CN111447089B - Terminal asset identification method and device and computer readable storage medium - Google Patents

Terminal asset identification method and device and computer readable storage medium Download PDF

Info

Publication number
CN111447089B
CN111447089B CN202010211056.7A CN202010211056A CN111447089B CN 111447089 B CN111447089 B CN 111447089B CN 202010211056 A CN202010211056 A CN 202010211056A CN 111447089 B CN111447089 B CN 111447089B
Authority
CN
China
Prior art keywords
terminal
target
list
online
protocol
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202010211056.7A
Other languages
Chinese (zh)
Other versions
CN111447089A (en
Inventor
冯钱勇
张兴彦
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sangfor Technologies Co Ltd
Original Assignee
Sangfor Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sangfor Technologies Co Ltd filed Critical Sangfor Technologies Co Ltd
Priority to CN202010211056.7A priority Critical patent/CN111447089B/en
Publication of CN111447089A publication Critical patent/CN111447089A/en
Application granted granted Critical
Publication of CN111447089B publication Critical patent/CN111447089B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • H04L41/0803Configuration setting
    • H04L41/0813Configuration setting characterised by the conditions triggering a change of settings
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0631Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/02Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
    • H04L67/025Protocols based on web technology, e.g. hypertext transfer protocol [HTTP] for remote control or remote monitoring of applications
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/54Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/18Multiprotocol handlers, e.g. single devices capable of handling multiple protocols

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The embodiment of the invention discloses a terminal asset identification method and device and a computer readable storage medium, wherein the terminal asset identification method comprises the following steps: detecting all online terminals in the target network segment; generating a detection data packet based on a preset protocol list, and sending the detection data packet to all online terminals; and receiving the equipment information returned by all the online terminals in response to the detection data packet, and identifying the target terminal in all the online terminals according to the equipment information.

Description

Terminal asset identification method and device and computer readable storage medium
Technical Field
The present invention relates to the field of network technologies, and in particular, to a method and apparatus for identifying a terminal asset, and a computer readable storage medium.
Background
With the continuous upgrading of network technology and continuous improvement of network bandwidth, network video equipment such as network cameras and the like gradually become an indispensable tool in human life. In general, thousands of network video devices are often distributed in different areas in a video network, and how to manage the network video devices becomes an important problem. Several management of the network video devices at the present stage generally takes place in the following ways: through manpower management, when in installation, statistics records are recorded and then reported layer by layer; or, video equipment manufacturers respectively manage own brands of video equipment and manage multiple platforms.
However, since the video network includes a large number of network video devices, which are generally manufactured by different manufacturers and all support a plurality of different protocols, the existing terminal asset identification method is difficult to ensure the correctness of the device information in the whole video network, and further cannot realize the instant update of the device information, so that the management difficulty is high and the management flow is complex.
Disclosure of Invention
In order to solve the above technical problems, embodiments of the present invention desire to provide a method and an apparatus for identifying a terminal asset, and a computer readable storage medium, which can improve the correctness and the accuracy of equipment information, and implement the instant update of the equipment information, thereby reducing the management difficulty and simplifying the management flow.
In order to achieve the above object, the technical solution of the embodiment of the present invention is as follows:
in a first aspect, an embodiment of the present invention provides a terminal asset identification method, where the method includes:
detecting all online terminals in the target network segment;
generating a detection data packet based on a preset protocol list, and sending the detection data packet to the online terminal;
and receiving equipment information returned by the online terminals in response to the detection data packet, and identifying a target terminal in all the online terminals according to the equipment information.
In a second aspect, an embodiment of the present invention provides a terminal asset identification device, including: a detecting unit, a generating unit, a transmitting unit, a receiving unit, an identifying unit,
the detection unit is used for detecting all online terminals in the target network segment;
the generating unit is used for generating a detection data packet based on a preset protocol list;
the sending unit is used for sending the detection data packet to all online terminals;
the receiving unit is used for receiving equipment information returned by all online terminals in response to the detection data packet;
the identifying unit is used for identifying the target terminal in all the online terminals according to the equipment information.
In a third aspect, an embodiment of the present invention provides a terminal asset identification device, where the terminal asset identification device includes a processor, a memory storing instructions executable by the processor, a communication interface, and a bus for connecting the processor, the memory, and the communication interface, and when the instructions are executed by the processor, the terminal asset identification method as described above is implemented.
In a fourth aspect, an embodiment of the present invention provides a computer readable storage medium having stored thereon a program for use in a terminal asset identification device, the program, when executed by a processor, implementing a terminal asset identification method as described above.
The embodiment of the application provides a terminal asset identification method and device, and a computer readable storage medium, wherein the terminal asset identification device detects all online terminals in a target network segment; generating a detection data packet based on a preset protocol list, and sending the detection data packet to all online terminals; and receiving the equipment information returned by all the online terminals in response to the detection data packet, and identifying the target terminal in all the online terminals according to the equipment information. It can be seen that, in the embodiment of the present application, the terminal asset identifying apparatus may determine, by determining all online terminals in the video network in the range of the target network segment, then generate and send a probe packet based on the preset protocol list to obtain device data of the online terminals, and finally determine the target terminal based on the device information to manage the target terminal. It can be understood that in the application, the probe data packet for obtaining the device data is generated based on the preset protocol list formed by multiple protocols, so that accurate management of multiple terminals supporting different protocols of different manufacturers can be realized, the correctness and accuracy of the device information can be improved, and the instant update of the device information can be realized, so that the management difficulty is reduced, and the management flow is simplified.
Drawings
FIG. 1 is a schematic diagram of a video network;
FIG. 2 is a schematic diagram of a process for implementing a method for identifying terminal assets;
FIG. 3 is a second schematic diagram of a process for implementing a method for identifying terminal assets;
FIG. 4 is a schematic diagram III of an implementation flow of a terminal asset identification method;
FIG. 5 is a schematic diagram of a process flow for implementing a method for identifying terminal assets;
FIG. 6 is a schematic diagram of a system for terminal management by a terminal asset identification device;
FIG. 7 is a schematic diagram of the constitution of a terminal asset identification device;
fig. 8 is a schematic diagram of a second component structure of the terminal asset identification device.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. It is to be understood that the specific embodiments described herein are merely illustrative of the application and not limiting of the application. It should be noted that, for convenience of description, only a portion related to the related application is shown in the drawings.
With the continuous upgrade of network technology and continuous improvement of network bandwidth, network CAMERAs (IP CAMERAs, IPCs) are also becoming an indispensable tool in human life. The network camera is a new generation camera which combines the traditional camera and network technology, has a network output interface and is generated by accessing a local area network. That is, the webcam can transmit the image to the other end of the earth through the network, and the remote browser can monitor the image without any special software, as long as a standard web browser (such as Microsoft IE or Netscape) is used.
The network camera is a digital device based on network transmission, is generally formed by combining a network coding module and an analog camera, and can specifically comprise a lens, an image sensor, a sound sensor, an A/D converter, an image controller, a sound controller, a network server, an external alarm, a control interface and the like.
The network coding module of the network camera codes and compresses the analog video signals acquired by the analog camera into digital signals, so that the network video signals can be directly accessed into network switching and routing equipment. An embedded chip is arranged in the network camera, and an embedded real-time operating system is adopted.
Because the network camera is a digital video device integrating the functions of the video server and the camera, the network camera can be directly connected with the Ethernet (wired or wireless) through the digital camera and the recording device with the built-in Web service, so that a user can watch and listen to the video and the sound transmitted by the network camera through a standard Web browser. The network camera is widely applied to the fields of public security systems, traffic systems, industrial control and the like.
The network video recorder (Network Video Recorder, NVR) is a store-and-forward part of the network video monitoring system, and the NVR cooperates with a video encoder or a network camera to complete video recording, storing and forwarding functions. In particular, with the development of network technology, there is an increasing demand for storing video data through a network, and a monitoring system using a hard disk video recorder (Digital Video Recorder, abbreviated as DVR) as a core is further developed into an NVR system with a network function. The core function of NVR is the storage and forwarding of video streams. Compared with DVR, NVR has single function, has no analog-to-digital conversion and coding functions, cannot work independently, and usually works cooperatively with a network camera IPC to complete video recording, storage and forwarding functions.
In general, in an internal network of a video network composed of a network camera IPC and a network video recorder NVR, thousands of network video devices are often distributed in different areas, fig. 1 is a schematic diagram of the video network, and as shown in fig. 1, in one video network, a data center often has a plurality of sub-video networks below the data center, and specifically, the data center manages and controls a plurality of network video devices, such as IPC1, IPC2 and NVR, through a core switch and a convergence switch. Because network video devices are distributed in different areas, there is a great difficulty in managing, controlling, and maintaining a video network. In particular, maintenance difficulties are mainly focused on the following aspects:
1. how to quickly discover thousands of IPCs in the whole video network;
2. how to ensure that the information is updated in time after a certain IPC is damaged and updated;
3. how to ensure the correctness of the IPC fingerprint information;
4. how to quickly know the real-time state of a certain IPC;
5. how to report alarms in time after IPC is illegally replaced.
Several management of the video devices at the present stage generally includes the following ways: through manpower management, when in installation, statistics records are recorded and then reported layer by layer; or, IPC manufacturers each manage their own brands of IPC, multi-platform management.
However, since the video network includes a large number of network video devices, which are generally manufactured by different manufacturers and all support a plurality of different protocols, it is difficult for the existing management method of the network video devices to ensure the correctness of the device information in the entire video network; and equipment damage is difficult to discover and update information in time; when an abnormality exists in the video network, the response is slower, so that the network video equipment is easy to invade; and because of the existence of network video equipment of a plurality of factories in the video network, a unified management platform is not available, so that the management is extremely complex.
In order to overcome the above-mentioned drawbacks, in the embodiments of the present application, the terminal asset identifying apparatus may determine the target terminal based on the device information by determining all online terminals in the video network in the target network segment range, then generating and transmitting a probe packet based on the preset protocol list to obtain the device data of the online terminal, and finally determining the target terminal based on the device information to manage the target terminal. It can be understood that in the application, the probe data packet for obtaining the device data is generated based on the preset protocol list formed by multiple protocols, so that accurate management of multiple terminals supporting different protocols of different manufacturers can be realized, the correctness and accuracy of the device information can be improved, and the instant update of the device information can be realized, so that the management difficulty is reduced, and the management flow is simplified.
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention.
Example 1
In an embodiment of the present invention, as shown in fig. 2, a method for identifying a terminal asset by a terminal asset identifying device may include the following steps:
and 101, detecting all online terminals in the target network segment.
In the embodiment of the application, the terminal asset identification device performs detection processing first, so that all online terminals in the target network segment can be determined.
Specifically, in the application, the terminal asset identification device may acquire the target network segment in the video network first, and then may perform parallel detection processing according to the target network segment, so as to determine an online terminal in the target network segment of the video network.
It should be noted that, in the embodiment of the present application, a plurality of terminals may be disposed in the video network, and accordingly, each terminal corresponds to an address, so that all network addresses corresponding to all terminals in the video network may form a network address range corresponding to the video network.
It will be appreciated that in embodiments of the present application, a terminal in a video network may include a network video device and/or a network video recorder. That is, the terminal may be a network video device, and the terminal may also be a network video recorder.
Further, in the embodiment of the present application, the target network segment belongs to a network address range corresponding to the video network. Specifically, the target network segment may be a network address of a segment of a network address range corresponding to the video network, or may be a network address range corresponding to the whole video network.
It should be noted that, in the embodiments of the present application, the target network segment may be expressed in various forms. Specifically, the target network segment may be expressed in terms of a range, such as "10.154.184.0-10.154.184.255"; expression may also be in the form of a subnet, e.g., 10.154.184.0/255.255.255.0.
It should be noted that, in the embodiment of the present application, when the terminal asset identifying apparatus acquires all online terminals in the target network segment, the terminal may use Nmap (Network Mapper) to perform an internet protocol (Internet Protocol, IP) survival detection of the terminals.
The Nmap is a network connection scanning software for scanning an open network connection of a network computer. Determines which services are running on which connections and deduces which operating system the computer is running (this is also known as finger printing). It is one of the software necessary for network administrators and is used to evaluate network system security.
Just as most tools used for network security, nmap is also a tool that is popular with many hackers and hackers (also known as script kids). A system administrator may use the Nmap to detect unauthorized servers in the work environment, but a hacker may use the Nmap to gather network settings of the target computer to plan a method of attack.
The Nmap often uses a secret approach to avoid monitoring of the intrusion detection system and does not affect the daily operation of the target system as much as possible.
Three basic functions of the Nmap are provided, namely, whether a group of hosts are online or not is detected; secondly, scanning a host port and sniffing the provided network service; the operating system used by the host may also be inferred. Nmap can be used to scan LANs with only two nodes, up to networks above 500 nodes. Nmap also allows users to customize scanning skills. In general, a simple Ping operation using the control message protocol (Internet Control Message Protocol, ICMP) may meet general needs; user datagram protocol (UDP, user Datagram Protocol) or transmission control protocol (TCP, transmission Control Protocol) ports may also be probed deep up to the operating system used by the host; all detection results can be recorded into logs in various formats for further analysis operation.
In the embodiment of the present application, when the terminal asset identifying device acquires all online terminals, in order to increase the scanning speed, the detection processing may be performed in a parallel manner. By way of example, the terminal asset identification device can select up to 4096 IPs at a time and simultaneously transmit data packets for detecting the survival of the host, so that the discovery speed of all online terminals of the multi-terminal video network is greatly improved.
And 102, generating a detection data packet based on a preset protocol list, and transmitting the detection data packet to all online terminals.
In the embodiment of the application, the terminal asset identification device performs parallel detection processing according to the target network segment, after determining all online terminals in the target network segment, generates a detection data packet based on a preset protocol list, and then can send the detection data packet to each online terminal in parallel.
Further, in the embodiment of the present application, after determining all online terminals in the video network and in the target network segment, the terminal asset identifying apparatus may further send a probe packet to all the online terminals, so that a protocol type of each online terminal may be further determined.
It may be appreciated that in the embodiment of the present application, the preset protocol list may include at least one probing protocol, and further, the terminal asset identifying device may update the preset protocol list in real time. Specifically, the terminal asset identification device may receive a new probing protocol and update the preset protocol list in real time according to the new probing protocol.
In the embodiment of the present application, after obtaining all online terminals, the terminal asset identifying apparatus may continue to use the Nmap Nse engine system and send probe packets to the surviving IP of the online terminals in parallel. In particular, while the Nmap embedded service version detection is powerful enough, in some cases many times of interaction are required to be able to detect the server information, at which time it is necessary to write Nse plug-ins to achieve this functionality. Nse plug-in can complete functions such as network discovery, complex version detection, vulnerability detection, simple vulnerability exploitation and the like, nse script puts some necessary detection flows into an Nmap scanning task by using scanning parameters of the Nmap-script, and the scanning task is simplified.
Further, in the embodiment of the present application, the probe packet sent by the terminal asset identification device to the online terminal is generated based on a preset protocol list. At least one protocol may be stored in the preset protocol list, for example, because of diversity of IPC protocols, based on the preset protocol list, the terminal asset identification device may use protocols such as ovif, web server, etc. to detect.
The ONVIF specification describes a model of network video, interfaces, data types, and modes of data interaction. And multiplexes some existing standards such as WS-series standards, etc. The aim of the ONVIF specification is to implement a network video framework protocol that allows network video products (including camcorder front-ends, video recording devices, etc.) produced by different vendors to be completely interoperated. The interfaces defined by the device management and control part of the ONVIF specification are all provided in the form of Web Services, and the device serves as a service provider as a service end. The ONVIF specification covers the full definition of XML and WSDL. Each terminal device supporting the ONVIF specification has to provide Web Service corresponding to the function. The data interaction between the server and the client adopts SOAP protocol. Other parts of the ONVIF, such as the audio/video stream, are carried out via RTP/RTSP.
Web Service is a network-based, distributed modular component that performs specific tasks. Web Service mainly uses HTTP and SOAP protocols to transfer data over the Web. Web users can cause SOAP and HTTP to call remote objects through Web-invoked methods. Web Service is a Service based on XML and HTTPS, with communication protocols based primarily on SOAP. The service end and the client end realize the request and the response of the service by transmitting SOAP messages conforming to XML.
It can be understood that in the embodiment of the present application, the terminal asset identification device may implement multi-protocol packet sending for the surviving IP of each online terminal based on the probe data packet generated by the preset protocol list, so as to ensure that the speed of probing each IP is as fast as possible.
Further, in the embodiment of the present application, the terminal asset identifying device may update the preset protocol list in real time before generating the probe packet based on the preset protocol list. That is, the preset protocol list may be updated in an extensible manner, and once a new IPC protocol appears, the terminal asset identifying device may add the new IPC protocol to the preset protocol list at any time, so that the discovery capability of the IPC may be improved.
And step 103, receiving the equipment information returned by all online terminals in response to the detection data packet, and identifying the target terminal in all online terminals according to the equipment information.
In the embodiment of the application, the terminal asset identification device may receive the device information returned by each online terminal and used for responding to the detection data packet after generating the detection data packet based on the preset protocol list and transmitting the detection data packet to all online terminals in parallel, so as to identify the target terminal according to the device information, where the target terminal may be at least one terminal of all online terminals.
It will be appreciated that in embodiments of the present application, the device information received by the terminal asset identification device corresponds to an online terminal, and in particular, an online terminal may correspond to a set of device information.
Further, in the embodiment of the present application, one online terminal may support multiple protocols, so the device information returned by the online terminal and used for responding to the probe data packet may include multiple information corresponding to different protocols. For example, the device information may be different IPC information discovered by different IPC protocols.
It should be noted that, in the embodiment of the present application, at least one probing protocol in the preset protocol list corresponds to at least one protocol priority, that is, each probing protocol in the preset protocol list corresponds to a corresponding priority.
Further, in the embodiment of the present application, after the device information is received by the terminal asset identifying device, when the target terminal is identified in all online terminals according to the device information, for each group of device information, the protocol information in the device information may be first identified, and then whether the protocol priority corresponding to the protocol information meets the preset priority is determined; if the terminal information is satisfied, the terminal asset identification device can judge that the online terminal corresponding to the equipment information is a target terminal; in contrast, if not satisfied, the terminal asset identification means may determine that the online terminal to which the device information corresponds is not the target terminal.
That is, in the embodiment of the present application, the device information returned by all online terminals received by the terminal asset identifying device may include different IPC information found by different IPC protocols, so that in order to ensure the correctness of data, the terminal asset identifying device may select correct and valid IPC information from different IPC information by using the priority of the IPC protocol corresponding to the IPC protocol information, thereby determining the target terminal from all the online terminals.
Specifically, the terminal asset identifying device may determine the IPC protocol corresponding to the IPC information in the device information returned by each online terminal, then determine the protocol priority of each IPC protocol, compare each protocol priority with the preset priority, obtain a comparison result, and finally determine whether the online terminal corresponding to the protocol priority is the target terminal based on the comparison result. For example, if the protocol priority of the IPC protocol corresponding to the IPC information in the device information returned by the online terminal is less than the preset priority, the terminal asset identifying device may consider that the online terminal is not the target terminal; if the protocol priority of the IPC protocol corresponding to the IPC information in the device information returned by the online terminal is greater than or equal to the preset priority, the terminal asset identifying device may consider the online terminal as the target terminal.
The terminal asset identification method provided by the embodiment of the application, the terminal asset identification device detects all online terminals in the target network segment; generating a detection data packet based on a preset protocol list, and sending the detection data packet to all online terminals; and receiving the equipment information returned by all the online terminals in response to the detection data packet, and identifying the target terminal in all the online terminals according to the equipment information. It can be seen that, in the embodiment of the present application, the terminal asset identifying apparatus may determine, by determining all online terminals in the video network in the range of the target network segment, then generate and send a probe packet based on the preset protocol list to obtain device data of the online terminals, and finally determine the target terminal based on the device information to manage the target terminal. It can be understood that in the application, the probe data packet for obtaining the device data is generated based on the preset protocol list formed by multiple protocols, so that accurate management of multiple terminals supporting different protocols of different manufacturers can be realized, the correctness and accuracy of the device information can be improved, and the instant update of the device information can be realized, so that the management difficulty is reduced, and the management flow is simplified.
Example two
It may be understood that, in the embodiment of the present application, when the terminal asset identifying device acquires the target network segment in the video network, the management instruction corresponding to the terminal asset may be received at the management interface first, and then the target network segment may be acquired through the management instruction. In particular, the management instructions may carry the target network segments required for probing.
In an embodiment of the present application, the management interface may be a web interface, and the terminal asset identifying device may obtain a management instruction corresponding to the terminal asset through an input operation or a selection operation of a user on the web interface, so that the target network segment may be obtained according to the management instruction.
Further, in the embodiment of the present application, after the terminal asset identifying device acquires the target network segment in the video network, parallel detection processing may be performed on the terminals in the video network according to the target network segment, so that all online terminals in the target network segment may be determined.
Further, in an embodiment of the present application, fig. 3 is a second implementation flow chart of a terminal asset identification method, as shown in fig. 3, a method for determining all online terminals in a target network segment by a terminal asset identification device to perform parallel detection processing according to the target network segment may include the following steps:
And step 201, scanning the relative positions of the server and the target network segment to obtain a scanning result.
And 202, if the scanning result is a local area network, adopting ARP-Ping to carry out detection processing to obtain all online terminals.
And 203, if the scanning result is a non-local area network, adopting a custom Ping to carry out detection processing to obtain all online terminals.
In the embodiment of the application, after the terminal asset identification device acquires the target network segment, the relative position of the target network segment and the server can be scanned by using the target network segment, so that a scanning result is obtained, and then different detection modes are further selected according to the scanning result to carry out detection processing.
Further, in the embodiment of the present application, if the number of network layers of the video network in the target network segment is 2, that is, the scanning result is the local area network, the terminal asset identifying device may directly use an address resolution protocol (Address Resolution Protocol, ARP) protocol to perform the exploration processing, so that all online terminals may be obtained.
It will be appreciated that in embodiments of the present application, in a local area network, what is actually transmitted in the network is a "frame" within which is the media access control address (Media Access Control Address, MAC) address of the target host. In ethernet, one host must know the MAC address of the destination host, which is obtained by ARP, in order to communicate directly with another host. ARP is a process in which a host converts a destination IP address into a destination MAC address before transmitting a frame. The basic function of ARP is to query the MAC address of the target equipment through the IP address of the target equipment so as to ensure the smooth proceeding of communication.
