CN112416424B - Unidirectional configuration synchronization and checking method of dual-system architecture - Google Patents

Abstract

The invention discloses a one-way configuration synchronization and checking method of a double-system architecture, which comprises the following steps: 1) The method comprises the steps that when a sending end system and a receiving end system are started, local configurations are loaded respectively; 2) The management tool is connected with one side of the sending end system for configuration, and each time a configuration file is completed, the sending end system synchronizes the configuration file to the receiving end system in real time; 3) When the management tool configuration is stored, the sending end system and the receiving end system simultaneously store a local configuration file, and the sending end system triggers configuration checking; 4) Performing configuration checking; 5) When the configuration check fails, the transmitting end system determines whether to automatically execute configuration synchronization according to the configuration, and the configuration check is performed again after the synchronization is completed; or 6) manually executing a configuration synchronization command to configure synchronization. The invention realizes the one-way configuration transmission and the configuration synchronization check of the dual system.

Description

A one-way configuration synchronization and verification method for dual system architecture

Technical Field

The present invention relates to a unidirectional configuration synchronization and verification method of a dual-system architecture, and belongs to the technical field.

technical background

The dual-system architecture one-way transmission system refers to two completely independent hardware motherboards that independently run two operating systems. The two systems communicate using a one-way transmission medium, and data can only be transmitted from the sending end system to the receiving end system. The existing dual-system architecture one-way transmission system needs to be connected to the sending end and the receiving end system for configuration, which is cumbersome to operate.

For a dual-system architecture one-way transmission system, if it is possible to connect the management tool to the system sending end for configuration, and then automatically synchronize the configuration from the sending end to the receiving end within the system, the operation process when configuring the systems on both sides can be simplified.

Summary of the invention

The technical problem to be solved by the present invention is: in a dual-system architecture unidirectional transmission system, how to achieve that only the sending end system needs to be accessed for configuration, the sending end system synchronizes with the receiving end system and verifies the receiving end configuration.

In order to solve the above technical problems, the present invention provides a one-way configuration synchronization and verification method for a dual-system architecture, comprising the following steps:

1) The sending system and the receiving system load their respective local configuration files when they start up;

2) The management tool is connected to the sending system for configuration. After each configuration file is completed, the sending system will synchronize the configuration file to the receiving system in real time.

3) When the management tool configuration is saved, the sending end system and the receiving end system save the local configuration file at the same time, and the sending end system triggers the configuration verification;

4) Perform configuration verification;

5) When the configuration check fails, the sending end system can automatically perform configuration synchronization and perform configuration verification again after synchronization is completed; or

6) Manually execute the configuration synchronization command to synchronize and verify the configuration.

Compared with the prior art, the invention has the following beneficial effects: the one-way configuration synchronization and verification method of the dual-system architecture of the invention is mainly applied to the dual-system architecture. The management tool is connected to the system sending end for configuration, and then the sending end automatically synchronizes the configuration to the receiving end within the system, and ensures that the configurations on both sides are the same through the configuration verification technology. When the configurations on both sides are inconsistent, timely feedback can be given, thus realizing one-way configuration transmission and configuration synchronization verification.

BRIEF DESCRIPTION OF THE DRAWINGS

Figure 1 is a schematic diagram of system initialization on both sides;

FIG2 is a schematic diagram showing the management tool connecting to the sending end system for configuration;

FIG3 is a schematic diagram of a management tool connected to a sending end system to save configuration;

FIG4 is a schematic diagram of automatically triggering configuration verification after saving the configuration;

FIG5 is a schematic diagram of automatically triggering configuration synchronization when configuration verification fails;

FIG. 6 is a schematic diagram of manually executing configuration synchronization when configuration verification fails.

Detailed ways

The present invention will be further described below in conjunction with the accompanying drawings and embodiments.

Example 1

As shown in FIG1-6, a one-way configuration synchronization and verification method for a dual-system architecture includes the following steps:

1) The receiving end system and the receiving end system load their respective local configurations when starting;

The local configuration includes configuration information required for normal operation of each functional module in the system;

2) The management tool is connected to the sending system for configuration. After each configuration of a configuration file is completed, the sending system will synchronize the configuration file to the receiving system in real time;

The specific steps include:

a) The sending system receives a configuration file and verifies the legitimacy of the configuration;

b) If the verification fails, feedback is given and the invalid configuration is discarded; if the verification succeeds, the configuration is updated and sent to the receiving system;

c) The receiving system receives a configuration file and updates the configuration.

3) When the management tool configuration is saved, both sides save the local configuration files at the same time, and the sending end system triggers configuration verification;

4) Perform configuration verification. The specific steps are shown in Figure 4:

a. The sending system calculates the HASH value of the local configuration and synchronizes it to the receiving system for verification, and writes the verification event to the control channel. The actual configuration file may be relatively large, and it takes time to compare the complete configuration file. Therefore, the systems on both sides use the same digest algorithm to calculate their respective complete configurations. The receiving system compares whether the two digest values are the same. If they are the same, the verification is successful, otherwise it fails.

b. The receiving end verifies the HASH values configured on both sides. If the HASH values configured on both sides are the same, the receiving end reads the data in the control channel; otherwise, no processing is performed.

c. After the set delay time, the sending system attempts to write a verification shutdown event to the control channel multiple times, and determines the verification result of the receiving end based on whether the write is successful or not. A successful write indicates a successful configuration verification, and a failed write indicates a failed configuration verification. The verification result is returned to the management tool.

There is only one data cache block in the control channel, that is, only one control command can be written at the same time. When the control channel is full, writing again will return failure. The receiving end reads the control channel data only when it determines that the HASH values configured on both sides are the same. After reading the data, the sending end can write again successfully.

After the sender writes the verification event to the control channel, it periodically attempts to write the verification shutdown event according to the set delay time and number of attempts. When the writing is successful, the attempt stops. Finally, the verification result of the receiving end is judged based on whether the writing is successful or not.

When configuration verification fails, when the sender triggers configuration synchronization and verification again, since the verification event has been written to the control channel, it directly attempts to write the verification shutdown event.

When the receiving end configuration verification succeeds, the verification event and the verification closing event are read from the control channel in turn.

5) When the configuration check fails, the sending end system decides whether to automatically perform configuration synchronization based on the configuration, and performs configuration verification again after synchronization is completed; or

6) Manually execute the configuration synchronization command to synchronize the configuration.

Example 2

A one-way configuration synchronization and verification method for a dual-system architecture comprises the following steps:

1) The receiving end system and the receiving end system load their respective local configurations when starting;

The local configuration includes configuration information required for normal operation of each functional module in the system;

2) The management tool is connected to the sending system for configuration. After each configuration file is completed, the sending system will synchronize the configuration file to the receiving system in real time.

3) When the management tool configuration is saved, the sending end system and the receiving end system save the local configuration file at the same time, and the sending end system triggers the configuration verification;

4) Perform configuration verification. The specific steps are shown in Figure 4:

a. The sending system calculates the summary of the local configuration using the national secret SM3 algorithm, synchronizes it to the receiving system for verification, and writes the verification event into the control channel;

b. The receiving end verifies the digests configured on both sides. If the digests configured on both sides are the same, the receiving end reads the data in the control channel; otherwise, no processing is performed.

c. After the set delay time, the sending system attempts to write a verification shutdown event to the control channel multiple times, and determines the verification result of the receiving end based on whether the write is successful or not. A successful write indicates a successful configuration verification, and a failed write indicates a failed configuration verification. The verification result is returned to the management tool.

There is only one data cache block in the control channel, that is, only one control command can be written at the same time. When the control channel is full, writing again will return failure. The receiving end reads the control channel data only when it determines that the HASH values configured on both sides are the same. After reading the data, the sending end can write again successfully.

After the sender writes the verification event to the control channel, it periodically attempts to write the verification shutdown event according to the set delay time and number of attempts. When the writing is successful, the attempt stops. Finally, the verification result of the receiving end is determined based on whether the writing is successful or not.

When configuration verification fails, when the sender triggers configuration synchronization and verification again, since the verification event has been written to the control channel, it directly attempts to write the verification shutdown event.

When the receiving end configuration verification succeeds, the verification event and the verification closing event are read from the control channel in turn.

5) When the configuration check fails, the sending end system decides whether to automatically perform configuration synchronization based on the configuration, and performs configuration verification again after synchronization is completed; or

6) Manually execute the configuration synchronization command to synchronize the configuration.

Example 3

A one-way configuration synchronization and verification method for a dual-system architecture comprises the following steps:

1) The receiving end system and the receiving end system load their respective local configurations when starting;

The local configuration includes configuration information required for normal operation of each functional module in the system;

2) The management tool is connected to the sending system for configuration. After each configuration file is completed, the sending system will synchronize the configuration file to the receiving system in real time.

3) When the management tool configuration is saved, the sending end system and the receiving end system save the local configuration file at the same time, and the sending end system triggers the configuration verification;

4) Perform configuration verification. The specific steps are shown in Figure 4:

a. The sending system calculates the summary of the local configuration using the MD5 algorithm, synchronizes it to the receiving system for verification, and writes the verification event to the control channel;

b. The receiving end verifies the digests configured on both sides. If the digests configured on both sides are the same, the receiving end reads the data in the control channel; otherwise, no processing is performed.

c. After the set delay time, the sending system attempts to write a verification shutdown event to the control channel multiple times, and determines the verification result of the receiving end based on whether the write is successful or not. A successful write indicates a successful configuration verification, and a failed write indicates a failed configuration verification. The verification result is returned to the management tool.

There is only one data cache block in the control channel, that is, only one control command can be written at the same time. When the control channel is full, writing again will return failure. The receiving end reads the control channel data only when it determines that the HASH values configured on both sides are the same. After reading the data, the sending end can write again successfully.

After the sender writes the verification event to the control channel, it periodically attempts to write the verification shutdown event according to the set delay time and number of attempts. When the writing is successful, the attempt stops. Finally, the verification result of the receiving end is determined based on whether the writing is successful or not.

When configuration verification fails, when the sender triggers configuration synchronization and verification again, since the verification event has been written to the control channel, it directly attempts to write the verification shutdown event.

When the receiving end configuration verification succeeds, the verification event and the verification closing event are read from the control channel in turn.

5) When the configuration check fails, the sending end system decides whether to automatically perform configuration synchronization based on the configuration, and performs configuration verification again after synchronization is completed; or

6) Manually execute the configuration synchronization command to synchronize the configuration.

The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the above embodiments do not limit the present invention in any form, and any technical solution obtained by equivalent replacement or equivalent transformation falls within the protection scope of the present invention.

Claims (2)

1. A one-way configuration synchronization and checking method of a double-system architecture is characterized by comprising the following steps:

1) The method comprises the steps that when a sending end system and a receiving end system are started, local configurations are loaded respectively;

2) The management tool is connected with one side of the sending end system for configuration, and each time a configuration file is completed, the sending end system synchronizes the configuration file to the receiving end system in real time;

3) When the management tool configuration is stored, the sending end system and the receiving end system simultaneously store a local configuration file, and the sending end system triggers configuration checking;

4) The configuration checking method comprises the following specific steps:

a. The sending end system calculates a HASH value for local configuration or calculates an abstract by using a SM3 algorithm of national security or calculates an abstract by using an MD5 algorithm, synchronizes to the receiving end system for verification, and writes a verification event into a control channel;

b. the receiving end checks HASH values or abstracts configured on two sides, and when the HASH values or abstracts configured on two sides are the same, the receiving end reads data in the control channel, otherwise, the receiving end does not process the data;

c. after the set time is delayed, the sending end system tries to write a check closing event into the control channel for many times, judges the check result of the receiving end according to whether the writing is successful or not, and indicates that the configuration check is successful when the writing is successful, indicates that the configuration check is failed when the writing is unsuccessful, and returns the check result to the management tool;

only one data cache block is arranged in the control channel, namely only one control command can be written at the same time, when the control channel is full, the writing again is failed, the receiving end only reads the control channel data when judging that the HASH values configured on two sides are the same, and the transmitting end can write again successfully after reading the data;

5) When the configuration check fails, the system at the transmitting end determines whether to automatically execute the configuration synchronization according to the configuration, and after the synchronization is completed, the system at the transmitting end again performs the configuration check, and when the transmitting end triggers the configuration synchronization and the check again, the system at the transmitting end directly tries to write the check closing event because the check event is written into the control channel; when the configuration check of the receiving end is successful, reading a check event and a check closing event from the control channel successively;

Or (b)

6) And manually executing a configuration synchronization command and performing configuration synchronization.

2. The method for synchronizing and checking unidirectional configurations of a dual system architecture as defined in claim 1, wherein: in step 2), the method specifically comprises the following steps:

a) The sending end system receives a configuration file and checks the validity of the configuration;

b) If the verification fails, feeding back the failure and discarding the invalid configuration; if the verification is successful, updating the configuration and sending the configuration file to a receiving end system;

c) The receiving end system receives a configuration file and updates the configuration.