CN116545784B - Data center operation control method and system for multi-user scene - Google Patents

Abstract

The present invention relates to the field of data management technology and provides a data center operation control method and system in a multi-user scenario, which authenticates user terminals, designates data transmission channels to successfully authenticated user terminals, and adjusts the use of data transmission channels by user terminals. permissions to enable different user terminals to access the data center independently at the same time; the data cache space is called as a transfer station for data access to completely store the data required by the user terminal, improve the efficiency of returning data to the user terminal, and effectively shorten the user terminal's access to the data center. The time occupied by access; when the data center is in an overloaded connection state, secondary authentication of the user terminal and changing the connection mode with the user terminal effectively releases the connection bandwidth resources of the data center and speeds up the efficiency of data interaction with the user terminal; and the occurrence of data When transmitting security events, perform data inspection on the data transmission channel and determine whether to close the data transmission channel to ensure data security in the data center.

Description

Data center operation control method and system for multi-user scenarios

Technical field

The present invention relates to the technical field of data management, and in particular to a data center operation control method and system in a multi-user scenario.

Background technique

As a data storage integration platform, the data center is used to store different types of data. Data centers provide data storage and reading services for multiple users. Existing data centers usually use time division to arrange the connections between different users and the data center, that is, only one user is allowed to store and read data with the data center at the same time. After the user completes the interaction with the data center, another user is allowed to interact with the data center. The above method can avoid crosstalk caused by different users accessing the data center at the same time. However, allowing only one user to access the data center at the same time will reduce the user's Access efficiency, especially when the number of users requesting access is large or users take a long time to access the data center, can easily lead to the problem of data center access congestion. At the same time, the access bandwidth of the data center cannot be fully utilized and cannot be used in multiple locations. Achieve efficient and fast access to the data center and access independence for different users in user scenarios.

Contents of the invention

In view of the shortcomings of the above-mentioned existing technologies, the present invention provides a data center operation control method and system in a multi-user scenario, which authenticates user terminals and designates a data transmission channel with the data center to the successfully authenticated user terminal. It also adjusts the usage rights of user terminals on data transmission channels to enable different user terminals to access the data center independently at the same time; it also calls the data cache space as a transfer station for data access to completely store the data required by user terminals and improve the return of data to user terminals. efficiency, effectively shortening the time occupied by user terminals accessing the data center; when the data center is in an overloaded connection state, secondary authentication of user terminals and changing the connection mode with the user terminal effectively releases the connection bandwidth resources of the data center, speeding up Data interaction efficiency with user terminals; and when a data transmission security incident occurs, the data transmission channel is inspected and determined whether to close the data transmission channel to prevent user terminals from stealing and tampering with data and ensure data security in the data center.

The data center operation control method in a multi-user scenario provided by the present invention includes the following steps:

Step S1: After authenticating several user terminals requesting connection, based on the network connection status of the data center, assign corresponding data transmission channels to all user terminals that have successfully authenticated; based on the real-time data status of the data transmission channel, adjust the user terminals to Permission to use the corresponding data transmission channel;

Step S2: Based on the data acquisition request of the user terminal, call the data cache space in the data center, and store the data found from the data center in the data cache space; transmit the data based on the user terminal The usage rights of the channel are used to transfer the data from the data cache space to the data transmission channel;

Step S3: Based on the current user terminal connection status of the data center, determine whether the data center is in an overloaded connection state; and when it is in an overloaded connection state, perform secondary authentication on all user terminals, and then change the data The connection mode between the center and user terminals;

Step S4: Based on the data transmission log of the data center, determine whether a data transmission security event occurs, and perform data inspection on the data transmission channel to determine whether to close the data transmission channel.

Further, in step S1, after authenticating several user terminals requesting connection, based on the network connection status of the data center, corresponding data transmission channels are assigned to all user terminals that have been successfully authenticated; real-time data based on the data transmission channel Status, adjust the user terminal’s usage rights for the corresponding data transmission channel, including:

Terminal identity information is extracted from connection requests from several user terminals respectively, and the terminal identity information is compared with the preset terminal list. If the terminal identity information exists in the preset terminal list, the user terminal is authenticated successfully; otherwise , failed to authenticate the user terminal;

Based on the available gateways under the data center, the corresponding data transmission channels are assigned to all user terminals that have been successfully authenticated;

Obtain the data transmission rate of each data transmission channel within a predetermined time length range. If the data transmission rate is greater than or equal to the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel remains unchanged; if the data transmission rate If the transmission rate is less than the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel is suspended.

Further, in step S2, based on the data acquisition request of the user terminal, the data cache space is called in the data center, and the data retrieved from the data center is stored in the data cache space; based on the The user terminal has the right to use the data transmission channel to transfer the data from the data cache space to the data transmission channel, including:

Extract the data keywords expected to be acquired from the data acquisition request of the user terminal, and perform a data search in the data center based on the data keywords to determine the amount of data the user terminal expects to acquire;

Based on the data amount, call at least one idle data cache space in the data center; wherein the total space amount of all the data cache spaces called is not less than the data amount;

After splitting the data retrieved from the data center, they are stored in the called data cache space respectively;

When the user terminal has the right to use the corresponding data transmission channel, the data is transferred from the data cache space to the data transmission channel, thereby sending the data to the user terminal.

Further, in step S3, based on the current user terminal connection status of the data center, it is determined whether the data center is in an overloaded connection state; and when it is in an overloaded connection state, secondary authentication is performed on all user terminals. Then, change the connection mode between the data center and the user terminal, including:

Obtain the number of user terminals currently connected to the data center. If the number of user terminals is greater than or equal to the preset number threshold, it is determined that the data center is in an overloaded connection state;

When in an overloaded connection state, secondary authentication is performed on all user terminals to identify active user terminals that exist among them; where the active user terminals refer to user terminals that interact with the data center in real time; and then disconnect all user terminals. Describe the connection relationship between the data center and inactive user terminals.

Further, in step S4, based on the data transmission log of the data center, determine whether a data transmission security event occurs, and perform data inspection on the data transmission channel to determine whether to close the data transmission channel, including:

Extract the process record of sending data to the user terminal from the data transmission log of the data center, analyze the process record, and determine whether a security event with abnormal data transmission traffic occurs; if so, perform data processing on the corresponding data transmission channel. Conduct random inspections to determine whether the data transmission channel has been illegally hijacked; if so, close the corresponding data transmission channel.

The present invention also provides a data center operation control system for multi-user scenarios, including:

The data transmission channel allocation module is used to authenticate several user terminals requesting connection, and designate corresponding data transmission channels to all user terminals that have successfully authenticated based on the network connection status of the data center;

The data transmission channel usage adjustment module is used to adjust the user terminal's usage rights for the corresponding data transmission channel based on the real-time data status of the data transmission channel;

A data search and storage module, configured to call the data cache space in the data center based on the data acquisition request of the user terminal, and store the data searched from the data center into the data cache space;

A data transfer module, configured to transfer the data from the data cache space to the data transmission channel based on the user terminal's permission to use the data transmission channel;

The connection mode changing module is used to determine whether the data center is in an overloaded connection state based on the current user terminal connection status of the data center; and when it is in an overloaded connection state, perform secondary authentication on all user terminals, Change the connection mode between the data center and the user terminal;

The data transmission channel inspection module is used to determine whether a data transmission security event occurs based on the data transmission log of the data center, and performs data inspection on the data transmission channel to determine whether to close the data transmission channel.

Further, the data transmission channel allocation module is used to authenticate several user terminals requesting connection, and designate corresponding data transmission channels to all user terminals that have been successfully authenticated based on the network connection status of the data center, including:

Terminal identity information is extracted from connection requests from several user terminals respectively, and the terminal identity information is compared with the preset terminal list. If the terminal identity information exists in the preset terminal list, the user terminal is authenticated successfully; otherwise , failed to authenticate the user terminal;

Based on the available gateways under the data center, the corresponding data transmission channels are assigned to all user terminals that have been successfully authenticated;

The data transmission channel usage adjustment module is used to adjust the user terminal's usage rights for the corresponding data transmission channel based on the real-time data status of the data transmission channel, including:

Obtain the data transmission rate of each data transmission channel within a predetermined time length range. If the data transmission rate is greater than or equal to the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel remains unchanged; if the data transmission rate If the transmission rate is less than the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel is suspended.

Further, the data search and storage module is used to call the data cache space in the data center based on the data acquisition request of the user terminal, and store the data searched from the data center into the data cache space, include:

Extract the data keywords expected to be acquired from the data acquisition request of the user terminal, and perform a data search in the data center based on the data keywords to determine the amount of data the user terminal expects to acquire;

Based on the data amount, call at least one idle data cache space in the data center; wherein the total space amount of all the data cache spaces called is not less than the data amount;

After splitting the data retrieved from the data center, they are stored in the called data cache space respectively;

The data transfer module is used to transfer the data from the data cache space to the data transmission channel based on the user terminal's permission to use the data transmission channel, including:

When the user terminal has the right to use the corresponding data transmission channel, the data is transferred from the data cache space to the data transmission channel, thereby sending the data to the user terminal.

Further, the connection mode changing module is configured to determine whether the data center is in an overloaded connection state based on the current user terminal connection status of the data center; and when it is in an overloaded connection state, perform a secondary check on all user terminals. After authentication, change the connection mode between the data center and the user terminal, including:

Obtain the number of user terminals currently connected to the data center. If the number of user terminals is greater than or equal to the preset number threshold, it is determined that the data center is in an overloaded connection state;

When in an overloaded connection state, secondary authentication is performed on all user terminals to identify active user terminals that exist among them; where the active user terminals refer to user terminals that interact with the data center in real time; and then disconnect all user terminals. Describe the connection relationship between the data center and inactive user terminals.

Further, the data transmission channel inspection module is used to determine whether a data transmission security event occurs based on the data transmission log of the data center, and perform data inspection on the data transmission channel to determine whether to close the data transmission channel, including:

Extract the process record of sending data to the user terminal from the data transmission log of the data center, analyze the process record, and determine whether a security event with abnormal data transmission traffic occurs; if so, perform data processing on the corresponding data transmission channel. Conduct random inspections to determine whether the data transmission channel has been illegally hijacked; if so, close the corresponding data transmission channel.

Compared with the existing technology, the data center operation control method and system in the multi-user scenario of the present invention authenticates user terminals, designates data transmission channels with the data center to successfully authenticated user terminals, and adjusts the data transmission of user terminals. The usage rights of the channel enable different user terminals to access the data center independently at the same time; the data cache space is also called as a transfer station for data access to completely store the data required by the user terminal, improve the efficiency of returning data to the user terminal, and effectively shorten the user terminal time. Access to the data center takes time; when the data center is in an overloaded connection state, secondary authentication of the user terminal and changing the connection mode with the user terminal effectively releases the connection bandwidth resources of the data center and speeds up the efficiency of data interaction with the user terminal. ; And when a data transmission security incident occurs, perform data inspection on the data transmission channel and determine whether to close the data transmission channel to prevent user terminals from stealing and tampering with data and ensure data security in the data center.

Description of the drawings

In order to more clearly explain the embodiments of the present application or the technical solutions in the prior art, the drawings needed to be used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings in the following description are only For some embodiments of the present application, those of ordinary skill in the art can also obtain other drawings based on these drawings without exerting creative efforts.

Figure 1 is a schematic flowchart of a data center operation control method in a multi-user scenario provided by the present invention.

Figure 2 is a schematic structural diagram of a data center operation control system in a multi-user scenario provided by the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of the present invention.

Refer to Figure 1, which is a schematic flow chart of a data center operation control method in a multi-user scenario provided by the present invention. The data center operation control method in the multi-user scenario includes the following steps:

Step S1: After authenticating several user terminals requesting connection, based on the network connection status of the data center, assign corresponding data transmission channels to all user terminals that have successfully authenticated; based on the real-time data status of the data transmission channel, adjust the user terminals to the corresponding data Permission to use the transmission channel;

Step S2: Based on the user terminal's data acquisition request, the data cache space is called in the data center and the data retrieved from the data center is stored in the data cache space; based on the user terminal's permission to use the data transmission channel, the data is retrieved from the data cache The space is transferred to the data transmission channel;

Step S3: Based on the current user terminal connection status of the data center, determine whether the data center is in an overloaded connection state; and when it is in an overloaded connection state, perform secondary authentication on all user terminals, and then change the connection between the data center and the user terminals. model;

Step S4: Based on the data transmission log of the data center, determine whether a data transmission security event occurs, and perform a data check on the data transmission channel to determine whether to close the data transmission channel.

The beneficial effects of the above technical solution are: the data center operation control method in multi-user scenarios authenticates user terminals, designates data transmission channels with the data center to successfully authenticated user terminals, and adjusts the use of data transmission channels by user terminals permissions to enable different user terminals to access the data center independently at the same time; it also calls the data cache space as a transfer station for data access to completely store the data required by the user terminal, improve the efficiency of returning data to the user terminal, and effectively shorten the user terminal's access to the data center. The access time occupied; when the data center is in an overloaded connection state, secondary authentication of the user terminal and changing the connection mode with the user terminal effectively releases the connection bandwidth resources of the data center and speeds up the efficiency of data interaction with the user terminal; and occurrence In the event of a data transmission security incident, perform data inspection on the data transmission channel and determine whether to close the data transmission channel to prevent user terminals from stealing and tampering with data and ensure data security in the data center.

Preferably, in step S1, after authenticating several user terminals requesting connection, based on the network connection status of the data center, corresponding data transmission channels are assigned to all user terminals that have been successfully authenticated; based on the real-time data status of the data transmission channel, adjust The user terminal’s permission to use the corresponding data transmission channel includes:

Extract terminal identity information from connection requests from several user terminals respectively, and compare the terminal identity information with the preset terminal list. If the terminal identity information exists in the preset terminal list, the user terminal is authenticated successfully; otherwise, the user terminal is authenticated successfully. Authentication failed;

Based on the available gateways under the data center, the corresponding data transmission channels are assigned to all user terminals that have been successfully authenticated;

Obtain the data transmission rate of each data transmission channel within a predetermined time length range. If the data transmission rate is greater than or equal to the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel remains unchanged; if the data transmission rate is less than the preset rate threshold, If the rate threshold is set, the user terminal's permission to use the corresponding data transmission channel will be suspended.

The beneficial effect of the above technical solution is: when the terminal held by the user, such as a smartphone, needs to access the data center to obtain corresponding data from the data center, the terminal held by the user needs to be connected to the data center. At this time, the terminal held by the user initiates a connection request to the data center. After receiving the connection request, the data center extracts the terminal identity information from it, compares the terminal identity information with the preset terminal list of the data center, determines whether the terminal held by the user is an authenticated terminal, and marks all successfully authenticated terminals. . Based on the available gateways of the network where the data center is located and the gateways currently connected to the network of all successfully authenticated terminals, corresponding data transmission channels are assigned to all successfully authenticated terminals. Each successfully authenticated terminal has the right to specify the corresponding data transmission channel. This ensures that successfully authenticated terminals have independent access to the data center and avoids access crosstalk with other terminals. In addition, based on the data transmission rate of each data transmission channel within a predetermined time range, if the data transmission rate is greater than or equal to the preset rate threshold, it indicates that the data transmission channel always remains in an active working state, that is, the user terminal needs to continue to maintain The usage rights of the data transmission channel remain unchanged, ensuring that the user terminal has continuous access to the data center; if the data transmission rate is less than the preset rate threshold, it indicates that the data transmission channel is idle, and the user terminal's usage rights of the corresponding data transmission channel are suspended at this time. , and granting other user terminals the right to use the data transmission channel, which can improve the efficiency of the circulation and use of the data transmission channel between different user terminals.

Preferably, in step S2, based on the user terminal's data acquisition request, the data cache space is called in the data center, and the data found from the data center is stored in the data cache space; based on the user terminal's permission to use the data transmission channel, Move data from the data cache space to the data transmission channel, including:

Extract the desired data keywords from the user terminal's data acquisition request, and perform data search in the data center based on the data keywords to determine the amount of data the user terminal expects to obtain;

Based on the amount of data, call at least one idle data cache space in the data center; where the total space amount of all data cache spaces called is not less than the amount of data;

The data retrieved from the data center is split and stored separately in the called data cache space;

When the user terminal has the right to use the corresponding data transmission channel, the data is transferred from the data cache space to the data transmission channel, thereby sending the data to the user terminal.

The beneficial effects of the above technical solution are: identifying the data acquisition request issued by the user terminal, extracting the data keywords that the user terminal expects to obtain, and then comparing the data keywords with the data storage directory of the data center, and searching and locating the data in the data center. The location of the data expected to be obtained is located, and the amount of data expected to be obtained by the user terminal is further determined. There are several data cache spaces preset inside the data center. Each data cache space is used to cache the data copies corresponding to the data searched and located from the data center. After the search and positioning of all data is completed, all data copies are transferred to The data transmission channel is further sent to the user terminal. The data cache space serves as the data transfer station of the data center, so that only after all the data has completed the search and positioning, the data copies are sent uniformly. This avoids the simultaneous data search, positioning and sending, which leads to chaotic data sending. Condition. The size of each data cache space is limited and may not be able to meet the need to cache all the searched and located data. At this time, based on the amount of data expected to be obtained, at least one idle data is called in the data center. Cache space, and make the total space of all data cache spaces called not less than the amount of data, thereby ensuring complete caching of all data, and then split the data retrieved from the data center and store them in the called data cache respectively. space, so that the data can be quickly transferred from the data cache space to the data transmission channel and the speed of sending data to the user terminal can be improved.

Preferably, in step S3, based on the current user terminal connection status of the data center, determine whether the data center is in an overload connection state; and when it is in an overload connection state, perform secondary authentication on all user terminals, and then change the data center Connection modes with user terminals, including:

Obtain the number of user terminals currently connected to the data center. If the number of user terminals is greater than or equal to the preset number threshold, it is determined that the data center is in an overloaded connection state;

When in an overloaded connection state, perform secondary authentication on all user terminals to identify active user terminals among them; active user terminals refer to user terminals that interact with the data center in real time; then disconnect the data center from the inactive ones. The connection relationship of the user terminal.

The beneficial effect of the above technical solution is: when there are too many user terminals currently connected to the data center, the data transmission bandwidth of the data center itself will not be able to guarantee timely and efficient data transmission to all user terminals. Based on the number of user terminals currently connected to the data center, it is judged whether the data center is in an overloaded connection state, and further performs secondary authentication on all user terminals, promptly disconnects the data center from inactive user terminals, and effectively removes inactive users. The data transmission bandwidth originally occupied by active user terminals is released.

Preferably, in step S4, based on the data transmission log of the data center, determine whether a data transmission security event occurs, and conduct a data check on the data transmission channel to determine whether to close the data transmission channel, including:

Extract the process record of sending data to the user terminal from the data transmission log in the data center, analyze the process record, and determine whether a security event with abnormal data transmission traffic has occurred; if so, perform a data sampling inspection on the corresponding data transmission channel to determine Whether the data transmission channel has been illegally hijacked; if it has been illegally hijacked, close the corresponding data transmission channel.

The beneficial effect of the above technical solution is: extract the process record of sending data to the user terminal from the data transmission log of the data center, and identify the data flow changes in the process of sending data to the user terminal from the process records. If the data flow changes indicate When there is excessive data traffic sent by the user terminal, it is determined that a security event occurs with abnormal data transmission traffic. At this time, a data sampling inspection is performed on the corresponding data transmission channel to analyze whether there is illegal code in the collected data samples. If it exists, it indicates The data transmission channel is illegally hijacked. At this time, the corresponding data transmission channel is closed to prevent the data center from being affected and effectively improve the data security of the data center.

Refer to Figure 2, which is a schematic structural diagram of a data center operation control system in a multi-user scenario provided by the present invention. The data center operation control system for this multi-user scenario includes:

The data transmission channel allocation module is used to authenticate several user terminals requesting connection, and designate corresponding data transmission channels to all user terminals that have successfully authenticated based on the network connection status of the data center;

The data transmission channel usage adjustment module is used to adjust the user terminal's usage rights for the corresponding data transmission channel based on the real-time data status of the data transmission channel;

The data search and storage module is used to call the data cache space in the data center based on the data acquisition request from the user terminal, and store the data retrieved from the data center into the data cache space;

The data transfer module is used to transfer data from the data cache space to the data transmission channel based on the user terminal's permission to use the data transmission channel;

The connection mode change module is used to determine whether the data center is in an overloaded connection state based on the current user terminal connection status of the data center; and when it is in an overloaded connection state, after secondary authentication of all user terminals, change the data center and The connection mode of the user terminal;

The data transmission channel inspection module is used to determine whether a data transmission security event occurs based on the data transmission log of the data center, and performs data inspection on the data transmission channel to determine whether to close the data transmission channel.

The beneficial effects of the above technical solution are: the multi-user scenario data center operation control system authenticates user terminals, designates data transmission channels with the data center to successfully authenticated user terminals, and adjusts the use of data transmission channels by user terminals permissions to enable different user terminals to access the data center independently at the same time; it also calls the data cache space as a transfer station for data access to completely store the data required by the user terminal, improve the efficiency of returning data to the user terminal, and effectively shorten the user terminal's access to the data center. The access time occupied; when the data center is in an overloaded connection state, secondary authentication of the user terminal and changing the connection mode with the user terminal effectively releases the connection bandwidth resources of the data center and speeds up the efficiency of data interaction with the user terminal; and occurrence In the event of a data transmission security incident, perform data inspection on the data transmission channel and determine whether to close the data transmission channel to prevent user terminals from stealing and tampering with data and ensure data security in the data center.

Preferably, the data transmission channel allocation module is used to authenticate several user terminals requesting connection, and then designate corresponding data transmission channels to all user terminals that have been successfully authenticated based on the network connection status of the data center, including:

Extract terminal identity information from connection requests from several user terminals respectively, and compare the terminal identity information with the preset terminal list. If the terminal identity information exists in the preset terminal list, the user terminal is authenticated successfully; otherwise, the user terminal is authenticated successfully. Authentication failed;

Based on the available gateways under the data center, the corresponding data transmission channels are assigned to all user terminals that have been successfully authenticated;

The data transmission channel usage adjustment module is used to adjust the user terminal's usage rights for the corresponding data transmission channel based on the real-time data status of the data transmission channel, including:

Obtain the data transmission rate of each data transmission channel within a predetermined time length range. If the data transmission rate is greater than or equal to the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel remains unchanged; if the data transmission rate is less than the preset rate threshold, If the rate threshold is set, the user terminal's permission to use the corresponding data transmission channel will be suspended.

The beneficial effect of the above technical solution is: when the terminal held by the user, such as a smartphone, needs to access the data center to obtain corresponding data from the data center, the terminal held by the user needs to be connected to the data center. At this time, the terminal held by the user initiates a connection request to the data center. After receiving the connection request, the data center extracts the terminal identity information from it, compares the terminal identity information with the preset terminal list of the data center, determines whether the terminal held by the user is an authenticated terminal, and marks all successfully authenticated terminals. . Based on the available gateways of the network where the data center is located and the gateways currently connected to the network of all successfully authenticated terminals, corresponding data transmission channels are assigned to all successfully authenticated terminals. Each successfully authenticated terminal has the right to specify the corresponding data transmission channel. This ensures that successfully authenticated terminals have independent access to the data center and avoids access crosstalk with other terminals. In addition, based on the data transmission rate of each data transmission channel within a predetermined time range, if the data transmission rate is greater than or equal to the preset rate threshold, it indicates that the data transmission channel always remains in an active working state, that is, the user terminal needs to continue to maintain The usage rights of the data transmission channel remain unchanged, ensuring that the user terminal has continuous access to the data center; if the data transmission rate is less than the preset rate threshold, it indicates that the data transmission channel is idle, and the user terminal's usage rights of the corresponding data transmission channel are suspended at this time. , and granting other user terminals the right to use the data transmission channel, which can improve the efficiency of the circulation and use of the data transmission channel between different user terminals.

Preferably, the data search and storage module is used to call the data cache space in the data center based on the user terminal's data acquisition request, and store the data searched from the data center into the data cache space, including:

Extract the desired data keywords from the user terminal's data acquisition request, and perform data search in the data center based on the data keywords to determine the amount of data the user terminal expects to obtain;

Based on the amount of data, call at least one idle data cache space in the data center; where the total space amount of all data cache spaces called is not less than the amount of data;

The data retrieved from the data center is split and stored separately in the called data cache space;

The data transfer module is used to transfer data from the data cache space to the data transmission channel based on the user terminal's permission to use the data transmission channel, including:

When the user terminal has the right to use the corresponding data transmission channel, the data is transferred from the data cache space to the data transmission channel, thereby sending the data to the user terminal.

The beneficial effects of the above technical solution are: identifying the data acquisition request issued by the user terminal, extracting the data keywords that the user terminal expects to obtain, and then comparing the data keywords with the data storage directory of the data center, and searching and locating the data in the data center. The location of the data expected to be obtained is located, and the amount of data expected to be obtained by the user terminal is further determined. There are several data cache spaces preset inside the data center. Each data cache space is used to cache the data copies corresponding to the data searched and located from the data center. After the search and positioning of all data is completed, all data copies are transferred to The data transmission channel is further sent to the user terminal. The data cache space serves as the data transfer station of the data center, so that only after all the data has completed the search and positioning, the data copies are sent uniformly, avoiding the simultaneous data search, positioning and sending, which leads to chaotic data sending. Condition. The size of each data cache space is limited and may not be able to meet the need to cache all the searched and located data. At this time, based on the amount of data expected to be obtained, at least one idle data is called in the data center Cache space, and make the total space of all data cache spaces called not less than the amount of data, thereby ensuring complete caching of all data, and then split the data retrieved from the data center and store them in the called data cache respectively. space, so that the data can be quickly transferred from the data cache space to the data transmission channel and the speed of sending data to the user terminal can be improved.

Preferably, the connection mode changing module is used to determine whether the data center is in an overloaded connection state based on the current user terminal connection status of the data center; and when it is in the overloaded connection state, perform secondary authentication on all user terminals and change the data. The connection mode between the center and user terminals includes:

Obtain the number of user terminals currently connected to the data center. If the number of user terminals is greater than or equal to the preset number threshold, it is determined that the data center is in an overloaded connection state;

When in an overloaded connection state, perform secondary authentication on all user terminals to identify active user terminals among them; active user terminals refer to user terminals that interact with the data center in real time; then disconnect the data center from the inactive ones. The connection relationship of the user terminal.

The beneficial effect of the above technical solution is: when there are too many user terminals currently connected to the data center, the data transmission bandwidth of the data center itself will not be able to guarantee timely and efficient data transmission to all user terminals. Based on the number of user terminals currently connected to the data center, it is judged whether the data center is in an overloaded connection state, and further performs secondary authentication on all user terminals, promptly disconnects the data center from inactive user terminals, and effectively removes inactive users. The data transmission bandwidth originally occupied by active user terminals is released.

Preferably, the data transmission channel inspection module is used to determine whether a data transmission security event occurs based on the data transmission log of the data center, and performs data inspection on the data transmission channel to determine whether to close the data transmission channel, including:

Extract the process record of sending data to the user terminal from the data transmission log in the data center, analyze the process record, and determine whether a security event with abnormal data transmission traffic has occurred; if so, perform a data sampling inspection on the corresponding data transmission channel to determine Whether the data transmission channel has been illegally hijacked; if it has been illegally hijacked, close the corresponding data transmission channel.

The beneficial effect of the above technical solution is: extract the process record of sending data to the user terminal from the data transmission log of the data center, and identify the data flow changes in the process of sending data to the user terminal from the process records. If the data flow changes indicate When there is excessive data traffic sent by the user terminal, it is determined that a security event occurs with abnormal data transmission traffic. At this time, a data sampling inspection is performed on the corresponding data transmission channel to analyze whether there is illegal code in the collected data samples. If it exists, it indicates The data transmission channel is illegally hijacked. At this time, the corresponding data transmission channel is closed to prevent the data center from being affected and effectively improve the data security of the data center.

It can be seen from the contents of the above embodiments that the data center operation control method and system in a multi-user scenario authenticates user terminals, designates a data transmission channel with the data center to the successfully authenticated user terminal, and adjusts the data transmission channel of the user terminal. The usage rights enable different user terminals to access the data center independently at the same time; the data cache space is also called as a transfer station for data access to completely store the data required by the user terminal, improve the efficiency of returning data to the user terminal, and effectively shorten the user terminal's access to the data center. The data center access time is occupied; when the data center is in an overloaded connection state, the user terminal is authenticated twice and the connection mode with the user terminal is changed, effectively releasing the connection bandwidth resources of the data center and accelerating the efficiency of data interaction with the user terminal; And when a data transmission security incident occurs, perform data inspection on the data transmission channel and determine whether to close the data transmission channel to prevent user terminals from stealing and tampering with data and ensure data security in the data center.

Claims (8)

1. A data center operation control method for multi-user scenarios, which is characterized by including the following steps: Step S1: After authenticating several user terminals requesting connection, based on the network connection status of the data center, assign corresponding data transmission channels to all user terminals that have successfully authenticated; based on the real-time data status of the data transmission channel, adjust the user terminals to Permission to use the corresponding data transmission channel; Step S2: Based on the data acquisition request of the user terminal, call the data cache space in the data center, and store the data found from the data center in the data cache space; transmit the data based on the user terminal The usage rights of the channel to transfer the data from the data cache space to the data transmission channel include: Extract the data keywords expected to be acquired from the data acquisition request of the user terminal, and perform a data search in the data center based on the data keywords to determine the amount of data the user terminal expects to acquire; Based on the data amount, call at least one idle data cache space in the data center; wherein the total space amount of all the data cache spaces called is not less than the data amount; After splitting the data retrieved from the data center, they are stored in the called data cache space respectively; When the user terminal has the right to use the corresponding data transmission channel, transfer the data from the data cache space to the data transmission channel, thereby sending the data to the user terminal; Step S3: Based on the current user terminal connection status of the data center, determine whether the data center is in an overloaded connection state; and when it is in an overloaded connection state, perform secondary authentication on all user terminals, and then change the data The connection mode between the center and user terminals includes: Obtain the number of user terminals currently connected to the data center. If the number of user terminals is greater than or equal to the preset number threshold, it is determined that the data center is in an overloaded connection state; When in an overloaded connection state, secondary authentication is performed on all user terminals to identify active user terminals that exist among them; where the active user terminals refer to user terminals that interact with the data center in real time; and then disconnect all user terminals. Describe the connection relationship between the data center and inactive user terminals; Step S4: Based on the data transmission log of the data center, determine whether a data transmission security event occurs, and perform data inspection on the data transmission channel to determine whether to close the data transmission channel. 2. The data center operation control method in a multi-user scenario according to claim 1, characterized in that: In step S1, after authenticating several user terminals requesting connection, based on the network connection status of the data center, corresponding data transmission channels are assigned to all user terminals that have been successfully authenticated; based on the real-time data status of the data transmission channel, Adjust the user terminal’s usage rights for corresponding data transmission channels, including: Terminal identity information is extracted from connection requests from several user terminals respectively, and the terminal identity information is compared with the preset terminal list. If the terminal identity information exists in the preset terminal list, the user terminal is authenticated successfully; otherwise , failed to authenticate the user terminal; Based on the available gateways under the data center, the corresponding data transmission channels are assigned to all user terminals that have been successfully authenticated; Obtain the data transmission rate of each data transmission channel within a predetermined time length range. If the data transmission rate is greater than or equal to the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel remains unchanged; if the data transmission rate If the transmission rate is less than the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel is suspended. 3. The data center operation control method in a multi-user scenario according to claim 1, characterized in that: In step S4, based on the data transmission log of the data center, determine whether a data transmission security event occurs, and perform data inspection on the data transmission channel to determine whether to close the data transmission channel, including: Extract the process record of sending data to the user terminal from the data transmission log of the data center, analyze the process record, and determine whether a security event with abnormal data transmission traffic occurs; if so, perform data processing on the corresponding data transmission channel. Conduct random inspections to determine whether the data transmission channel has been illegally hijacked; if so, close the corresponding data transmission channel. 4. Data center operation control system for multi-user scenarios, which is characterized by: The data transmission channel allocation module is used to authenticate several user terminals requesting connection, and designate corresponding data transmission channels to all user terminals that have successfully authenticated based on the network connection status of the data center; The data transmission channel usage adjustment module is used to adjust the user terminal's usage rights for the corresponding data transmission channel based on the real-time data status of the data transmission channel; A data search and storage module, configured to call the data cache space in the data center based on the data acquisition request of the user terminal, and store the data searched from the data center into the data cache space, including: Extract the data keywords expected to be acquired from the data acquisition request of the user terminal, and perform a data search in the data center based on the data keywords to determine the amount of data the user terminal expects to acquire; Based on the data amount, call at least one idle data cache space in the data center; wherein the total space amount of all the data cache spaces called is not less than the data amount; After splitting the data retrieved from the data center, they are respectively stored in the called data cache space; the data transfer module is used to transfer the data from the data transmission channel based on the user terminal's permission to use the data transmission channel. The data cache space is transferred to the data transmission channel, including: When the user terminal has the right to use the corresponding data transmission channel, transfer the data from the data cache space to the data transmission channel, thereby sending the data to the user terminal; The connection mode changing module is used to determine whether the data center is in an overloaded connection state based on the current user terminal connection status of the data center; and when it is in an overloaded connection state, perform secondary authentication on all user terminals, Change the connection mode between the data center and user terminals, including: Obtain the number of user terminals currently connected to the data center. If the number of user terminals is greater than or equal to the preset number threshold, it is determined that the data center is in an overloaded connection state; When in an overloaded connection state, secondary authentication is performed on all user terminals to identify active user terminals that exist among them; where the active user terminals refer to user terminals that interact with the data center in real time; and then disconnect all user terminals. Describe the connection relationship between the data center and inactive user terminals; The data transmission channel inspection module is used to determine whether a data transmission security event occurs based on the data transmission log of the data center, and performs data inspection on the data transmission channel to determine whether to close the data transmission channel. 5. The data center operation control system for multi-user scenarios according to claim 4, characterized in that: The data transmission channel allocation module is used to designate corresponding data transmission channels to all user terminals that have been successfully authenticated based on the network connection status of the data center after authenticating several user terminals requesting connection, including: Terminal identity information is extracted from connection requests from several user terminals respectively, and the terminal identity information is compared with the preset terminal list. If the terminal identity information exists in the preset terminal list, the user terminal is authenticated successfully; otherwise , failed to authenticate the user terminal; Based on the available gateways under the data center, the corresponding data transmission channels are assigned to all user terminals that have been successfully authenticated; The data transmission channel usage adjustment module is used to adjust the user terminal's usage rights for the corresponding data transmission channel based on the real-time data status of the data transmission channel, including: Obtain the data transmission rate of each data transmission channel within a predetermined time length range. If the data transmission rate is greater than or equal to the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel remains unchanged; if the data transmission rate If the transmission rate is less than the preset rate threshold, the user terminal's permission to use the corresponding data transmission channel is suspended. 6. The data center operation control system for multi-user scenarios according to claim 4, characterized in that: The data search and storage module is used to call the data cache space in the data center based on the data acquisition request of the user terminal, and store the data searched from the data center into the data cache space, including: Extract the data keywords expected to be acquired from the data acquisition request of the user terminal, and perform a data search in the data center based on the data keywords to determine the amount of data the user terminal expects to acquire; Based on the data amount, call at least one idle data cache space in the data center; wherein the total space amount of all the data cache spaces called is not less than the data amount; After splitting the data retrieved from the data center, they are stored in the called data cache space respectively; The data transfer module is used to transfer the data from the data cache space to the data transmission channel based on the user terminal's permission to use the data transmission channel, including: When the user terminal has the right to use the corresponding data transmission channel, the data is transferred from the data cache space to the data transmission channel, thereby sending the data to the user terminal. 7. The data center operation control system for multi-user scenarios according to claim 4, characterized in that: The connection mode changing module is used to determine whether the data center is in an overloaded connection state based on the current user terminal connection status of the data center; and when it is in an overloaded connection state, perform secondary authentication on all user terminals. , changing the connection mode between the data center and the user terminal, including: Obtain the number of user terminals currently connected to the data center. If the number of user terminals is greater than or equal to the preset number threshold, it is determined that the data center is in an overloaded connection state; When in an overloaded connection state, secondary authentication is performed on all user terminals to identify active user terminals that exist among them; where the active user terminals refer to user terminals that interact with the data center in real time; and then disconnect all user terminals. Describe the connection relationship between the data center and inactive user terminals. 8. The data center operation control system for multi-user scenarios according to claim 4, characterized in that: The data transmission channel inspection module is used to determine whether a data transmission security event occurs based on the data transmission log of the data center, and perform data inspection on the data transmission channel to determine whether to close the data transmission channel, including: Extract the process record of sending data to the user terminal from the data transmission log of the data center, analyze the process record, and determine whether a security event with abnormal data transmission traffic occurs; if so, perform data processing on the corresponding data transmission channel. Conduct random inspections to determine whether the data transmission channel has been illegally hijacked; if so, close the corresponding data transmission channel.