WO2025232412A1 - Computing information acquisition method and apparatus, and device and medium - Google Patents

Abstract

Provided in the present disclosure are a computing information acquisition method and apparatus, and a device and a medium, which are applied to the technical field of cloud computing. The method comprises: acquiring first indicator information of at least one computing resource, and acquiring second indicator information of a computing method used corresponding to each computing resource; on the basis of the first indicator information and the second indicator information, obtaining security evaluation results of each computing resource that correspond to different computing methods; and on the basis of the security evaluation results, obtaining a target computing resource and a target computing method, which are used for executing a first computing task, among the at least one computing resource and the corresponding computing methods.

Description

Computational information acquisition methods, devices, equipment and media

Cross-reference to related applications

This application claims priority to Chinese Patent Application No. 202410562039.6, filed in China on May 8, 2024, the entire contents of which are incorporated herein by reference.

Technical Field

This disclosure relates to the field of cloud computing technology, and in particular to a method, apparatus, device and medium for acquiring computing information.

Background Technology

In related technologies, when selecting target computing resources (computing nodes) for outsourced computing tasks, the computing power of the computing resources is usually taken as the main selection criterion, such as the current session concurrency of the computing resources, the comprehensive computing capabilities of the computing resources (such as bandwidth, central processing unit (CPU) etc.), etc., and then the computing resources with the optimal computing power are determined based on certain criteria and selected as the best choice.

However, the aforementioned method of selecting computing resources based on computing power does not consider the security status of computing resources and is difficult to meet the security requirements of special computing tasks. Depending on the business data type, computation type, and application scenario of the computing task, different computing tasks have different security requirements, such as data confidentiality and verifiability of computation results (to prevent forgery of computation results). Since the attributes, security protection measures, and available secure computing methods of computing resources typically differ, the degree to which different computing resources and secure computing methods meet the security requirements of computing tasks varies. Therefore, how to adapt appropriate computing resources and computing methods to computing tasks to meet their security requirements has become an urgent problem to be solved.

Summary of the Invention

The purpose of this disclosure is to provide a method, apparatus, device, and medium for acquiring computational information, in order to solve the problem that the selection of computing resources for computing tasks in related technologies cannot meet the security requirements of computing tasks.

One embodiment of this disclosure provides a method for obtaining computational information, comprising:

Obtain first indicator information of at least one computing resource, and obtain second indicator information of the computing method used for each computing resource;

Based on the first indicator information and the second indicator information, obtain the security evaluation results of each computing resource corresponding to different computing methods;

Based on the security evaluation results, the target computing resource and target computing method for performing the first computing task are obtained from the at least one computing resource and the corresponding computing method.

Optionally, the computational information acquisition method further includes:

Based on the first indicator information and/or the second indicator information, obtain the computing resources and corresponding computing methods that meet the requirements of the first computing task from among the at least one computing resource and the corresponding computing method, and use them to determine the target computing resources and the target computing method.

Optionally, the computational information acquisition method further includes one or more of the following:

The first indicator information is obtained based on the computation information of historical computation tasks performed using the computing resources within a first preset time range;

The second indicator information is obtained based on the calculation information of historical calculation tasks performed using the calculation method within the second preset time range.

Optionally, the computational information acquisition method, wherein obtaining the security evaluation result of each computational resource corresponding to different computational methods based on the first indicator information and the second indicator information includes:

Based on each first indicator information of the computing resource, a first security score corresponding to the computing resource is obtained; and based on each second indicator information of the computing resource using one of the calculation methods, a corresponding second security score is obtained.

Based on the first security score and the second security score, a security evaluation result is obtained for the computing resource corresponding to one of the computing methods.

Optionally, the computational information acquisition method, wherein obtaining a first security score corresponding to the computational resource based on each first indicator information of the computational resource includes:

Obtain the first security indicator value corresponding to each of the first indicator information;

Based on each of the first security index values, the first security score corresponding to the computing resource is obtained.

Optionally, the computational information acquisition method, wherein obtaining a corresponding second security score based on each second indicator information of the computational resources using one of the computational methods, includes:

Obtain the second security indicator value corresponding to each of the second indicator information;

Based on each of the second security index values, the second security score corresponding to the computing resource using one of the calculation methods is obtained.

