CN114531662A - Terminal intelligent access authentication management method based on electric power 5G virtual private network - Google Patents

Abstract

The invention provides a terminal intelligent access authentication management method based on an electric power 5G virtual private network, which specifically comprises the following steps: after the terminal path label of the power terminal is authenticated, classifying to obtain a plurality of authenticated power sets; classifying all power terminals which are accessed by a target network slice at a service side to obtain a connected power set; sequencing the power terminals in the connected power set and the authentication power set to obtain a fusion management set; dividing the fusion management set based on preset load information and attribute information of each power terminal in the fusion management set to obtain a first management set and a second management set; taking other target network slices as transit network slices, and taking a target service side corresponding to the transit network slices as a transit service side; and connecting the electric power terminal in the first management set with a target service side through the target network slice, and connecting the electric power terminal in the second management set with the target service side through the transit network slice and the transit service side.

Description

Terminal intelligent access authentication management method based on electric power 5G virtual private network

Technical Field

The invention relates to the technical field of 5G data processing, in particular to a terminal intelligent access authentication management method based on a power 5G virtual private network.

Background

The power communication network is used as an important infrastructure for supporting the development of the intelligent power grid, and the safe, reliable, economic and efficient operation of the power grid of various power services is guaranteed. Along with the construction of a multi-element fused high-elasticity power grid in the form of an energy internet, mass equipment needs to be monitored or controlled in real time, information is frequently interacted in two directions, the existing optical fiber coverage construction cost is high, the operation and maintenance difficulty is high, and the wireless communication technology needs to be urgently integrated into the construction of the high-elasticity power grid.

The network slice based on the virtualization technology is one of 5G communication key technologies, can realize end-to-end physical and logical isolation in an operator network, supports mMTC, eMBB and URLLC scenes, has communication characteristics highly matched with power requirements, and provides an effective means for safe, flexible and reliable access of various services of a power grid. The 5G system introduces a network slicing technology, and establishes the electric power 5G virtual private network through unified management of network resources, so that mutual isolation among electric power service bearers can be realized, and different network performance requirements of different services can be met.

The power grid services are various, different service scenes have large differences in requirements for safety isolation, network bandwidth, time delay, reliability and the like, higher requirements are provided for management and control of terminals along with access of scheduling control services, power communication terminal equipment manufacturers are numerous, the safety access and the measurable and controllable management of various terminals of the power grid are difficult to effectively support, meanwhile, wireless signals are main factors influencing the service bearing capacity of the wireless network, and good terminal wireless signal quality can ensure that the performance of a channel can meet the service bearing requirements.

Different power terminals are provided in a power grid, and the data volume and the instantaneity requirements transmitted by the different power terminals are different, so a technical scheme is urgently needed, and after the terminal is accessed to a power 5G virtual private network, the attribute of the terminal is authenticated and then different network transmission channels based on network slices are allocated.

Disclosure of Invention

The embodiment of the invention provides a terminal intelligent access authentication management method based on an electric power 5G virtual private network, which can authenticate the attribute of a terminal so as to allocate different network transmission channels based on network slices, can allocate among a plurality of target network slices and ensure the stable transmission of data.

In a first aspect of the embodiments of the present invention, a method for terminal intelligent access authentication management based on a power 5G virtual private network is provided, where the 5G virtual private network includes a service side and a plurality of target service sides, the service side and the target service side are connected by a network slice, and authentication management is performed on a terminal received by the target service side through the following steps, specifically including:

acquiring terminal path labels of power terminals accessed to a service side in batch at the current moment, classifying the terminal path labels of the power terminals after authentication to obtain a plurality of authentication power sets, and obtaining first load information of a target network slice according to terminal attributes of each power terminal in the authentication power sets;

classifying all power terminals accessed to the target network slice at the service side to obtain a connected power set, and obtaining second load information of the target network slice according to terminal attributes of all power terminals in the connected power set;

if the difference between the sum of the first load information and the second load information and the preset load information of the target network slice is smaller than a preset value, sorting the power terminals in the connected power set and the authentication power set according to the terminal attributes to obtain a fusion management set;

dividing the fusion management set based on preset load information and attribute information of each power terminal in the fusion management set to obtain a first management set and a second management set;

if the redundant load information exists in other target network slices, taking the other target network slices as transit network slices, and taking a target service side corresponding to the transit network slices as a transit service side;

and connecting the electric power terminal in the first management set with a target service side through the target network slice, and connecting the electric power terminal in the second management set with the target service side through the transit network slice and the transit service side.

Optionally, in a possible implementation manner of the first aspect, in the step of obtaining terminal path tags of power terminals accessed to the service side in batch at the current time, obtaining a plurality of authentication power sets by classifying the terminal path tags of the power terminals after authenticating the terminal path tags, and obtaining the first load information of the target network slice according to the terminal attribute of each power terminal in the authentication power sets, the method specifically includes:

acquiring a target server of each terminal path label in batch access electric power terminals, and acquiring a white list issued by the target server in advance;

authenticating the power terminal with the terminal path label as the target service end based on the white list, classifying the corresponding power terminal into authentication power sets if the white list passes the authentication, wherein each authentication power set corresponds to one target service end;

and counting the transmission load information of the terminal attribute information of each power terminal in the authentication power set to obtain first load information.

Optionally, in a possible implementation manner of the first aspect, if a difference between a sum of the first load information and the second load information and preset load information of the target network slice is smaller than a preset value, the step of sorting power terminals in the connected power set and the authenticated power set according to terminal attributes to obtain a fusion management set specifically includes:

acquiring transmission weight value information of terminal attributes of each power terminal in a connected power set and an authentication power set;

performing primary descending sorting on all power terminals in the connected power set and the authentication power set based on the transmission weight value information to obtain a primary sorting result;

sequentially extracting all power terminals with the same transmission weight value information, and performing secondary ascending sorting according to the transmission load information to obtain a fusion management set;

the sum of the first load information and the second load information is calculated by the following formula,

wherein the content of the first and second substances,

is the sum of the first load information and the second load information,

certifying the first in the set of power for statistics

The transmission load information of the individual power terminals,

to statistically authenticate the upper limit values of the power terminals in the power set,

is the first in the connected power set

The transmission load information of the individual power terminals,

the upper limit value of the power terminal in the connected power set.

Optionally, in a possible implementation manner of the first aspect, in the step of dividing the fusion management set into the first management set and the second management set based on preset load information and attribute information of each power terminal in the fusion management set, the method specifically includes:

acquiring transmission load information in attribute information of each power terminal in the fusion management set;

calculating the sum of all front-mounted power terminals of the power terminals at each position in the fusion management set and the transmission load of the front-mounted power terminals to obtain the sum of the front-mounted loads of each power terminal;

determining an electric power terminal corresponding to the front load sum closest to the preset load information as a separation electric power terminal;

and counting all the power terminals behind the separated power terminals in the fusion management set to obtain a second management set.

Optionally, in a possible implementation manner of the first aspect, if it is determined that redundant load information exists in other target network slices, the step of taking the other target network slices as transit network slices and taking a target service side corresponding to the transit network slices as a transit service side specifically includes:

if the other target network slices with redundant load information are judged to be multiple, acquiring the redundant load information of each target network slice;

determining other target network slices corresponding to the closest redundant load information which is larger than the sum of the transmission load information of all the power terminals in the second management set as transit network slices;

and taking the target service side corresponding to the transit network slice as a transit service side.

Optionally, in a possible implementation manner of the first aspect, the method further includes:

if the sum of the transmission load information of all the power terminals in the second management set is larger than the redundant load information of all the target network slices;

determining a plurality of standby network slices in a plurality of target network slices according to network system requirements, obtaining redundancy proportion data quantity of each standby network slice according to redundancy load information of each standby network slice, and taking the standby network slices with the redundancy proportion data quantity larger than preset proportion data as transit network slices;

distributing all the power terminals in the second management set according to the redundant proportion data volume of each transfer network slice so as to enable each transfer network slice to distribute the power terminals with different proportion load volumes;

and controlling all the power terminals in the second management set to be respectively connected with the corresponding transit network slices and the transit service sides.

Optionally, in a possible implementation manner of the first aspect, the method further includes:

the method specifically includes the steps of obtaining redundancy proportion data volume of each candidate network slice according to a plurality of candidate network slices in a plurality of target network slices and redundancy load information of each candidate network slice, and using the candidate network slices with the redundancy proportion data volume larger than preset proportion data as transit network slices:

acquiring a network system, signal receiving power information, signal to interference ratio information and redundant ratio data volume of each target network slice in a preset time period to obtain first input data;

inputting the first input data into a pre-trained first calculation model, and calculating a slice evaluation value of each target network slice through the first calculation model;

and acquiring all target network slices with the slice evaluation values larger than the first preset value as alternative network slices.

Optionally, in a possible implementation manner of the first aspect, in the step of inputting the first input data into a first computation model trained in advance, and calculating a slice evaluation value of each target network slice through the first computation model, the method specifically includes:

the first calculation model compares the signal receiving power information and the signal-to-interference ratio information in the preset time period with reference receiving power information and reference signal-to-interference ratio information respectively and then performs weighting processing to obtain a first signal trend value;

the first calculation model compares the redundancy proportion data quantity with preset proportion data and then performs weighting processing to obtain a first redundancy trend value;

the first calculation model determines a first offset coefficient and a second offset coefficient according to the network system;

the first calculation model calculates a slice evaluation value of each target network slice by weighting and summing a first signal trend value and a first redundancy trend value of each target network slice through a first offset coefficient and a second offset coefficient, wherein the first offset coefficient is larger than the second offset coefficient;

optionally, in a possible implementation manner of the first aspect, in the step of determining the first offset coefficient and the second offset coefficient according to the network type, the method specifically includes:

the network standard is one or more of 5G-SA/NSA, 4G-LTE and 2/3G-GSM/Wcdma;

each network system has a first offset coefficient and a second offset coefficient which are preset corresponding to the network system.

Optionally, in a possible implementation manner of the first aspect, the method further includes:

displaying the output plurality of slice evaluation values;

receiving modification data of a plurality of output slice evaluation values from a user to obtain modified slice evaluation values;

obtaining an average modification value from the modified slice evaluation value, the slice evaluation value before modification and the total number of the slice evaluation values;

in a second aspect of the embodiments of the present invention, a storage medium is provided, in which a computer program is stored, which, when being executed by a processor, is adapted to carry out the method according to the first aspect of the present invention and various possible designs of the first aspect of the present invention.

The invention provides a terminal intelligent access authentication management method based on an electric power 5G virtual private network, which can classify electric power terminals accessed in batches to obtain a plurality of authentication electric power sets, so that the electric power terminals accessed in batches can determine corresponding target network slices according to different target service sides corresponding to the electric power terminals. According to the invention, after the newly accessed electric power terminal is authenticated, the newly accessed electric power terminal is preferentially distributed to the corresponding target network slice for data transmission, if the target network slice cannot transmit the loads of all the electric power terminals, the transfer network slice is determined in a plurality of target network slices, and the loads in the second management set are transferred on the basis of the transfer network slice, so that the method is fused on the basis of the traditional end-to-end transmission, and when the load of a certain target network slice is more, the data can be transmitted by means of other transfer network slices and end-to-end transmission behaviors, and the corresponding electric power data can be rapidly and stably transmitted.

According to the technical scheme provided by the invention, when the first management set and the second management set are obtained, the sorting is carried out according to the attribute information of all the electric power terminals, and the electric power terminals are determined to be separated according to the attribute information of all the electric power terminals, so that the sum of the loads of all the electric power terminals in the first management set obtained by the invention is smaller than the preset load, the situations that a certain target network slice is excessively clung and crowded are avoided, and the data transmission speed of each target network slice is ensured.

According to the technical scheme provided by the invention, when the transit network slices are determined, two transit network slice determination modes are provided, 1 transit network slice can be determined through the determination mode of the 1 st transit network slice, and the data transmitted by the power terminals in all the second management sets are transmitted through the 1 st transit network slice, so that the data dispersibility can be reduced, the subsequent target service side can be focused more when receiving the data of the transit service side, and the connection relation of data transmission is not established by the different transit service sides. When no other network slice can completely transmit the data transmitted by the power terminal in the second management set and bear corresponding load, the redundancy proportion data volume of each alternative network slice is obtained, and a plurality of corresponding transit network slices are determined according to the corresponding redundancy proportion data volume, so that the power data transmitted by the power terminal in the second management set can be cooperatively transmitted by the plurality of transit network slices, and the target service side needs to establish a data transmission relationship with the plurality of transit service sides for data transmission.

According to the technical scheme provided by the invention, when the target network slices are screened, the first calculation model is used for considering a plurality of dimensions such as network standard, signal receiving power information, signal-to-interference ratio information and redundancy proportion data volume, and then the target network slices with higher comprehensive performance are selected from the target network slices to be selected as corresponding transit network slices. In addition, when the slice evaluation value is calculated, variable parameters of different dimensions have different weights, so that the method has corresponding weight for a certain dimension during calculation, the calculated slice evaluation value is more suitable for the current calculation scene, and further, parameters in all aspects are more suitable for being used as the target network slice of the transit network slice.

Drawings

Fig. 1 is a schematic view of a first application scenario of the technical solution provided by the present invention;

fig. 2 is a flowchart of a first embodiment of a terminal intelligent access authentication management method based on a power 5G virtual private network;

fig. 3 is a flowchart of a second embodiment of a terminal intelligent access authentication management method based on a power 5G virtual private network;

fig. 4 is a schematic view of a second application scenario of the technical solution provided by the present invention;

fig. 5 is a schematic diagram of a third application scenario of the technical solution provided by the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

The terms "first," "second," "third," "fourth," and the like in the description and in the claims, as well as in the drawings, if any, are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used is interchangeable under appropriate circumstances such that the embodiments of the invention described herein are capable of operation in sequences other than those illustrated or described herein.

It should be understood that, in various embodiments of the present invention, the sequence numbers of the processes do not mean the execution sequence, and the execution sequence of the processes should be determined by the functions and the internal logic of the processes, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

It should be understood that in the present application, "comprising" and "having" and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

It should be understood that, in the present invention, "a plurality" means two or more. "and/or" is merely an association describing an associated object, meaning that three relationships may exist, e.g., a and/or B, may mean: a exists alone, A and B exist simultaneously, and B exists alone. The character "/" generally indicates that the former and latter associated objects are in an "or" relationship. "comprises A, B and C" and "comprises A, B, C" means that A, B, C all comprise, "comprises A, B or C" means comprise one of A, B, C, "comprises A, B and/or C" means comprise any 1 or any 2 or 3 of A, B, C.

It should be understood that in the present invention, "B corresponding to a", "a corresponds to B", or "B corresponds to a" means that B is associated with a, and B can be determined from a. Determining B from a does not mean determining B from a alone, but may be determined from a and/or other information. And the matching of A and B means that the similarity of A and B is greater than or equal to a preset threshold value.

As used herein, "if" may be interpreted as "at … …" or "when … …" or "in response to a determination" or "in response to a detection", depending on the context.

The technical solution of the present invention will be described in detail below with specific examples. The following several specific embodiments may be combined with each other, and details of the same or similar concepts or processes may not be repeated in some embodiments.

As shown in fig. 1, for an application scenario schematic diagram of the technical solution provided by the present invention, a 5G virtual private network includes a service side and a plurality of target service sides, and the service side and the target service side are connected through a network slice (e.g., target network slice 1, target network slice 2, and target network slice 3 in fig. 1). The service side may have a plurality of power terminals, and each target service side (e.g., target service side 1, target service side 2, and target service side 3 in fig. 1) may have a target service side including a corresponding target server (e.g., target server 1, target server 2, and target server 3 in fig. 1), a display device, a processing device, and the like. Different power terminals at the service side can transmit corresponding power data to different target service terminals.

The invention provides a terminal intelligent access authentication management method based on an electric power 5G virtual private network, as shown in fig. 2, the method carries out authentication management on a terminal received by a target service side through the following steps, and specifically comprises the following steps:

step S110, obtaining terminal path labels of batch access electric power terminals of a service side at the current moment, classifying the terminal path labels of the electric power terminals to obtain a plurality of authentication electric power sets after authenticating, and obtaining first load information of a target network slice according to terminal attributes of each electric power terminal in the authentication electric power sets. The service side can be, for example, a substation, a certain power network segment, and the service side has a plurality of power terminals, such as a power distribution column switch, a load control terminal, a voltage monitoring device, a current monitoring device, an automatic inspection robot, and the like. Different power terminals may need to transmit corresponding power data to different service sides, for example, there are monitoring centers, control centers and the like with different dimensions, there may be a control center of a core, an outsourcing control center and the like, and the invention is not limited to the specific category of each service side and the number of power terminals that can be connected.

Each batch-accessed power terminal can preset a terminal path label, all power terminals with the same target service side can be determined through the terminal path labels, then an authentication power set is obtained through classification, first load information of a target network slice is obtained according to terminal attributes of all power terminals in the authentication power set, and the first load information at the moment is total first load information of power equipment newly accessed by each target network slice.

In a possible implementation manner, as shown in fig. 3, the technical solution provided by the present invention specifically includes, in step S110:

step S1101, obtaining a target server of each terminal path label in the batch access power terminal, and obtaining a white list issued by the target server in advance. The service side may first obtain a target server of the terminal path label, and each power terminal may have a target server corresponding to the service terminal, for example, a target server a corresponding to the power terminal a. The target server of each service side sends a white list to the service side, where the white list has lists of all power terminals that can be connected with the corresponding target server, for example, the white list issued by the target server a has a power terminal a.

Step S1102, authenticating the power terminal whose terminal path tag is the target service end based on the white list, and classifying the corresponding power terminal into an authentication power set if the white list passes the authentication, where each authentication power set corresponds to one target service end. The power terminal is authenticated according to the white list sent by each target server, and then the authentication power set corresponding to each target server is obtained. If the white list has a tag that authenticates the power end, then the authentication based on the white list is considered to pass.

Step S1103, counting transmission load information of the terminal attribute information of each power terminal in the authentication power set, to obtain first load information. The invention can count the transmission load information of all the terminal attribute information to obtain the first load information, and the subsequent steps have a specific formula for calculating the first load information.

The first load information may be load information understood to be that the target service side needs to newly add after connecting with the corresponding power device, for the target network slice. The load information may be the amount of data that needs to be transmitted, e.g., per second, that is transmitted.

And step S120, classifying all power terminals accessed to the service side of the target network slice to obtain a connected power set, and obtaining second load information of the target network slice according to terminal attributes of all power terminals in the connected power set.

After the classification of the newly accessed power terminals in steps S1101 to S1103 is completed, the present invention may count the power terminals in which the target network slice is already inserted to obtain the second load information of the target network slice. The second load information may be regarded as a transmission load currently possessed by the target network slice transmitted between the target server and the plurality of power terminals.

And S130, if the difference between the sum of the first load information and the second load information and the preset load information of the target network slice is smaller than a preset value, sorting the power terminals in the connected power set and the authentication power set according to the terminal attributes to obtain a fusion management set.

If the difference between the sum of the first load information and the second load information and the preset load information of the target network slice is larger than a preset value, the sum of the first load information and the second load information is proved to be smaller at the moment and does not exceed the preset load information of the target network slice, so that the target network slice can bear the loads of all power terminals in the connected power set and the authenticated power set at the moment.

If the difference between the sum of the first load information and the second load information and the preset load information of the target network slice is smaller than the preset value, it is proved that the sum of the first load information and the second load information is larger at the moment and possibly exceeds the preset load information of the target network slice, and the preset load information can be preset by an operator according to needs. Therefore, at this time, the coincidence of all the power terminals in the connected power set and the authenticated power set already exceeds the coincidence carrying capacity of the corresponding target network slice, and therefore, the power terminals need to be sorted according to the terminal attributes to obtain a fusion management set.

In a possible implementation manner of the technical solution provided by the present invention, step S130 specifically includes:

and acquiring transmission weight value information of the terminal attribute of each power terminal in the connected power set and the authentication power set. According to the technical scheme provided by the invention, the transmission weight value information of the power terminals is firstly obtained, so that different power terminals can have different attributes, for example, equipment such as a closing switch and a power distribution column switch can be controlled in power transmission, and when power transmission is abnormal, the control type of the switch is required to be correspondingly controlled, so that the equipment such as the closing switch and the power distribution column switch can have the control attributes. The voltage monitoring device, the current monitoring device and other devices can monitor the voltage and the current in the power grid, the monitoring information of the power grid is obtained at the moment, and the power equipment for monitoring the operation of the power grid, such as the voltage monitoring device, the current monitoring device and other devices, has the first monitoring attribute of the power with the first monitoring type. The robot patrols and examines can monitor the environment in the electric wire netting, and the power equipment of patrolling and examining the robot this moment is for having the electric power second monitoring attribute of the second kind of monitoring type. The electrical devices having the control attribute may be more important than the electrical devices having the first monitoring attribute, and the electrical devices having the first monitoring attribute may be more important than the electrical devices having the second monitoring attribute. Each power terminal will have transmission weight value information of the terminal attribute. The greater the importance, the greater the corresponding transmission weight value information.

And performing primary descending sorting on all power terminals in the connected power set and the authentication power set based on the transmission weight value information to obtain a primary sorting result. According to the technical scheme provided by the invention, all the power terminals in all the connected power sets and all the power terminals in the authentication power sets are sorted in a descending order according to the transmission weight value information to obtain a sorting result, so that the equipment accessed by the previous authentication and the equipment accessed by the current authentication can be uniformly sorted according to the importance. The power data transmitted by the power equipment at the front in the primary sorting result has larger importance.

And sequentially extracting all power terminals with the same transmission weight value information, and performing secondary ascending sorting according to the transmission load information to obtain a fusion management set. According to the technical scheme provided by the invention, after a primary sorting result is obtained, all the power terminals with the same transmission weight value information are sorted again according to the transmission load information, the sorting mode at the moment is an ascending mode, the mode can ensure that the power terminals with the same transmission weight value information and smaller load information are arranged at the front positions, and further, when the power terminals for transmission in a target slicing network are determined according to the sorting mode, the power terminals can be selected according to the principle that the transmission weight value information is transmitted in a larger priority mode, and the power terminals are selected according to the principle that the load amount is smaller for the same transmission weight value information.

In one possible implementation, the sum of the first load information and the second load information is calculated by the following formula,

wherein the content of the first and second substances,

is the sum of the first load information and the second load information,

certifying the first in the set of power for statistics

The transmission load information of the individual power terminals,

to statistically authenticate the upper limit values of the power terminals in the power set,

is the first in the connected power set

The transmission load information of the individual power terminals,

the upper limit value of the power terminal in the connected power set.

By passing

First load information can be calculated by

To calculate second load information.

Step S140, dividing the fusion management set based on preset load information and attribute information of each power terminal in the fusion management set to obtain a first management set and a second management set. After the target network slice cannot bear the loads of all the electric power devices in the fusion management set, the fusion management set is divided to obtain a first management set and a second management set, the number of the electric power devices in the first management set and the second management set has a certain relation with preset load information, and if the preset load information is larger, the number of the electric power devices in the first management set is larger.

In a possible implementation manner of the technical solution provided by the present invention, step S140 specifically includes:

and acquiring transmission load information in the attribute information of each power terminal in the fusion management set. According to the technical scheme provided by the invention, the transmission load information of all the power terminals is obtained firstly, and then calculation is carried out according to all the transmission load information.

And calculating the sum of all the front-mounted power terminals of the power terminal at each position in the fusion management set and the transmission load of the front-mounted power terminals to obtain the sum of the front-mounted loads of each power terminal. The power terminal pre-load sum is obtained by calculation at the position of each power terminal, and the power terminal pre-load sum at the corresponding position is obtained, wherein the pre-load sum can be understood as the sum of the power terminal and all transmission loads with priorities larger than that of the power terminal, that is, if the power data of the power terminal needs to be transmitted, the sum of the transmission loads of all data corresponding to the target network slice at the time is transmitted.

And determining the power terminal corresponding to the front load sum closest to the preset load information as a separation power terminal. The invention can obtain the electric power terminal which is smaller than the preset load information and is closest to the sum of the front loads as the separation electric power terminal, namely the separation electric power terminal is used as a demarcation point, and the circuit data transmitted by all the electric power terminals before the separation electric power terminal is transmitted through the corresponding target network slice.

And counting all the power terminals in the fusion management set and in front of the power terminals to obtain a first management set, and counting all the power terminals behind the power terminals in the fusion management set to obtain a second management set. According to the technical scheme provided by the invention, the power terminals and all the power terminals in front of the power terminals are separated to obtain the first management set, and at the moment, the power data transmitted by all the power terminals in the first management set are more important and have higher priority than the power data transmitted by the power terminals in the second management set.

And step S150, if the redundant load information exists in other target network slices, taking the other target network slices as transit network slices, and taking the target service sides corresponding to the transit network slices as transit service sides. According to the technical scheme provided by the invention, as the power circuit data of the power terminals in the second management set cannot be transmitted to the corresponding service side through the corresponding target network slices, the target network slices with redundant load information need to be selected, and the target network slices with redundant load information can be regarded as the target network slices with redundant load information. Therefore, in this case, the target network slice having the redundant load information may be regarded as a relay network slice, and the target service side corresponding to the relay network slice may be regarded as a relay service side, so that the relay transmission of the power data may be performed through the relay network slice and the relay service side (the service side corresponding to the relay service side).

According to the technical scheme provided by the invention, when determining the transit network slice, the transit network slice in the first form is determined through the following steps, and the step S150 specifically comprises the following steps:

and if the other target network slices with redundant load information are judged to be multiple, acquiring the redundant load information of each target network slice. In an actual transmission scenario, one service side may be connected to multiple target service sides through multiple target network slices, where other target network slices are multiple, and a corresponding transit network slice needs to be selected from the multiple target network slices. Therefore, the invention can obtain the redundant load information of each target network slice in other target network slices, and the redundant load information proves that the redundant transmission load is more.

And determining other target network slices which are larger than the sum of the transmission load information of all the power terminals in the second management set and correspond to the closest redundant load information, and using the other target network slices as transit network slices. According to the technical scheme provided by the invention, the target network slice which is larger than the sum of the transmission load information of all the power terminals in the second management set is selected, and the transmission load of the target network slice can meet the requirement that all the power terminals in the second management set carry out data transmission simultaneously, so that other corresponding target network slices are used as the transit network slices, and the number of the transit network slices is only 1.

And taking the target service side corresponding to the transit network slice as a transit service side. At this time, the number of the transit service sides is 1, and as shown in fig. 4, the data transmission link at this time includes two:

the 1 st data transmission link is used for transmitting the power terminals (such as the power terminal 11, the power terminal 12 and the power terminal 1N in fig. 4) in the first management set at the service side to the corresponding target service end through the target network slice value;

the 2 nd data transmission link is that the power terminals (for example, the power terminal 21, the power terminal 22, and the power terminal 2N in fig. 4) in the second management set at the service side transmit to the relay server of the corresponding 1 relay service side through the relay network slice, and transmit the corresponding power data to the target server through the 1 relay server.

The technical scheme provided by the invention determines the transit network slice in the second form by the following steps when determining the transit network slice, and also comprises the following steps:

and if the sum of the transmission load information of all the power terminals in the second management set is greater than the redundant load information of all the target network slices. At this time, the power data of all the power terminals in the second management set cannot be simultaneously transmitted through one other target network slice.

Determining a plurality of standby network slices in a plurality of target network slices according to the network system requirement, obtaining the redundancy proportion data quantity of each standby network slice according to the redundancy load information of each standby network slice, and taking the standby network slices with the redundancy proportion data quantity larger than the preset proportion data as transit network slices. According to the invention, a plurality of alternative network slices are determined in a plurality of target network slices, the redundancy proportion data volume of each corresponding alternative network slice is calculated, the network systems in the alternative network slices can be required to be 5G-SA/NSA and 4G-LTE, and the network system has higher transmission speed relatively. The invention can obtain the redundancy proportion data volume of each backup network slice, and counts the backup network slices with the redundancy proportion data volume larger than the preset proportion data to obtain the corresponding transit network slices. The transit network slice at this time is plural.

And distributing all the power terminals in the second management set according to the redundant proportion data volume of each transit network slice so as to enable each transit network slice to distribute the power terminals with different proportion load volumes. According to the technical scheme provided by the invention, all the power terminals in the second management set are distributed according to the redundancy proportion data volume of each transfer network slice, so that each transfer network slice distributes a part of the power terminals in the second management set which are suitable for each transfer network slice, and the power data transmitted by the part of the power terminals are transmitted.

The transit load distribution information of each transit network slice is obtained by the following formula,

wherein, the first and the second end of the pipe are connected with each other,

is as follows

The transit load distribution information of each transit network slice,

is as follows

The amount of redundancy ratio data of the individual transit network slices,

is as follows

The amount of redundancy ratio data of the individual transit network slices,

in order to transit the upper limit value of the network slice,

for all power terminals in the second management setThe total load information of each transit network slice is obtained through the above mode,

is the upper limit adjustment value.

Different power terminals are distributed to each transfer network slice according to different transfer load distribution information, so that all the power terminals in the second management set are distributed to each transfer network slice according to the transfer load distribution information, upward adjustment can be performed on each transfer load distribution information through an upper limit adjustment value, the sum of the transfer load distribution information of all the transfer network slices is larger than the total load information required by the second management set, and all the power equipment in the second management set can be effectively distributed.

And controlling all the power terminals in the second management set to be respectively connected with the corresponding transit network slices and the transit service sides. According to the technical scheme provided by the invention, all the power terminals in the second management set are controlled to be connected with different transit network slices and transit service sides respectively.

And taking the target service side corresponding to the plurality of transit network slices as a transit service side. At this time, the number of the transit service sides is multiple, and as shown in fig. 5, the data transmission link at this time includes two:

the 1 st data transmission link is used for transmitting the power terminals (such as the power terminal 11, the power terminal 12 and the power terminal 1N in fig. 5) in the first management set at the service side to the corresponding target service end through the target network slice value;

the 2 nd data transmission link is that the power terminal in the service side part management set is transmitted to a corresponding transfer server of a transfer service side through a transfer network slice, and corresponding power data is transmitted to a target server side through the transfer server;

for example, the power terminal 21 in fig. 5 transmits to the corresponding relay server 1 of the 1 st relay service side 1 through the relay network slice 1, and transmits corresponding power data to the target service end through the 1 st relay server 1; the power terminal 22 in fig. 5 transmits the data to the relay server 2 of the corresponding 2 nd relay service side 2 through the relay network slice 2, and transmits the corresponding power data to the target service side through the 2 nd relay server 2; the Nth data transmission link is used for transmitting the electric power terminal in the partial management set at the service side to a corresponding transfer server N at the Nth transfer service side N through a transfer network slice N, and transmitting corresponding electric power data to the target service side through the Nth transfer server N.

In a possible implementation manner, in the step of obtaining the redundancy proportion data volume of each candidate network slice according to the redundancy load information of each candidate network slice and using the candidate network slice whose redundancy proportion data volume is greater than the preset proportion data as the transit network slice according to the multiple candidate network slices in the multiple target network slices, the technical solution provided by the present invention specifically includes:

and acquiring the network standard, signal receiving power information, signal-to-interference ratio information and redundancy ratio data volume of each target network slice in a preset time period to obtain first input data. According to the technical scheme provided by the invention, the information of each target network slice in a preset time period is analyzed, and the network system, the signal receiving power information, the signal-to-interference ratio information and the redundancy ratio data volume of the target network slice are used as the basis of the analysis.

And inputting the first input data into a first calculation model trained in advance, and calculating the slice evaluation value of each target network slice through the first calculation model. According to the invention, the first input data is calculated through the first calculation model to obtain the slice evaluation value of each target network slice, the working state of the slice is reflected through the slice evaluation value of the target network slice, and the higher the evaluation value of the target network slice is, the better the current communication state is.

And acquiring all target network slices with the slice evaluation values larger than the first preset value as alternative network slices. Through the mode, the method and the device can select the target network slice with better network transmission condition.

In one possible embodiment, the step of inputting the first input data into a first computation model trained in advance and calculating a slice evaluation value of each target network slice through the first computation model specifically includes:

and the first calculation model compares the signal receiving power information and the signal-to-interference ratio information in the preset time period with reference receiving power information and reference signal-to-interference ratio information respectively and then performs weighting processing to obtain a first signal trend value. The larger the signal receiving power information and the signal to interference ratio information are, the larger the corresponding first signal trend value is, and the better the signal receiving and transmitting quality and speed at the moment are.

And the first calculation model compares the redundant proportion data quantity with preset proportion data and then performs weighting processing to obtain a first redundant trend value. The larger the data amount of the redundancy ratio is, the larger the data amount that the corresponding target network slice can transmit at the time is proved to be, that is, the more resources the operator divides for the target network slice is, the larger the transmission rated amount of the target network slice is.

And the first calculation model determines a first offset coefficient and a second offset coefficient according to the network system. Different network systems may have different first offset coefficients and second offset coefficients, for example, the first offset coefficient corresponding to 5G-SA/NSA is 3, the first offset coefficient corresponding to 4G-LTE is 2.5, and so on.

And the first calculation model calculates the slice evaluation value of each target network slice by weighting and summing the first signal trend value and the first redundant trend value of each target network slice through a first offset coefficient and a second offset coefficient, wherein the first offset coefficient is greater than the second offset coefficient. The second offset coefficient corresponding to 5G-SA/NSA is 2, the first offset coefficient corresponding to 4G-LTE is 1.5, and the like.

The first computational model calculates the slice evaluation value by the following formula it comprises,

wherein the content of the first and second substances,

as an evaluation value of the slice,

is a first offset coefficient to be a first offset coefficient,

in order to receive the power information for the signal,

in order to receive the power information for the reference,

is a first weight value of the first weight value,

in order to be the signal-to-interference ratio information,

in order to be the reference signal-to-interference ratio information,

is a second weight value of the first weight value,

is a function of the second shift factor and,

in order to provide redundancy for a proportional amount of data,

is a preset proportion of the data quantity,

is a third weight value, and is,

are weight gradient values.

In a possible implementation manner, the technical solution provided by the present invention specifically includes, in the step of determining the first offset coefficient and the second offset coefficient according to the network type:

the network standard is one or more of 5G-SA/NSA, 4G-LTE and 2/3G-GSM/Wcdma;

each network system has a first offset coefficient and a second offset coefficient which are preset corresponding to the network system.

In a possible embodiment, the technical solution provided by the present invention further includes:

the output plurality of slice evaluation values are displayed. The present invention displays a plurality of slice evaluation values after obtaining the corresponding slice evaluation values, so that an administrator can understand the slice evaluation values obtained from the current first model.

The modified slice evaluation value is obtained by receiving the modification data of the plurality of slice evaluation values output by the user. After viewing the slice evaluation value, the user may consider that the slice evaluation value is inaccurate, so that the user may input corresponding modification data at this time, and the modification data may be modified data obtained by performing an increase or decrease process on a certain slice evaluation value.

And obtaining the average modification value of the modified slice evaluation value, the slice evaluation value before modification and the total number of the slice evaluation values. The average modified value is calculated by the following formula,

wherein the content of the first and second substances,

in order to calculate the average modification value,

for the evaluation value of the slice before modification,

for the modified slice evaluation value(s),

is an upper limit value of the slice evaluation value,

is a quantitative value of the slice evaluation value.

Updating the weight gradient values in the first computational model based on the average modification value. If the average modified value is a positive value, the previous weight gradient value is proved to be large, and the processing needs to be increased. If the average modification value is negative, it proves that the previous weight gradient value is small, and reduction processing is required.

The weight gradient value increasing process is performed by the following formula,

the weight gradient value reduction process is performed by the following formula,

wherein the content of the first and second substances,

for the processed weight gradient values,

in order to increase the value of the constant,

to reduce the constant value.

Step S160, connecting the power terminal in the first management set with a target service side through the target network slice, and connecting the power terminal in the second management set with the target service side through the relay network slice and the relay service side. The power terminal in the first management set is connected with the target service side through the target network slice, and the end-to-end transmission of the power terminal at the service side and the service side at the target service side is directly realized through the target network slice. And connecting the power terminals in the second management set with the target service side through the transit network slice and the transit service side to realize end-to-end transmission during transit, wherein the end-to-end transmission can be carried out between the transit service side and the target service side based on the network slice, and the data transmission can also be carried out through a wireless communication mode such as a base station. Through the above manner, when the load in a certain target network slice is large, the load can be shared by other target network slices.

The present invention also provides a storage medium having a computer program stored therein, the computer program being executable by a processor to implement the methods provided by the various embodiments described above.

The storage medium may be a computer storage medium or a communication medium. Communication media includes any medium that facilitates transfer of a computer program from one place to another. Computer storage media may be any available media that can be accessed by a general purpose or special purpose computer. For example, a storage medium is coupled to the processor such that the processor can read information from, and write information to, the storage medium. Of course, the storage medium may also be integral to the processor. The processor and the storage medium may reside in an Application Specific Integrated Circuits (ASIC). Additionally, the ASIC may reside in user equipment. Of course, the processor and the storage medium may reside as discrete components in a communication device. The storage medium may be read-only memory (ROM), random-access memory (RAM), CD-ROMs, magnetic tapes, floppy disks, optical data storage devices, and the like.

The present invention also provides a program product comprising execution instructions stored in a storage medium. The at least one processor of the device may read the execution instructions from the storage medium, and the execution of the execution instructions by the at least one processor causes the device to implement the methods provided by the various embodiments described above.

In the above embodiments of the terminal or the server, it should be understood that the Processor may be a Central Processing Unit (CPU), other general-purpose processors, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), etc. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of a method disclosed in connection with the present invention may be embodied directly in a hardware processor, or in a combination of the hardware and software modules within the processor.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.

Claims (10)

1. The intelligent terminal access authentication management method based on the electric power 5G virtual private network is characterized in that the 5G virtual private network comprises a service side and a plurality of target service sides, the service side and the target service sides are connected through a network slice, and the authentication management is performed on the terminal received by the target service sides through the following steps:

acquiring terminal path labels of power terminals accessed to a service side in batch at the current moment, classifying the terminal path labels of the power terminals after authentication to obtain a plurality of authentication power sets, and obtaining first load information of a target network slice according to terminal attributes of each power terminal in the authentication power sets;

classifying all power terminals accessed to the target network slice at the service side to obtain a connected power set, and obtaining second load information of the target network slice according to terminal attributes of all power terminals in the connected power set;

if the difference between the sum of the first load information and the second load information and the preset load information of the target network slice is smaller than a preset value, sorting the power terminals in the connected power set and the authentication power set according to the terminal attributes to obtain a fusion management set;

dividing the fusion management set based on preset load information and attribute information of each power terminal in the fusion management set to obtain a first management set and a second management set;

if the redundant load information exists in other target network slices, taking the other target network slices as transit network slices, and taking a target service side corresponding to the transit network slices as a transit service side;

and connecting the electric power terminal in the first management set with a target service side through the target network slice, and connecting the electric power terminal in the second management set with the target service side through the transit network slice and the transit service side.

2. The intelligent terminal access authentication management method based on the electric power 5G virtual private network according to claim 1,

the step of obtaining terminal path labels of power terminals accessed by the service side in batch at the current moment, classifying the terminal path labels of the power terminals to obtain a plurality of authentication power sets, and obtaining first load information of a target network slice according to terminal attributes of each power terminal in the authentication power sets specifically comprises the following steps:

acquiring a target server of each terminal path label in batch access electric power terminals, and acquiring a white list issued by the target server in advance;

authenticating the power terminal with the terminal path label as the target service end based on the white list, if the white list passes the authentication, classifying the corresponding power terminal into authentication power sets, wherein each authentication power set corresponds to one target service end;

and counting the transmission load information of the terminal attribute information of each power terminal in the authentication power set to obtain first load information.

3. The intelligent terminal access authentication management method based on the electric power 5G virtual private network according to claim 1,

if the difference between the sum of the first load information and the second load information and the preset load information of the target network slice is smaller than a preset value, the step of sorting the power terminals in the connected power set and the authentication power set according to the terminal attributes to obtain a fusion management set specifically comprises the following steps:

acquiring transmission weight value information of terminal attributes of each power terminal in a connected power set and an authentication power set;

performing primary descending sorting on all power terminals in the connected power set and the authentication power set based on the transmission weight value information to obtain a primary sorting result;

sequentially extracting all power terminals with the same transmission weight value information, and performing secondary ascending sorting according to the transmission load information to obtain a fusion management set;

the sum of the first load information and the second load information is calculated by the following formula,

wherein the content of the first and second substances,

is the sum of the first load information and the second load information,

certifying the first in the set of power for statistics

The transmission load information of the individual power terminals,

to statistically authenticate the upper limit values of the power terminals in the power set,

is the first in the connected power set

The transmission load information of the individual power terminals,

the upper limit value of the power terminal in the connected power set.

4. The intelligent terminal access authentication management method based on the electric power 5G virtual private network according to claim 1,

the step of dividing the fusion management set based on the preset load information and the attribute information of each power terminal in the fusion management set to obtain a first management set and a second management set specifically includes:

acquiring transmission load information in attribute information of each power terminal in the fusion management set;

calculating the sum of all front-mounted power terminals of the power terminals at each position in the fusion management set and the transmission load of the front-mounted power terminals to obtain the sum of the front-mounted loads of each power terminal;

determining an electric power terminal corresponding to the front load sum closest to the preset load information as a separation electric power terminal;

and counting all the power terminals in the fusion management set and in front of the power terminals to obtain a first management set, and counting all the power terminals behind the power terminals in the fusion management set to obtain a second management set.

5. The intelligent terminal access authentication management method based on the electric power 5G virtual private network according to claim 4,

if the redundant load information exists in the other target network slices, the step of taking the other target network slices as the transit network slices and taking the target service sides corresponding to the transit network slices as the transit service sides specifically comprises the following steps:

if the other target network slices with redundant load information are judged to be multiple, acquiring the redundant load information of each target network slice;

determining other target network slices which are larger than the sum of the transmission load information of all the power terminals in the second management set and correspond to the closest redundant load information, and using the other target network slices as transit network slices;

and taking the target service side corresponding to the transit network slice as a transit service side.

6. The intelligent terminal access authentication management method based on the electric power 5G virtual private network according to claim 5, further comprising:

if the sum of the transmission load information of all the power terminals in the second management set is larger than the redundant load information of all the target network slices;

determining a plurality of standby network slices in a plurality of target network slices according to network system requirements, obtaining redundancy proportion data quantity of each standby network slice according to redundancy load information of each standby network slice, and taking the standby network slices with the redundancy proportion data quantity larger than preset proportion data as transit network slices;

distributing all the power terminals in the second management set according to the redundant proportion data volume of each transfer network slice so as to enable each transfer network slice to distribute the power terminals with different proportion load volumes;

and controlling all the power terminals in the second management set to be respectively connected with the corresponding transit network slices and the transit service sides.

7. The intelligent terminal access authentication management method based on the electric power 5G virtual private network according to claim 6, further comprising:

the step of obtaining the redundancy proportion data volume of each candidate network slice according to the redundancy load information of each candidate network slice according to the determination of the multiple candidate network slices in the multiple target network slices, and taking the candidate network slices with the redundancy proportion data volume larger than the preset proportion data as the transit network slices specifically includes:

acquiring a network system, signal receiving power information, signal to interference ratio information and redundancy ratio data volume of each target network slice in a preset time period to obtain first input data;

inputting the first input data into a pre-trained first calculation model, and calculating a slice evaluation value of each target network slice through the first calculation model;

and acquiring all target network slices with the slice evaluation values larger than the first preset value as alternative network slices.

8. The intelligent terminal access authentication management method based on the electric power 5G virtual private network according to claim 7,

the step of inputting the first input data into a pre-trained first computation model, and computing the slice evaluation value of each target network slice through the first computation model specifically includes:

the first calculation model compares the signal receiving power information and the signal to interference ratio information in the preset time period with reference receiving power information and reference signal to interference ratio information respectively and then performs weighting processing to obtain a first signal trend value;

the first calculation model compares the redundancy proportion data quantity with preset proportion data and then performs weighting processing to obtain a first redundancy trend value;

the first calculation model determines a first offset coefficient and a second offset coefficient according to the network system;

the first calculation model performs weighted summation calculation on the first signal trend value and the first redundant trend value of each target network slice through a first offset coefficient and a second offset coefficient to obtain a slice evaluation value of the corresponding target network slice, wherein the first offset coefficient is greater than the second offset coefficient.

9. The intelligent terminal access authentication management method based on the electric power 5G VPN according to claim 8,

in the step of determining the first offset coefficient and the second offset coefficient according to the network type, the method specifically includes:

the network standard is one or more of 5G-SA/NSA, 4G-LTE and 2/3G-GSM/Wcdma;

each network system has a first offset coefficient and a second offset coefficient which are preset corresponding to the network system.

10. The intelligent terminal access authentication management method based on the electric power 5G virtual private network according to claim 8, further comprising:

displaying the output plurality of slice evaluation values;

receiving modification data of a plurality of output slice evaluation values of a user to obtain modified slice evaluation values;

obtaining an average modification value from the modified slice evaluation value, the slice evaluation value before modification and the total number of the slice evaluation values;

updating the weight gradient values in the first computational model based on the average modification value.

Images