Further, in the embodiment of the present application, if the number of network layers of the video network in the target network segment is 3, that is, the scanning result is a non-local area network, the terminal asset identifying device may use the multi-collaborative custom Ping to perform the exploration processing, so as to obtain all online terminals.
It will be appreciated that Ping is the procedure used in this application to test the amount of network connectivity, i.e., internet packet explorer (Packet Internet Groper). Ping is a service command that works at the application layer in the TCP/IP network architecture, mainly to send ICMP request messages to specific destination hosts, test whether the destination station is reachable and understand its relevant status. Further, ping can be used to determine whether the local host can successfully exchange (send and receive) data packets with another host, and then, based on the returned information, it can be inferred whether the TCP/IP parameters are set correctly, whether the operation is normal, whether the network is clear, etc.
The Ping command may do the following:
1. the connection to one or more remote computers is verified by sending ICMP echo packets to the computers and listening for echo reply packets.
2. Each transmitted packet waits at most one second.
3. The number of packets transmitted and received is printed.
It should be noted that Ping success does not necessarily represent that the TCP/IP configuration is correct, and it is possible to perform a large number of packet exchanges between the local host and the remote host to ensure the correctness of the TCP/IP configuration. If Ping is performed successfully and the network is still not available, then the problem is likely to occur in terms of the software configuration of the network system, where Ping is successful only in ensuring that there is a physical path of connectivity between the current host and the destination host.
In an embodiment of the present application, further, after the terminal asset identifying apparatus identifies the target terminal among all online terminals according to the device information, that is, after step 103, the method for terminal asset identification by the terminal asset identifying apparatus may include the steps of:
and 104, if the target equipment information of the target terminal does not exist in the pre-stored equipment list, storing the target equipment information into a list to be checked.
In the embodiment of the application, after receiving the device information returned by the online terminal and used for responding to the detection data packet and identifying the target terminal in all the online terminals according to the device information, the terminal asset identifying device can determine whether the target device information corresponding to the target terminal exists in the pre-stored device list, and if the target device information of the target terminal does not exist in the pre-stored device list, the terminal asset identifying device can store the target device information into the list to be checked.
It may be appreciated that, in the embodiment of the present application, after the terminal asset identifying apparatus identifies the target terminal in all online terminals according to the device information, the target device information of the target terminal may be stored in the buffer area first, and then the target device information may be read from the buffer area according to a preset time interval, and whether the target device information exists in the pre-stored device list may be determined.
It should be noted that, in the embodiment of the present application, after the terminal asset identifying apparatus determines whether the target device information exists in the pre-stored device list, if the target device information exists in the pre-stored device list, the terminal asset identifying apparatus may continuously determine whether the target device information exists in the pending list.
Further, in the embodiment of the present application, after determining whether the target device information exists in the to-be-checked list, if the target device information exists in the to-be-checked list, the terminal asset identifying apparatus may continue to determine whether the target device information has a variation.
Further, in the application, if there is a change in the target device information, the terminal asset identifying device may update the list to be checked according to the changed device information. That is, if the target device information of the target terminal is changed, it is necessary to update the list to be audited.
It may be appreciated that, in the embodiment of the present application, after the terminal asset identifying apparatus determines whether the target device information exists in the pre-stored device list, if the target device information exists in the pre-stored device list, the terminal asset identifying apparatus needs to further determine whether the target device information exists in the checked list. Specifically, if the target device information does not exist in the checked list, the terminal asset identifying means may store the target device information to the list to be checked; if the target device information exists in the checked list, the terminal asset identifying device can continuously judge whether the target device information has variation, and further if the target device information has variation, the terminal asset identifying device needs to carry out prompt processing on the variation, so the terminal asset identifying device can send prompt information containing the variation of the target device information.
It may be appreciated that, in the embodiment of the present application, after the terminal asset identifying apparatus determines whether the target device information exists in the to-be-checked list, if the target device information does not exist in the to-be-checked list, the terminal asset identifying apparatus needs to further determine whether the target device information exists in the checked list. Specifically, if the target device information does not exist in the checked list, the terminal asset identifying means may store the target device information to the list to be checked; if the target device information exists in the checked list, the terminal asset identifying device can continuously judge whether the target device information has variation, and further if the target device information has variation, the terminal asset identifying device needs to carry out prompt processing on the variation, so the terminal asset identifying device can send prompt information containing the variation of the target device information.
Further, in the embodiment of the present application, the terminal asset identifying apparatus may perform display processing on one or more of the target device information, the prompt information, the pre-stored device list, the checked list, and the to-be-checked list of the target terminal. That is, in the present application, the terminal asset identifying apparatus may visually display the target device information, and/or the hint information, and/or the pre-stored device list, and/or the checked list, and/or the list to be checked.
According to the terminal asset identification method provided by the embodiment of the application, the terminal asset identification device can determine all online terminals in the video network in the target network segment range, then generate and send the detection data packet based on the preset protocol list to obtain the equipment data of the online terminals, and finally determine the target terminals based on the equipment information to manage the target terminals. It can be understood that in the application, the probe data packet for obtaining the device data is generated based on the preset protocol list formed by multiple protocols, so that accurate management of multiple terminals supporting different protocols of different manufacturers can be realized, the correctness and accuracy of the device information can be improved, and the instant update of the device information can be realized, so that the management difficulty is reduced, and the management flow is simplified.
Example III
In the embodiment of the present application, further, after receiving all the device information returned by all the online terminals, the terminal asset identifying apparatus may further select each set of device information, so as to generate each piece of device data corresponding to each online terminal.
It can be understood that, in the embodiment of the present application, since one online terminal can support multiple protocols, for multiple pieces of information in the returned device information, the terminal asset identifying apparatus needs to select and confirm valid information therein, so that corresponding device data can be obtained.
Further, in the embodiment of the present application, when generating the device data corresponding to the online terminal according to the device information, the terminal asset identifying apparatus may perform selection processing on the device information by using a preset priority list, so that the corresponding device data may be obtained.
It should be noted that, in the embodiment of the present application, before generating the device data corresponding to the online terminal according to the device information, the terminal asset identifying apparatus may first establish a priority list corresponding to the preset protocol list. That is, in the embodiment of the present application, the priority list is established based on the preset protocol list, and further, the priority list is used to determine priorities of all protocols in the preset protocol list.
It may be appreciated that, in the embodiment of the present application, based on the priority list, the terminal asset identifying apparatus may determine which information in each set of device information corresponding to each online terminal is valid and correct data, so that corresponding device data may be obtained. For example, the terminal asset identifying device receives the device information 1 returned by the IPC1, where the device information 1 includes IPC information corresponding to different IPC protocols, and then, the terminal asset identifying device may sort the priorities of all the protocols supported by the IPC1 based on the priority list, so as to select valid and correct data from the device information 1 according to the priority order of the protocols, that is, obtain the device data 1 corresponding to the IPC 1.
Further, in the embodiment of the present application, the terminal asset identifying apparatus may further update the prestored pre-stored database with the device data after generating the device data corresponding to the online terminal according to the device information.
In the embodiment of the present application, different device data corresponding to different video devices are stored in the pre-stored database, for example, device data 1 corresponding to IPC1, device data 2 corresponding to NVR2, device data 3 corresponding to IPC3, device data 4 corresponding to IPC4, device data 5 corresponding to NVR5, and the like are stored in the pre-stored database.
In the embodiment of the present application, further, after receiving the device information returned by all online terminals in response to the probe data packet, the terminal asset identifying apparatus may further determine how to manage the online video by using a pre-stored device list, that is, determine a management mode corresponding to the online terminal.
Further, in the embodiment of the present application, after acquiring all online terminals and determining the device data corresponding to the online terminals, the terminal asset identifying apparatus may determine whether the online terminals belong to the preset device list by using the preset device list stored in advance, so as to further determine how to manage and control the online terminals.
It should be noted that, in the embodiment of the present application, fig. 4 is a schematic diagram of a third implementation flow chart of a terminal asset identification method, and as shown in fig. 4, a method for determining, by a terminal asset identification apparatus, a management mode corresponding to an online terminal according to a pre-stored device list and device data may include the following steps:
step 301, if no online terminal exists in the pre-stored equipment list, determining that the management mode is the adding process.
Step 302, if an online terminal exists in the pre-stored equipment list, determining a management mode according to the equipment data.
In the embodiment of the application, the terminal asset identification device may load the pre-stored device list first, then traverse the pre-stored device list to determine whether an online terminal exists in the pre-stored device list, and then further determine the corresponding management mode.
Further, in the embodiment of the present application, after traversing the pre-stored device list, if the terminal does not include the online terminal, that is, the online terminal does not exist in the pre-stored device list, the terminal asset identifying apparatus may determine that the management mode corresponding to the online terminal is the addition process.
It should be noted that, in the embodiment of the present application, after traversing the pre-stored device list, if the terminal asset identifying apparatus includes an online terminal, that is, the online terminal exists in the pre-stored device list, the terminal asset identifying apparatus may further determine the management mode according to the device data corresponding to the online terminal.
It can be appreciated that in the embodiment of the present application, when the terminal asset identification device determines the management mode, the original data and the audit state corresponding to the online terminal may be collected to further determine how to manage the online terminal.
That is, in the embodiment of the present application, the terminal asset identification apparatus may acquire the original data and the audit state corresponding to the online terminal before determining the management mode according to the device data.
It is understood that in the embodiments of the present application, the original data of the online terminal may be the original data of the online terminal stored in the pre-stored database, that is, the data not updated by the device data.
It should be noted that, in the embodiment of the present application, the audit state of the online terminal may be to complete the audit process and to not complete the audit process. That is, in the present application, the audit status may characterize whether the online terminal is audited by a manager.
Further, in an embodiment of the present application, fig. 5 is a schematic diagram of a flow chart for implementing a terminal asset identification method, and as shown in fig. 5, a method for determining a management mode by a terminal asset identification apparatus according to device data may include the following steps:
step 302a, if the auditing status is that the auditing process is not completed and the device data is different from the original data, determining that the management mode is the updating process.
Step 302b, if the auditing status is that the auditing process is completed and the device data is different from the original data, determining that the management mode is alarm processing.