Optionally, the computational information acquisition method, wherein obtaining the security evaluation result of the computational resource corresponding to one of the computational methods based on the first security score and the second security score includes:

The first security score and the second security score are weighted to obtain the security evaluation result of the computing resource corresponding to one of the computing methods.

Optionally, the computational information acquisition method, wherein obtaining the target computational resources and target computational method for performing the first computational task based on the security evaluation result includes:

Based on the resource selection strategy information of the first computing task and the security evaluation result, the target computing resources and target computing method for executing the first computing task are obtained.

The resource selection strategy information includes one or more of the following:

Resource selection factors;

Prioritization of resource selection factors;

Threshold parameters in resource selection factors.

Optionally, the computational information acquisition method, wherein obtaining the target computational resources and target computational method for executing the first computational task based on the resource selection strategy information of the first computational task and the security evaluation result includes:

Based on the parameter thresholds in the resource selection factors, the computing resources and corresponding computing methods that meet the parameter thresholds of the corresponding resource selection factors are selected as candidate resource information; wherein, each candidate resource information includes a computing resource and a corresponding computing method.

When the security factor has the highest priority among the resource selection factors, the resource information corresponding to the highest value of the security evaluation result is selected as the target selection resource information; wherein, the computing resource in the target selection resource information is the target computing resource, and the calculation method in the target selection resource information is the target calculation method.

Optionally, in the method for obtaining computational information, the step of selecting the resource information to be selected corresponding to the highest value of the security evaluation result as the target resource information includes:

Based on the priority of the resource selection factors, determine the resource selection factors with the second priority;

The resource information with the highest value of the security evaluation result is selected as the target resource information, and the resource information with the second priority as the optimal resource selection factor is selected from the resource information to be selected.

Optionally, the computational information acquisition method further includes one or more of the following:

Based on the numerical order of the security evaluation results corresponding to the resource information to be selected, from high to low, the multiple sets of resource information to be selected are sorted.

Based on the numerical order of the resource selection factors with the second priority from high to low, the resource information to be selected with the highest value of the security evaluation result is sorted.

Optionally, the computational information acquisition method, wherein obtaining the target computational resources and target computational method for executing the computational task based on the resource selection strategy information of the first computational task and the security evaluation result includes:

If the priority of the first resource selection factor is determined to be the first priority based on the priority of the resource selection factors, and the first resource selection factor is not a security factor, the computing resources are sorted according to the numerical order of the first resource selection factor from high to low to obtain the optimal computing resources.

Based on the security evaluation results corresponding to the optimal computing resources, the target computing resources and target computing methods for performing the first computing task are determined.

Optionally, the computational information acquisition method, wherein determining the target computational resources and target computational method for performing the first computational task based on the security evaluation result corresponding to the optimal computational resources, includes:

Based on the priority of the resource selection factors, the resource selection factor with the next highest priority after the first priority is selected as the second resource selection factor.

If the second resource selection factor is not a security factor, the optimal computing resources obtained in the previous sorting are sorted according to the numerical order of the second resource selection factor from high to low. If the second resource selection factor is a security factor, the optimal computing resources obtained in the previous sorting are combined with the corresponding calculation methods and sorted according to the numerical order of the corresponding security evaluation results from high to low to obtain the optimal candidate resource information.

After sorting the resource selection factors according to each priority, the optimal computing resource in the candidate resource information is selected as the target computing resource, and the computing method in the candidate resource information is selected as the target computing method.

One embodiment of this disclosure also provides a computational information acquisition device, comprising:

The information acquisition module is used to acquire first indicator information of at least one computing resource, and to acquire second indicator information of the computing method used for each computing resource.

The first determining module is used to obtain the security evaluation results of different computing methods corresponding to each computing resource based on the first indicator information and the second indicator information.

The second determining module is used to obtain, based on the security evaluation result, the target computing resource and the target computing method used to perform the first computing task from among the at least one computing resource and the corresponding computing method.

One embodiment of this disclosure also provides a network device, which includes a processor, a memory, and a program stored in the memory and executable on the processor, wherein the program, when executed by the processor, implements the computational information acquisition method as described in any of the preceding claims.

One embodiment of this disclosure also provides a readable storage medium, wherein a program is stored on the readable storage medium, and when the program is executed by a processor, it implements the steps in the computational information acquisition method described in any of the preceding claims.

One embodiment of this disclosure also provides a computer program product, which includes computer instructions that, when executed by a processor, implement the steps in the computational information acquisition method described in any of the preceding claims.

At least one of the above-described technical solutions disclosed herein has the following beneficial effects:

The computational information acquisition method described in this embodiment comprehensively evaluates computational resources and corresponding computational methods to determine the security evaluation results of different computational methods corresponding to the computational resources. Based on the security evaluation results, it determines the computational resources and computational methods used to perform the computational task, so as to select suitable computational resources and computational methods for the computational task by using appropriate security computational methods, thereby achieving the effect of meeting the security requirements of the computational task.

Attached Figure Description

Figure 1 is a flowchart illustrating the information acquisition method according to an embodiment of this disclosure;

Figure 2 is a schematic diagram of one embodiment of sorting computing resources using the method described in this disclosure;

Figure 3 is a schematic diagram of another embodiment of sorting computing resources using the method described in the present disclosure;

Figure 4 is a schematic diagram of the structure of the computational information acquisition device according to an embodiment of this disclosure.

Detailed Implementation

To make the technical problems, technical solutions and advantages to be solved by this disclosure clearer, a detailed description will be given below in conjunction with the accompanying drawings and specific embodiments.

The terms "first," "second," etc., used in this disclosure and in the claims are used to distinguish similar objects and not to describe a specific order or sequence. It should be understood that such terms can be used interchangeably where appropriate so that embodiments of this disclosure can be implemented in orders other than those illustrated or described herein, and the objects distinguished by "first" and "second" are generally of the same class, not limited in number; for example, a first object can be one or more. Furthermore, in the specification and claims, "and/or" indicates at least one of the connected objects, and the character "/" generally indicates that the preceding and following objects are in an "or" relationship.

To address the issue that the selection of computing resources for computing tasks in related technologies cannot meet the security requirements of computing tasks, this disclosure provides a method for obtaining computing information. By comprehensively evaluating computing resources and corresponding computing methods, the security evaluation results of different computing methods corresponding to computing resources are determined. Based on the security evaluation results, the computing resources and computing methods used to execute the computing task are determined, so that suitable computing resources and computing methods can be selected for the computing task using appropriate secure computing methods, thereby achieving the effect of meeting the security requirements of the computing task.

One embodiment of this disclosure provides a method for obtaining computational information, as shown in Figure 1, including:

S110, obtain first indicator information of at least one computing resource, and obtain second indicator information of the computing method used for each computing resource;

S120, based on the first indicator information and the second indicator information, obtain the security evaluation results of different computing methods corresponding to each computing resource;

S130, based on the security evaluation result, obtain the target computing resource and target computing method used to perform the first computing task from the at least one computing resource and the corresponding computing method.

It should be noted that, in the embodiments of this disclosure, the computing task mentioned is any computing task and does not specifically refer to one of the computing tasks.

The computational information acquisition method described in this embodiment combines the first indicator information of at least one computational resource with the second indicator information of the computational method used by each computational resource to determine the security evaluation result of each computational resource corresponding to different computational methods. Based on the security evaluation result, the target computational resource and target computational method for executing the first computational task are determined. In this way, the computational resources and the computational methods they provide are comprehensively evaluated, and a security evaluation result is obtained, so as to determine the target computational resource and target computational method corresponding to executing the computational task from the perspective of meeting the security requirements of the computational task.

Optionally, the method further includes one or more of the following:

The first indicator information is obtained based on the computation information of historical computation tasks performed using the computing resources within a first preset time range;

The second indicator information is obtained based on the calculation information of historical calculation tasks performed using the calculation method within the second preset time range.

In addition to obtaining the first indicator information and the second indicator information in the manner described above, the method may optionally include:

The first indicator information is obtained based on the first pre-configuration information;

The second indicator information is obtained based on the second pre-configuration information.

Using the computational information acquisition method described in this embodiment, the first indicator information of computational resources and the second indicator information of computational methods can be obtained through information collection and/or pre-configuration information.

In this implementation, optionally, the first indicator information of the computing resources can be obtained by statistically analyzing the computing information of historical computing tasks performed using the computing resources within a first preset time range, and the other part of the first indicator information can be obtained by first pre-configuration information; the second indicator information of the computing method can be obtained by statistically analyzing the computing information of historical computing tasks performed using the computing method within a second preset time range, and the other part of the second indicator information can be obtained by second pre-configuration information.

