CN114866417B

CN114866417B - Method, system, medium, and apparatus for determining an organization network configuration

Info

Publication number: CN114866417B
Application number: CN202210780868.2A
Authority: CN
Inventors: 臧云峰; 安柯; 徐蓉; 王阳
Original assignee: Shanghai Yovole Computer Network Co ltd; Shanghai Youfu Zhishu Yunchuang Digital Technology Co ltd
Current assignee: Shanghai Yovole Computer Network Co ltd; Shanghai Youfu Zhishu Yunchuang Digital Technology Co ltd
Priority date: 2022-07-05
Filing date: 2022-07-05
Publication date: 2022-09-06
Anticipated expiration: 2042-07-05
Also published as: CN114866417A

Abstract

The invention provides a method for determining the network configuration of an organization, which comprises the following steps: step S1: acquiring a network configuration request about a target organization sent by first equipment; step S2: determining network communication demand information of the target organization mechanism based on the network configuration request of the target organization mechanism, and determining network resource configuration information corresponding to the target organization mechanism based on the network communication demand information; step S3: and sending the network resource sub-configuration information corresponding to the target department to second equipment based on a network use request corresponding to the target department, which is sent by the second equipment, wherein the second equipment carries out network resource configuration on a use object in the target department based on the received network resource sub-configuration information.

Description

Method, system, medium, and apparatus for determining an organization network configuration

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method, system, medium, and apparatus for determining an organization network configuration.

Background

With the development of informatization, the network scale inside enterprises is gradually enlarged, and the condition of IP address management directly affects the working efficiency, resource utilization and sharing and security of information inside the network of enterprises. After an enterprise purchases public network IP resources from an internet service provider, planning and configuring the IP resources is usually performed manually, which is inefficient, and the larger the enterprise scale is, the higher the cost of manpower and time needs to be invested.

Patent document CN113259949A (application number: 202010087224.6) discloses a network configuration system and method, an electronic device, a method for establishing a network configuration system, and a device, where the system includes a node to be configured, at least one relay node in a first communication network, and a network configuration node; the node to be configured sends the first request data to a first relay node in the at least one relay node. The first relay node acquires first request data; the first request data is provided to the network configuration node. The network configuration node acquires the first request data; determining first feedback data matching the first request data; the first feedback data is provided to the first relay node. A first relay node acquires first feedback data provided by the network configuration node; and sending the first feedback data to a node to be configured. A node to be configured acquires first feedback data sent by a first relay node; and executing network configuration operation corresponding to the first feedback data so as to join the first communication network.

Disclosure of Invention

In view of the deficiencies of the prior art, it is an object of the present invention to provide a method, system, medium and apparatus for determining an organization's network configuration.

According to the invention, a method for determining the network configuration of an organization is provided, which comprises the following steps:

step S1: acquiring a network configuration request about a target organization sent by first equipment;

step S2: determining network communication requirement information of the target organization based on the network configuration request of the target organization, and determining network resource configuration information corresponding to the target organization based on the network communication requirement information;

step S3: the method comprises the steps that network resource sub-configuration information corresponding to a target department is sent to second equipment based on a network use request corresponding to the target department and sent by the second equipment, and the second equipment carries out network resource configuration on a use object in the target department based on the received network resource sub-configuration information;

the target organizational structure includes organizational structure information; the organization architecture information comprises a plurality of departments in a target organization and membership among the departments;

the network communication requirement information comprises a plurality of first communication nodes and communication metric information among the first communication nodes; the first communication node corresponds to one of the plurality of departments or one post in the department;

the network resource configuration information comprises network resource sub-configuration information corresponding to each department in the target organization; the network resource sub-configuration information comprises a first network address of at least one first communication node belonging to the department in a plurality of first communication nodes, network segment information to which the first network address belongs, and information used for meeting the network communication requirement.

Preferably, the step S2 adopts:

step S2.1: based on the network communication demand information, carrying out clustering processing on a plurality of first communication nodes in the network communication demand information to obtain one or more node clusters, wherein each node cluster comprises at least one first communication node;

step S2.2: for each node cluster in the one or more node clusters, determining network segment capacity information suitable for the current node cluster, and distributing a corresponding network segment for the current node cluster according to the network segment capacity information;

step S2.3: distributing corresponding first network addresses to all first communication nodes in the current node cluster in a network segment corresponding to the current node cluster;

step S2.4: and determining the first network address of the first communication node and the network segment to which the first network address belongs as the network resource configuration information corresponding to the target organization mechanism.

Preferably, said step S2.1 employs:

step S2.1.1: determining a communication description vector corresponding to the first communication node in the network communication demand information based on the network communication demand information;

step S2.1.2: clustering a plurality of first communication nodes according to communication description vectors corresponding to the first communication nodes to obtain one or more node clusters, wherein each node cluster comprises at least one first communication node;

the communication description vector corresponding to the first communication node comprises a plurality of communication components and assignment information corresponding to each communication component, and the communication components are used for representing communication metric information between the first communication node and other communication nodes in the network communication demand information.

Preferably, said step S2.2 employs: determining one or more pieces of cluster attribute information corresponding to the node clusters according to each first communication node in the node clusters; and determining and setting network segment label information of the network segment corresponding to the node cluster according to the one or more cluster attribute information.

Preferably, the determining, according to each first communication node in the node cluster, one or more pieces of cluster attribute information corresponding to the node cluster is performed by:

determining a node description vector corresponding to each first communication node in the node cluster according to a department or post corresponding to the first communication node and the organization architecture information, wherein the node description vector comprises a plurality of organization attribute information corresponding to the first communication node in each level of the target organization;

and determining one or more pieces of cluster attribute information corresponding to the node clusters according to the node description vectors corresponding to the node clusters, wherein each piece of cluster attribute information is determined by a plurality of pieces of organization attribute information in each node description vector.

Preferably, the network communication requirement information further includes communication metric information between at least one of the first communication nodes and a second communication node external to the target organization;

respectively allocating a second network address to the at least one first communication node, wherein the second network address is used for the second communication node to communicate with the at least one first communication node from the outside of the target organization;

adding the mapping relationship between the second network address and the at least one first communication node to the network resource configuration information.

According to the present invention there is provided a system for determining the network configuration of an organisation, comprising:

module M1: acquiring a network configuration request about a target organization sent by first equipment;

module M2: determining network communication requirement information of the target organization based on the network configuration request of the target organization, and determining network resource configuration information corresponding to the target organization based on the network communication requirement information;

module M3: the method comprises the steps that network resource sub-configuration information corresponding to a target department is sent to second equipment based on a network use request corresponding to the target department and sent by the second equipment, and the second equipment carries out network resource configuration on a use object in the target department based on the received network resource sub-configuration information;

the network communication demand information comprises a plurality of first communication nodes and communication metric information among the plurality of first communication nodes; the first communication node corresponds to one of the plurality of departments or one post in the department;

Preferably, the module M2 employs:

module M2.1: based on the network communication demand information, carrying out clustering processing on a plurality of first communication nodes in the network communication demand information to obtain one or more node clusters, wherein each node cluster comprises at least one first communication node;

module M2.2: for each node cluster in the one or more node clusters, determining network segment capacity information suitable for the current node cluster, and distributing a corresponding network segment for the current node cluster according to the network segment capacity information;

module M2.3: distributing corresponding first network addresses to all first communication nodes in the current node cluster in a network segment corresponding to the current node cluster;

module M2.4: determining a first network address of the first communication node and a network segment to which the first network address belongs as network resource configuration information corresponding to the target organization mechanism;

the module M2.1 employs:

module M2.1.1: determining a communication description vector corresponding to the first communication node in the network communication demand information based on the network communication demand information;

module M2.1.2: clustering a plurality of first communication nodes according to communication description vectors corresponding to the first communication nodes to obtain one or more node clusters, wherein each node cluster comprises at least one first communication node;

the communication description vector corresponding to the first communication node comprises a plurality of communication components and assignment information corresponding to each communication component, and the communication components are used for representing communication metric information between the first communication node and other communication nodes in the network communication demand information;

the module M2.2 employs: determining one or more pieces of cluster attribute information corresponding to the node clusters according to each first communication node in the node clusters; determining and setting network segment label information of a network segment corresponding to the node clustering according to the one or more clustering attribute information;

the determining one or more pieces of cluster attribute information corresponding to the node cluster according to each first communication node in the node cluster is performed by:

determining a node description vector corresponding to each first communication node in the node cluster according to the department or post corresponding to the first communication node and the organization architecture information, wherein the node description vector comprises a plurality of organization attribute information corresponding to the first communication node in each level of the target organization;

According to the present invention, there is provided a computer device for determining a network configuration of an organization, comprising a memory, a processor and a computer program stored on the memory, the processor executing the computer program to implement the steps of the method described above.

According to the present invention, a computer-readable storage medium is provided, on which a computer program is stored which, when being executed by a processor, carries out the above-mentioned method steps.

Compared with the prior art, the invention has the following beneficial effects: the method comprises the steps of obtaining a network configuration request which is sent by first equipment and related to a target organization, wherein the network configuration request comprises organization architecture information of the target organization, and the organization architecture information comprises a plurality of departments in the target organization and membership among the departments; responding to the network configuration request, determining network communication requirement information of the target organization mechanism, and determining network resource configuration information corresponding to the target organization mechanism based on the network communication requirement information; responding to a network resource use request which is sent by second equipment and corresponds to a target department, and sending network resource sub-configuration information which corresponds to the target department to the second equipment, wherein the second equipment carries out network resource configuration on a use object in the target department based on the received network resource sub-configuration information, so that the network resource configuration is combined with an organization framework of a target organization, the network resource configuration is carried out from the aspect of organization and management, and the enterprise network management efficiency and the resource use rate are improved.

Drawings

Other features, objects and advantages of the invention will become more apparent upon reading of the detailed description of non-limiting embodiments with reference to the following drawings:

FIG. 1 is a flow diagram of a method for determining a network configuration of an organization;

FIG. 2 is a schematic diagram of a network address management;

FIG. 3 is a full lifecycle diagram of a target organization's network management;

FIG. 4 is a block diagram of a device for determining the configuration of an organizational network;

FIG. 5 illustrates an exemplary system that can be used to implement the various embodiments described in this application.

Detailed Description

The present invention will be described in detail with reference to specific examples. The following examples will aid those skilled in the art in further understanding the present invention, but are not intended to limit the invention in any manner. It should be noted that it would be obvious to those skilled in the art that various changes and modifications can be made without departing from the spirit of the invention. All falling within the scope of the present invention.

Example 1

The present application is described in further detail below with reference to the attached figures.

In a typical configuration of the present application, the terminal, the device serving the network, and the trusted party each include one or more processors (e.g., Central Processing Units (CPUs)), input/output interfaces, network interfaces, and memory.

The Memory may include forms of volatile Memory, Random Access Memory (RAM), and/or non-volatile Memory in a computer-readable medium, such as Read Only Memory (ROM) or Flash Memory. Memory is an example of a computer-readable medium.

Computer-readable media, including both permanent and non-permanent, removable and non-removable media, may implement the information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, Phase-Change Memory (PCM), Programmable Random Access Memory (PRAM), Static Random-Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read-Only Memory (ROM), Electrically Erasable Programmable Read-Only Memory (EEPROM), flash Memory or other Memory technology, Compact Disc Read-Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, magnetic tape storage or other magnetic storage devices, or any other non-transmission medium, may be used to store information that may be accessed by the computing device.

The device referred to in this application includes, but is not limited to, a user device, a network device, or a device formed by integrating a user device and a network device through a network. The user equipment includes, but is not limited to, any mobile electronic product, such as a smart phone, a tablet computer, etc., capable of performing human-computer interaction with a user (e.g., human-computer interaction through a touch panel), and the mobile electronic product may employ any operating system, such as an Android operating system, an iOS operating system, etc. The network Device includes an electronic Device capable of automatically performing numerical calculation and information processing according to a preset or stored instruction, and the hardware includes, but is not limited to, a microprocessor, an Application Specific Integrated Circuit (ASIC), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Digital Signal Processor (DSP), an embedded Device, and the like. The network device includes but is not limited to a computer, a network host, a single network server, a plurality of network server sets or a cloud of a plurality of servers; here, the Cloud is composed of a large number of computers or web servers based on Cloud Computing (Cloud Computing), which is a kind of distributed Computing, one virtual supercomputer consisting of a collection of loosely coupled computers. Including, but not limited to, the internet, a wide area network, a metropolitan area network, a local area network, a VPN network, a wireless Ad Hoc network (Ad Hoc network), etc. Preferably, the device may also be a program running on the user device, the network device, or a device formed by integrating the user device and the network device, the touch terminal, or the network device and the touch terminal through a network.

Of course, those skilled in the art will appreciate that the foregoing is by way of example only, and that other existing or future devices, which may be suitable for use in the present application, are also encompassed within the scope of the present application and are hereby incorporated by reference.

In the description of the present application, "a plurality" means two or more unless specifically limited otherwise.

Fig. 1 shows a flowchart of a method for determining a network configuration of an organization according to an embodiment of the present application, the method comprising steps S11, S12, S13. In step S11, the device 1 acquires a network configuration request about a target organization sent by a first device, where the network configuration request includes organizational structure information of the target organization, and the organizational structure information includes multiple departments in the target organization and membership between the multiple departments; in step S12, in response to the network configuration request, the device 1 determines network communication requirement information of the target organization, and determines network resource configuration information corresponding to the target organization based on the network communication requirement information, where the network resource configuration information is used to meet the network communication requirement information, and the network resource configuration information includes network resource sub-configuration information corresponding to each department in the target organization; in step S13, in response to the network resource usage request corresponding to the target department sent by the second device, the device 1 sends the network resource sub-configuration information corresponding to the target department to the second device, where the second device performs network resource configuration on the usage object in the target department based on the received network resource sub-configuration information.

In step S11, the device 1 obtains a network configuration request sent by a first device about a target organization, where the network configuration request includes organization structure information of the target organization, and the organization structure information includes multiple departments in the target organization and membership between the multiple departments. In some embodiments, the device 1 includes, but is not limited to, a network device or a cloud for performing network resource management, and may be a device for performing network resource management inside an enterprise, or a device corresponding to a platform for providing network resource management service for the enterprise. The first device is a device with network resource management authority in the target organization. The organization architecture information includes, but is not limited to, a plurality of departments in the target organization, membership among the plurality of departments, number information of posts corresponding to each department, membership among the posts, and service description information of each department or posts corresponding to each department. The device 1 obtains the network requirements (for example, the number of network addresses required by each department, etc.) of each department of the target organization through the network configuration request sent by the first device, so that the network resource allocation can be performed based on the network requirements of each department.

In step S12, in response to the network configuration request, the device 1 determines network communication requirement information of the target organization, and determines network resource configuration information corresponding to the target organization based on the network communication requirement information, where the network resource configuration information is used to meet the network communication requirement information, and the network resource configuration information includes network resource sub-configuration information corresponding to each department in the target organization. In some embodiments, the device 1 determines the network communication requirement information of the target organization based on the organization architecture information, and then determines the network resource configuration information matched with the network requirement information based on the network requirement information. For example, the device 1 determines the information of the number of network addresses required by each department of the target organization according to the organization structure information, and the determined information of the number of network addresses required by each department may be the same as or larger than the information of the number of departments, so as to be used for backup in case of a failure. The device 1 determines the network segments corresponding to the departments based on the information of the number of the network addresses required by the departments, and then allocates the network addresses, wherein the network addresses of the same department belong to the same network segment. The network segment is the network segment to which the target organization is assigned prior to performing the network configuration. For example, the target organization purchases a public network IP resource that is divided into a plurality of network segments in advance based on configuration information entered in advance. The device 1 performs corresponding network configuration based on the public network IP resource of the divided network segment and the organization architecture information of the target organization, and determines the network resource configuration information. Further, the device 1 may also divide a plurality of departments matched with the service description information into the same network segment.

In step S13, in response to the network resource usage request corresponding to the target department sent by the second device, the device 1 sends the network resource sub-configuration information corresponding to the target department to the second device, where the second device performs network resource configuration on the usage object in the target department based on the received network resource sub-configuration information. In some embodiments, the second device is a device in the target organization having network resource management privileges. The second device may be the same device as the first device or may be a different device. When the network resource configuration in the department is needed, the second device sends a network resource use request corresponding to a target department to the device 1, and the device 1 sends the network resource sub-configuration information corresponding to the target department to the second device and updates the state information of the network address corresponding to the network resource sub-configuration information. And the second equipment can be distributed in the target department after receiving the network resource sub-configuration information. For example, after the device 1 sends the network resource sub-configuration information to the second device, the state information corresponding to the corresponding network address may be updated to be allocated. The second device may assign a network address to one or more usage objects in the target department based on the network resource sub-configuration information. In some embodiments, the second device may return network resource allocation information to device 1 after completing the allocation. The device 1 may update the status information according to the network resource allocation information. If the network address is allocated to the corresponding using object, the state information corresponding to the network address is updated to be used, otherwise, the state information can be updated to be standby.

In some embodiments, device 1 may also receive a network configuration update request sent by the first device or the second device regarding the target organization. For example, if there is a change in a middle door of the target organization (e.g., a department is withdrawn, a new department is added, a membership relationship between departments or a business change in a department occurs, or a position change in a department, etc.), the first device or the second device may send a network configuration update request about the target organization to the device 1, where the network configuration update request includes change information of the target organization. The device 1 may determine corresponding network resource configuration update information according to the change information of the target organization, so as to perform network resource configuration update. For example, if a department is revoked, device 1 may reclaim the network address assigned for that department. Or, if a new department is added, the device 1 may determine the network communication demand information about the department according to the membership between the department and other departments in the target organization, and determine the corresponding network resource configuration update information based on the network communication demand information, so that the corresponding network resource management device may allocate a corresponding network address to the new department. Or, if the affiliation between the departments or the department service changes, the device 1 may recycle the network address previously allocated to the department and determine the network communication demand information about the department based on the change information of the target organization, and determine the corresponding network resource allocation update information based on the network communication demand information, thereby allocating a new network address to the department. Alternatively, the device 1 may update the network resource sub-configuration information corresponding to the department according to the change information of the target organization, in which the position changes in the department. For example, the corresponding network address is added or recovered in the department.

In some embodiments, the step S12 includes: step S121 (not shown), in response to the network configuration request, the device 1 determines network communication demand information of the target organization, where the network communication demand information includes a plurality of first communication nodes and communication metric information among the plurality of first communication nodes, and the first communication node corresponds to one of the plurality of departments or one post in the department; step S122 (not shown), the device 1 determines, based on the network communication demand information, network resource configuration information corresponding to the target organization, where the network resource configuration information includes network resource sub-configuration information corresponding to each department in the target organization, and the network resource sub-configuration information includes a first network address of at least one first communication node belonging to the department among the plurality of first communication nodes and network segment information to which the first network address belongs, and is used to satisfy the network communication demand information.

In some embodiments, the device 1 determines the first communication node corresponding to the department or position according to information of the department or position in the organization architecture information. The device 1 may also determine communication metric information between the first communication node and the other first communication nodes according to the membership between departments or posts in the organization structure information or the traffic communication volume. For example, device 1 determines the first communication node A, B, C, D corresponding to department A, B, C, D. If the department A, B belongs to the department C and the department C belongs to the department D according to the organization structure information, the communication metric information corresponding to the first communication node a is (1, 0, 1, 0), where the communication metric between the department a and its own is 1, the communication metric between departments with direct membership is 1, and the communication metric between departments without direct membership is 0.

In some embodiments, the device 1 performs the allocation of the network address based on the network communication requirement information. The device 1 may determine the network segment information corresponding to the first communication node, and then allocate the first network address belonging to the network segment information to the first communication node. For example, the device 1 determines the network segment information corresponding to the first communication node according to the communication metric information of the first communication node. The device 1 may determine the first communication node whose communication metric information similarity is greater than or equal to the similarity threshold as the same segment information, and then allocate the first network address under the segment information to the first communication node. For another example, the device 1 may also determine the corresponding network segment information according to a department or a post corresponding to the first communication node, where the same department or post belongs to the same network segment information, and then allocate the first network address under the network segment information to the first communication node.

In some embodiments, the step S121 includes: in response to the network configuration request, the device 1 determines a plurality of first communication nodes corresponding to the target organization, where the first communication node corresponds to one of the plurality of departments or one post of the department; and determining communication metric information among the plurality of first communication nodes according to the organization architecture information, and using the plurality of first communication nodes and the communication metric information among the plurality of first communication nodes as network communication demand information of the target organization.

In some embodiments, the device 1 determines a plurality of first communication nodes from the organizational structure information. For example, the device 1 may determine the first communication nodes according to departments or positions corresponding to departments included in the organization architecture information, where each of the first communication nodes corresponds to one of the departments or one of the positions. And if the first communication node corresponds to a department, the network communication demand information also comprises the network address number information corresponding to the first communication node. In some embodiments, the device 1 determines a membership or communication relationship between the department or post corresponding to the first communication node and the departments or posts corresponding to other first communication nodes in the organization structure information, and determines the communication metric information according to the membership or communication relationship. In some embodiments, the device 1 may further determine the communication metric information according to service description information of a department or a post corresponding to the first communication node in the organization structure information. For example, the communication metric information is determined according to the service description matching degree information of the service description information of the department or post corresponding to the first communication node and the service description information of the departments or posts corresponding to other first communication nodes. The device 1 may use the determined service description matching degree information as the communication metric information, and may also determine the communication metric information according to whether the service description matching degree information is greater than or equal to a corresponding matching degree threshold. For example, if the service description matching degree information of the service description information of the department a corresponding to the first communication node a and the service description information of the department B corresponding to the first communication node B is smaller than the matching degree threshold, the communication metric between the first communication node a and the first communication node B may be recorded as 0, otherwise, it may be recorded as 1.

In some embodiments, the step S122 includes: step S1221 (not shown), the device 1 performs clustering processing on the plurality of first communication nodes based on the network communication demand information to obtain one or more node clusters, where each node cluster includes at least one first communication node; step S1222 (not shown), the device 1 determines, according to the one or more node clusters, network resource configuration information corresponding to the target organization, where the network resource configuration information includes network resource sub-configuration information corresponding to each department in the target organization, the network resource sub-configuration information includes a first network address of at least one first communication node belonging to the department among the plurality of first communication nodes and a network segment to which the first network address belongs, and is used to satisfy the network communication requirement information, and the first network address of the first communication node in the same node cluster belongs to the same network segment.

In some embodiments, the device 1 performs clustering processing on the plurality of first communication nodes according to the communication metric information to obtain one or more node clusters, where the similarity of the communication metric information of the first communication nodes belonging to the same node cluster is greater than or equal to a similarity threshold, so that departments or posts corresponding to the first communication nodes included in each node cluster have the same or similar services. In some embodiments, the device 1 determines the network segment corresponding to each node cluster based on the quantity information of the first communication nodes included in each node cluster, allocates the first network addresses in the corresponding network segments to the first communication nodes included in each node cluster, and divides departments or posts with the same or similar services into the same network segment, thereby facilitating network management from the service perspective.

In some embodiments, said step S1222 includes: the device 1 determines network segment capacity information suitable for the node cluster for each node cluster in the one or more node clusters, and allocates a corresponding network segment for the node cluster according to the network segment capacity information; for each node cluster in the one or more node clusters, allocating a corresponding first network address to each first communication node in the node cluster in a network segment corresponding to the node cluster; and determining a first network address of the first communication node and a network segment to which the first network address belongs as network resource configuration information corresponding to the target organization mechanism, wherein the network resource configuration information comprises network resource sub-configuration information corresponding to each department in the target organization mechanism, the network resource sub-configuration information comprises a first network address of at least one first communication node belonging to the department in the plurality of first communication nodes and a network segment to which the first network address belongs, and is used for meeting the network communication requirement information, and the first network addresses of the first communication nodes belong to the same network segment in the same node cluster.

In some embodiments, the device 1 determines the network segment capacity information suitable for each node cluster of the one or more node clusters based on the first communication node included in the node cluster and the organization architecture information. For example, the device 1 determines the network segment capacity information suitable for the node cluster according to the department or position corresponding to the first communication node in the node cluster and the position number information corresponding to each department. The network segment capacity information is larger than or equal to the sum of the position corresponding to the first communication node in the node cluster or the position number information of the department corresponding to the first communication node. The device 1 determines the corresponding network segment according to the network segment capacity information, and allocates the corresponding first network address to the corresponding first communication node. The first network address includes one or more network addresses. If the department corresponding to the first communication node comprises a plurality of posts, the first network address correspondingly comprises a plurality of network addresses. And returning the first network address of the first communication node and the network segment to which the first network address belongs to the first device as network resource configuration information.

In some embodiments, the step S1222 further includes: the device 1 determines one or more pieces of cluster attribute information corresponding to the node clusters according to each first communication node in the node clusters; and determining and setting network segment label information of the network segment corresponding to the node cluster according to the one or more cluster attribute information.

In some embodiments, the device 1 determines, according to the department or the post corresponding to each first communication node in the node cluster, one or more pieces of cluster attribute information corresponding to the node cluster. For example, according to the service description information of the department or post corresponding to each first communication node in the node cluster, one or more summary information corresponding to the service description information and the weight corresponding to each summary information are determined, and the one or more cluster attribute information are determined based on the one or more summary information and the weight corresponding to each summary information. Device 1 may determine segment tag information from the one or more cluster attribute information, the segment tag information including at least one of the one or more cluster attribute information. For example, the device 1 determines one or more pieces of cluster attribute information with the highest weight or the weight greater than or equal to a preset weight threshold as the network segment tag information of the network segment corresponding to the node cluster. By associating the network segments with the network segment tag information, a network management user can manage network addresses in each network segment based on the network segment tag information (for example, refer to a network address management schematic diagram shown in fig. 2), thereby implementing network visual management in a service view.

In some embodiments, the determining, according to each first communication node in the node cluster, one or more cluster attribute information corresponding to the node cluster includes: the device 1 determines a node description vector corresponding to each first communication node in the node cluster according to a department or a post corresponding to the first communication node and the organization architecture information, wherein the node description vector comprises a plurality of organization attribute information corresponding to the first communication node in each level of the target organization; and determining one or more pieces of cluster attribute information corresponding to the node clusters according to the node description vectors corresponding to the node clusters, wherein each piece of cluster attribute information is determined by a plurality of pieces of organization attribute information in each node description vector.

In some embodiments, the device 1 determines, according to the department or station corresponding to the first communication node and the organization structure information, hierarchical information of the department or station corresponding to the first communication node in the organization structure information, where the hierarchical information includes one or more organization attribute information corresponding to a hierarchy in which the department or station is located and one or more organization attribute information corresponding to one or more higher hierarchies of the department or station. The organization attribute information includes, but is not limited to, hierarchy label information, service label information, or hierarchy description information of each hierarchy in the organization architecture information. The device 1 determines a node description vector corresponding to the first communication node according to the hierarchy information. In some embodiments, the node description vector further includes priority information or weight information corresponding to each of the plurality of organization attribute information. For example, the smaller the level difference between the level corresponding to the organization attribute information and the level of the department or post, the higher the priority information or the weight information corresponding to the organization attribute information. In some embodiments, the device 1 determines statistical information of the organization attribute information in each node description vector corresponding to the node cluster, and based on the statistical information, uses one or more organization attribute information with statistical information being the highest or higher than preset statistical information as one or more cluster attribute information corresponding to the node cluster. Or the device 1 determines one or more organization attribute information from each node description vector corresponding to the node cluster by using a voting algorithm as one or more cluster attribute information corresponding to the node cluster.

In some embodiments, the step S1221 includes: the device 1 determines a communication description vector corresponding to the first communication node based on the network communication demand information; and clustering the plurality of first communication nodes according to the communication description vectors corresponding to the first communication nodes to obtain one or more node clusters, wherein each node cluster comprises at least one first communication node.

In some embodiments, the communication description vector corresponding to the first communication node includes a plurality of communication components and assignment information corresponding to each communication component, where the communication components are used to characterize communication metric information between the first communication node and other communication nodes in the network communication demand information. In some embodiments, the device 1 determines communication level information of the first communication node and other first communication nodes based on the communication metric information, and then determines the communication description vector based on the communication level information. For example, the organization structure information includes the department A, B, C, D, the communication metric information corresponding to the first communication node a is (1, 0, 1, 0), the communication metric information corresponding to the first communication node C is (1, 1, 1, 1), and the communication description vector corresponding to the first communication node a is (1, 2, 1, 2). In some embodiments, the device 1 may also determine the communication description vector based on the traffic channeling amounts or normalized values of the departments or positions corresponding to the first communication node and the departments or positions corresponding to the other first communication nodes in the organization architecture information. For example, department a has 3 business transactions with department B and 1 business transaction with department C, the communication description vector corresponding to the first communication node a corresponding to department a includes (B3, C1). In some embodiments, the device 1 performs a clustering process on the first communication node based on the communication description vector, resulting in one or more node clusters.

In some embodiments, the network communication need information includes communication metric information between at least one of the first communication nodes and a second communication node external to the target organization; the step S122 further includes: the device 1 allocates a second network address to the at least one first communication node respectively, wherein the second network address is used for the second communication node to communicate with the at least one first communication node from outside the target organization; adding the mapping of the second network address to the at least one first communication node to the network resource configuration information.

In some embodiments, the device 1 may determine the first communication node which communicates with the outside based on the security level corresponding to the department or station corresponding to the one or more first communication nodes in the organization architecture information and the service condition outside the target organization or the department or station corresponding to the one or more first communication nodes (for example, the department or station corresponding to the first communication node has external service, or the security level corresponding to the department or station corresponding to the first communication node is lower, and external communication may be performed). The device 1 determines, according to the first communication node communicating with the outside, communication metric information between the first communication node and a second communication node outside the target organization. The device 1 determines the communication metric information between the first communication node and a second communication node outside the target organization according to the department or post corresponding to the first communication node and the external traffic or the external access requirement. And allocating a second network address to the first communication node so that the first communication node can communicate with the outside.

In some embodiments, the device 1 may further obtain usage information of the first network address corresponding to each first communication node in the target organization. And if the use information meets the network resource recovery condition, recovering the first network address and updating the state information of the first network address to be allocated. Wherein the network resource recycling condition includes, but is not limited to, a configuration error (e.g., data missing, unreasonable configuration, etc.) of the first network address; the first network address is not used in a preset time period; alternatively, the current time exceeds a configured time of use for the first network address. In some embodiments, before recycling the first network address, the device 1 may send a recycling prompt message to the first device or the second device, and determine whether to recycle the first network address based on recycling feedback information of the first device or the second device. By monitoring the use condition of the network address in the target organization mechanism, the network address which is failed, unused for a long time or expired is recovered in time, and the utilization rate of the network resource in the target organization mechanism is improved.

In some embodiments, the application can also realize the full-life-cycle automatic management of the network resources of the target organization, such as management planning, information management, business distribution, service use, service recovery, resource monitoring and report auditing. Referring to the schematic diagram shown in fig. 3, in the management planning stage, the device 1 may determine network resource configuration information from the service management perspective of the target organization mechanism based on the organization architecture information of the target organization mechanism, so as to perform reasonable network segment planning. In the information management stage, the device 1 may set network segment tag information corresponding to each network segment, thereby implementing network resource visualization management in a service view. When a certain IP fails or has problems, the corresponding business department can be directly determined by checking the label of the network segment to which the certain IP belongs, so that follow-up troubleshooting and emergency repair of the failure are facilitated. In the service allocation stage, each network resource management device acquiring the network resource configuration information can quickly allocate the network resources managed by the network resource management device to a corresponding service department or post. During the service usage phase, the usage of the allocated network resources may be monitored. Thereby timely recovering expired or idle network resources. The resource monitoring is to monitor the network resources which are put into use and send an alarm notice to the network resource management device when abnormal use exists. The report form audit records network resource operation, organizational structure information update and the like so as to facilitate audit tracing, and can update and optimize network resource configuration based on the recorded information, thereby improving the management efficiency of enterprise network resources.

Fig. 4 shows a block diagram of a device for determining the configuration of an organisation network according to an embodiment of the present application, said device 1 comprising a one-module 11, a two-module 12 and a three-module 13. The one-to-one module 11 acquires a network configuration request about a target organization, which is sent by a first device, wherein the network configuration request includes organization architecture information of the target organization, and the organization architecture information includes a plurality of departments in the target organization and membership between the plurality of departments; the second module 12, in response to the network configuration request, determines network communication requirement information of the target organization, and determines network resource configuration information corresponding to the target organization based on the network communication requirement information, where the network resource configuration information is used to meet the network communication requirement information, and the network resource configuration information includes network resource sub-configuration information corresponding to each department in the target organization; the first module 13, in response to a network resource usage request corresponding to a target department sent by a second device, sends network resource sub-configuration information corresponding to the target department to the second device, where the second device performs network resource configuration on a usage object in the target department based on the received network resource sub-configuration information. Here, the specific embodiments of the one-to-one module 11, the two-to-two module 12, and the one-to-three module 13 shown in fig. 4 are the same as or similar to the specific embodiments of the step S11, the step S12, and the step S13, respectively, and therefore are not repeated herein and are included by reference.

In some embodiments, the two-module includes a one-two-one unit 121 (not shown), a two-two unit 122 (not shown). The one-two-one unit 121, in response to the network configuration request, determines network communication requirement information of the target organization, where the network communication requirement information includes a plurality of first communication nodes and communication metric information among the plurality of first communication nodes, and the first communication node corresponds to one of the plurality of departments or one of the posts in the department; the second-second unit 122 determines, based on the network communication demand information, network resource configuration information corresponding to the target organization mechanism, where the network resource configuration information includes network resource sub-configuration information corresponding to each department in the target organization mechanism, and the network resource sub-configuration information includes a first network address of at least one first communication node belonging to the department among the plurality of first communication nodes and network segment information to which the first network address belongs, and is used to satisfy the network communication demand information. Here, the specific implementation manners of the first-second-first unit 121 and the first-second unit 122 are the same as or similar to the foregoing steps S121 and S122, and therefore, the detailed description is omitted, and the detailed description is incorporated herein by reference.

In some embodiments, the bi-bi unit 122 includes a bi-bi subunit 1221 (not shown), a bi-bi subunit 1222 (not shown). The first, second, and first sub-unit 1221 performs clustering processing on the plurality of first communication nodes based on the network communication demand information to obtain one or more node clusters, where each node cluster includes at least one first communication node; the one, two and two subunit 1222 determines, according to the one or more node clusters, network resource configuration information corresponding to the target organization mechanism, where the network resource configuration information includes network resource sub-configuration information corresponding to each department in the target organization mechanism, the network resource sub-configuration information includes a first network address of at least one first communication node belonging to the department among the plurality of first communication nodes and a network segment to which the first network address belongs, and is used to satisfy the network communication requirement information, and the first network address of the first communication node in the same node cluster belongs to the same network segment. Here, the specific implementation manners of the first, second, and first sub-unit 1221 and the second, second and first sub-unit 1222 are the same as or similar to the aforementioned steps S1221 and S1222, and are not repeated herein and are included herein by reference.

FIG. 5 illustrates an exemplary system that can be used to implement the various embodiments described herein; in some embodiments, as shown in FIG. 5, the system 300 can be implemented as any of the devices in the various embodiments described. In some embodiments, system 300 may include one or more computer-readable media (e.g., system memory or NVM/storage 320) having instructions and one or more processors (e.g., processor(s) 305) coupled with the one or more computer-readable media and configured to execute the instructions to implement modules to perform the actions described herein.

For one embodiment, system control module 310 may include any suitable interface controllers to provide any suitable interface to at least one of processor(s) 305 and/or any suitable device or component in communication with system control module 310.

The system control module 310 may include a memory controller module 330 to provide an interface to the system memory 315. Memory controller module 330 may be a hardware module, a software module, and/or a firmware module.

System memory 315 may be used, for example, to load and store data and/or instructions for system 300. For one embodiment, system memory 315 may include any suitable volatile memory, such as suitable DRAM. In some embodiments, the system memory 315 may include a double data rate type four synchronous dynamic random access memory (DDR4 SDRAM).

For one embodiment, system control module 310 may include one or more input/output (I/O) controllers to provide an interface to NVM/storage 320 and communication interface(s) 325.

For example, NVM/storage 320 may be used to store data and/or instructions. NVM/storage 320 may include any suitable non-volatile memory (e.g., flash memory) and/or may include any suitable non-volatile storage device(s) (e.g., one or more Hard Disk Drives (HDDs), one or more Compact Disc (CD) drives, and/or one or more Digital Versatile Disc (DVD) drives).

NVM/storage 320 may include storage resources that are physically part of the device on which system 300 is installed or may be accessed by the device and not necessarily part of the device. For example, NVM/storage 320 may be accessible over a network via communication interface(s) 325.

Communication interface(s) 325 may provide an interface for system 300 to communicate over one or more networks and/or with any other suitable device. System 300 may wirelessly communicate with one or more components of a wireless network according to any of one or more wireless network standards and/or protocols.

For one embodiment, at least one of the processor(s) 305 may be packaged together with logic for one or more controller(s) (e.g., memory controller module 330) of the system control module 310. For one embodiment, at least one of the processor(s) 305 may be packaged together with logic for one or more controller(s) of the system control module 310 to form a System In Package (SiP). For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with logic for one or more controller(s) of the system control module 310. For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with logic for one or more controller(s) of the system control module 310 to form a system on a chip (SoC).

In various embodiments, system 300 may be, but is not limited to being: a server, a workstation, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet, a netbook, etc.). In various embodiments, system 300 may have more or fewer components and/or different architectures. For example, in some embodiments, system 300 includes one or more cameras, a keyboard, a Liquid Crystal Display (LCD) screen (including a touch screen display), a non-volatile memory port, multiple antennas, a graphics chip, an Application Specific Integrated Circuit (ASIC), and speakers.

In addition to the methods and apparatus described in the embodiments above, the present application also provides a computer readable storage medium storing computer code that, when executed, performs the method as described in any of the previous items.

The present application also provides a computer program product, which when executed by a computer device, performs the method of any of the preceding claims.

The present application further provides a computer device, comprising:

one or more processors;

a memory for storing one or more computer programs;

the one or more computer programs, when executed by the one or more processors, cause the one or more processors to implement the method of any preceding claim.

It should be noted that the present application may be implemented in software and/or a combination of software and hardware, for example, implemented using Application Specific Integrated Circuits (ASICs), general purpose computers or any other similar hardware devices. In one embodiment, the software programs of the present application may be executed by a processor to implement the steps or functions described above. Likewise, the software programs (including associated data structures) of the present application may be stored in a computer readable recording medium, such as RAM memory, magnetic or optical drive or diskette and the like. Additionally, some of the steps or functions of the present application may be implemented in hardware, for example, as circuitry that cooperates with the processor to perform various steps or functions.

In addition, some of the present application may be implemented as a computer program product, such as computer program instructions, which when executed by a computer, may invoke or provide methods and/or techniques in accordance with the present application through the operation of the computer. Those skilled in the art will appreciate that the form in which the computer program instructions reside on a computer-readable medium includes, but is not limited to, source files, executable files, installation package files, and the like, and that the manner in which the computer program instructions are executed by a computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Computer-readable media herein can be any available computer-readable storage media or communication media that can be accessed by a computer.

Communication media includes media by which communication signals, including, for example, computer readable instructions, data structures, program modules, or other data, are transmitted from one system to another. Communication media may include conductive transmission media such as cables and wires (e.g., fiber optics, coaxial, etc.) and wireless (non-conductive transmission) media capable of propagating energy waves such as acoustic, electromagnetic, RF, microwave, and infrared. Computer readable instructions, data structures, program modules, or other data may be embodied in a modulated data signal, for example, in a wireless medium such as a carrier wave or similar mechanism such as is embodied as part of spread spectrum techniques. The term "modulated data signal" means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. The modulation may be analog, digital or hybrid modulation techniques.

By way of example, and not limitation, computer-readable storage media may include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules or other data. For example, computer-readable storage media include, but are not limited to, volatile memory such as random access memory (RAM, DRAM, SRAM); and non-volatile memory such as flash memory, various read-only memories (ROM, PROM, EPROM, EEPROM), magnetic and ferromagnetic/ferroelectric memories (MRAM, FeRAM); and magnetic and optical storage devices (hard disk, tape, CD, DVD); or other now known media or later developed that can store computer-readable information/data for use by a computer system.

An embodiment according to the present application herein comprises an apparatus comprising a memory for storing computer program instructions and a processor for executing the program instructions, wherein the computer program instructions, when executed by the processor, trigger the apparatus to perform a method and/or solution according to embodiments of the present application as described above.

It will be evident to those skilled in the art that the present application is not limited to the details of the foregoing illustrative embodiments, and that the present application may be embodied in other specific forms without departing from the spirit or essential attributes thereof. The present embodiments are therefore to be considered in all respects as illustrative and not restrictive, the scope of the application being indicated by the appended claims rather than by the foregoing description, and all changes which come within the meaning and range of equivalency of the claims are therefore intended to be embraced therein. Any reference sign in a claim should not be construed as limiting the claim concerned. Furthermore, it is obvious that the word "comprising" does not exclude other elements or steps, and the singular does not exclude the plural. A plurality of units or means recited in the apparatus claims may also be implemented by one unit or means in software or hardware. The terms first, second, etc. are used to denote names, but not any particular order.

Those skilled in the art will appreciate that, in addition to implementing the systems, apparatus, and various modules thereof provided by the present invention in purely computer readable program code, the same procedures can be implemented entirely by logically programming method steps such that the systems, apparatus, and various modules thereof are provided in the form of logic gates, switches, application specific integrated circuits, programmable logic controllers, embedded microcontrollers and the like. Therefore, the system, the device and the modules thereof provided by the present invention can be considered as a hardware component, and the modules included in the system, the device and the modules thereof for implementing various programs can also be considered as structures in the hardware component; modules for performing various functions may also be considered to be both software programs for performing the methods and structures within hardware components.

The foregoing description of specific embodiments of the present invention has been presented. It is to be understood that the present invention is not limited to the specific embodiments described above, and that various changes or modifications may be made by one skilled in the art within the scope of the appended claims without departing from the spirit of the invention. The embodiments and features of the embodiments of the present application may be combined with each other arbitrarily without conflict.

Claims

1. A method for determining a network configuration of an organization, comprising:

step S2: determining network communication demand information of the target organization mechanism based on the network configuration request of the target organization mechanism, and determining network resource configuration information corresponding to the target organization mechanism based on the network communication demand information;

2. The method for determining the network configuration of an organization according to claim 1, wherein said step S2 employs:

step S2.4: and determining a first network address of the first communication node and a network segment to which the first network address belongs as network resource configuration information corresponding to the target organization mechanism.

3. Method for determining the network configuration of an organisation according to claim 2, characterised in that said step S2.1 employs:

4. Method for determining the network configuration of an organisation according to claim 2, characterised in that said step S2.2 employs: determining one or more pieces of cluster attribute information corresponding to the node clusters according to each first communication node in the node clusters; and determining and setting network segment label information of the network segment corresponding to the node cluster according to the one or more cluster attribute information.

5. The method of claim 4, wherein determining one or more cluster attribute information corresponding to the node cluster from each first communication node in the node cluster comprises:

6. The method for determining an organization's network configuration according to claim 1, wherein the network communication need information further includes communication metric information between at least one of the first communication nodes and a second communication node external to the target organization;

7. A system for determining a network configuration of an organization, comprising:

module M2: determining network communication demand information of the target organization mechanism based on the network configuration request of the target organization mechanism, and determining network resource configuration information corresponding to the target organization mechanism based on the network communication demand information;

the target organization comprises organizational structure information; the organization architecture information comprises a plurality of departments in a target organization and membership among the departments;

the network communication requirement information comprises a plurality of first communication nodes and communication metric information among the first communication nodes; the first communication node corresponds to one of the plurality of departments or one post of the department;

8. The system for determining the network configuration of an organization according to claim 7, characterized in that said module M2 employs:

the module M2.1 employs:

9. A computer device for determining a network configuration of an organization, comprising a memory, a processor and a computer program stored on the memory, characterized in that the processor executes the computer program to implement the steps of the method of any of claims 1 to 6.

10. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the steps of the method of any one of claims 1 to 6.