terminal in an embodiment of the invention.
As shown in fig. 3, in the present embodiment, the network management terminal 20 includes a management-side communication unit 21, a storage unit 22, a network identification code generation unit 23, an identification code information generation unit 24, a determination unit 25, a storage control unit 26, a predetermined rule storage unit 27, a management-side temporary storage unit 28, and a management measurement control unit 29 that controls the above units.
The predetermined rule storage section 27 stores each predetermined rule. Wherein the first predetermined rule is: when the switch terminal 10 and the network management terminal 20 are directly connected, the temporary network identification code of the switch terminal 10 is defined as the initial network identification code. For example, if the vehicle network uses a B-type address, the subnet mask is 255.255.255.0, the switch management address directly connected to the vehicle Network Management Center (NMC) is xxx.xxx.xxx.1.xxx, and the subsequent switches are xxx.xxx.2.xxx, xxx.xxx.3.xxx once, up to the last switch.
The second predetermined rule is: when the judgment unit 25 generates a consistent judgment result, the network identification code to be verified after the cured flag bit is modified is defined as the current network identification code (the cured flag bit is in the storage unit 22, the uncured flag bit is 0, and the cured flag bit is 1).
The third predetermined rule is: when the switch terminal 10 and the access terminal 40 have different device identification information, the difference between the device identification information of the switch terminal 10 and the access terminal 40 is defined as the difference between the current network identification code and the access identification code. For example, the access terminal 40 may obtain the management network address and address of the MS from the broadcast message of the MS, such as the management MAC address of the MS is AA-BB-CC-DD-EE-01, the management IP address of the MS is 147.10.4.4, the MAC address of the port to which the NED is connected is AA-BB-CC-DD-EE-05, the first 3 IP address of the NED is the same as the management address of the MS, and the fourth address is the fourth bit of the management address of the MS plus the difference between the MAC address of the port and the management MAC address, that is, 147.10.4.8.
The exchange-side communication unit 11 receives other initial identification information of all other exchange terminals connected to the exchange terminal 10 via the communication network 30 and temporarily stores the information in the exchange-side temporary storage unit 15. In this embodiment, all the Switch terminals 10 can obtain the network address information of the Switch terminal 10' (NS for short) adjacent to it, and all the Switch terminals 10 in the on-board network sequentially discover the information of the NS connected to it and continue until no new on-board Switch is discovered.
The connection information generating unit 12 generates connection information from other initial identification information corresponding to the initial identification information received by the exchange-side communication unit 11, and temporarily stores the connection information in the exchange-side temporary storage unit 15.
The exchange-side communication unit 11 transmits the initial identification information and the corresponding connection information acquired from the exchange-side temporary storage unit 15 to the network management terminal 20 based on the management identification information of the network management terminal 20.
The management-side communication unit 21 receives the initial identification information and the connection information transmitted from the exchange terminal 10, and registers the received information in the management-side register unit 28.
The storage control unit 26 controls the storage unit 22 to store the initial identification information and the connection information.
The storage unit 22 stores the initial identification information and the connection information in association with each other.
The network identification code generating unit 23 generates a network topology map based on the connection information, generates a plurality of temporary network identification codes in accordance with a first predetermined rule, and registers the temporary network identification codes in the management side temporary storage unit 28.
The identification code information generation unit 24 generates identification code information by associating the plurality of temporary network identification codes with the initial identification information one by one based on the connection information.
The management-side communication unit 21 transmits the identification code information to the switching terminal 10.
The exchange-side communication unit 11 receives the identification code information transmitted from the network management terminal 20.
The information acquiring unit 13 acquires the corresponding temporary network identification code from the identification code information based on the initial identification information of the switch terminal 10.
The information setting unit 14 sets the temporary network identification code as the network identification code to be verified.
The exchange-side communication unit 11 transmits the initial identification information and the network identification code to be verified to the network management terminal 20.
The management-side communication unit 21 receives the initial identification information and the network identification code to be verified transmitted from the switch terminal 10.
The judgment section 25 generates a judgment result of judging whether the network identification code to be verified and the temporary network identification code coincide with each other.
When the network identification codes are judged to be consistent, the storage control part 26 controls the storage part 22 to correspondingly store the network identification codes to be verified.
The management-side communication unit 21 transmits the result of the determination of the coincidence to the switching terminal 10.
The exchange-side communication unit 11 receives the result of the judgment of the agreement transmitted from the network management terminal 20.
The information setting unit 14 sets the network identification code to be verified to be solidified according to the second predetermined rule based on the result of the judgment of the agreement, and obtains the current network identification code.
When the determination unit 25 generates the result of the determination of the inconsistency, the management-side communication unit 21 transmits the result of the determination of the inconsistency to the exchange terminal 10.
The exchange-side communication unit 11 receives the initial identification information of all other exchange terminals connected to the exchange terminal 10 again via the communication network 30.
The temporary network identification code, the network identification code to be verified, and the current network identification code may be any one of an IP address, a MAC address, an MVB address, and a service port number. In this embodiment, in order to simplify the operation, the temporary network identification code, the network identification code to be verified, and the current network identification code are all IP addresses.
In the present embodiment, the plurality of access terminals 40 have the same structure, and only one access terminal 40 will be described herein. The access terminal 40 is a vehicular Network End Device (NED), moves together with the mobile Device, and has Device identification information different from that of the exchange terminal. In this embodiment, the mobile device is a train.
Fig. 4 is a block diagram of an access terminal in an embodiment of the invention.
As shown in fig. 4, the access terminal 40 includes an access-side communication unit 41, an access identification code generation unit 42, an access identification information generation unit 43, an information hardening unit 44, and an access-side control unit 45.
When the information setting unit 14 obtains the current network identification code, the access-side communication unit 41 in the access terminal 40 receives the current network identification code transmitted from the exchange-side communication unit 11 through the exchange communication network 50.
The access identification code generating unit 42 generates an access identification code according to a third predetermined rule based on the current network identification code.
The access identification information generating unit 43 generates access identification information from the access identification code. The access identification information generating unit 43 generates access identification information from the IP address, MAC address, connected port MAC address, and management MAC address of the connected MS of the in-vehicle network terminal device (NED) based on the access identification code, and encrypts the access identification information.
The access-side communication unit 44 transmits the access identification information to the exchange-side communication unit 11 via the exchange communication network 50.
The exchange-side communication unit 11 transmits the access identification information to the network management terminal 20 via the communication network 30.
The management-side communication unit 21 receives the access identification information transmitted from the switching terminal 10.
The determination section 25 generates a determination result that determines whether all information of data (including an IP address, a MAC address, a connected port MAC address, a management MAC address of a connected MS, etc. of the NED) transmitted from the in-vehicle network terminal device (NED) to the network management terminal (NMC) coincides with the network topology stored in the NMC.
When the judgment result shows that the two are identical, the storage control unit 26 controls the storage unit 22 to store the access identification information.
The management-side communication unit 21 transmits the result of the determination of the coincidence to the switching terminal 10.
The exchange-side communication unit 11 receives the result of the judgment of the agreement transmitted from the network management terminal 20.
The information solidifying unit 44 solidifies the network address of the access identification code in the access identification information according to the consistent judgment result, and obtains the current access identification code.
When the inconsistency is determined, the management-side communication unit 21 transmits the result of the determination of the inconsistency to the exchange terminal 10. The access identification code generation unit 42 renews the generation of the access identification code (i.e., the network address) under the control of the access-side control unit 45.
The access-side control unit 45 contains a computer program for controlling the operations of the access-side communication unit 41, the access identification code generation unit 42, the access identification information generation unit 43, and the information solidification unit 44.
The exchange-side control unit 16 includes a computer program for controlling the exchange-side communication unit 11, the connection information generation unit 12, the information acquisition unit 13, the information setting unit 14, and the exchange-side temporary storage unit 15.
The management side control unit 29 includes a computer program for controlling the management side communication unit 21, the storage unit 22, the network identification code generation unit 23, the identification code information generation unit 24, the determination unit 25, the storage control unit 26, the predetermined rule storage unit 27, and the management side temporary storage unit 28.
Fig. 5 is a flow chart of the actions of the network management system in an embodiment of the invention.
As shown in fig. 5, in this embodiment, the operation flow of the network management system 100 includes the following steps:
in step S1, the exchange-side communication unit 11 receives other initial identification information of all other exchange terminals connected to the exchange terminal 10 via the communication network 30, and then proceeds to step S2.
In step S2, the connection information generator 12 generates connection information from the other initial identification information corresponding to the initial identification information received by the exchange-side communication unit 11, and the process proceeds to step S3.
In step S3, the exchange-side communication unit 11 transmits the initial identification information and the corresponding connection information to the network management terminal 20 based on the management identification information of the network management terminal 20, and then the process proceeds to step S4.
In step S4, the management-side communication unit 21 receives the initial identification information and the connection information transmitted from the switching terminal 10, and then proceeds to step S5.
In step S5, the storage controller 26 controls the storage 22 to store the initial identification information and the connection information, and then the process proceeds to step S6.
In step S6, the network identifier generator 23 generates a network topology map based on the connection information, generates a plurality of temporary network identifiers according to a first predetermined rule, and then proceeds to step S7.
In step S7, the identifier information generator 24 associates the plurality of temporary network identifiers with the initial identifier one by one based on the connection information to generate identifier information, and the process proceeds to step S8.
In step S8, the management-side communication unit 21 transmits the identification code information to the switching terminal 10, and the process proceeds to step S9.
In step S9, the exchange-side communication unit 11 receives the identification code information transmitted from the network management terminal 20, and then proceeds to step S10.
In step S10, the information obtaining unit 13 obtains the corresponding temporary network identification code from the identification code information based on the initial identification information of the switch terminal 10, and then the process proceeds to step S11.
In step S11, the information setting unit 14 sets the temporary network identification code as the network identification code to be verified, and then proceeds to step S12.
In step S12, the exchange-side communication unit 11 transmits the initial identification information and the network identification code to be verified to the network management terminal 20, and then proceeds to step S13.
In step S13, the management-side communication unit 21 receives the initial identification information and the network identifier to be verified transmitted from the switching terminal 10, the determination unit 25 determines whether or not the network identifier to be verified and the temporary network identifier match, and if yes, the process proceeds to step S14, and if no, the process proceeds to step S15.
In step S14, the storage controller 26 controls the storage 22 to store the network identification code to be verified, and then the process proceeds to step S16.
In step S15, the management-side communication unit 21 transmits the result of the inconsistency to the switching terminal 10, and the process proceeds to step S1.
In step S16, the management-side communication unit 21 transmits the result of the matching determination to the switching terminal 10, and the process proceeds to step S17.
In step S17, the switching-side communication unit 11 receives the matching determination result transmitted from the network management terminal 20, and then proceeds to step S18.
In step S18, the information setting unit 14 sets the network identifier to be verified to be fixed according to the second predetermined rule based on the result of the determination, and then the process proceeds to step S19.
In step S19, the access-side communication unit 41 receives the current network identification code transmitted from the exchange-side communication unit 11 via the exchange communication network 50, and then proceeds to step S20.
In step S20, the access identification code generating unit 42 generates an access identification code according to a third predetermined rule based on the current network identification code, and then proceeds to step S21.
In step S21, the access identification information generation unit 43 generates access identification information from the access identification code, and then proceeds to step S22.
In step S22, the access-side communication unit 44 transmits the access identification information to the exchange-side communication unit 11 via the exchange communication network 50, and the exchange-side communication unit 11 transmits the access identification information to the network management terminal 20 via the communication network 30, and the process proceeds to step S23.
In step S23, the management-side communication unit 21 receives the access identification information transmitted from the switching terminal 10, and then proceeds to step S24.
In step S24, the determination unit 25 determines whether or not the access identification information matches the network topology stored in the NMC, and if yes, the process proceeds to step S25, and if no, the process proceeds to step S26.
In step S25, the storage controller 26 controls the storage unit 22 to store the access identification information, and the process proceeds to step S27.
In step S26, the management-side communication unit 21 transmits the result of the inconsistency to the switching terminal 10, and the process proceeds to step S20.
In step S27, the management-side communication unit 21 transmits the result of the matching determination to the switching terminal 10, and the process proceeds to step S28.
In step S28, the switching-side communication unit 11 receives the matching determination result transmitted from the network management terminal 20, and then proceeds to step S29.
In step S29, the information solidifying unit 44 solidifies the network address of the access identifier in the access identifier according to the consistent judgment result, obtains the current access identifier, and then enters the end state.
Effects and effects of the embodiments
According to the network management system and the network management method according to the present embodiment, since there are at least one switching terminal and a network management terminal connected to the switching terminal through a communication network, each switching terminal includes: the network management terminal includes: the management-side communication unit, the storage unit, the network identification code generation unit, the identification code information generation unit, the judgment unit, and the storage control unit, therefore, the network management system and the network management method of the present embodiment can automatically update the network identification code of the switch terminal, and the access of all devices can be automatically incorporated into the information processing network or realized by standardized management. And even if the network equipment is replaced, the equipment network information can be automatically configured again, so that the situation that newly accessed equipment and collided equipment cannot access the network due to configuration information errors is avoided.
In addition, the network management system and the network management method according to the embodiment adopt the dynamic network identification code for authentication, and can also avoid potential safety hazards caused by leakage of the identity mark by designers or implementers, so that the network security is improved.
The above embodiments are preferred examples of the present invention, and are not intended to limit the scope of the present invention.
Claims (7)
1. A network management system, comprising:
a plurality of switching terminals composed of a vehicle-mounted management type switch, which are arranged on the mobile equipment, have unique initial identification information, obtain other initial identification information of all other switching terminals directly connected with the switching terminals through a communication network, and send the initial identification information and corresponding connection information;
a plurality of access terminals composed of vehicle-mounted network terminal devices, which are arranged on the mobile device, have unique access identification information different from the initial identification information of the exchange terminal, acquire the initial identification information of the exchange terminal through an exchange communication network and set the access identification information, and receive the management of the network management terminal through the communication network; and
a network management terminal connected to the switching terminal and the other switching terminals via a communication network, acquiring all the initial identification information and the corresponding connection information, generating identification code information including a plurality of temporary network identification codes according to all the initial identification information and the corresponding connection information according to a first predetermined rule,
wherein each of the switch terminals comprises: a switching side communication unit, a connection information generation unit, an information acquisition unit, and an information setting unit,
the access terminal includes: an access side communication unit, an access identification code generation unit and an access identification information generation unit,
the network management terminal includes: a management-side communication unit, a storage unit, a network identification code generation unit, an identification code information generation unit, a determination unit, and a storage control unit,
the exchange-side communication section receives initial identification information of all other exchange terminals connected to the exchange terminal as the other initial identification information through a communication network until no new other initial identification information is found,
the connection information generating unit generates the connection information based on the other received initial identification information corresponding to the initial identification information,
the exchange-side communication unit transmits the initial identification information and the corresponding connection information to the network management terminal,
the management-side communication unit receives the initial identification information and the connection information transmitted from the exchange terminal,
the storage control unit controls the storage unit to store the initial identification information and the connection information,
the network identification code generation unit generates a network topology map and generates a plurality of the temporary network identification codes in association with each other according to the first predetermined rule,
the identification code information generation unit generates the identification code information by associating a plurality of temporary network identification codes with the initial identification information one by one according to the connection information,
the management-side communication section transmits the identification code information to the exchange terminal,
the exchange-side communication unit receives the identification code information transmitted from the network management terminal,
the information acquisition unit acquires the corresponding temporary network identification code from the identification code information based on the initial identification information,
the information setting portion sets the temporary network identification code as a network identification code to be verified,
the exchange side communication part sends the initial identification information and the network identification code to be verified to the network management terminal,
the management-side communication section receives the initial identification information and the network identification code to be verified,
the judging part generates a judgment result for judging whether the network identification code to be verified is consistent with the temporary network identification code,
when the network identification codes are judged to be consistent, the storage control part controls the storage part to correspondingly store the network identification codes to be verified,
the management-side communication section transmits the judgment result of the coincidence to the exchange terminal,
the exchange-side communication unit receives the result of the determination of the coincidence,
the information setting part sets the network identification code to be verified according to the consistent judgment result and a second preset rule to obtain the current network identification code,
the access-side communication unit receives the current network identification code transmitted from the exchange-side communication unit,
the access identification code generating unit generates the access identification code according to a third preset rule according to the current network identification code,
the access identification information generating unit generates access identification information according to the access identification code,
and the access side communication unit sends the access identification information to the network management terminal through a communication network.
2. The network management system according to claim 1, wherein:
wherein the management-side communication section transmits the judgment result of the inconsistency to the exchange terminal when the judgment section generates the judgment result of the inconsistency,
the exchange-side communication unit receives the initial identification information of all other exchange terminals connected to the exchange terminal again via the communication network.
3. The network management system according to claim 1, wherein:
wherein the first predetermined rule is: when the exchange terminal is directly connected with the network management terminal, the temporary network identification code of the exchange terminal is specified as an initial network identification code.
4. The network management system according to claim 1, wherein:
wherein the second predetermined rule is: and when the judgment part generates a consistent judgment result, the network identification code to be verified after the solidified zone bit is added is defined as the current network identification code.
5. The network management system according to claim 1, wherein:
wherein the third predetermined rule is: when the exchange terminal and the access terminal have different device identification information, the difference between the device identification information of the exchange terminal and the device identification information of the access terminal is defined as the difference between the current network identification code and the mobile identification code.
6. The network management system according to claim 1, wherein:
the temporary network identification code, the to-be-verified network identification code and the current network identification code are any one of an IP address, an MAC address, an MVB address and a service port number.
7. A method of network management, comprising:
receiving initial identification information of all other exchange terminals connected to the exchange terminal as other initial identification information through the communication network by using the exchange-side communication section until no new other initial identification information is found,
generating the connection information from the other received initial identification information corresponding to the initial identification information using a connection information generating unit,
transmitting the initial identification information and the corresponding connection information to a network management terminal using the exchange-side communication unit,
receiving the initial identification information and the connection information transmitted from the exchange terminal by using a management-side communication unit,
storing the initial identification information and the connection information in a storage unit,
generating a network topology map by using a network identification code generating unit, and correspondingly generating a plurality of temporary network identification codes according to a first predetermined rule,
an identification code information generation unit that generates identification code information by associating a plurality of temporary network identification codes with the initial identification information one by one based on the connection information,
transmitting the identification code information to the exchange terminal using the management-side communication section,
receiving the identification code information transmitted from the network management terminal by using the exchange-side communication unit,
an information acquisition unit acquires the corresponding temporary network identification code from the identification code information based on the initial identification information,
the temporary network identification code is set as the network identification code to be verified by an information setting part,
the exchange side communication part is adopted to send the initial identification information and the network identification code to be verified to the network management terminal,
adopting a management side communication part to receive the initial identification information and the network identification code to be verified,
a judging part is adopted to generate a judging result for judging whether the network identification code to be verified is consistent with the temporary network identification code,
when the network identification codes are judged to be consistent, the storage control part is adopted to control the storage part to correspondingly store the network identification codes to be verified,
sending the consistent judgment result to the exchange terminal by adopting the management side communication part,
receiving the result of the determination of the coincidence by the exchange-side communication unit,
setting the network identification code to be verified according to a second preset rule by adopting an information setting part according to the consistent judgment result to obtain the current network identification code,
receiving the current network identification code transmitted from the exchange-side communication unit by using an access-side communication unit,
an access identification code generating unit is adopted to generate the access identification code according to the current network identification code and a third preset rule,
an access identification information generating unit is adopted to generate access identification information according to the access identification code,
and sending the access identification information to the network management terminal by adopting an access side communication unit through a communication network.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710251385.2A CN107094095B (en) | 2017-04-18 | 2017-04-18 | Network management system and network management method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710251385.2A CN107094095B (en) | 2017-04-18 | 2017-04-18 | Network management system and network management method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107094095A CN107094095A (en) | 2017-08-25 |
| CN107094095B true CN107094095B (en) | 2020-03-06 |
Family
ID=59637614
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710251385.2A Active CN107094095B (en) | 2017-04-18 | 2017-04-18 | Network management system and network management method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107094095B (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101147139A (en) * | 2005-12-27 | 2008-03-19 | 松下电工株式会社 | Automatic identifier generation device, information storage system, and information acquisition method for it |
| CN101267306A (en) * | 2007-03-14 | 2008-09-17 | 三星电子株式会社 | Method and apparatus for performing cross certification for using wireless device |
| CN101662770A (en) * | 2009-09-22 | 2010-03-03 | 神州付（北京）软件技术有限公司 | Method for accessing wireless application protocol network, mobile terminal, server and system |
| CN102325051A (en) * | 2011-09-19 | 2012-01-18 | 上海大亚科技有限公司 | EoC (Ethernet Over Coax) network equipment management system and method based on simple network management protocol |
| CN104427471A (en) * | 2013-09-04 | 2015-03-18 | 华为技术有限公司 | Method for automatically establishing connection of mobile network and terminal |
-
2017
- 2017-04-18 CN CN201710251385.2A patent/CN107094095B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101147139A (en) * | 2005-12-27 | 2008-03-19 | 松下电工株式会社 | Automatic identifier generation device, information storage system, and information acquisition method for it |
| CN101267306A (en) * | 2007-03-14 | 2008-09-17 | 三星电子株式会社 | Method and apparatus for performing cross certification for using wireless device |
| CN101662770A (en) * | 2009-09-22 | 2010-03-03 | 神州付（北京）软件技术有限公司 | Method for accessing wireless application protocol network, mobile terminal, server and system |
| CN102325051A (en) * | 2011-09-19 | 2012-01-18 | 上海大亚科技有限公司 | EoC (Ethernet Over Coax) network equipment management system and method based on simple network management protocol |
| CN104427471A (en) * | 2013-09-04 | 2015-03-18 | 华为技术有限公司 | Method for automatically establishing connection of mobile network and terminal |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107094095A (en) | 2017-08-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9026082B2 (en) | Terminal identifiers in a communications network | |
| CN106664319B (en) | Vehicle network and method for establishing a vehicle network | |
| CN106385420A (en) | ECU software download method and device | |
| EP2466759B1 (en) | Method and system for changing a selected home operator of a machine to machine equipment | |
| KR101059794B1 (en) | Method for restricting illegal use of terminal and system for same | |
| CN102215474A (en) | Method and device for carrying out authentication on communication equipment | |
| CN103518401A (en) | Network switching method and device | |
| CN106686022A (en) | Control method and device for vehicle | |
| CN106027302B (en) | Parameter configuration method and system | |
| CN108153562B (en) | System and method for remote program update management of ECU of new energy automobile | |
| CN105453619A (en) | Methods and devices for performing a mobile network switch | |
| CN108141810B (en) | Method and device for data transmission in Internet of vehicles system | |
| CN105391681A (en) | Communication system, communication device, vehicle and communication method | |
| KR20190106739A (en) | Elevator service request and offline authentication of the elevator service request | |
| JP2019036091A (en) | Vehicle security system and vehicle security method | |
| CN111405525B (en) | Authentication method and equipment for road side unit and computer readable storage medium | |
| US20230015877A1 (en) | Certificate list update method and apparatus | |
| CN111107513A (en) | Management method and management subsystem of road side unit and V2X message access gateway | |
| CN112423266A (en) | Vehicle diagnosis method and device and automobile | |
| CN113543072A (en) | Communication method, electronic device, and storage medium | |
| CN102263793A (en) | Method, system and device for verifying and controlling permission of MTC (machine type communication) server | |
| CN107094095B (en) | Network management system and network management method | |
| CN104717600A (en) | M2M terminal/terminal peripheral accessibility management method and device | |
| KR101208722B1 (en) | Method for accessing closed groups in radio access networks | |
| CN101176368B (en) | Method for recognizing mobile terminal validity |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |