CN107231291B - Micro-service isolation method and device suitable for power grid information physical system - Google Patents

Micro-service isolation method and device suitable for power grid information physical system Download PDF

Info

Publication number
CN107231291B
CN107231291B CN201710271748.9A CN201710271748A CN107231291B CN 107231291 B CN107231291 B CN 107231291B CN 201710271748 A CN201710271748 A CN 201710271748A CN 107231291 B CN107231291 B CN 107231291B
Authority
CN
China
Prior art keywords
micro
service
services
cim
virtual
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201710271748.9A
Other languages
Chinese (zh)
Other versions
CN107231291A (en
Inventor
梁云
王瑶
黄莉
罗黎明
曾鹏飞
孔震
倪明
缪巍巍
张斌
吴猛
陈高峰
胡斌
曹晶
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
State Grid Corp of China SGCC
State Grid Jiangsu Electric Power Co Ltd
Global Energy Interconnection Research Institute
Nanjing NARI Group Corp
Information and Telecommunication Branch of State Grid Jiangsu Electric Power Co Ltd
Original Assignee
State Grid Corp of China SGCC
State Grid Jiangsu Electric Power Co Ltd
Global Energy Interconnection Research Institute
Nanjing NARI Group Corp
Information and Telecommunication Branch of State Grid Jiangsu Electric Power Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by State Grid Corp of China SGCC, State Grid Jiangsu Electric Power Co Ltd, Global Energy Interconnection Research Institute, Nanjing NARI Group Corp, Information and Telecommunication Branch of State Grid Jiangsu Electric Power Co Ltd filed Critical State Grid Corp of China SGCC
Priority to CN201710271748.9A priority Critical patent/CN107231291B/en
Publication of CN107231291A publication Critical patent/CN107231291A/en
Application granted granted Critical
Publication of CN107231291B publication Critical patent/CN107231291B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H04L67/1001—Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
    • H04L67/1004—Server selection for load balancing
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533—Hypervisors; Virtual machine monitors
    • G06F9/45558—Hypervisor-specific management and integration aspects
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/21—Monitoring or handling of messages
    • H04L51/212—Monitoring or handling of messages using filtering or selective blocking
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/2866—Architectures; Arrangements
    • H04L67/30—Profiles
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533—Hypervisors; Virtual machine monitors
    • G06F9/45558—Hypervisor-specific management and integration aspects
    • G06F2009/45587—Isolation or security of virtual machine instances

Abstract

The invention provides a micro-service isolation method and a device suitable for a power grid information physical system, wherein the method comprises the following steps: defining micro services in a power grid information physical system, the category of the micro services and a corresponding CIM theme domain, and constructing a micro service matrix according to the micro services; defining application services in a power grid information physical system, and selecting a micro-service set corresponding to the application services from a micro-service matrix; and loading the micro-services in the micro-service set into virtual containers, performing information interaction among the virtual containers, and realizing the isolation of the micro-services through a CIM (common information model) subject domain. The technical scheme provided by the invention realizes information flow isolation based on micro-services according to the uniform CIM, the rule to be followed by the information flow isolation is executed in the uniform micro-service management plane, and the application normativity and the safety of the power grid information physical system are ensured.

Description

Micro-service isolation method and device suitable for power grid information physical system
Technical Field
The invention relates to the technical field of power grid information physical systems, in particular to a micro-service isolation method and device suitable for a power grid information physical system.
Background
The power grid CPS aims to fully reflect the physical process and the information process of the power grid operation, embody the fusion mechanism and the interaction mechanism of the two, and hopefully improve the overall performance of the system and optimize the operation of the global system through a higher-level control mode, thereby improving the energy utilization rate, the equipment utilization potential and the reliability, the safety and the stability of the system.
In the power grid information physical system, the problems of information ownership, use right and the like still exist, the flexibility of the organization structure of the power grid information physical system is further increased, and proper management measures are needed to ensure the isolation among different services and ensure the normalization and the reliability of information services. Therefore, how to combine information isolation and service specification through a proper modeling and control technology becomes a research focus of a power grid information physical system, and the purpose of the research focus is to provide support for design, construction and operation of related engineering systems.
At present, container technology is widely used due to its characteristics of easy use, high efficiency, etc., and has had certain achievements in the aspect of container-based isolation. For example, the invention patent with application number 201610072268.5 discloses a container-based data redistribution method and device, and the invention patent performs migration of database containers aiming at different types of database containers, optimizes the performance of database services in the containers, and effectively improves the performance of the database services in the containers. The invention patent with application number 201510497067.5 discloses a method and a device for accessing data in a Docker container, wherein a request end located outside a current Docker container is set to have access rights to a mounting path and a container path corresponding to data inside the current Docker container, and a request is obtained and whether a target request end has rights or not is judged to improve safety and the like. However, the two patents are mainly optimized based on IT technology, the consideration of service features is less, the container technology is not combined into the power grid service, and especially under the condition that the power grid information system and the physical system are highly fused, if no proper means is provided to ensure the isolation among different services, the normative and the safety of the application of the power grid information physical system are difficult to guarantee.
Disclosure of Invention
In order to overcome the defects of the prior art, the invention provides a micro-service isolation method and a device suitable for a power grid information physical system, which realize information flow isolation based on micro-service according to unified CIM, wherein the rule to be followed by the information flow isolation is executed in a unified micro-service management plane, thereby ensuring the normalization and the safety of the application of the power grid information physical system, and the invention has practical operability.
In order to achieve the purpose of the invention, the invention adopts the following technical scheme:
the invention provides a micro-service isolation method suitable for a power grid information physical system, which comprises the following steps:
defining micro services in a power grid information physical system, the category of the micro services and a corresponding CIM theme domain, and constructing a micro service matrix according to the micro services;
defining application services in a power grid information physical system, and selecting a micro-service set corresponding to the application services from a micro-service matrix;
and loading the micro-services in the micro-service set into virtual containers, performing information interaction among the virtual containers, and realizing the isolation of the micro-services through a CIM (common information model) subject domain.
The following micro-service matrix is constructed according to the micro-service:
Figure GDA0003376817320000021
wherein Bs represents a micro-service matrix, s represents micro-services in a power grid information physical system, c and d respectively represent the category of the micro-services and a CIM subject domain to which the micro-services belong, and scdThe category representing the micro-service s is c and the CIM topic domain to which it belongs is d.
The method comprises the following steps of selecting the following micro-service sets corresponding to application services from a micro-service matrix:
∏s＝C*BS*DT
wherein, ns represents a micro-service set, C represents a micro-service category selection feature vector, D represents a selection feature vector of a CIM subject domain to which the micro-service belongs, and C and D are respectively as follows:
C＝[a1，a2…ac]
D＝[0，b1，b2…bd]
wherein, acC element representing C, if micro-service exists in the ins, the micro-service is a C type micro-service, ac1, otherwise ac＝0；bdD +1 th element representing D, if micro-service exists in the pi s, belonging to the D CIM subject field, bd1, otherwise bd＝0。
Loading the micro-services in the micro-service set into a virtual container as follows:
Figure GDA0003376817320000031
wherein V represents a virtual container, V' represents a remaining allocatable virtual container, VmIndicating that a virtual container is being used,
Figure GDA0003376817320000032
it is meant that the different application services are,
Figure GDA0003376817320000033
respectively represent
Figure GDA0003376817320000034
A set of virtual containers is used.
The information interaction among the virtual containers comprises the following steps:
Figure GDA0003376817320000035
Figure GDA0003376817320000036
Figure GDA0003376817320000037
wherein T represents a state set, and T represents a state; a represents an action set of a power grid information physical system, and a represents an action; v denotes a virtual container, vsTo represent
Figure GDA0003376817320000038
Any virtual container in (1); step (t, a) represents that a process of reaching the next state is performed at t; addr (t, s) represents a virtual container used by the microservice s under t; addr (step (t, a), s) represents the virtual container used by the microservice s when t executes a to the next state.
The isolation of the micro-service through the CIM subject domain comprises the following steps:
determining that the virtual container simultaneously satisfies the following constraints:
1)
Figure GDA0003376817320000039
there are no duplicate virtual containers in between;
2) the rest distributable virtual containers are in an initialization state, and the distributable virtual containers do not contain the legacy microservices and data of the microservices;
3) each virtual container corresponds to a CIM theme domain, and the CIM theme domain is kept unchanged in the execution process;
and calling the micro services mutually according to the constraint conditions met by the virtual container so as to realize the isolation of the micro services.
The invention also provides a micro-service isolation device suitable for the power grid information physical system, which comprises:
the building module is used for defining the micro-services in the power grid information physical system, the categories of the micro-services and the corresponding CIM theme domains, and building a micro-service matrix according to the micro-services;
the selection module is used for defining application services in the power grid information physical system and selecting a micro-service set corresponding to the application services from the micro-service matrix;
and the isolation module is used for loading the micro-services in the micro-service set into the virtual containers, performing information interaction among the virtual containers and realizing isolation of the micro-services through the CIM subject domain.
The building module is specifically configured to:
constructing the following micro-service matrix according to the micro-service:
Figure GDA0003376817320000041
wherein BS represents a micro-service matrix, s represents micro-service in a power grid information physical system, c and d respectively represent the category of the micro-service and a CIM theme domain to which the micro-service belongs, and scdThe category representing the micro-service s is c and the CIM topic domain to which it belongs is d.
The selection module is specifically configured to:
selecting the following micro-service sets corresponding to the application services from the micro-service matrix:
∏s＝C*BS*DT
wherein, ns represents a micro-service set, C represents a micro-service category selection feature vector, D represents a selection feature vector of a CIM subject domain to which the micro-service belongs, and C and D are respectively as follows:
C＝[a1，a2…ac]
D＝[0，b1，b2…bd]
wherein, acC element representing C, if micro-service exists in the ins, the micro-service is a C type micro-service, ac1, otherwise ac＝0；bdD +1 th element representing D, if micro-service exists in the pi s, belonging to the D CIM subject field, bd1, otherwise bd＝0。
The isolation module is specifically configured to:
loading the micro-services in the micro-service set into a virtual container as follows:
Figure GDA0003376817320000051
wherein V represents a virtual container, V' represents a remaining allocatable virtual container, VmIndicating that a virtual container is being used,
Figure GDA0003376817320000052
it is meant that the different application services are,
Figure GDA0003376817320000053
respectively represent
Figure GDA0003376817320000054
A set of virtual containers is used.
The isolation module is specifically used for information interaction between the virtual containers, and comprises:
Figure GDA0003376817320000055
Figure GDA0003376817320000056
Figure GDA0003376817320000057
wherein T represents a state set, and T represents a state; a represents an action set of a power grid information physical system, and a represents an action; v denotes a virtual container, vSTo represent
Figure GDA0003376817320000058
Any virtual container in (1); step (t, a) represents that a process of reaching the next state is performed at t; addr (t, s) represents a virtual container used by the microservice s under t; addr (step (t, a), s) represents the virtual container used by the microservice s when t executes a to the next state.
The isolation module is specifically configured to:
determining that the virtual container simultaneously satisfies the following constraints:
1)
Figure GDA0003376817320000059
there are no duplicate virtual containers in between;
2) the rest distributable virtual containers are in an initialization state, and the distributable virtual containers do not contain the legacy microservices and data of the microservices;
3) each virtual container corresponds to a CIM theme domain, and the CIM theme domain is kept unchanged in the execution process;
arranging the micro-services according to the constraint conditions, and realizing the isolation of the information flow formed by the mutual connection of the virtual containers.
Compared with the closest prior art, the technical scheme provided by the invention has the following beneficial effects:
the micro-service isolation method applicable to the power grid information physical system provided by the invention comprises the steps of defining micro-services in the power grid information physical system, the types of the micro-services and corresponding CIM theme domains, and constructing a micro-service matrix according to the micro-services; then defining application services in the power grid information physical system, and selecting a micro-service set corresponding to the application services from the micro-service matrix; finally, micro services in the micro service set are loaded into the virtual containers, information interaction is carried out among the virtual containers, and isolation of the micro services is achieved through a CIM theme domain;
the technical scheme provided by the invention realizes information flow isolation based on micro-services according to a uniform Common Information Model (CIM), the rule to be followed by the information flow isolation is executed in a uniform micro-service management plane, and the virtual container technology is combined into a power grid information physical system formed by fusing a power grid information system and a physical system, so that the isolation among different micro-services is realized, and the application normalization and the safety of the power grid information physical system are ensured.
Drawings
Fig. 1 is a schematic diagram of a microservice isolation method applicable to a power grid information physical system in embodiment 1 of the present invention;
fig. 2 is a schematic view of micro-service isolation for a power grid intelligent operation inspection management and control system in embodiment 3 of the present invention;
fig. 3 is a schematic diagram of microservice isolation for an electric vehicle networking system in embodiment 4 of the present invention.
Detailed Description
The present invention will be described in further detail with reference to the accompanying drawings.
Example 1
In the micro-service isolation method applicable to the power grid information physical system provided in embodiment 1 of the present invention, the power grid information physical system is a complex measurement and control system having functions of information ubiquitous sensing, cooperative computing, interactive communication, and automatic control, and is a public service system open to the society, and various interfaces that should be implemented for accessing publicly available data need to exchange information in a standard manner based on a common information model CIM. The customized service is realized through the arrangement and combination of the micro-services, and the information flow isolation is carried out according to the uniform CIM, so that the standardization and the safety of the application of the power grid information physical system are facilitated. The common Information model cim (common Information model) is an abstract model describing all the main objects in a power enterprise, which are typically included in the energy management system model. The national power grid company constructs SG-CIM on the basis of CIM, performs expansion and perfection by combining the services of the national power grid company, and designs and forms a set of complete standard data model and data access interface specification. The SG-CIM theme domain, also known as "package," is a way in SG-CIM to group related model elements, making the model easier to design, understand, and view. The theme zone is divided into a primary theme zone and a secondary theme zone, and one primary theme zone (generally, simply called the theme zone) can contain a plurality of secondary theme zones.
A flowchart of a microservice isolation method provided in embodiment 1 of the present invention is shown in fig. 1, and the specific process is as follows:
s101: defining micro services in a power grid information physical system, the category of the micro services and a corresponding CIM theme domain, and constructing a micro service matrix according to the micro services;
s102: defining application services in the power grid information physical system, and selecting a micro-service set corresponding to the application services from the micro-service matrix constructed in S101;
s103: and (4) loading the micro-services in the micro-service set in the S102 into the virtual containers, carrying out information interaction among the virtual containers, and realizing the isolation of the micro-services through the CIM subject domain.
In the above S101, the following micro-service matrix is constructed according to the micro-service:
Figure GDA0003376817320000071
wherein BS represents a micro-service matrix, s represents micro-service in a power grid information physical system, c and d respectively represent the category of the micro-service and a CIM theme domain to which the micro-service belongs, and scdThe category representing the micro-service s is c and the CIM topic domain to which it belongs is d.
In the above step S102, the following micro-service sets corresponding to the application services are selected from the micro-service matrix: hs ═ C ═ BS ═ DT
Wherein, ns represents a micro-service set, C represents a micro-service category selection feature vector, D represents a selection feature vector of a CIM subject domain to which the micro-service belongs, and C and D are respectively as follows:
C＝[a1，a2…ac]
D＝[0，b1，b2…bd]
wherein, acC element representing C, if micro-service exists in the ins, the micro-service is a C type micro-service, ac1, otherwise ac＝0；bdD +1 th element representing D, if micro-service exists in the pi s, belonging to the D CIM subject field, bd1, otherwise bd＝0。
In the above S103, a specific process of loading the micro services in the micro service set into the virtual container according to the following formula is as follows:
Figure GDA0003376817320000081
wherein V represents a virtual container, V' represents a remaining allocatable virtual container, VmIndicating that a virtual container is being used,
Figure GDA0003376817320000082
it is meant that the different application services are,
Figure GDA0003376817320000083
respectively represent
Figure GDA0003376817320000084
A set of virtual containers is used.
The specific process of information interaction between the virtual containers in S103 is as follows:
Figure GDA0003376817320000085
Figure GDA0003376817320000086
Figure GDA0003376817320000087
wherein T represents a state set, and T represents a state; a represents an action set of a power grid information physical system, and a represents an action; v denotes a virtual container, vSTo represent
Figure GDA0003376817320000088
Any virtual container in (1); step (t, a) represents that a process of reaching the next state is performed at t; addr (t, s) represents a virtual container used by the microservice s under t; addr (step (t, a), s) represents the virtual container used by the microservice s when t executes a to the next state.
The specific process of implementing micro-service isolation through the CIM topic domain in S103 is as follows:
first, it is determined that the virtual container simultaneously satisfies the following constraints:
1)
Figure GDA0003376817320000089
there are no duplicate virtual containers in between;
2) the rest distributable virtual containers are in an initialization state, and the distributable virtual containers do not contain the legacy microservices and data of the microservices;
3) each virtual container corresponds to a CIM theme domain, and the CIM theme domain is kept unchanged in the execution process;
then, the micro services are mutually called according to the constraint conditions met by the virtual container, so that the isolation of the micro services is realized.
Example 2
Based on the same inventive concept, embodiment 2 of the present invention further provides a micro-service isolation device suitable for a power grid information physical system, where the micro-service isolation device based on CIM in the power grid information physical system provided in embodiment 2 specifically includes a construction module, a selection module, and an isolation module, and the following respectively describes the functions of these 3 modules:
the building module is mainly used for defining the micro-services in the power grid information physical system, the categories of the micro-services and the corresponding CIM theme domains, and building a micro-service matrix according to the micro-services;
the selection module is mainly used for defining application services in the power grid information physical system and selecting a micro-service set corresponding to the application services from the micro-service matrix;
and the isolation module is mainly used for loading the micro-services in the micro-service set into the virtual containers, performing information interaction among the virtual containers and realizing isolation of the micro-services through the CIM subject domain.
The building module defines the micro-services in the power grid information physical system, the categories of the micro-services and the corresponding CIM theme domains, and the specific process of building the micro-service matrix according to the micro-services is as follows:
defining s to represent micro-services in the power grid information physical system, respectively representing the categories of the micro-services and CIM theme domains to which the micro-services belong by c and d, and constructing the following micro-service matrix according to s:
Figure GDA0003376817320000091
wherein BS denotes a micro-service matrix, scdThe category representing the micro-service s is c and the CIM topic domain to which it belongs is d.
The specific process of selecting the micro-service set corresponding to the application service from the micro-service matrix is as follows:
definition of
Figure GDA0003376817320000092
Representing application services in a power grid information physical system, wherein any one application service is related to a CIM subject domain, and the following is selected from a BS
Figure GDA0003376817320000093
Corresponding micro-service set:
∏s＝C*BS*DT
wherein, ns represents a micro-service set, C represents a micro-service category selection feature vector, D represents a selection feature vector of a CIM subject domain to which the micro-service belongs, and C and D are respectively as follows:
C＝[a1，a2…ac]
D＝[0，b1，b2…bd]
wherein, acC element representing C, if micro-service exists in the ins, the micro-service is a C type micro-service, ac1, otherwise ac＝0；bdD +1 th element representing D, if micro-service exists in the pi s, belonging to the D CIM subject field, bd1, otherwise bd＝0。
The specific process of loading the micro-services in the micro-service set into the virtual container by the isolation module is as follows:
the virtual container V in the power grid information physical system is represented by the following formula:
Figure GDA0003376817320000101
wherein V' represents the remaining allocatable virtual containers, VmA virtual container representing the micro service management plane usage,
Figure GDA0003376817320000102
it is meant that the different application services are,
Figure GDA0003376817320000103
respectively represent
Figure GDA0003376817320000104
A set of virtual containers to use;
the specific process of information interaction among the virtual containers is as follows:
definition of
Figure GDA0003376817320000105
There is no duplication in virtual containers between them, the virtual containers cannot be switched between services directly, and the micro-service recovery and reloading process must be performed in the micro-service management plane, formalized as:
in G (V, →),
Figure GDA0003376817320000106
comprises the following steps:
Figure GDA0003376817320000107
and is
Figure GDA0003376817320000108
Wherein T represents a state set, and T represents a state; a represents an action set of a power grid information physical system, and a represents an action; v denotes a virtual container, vSTo represent
Figure GDA0003376817320000111
And any virtual container of; step (t, a) represents that a process of reaching the next state is performed at t; addr (t, s) represents a virtual container used by the microservice s under t, and addr (step (t, a), s) represents a virtual container used by the microservice s when t executes a to the next state.
The isolation module realizes the isolation of the micro-service through the CIM subject domain in the following specific process:
firstly, determining that the virtual container simultaneously meets the following constraint conditions:
1)
Figure GDA0003376817320000112
there are no duplicate virtual containers in between, formalized as:
Figure GDA0003376817320000113
when v isx∈addr(t，，s)∧vy
E is addr (t, s), vx＝vy
Wherein v isx，vyTo represent
Figure GDA0003376817320000114
Any virtual container in (1);
2) the distributable virtual container is in an initialization state, and the distributable virtual container does not contain the legacy microservice and data of the microservice, and is formally represented as follows:
Figure GDA0003376817320000115
domain(t，v，s)＝0
the domain (t, v, s) represents a corresponding CIM subject domain under t after s is loaded in v in the power grid information physical system; domain (t, V, s) ═ 0 denotes that the virtual container is initialized, and all V in V' satisfy domain (t, V, s) ═ 0;
3)
Figure GDA0003376817320000116
each virtual container used corresponds to a CIM theme domain and is arranged in
Figure GDA0003376817320000117
In the course of execution,
Figure GDA0003376817320000118
the CIM topic domain of (a) remains unchanged, formalized as:
Figure GDA0003376817320000119
wherein, tx，tyRepresents an arbitrary state in T, step (T)xA) is indicated at txThe process of a reaching the next state, step (t), is performed nextyA) is indicated at tyThe process that a reaches the next state is executed;
then, the micro services are mutually called according to the constraint conditions met by the virtual container, so that the isolation of the micro services is realized.
Example 3
Based on the same inventive concept, embodiment 3 of the present invention provides a micro-service isolation method suitable for a power grid information physical system, wherein the power grid information physical system is a power grid intelligent operation inspection management and control system, and the micro-service isolation method provided in embodiment 3 of the present invention specifically comprises the following processes:
s101: defining micro services in a power grid information physical system, the category of the micro services and a corresponding CIM theme domain, and constructing a micro service matrix according to the micro services;
s102: defining application services in the power grid information physical system, and selecting a micro-service set corresponding to the application services from the micro-service matrix constructed in S101;
s103: and (4) loading the micro-services in the micro-service set in the S102 into the virtual containers, carrying out information interaction among the virtual containers, and realizing the isolation of the micro-services through the CIM subject domain.
A schematic diagram of micro-service isolation for a power grid intelligent operation and inspection management and control system is shown in fig. 2, and sensing, analysis, decision making and execution between a physical entity and an environment and between physical entities (including devices, people and the like) can be completed through cooperation of primary equipment, secondary equipment and an information system. By collecting real-time operation data of the power grid equipment, the real-time operation data is connected under a uniform interface protocol or an interface conversion standard, characteristic analysis of equipment performance, safety, state and the like is carried out, and changes of a production field are mastered in the shortest time, so that accurate judgment and production command are made, and emergency repair and maintenance operation are carried out in time; the method helps the power grid operation and inspection center to establish an accurate and comprehensive power grid picture, predicts the operation state of the equipment under the constraint of the knowledge base and the rule base, and adopts proper predictive maintenance in advance. Then, in S101, the micro-service in the grid information physical system is defined, and a specific process of constructing the micro-service matrix according to the micro-service is as follows:
firstly, defining s to represent micro-services in a power grid information physical system, respectively representing the categories of the micro-services and CIM theme domains (such as a primary theme domain is equipment, and a corresponding secondary theme domain is power transmission equipment, power transformation equipment, power distribution equipment, protection equipment, automation equipment, equipment monitoring, equipment operation, equipment defects, operation processes and the like), and then constructing the following micro-service matrix according to s:
Figure GDA0003376817320000121
wherein BS denotes a micro-service matrix, scdAnd a c-th row and a d-th column element of the BS, wherein the category of the micro service s is c, and the CIM subject field to which the micro service belongs is d. Any element in the BS has uniqueness and irreplaceability, is a micro-service with independent function and definite interface, and any two micro-services can be mutually called. Wherein s isc0Denoted as class c microservices available in all CIM subject domains.
In the above S102, the application service in the power grid information physical system is defined, and a specific process of selecting the micro service set corresponding to the application service from the micro service matrix is as follows:
first define
Figure GDA0003376817320000131
Representing application services in a cyber-physical system, due to any one of the application services
Figure GDA0003376817320000132
All related to the CIM subject domain (such as the second-level subject domain of the operation process), corresponding to a micro-service set n, all elements in n belong to the micro-service matrix BS, and the application service
Figure GDA0003376817320000133
The micro services in the micro service set pi s are mutually called, and the micro services of the intelligent operation and inspection management and control system have combinability and completeness.
Such as a job process tracking service in the job process, corresponding to the services of the flow engine, work order, organization, etc. in the BS, and associated with other secondary masters such as job standard, job plan, etcThe subject domains are related. Then select from the BS the following
Figure GDA0003376817320000134
Corresponding micro-service set:
∏s＝C*BS*DT
wherein, ns represents a micro-service set, C represents a micro-service category selection feature vector, D represents a selection feature vector of a CIM subject domain to which the micro-service belongs, and C and D are respectively as follows:
C＝[a1，a2…ac]
D＝[0，b1，b2…bd]
wherein, acC element representing C, if micro-service exists in the ins, the micro-service is a C type micro-service, ac1, otherwise ac＝0；bdD +1 th element representing D, if micro-service exists in the pi s, belonging to the D CIM subject field, bd1, otherwise bd＝0。
b1，b2…bdAccording to the CIM definition, the system comprises a primary theme domain and a secondary theme domain, wherein one primary theme domain can contain a plurality of secondary theme domains.
In the above S103, since only one container can load one micro service, but one micro service (e.g., a job tracking service) can be loaded into a plurality of virtual containers, forming a plurality of instances of the micro service. In this embodiment, the micro-service is implemented based on a Spring Cloud framework, and the packing and publishing of the micro-service is completed by using a Spring Boot. The virtual container is realized based on a Docker technology, the Docker is a lightweight container technology based on a Linux process, an image file of the micro-service is loaded into the process, only a program in the image can access data in the container, and the isolation of information flow is realized through the isolation of the Docker container. Therefore, the specific process of loading the micro-services in the micro-service set into the virtual container through the micro-service management plane is as follows:
firstly, a virtual container V in the power grid information physical system is represented by the following formula:
Figure GDA0003376817320000141
wherein V' represents the remaining allocatable virtual containers, VmA virtual container representing the micro service management plane usage,
Figure GDA0003376817320000142
ten points of the design show
Figure GDA0003376817320000143
A set of virtual containers to use;
in this embodiment 3, the Docker container runs on an X86 server installed with Linux, and develops a micro service management plane based on a Spring framework and a Swarm management component of Docker, for example, using a Zuul reverse proxy component to manage business logic such as customized authority and identity verification of different service callers. Information interaction is carried out among all virtual containers and definition is carried out
Figure GDA0003376817320000144
There is no duplication of virtual containers in between, i.e. the virtual containers cannot be switched directly between services, and must go through the process of recovering and reloading the microservices in the microservice management plane; the formalization is represented as:
in G (V, →),
Figure GDA0003376817320000145
comprises the following steps:
Figure GDA0003376817320000146
and is
Figure GDA0003376817320000147
Wherein T represents a state set, and T represents a state; a represents an action set of a power grid information physical system, and a represents an action; v denotes a virtual container, vSTo represent
Figure GDA0003376817320000148
Any virtual container in (1); step (t, a) represents that a process of reaching the next state is performed at t; addr (t, s) represents a virtual container used by the microservice s under t, and addr (step (t, a), s) represents a virtual container used by the microservice s when t executes a to the next state.
In the above S103, the isolation of the micro service is implemented through the CIM topic domain, and the specific process is as follows:
firstly, determining that the virtual container simultaneously meets the following constraint conditions:
1)
Figure GDA0003376817320000151
there are no duplicate virtual containers in between, formalized as:
Figure GDA0003376817320000152
when v isx∈addr(t，s)∧vy
E is addr (t, s), vx＝vy
Wherein v isx，vyTo represent
Figure GDA0003376817320000153
Any virtual container in (1);
2) the distributable virtual container is in an initialization state, and the distributable virtual container does not contain the legacy microservice and data of the microservice, and is formally represented as follows:
Figure GDA0003376817320000154
domain(t，v，s)＝0
the domain (t, v, s) represents a corresponding CIM subject domain under t after s is loaded in v in the power grid information physical system; domain (t, V, s) ═ 0 denotes that the virtual container is initialized, and all V in V' satisfy domain (t, V, s) ═ 0;
3)
Figure GDA0003376817320000156
each virtual container used corresponds to a CIM theme domain and is arranged in
Figure GDA0003376817320000157
In the course of execution,
Figure GDA0003376817320000158
the CIM topic domain of (a) remains unchanged, formalized as:
Figure GDA0003376817320000155
wherein, tx，tvRepresents an arbitrary state in T, step (T)xA) is indicated at txThe process of a reaching the next state, step (t), is performed nextyA) is indicated at tyThe process that a reaches the next state is executed;
then, the micro services are mutually called according to the constraint conditions met by the virtual container, so that the isolation of the micro services is realized. In the operation of the intelligent operation inspection management and control system, the micro-service is loaded into the Docker container to operate, the file systems of the containers are all mounted to the directories in the real Linux system, the Docker container cannot pass through the directories to access the data of other containers, and all the containers are isolated in the file systems. Therefore, the isolation of the container and the data archiving and cleaning during micro-service unloading can be realized through means such as directory mount, access authority configuration and the like, so that the isolation of information flow on the level of the virtual container is realized.
Example 4
Based on the same invention concept, embodiment 4 of the present invention provides a micro-service isolation method suitable for a power grid information physical system, wherein the power grid information physical system is an electric vehicle networking system, and the micro-service isolation method provided in embodiment 4 of the present invention specifically comprises the following processes:
s101: defining micro services in a power grid information physical system, and constructing a micro service matrix according to the micro services;
s102: defining application services in the power grid information physical system, and selecting a micro-service set corresponding to the application services from the micro-service matrix constructed in S101;
s103: and loading the micro-services in the micro-service set in the S102 into the virtual container through the micro-service management plane, and isolating the information flow through the CIM subject domain.
The schematic diagram of micro-service isolation for the electric vehicle networking system is shown in fig. 3. The electric vehicle networking system is provided with a charging station, a charging pile, a monitoring system of an electric vehicle and an intelligent operation and maintenance work mechanism with online and offline resource cooperative, and has the functions of resource monitoring, business operation, charging service, leasing service, value-added service and the like, the affiliated CIM subject domain is provided with a first-level subject domain of customers, equipment and the like, and the corresponding second-level subject domain is used for power consumption metering, customer service, equipment monitoring and the like. In the above S101, the micro service in the grid information physical system is defined, and a specific process of constructing the micro service matrix according to the micro service is as follows:
firstly, defining s to represent micro-services in a power grid information physical system, respectively representing the category of the micro-services and a CIM (common information model) subject domain to which the micro-services belong by c and d, and then constructing the following micro-service matrix according to s:
Figure GDA0003376817320000161
wherein BS denotes a micro-service matrix, scdAnd a c-th row and a d-th column element of the BS, wherein the category of the micro service s is c, and the CIM subject field to which the micro service belongs is d. Any element in the BS has uniqueness and irreplaceability, is a micro-service with independent function and definite interface, and any two micro-services can be mutually called. Wherein s isc0Denoted as class c microservices available in all CIM subject domains.
In the present embodiment, the virtual container is implemented based on the Docker technology. Inside the charging station, the Docker container may run on an X86 server installed with Linux; on charging piles and electric vehicles, the container can run on a Raspberry Pi single-board computer provided with Arch Linux, and related micro services are distributed and loaded based on Raspbian basic mirror images. The microservice management plane can thus be developed based on the management component of Docker. The X86 server in the charging station, the charging pile and the single board computer on the electric automobile are interconnected based on an IP protocol through a power special communication access network or a 4G wireless virtual private network, so that virtual containers running on different software and hardware can be mutually connected.
In the above S102, the application service in the power grid information physical system is defined, and a specific process of selecting the micro service set corresponding to the application service from the micro service matrix is as follows:
first define
Figure GDA0003376817320000171
Representing application services in a power grid information physical system; since any one application service
Figure GDA0003376817320000172
The part is related to the CIM subject field, all elements in a micro-service set are corresponding to the micro-service matrix BS, and the application service
Figure GDA0003376817320000173
The micro-services in the micro-service set pi s are mutually called.
Then select from the BS the following
Figure GDA0003376817320000174
Corresponding micro-service set:
∏s＝C*BS*DT
wherein, ns represents a micro-service set, C represents a micro-service category selection feature vector, D represents a selection feature vector of a CIM subject domain to which the micro-service belongs, and C and D are respectively as follows:
C＝[a1，a2…ac]
D＝[0，b1，b2…bd]
wherein, acC-th element representing CIf micro-services exist in the element, the micro-service is a class c micro-service, ac1, otherwise ac＝0；bdD +1 th element representing D, if micro-service exists in the pi s, belonging to the D CIM subject field, bd1, otherwise bd＝0。
b1，b2…bdAccording to the CIM definition, the system comprises a primary theme domain and a secondary theme domain, wherein one primary theme domain can contain a plurality of secondary theme domains.
In the above S103, since only one container can be loaded with one micro service, but one micro service can be loaded into several virtual containers, forming multiple instances of the micro service. Therefore, the specific process of loading the micro-services in the micro-service set into the virtual container through the micro-service management plane is as follows:
firstly, a virtual container V in the power grid information physical system is represented by the following formula:
Figure GDA0003376817320000181
wherein V' represents the remaining allocatable virtual containers, VmA virtual container representing the micro service management plane usage,
Figure GDA0003376817320000182
respectively represent
Figure GDA0003376817320000183
A set of virtual containers to use;
then, information interaction is carried out among all the virtual containers, and definition is carried out
Figure GDA0003376817320000184
There is no duplication of virtual containers in between, i.e. the virtual containers cannot be switched directly between services, and must go through the process of recovering and reloading the microservices in the microservice management plane; the formalization is represented as:
Figure GDA0003376817320000185
Figure GDA0003376817320000186
Figure GDA0003376817320000187
wherein T represents a state set, and T represents a state; a represents an action set of a power grid information physical system, and a represents an action; v denotes a virtual container, vsTo represent
Figure GDA0003376817320000188
Any virtual container in (1); step (t, a) represents that a process of reaching the next state is performed at t; addr (t, s) represents the virtual container used by the microservice s under t.
In the above S103, the isolation of the micro service is implemented through the CIM topic domain, and the specific process is as follows:
firstly, determining that the virtual container simultaneously meets the following constraint conditions:
1)
Figure GDA0003376817320000189
there are no duplicate virtual containers in between, formalized as:
Figure GDA00033768173200001810
when v isx∈addr(t，s)∧vy
E is addr (t, s), vx＝vy
Wherein v isx，vyTo represent
Figure GDA00033768173200001811
Any virtual container in (1);
2) the distributable virtual container is in an initialization state, and the distributable virtual container does not contain the legacy microservice and data of the microservice, and is formally represented as follows:
Figure GDA0003376817320000191
domain(t，v，s)＝0
the domain (t, v, s) represents a corresponding CIM subject domain under t after s is loaded in v in the power grid information physical system; domain (t, V, s) ═ 0 denotes that the virtual container is initialized, and all V in V' satisfy donmin (t, V, s) ═ 0;
3)
Figure GDA0003376817320000192
each virtual container used corresponds to a CIM theme domain and is arranged in
Figure GDA0003376817320000193
In the course of execution,
Figure GDA0003376817320000194
the CIM topic domain of (a) remains unchanged, formalized as:
Figure GDA0003376817320000195
wherein, tx，tyRepresents an arbitrary state in T, step (T)xA) is indicated at txThe process of a reaching the next state, step (t), is performed nextyA) is indicated at tyThe process that a reaches the next state is executed;
then, the micro services are mutually called according to the constraint conditions met by the virtual container, so that the isolation of the micro services is realized.
The formalization rule as the embodiment 4 of the invention is executed in the management plane of the electric automobile networking system, so that no repeated virtual container exists among different services; for a virtual container in the charging station, isolation is realized through a Linux file system, for a container running on a single board computer, a corresponding instruction in a nonvolatile memory (such as an SD card) is read into data running in an internal memory through a command when the container is loaded, and the distributable container is ensured to be in an empty state and does not contain the left micro-service and the data thereof; each container used by the service corresponds to a CIM topic domain, and the CIM topic domain remains unchanged during the execution of the service.
The embodiment 4 of the invention realizes personalized services through the arrangement and combination of the micro services, realizes isolation according to the unified CIM, and has formal representation of related rules and execution in the unified micro service management plane. Even if a hacker invades the electric automobile and knows the information such as the Docker container name, the container data mounting path and the like, the data cannot be directly tampered or the container is crossed to access the virtual containers which belong to other CIM subject areas and are positioned on the same single-board computer, so that the normativity and the safety of the electric automobile internet system are guaranteed.
For convenience of description, each part of the above-described apparatus is separately described as being functionally divided into various modules or units. Of course, the functionality of the various modules or units may be implemented in the same one or more pieces of software or hardware when implementing the present application.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
Finally, it should be noted that: the above embodiments are only intended to illustrate the technical solution of the present invention and not to limit the same, and a person of ordinary skill in the art can make modifications or equivalents to the specific embodiments of the present invention with reference to the above embodiments, and such modifications or equivalents without departing from the spirit and scope of the present invention are within the scope of the claims of the present invention as set forth in the claims.

Claims (2)

1. A micro-service isolation method suitable for a power grid information physical system is characterized by comprising the following steps:
defining micro services in a power grid information physical system, the category of the micro services and a corresponding CIM theme domain, and constructing a micro service matrix according to the micro services;
defining application services in a power grid information physical system, and selecting a micro-service set corresponding to the application services from a micro-service matrix;
micro services in the micro service set are loaded into virtual containers, information interaction is carried out among the virtual containers, and isolation of the micro services is achieved through a CIM (common information model) subject domain;
the following micro-service matrix is constructed according to the micro-service:
Figure FDA0003376817310000011
wherein BS represents a micro-service matrix, s represents micro-service in a power grid information physical system, c and d respectively represent the category of the micro-service and a CIM theme domain to which the micro-service belongs, and scdThe category of the micro service s is represented as c, and the CIM subject domain to which the micro service s belongs is represented as d;
the method comprises the following steps of selecting the following micro-service sets corresponding to application services from a micro-service matrix:
∏s＝C*BS*DT
wherein, ns represents a micro-service set, C represents a micro-service category selection feature vector, D represents a selection feature vector of a CIM subject domain to which the micro-service belongs, and C and D are respectively as follows:
C＝[ a1,a2…ac]
D＝[0,b1,b2…bd]
wherein, acC element representing C, if micro-service exists in the ins, the micro-service is a C type micro-service, ac1, otherwise ac＝0；bdD +1 th element representing D, if micro-service exists in the pi s, belonging to the D CIM subject field, bd1, otherwise bd＝0；
Loading the micro-services in the micro-service set into a virtual container as follows:
Figure FDA0003376817310000012
wherein V represents a virtual container, V' represents a remaining allocatable virtual container, VmIndicating that a virtual container is being used,
Figure FDA0003376817310000013
it is meant that the different application services are,
Figure FDA0003376817310000014
respectively represent
Figure FDA0003376817310000015
A set of virtual containers to use;
the information interaction among the virtual containers comprises the following steps:
Figure FDA0003376817310000021
Figure FDA0003376817310000022
Figure FDA0003376817310000023
wherein T represents a state set, and T represents a state; a represents an action set of a power grid information physical system, and a represents an action; v denotes a virtual container, vsTo represent
Figure FDA0003376817310000024
Any virtual container in (1); step (t, a) represents that a process of reaching the next state is performed at t; addr (t, s) represents a virtual container used by the microservice s under t; addr (step (t, a), s) represents a virtual container used by the microservice s when t executes a to the next state;
the isolation of the micro-service through the CIM subject domain comprises the following steps:
determining that the virtual container simultaneously satisfies the following constraints:
1)
Figure FDA0003376817310000025
there are no duplicate virtual containers in between;
2) the rest distributable virtual containers are in an initialization state, and the distributable virtual containers do not contain the legacy microservices and data of the microservices;
3) each virtual container corresponds to a CIM theme domain, and the CIM theme domain is kept unchanged in the execution process;
and calling the micro services mutually according to the constraint conditions met by the virtual container so as to realize the isolation of the micro services.
2. A microservice isolation device suitable for use in a cyber-physical system, comprising:
the building module is used for defining the micro-services in the power grid information physical system, the categories of the micro-services and the corresponding CIM theme domains, and building a micro-service matrix according to the micro-services;
the selection module is used for defining application services in the power grid information physical system and selecting a micro-service set corresponding to the application services from the micro-service matrix;
the isolation module is used for loading the micro-services in the micro-service set into the virtual containers, performing information interaction among the virtual containers and realizing isolation of the micro-services through a CIM (common information model) subject domain;
the building module is specifically configured to:
constructing the following micro-service matrix according to the micro-service:
Figure FDA0003376817310000026
wherein BS represents a micro-service matrix, s represents micro-service in a power grid information physical system, c and d respectively represent the category of the micro-service and a CIM theme domain to which the micro-service belongs, and scdThe category of the micro service s is represented as c, and the CIM subject domain to which the micro service s belongs is represented as d;
the selection module is specifically configured to:
selecting the following micro-service sets corresponding to the application services from the micro-service matrix:
∏s＝C*BS*DT
wherein, ns represents a micro-service set, C represents a micro-service category selection feature vector, D represents a selection feature vector of a CIM subject domain to which the micro-service belongs, and C and D are respectively as follows:
C＝[a1,a2…ac]
D＝[0,b1,b2…bd]
wherein, acC element representing C, if micro-service exists in the ins, the micro-service is a C type micro-service, ac1, otherwise ac＝0；bdD +1 th element representing D, if micro-service exists in the pi s, belonging to the D CIM subject field, bd1, otherwise bd＝0；
The isolation module is specifically configured to:
loading the micro-services in the micro-service set into a virtual container as follows:
Figure FDA0003376817310000031
wherein V represents a virtual container, V' represents a remaining allocatable virtual container, VmIndicating that a virtual container is being used,
Figure FDA0003376817310000032
it is meant that the different application services are,
Figure FDA0003376817310000033
respectively represent
Figure FDA0003376817310000034
A set of virtual containers to use;
the isolation module is specifically used for information interaction between the virtual containers, and comprises:
Figure FDA0003376817310000035
Figure FDA0003376817310000036
Figure FDA0003376817310000037
wherein T represents a state set, and T represents a state; a represents an action set of a power grid information physical system, and a represents an action; v denotes a virtual container, vsTo represent
Figure FDA0003376817310000038
Any virtual container in (1); step (t, a) represents that a process of reaching the next state is performed at t; addr (t, s) represents a virtual container used by the microservice s under t; addr (step (t, a), s) represents a virtual container used by the microservice s when t executes a to the next state;
the isolation module is specifically configured to:
determining that the virtual container simultaneously satisfies the following constraints:
1)
Figure FDA0003376817310000041
there are no duplicate virtual containers in between;
2) the rest distributable virtual containers are in an initialization state, and the distributable virtual containers do not contain the legacy microservices and data of the microservices;
3) each virtual container corresponds to a CIM theme domain, and the CIM theme domain is kept unchanged in the execution process;
arranging the micro-services according to the constraint conditions, and realizing the isolation of the information flow formed by the mutual connection of the virtual containers.
CN201710271748.9A 2017-04-24 2017-04-24 Micro-service isolation method and device suitable for power grid information physical system Active CN107231291B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710271748.9A CN107231291B (en) 2017-04-24 2017-04-24 Micro-service isolation method and device suitable for power grid information physical system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710271748.9A CN107231291B (en) 2017-04-24 2017-04-24 Micro-service isolation method and device suitable for power grid information physical system

Publications (2)

Publication Number Publication Date
CN107231291A CN107231291A (en) 2017-10-03
CN107231291B true CN107231291B (en) 2022-04-05

Family

ID=59933132

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710271748.9A Active CN107231291B (en) 2017-04-24 2017-04-24 Micro-service isolation method and device suitable for power grid information physical system

Country Status (1)

Country Link
CN (1) CN107231291B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107800781A (en) * 2017-10-12 2018-03-13 深圳市买买提乐购金融服务有限公司 A kind of configuration data processing method and device
CN110097238A (en) * 2018-01-29 2019-08-06 全球能源互联网研究院有限公司 A kind of electrical energy power quality disturbance event methods of exhibiting and system

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1878163A (en) * 2005-06-09 2006-12-13 华为技术有限公司 Multi-service transmission platform equipment managing system
CN101930481A (en) * 2009-06-22 2010-12-29 华东电网有限公司 Method used for generating CIM model describing power grid change in designated time slot and system thereof
CN105631196A (en) * 2015-12-22 2016-06-01 中国科学院软件研究所 Microservice-oriented container level flexible resource supply system and method
CN106203890A (en) * 2016-07-27 2016-12-07 国网河南省电力公司电力科学研究院 Battalion based on CIM auxiliary tone integration data modeling method
CN106294521A (en) * 2015-06-12 2017-01-04 交通银行股份有限公司 Date storage method and data warehouse
CN106506605A (en) * 2016-10-14 2017-03-15 华南理工大学 A kind of SaaS application construction methods based on micro services framework
CN106559488A (en) * 2016-11-24 2017-04-05 天津市普迅电力信息技术有限公司 A kind of method of the electrical network geographical information space service for setting up tenant's driving

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016065080A1 (en) * 2014-10-21 2016-04-28 Twilio, Inc. System and method for providing a miro-services communication platform

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1878163A (en) * 2005-06-09 2006-12-13 华为技术有限公司 Multi-service transmission platform equipment managing system
CN101930481A (en) * 2009-06-22 2010-12-29 华东电网有限公司 Method used for generating CIM model describing power grid change in designated time slot and system thereof
CN106294521A (en) * 2015-06-12 2017-01-04 交通银行股份有限公司 Date storage method and data warehouse
CN105631196A (en) * 2015-12-22 2016-06-01 中国科学院软件研究所 Microservice-oriented container level flexible resource supply system and method
CN106203890A (en) * 2016-07-27 2016-12-07 国网河南省电力公司电力科学研究院 Battalion based on CIM auxiliary tone integration data modeling method
CN106506605A (en) * 2016-10-14 2017-03-15 华南理工大学 A kind of SaaS application construction methods based on micro services framework
CN106559488A (en) * 2016-11-24 2017-04-05 天津市普迅电力信息技术有限公司 A kind of method of the electrical network geographical information space service for setting up tenant's driving

Non-Patent Citations (5)

* Cited by examiner, † Cited by third party
Title
B.Arnold ; S.A.Baset ; P.Dettori ; M.Kalantar ; I.I.Mohomed ; .Building the IBM Containers.《IEEE》.2016, *
Secure Image Processing Inside Cloud File Sharing;Paul Rad,Mohan Muppidi,Sos S.Agaian,Mo Jamshidi;《IEEE》;20151008;全文 *
基于事件容器的电子病历质控模块设计与实现;朱小兵;《中国优秀硕士学位论文全文数据库》;20130630;5-52 *
基于容器的微服务架构的浅析;陈春霞;《信息系统工程》;20160331;95-96 *
开源学习平台视频和移动端服务的改进与实现;黄宏晖;《中国优秀硕士学位论文全文数据库》;20161130;31-58 *

Also Published As

Publication number Publication date
CN107231291A (en) 2017-10-03

Similar Documents

Publication Publication Date Title
Vatankhah Barenji et al. Blockchain-based ubiquitous manufacturing: A secure and reliable cyber-physical system
US11044310B2 (en) Automatic scaling of resource instance groups within compute clusters
US11768004B2 (en) HVAC device registration in a distributed building management system
US11700296B2 (en) Client-directed placement of remotely-configured service instances
CN104395888B (en) Establish the method, system and medium of the initial configuration of hardware inventory
CN114253659A (en) Grid layout
EP3998720A2 (en) Orchestrator execution planning using a distributed ledger
CN108369537A (en) Enable the calculated examples of FPGA
CN110622139A (en) Building management system development and control platform
US10681116B2 (en) Providing services as resources for other services
CN105897805A (en) Method and device for cross-layer scheduling of resources of data center with multi-layer architecture
CN114253793A (en) Dynamic tracking control
CN105684357A (en) Management of addresses in virtual machines
US11593180B2 (en) Cluster selection for workload deployment
CN108924249A (en) A kind of method and device for disposing OpenStack platform
CN114253658A (en) Continuous testing, integration and deployment management of edge computing
Petroulakis et al. Semiotics architectural framework: End-to-end security, connectivity and interoperability for industrial iot
CN107231291B (en) Micro-service isolation method and device suitable for power grid information physical system
Llorens-Carrodeguas et al. An energy-friendly scheduler for edge computing systems
US11159402B1 (en) Virtual machine import/export risk assessment
US10222774B2 (en) Preventing unauthorized movement of energy across grid networks due to portable storage devices
US11003431B2 (en) Generating predictive metrics for virtualized deployments
US10516756B1 (en) Selection of a distributed network service
Štefanič et al. Quality of Service‐aware matchmaking for adaptive microservice‐based applications
CN110351104A (en) A kind of VIM selection method and device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant