CN102510524A - Control system for broadcasting network - Google Patents
Control system for broadcasting network Download PDFInfo
- Publication number
- CN102510524A CN102510524A CN2011103295398A CN201110329539A CN102510524A CN 102510524 A CN102510524 A CN 102510524A CN 2011103295398 A CN2011103295398 A CN 2011103295398A CN 201110329539 A CN201110329539 A CN 201110329539A CN 102510524 A CN102510524 A CN 102510524A
- Authority
- CN
- China
- Prior art keywords
- management
- packet
- node unit
- tackled
- network
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a control system for a broadcasting network, and the system comprises a control center and control node units arranged on various links of the broadcasting network, wherein the control center is used for obtaining the state information of each control node unit and monitoring the state of each control node unit according to the information and is in charge of formulating and updating a monitoring strategy and issuing the monitoring strategy to each control node unit; and the control node units are connected with the control center and are used for providing the state information of the control node units to the control center, receiving the monitoring strategy issued by the control center and monitoring data streams on the link according to the monitoring strategy. The control system disclosed by the invention can be used for monitoring the service and content of the whole NGB (Next Generation Broadcasting), and ensuring the safety of an NGB network.
Description
Technical field
The present invention relates to tv broadcasting technology, relate in particular to a kind of managing and control system of broadcasting and television network.
Background technology
Broadcasting and television network is as the Party and the people most important public opinion propaganda position; It is the important component part of national information infrastructure and modern service industry; Be the most universal information tool of sensible huge numbers of families and information carrier the most easily; Also be to propagate scientific and cultural knowledge, enrich people's cultural life and support the mass media with strongest influence power that New Economy develops; In national economy and social development, have crucial status and effect, therefore, accelerated development broadcasting and television network (Next Generation Broadcasting Network of future generation; Abbreviate as: the inevitable choice that NGB) is the television network broadcast development.
Concerning broadcasting and television network; Is self-evident to network with professional importance of carrying out management and control; And along with the development of NGB; It is professional that broadcasting and television network no longer only carries simple One-to-All Broadcast, and this had both created condition for the development of various value-added services, and also the supervision to business, content and user has provided higher requirement.At present; Each operator defines for what the NGB business also lacked clearly, unifies, can't clearly judge and describe corresponding demand, and because interactive service all-round popularization as yet; The method of service of various places is main with original broadcast service basically, mainly is to continue to use traditional mode.At present; Whole nation DTV supervising platform is made up of a central supervision center and the supervision front end and the information gathering terminal that are located at service platform; Mainly has following function: the monitoring of (1) content: through real-time video passback or video recording picture; The broadcast situation of each channel of reflection directly perceived various places realizes the content monitoring.(2) quality-monitoring:,, realize quality-monitoring to the real-time analysis of local digital television signal technical indicator through the information gathering terminal of front end.(3) safety monitoring: through index analysis, can great broadcast abnormal conditions such as broadcast, break, intercut and report to the police automatically, write down, add up, guarantee to broadcast safety to DTV is bad.(4) subscriber information management: through gathering the user and the authorization message of service platform, can grasp various places DTV translation progress immediately, supervise the operation scope of each platform.
Above-mentioned DTV supervising platform is only applicable to monitor digital TV contents; Be not suitable for the monitoring of IP operation; More can not directly apply to NGB based on the integration of three networks, thus need to set up managing and control system comprehensive, that be applicable to NGB, to realize to the supervision of business among the NGB with content.
Summary of the invention
The present invention provides a kind of managing and control system of broadcasting and television network, in order to realize the supervision to professional among the NGB and content, realizes being applicable to the managing and control system of NGB.
The present invention provides a kind of managing and control system of broadcasting and television network, comprising: the management and control center be deployed in the management and control node unit on the broadcasting and television network multilink;
Said management and control center; Be used to obtain the state information of each said management and control node unit; According to the state of said each said management and control node unit of state information monitoring, and be responsible to define, upgrade monitoring strategies, said monitoring strategies is handed down to each said management and control node unit;
Said management and control node unit; Be connected with said management and control center; Be used for providing the state information of said management and control node unit, receive the said monitoring strategies that said management and control center issues, the data flow on the link of place is carried out policer operation according to said monitoring strategies to said management and control center.
The managing and control system of broadcasting and television network of the present invention; Comprise management and control center and the management and control node unit that is deployed in each aspect of radio and television; By the state of each management and control node unit of management and control center monitoring and be responsible to define, upgrade and issue monitoring strategies; And the management and control node unit that is deployed in each aspect is monitored the data flow of place aspect according to monitoring strategies, thereby realizes the monitoring to business and the content of whole NGB, has guaranteed the safety of NGB network.
Description of drawings
In order to be illustrated more clearly in the embodiment of the invention or technical scheme of the prior art; To do one to the accompanying drawing of required use in embodiment or the description of the Prior Art below introduces simply; Obviously, the accompanying drawing in describing below is some embodiments of the present invention, for those of ordinary skills; Under the prerequisite of not paying creative work, can also obtain other accompanying drawing according to these accompanying drawings.
The structural representation of the managing and control system of the broadcasting and television network that Figure 1A provides for one embodiment of the invention;
The structural representation at the management and control center that Figure 1B provides for one embodiment of the invention;
Fig. 1 C is the structural representation of the management and control node unit that provides of one embodiment of the invention;
The two-stage deployment architecture sketch map at the management and control center that Fig. 2 provides for one embodiment of the invention;
The deployment architecture sketch map of the management and control node unit that Fig. 3 provides for one embodiment of the invention;
The interface sketch map of managing and control system under the two-stage deployment way that Fig. 4 provides for one embodiment of the invention.
Embodiment
For the purpose, technical scheme and the advantage that make the embodiment of the invention clearer; To combine the accompanying drawing in the embodiment of the invention below; Technical scheme in the embodiment of the invention is carried out clear, intactly description; Obviously, described embodiment is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills are not making the every other embodiment that is obtained under the creative work prerequisite, all belong to the scope of the present invention's protection.