In the embodiment of the application, after the terminal asset identification device acquires the initial data and the auditing state corresponding to the online terminal, whether the auditing processing of the available video is finished or not can be determined by utilizing the auditing state, and then the original data and the equipment data can be compared, so that the management mode of the online terminal is further determined according to the auditing state and the comparison result.
It should be noted that, in the embodiment of the present application, if the online terminal is not audited, that is, the audit status is that the audit process is not completed, and the data of the online terminal is changed, that is, the device data is different from the original data, the terminal asset identifying apparatus may determine that the corresponding management mode is the update process.
Further, in the embodiment of the present application, if the online terminal has been audited, that is, the audit status is that the audit process has been completed, and the data of the online terminal has changed, that is, the device data is different from the original data, the terminal asset identifying apparatus may determine that the corresponding management mode is the alarm process.
It can be seen that, in the embodiment of the present application, the terminal asset identifying apparatus may load the pre-stored device list, then traverse each online terminal based on the pre-stored device list, and if the pre-stored device list does not include a certain online terminal, determine that the online terminal needs to be added to the pre-stored device list, so as to determine that the control mode corresponding to the online terminal is an adding process. Further, if a certain online terminal is included in the pre-stored device list, it may be determined whether the online terminal is in an unverified group, that is, whether the online terminal has completed the auditing process, if the auditing process is not completed, it may be determined whether there is a change in the data, that is, the original data and the device data of the online terminal are compared, and if there is a change, it may be determined that the terminal asset identifying device needs to update the online terminal, so that it is determined that the management mode of the online terminal is the updating process; if the auditing process is finished, whether the data has variation or not still needs to be judged, namely, the original data and the equipment data of the online terminal are compared, if the variation exists, the online terminal can be determined to sound illegal variation, and the terminal asset identification device needs to alarm, so that the management mode of the online terminal is determined to be alarm processing.
In the embodiment of the application, the terminal asset identification device can manage the online terminal in the video network according to the management mode after determining the management mode corresponding to the online terminal according to the pre-stored equipment list and the equipment data.
Further, in the embodiment of the present application, the management manner implemented by the terminal asset identification device is also different for different management modes.
It may be appreciated that, in the embodiment of the present application, when the management mode is the addition process, the terminal asset identifying apparatus may add the online terminal to the pre-stored device list when managing the online terminal according to the management mode, and then set the audit state corresponding to the online terminal to be the incomplete audit process. For example, the terminal asset identification device may add the online terminal to an unverified group in a pre-stored device list awaiting review by an administrator.
It may be appreciated that in the embodiment of the present application, when the management mode is the update process, the terminal asset identifying apparatus may update the original data with the device data when managing the online terminal according to the management mode. That is, if the terminal asset recognition device determines that the online terminal is already in an unverified group in the pre-stored device list, it may be further judged whether there is a variation in the data of the online terminal, and if so, the data of the online terminal is updated.
It can be understood that, in the embodiment of the present application, when the management mode is alarm processing, the terminal asset identifying device may generate and display alarm information corresponding to the online terminal when managing the online terminal according to the management mode. That is, if the terminal asset recognition device determines that the online terminal is already in the checked group in the pre-stored device list, it may be further judged whether there is a variation in the data of the online terminal, and if so, an alarm message is generated to remind the administrator of coping with the risk.
In the embodiment of the present application, further, when the terminal asset identifying device manages the terminal, the discovery process of the terminal and the loading process of the terminal may be separated, specifically, the methods set forth in the steps 101 to 103 are the discovery process of the terminal, and after the terminal asset identifying device completes the discovery process of the video device, the terminal asset identifying device may wait for the discovery task of the next period; correspondingly, the method provided by the embodiment is a loading process of the terminal.
In the embodiment of the present application, the loading process of the terminal is performed at a fixed time, and the start time and the end time of the loading process of the terminal may be preset.
It may be appreciated that in the embodiment of the present application, the terminal asset identification device may wait for the next wakeup after ending the loading process of the terminal.
In the embodiment of the application, further, because different protocol types are stored in the preset protocol list, the terminal asset identification device can unify the discovery methods of terminals of different manufacturers, and the preset protocol list can be expanded, so that the addition of a new protocol is very convenient; the terminal asset identification device performs parallel detection processing according to the target network segment, so that asset scanning can be rapidly performed on the appointed IP range of the video network; the terminal asset identification device establishes the priority list corresponding to the preset protocol list and obtains the equipment data based on the priority list, so that the fingerprint information of the terminal can be identified more accurately. Further, the network video equipment management method provided by the application can quickly generate equipment abnormal change alarm, greatly lighten the work flow of an administrator and very conveniently determine the real-time state of any terminal in a video network.
According to the terminal asset identification method provided by the embodiment of the application, the terminal asset identification device can determine all online terminals in the video network in the target network segment range, then generate and send the detection data packet based on the preset protocol list to obtain the equipment data of the online terminals, and finally determine the target terminals based on the equipment information to manage the target terminals. It can be understood that in the application, the probe data packet for obtaining the device data is generated based on the preset protocol list formed by multiple protocols, so that accurate management of multiple terminals supporting different protocols of different manufacturers can be realized, the correctness and accuracy of the device information can be improved, and the instant update of the device information can be realized, so that the management difficulty is reduced, and the management flow is simplified.
Example IV
Based on the above embodiment, in still another embodiment of the present application, fig. 6 is a schematic system diagram of terminal management performed by the terminal asset identification device, and as shown in fig. 6, the terminal asset identification device may mainly include a discovery process of the terminal and a loading process of the terminal when managing the terminal.
Further, in the embodiment of the present application, the discovery process of the terminal mainly includes the following steps:
step 401, obtaining a target network segment.
The terminal asset identification device extracts a target network segment of the video network, which is required to be discovered by the process asset, from the management interface, wherein the expression of the target network segment has various forms, such as a range representation method: 10.154.184.0-10.154.184.255, or, sub-net representation: 10.154.184.0/255.255.255.0, etc.
Step 402, nmap scanning.
Step 403, judging whether the local area network is the local area network, if yes, executing step 404, otherwise executing step 405.
And 404, adopting ARP-Ping to perform exploration processing to determine all online terminals.
And 405, adopting custom Ping to perform exploration processing to determine all online terminals.
In order to accelerate the scanning speed, the terminal asset identification device adopts a parallel mode for detection, if the network layer number of the video network in the target network segment is 2, namely a local area network, the terminal asset identification device can directly adopt ARP for exploration processing, and if the network layer number of the video network in the target network segment is 3, namely a non-local area network, the terminal asset identification device can use a multi-collaborative program custom Ping for exploration processing, so that the discovery speed of all online terminals in the video network of multiple devices is greatly improved.
Step 406, generating a probe data packet based on the preset protocol list.
Step 407, transmitting the probe data packet.
The terminal asset identification means may generate the probe packet based on a preset protocol list after obtaining all the online terminals. Specifically, the terminal asset identification device may send probe packets to the surviving IP in parallel using the Nse engine system of Nmap. The method mainly uses protocols such as Onvif and web server to detect, and each surviving IP adopts multi-protocol package due to the diversity of the protocols, so that the detection speed of each IP is ensured to be as high as possible.
Further, since the preset protocol list is expandable, if a new protocol is found later, the new protocol can be conveniently put into the preset protocol list, so as to improve the discovery capability of the video device.
And step 408, receiving the equipment information and determining the target terminal.
After receiving the device information returned by all online terminals and used for responding to the detection data packet, the terminal asset identification device obtains the device information discovered by different protocols, and in order to ensure the correctness of the data, a priority mode can be adopted to ensure that the effective device information is selected from the protocols. Specifically, a priority list corresponding to the preset protocol list may be established first, that is, respective priority levels are defined for each protocol, and then the target terminal is determined from all online terminals based on the priority list.
Step 409, target device data of the target terminal is cached.
The terminal asset identification device may perform a cache process on the target device data of the target terminal, and after the cache of the target device data is completed, the discovery process of the target terminal is completed, and may wait for the next discovery process.
Further, in the embodiment of the present application, the loading process of the target terminal mainly includes the following steps:
step 4010, load a list of pre-stored devices.
Step 4011, traversing the target terminal, judging whether the target terminal exists in a pre-stored equipment list, if not, executing step 4012, otherwise executing step 4013.
Step 4012, executing the adding process, and storing the target equipment information into the to-be-checked list.
Step 4013, judging whether the target equipment information exists in the list to be checked, if so, executing step 4014, otherwise, executing step 4015.
Step 4014, if the target equipment information has a change, the update processing is executed, and the list to be checked is updated according to the changed equipment information.
Step 4015, judging whether the checked list contains the target equipment information, if yes, executing step 4016, otherwise executing step 4017.
Step 4016, if the target equipment information is changed, sending a prompt message including the change of the target equipment information.
Step 4017, storing the target equipment information to the list to be checked.
In the loading process of the terminal, the terminal asset identification device may load the pre-stored device list that already exists, and then traverse the target terminal obtained in the discovery process.
If the target device information of the target terminal does not exist in the pre-stored device list, the terminal asset identification means may store the target device information to the list to be checked.
If the target device information exists in the pre-stored device list, the terminal asset identification means may continue to determine whether the target device information exists in the list to be checked.
If the target device information exists in the to-be-audited list, the terminal asset identification device can continuously judge whether the target device information has variation or not. If the target equipment information has variation, the terminal asset identification device can update the list to be checked according to the equipment information after variation.
If the target device information exists in the pre-stored device list, the terminal asset identification means needs to further judge whether the target device information exists in the checked list. If the target device information does not exist in the checked list, the terminal asset identification device can store the target device information to a list to be checked; if the target equipment information exists in the checked list, the terminal asset identification device can continuously judge whether the target equipment information has variation, and further if the target equipment information has variation, the terminal asset identification device needs to prompt the existing variation to remind an administrator of coping with the risk.
If the target device information does not exist in the to-be-checked list, the terminal asset identification device needs to further judge whether the target device information exists in the checked list. Specifically, if the target device information does not exist in the checked list, the terminal asset identifying means may store the target device information to the list to be checked; if the target equipment information exists in the checked list, the terminal asset identification device can continuously judge whether the target equipment information has variation, and further if the target equipment information has variation, the terminal asset identification device needs to prompt the variation, so that the terminal asset identification device can send prompt information containing the variation of the target equipment information to prompt an administrator to deal with risks.
After the loading process of the target terminal is finished, the terminal asset identification device waits for the next wakeup.
It can be understood that, by the terminal asset identification method proposed in the steps 401 to 4017, the terminal asset identification device can unify the device discovery methods of different video device manufacturers, and can discover the asset of a video network process more quickly; meanwhile, a dynamic discovery protocol module can be realized, and unknown protocols can be conveniently filled, so that the asset identification rate is improved; according to the priority of the protocol, the most probable correct equipment data can be accurately selected from a plurality of protocol results; furthermore, the device change alarm can be dynamically generated on the video device which is audited by the administrator through updating processing, so that the administrator can be timely reminded of coping with risks.
That is, in the present application, the terminal asset identification device can unify asset discovery methods of different manufacturers, so that one platform is used to manage terminals of all manufacturers; the asset discovery speed can be increased, and the rapid statistics of the whole video network asset can be realized; the device can be automatically detected to be online or offline; an alarm is generated when the asset changes and automatically reported to an administrator.
The terminal asset identification method provided by the embodiment of the application, the terminal asset identification device detects all online terminals in the target network segment; generating a detection data packet based on a preset protocol list, and sending the detection data packet to all online terminals; and receiving the equipment information returned by all the online terminals in response to the detection data packet, and identifying the target terminal in all the online terminals according to the equipment information. It can be seen that, in the embodiment of the present application, the terminal asset identifying apparatus may determine, by determining all online terminals in the video network in the range of the target network segment, then generate and send a probe packet based on the preset protocol list to obtain device data of the online terminals, and finally determine the target terminal based on the device information to manage the target terminal. It can be understood that in the application, the probe data packet for obtaining the device data is generated based on the preset protocol list formed by multiple protocols, so that accurate management of multiple terminals supporting different protocols of different manufacturers can be realized, the correctness and accuracy of the device information can be improved, and the instant update of the device information can be realized, so that the management difficulty is reduced, and the management flow is simplified.
Example five
In accordance with the first to fourth embodiments, fig. 7 is a schematic diagram of the composition of the terminal asset identification device in still another embodiment of the present application, and as shown in fig. 7, in the embodiment of the present invention, the terminal asset identification device 10 includes a detecting unit 11, a generating unit 12, a transmitting unit 13, a receiving unit 14, a identifying unit 15, an updating unit 16, a storing unit 17, a judging unit 18, and a displaying unit 19.
The detecting unit 11 is configured to detect all online terminals in a target network segment;
the generating unit 12 is configured to generate a probe packet based on a preset protocol list;
the sending unit 13 is configured to send the probe packet to all online terminals;
the receiving unit 14 is configured to receive device information returned by all online terminals in response to the probe data packet;
the identifying unit 15 is configured to identify a target terminal from all online terminals according to the device information.
Further, in the embodiment of the present application, the receiving unit 14 is specifically configured to receive, at a management interface, a management instruction corresponding to a terminal asset before detecting all online terminals in the target network segment; wherein the management instruction carries the target network segment required for detection.
Further, in the embodiment of the present application, the detecting unit 11 is specifically configured to perform parallel detection processing according to the target network segment, and determine all online terminals in the target network segment.
Further, in the embodiment of the present application, the detecting unit 11 is further specifically configured to scan the relative position between the server and the target network segment, so as to obtain a scanning result; if the scanning result is a local area network, adopting ARP-Ping to carry out detection processing to obtain all online terminals; and if the scanning result is a non-local area network, adopting a custom Ping to carry out detection processing to obtain all the online terminals.
Further, in the embodiment of the present application, the preset protocol list includes at least one probing protocol, and the receiving unit 14 is further configured to receive a new probing protocol;
the updating unit 16 is configured to update the preset protocol list in real time according to the new probing protocol.
Further, in the embodiment of the present application, the at least one probing protocol in the preset protocol list corresponds to at least one protocol priority, and the identifying unit 15 is specifically configured to identify protocol information in the device information, and determine whether the protocol priority corresponding to the protocol information meets the preset priority; if yes, judging that the online terminal corresponding to the equipment information is the target terminal; if not, judging that the online terminal corresponding to the equipment information is not the target terminal.
Further, in the embodiment of the present application, the storage unit 17 is configured to store, after identifying the target terminal in all online terminals according to the device information, if there is no target device information of the target terminal in the pre-stored device list, the target device information to the pending list.
Further, in the embodiment of the present application, the storage unit 17 is further configured to store, if there is no target device information of the target terminal in the pre-stored device list, the target device information into a buffer before storing the target device information into the list to be checked;
the judging unit 18 is configured to read the target device information from the buffer area according to a preset time interval, and judge whether the target device information exists in the pre-stored device list.
Further, in the embodiment of the present application, the determining unit 18 is further configured to determine, if the target device information exists in the pre-stored device list, whether the target device information exists in the to-be-checked list; if the target equipment information exists in the list to be checked, judging whether the target equipment information has variation or not;
Further, in the embodiment of the present application, the updating unit 16 is further configured to update the pending list according to the changed device information if there is a change in the target device information.
Further, in the embodiment of the present application, the judging unit 18 is further configured to judge whether the target device information exists in the checked list if the target device information exists in the pre-stored device list or if the target device information does not exist in the to-be-checked list;
the storage unit 17 is further configured to store the target device information to a list to be checked if the target device information does not exist in the checked list;
the judging unit 18 is further configured to judge whether there is a variation in the target device information if there is the target device information in the checked list;
the sending unit 13 is further configured to send a notification message including the change in the target device information if the change in the target device information exists.
Further, in the embodiment of the present application, the display unit 19 is configured to visually display the target device information and/or the prompt information and/or the pre-stored device list and/or the checked list and/or the pending list.
Fig. 8 is a schematic diagram of a second component structure of the terminal asset identification device, as shown in fig. 8, the terminal asset identification device 10 according to the embodiment of the present application may further include a processor 110, a memory 111 storing instructions executable by the processor 110, and further, the terminal asset identification device 10 may further include a communication interface 112, and a bus 113 for connecting the processor 110, the memory 111 and the communication interface 112.
In embodiments of the present application, the processor 110 may be at least one of an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), a digital signal processor (Digital Signal Processor, DSP), a digital signal processing management device (Digital Signal Processing Device, DSPD), a programmable logic management device (ProgRAMmable Logic Device, PLD), a field programmable gate array (Field ProgRAMmable Gate Array, FPGA), a central processing unit (Central Processing Unit, CPU), a controller, a microcontroller, a microprocessor. It will be appreciated that the electronics for implementing the processor function may be other for different devices, and embodiments of the present application are not specifically limited. The terminal asset identification device 10 may further comprise a memory 111, which memory 111 may be connected to the processor 110, wherein the memory 111 is adapted to store executable program code comprising computer operating instructions, the memory 111 may comprise a high speed RAM memory, and may further comprise a non-volatile memory, e.g. at least two disk memories.
In the embodiment of the present application, the bus 113 is used to connect the communication interface 112, the processor 110, and the memory 111, and the intercommunication among these devices.
In an embodiment of the present application, memory 111 is used to store instructions and data.
Further, in an embodiment of the present application, the processor 110 is configured to detect all online terminals in the target network segment; generating a detection data packet based on a preset protocol list, and sending the detection data packet to all online terminals; and receiving the equipment information returned by all online terminals in response to the detection data packet, and identifying a target terminal in all online terminals according to the equipment information.
In practical applications, the Memory 111 may be a volatile Memory (RAM), such as a Random-Access Memory (RAM); or a nonvolatile Memory (non-volatile Memory), such as a Read-Only Memory (ROM), a flash Memory (flash Memory), a Hard Disk (HDD) or a Solid State Drive (SSD); or a combination of the above types of memories and provides instructions and data to processor 110.
In addition, each functional module in the present embodiment may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional modules.
The integrated units, if implemented in the form of software functional modules, may be stored in a computer-readable storage medium, if not sold or used as separate products, and based on this understanding, the technical solution of the present embodiment may be embodied essentially or partly in the form of a software product, or all or part of the technical solution may be embodied in a storage medium, which includes several instructions to cause a computer device (which may be a personal computer, a server, or a network device, etc.) or processor (processor) to perform all or part of the steps of the method of the present embodiment. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a magnetic disk, or an optical disk, or other various media capable of storing program codes.
The terminal asset identification device provided by the embodiment of the application detects all online terminals in a target network segment; generating a detection data packet based on a preset protocol list, and sending the detection data packet to all online terminals; and receiving the equipment information returned by all the online terminals in response to the detection data packet, and identifying the target terminal in all the online terminals according to the equipment information. It can be seen that, in the embodiment of the present application, the terminal asset identifying apparatus may determine, by determining all online terminals in the video network in the range of the target network segment, then generate and send a probe packet based on the preset protocol list to obtain device data of the online terminals, and finally determine the target terminal based on the device information to manage the target terminal. It can be understood that in the application, the probe data packet for obtaining the device data is generated based on the preset protocol list formed by multiple protocols, so that accurate management of multiple terminals supporting different protocols of different manufacturers can be realized, the correctness and accuracy of the device information can be improved, and the instant update of the device information can be realized, so that the management difficulty is reduced, and the management flow is simplified.
The embodiment of the application provides a computer-readable storage medium having a program stored thereon, which when executed by a processor, implements the terminal asset identification method as described above.
Specifically, the program instructions corresponding to the terminal asset identification method in the present embodiment may be stored on a storage medium such as an optical disc, a hard disc, or a usb disk, and when the program instructions corresponding to the terminal asset identification method in the storage medium are read or executed by an electronic device, the method includes the following steps:
detecting all online terminals in the target network segment;
generating a detection data packet based on a preset protocol list, and sending the detection data packet to all online terminals;
and receiving the equipment information returned by all online terminals in response to the detection data packet, and identifying a target terminal in all online terminals according to the equipment information.
It will be appreciated by those skilled in the art that embodiments of the present application may be provided as a method, display, or computer program product. Accordingly, the present application may take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, magnetic disk storage, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of implementations of methods, apparatus (systems) and computer program products according to embodiments of the application. It will be understood that each block and/or flow of the flowchart illustrations and/or block diagrams, and combinations of blocks and/or flow diagrams in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart block or blocks and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart block or blocks and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart block or blocks and/or block diagram block or blocks.
The foregoing description is only of the preferred embodiments of the present application and is not intended to limit the scope of the present application.

Claims (13)

1. A method for identifying a terminal asset, the method comprising:
detecting all online terminals in the target network segment;
generating a detection data packet based on a preset protocol list, and sending the detection data packet to all online terminals; the preset protocol list comprises at least one detection protocol; the at least one probing protocol corresponds to at least one protocol priority;
receiving equipment information corresponding to the detection protocol returned by all online terminals in response to the detection data packet;
identifying protocol information in the equipment information, and judging whether the protocol priority corresponding to the protocol information meets the preset priority; if yes, judging that the online terminal corresponding to the equipment information is a target terminal; if not, judging that the online terminal corresponding to the equipment information is not the target terminal.
2. The method of claim 1, wherein prior to the detecting all online terminals in the target network segment, the method further comprises:
receiving a management instruction corresponding to the terminal asset at a management interface; wherein the management instruction carries the target network segment required for detection.
3. The method of claim 1, wherein detecting all online terminals in the target network segment comprises:
and carrying out parallel detection processing according to the target network segment, and determining all online terminals in the target network segment.
4. A method according to claim 3, wherein said performing parallel probing according to said target network segment to determine said all online terminals in said target network segment comprises:
scanning the relative positions of the server and the target network segment to obtain a scanning result;
if the scanning result is a local area network, adopting ARP-Ping to carry out detection processing to obtain all online terminals;
and if the scanning result is a non-local area network, adopting a custom Ping to carry out detection processing to obtain all the online terminals.
5. The method according to claim 1, wherein the method further comprises:
And receiving a new detection protocol, and updating the preset protocol list in real time according to the new detection protocol.
6. The method according to claim 1, wherein the method further comprises:
and if the target equipment information of the target terminal does not exist in the pre-stored equipment list, storing the target equipment information into a list to be checked.
7. The method of claim 6, wherein if the target device information of the target terminal does not exist in the pre-stored device list, before storing the target device information in the pending list, the method further comprises:
storing the target equipment information into a cache area;
and reading the target equipment information from the cache area according to a preset time interval, and judging whether the target equipment information exists in the pre-stored equipment list.
8. The method according to claim 6 or 7, characterized in that the method further comprises:
if the target equipment information exists in the pre-stored equipment list, judging whether the target equipment information exists in the list to be checked;
if the target equipment information exists in the list to be checked, judging whether the target equipment information has variation or not;
And if the target equipment information has variation, updating the list to be checked according to the varied equipment information.
9. The method according to claim 6 or 7, characterized in that the method further comprises:
if the target equipment information exists in the pre-stored equipment list, or if the target equipment information does not exist in the list to be checked, judging whether the target equipment information exists in the checked list;
if the target equipment information does not exist in the checked list, storing the target equipment information into a list to be checked;
if the checked list contains the target equipment information, judging whether the target equipment information has variation or not;
and if the target equipment information is changed, sending out prompt information containing the change of the target equipment information.
10. Method according to claim 9, characterized in that the target device information and/or the hint information and/or the pre-stored device list and/or the checked list and/or the pending list are visually presented.
11. A terminal asset identification device, characterized in that the terminal asset identification device comprises: a detecting unit, a generating unit, a transmitting unit, a receiving unit, an identifying unit,
The detection unit is used for detecting all online terminals in the target network segment;
the generating unit is used for generating a detection data packet based on a preset protocol list; the preset protocol list comprises at least one detection protocol; the at least one probing protocol corresponds to at least one protocol priority;
the sending unit is used for sending the detection data packet to all online terminals;
the receiving unit is used for receiving equipment information corresponding to the detection protocol returned by all online terminals in response to the detection data packet;
the identification unit is used for judging whether the protocol priority corresponding to the protocol information meets the preset priority or not according to the protocol information in the equipment information; if yes, judging that the online terminal corresponding to the equipment information is a target terminal; if not, judging that the online terminal corresponding to the equipment information is not the target terminal.
12. A terminal asset identification device comprising a processor, a memory storing instructions executable by the processor, a communication interface, and a bus for connecting the processor, the memory and the communication interface, which when executed by the processor, implements the method of any of claims 1-10.
13. A computer readable storage medium having stored thereon a program for use in a terminal asset identification device, wherein the program, when executed by a processor, implements a method according to any of claims 1-10.
CN202010211056.7A 2020-03-24 2020-03-24 Terminal asset identification method and device and computer readable storage medium Active CN111447089B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010211056.7A CN111447089B (en) 2020-03-24 2020-03-24 Terminal asset identification method and device and computer readable storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010211056.7A CN111447089B (en) 2020-03-24 2020-03-24 Terminal asset identification method and device and computer readable storage medium

Publications (2)

Publication Number Publication Date
CN111447089A CN111447089A (en) 2020-07-24
CN111447089B true CN111447089B (en) 2023-07-14

Family

ID=71652359

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010211056.7A Active CN111447089B (en) 2020-03-24 2020-03-24 Terminal asset identification method and device and computer readable storage medium

Country Status (1)

Country Link
CN (1) CN111447089B (en)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112671887B (en) * 2020-12-21 2023-03-03 哈尔滨工大天创电子有限公司 Asset identification method and device, electronic equipment and computer storage medium
CN114745300A (en) * 2022-03-29 2022-07-12 成都安恒信息技术有限公司 Network asset detection method, device, electronic device and storage medium
CN115051935B (en) * 2022-08-12 2022-12-13 北京华顺信安科技有限公司 Network asset state monitoring method
CN115955508B (en) * 2023-03-10 2023-06-02 边无际(北京)科技有限公司 Large-scale multi-class network camera identification and state sensing method and device
CN117560202A (en) * 2023-06-20 2024-02-13 荣耀终端有限公司 Network asset detection method and device
CN116996422A (en) * 2023-06-30 2023-11-03 上海螣龙科技有限公司 Host computer living detection system, method, computing equipment and storage medium
CN117061244B (en) * 2023-10-10 2024-01-30 杭州海康威视数字技术股份有限公司 Active scanning-based video network asset management method, device and equipment

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011023136A1 (en) * 2009-08-28 2011-03-03 华为技术有限公司 Method, device thereof and system thereof for automatically configuring internet protocol (ip) addresses
CN107579876A (en) * 2017-09-15 2018-01-12 中国移动通信集团广东有限公司 A kind of automatic detection analysis method and device of assets increment

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011023136A1 (en) * 2009-08-28 2011-03-03 华为技术有限公司 Method, device thereof and system thereof for automatically configuring internet protocol (ip) addresses
CN107579876A (en) * 2017-09-15 2018-01-12 中国移动通信集团广东有限公司 A kind of automatic detection analysis method and device of assets increment

Also Published As

Publication number Publication date
CN111447089A (en) 2020-07-24

Similar Documents

Publication Publication Date Title
CN111447089B (en) Terminal asset identification method and device and computer readable storage medium
KR102298268B1 (en) An apparatus for network monitoring based on edge computing and method thereof, and system
US9025609B2 (en) Video router and method of automatic configuring thereof
US20070297349A1 (en) Method and System for Collecting Information Relating to a Communication Network
EP2372954B1 (en) Method and system for collecting information relating to a communication network
US20200314107A1 (en) Systems, methods, and media for securing internet of things devices
JP2022531878A (en) Systems and methods for selectively collecting computer forensic data using DNS messages
CN111225002B (en) Network attack tracing method and device, electronic equipment and storage medium
CN114650592A (en) Wireless network time delay processing method, system and access server
US10616066B2 (en) Device discovery in a network environment
CN113328972B (en) Equipment monitoring method, device, equipment and storage medium
US20070274274A1 (en) Open wireless access point detection and identification
Valente et al. Privacy and security in Internet-connected cameras
US6895436B1 (en) Method and system for evaluating network security
CN113098906A (en) Application method of micro honeypots in modern families
US9961163B2 (en) Method and system for notifying subscriber devices in ISP networks
CN116719868A (en) Network asset identification method, device and equipment
US8239930B2 (en) Method for controlling access to a network in a communication system
CN114629725A (en) User domain dumb terminal management method, device, system and storage medium
CN113098904B (en) Communication method and device of network equipment
CN116032763A (en) Processing method, system and gateway equipment of network service
JP4029898B2 (en) Network equipment
TWI714386B (en) Method for detecting hidden network address and management server
CN113676369B (en) Network quality analysis method, data receiving server and storage medium
JP2010136014A (en) Mac address automatic authentication system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant