TW202423094A - Information processing system and method - Google Patents

Abstract

The present invention discloses a message processing system, comprising a data classification module and a notification delivery review module. The data classification module is used to receive a notification and associate a tag with the content of the notification according to a content of the notification, wherein the tag indicates a score. The notification delivery review module is used to store the notifications labeled by the data classification module and send the notification when a storage rule is met.

Description

Information processing system and method

The present invention relates to a message processing system and method, in particular to a message processing system connected between a front-end system and a back-end system, and more particularly to a message processing system and method for generating an alarm for the front-end system.

Information monitoring systems are used to manage front-end systems that generate a lot of data and information, such as communication and network monitoring systems. As the scale of front-end systems increases, information monitoring systems are accompanied by a large amount of data throughput. Faced with notifications from the monitoring system, monitoring personnel and data center maintenance personnel usually have to browse each notification and determine whether the content contains important alarm information in order to execute subsequent response actions. Once the number of notifications is large, notifications containing important information are easily drowned in a large number of notifications and cannot be detected in time by monitoring personnel, such as which system messages and data are related to endangering system stability and security, and thus the best processing time may be missed. There are also different judgment standards among different on-duty personnel. In addition, if the server room is facing a large-scale system (service) collapse or a natural disaster, determining which important services or systems should be prioritized is also a problem that the data center often faces.

In this regard, it is necessary to develop a technical solution to classify or screen a large number of messages so that a large number of messages can be notified to monitoring personnel in order of priority.

The present invention proposes a new form of information processing technology solution, which uses cloud services to integrate relevant alarm notifications generated by the front-end system, and uses customized multiple rules to label each notification. Once the alarm notification (i.e., front-end information) is generated, it is synchronously sent to the information processing system of the present invention, and the front-end information can be labeled and graded using customized rules at the first time, and then corresponding notification strategies are implemented for different levels to solve the risks caused by human judgment alone and improve the ability to interpret information. Use the cloud's diverse data collection modules to establish a rule database (Rule-based DB). Use the self-built data analysis module to load the customized rules in the rule database. The notifications (combination of data and messages) generated by various systems are labeled, and message review and message level judgment are performed according to the rules to achieve accurate alarms and instant notifications, reducing the risk of missing important messages due to manual comparison.

The present invention proposes a message processing system, comprising: a data rating module, configured to receive a notification and associate a tag with the content of the notification based on the content of the notification, wherein the tag indicates a score; and a notification delivery review module, configured to store the notifications labeled by the data rating module and send the notification when a storage rule is met.

In one embodiment, the notification is an email message or a log message.

In a specific embodiment, the data classification module is further configured to associate a keyword based on a text content in the notification, and associate the tag from a tag database based on the keyword to associate the tag with the text content of the notification.

In a specific embodiment, the notification delivery review module is further configured to designate a storage pool for storing the notification based on a tag assigned to the notification, and the storage pool is configured to store multiple notifications indicated as having the same score by multiple tags.

In a specific embodiment, the notification delivery review module is further configured to send multiple notifications of the storage pool when the storage rule is met.

The present invention also proposes a message processing method, including receiving a plurality of notifications from a network; assigning a label to each notification, wherein the label indicates a score; storing the notifications assigned with the label in a plurality of storage pools, and allowing each storage pool to store at least one of the plurality of notifications with the same score indicated by the label; and determining whether at least one message stored in one of the plurality of storage pools is sent out according to a storage rule.

In a specific embodiment, the method further includes parsing a text content of each notification to associate a keyword, and assigning the label to each notification based on the keyword.

In a specific embodiment, the method further includes associating the storage rule in response to the tag score of the notification stored in one of the plurality of storage pools.

In a specific embodiment, the method further includes determining whether the storage rule is met based on the accumulation speed of the notification quantity of one of the plurality of storage pools. When the storage rule is met, the notification of one of the plurality of storage pools is issued; when the storage rule is not met, the notification of one of the plurality of storage pools is retained.

The present invention will be more fully described below with reference to the drawings, and specific example embodiments are shown by way of illustration. However, the claimed subject matter may be embodied in many different forms, and thus the construction of the claimed subject matter covered or claimed is not limited to any example embodiment disclosed in this specification; the example embodiments are merely illustrative. Likewise, the present invention is to provide a reasonably broad scope for the claimed subject matter claimed or covered. In addition, for example, the claimed subject matter may be embodied as a method, apparatus, or system. Therefore, the embodiments may take the form of, for example, hardware, software, firmware, or any combination of these (known not to be software).

The term "embodiment" used in this specification does not necessarily refer to the same specific embodiment, and the term "other (some/certain) embodiments" used in this specification does not necessarily refer to different specific embodiments. The purpose is, for example, that the claimed subject matter includes a combination of all or part of the exemplary specific embodiments.

The first figure shows a block diagram of the message processing system (1) of the present invention. The message processing system (1) of the present invention mainly comprises a data classification module (11) and a notification delivery review module (12).

The data classification module (11) is configured to collect data and messages from the monitoring target. The monitoring target is also called the front-end system, and the information processing system (1) of the present invention can be regarded as the back-end system. The front-end system (2) can be composed of different equipment and network elements according to the setting purpose, such as communication and network systems. The front-end system (2) may include one or more detection, sensing and/or recording means to store and send relevant messages, data and/or information in the front-end system (2) to a designated address in the network for storage. The message, data and/or information should include time information so that the front-end system (2) can transmit the message, data and/or information to the network according to the time sequence.

The message, data and/or information may be sent to a network cloud service (3) in the form of an email. For example, the message, data and/or information may be organized into text content and sent to a designated mailbox address. Alternatively, the message, data and/or information may be text content in a so-called system log file, which may be extracted and stored in a network cloud service (3). Known cloud services (3) such as "Amazon Simple Email Service" and "Amazon S3" may be used to store emails and log files from a front-end system (2), respectively.

Once the data classification module (11) receives data and messages (collectively referred to as notifications) from the front-end system (2), the data classification module (11) first classifies the notifications. The data classification module (11) associates a tag from a tag and rule database (13) and associates the tag with a notification. In one embodiment, the data classification module (11) can be configured to have a text recognition means, so that the data classification module (11) parses the text content in a notification and generates a keyword. The data classification module (11) associates a tag from the tag and rule database (13) based on the keyword.

The so-called label is an object that can be identified by a computer. For example, a computer-readable code, a textual content attached to a notification, or a visually presentable interface element, which allows a computer or maintenance personnel to identify whether a notification is tagged or not, that is, whether the notification is graded. In one embodiment, the label indicates a score, so that different notifications can be given the same or different scores, and the difference in scores determines the grade of the notification.

The label and rule database (13) stores customized label categories. Each label category contains multiple customized labels. Each label under a category can correspond to different scores according to a customized rule.

The second figure shows the label classification and label grading. The label and rule database (13) can store labels of multiple custom classifications, such as Class A labels, Class B labels, and Class C labels. Each classification may be related to the type of information or data in the front-end system (2). Each type of label may contain at least two labels, indicating different scores (gradings).

The data classification module (11) can associate a label classification based on the keywords parsed from the text content of a notification, and then determine a label based on whether the text content meets a custom rule. For example, the second figure shows that there are A1, A2 and A3 labels under the A label. When the text content of a notification meets the custom rule about the A label, the data classification module (11) assigns the notification an A1 label. When the text content of a notification partially meets the custom rule about the A label, the data classification module (11) assigns the notification an A2 label. When the text content of a notification does not meet the custom rule about the A label, the data classification module (11) assigns the notification an A3 label. The second figure shows that the A-type label and the B-type label have a consistent three-level classification plan, but the C-type label only has a two-level classification. In another possible embodiment, a notification can be given one or more labels according to the descriptive degree of the text content.

The notification delivery review module (12) is configured to receive the tagged notifications from the data classification module (11). The notification delivery review module (12) temporarily stores each notification in one of a plurality of storage pools according to the score (rating) indicated by its tag.

The third figure shows the first storage pool and the second storage pool, wherein the first storage pool is used to temporarily store multiple notifications with the same mark level of 5 points, and the second storage pool is used to temporarily store multiple notifications with the same mark level of 10 points. As for the notifications marked with 0 points, they can be discarded and not stored in the designated storage pool.

The notification delivery review module (12) decides whether to send the notification in the storage pool. Once the notification in the storage pool is successfully sent, the storage pool is cleared and continues to accumulate tagged notifications. The notification delivery review module (12) calls the storage rule corresponding to the storage pool from the tag and rule database (13) and sends the notification accordingly. As shown in the third figure, the first storage pool is subject to the first storage rule, and the second storage pool is subject to the second storage rule, and the first storage rule and the second storage rule are different. In one embodiment, the storage rule describes the speed or frequency of accumulating the number of notifications in a storage pool, but the present invention is not limited to this.

The notification delivery review module (12) sends the notification from the storage pool to the designated cloud service (4). The notification can be converted into a short message (SMS), application (App) notification, email or communication software, etc., and presented on the appropriate user terminal for maintenance personnel to grasp the classified notification. Notifications that are not transferred to the designated storage pool are considered abandoned notifications and are transferred to the case closure database (5) as shown in the first figure, and are not sent to the terminal device.

Example Description

Take the environment monitoring system of a computer room (such as a server room or an engine room) as an example of a front-end system. The ambient temperature in the computer room is one of the monitoring targets. One or more temperature sensors can be configured in the computer room to generate one or more temperature values in a timely manner. The environmental monitoring system organizes these values into specific text content, such as the text content in an email or log message, and stores it in the cloud service of the network. For example, the text content can describe "the ambient temperature of the computer room is __ degrees", "the ambient temperature of the computer room is greater than __ degrees", "the ambient temperature of the computer room is less than __ degrees" or "the ambient temperature of the computer room is between __ and __ degrees".

The message processing system of the present invention collects these notifications from the cloud service and labels each notification. Once a notification is received, the text content in the notification is parsed to generate one or more keywords, such as "computer room ambient temperature". Then, a tag category related to "computer room ambient temperature" and a tag under the tag category are associated from the tag library of the custom rule.

For example, when the text content in a notification describes "the ambient temperature of the computer room is 30 degrees", the label "the ambient temperature of the computer room" is associated, and a label is determined based on a custom rule (such as 10 points for a temperature greater than 28 degrees), and the indication score is 10 points (high alert). When the text content in a notification describes "the ambient temperature of the computer room is 19 degrees", the label "the ambient temperature of the computer room" is associated, and a label is determined based on a custom rule (such as 8 points for a temperature less than 20 degrees), and the indication score is 8 points (low alert). When the text content in a notification describes "the ambient temperature of the computer room is 25 degrees", the label "the ambient temperature of the computer room" is associated, and a label is determined based on a custom rule (such as 0 points for a temperature between 21 and 27 degrees), and the indication score is 0 points (no alert).

If a notification is labeled as a high alert with a score of 10, the notification is transferred to the 10-point storage pool. If a notification is labeled as a low alert with a score of 8, the notification is transferred to the 8-point storage pool. If a notification is labeled as a no alert with a score of 0, the notification is transferred to the discard database.

Each storage pool is monitored by the notification dispatch review module (12) as shown in the second figure. When a storage pool meets a custom storage rule, the notification dispatch review module (12) sends the multiple notifications currently stored in the storage pool to the background system and clears the storage pool. As shown in the third figure, the first storage pool and the second storage pool can be configured according to 5 points and 10 points. Alternatively, the first storage pool and the second storage pool can be allocated according to more than 10 points and less than 10 points.

When the notification quantity accumulation speed of a storage pool meets a storage rule, the storage pool will issue multiple notifications and clear them. For example, when a 10-minute storage pool meets the storage rule of accumulating three notifications within one minute, the storage pool will issue the three notifications and clear them. When a 5-minute storage pool meets the storage rule of accumulating ten notifications within three minutes, the storage pool will issue the ten notifications and clear them. The starting time of the accumulation time can be the time when the first notification is stored after the storage pool is emptied, but the present invention is not limited to this. If a storage pool fails to meet its storage rules for a period of time, in order to prevent notifications in the storage pool from being pending for too long, the storage pool can issue and clear pending notifications based on a customizable maximum retention time.

Although the foregoing invention has been described in some detail for the sake of clarity of understanding, it will be appreciated that certain changes and modifications may be made within the scope of the claims. Therefore, the above embodiments are intended to be illustrative and not limiting, and the invention is not limited to the details described herein, but may be modified within the scope of the appended claims and their equivalents.

1: Message processing system 11: Data classification module 12: Notification delivery review module 13: Label and rule database 2: Front-end system 3: Cloud service 4: Cloud service 5: Case closure database

The present invention may be further understood with reference to the following drawings and descriptions. Non-limiting and non-exhaustive examples are described with reference to the following drawings. The components in the drawings are not necessarily to actual size; the emphasis is on illustrating the structure and principle.

The first figure is a block diagram of the message processing system of the present invention and its processing flow.

The second figure shows the custom tag categories and the levels of each tag under the category.

FIG. 3 illustrates the difference between the first storage pool and the second storage pool.

1: Information processing system

11: Data classification module

12: Notification delivery review module

13: Tag and rule database

2: Front-end system

3: Cloud services

4: Cloud services

5: Case closing database

Claims (10)

A message processing system comprises: a data rating module configured to receive a notification and associate a tag with the content of the notification according to the content of the notification, wherein the tag indicates a score; and a notification delivery review module configured to store the notifications labeled by the data rating module and send the notifications when a storage rule is met. The message processing system of claim 1, wherein the notification is an email message or a log message. A message processing system as described in claim 1, wherein the data classification module is further configured to associate a keyword based on a text content in the notification, and to associate the tag from a tag database based on the keyword to associate the tag with the text content of the notification. A message processing system as described in claim 1, wherein the notification delivery review module is further configured to specify a storage pool for storing the notification based on a tag assigned to the notification, and the storage pool is configured to store multiple notifications indicated as having the same score by multiple tags. A message processing system as described in claim 4, wherein the notification delivery review module is further configured to send multiple notifications to the storage pool when the storage rule is met. A message processing method includes: receiving a plurality of notifications from a network; assigning a label to each notification, the label indicating a score; storing the labelled notifications in a plurality of storage pools, and allowing each storage pool to store at least one of the plurality of notifications with the same score indicated by the label; and determining whether at least one message stored in one of the plurality of storage pools is sent out according to a storage rule. The message processing method as described in claim 6, wherein the notification is an email message or a log message. The message processing method as described in claim 6 further includes: parsing the text content of each notification to associate a keyword, and assigning the label to each notification based on the keyword. The message processing method as described in claim 6 further includes: associating the storage rule in response to the label score of the notification stored in one of the plurality of storage pools. The message processing method as described in claim 6 further includes: determining whether the storage rule is met based on the accumulation speed of the notification quantity of one of the multiple storage pools; when the storage rule is met, a notification of one of the multiple storage pools is issued; when the storage rule is not met, the notification of one of the multiple storage pools is retained.