The structural representation of the managing and control system of the broadcasting and television network that Figure 1A provides for one embodiment of the invention.Shown in Figure 1A, the managing and control system of present embodiment comprises: the management and control node unit 12 on management and control center 11 and the multilink that is deployed in broadcasting and television network.
Wherein, broadcasting and television network promptly can be present digital tv network, also can be based on the NGB of the integration of three networks.The multilink of broadcasting and television network mainly is meant the crucial link on each aspect of broadcasting and television network.That is to say that broadcasting and television network can be at its each aspect deploy management and control node unit 12.
Wherein, management and control center 11 is connected with each management and control node unit 12, is used to obtain the state information of each management and control node unit 12, according to the state of each management and control node unit 12 of state information monitoring that obtains.Management and control center 11 also is responsible to define, upgrades monitoring strategies, and is responsible for monitoring strategies is handed down to each management and control node unit 12.
Management and control node unit 12 is used for providing to management and control center 11 state information of management and control node unit 12, receives the monitoring strategies that management and control center 11 issues, and according to monitoring strategies the data flow on the management and control node unit 12 place links is carried out policer operation.
The managing and control system of the broadcasting and television network of present embodiment; Through disposing the management and control center and at each aspect deploy management and control node unit of broadcasting and television network; Formulate, upgrade monitoring strategies and monitoring strategies is handed down to the management and control node unit by the management and control center; And the management and control node unit that is deployed on each aspect of broadcasting and television network carries out policer operation according to monitoring strategies to the data flow on the aspect of place, has realized the monitoring to the business and the content of whole broadcasting and television network, guarantees the safety of broadcasting and television network.
Below in conjunction with the realization framework of NGB, the managing and control system that present embodiment is provided further specifies.
In the present embodiment, NGB has three big planes: service plane, network plane and management and control plane.Bearer network on the network plane is divided into metropolitan area network, Access Network and building Intranet according to network layer; Business platform on the service plane is the open platform on bearer network, can insert business dissimilar, different business provider, realizes professional seamless access.Business platform is mainly realized multiple business application and traditional visual broadcast service.The management and control plane is the managing and control system that the embodiment of the invention provides, and it mainly is responsible for content management and control, professional management and control, network management and control, user security management and control etc. corresponding to network plane and service plane.Wherein, the content management and control is responsible for each level content of the whole network is carried out management and control, comprises the access examination to content, the TRANSEC transmission security of content, and content is monitored in real time, in time filters invalid information; Professional management and control is responsible for guaranteeing the whole network service security property, comprises professional access, carries out classification management and control etc. according to type of service; The network management and control is responsible for network state is monitored, and analyzes rational Internet resources strategy, and in time the allotting network resource ensures service security, high-quality transmission; The user security management and control is responsible for guaranteeing user's security, prevents that unauthorized person from carrying out attack through the terminal, guarantees that the whole network user normally enjoys business.
The managing and control system that present embodiment provides is the multi-level system of the whole network of striding, the managing and control system of being made up of management and control center and the management and control node unit that is deployed in each business platform, main service system, main link and main network equipment place that is independent of business platform and bearer network.The managing and control system of present embodiment can be realized management and controls at all levels such as business, network, terminal; The aspects such as self adaptation adjustment that comprise integrated service control, user security control, network measure feedback information mechanism and each aspect guarantee that the secure and trusted of business tine, controlled reliable and the controlled of user behavior of network review.
Based on the framework of managing and control system, the function of managing and control system may be summarized to be following two aspects:
1, to " pipe " of Internet resources: be responsible for the coordination strategy of the whole network resource, it is adaptive that professional and network are carried out bidirectional optimistic.Promptly adjust the bearing capacity of network according to the variation of business conduct; According to the change notification business platform of network carrying ability, so that it dynamically adjusts service ability and mode; In addition, webmaster detects link when saturated, and the notice managing and control system is handled by managing and control system informing business platform.
2, to " control " of business tine: the whole network transmission content is monitored, filter or stop the transmission of illegal contents immediately, the flame of interception Internet communication, the malicious attack that blocking-up is carried out via network; Business tine is monitored, ensure the business information fail safe of presenting to the user,, in time stop this business, reach the professional broadcast state of control, satisfy of the requirement of broadcasting and TV system for fail safe monitoring under the situation of illegal contents; Through supervision to the terminal, follow the tracks of and the analysis user behavior, to shielding or close, realize objective controlled the reviewing of user behavior by Client-initiated malicious act such as network attack etc.
Be to realize that above-mentioned functions, the managing and control system of present embodiment comprise management and control center that is deployed in front end and the management and control node unit that is deployed in each aspect of NGB, below respectively management and control center and management and control node unit are described in detail.
In the present embodiment, the management and control center mainly has following function:
1, the state that the management and control center can each management and control node unit of remote monitoring.
Concrete, the management and control center can obtain the state information of all management and control node units, and then monitors the state of each management and control node unit according to the state information of each management and control node unit.
A kind of mode of obtaining the state information of management and control node unit comprises: the management and control center is through browser/server (Browser/Server; Abbreviate as: B/S) mode is logined each management and control node unit, and obtains its state information from the management and control node unit, and then realizes the condition monitoring to the management and control node unit.
The mode that another kind obtains the state information of management and control node unit comprises: the management and control node unit initiatively reports the state information of oneself according to preset report cycle; The management and control center receives the state information that the management and control node unit initiatively reports, and then realizes the condition monitoring to the management and control node unit.Whether wherein, report cycle can combine the relevant information of each management and control node unit place aspect to carry out the adaptability setting, what is specially for the report cycle of each management and control node unit, mutually equal, does not all do qualification in the present embodiment.It is 1 minute that present embodiment provides a kind of preferred value of report cycle of each management and control node unit.
Further; In the present embodiment; The management and control center can also be controlled each management and control node unit according to the state of each management and control node unit; For example control each management and control node unit and whether carry out policer operation, for example control each management and control node unit again and a certain data flow is let pass, filtered or operation such as shutoff.
In addition, the management and control center of present embodiment also has the processing request that reception management and control node unit reports, and controls the management and control node unit then and carries out corresponding policer operation.Wherein, The management and control node unit can initiatively report the request of processing to the management and control center when running into situation about can't handle, how to be handled by the decision of management and control center; And issue corresponding process operations instruction to the management and control node unit, carry out policer operation with control management and control node unit.
2, the management and control center is responsible to define and upgrades monitoring strategies, and is responsible for issuing monitoring strategies to each management and control node unit.
In the present embodiment, the management and control center can storing subscriber information and information such as the network state within a period of time, service condition and user behavior.Wherein, information such as above-mentioned user profile, network state, service condition and user behavior are to be provided by business platform, bearer network, OSS etc.In addition, the state information that the management and control node unit is uploaded also can be stored in the management and control center.
The management and control center can be according to the state information of above-mentioned user profile, recent network state, service condition and management and control node unit etc., formulates monitoring strategies.Wherein, the management and control center can be stored the monitoring strategies of making in the policy library into.When above-mentioned various information changed, the management and control center can be upgraded monitoring strategies, for example revised certain monitoring strategies, increases new monitoring strategies or deleted certain monitoring strategies etc.In addition; In order to guarantee that monitoring strategies can adapt with state of current network state, service condition, user profile, management and control node unit etc.; The management and control center also can be preset the update cycle, and when the update cycle arrived, the management and control center was upgraded monitoring strategies.Present embodiment does not limit the concrete numerical value of update cycle, and it can carry out the adaptability setting according to actual application environment.
In this explanation, above-mentioned is two kinds of diverse ways according to information change with according to the operation that the update cycle upgrades monitoring strategies, and wherein a kind of method can be adopted in the management and control center, also can adopt two kinds of methods simultaneously.
In order to make each management and control node unit can in time get access to monitoring strategies, the management and control center can issue the cycle according to preset, regularly the monitoring strategies in the policy database is sent to each management and control node unit.In addition, when monitoring strategies had renewal, the management and control center can send to each management and control node unit with the monitoring strategies after upgrading after upgrading monitoring strategies.Present embodiment does not limit the concrete numerical value in the cycle of issuing, and it can carry out the adaptability setting according to actual application environment.
In addition, the management and control node unit can initiatively send strategy to the management and control center and obtain request, and the management and control center issues monitoring strategies according to the strategy request of obtaining that the management and control node unit sends to the management and control node unit.Wherein, the operation of each management and control node unit active request monitoring strategies is independently of one another, is independent of each other, and the management and control center only need be sent monitoring strategies and got final product to the management and control node unit of active request.
Further, the management and control center of the embodiment of the invention can also have following function:
3, the bearer network of the business platform among management and control center and the NGB, NGB is connected with OSS etc. and carries out information interaction.
In the present embodiment; The management and control center is connected with business platform, bearer network, OSS etc.; Obtain the business state information of business platform, the network state information of bearer network and the user profile of OSS etc. respectively; Information to obtaining is carried out statistical analysis; For business platform and/or bearer network etc. are formulated the resource allocation strategy or generated warning information, and resource allocation strategy or warning information are sent to business platform and/or bearer network etc., carry out service with auxiliary activities platform and/or bearer network.
For example: the management and control center can be that business platform is formulated the bandwidth constraints strategy comprise service operation bandwidth demand and user's incoming end different business etc. according to the above-mentioned information of obtaining.Again for example: the management and control center can also be according to the unusual or saturated information of from bearer network, obtaining such as (for example: the Link State that network management system initiatively reports are unusual or saturated) of Link State; The informing business platform carries out associative operation, guarantees that to greatest extent existing user enjoys normal service.
In addition, the management and control center obtains information such as business state information, network state information and user behavior from business platform, bearer network, OSS etc., formulates monitoring strategies for the management and control center condition is provided.
4, the log information of associative operation is responsible for writing down in the management and control center, and carries out User Recognition, user area identification, traffic identification etc. according to log information, and the realization accident is recalled.
Wherein, associative operation comprises: strategy request, distributing policy etc. are inquired about, received to service condition inquiry, network state; Correspondingly log information comprises: information such as the time that incident takes place, mode of operation, service identification, ID.For example: traffic identification can be carried out according to service identification in the management and control center.Again for example: User Recognition and user area identification can be carried out according to ID in the management and control center.Again for example: the management and control center can also be recalled according to information realization accidents such as incident event, service identification, ID etc.
Based on above-mentioned, present embodiment provides a kind of management and control center to be used to realize the implementation structure of above-mentioned functions, but is not limited to this.Shown in Figure 1B, the management and control center of present embodiment is made up of policy management module 111, statistical analysis module 112, communication adaptation module 113, operating platform 114, information bank 115 and policy library 116.External interface comprises business platform, bearer network, node device and OSS etc.
Wherein, policy management module 111 be responsible for the formulation of monitoring strategies, synchronously, upgrade and carry out.Concrete, policy management module 111 can timing or timely policy synchronization of carrying out the whole network management and control node unit through communication adaptation module 113.Policy management module 111 allows the keeper to require formulation, deletion, update strategy according to reality.In addition, policy management module 111 can also be analyzed canned data in the information bank 115, generates new monitoring strategies, and new monitoring strategies is stored in the policy library 16.Policy management module 111 can receive the processing request that the management and control node unit reports, and allows administrator hand or trigger the execution of monitoring strategies automatically, issues to relevant management and control node unit through communication adaptation module 113 and handles the operation signaling.Wherein, comprise the concrete monitoring strategies that needs the management and control node unit to adopt in the processing operational order.Wherein, monitoring strategies includes, but are not limited to following several kinds: be used for blocking strategy to what the data flow on each link was blocked; Be used for filtering policy that the data flow on each link is filtered; Be used for replacement policy that the data flow on each link is replaced.
Foregoing description a kind of implementation structure and the concrete function of each functional module thereof at present embodiment management and control center, will describe the function of present embodiment management and control node unit below in detail.
The management and control node unit of present embodiment mainly has following function:
1, receives the monitoring strategies that the management and control center issues, and the data flow on the link of place is carried out policer operation according to monitoring strategies.
In the present embodiment, the management and control center monitoring strategies that is handed down to the management and control node unit comprises: block strategy, filtering policy, replacement policy etc.The management and control node unit is monitored the data flow of place on the link, and can directly block, filter detected invalid data stream according to above-mentioned strategy or operation such as replacement.In addition, the management and control node unit of present embodiment also can be notified the management and control center, issues the processing operational order by the management and control center, carries out handled according to handling operational order then.
2, to the management and control center himself state information is provided.
Wherein, the management and control node unit can be regularly or self state information in time initiatively is provided to the management and control center, and the log information of preserving (for example: the time that incident takes place, user profile, business information etc.), and recalling for accident provides foundation.In addition, the management and control node unit can also allow management and control center login and obtain its state information and the log information preserved etc.
Further, the management and control node unit of present embodiment also has following function:
3, whether can directly turn-off link according to the susceptibility decision of accident.
For example: when the accident prone degree was higher, the management and control node unit can directly turn-off link, and then notice management and control center; Otherwise the management and control node unit directly reports the management and control center with accident, issues the processing operational order by the management and control center, carries out the handled operation according to handling operational order then.Wherein, said link is the link that the management and control node unit is monitored, and also is the link of data flow transmission.Close link and mean that data flow can't transmit again.
The management and control node unit and the management and control center of present embodiment are mutual, according to monitoring strategies carry out data stream filtering, block, operation such as replacement, guaranteed the safety of network.
A kind of implementation structure that present embodiment provides the management and control node unit to realize above-mentioned functions, but be not limited to this.Shown in Fig. 1 C, the management and control node unit of present embodiment comprises: network communication module 121, strategy branch storehouse 122, data input module 123, data outputting module 124, Executive Module 125 and data memory module 126.
Strategy divides storehouse 122, is the mirror image of the policy library at management and control center at local management and control node unit, storage be the monitoring strategies of a rule.Monitoring strategies is the matching template that the data flow of specific characteristic is carried out specific operation.Monitoring strategies mainly is divided three classes: filtering policy, block strategy, replacement policy.Wherein, block strategy and be meant that the management and control node unit blocks the stream information coupling of comparing according to blocking in the strategy, when mating successfully, explains to meet and blocks strategy, with the follow-up data bag of abandoning current data packet and this data flow.Filtering policy is meant that the management and control node unit according to the coupling of comparing of the filtration stream information in the filtering policy, when mating successfully, explains to meet filtering policy, with the packet in the deletion coupling.Replacement policy is meant that the management and control node unit according to the coupling of comparing of the replacement stream information in the replacement policy, when mating successfully, explains to meet replacement policy, and the packet in the coupling is replaced with the replacement stream information.
Wherein, All-network data through the management and control node unit at first will get into data input module 123; This data input module 123 is used for that the input data are carried out preliminary treatment and is input to the data of Executive Module 125 with optimization, and related data is stored in the data memory module 126.
Concrete, data input module 123 need carry out preliminary treatment to the input data, according to the Thread Count that Executive Module 125 starts, each thread is formulated the execution pretreatment unit corresponding with it.Each execution pretreatment unit is responsible for each packet and carries out the parameter setting to simplify the operation of Executive Module 125, reduces system-level memory copying, to reach the target of forms data bag single duplication.Pretreatment unit needs the initial pointer alignment of setting data bag in this preprocessing process, and the initial pointer alignment of this packet not only is used to store the initial address of packet, and is in charge of and safeguards a Buffer Pool that is used to store packet.The length of each initial pointer alignment is fixing in initial configuration, forms the operation that circular linked list reduces system's locking and de-locking, improves and carries out efficient.Pretreatment unit is the space storage packet of each allocation of packets fixed length; The advantage of this mode is to reduce the release and the application of memory space; Can effectively utilize simultaneously the memory page management of system; Reduce the generation of memory fragmentation, reduce the switching of memory pages, thereby improve the execution efficient of whole managing and control system.Wherein, the executive capability of Executive Module 125 is to a certain extent by the size decision of the Buffer Pool of packet.
Wherein, All all need pass through data outputting module 124 at last through Executive Module 125 data processed; Data outputting module 124 will be handled data and send on the network through setting up buffer queue, and data outputting module is with relevant data and send record etc. and store in the data memory module 126 simultaneously.The buffer capacity of data outputting module 124 is relevant with the size of the Buffer Pool of packet, to be sent as principle as possible, the data processed bag is sent from the management and control node unit.
Concrete, Executive Module 125 is nucleus modules of node, it carries out the overall performance that efficient will directly influence the management and control node unit.In the present embodiment, Executive Module 125 is carried out CPU for each and is distributed fixing single execution thread that data are handled, and can reduce system thread like this and switch the interruption that produces, and reduces the handover operation in thread space, improves the service efficiency of CPU.Carry out data processing for each execution thread with the mode of chain type serial.In addition, in the present embodiment, three kinds of monitoring strategies can be provided with different spreadabilities; And further the execution flow process of Executive Module 125 is optimized according to spreadability separately; For example: it is maximum to set the spreadability of blocking strategy, secondly is filtering policy, is replacement policy at last; Then when blocking strategy and be performed; To directly skip filtering policy and replacement policy, will directly skip replacement policy when filtering when strategy is performed, and replacement policy can withdraw from just after must executing all replacement policies.
For example: when monitoring strategies only comprises when blocking strategy; The handling process of Executive Module 125 comprises: packet and buffer memory on the link of interception place; The packet of interception is blocked the stream information coupling of comparing in the strategy with blocking, when in the coupling, with the packet of interception and packet other data packet discardings afterwards of interception; In the time of in not mating, the packet of interception and packet other packets afterwards of interception are let pass.
Again for example: block strategy and during filtering policy when monitoring strategies comprises simultaneously; The handling process of Executive Module 125 comprises: packet and buffer memory on the link of interception place; The packet of interception is blocked the stream information coupling of comparing in the strategy with blocking, when blocking stream information in the coupling, with partial data bag and partial data bag other data packet discardings afterwards; When in not mating, blocking stream information; With packet and the filtration stream information in the filtering policy of the interception coupling of comparing, when filtering stream information in the coupling, the packet of tackling is deleted; When in not mating, filtering stream information, the packet of interception and packet other packets afterwards of interception are let pass.
Again for example: when monitoring strategies comprises that simultaneously when blocking strategy, filtering policy and replacement policy, the handling process of Executive Module 125 comprises: partial data bag and storage on the link of interception place, the packet of interception is blocked the stream information coupling of comparing in the strategy with blocking; When blocking stream information in the coupling, with the packet of interception and packet other data packet discardings afterwards of interception, when in not mating, blocking stream information; With packet and the filtration stream information in the filtering policy of the interception coupling of comparing; When filtering stream information in the coupling, with the packet deletion of interception, when in not mating, filtering stream information; With packet and the replacement stream information in the replacement policy of the interception coupling of comparing; When replacing stream information in the coupling,, and export the packet after the replacement with the packet of replacement stream information replacement interception; When not replacing stream information described in the coupling, the packet of interception and packet other packets afterwards of interception are let pass.
Wherein, other packets after the packet of packet and the interception of interception are let pass is meant that other packets with after the packet of the packet of interception and interception export to data outputting module 124, by data outputting module 124 with its output.
Further, in the present embodiment, Executive Module 125 at first carried out CRC (Cyclic Redundancy Check to packet before matching operation that the packet of intercepting is compared; Abbreviate as: CRC), and CRC check through the time, the packet of interception is deciphered, then to the packet matching operation of comparing after the deciphering.In like manner; When judge need packet and the follow-up data bag of interception be let pass after; Executive Module 125 needs earlier the packet of interception to be encrypted, and the data encrypted bag is carried out CRC check, and then the packet that will carry out after the CRC check sends to data outputting module 124.
Wherein, the data memory module 126 of present embodiment can guarantee the sufficiently long data record cycle, and this record cycle can not because data volume is huge, also can guarantee the concurrent ability of read-write of database less than specific size simultaneously with direct determination data library storage space.Data memory module 126 needs to support the inquiry at management and control center and the operation of data sync; The data memory module 126 of uniting all management and control node units forms distributed efficiently large scale database; Completion is to the query capability of data/record; And, possesses the managing and control system of self-learning function with formation for the statistical analysis module at management and control center provides the data support.
By above-mentioned visible, the managing and control system of present embodiment has been realized the monitoring to whole radio network through disposing management and control center and management and control node unit, makes the business, safe controlled of radio network.And the managing and control system of present embodiment and network management system and safety system are not equal to.At first, managing and control system lays particular emphasis on the influence for business of professional self and bearer network, and network management system lays particular emphasis on the network equipment self, though part management and control data need be provided by network management system, only is interface relationship; Secondly, safety system lays particular emphasis on attack protection, the anti-virus aspect of network edge, managing and control system then be on link through service condition is monitored in the monitoring of transmission content, in time take necessary means to guarantee the safety of transmission content.
Further, based on the foregoing description, the managing and control system of present embodiment can comprise multistage management and control center, and upper level management and control center is connected with next stage management and control center.For example: the two-stage deployment way can be adopted in the management and control center, is divided into central management and control center 11a and provincial management and control center 11b, and central management and control center 11a only has one, and that provincial management and control center 11b can have is a plurality of, as shown in Figure 2.
Wherein, The management and control center 11a of central authorities is responsible for the supervision of national cable TV network network; Provincial management and control center 11b be responsible for cable TV network in the region within the jurisdiction supervision and and outer net between mutual supervision; Supervision is the result regularly report to central management and control center 11a, and supports central management and control center 11a to inquire about in real time.The management and control center 11a of central authorities can be through provincial management and control center 11b realization to the supervision of cable TV network inside the province, the content monitoring between each provincial cable TV network.
Further, the deployment of management and control node unit should take into full account the main network technology of NGB and the business service mode is disposed.
NGB adopts the light net key, Ethernet passive optical network (Ethernet Passive Optical Network; Abbreviate as: EPON) combine the ether data through coaxial cable transmission (Ethernet over COAX; Abbreviate as: access way EOC), therefore should take into full account of the support of active passive device for the management and control node unit, consider factors such as access customer number amount.Wherein, the business service mode comprises local service and third party's business.Third party's business has two kinds of access waies: comprise that passage inserts and service inserts.
(1) passage inserts: after the user initiates business, notify the third party service provider by local service operator, third party's service provider through another service link directly and the user set up service, needn't pass through the service platform of local service operator.
(2) service inserts: third party's service provider is built server at the business platform of local service operator in advance, through after the security screening, can treat as the service that local service operator provides.
In conjunction with above-mentioned factor, in the present embodiment, the deployment way of management and control node unit is following:
For local service:
(1) before the descending egress router of business platform (or being called operation system) of broadcasting and television network, disposes the management and control node unit, guarantee to reach the standard grade service security property.
(2) dispose management and control node unit, the service security property that guarantees to get into metropolitan area network before the metropolitan area network downstream ingress router in the bearer network of broadcasting and television network.
(3) dispose the management and control node unit before the ingress router of the Access Network in the bearer network of broadcasting and television network, guarantee the service security property in the Access Network.
(4) for the business of distributed deployment, before distributed service platform egress router, dispose the management and control node unit, guarantee the fail safe of distributed service platform downlink business.
(5) under the access way of EPON+EOC, large scale cut-in convergent route (Access Convergence Router; Abbreviate as: ACR) decurrence mouth and optical line terminal (Optical Line Terminal; Abbreviate as: prolong mouth OLT) and can dispose the management and control node unit, but corresponding management and control scope is different, if under ACR, dispose; Then may start a leak to the network the OLT by ACR; Prolong oral area administration management and control node unit on the OLT so be chosen in, both can detect the up-downgoing content that converges by ACR, also can guarantee the safety between ACR and the OLT; Reduce cost, be a kind of preferred deployment way.
Business for third party's access:
(1) the professional end of local third party that inserts for passage is disposed the management and control node unit before its egress router, guarantee the fail safe of downlink business and the legitimacy of up subscriber signaling.
(2) the professional end of third party that inserts for service, owing to disposed the management and control node unit at the local service front end, so do not need other deployment.
For cross-domain business: dispose the management and control node unit before the ingress router before metropolitan area network, guarantee to get into cross-domain service security property and the legitimacy in the net.
In addition, some situation need not disposed the management and control node unit, and for example following situation just need not disposed the management and control node unit:
(1) for building Intranet (below the EOC head end, a building or half building), customer volume is few, and scope is little, does not dispose the management and control node unit.
(2) for passive optical-fiber network (the Passive Optical Network of Access Network; Abbreviate as: PON) (several sub-district), scope is little, and it is low that optical fiber is attacked possibility, can consider not dispose the management and control node unit.
(3) tree structure of Access Network has determined link circuit resource to allocate, so there is not the link allotment in Access Network, warning when only needing resource saturated.
Based on said, Fig. 3 is an example with the managing and control system of metropolitan area network under the NGB framework, has provided the deployment sketch map of management and control node unit.At the metropolitan area network in the city of A shown in Fig. 3 and the metropolitan area network in B city; With A city metropolitan area network is example, below metropolitan area network has mainly comprised several kinds professional: distributed service (accomplishing), local third party SP professional (accomplishing), open business (accomplishing) by open business integration platform by local third party SP business platform by the distributed service platform and with the interactive service of B city professional (accomplishing) by B city business platform.In addition, in Fig. 3, also show router, core router, convergence router and, OLT, optical node (Optical Network Unit; Abbreviate as: ONU), access device such as EOC head end.The deployment point that 1., 2., 3., 4., 5., 6., 7., 8. is respectively deployment management and control node unit in Fig. 3.The table 1 pair above-mentioned function that each disposes the deployment point of management and control node unit is carried out simple declaration.
Table 1
The interface sketch map of managing and control system under the two-stage deployment way that Fig. 4 provides for one embodiment of the invention.The function of each interface is as shown in table 2 among Fig. 4.
Table 2
Wherein, the function of network communication module in communication adaptation module and the management and control node unit in the just above-mentioned management and control of the function of above-mentioned each interface center.
Present embodiment has been introduced deployment, the interface each other of management and control center and management and control node unit and the function that is realized in detail; Can draw through above-mentioned introduction: the managing and control system of present embodiment has been realized to " pipe " of Internet resources with to " control " of business tine; Realized coordination strategy to the whole network resource, adaptive to the bidirectional optimistic of professional and network; Realized the transmission of instant filtration or obstruction illegal contents, the flame of interception Internet communication, the malicious attack that blocking-up is carried out via network; Through monitoring to business tine, ensured the business information fail safe of presenting to the user, monitoring under the situation of illegal contents, in time stop this business, reach the professional broadcast state of control, satisfy of the requirement of broadcasting and TV system for fail safe; Through supervision to the terminal, follow the tracks of and the analysis user behavior, to shielding or close, realized objective controlled the reviewing of user behavior by Client-initiated malicious act such as network attack etc.
One of ordinary skill in the art will appreciate that: all or part of step that realizes said method embodiment can be accomplished through the relevant hardware of program command; Aforesaid program can be stored in the computer read/write memory medium; This program the step that comprises said method embodiment when carrying out; And aforesaid storage medium comprises: various media that can be program code stored such as ROM, RAM, magnetic disc or CD.
What should explain at last is: above embodiment is only in order to explaining technical scheme of the present invention, but not to its restriction; Although with reference to previous embodiment the present invention has been carried out detailed explanation, those of ordinary skill in the art is to be understood that: it still can be made amendment to the technical scheme that aforementioned each embodiment put down in writing, and perhaps part technical characterictic wherein is equal to replacement; And these are revised or replacement, do not make the scope of the essence disengaging various embodiments of the present invention technical scheme of relevant art scheme.
Claims (13)
1. the managing and control system of a broadcasting and television network is characterized in that, comprising: the management and control center be deployed in the management and control node unit on the broadcasting and television network multilink;
Said management and control center; Be used to obtain the state information of each said management and control node unit; According to the state of said each said management and control node unit of state information monitoring, and be responsible to define, upgrade monitoring strategies, said monitoring strategies is handed down to each said management and control node unit;
Said management and control node unit; Be connected with said management and control center; Be used for providing the state information of said management and control node unit, receive the said monitoring strategies that said management and control center issues, the data flow on the link of place is carried out policer operation according to said monitoring strategies to said management and control center.
2. the managing and control system of broadcasting and television network according to claim 1 is characterized in that, said monitoring strategies comprises following arbitrary strategy or its combination in any:
Be used for blocking strategy to what the data flow on each link was blocked;
Be used for filtering policy that the data flow on each link is filtered;
Be used for replacement policy that the data flow on each link is replaced.
3. the managing and control system of broadcasting and television network according to claim 2; It is characterized in that; When said monitoring strategies comprises saidly when blocking strategy, said management and control node unit specifically is used to tackle the packet on the link of place, the packet of being tackled and said is blocked block the stream information coupling of comparing in the strategy; When in the coupling, with other data packet discardings after packet of being tackled and the packet tackled; When in the coupling not, other packets after packet of being tackled and the packet tackled are let pass.
4. the managing and control system of broadcasting and television network according to claim 2; It is characterized in that; When said monitoring strategies comprises the said strategy that blocks when the said filtering policy, said monitor node unit specifically is used to tackle the packet that belongs on the link, the packet of being tackled and said is blocked block the stream information coupling of comparing in the strategy; When described in the coupling when blocking stream information, with other data packet discardings after packet of being tackled and the packet tackled;
When not described in the coupling when blocking stream information,, when the stream information of filtration described in the coupling, the packet of being tackled is deleted the coupling of comparing of the filtration stream information in the packet of being tackled and the said filtering policy; When not filtering stream information described in the coupling, other packets after packet of being tackled and the packet tackled are let pass.
5. the managing and control system of broadcasting and television network according to claim 2; It is characterized in that; When said monitoring strategies comprises saidly when blocking strategy, said filtering policy and said replacement policy, said management and control node unit specifically is used to tackle the packet on the link of place, the packet of being tackled and said is blocked block the stream information coupling of comparing in the strategy; When described in the coupling when blocking stream information, with other data packet discardings after packet of being tackled and the packet tackled;
When not described in the coupling when blocking stream information,, when the stream information of filtration described in the coupling, the packet of being tackled is deleted the coupling of comparing of the filtration stream information in the packet of being tackled and the said filtering policy;
When not filtering stream information described in the coupling; With the coupling of comparing of the replacement stream information in packet of being tackled and the said replacement policy; When the stream information of replacement described in the coupling, replace the packet of being tackled with said replacement stream information, and the packet after the output replacement; When replacement described in the coupling not during stream information, other packets after packet of being tackled and the packet tackled are let pass.
6. according to the managing and control system of claim 3 or 4 or 5 described broadcasting and television networks; It is characterized in that; Said management and control node unit is more concrete is used for according to the preset interception cycle or in real time the data flow on the link of place is tackled, and obtains the packet of being tackled.
7. according to the managing and control system of claim 3 or 4 or 5 described broadcasting and television networks; It is characterized in that; Said management and control node unit also is used for comparing before the coupling at the stream information that blocks that the packet of being tackled and said is blocked strategy, and the packet of being tackled is carried out CRC CRC, and when CRC check is passed through; Packet to being tackled is deciphered; And before other packets after packet of being tackled and the packet tackled are let pass, the packet of being tackled is encrypted, and after encryption, the packet of being tackled is carried out CRC check.
8. according to the managing and control system of each described broadcasting and television network of claim 1-5; It is characterized in that; Said management and control center also with said broadcasting and television network in business platform, bearer network and OSS be connected; Be used to obtain the user profile of the network state information and the said OSS of the business state information of said business platform, said bearer network; And the network state information of the business state information of said business platform, said bearer network and the user profile of said operational support system, OSS carried out statistical analysis, generate warning information, and said warning information is sent to said business platform and/or said bearer network.
9. according to the managing and control system of each described broadcasting and television network of claim 1-5, it is characterized in that said management and control center specifically is used to login each said management and control node unit, obtain the said state information of each said management and control node unit; Perhaps,
Said management and control center specifically is used to receive the said state information that each said management and control node unit initiatively reports according to preset report cycle.
10. according to the managing and control system of each described broadcasting and television network of claim 1-5, it is characterized in that said management and control center issues the cycle, initiatively sends said monitoring strategies to said management and control node unit after upgrading said monitoring strategies or according to preset.
11. managing and control system according to each described broadcasting and television network of claim 1-5; It is characterized in that; Said management and control node unit specifically is used for sending strategy to said management and control center and obtains request, and receives the said management and control center said monitoring strategies that the request of obtaining issues according to said strategy;
Said management and control center specifically is used to receive the strategy that said management and control node unit sends and obtains request, and the request of obtaining issues said monitoring strategies to said management and control node unit according to said strategy.
12. managing and control system according to each described broadcasting and television network of claim 1-5; It is characterized in that, before the metropolitan area network downstream ingress router before said management and control node unit specifically is deployed in the descending egress router of business platform of said broadcasting and television network, in the bearer network of said broadcasting and television network and before the Access Network ingress router in the bearer network of said broadcasting and television network; Perhaps
Before said management and control node unit specifically is deployed in the professional egress router of holding of third party of said broadcasting and television network; Perhaps
Before said management and control node unit specifically is deployed in the ingress router of the metropolitan area network in the bearer network of said broadcasting and television network.
13. the managing and control system according to each described broadcasting and television network of claim 1-5 is characterized in that, comprises multistage management and control center;
Wherein, upper level management and control center is connected with next stage management and control center.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201110329539.8A CN102510524B (en) | 2011-10-26 | 2011-10-26 | Control system for broadcasting network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201110329539.8A CN102510524B (en) | 2011-10-26 | 2011-10-26 | Control system for broadcasting network |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102510524A true CN102510524A (en) | 2012-06-20 |
| CN102510524B CN102510524B (en) | 2014-09-03 |
Family
ID=46222571
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201110329539.8A Active CN102510524B (en) | 2011-10-26 | 2011-10-26 | Control system for broadcasting network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102510524B (en) |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102946545A (en) * | 2012-11-22 | 2013-02-27 | 上海文广互动电视有限公司 | 3-dimensional (3D) integration broadcast platform of television |
| CN103218361A (en) * | 2012-01-19 | 2013-07-24 | 宇龙计算机通信科技(深圳)有限公司 | Method and device for controlling browser window |
| CN104796770A (en) * | 2015-04-07 | 2015-07-22 | 广东省广播电视网络股份有限公司中山分公司 | Radio and television full-service three-level diagnostic method and safety broadcasting service system |
| CN105025006A (en) * | 2015-06-09 | 2015-11-04 | 南京联成科技发展有限公司 | An active information safety operation platform |
| CN108882009A (en) * | 2018-06-27 | 2018-11-23 | 广东省新闻出版*** | A kind of television supervising system based on the integration of three networks |
| CN109167953A (en) * | 2018-09-29 | 2019-01-08 | 视联动力信息技术股份有限公司 | Terminal Alert method and apparatus |
| CN109271395A (en) * | 2018-09-11 | 2019-01-25 | 南京轨道交通***工程有限公司 | Extensive real time data for comprehensive monitoring system updates delivery system and method |
| CN109379448A (en) * | 2018-12-27 | 2019-02-22 | 深圳市网心科技有限公司 | A kind of file distribution dispositions method, device, electronic equipment and storage medium |
| CN111431762A (en) * | 2020-03-17 | 2020-07-17 | 中国人民解放军国防科技大学 | Wireless network state monitoring and displaying system |
| CN113490019A (en) * | 2021-07-27 | 2021-10-08 | 上海建晖信息科技有限公司 | Management and control system of broadcast television network |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1452398A (en) * | 2002-04-12 | 2003-10-29 | 国家广播电影电视总局广播科学研究院 | Remote cable television monitoring method |
| CN101489152A (en) * | 2009-02-26 | 2009-07-22 | 广州杰赛科技股份有限公司 | Television network monitoring system and monitoring method thereof |
| CN101540868A (en) * | 2009-02-13 | 2009-09-23 | 广州杰赛科技股份有限公司 | Monitoring system of HFC television network |
| CN101605066A (en) * | 2009-04-22 | 2009-12-16 | 网经科技（苏州）有限公司 | Telecommunication network behavior method for real-time monitoring based on multilayer data interception |
-
2011
- 2011-10-26 CN CN201110329539.8A patent/CN102510524B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1452398A (en) * | 2002-04-12 | 2003-10-29 | 国家广播电影电视总局广播科学研究院 | Remote cable television monitoring method |
| CN101540868A (en) * | 2009-02-13 | 2009-09-23 | 广州杰赛科技股份有限公司 | Monitoring system of HFC television network |
| CN101489152A (en) * | 2009-02-26 | 2009-07-22 | 广州杰赛科技股份有限公司 | Television network monitoring system and monitoring method thereof |
| CN101605066A (en) * | 2009-04-22 | 2009-12-16 | 网经科技（苏州）有限公司 | Telecommunication network behavior method for real-time monitoring based on multilayer data interception |
Non-Patent Citations (1)
| Title |
|---|
| 牛妍华，万倩，崔竞飞: "基于运营模型的管控体系功能分析", 《广播与电视技术》, no. 7, 31 July 2011 (2011-07-31), pages 149 - 151 * |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103218361A (en) * | 2012-01-19 | 2013-07-24 | 宇龙计算机通信科技(深圳)有限公司 | Method and device for controlling browser window |
| CN102946545A (en) * | 2012-11-22 | 2013-02-27 | 上海文广互动电视有限公司 | 3-dimensional (3D) integration broadcast platform of television |
| CN104796770A (en) * | 2015-04-07 | 2015-07-22 | 广东省广播电视网络股份有限公司中山分公司 | Radio and television full-service three-level diagnostic method and safety broadcasting service system |
| CN105025006A (en) * | 2015-06-09 | 2015-11-04 | 南京联成科技发展有限公司 | An active information safety operation platform |
| CN105025006B (en) * | 2015-06-09 | 2018-04-17 | 南京联成科技发展股份有限公司 | A kind of positive information safety operation and maintenance platform |
| CN108882009A (en) * | 2018-06-27 | 2018-11-23 | 广东省新闻出版*** | A kind of television supervising system based on the integration of three networks |
| CN109271395A (en) * | 2018-09-11 | 2019-01-25 | 南京轨道交通***工程有限公司 | Extensive real time data for comprehensive monitoring system updates delivery system and method |
| CN109167953A (en) * | 2018-09-29 | 2019-01-08 | 视联动力信息技术股份有限公司 | Terminal Alert method and apparatus |
| CN109379448A (en) * | 2018-12-27 | 2019-02-22 | 深圳市网心科技有限公司 | A kind of file distribution dispositions method, device, electronic equipment and storage medium |
| CN109379448B (en) * | 2018-12-27 | 2022-06-10 | 深圳市网心科技有限公司 | File distributed deployment method and device, electronic equipment and storage medium |
| CN111431762A (en) * | 2020-03-17 | 2020-07-17 | 中国人民解放军国防科技大学 | Wireless network state monitoring and displaying system |
| CN113490019A (en) * | 2021-07-27 | 2021-10-08 | 上海建晖信息科技有限公司 | Management and control system of broadcast television network |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102510524B (en) | 2014-09-03 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102510524B (en) | Control system for broadcasting network | |
| CN109831327B (en) | IMS full-service network monitoring intelligent operation and maintenance support system based on big data analysis | |
| CN106375384B (en) | The management system and control method of image network flow in a kind of virtual network environment | |
| CN104063473B (en) | A kind of database audit monitoring system and its method | |
| CN101754221B (en) | Data transmission method between heterogeneous systems and data transmission system | |
| CN103152352B (en) | A kind of perfect information security forensics monitor method based on cloud computing environment and system | |
| CN111752795A (en) | Full-process monitoring alarm platform and method thereof | |
| CN101764768A (en) | Data security transmission system | |
| US20150281176A1 (en) | Method And Technique for Automated Collection, Analysis, and Distribution of Network Security Threat Information | |
| CN109391613A (en) | A kind of intelligent substation method for auditing safely based on SCD parsing | |
| CN102625146B (en) | Outdoor electronic information simultaneous broadcast network system | |
| CN103096042A (en) | Video monitoring system | |
| CN101004848A (en) | Monitoring alarm system with multiple cascading networks | |
| CN104168144A (en) | Method for auditing SDN | |
| CN103716232B (en) | D5000-based video linkage security gateway of electric power system | |
| CN109558366A (en) | A kind of firewall based on multiple processor structure | |
| CN102377602A (en) | Data stream processing method and system | |
| CN105490831A (en) | Internet data center/Internet service provider (IDC/ISP) information security management system and information management method thereof | |
| CN202475667U (en) | Outdoor electronic information broadcast network system | |
| CN106027466A (en) | Identity card cloud authentication system and card reading system | |
| CN103747472B (en) | Noninductive tandem system on basis of circuit switch domain No.7 signaling network | |
| CN104853002A (en) | DNS resolution system and DNS resolution method based on SDN | |
| CN102630042A (en) | Delivery and monitoring system for outdoor electronic information broadcast network | |
| CN206820776U (en) | A kind of comprehensive safety monitoring analytical equipment based on network traffics | |
| CN110049015A (en) | Network security situation sensing system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| C56 | Change in the name or address of the patentee | ||
| CP03 | Change of name, title or address |
Address after: 100866 Beijing, Xicheng District, No. 2 Fuxing Street Patentee after: National news publishes broadcast research institute of General Bureau of Radio, Film and Television Address before: 100045 Beijing, Xicheng District, No. 2 Fuxing Street Patentee before: Academy of Broadcast Sciences, National Broadcast Movie Television Bureau |