The first indicator information includes credibility indicator information and/or security capability indicator information; and/or

The second indicator information includes one or more of the following: confidentiality indicator information, verifiability indicator information, computation latency, and computation accuracy.

It should be noted that the information included in the first and second indicators above is for illustrative purposes only and is not limited to these examples.

In one embodiment, optionally, the first indicator information includes trustworthiness indicator information and/or security capability indicator information. The trustworthiness indicator information of the computing resource represents the success rate of the computing resource executing historical computing tasks, and can be obtained by statistically analyzing the computing information of historical computing tasks executed by the computing resource within a first preset period T1 or a first preset time range. Optionally, this computing information includes, but is not limited to, the number of historical computing tasks executed and/or the number of successful historical computing tasks. The trustworthiness indicator information can be obtained by comparing the number of successful historical computing tasks executed within the first preset period T1 or the first preset time range with the total number of historical computing tasks executed. Optionally, the higher the value of the trustworthiness indicator information, the higher the trustworthiness of the computing resource.

Using this implementation method, the credibility index information is formed as a dynamic evaluation index for security evaluation of computing resources. By collecting information at each first preset period T1 or within a first preset time range, the calculation results of historical computing tasks can be obtained, and the credibility index information of each computing resource can be obtained.

Optionally, the security capability index information of the computing resources can be obtained based on the first pre-configuration information, that is, it can be obtained through pre-configuration, such as through the first pre-configuration information. This security capability index information can be a security capability level certificate issued by an authorized institution.

In one embodiment, optionally, the second indicator information includes one or more of the following: confidentiality indicator information, verifiability indicator information, computation latency, and computation accuracy. Confidentiality indicator information and verifiability indicator information can be referred to as security-related indicators in the second indicator information, while computation latency and computation accuracy can be referred to as non-security-related indicators in the second indicator information.

Optionally, the confidentiality and verifiability metrics can be obtained through pre-configuration, such as through second pre-configured information. The confidentiality metrics represent the degree of data confidentiality achievable by the computation method; optionally, a higher value for the confidentiality metrics indicates a higher degree of data confidentiality. The verifiability metrics represent the degree of support the computation method provides for computational verification, which can be one or more of the following: no verification supported, verification supported, and conditional verification supported. Optionally, different values for the verifiability metrics represent different levels of support.

In this embodiment of the disclosure, optionally, the computation latency can be obtained by statistically analyzing computation information of historical computation tasks executed using a computation method within a second preset period T2 or a second preset time range. Optionally, this computation information includes, but is not limited to, one or more of the following: the type of computation task, the amount of data, the completion time, whether a computation method was used, and the type of computation method used. Using this implementation, by statistically analyzing one or more of the following for each historical computation task that used a computation method within the second preset period T2 or a second preset time range: the type of historical computation task executed, the amount of data, the completion time, whether a computation method was used, and the type of computation method used, the computation latency of the computation method can be calculated and determined; similarly, the computation latency of each computation method can be obtained using the same method.

Optionally, the computation latency can be the average computation latency when using the computation method to execute specific historical computation information.

Optionally, the calculation accuracy can be obtained based on the second pre-configuration information, i.e., through a preset method. This calculation accuracy can be expressed as the accuracy of the calculation method.

Based on the above, by adopting the computational information acquisition method described in the embodiments of this disclosure, for each computational resource and each corresponding computational method, the security evaluation results for each computational resource corresponding to different computational methods can be obtained according to the first indicator information of the computational resource and the second indicator information of each corresponding computational method.

Specifically, for each computing resource and its corresponding computing method, the security capability index information of the computing resource and one or more of the confidentiality index information, verifiability index information, and computing accuracy information of the corresponding computing method are obtained through a preset method; by extracting information and performing data analysis, the credibility index information of the computing resource and the computing latency of the corresponding computing method are obtained.

For example, the first indicator information of computing resources and the second indicator information of computing methods can be shown in Table 1 below:

Table 1

In this embodiment of the disclosure, optionally, the credibility index information is located between (0, n), and the larger the value of the credibility index information, the higher the credibility of the computing resource; optionally, the security capability index information is located between [0, n], and the larger the value of the security capability index information, the higher the security capability level of the computing resource; optionally, the confidentiality index information is located between [0, n], and the larger the value of the confidentiality index information, the higher the confidentiality level of the confidentiality index of the calculation method; optionally, the verifiability index information is located between [0, n], and different types of verifiability correspond to different values; optionally, the computation latency is located between (0, n), and the larger the value of the computation latency, the larger the average latency of the computation task executed by the computation method; optionally, the computation accuracy is located between (0, n), and the larger the value of the computation accuracy, the higher the accuracy of the computation task executed by the computation method.

In one embodiment, optionally, the computational information acquisition method described in this disclosure further includes:

Based on the first indicator information and/or the second indicator information, obtain the computing resources and corresponding computing methods that meet the requirements of the first computing task from among the at least one computing resource and the corresponding computing method, and use them to determine the target computing resources and the target computing method.

Optionally, the requirements of the first computing task can be referred to as the indicator requirements of the first computing task, which may include requirements for computing indicators and/or requirements for security indicators. The requirements of the first computing task include, but are not limited to, only the first indicator information and/or the second indicator information. For example, the requirements for computing indicators include computing latency and/or computing accuracy, and the requirements for security indicators include reliability requirements, security capability requirements, confidentiality requirements and/or verifiability requirements.

In this implementation, when there are specific requirements for performing the first computing task, by analyzing the computing index information of multiple computing resources and corresponding different computing methods used to perform historical computing tasks, computing resources and corresponding computing methods whose computing index information meets the requirements of the first computing task are selected. These are then used as the computing resources and computing methods for further screening and determining the target computing resources and target computing methods for performing the first computing task. Thus, through this screening process, the target computing resources and target computing methods determined based on the security evaluation results calculated by each computing resource and corresponding to different computing methods can meet the requirements for performing the first computing task.

In one embodiment of this disclosure, optionally, in step S120, obtaining the security evaluation result of each computing resource corresponding to different computing methods based on the first indicator information and the second indicator information includes:

Based on each first indicator information of the computing resource, a first security score corresponding to the computing resource is obtained; and based on each second indicator information of the computing resource using one of the calculation methods, a corresponding second security score is obtained.

Based on the first security score and the second security score, a security evaluation result is obtained for the computing resource corresponding to one of the computing methods.

Optionally, obtaining a first security score corresponding to the computing resource based on each first indicator information of the computing resource includes:

Obtain the first security indicator value corresponding to each of the first indicator information;

Based on each of the first security index values, the first security score corresponding to the computing resource is obtained.

Optionally, based on each second indicator information obtained using one of the calculation methods for the computing resources, a corresponding second security score is obtained, including:

Obtain the second security indicator value corresponding to each of the second indicator information;

Based on each of the second security index values, the second security score corresponding to the computing resource using one of the calculation methods is obtained.

Using this implementation method, when determining the security evaluation results of different computing methods for each computing resource, each of the first indicator information of one computing resource can be mapped to the corresponding first security indicator value through a mapping method, and each of the second indicator information of one computing method used by one of the computing resources can be mapped to the corresponding second security indicator value.

After obtaining the first security index value and the second security index value respectively, a first security score corresponding to one of the computing resources is determined based on each of the first security index values, and a second security score corresponding to one of the computing methods is determined based on each of the second security index values.

Based on the first security score and the second security score, determine the security evaluation result of one of the computing resources corresponding to one of the computing methods.

For example, when the first indicator information includes credibility indicator information and security capability indicator information, as shown in Table 1, for each computing resource, according to the first indicator information corresponding to the obtained computing resource, the corresponding first indicator information is mapped to a numerical value (that is, the first security indicator value), and normalization is performed, that is, as shown in Table 1, each first security indicator value is mapped to a value within (0, n).

Optionally, after obtaining the first security index values of multiple first index information of computing resources, the first security score corresponding to the corresponding computing resource can be calculated according to the weights corresponding to different first index information. For example, for computing resource i, if the weight corresponding to the credibility index information R1 in the first index information is W1 and the weight corresponding to the security capability index information R2 is W2, then the calculation method for the first security score Si is determined as Si = W1*R1 + W2*R2.

When the second indicator information includes one or more of the following: confidentiality indicator information, verifiability indicator information, computation latency, and computation accuracy, as shown in Table 1, for each computation method corresponding to each computation resource, the corresponding second indicator information is mapped to a numerical value (i.e., the second security indicator value) based on the obtained second indicator information corresponding to the corresponding computation method, and then normalized. That is, as shown in Table 1, each second security indicator value is mapped to a value within (0, n).

Optionally, after obtaining the second security index value of multiple second index information for one calculation method corresponding to one computing resource, a second security score corresponding to the corresponding calculation method can be calculated based on the weights corresponding to different second index information. The calculation method for the second security score can be the same as that for the first security score, and will not be repeated here.

The computational information acquisition method described in this embodiment of the present disclosure, after obtaining a first security score of one of the computational resources and a second security score corresponding to one of the computational methods of the computational resource, optionally obtains a security evaluation value of the computational resource corresponding to the computational method by performing a weighted operation on the first security score and the second security score.

For example, if the weight corresponding to the first security score of the computing resource is set to p, and the weight corresponding to the second security score of the calculation method is set to q, then the way to determine the security evaluation value of computing resource i and the corresponding calculation method j is p*Si+q*S _ij ; where Si is the first security score of the computing resource, and S _ij is the second security score corresponding to one of the calculation methods j of the computing resource i.

For example, in this embodiment of the disclosure, the security evaluation values of different computing methods corresponding to different computing resources determined by the above method can be shown in Table 2 below:

Table 2

It should be noted that the method described in the embodiments of this disclosure, which determines the security evaluation value of each computing resource corresponding to different computing methods, is only an example and is not limited thereto. Not every possible implementation will be described in detail here.

In this embodiment of the disclosure, optionally, in step S130, obtaining the target computing resources and target computing method for performing the first computing task based on the security evaluation result includes:

Based on the resource selection strategy information of the first computing task and the security evaluation result, the target computing resources and target computing method for executing the first computing task are obtained.

The resource selection strategy information includes one or more of the following:

Resource selection factors;

Prioritization of resource selection factors;

Threshold parameters in resource selection factors.

In one embodiment of this disclosure, the resource selection factors may optionally include, but are not limited to, one or more of security factors, computing power factors, and distance factors.

The computational information acquisition method described in this embodiment determines the target computational resources and target computational methods for executing the first computational task based on the security evaluation results and the resource selection strategy information of the first computational task. This incorporates the security computational method into the determination of the target computational resources and target computational methods of the first computational task, and integrates multiple factors of resource selection strategy to help achieve a more reasonable way of selecting computational resources and security computational methods.

In one embodiment of this disclosure, optionally, in step S130, based on the resource selection strategy information of the first computing task and the security evaluation result, a target computing resource and a target computing method for performing the first computing task are obtained, including:

Based on the parameter thresholds in the resource selection factors, the computing resources and corresponding computing methods that meet the parameter thresholds of the corresponding resource selection factors are selected as candidate resource information; wherein, each candidate resource information includes a computing resource and a corresponding computing method.

When the security factor has the highest priority among the resource selection factors, the resource information corresponding to the highest value of the security evaluation result is selected as the target selection resource information; wherein, the computing resource in the target selection resource information is the target computing resource, and the calculation method in the target selection resource information is the target calculation method.

Optionally, the parameter thresholds in the resource selection factors include one or more of the following:

The first security threshold corresponding to the first security score of the computational resource;

The second security threshold corresponding to the calculation method for the second security score;

The third safety threshold of the safety assessment results;

The computing power threshold corresponding to the computing power value factor;

Distance threshold corresponding to distance factor.

In one embodiment, optionally, if the resource selection strategy information of the first computing task includes parameter thresholds, then in the first computing task and the corresponding computing method, computing resources and corresponding computing methods that meet the corresponding parameter thresholds for the corresponding resource selection factors are selected as the resource information to be selected, as the target computing resources and target computing methods for further determining the target computing resources and target computing methods for executing the first computing task.

For example, when the resource selection factors include security factors, the parameter threshold may include one or more of a first security threshold, a second security threshold, and a third security threshold. When the first security threshold, the second security threshold, and the third security threshold are included, the computing resources and corresponding computing methods that have a first security score greater than the first security threshold, a second security score greater than the second security threshold, and a security evaluation result greater than the third security threshold are selected as the resource information to be selected.

In this embodiment of the disclosure, the resource information to be selected is formed as a combination including a computing resource and a computing method. Using this implementation, multiple computing resources and corresponding computing methods are filtered or screened through parameter thresholds in the resource selection factors to obtain multiple resource information to be selected, which is used to determine the target computing resource and target computing method for performing the first computing task.

It should be noted that, in the embodiments of this disclosure, the computing resources that meet the parameter thresholds and the corresponding computing methods mentioned are, that is, the parameter values of the corresponding resource selection factors determined based on the computing resources and the corresponding computing methods are greater than the corresponding parameter thresholds.

Optionally, if the resource selection strategy information includes the priority of resource selection factors, the priority can be configured to have different priority levels for security factors, computing power factors, and distance factors, such as configuring security factors as the first priority and computing power factors as the second priority, etc., and is not limited to this.

Optionally, in this embodiment of the disclosure, the method further includes one or more of the following:

Based on the security evaluation values corresponding to the candidate resource information, arranged from high to low, the multiple sets of candidate resource information are sorted.

Based on the numerical order of the resource selection factors with the second priority from high to low, the resource information to be selected with the highest value of the security evaluation result is sorted.

In one embodiment, if there are at least two groups of candidate resource information corresponding to the highest security evaluation value, the candidate resource information of the at least two groups is sorted according to the performance value of the resource selection factor with the second priority from high to low.

Because a secure computing method is introduced during the selection of target computing resources and target computing methods for the first computing task, and computing resources can support a variety of different computing methods, various security effects can be produced when a specific computing resource is combined with each secure computing method. Computing resources that originally did not meet security conditions may meet security conditions after being combined with computing methods. Therefore, in this embodiment of the disclosure, the process of selecting computing resources with various inherent attributes (such as bandwidth, routing, and computing power) is changed to a process of selecting candidate resource information that includes a combination of computing resources (carrying inherent attributes) and computing methods. Specifically, by sorting the candidate resource information that includes a combination of computing resources (carrying inherent attributes) and computing methods, the candidate resource information is selected, so that the selected target computing resources and target computing methods for executing the first computing task are more in line with the security requirements of the first computing task.

In one embodiment of this disclosure, optionally, when the priority of the security factor among the resource selection factors is the first priority, the resource selection process includes the following steps:

Based on the numerical order of the security evaluation results corresponding to the candidate resource information from high to low, the multiple sets of candidate resource information are sorted. As shown in Figure 2, the multiple candidate resource information includes multiple computing resources and multiple computing methods, such as resource1+method1, resource1+method4, resource1+method3, ..., resource x+method2, etc. Based on the security evaluation results calculated in the above manner, multiple combinations of computing resources and computing methods can be sorted from high to low.

If there are at least two groups of candidate resource information corresponding to the highest value of the security evaluation result, the candidate resource information is sorted according to the performance value of the resource selection factor with the second priority, from highest to lowest. Specifically, for the combination of computing resources and computing methods of at least two groups with the highest security evaluation results, the combination of computing resources and computing methods of at least two groups is sorted according to the resource selection factor with the second priority. For example, the resource selection factor with the second priority can be the computing power factor; for the combination of computing resources and computing methods of at least two groups with the highest security evaluation values, the sorting can continue to be based on the computing power factor from highest to lowest.

Similarly, based on the above sorting principle, when there are at least two groups of candidate resource information corresponding to the highest performance value of the resource selection factor of the second priority, the candidate resource information of the at least two groups of candidates with the highest performance value corresponding to the resource selection factor of the second priority is sorted again according to the order of the performance values of the resource selection factor of the third priority from high to low. This process is repeated until all factors with set priorities are sorted. The combination of calculation resources and calculation methods with the highest security evaluation result and whose priorities of other resource selection factors meet the priorities set in the resource selection strategy information is selected as the target selection resource information.

Based on the above, in one embodiment of the method described in this disclosure, optionally, selecting the resource information to be selected corresponding to the highest value of the security evaluation result as the target resource information includes:

Based on the priority of the resource selection factors, determine the resource selection factors with the second priority;

The resource information with the highest value of the security evaluation result is selected as the target resource information, and the resource information with the second priority as the optimal resource selection factor is selected from the resource information to be selected.

Specifically, when there are at least two sets of candidate resource information corresponding to the highest value of the security evaluation result, the resource selection factor with the second priority is determined according to the priority of the resource selection factor.

Among the at least two groups of candidate resource information corresponding to the highest value of the security evaluation result, the candidate resource information with the highest performance value corresponding to the second priority resource selection factor is the target selection resource information.

In another embodiment, optionally, in step S130, based on the resource selection strategy information of the first computing task and the security evaluation result, the target computing resources and target computing method for performing the computing task are obtained, including:

If the priority of the first resource selection factor is determined to be the first priority based on the priority of the resource selection factors, and the first resource selection factor is not a security factor, the computing resources are sorted according to the numerical order of the first resource selection factor from high to low to obtain the optimal computing resources.

Based on the security evaluation results corresponding to the optimal computing resources, the target computing resources and target computing methods for performing the first computing task are determined.

In one implementation, optionally, based on the security evaluation result corresponding to the optimal computing resources, the target computing resources and target computing method for performing the first computing task are determined, including:

Based on the priority of the resource selection factors, the resource selection factor with the next highest priority after the first priority is selected as the second resource selection factor.

If the second resource selection factor is not a security factor, the optimal computing resources obtained in the previous sorting are sorted according to the numerical order of the second resource selection factor from high to low. If the second resource selection factor is a security factor, the optimal computing resources obtained in the previous sorting are combined with the corresponding calculation methods and sorted according to the numerical order of the corresponding security evaluation results from high to low to obtain the optimal candidate resource information.

After sorting the resource selection factors according to each priority, the optimal computing resource in the candidate resource information is selected as the target computing resource, and the computing method in the candidate resource information is selected as the target computing method.

In this implementation, optionally, if the priority of the security factor among the resource selection factors is not the first priority, the resource selection process includes the following steps:

Based on the performance values of the first resource selection factor (first priority) from high to low, multiple computing resources are sorted, as shown in Figure 3;

If, among the multiple computing resources, there are at least two computing resources with the highest performance value corresponding to the first resource selection factor, then according to the priority of the resource selection factor, the next priority after the first priority is taken as the second resource selection factor, and the at least two computing resources with the highest performance value of the first resource selection factor are sorted.

Where the second resource selection factor is not a security factor, the computing resources obtained in the previous sorting are sorted according to the numerical order of the second resource selection factor from high to low. Where the second resource selection factor is a security factor, the at least two computing resources obtained in the previous sorting and the corresponding computing methods are sorted according to the numerical order of the corresponding security evaluation results from high to low. Using this step, at least two computing resources in the highest ranking are sorted according to the next highest priority. Optionally, when sorting by security factor, at least two computing resources in the highest ranking are sorted by a combination of computing resources and computing methods, that is, the resource sorting is extended to a sorting of a combination of computing resources and computing methods.

Similarly, after sorting by security factors, if there are at least two groups of computing resources and computing methods with the highest security evaluation results, the sorting can continue based on the next priority resource selection factor. This process continues until all priority resource selection factors have been sorted. The combination of computing resources and computing methods in the optimal position is then selected as the corresponding target computing resources and target computing methods for executing the first computing task.

The computational information acquisition method described in this disclosure incorporates secure computational methods into the selection of computational resources and designs a comprehensive multi-factor computational resource decision-making strategy, which can help users make more reasonable selections of computational resources and secure computational methods.

One embodiment of this disclosure also provides a computational information acquisition device, as shown in FIG4, the device comprising:

The information acquisition module 410 is used to acquire first indicator information of at least one computing resource and second indicator information of the computing method used for each computing resource.

The first determining module 420 is used to obtain the security evaluation results of different computing methods corresponding to each computing resource based on the first indicator information and the second indicator information.

The second determining module 430 is used to obtain, based on the security evaluation result, the target computing resource and the target computing method used to perform the first computing task among the at least one computing resource and the corresponding computing method.

The computational information acquisition device described in this embodiment comprehensively evaluates computational resources and corresponding computational methods to determine the security evaluation results of different computational methods corresponding to the computational resources. Based on the security evaluation results, it determines the computational resources and computational methods used to perform computational tasks, so as to select suitable computational resources and computational methods for computational tasks using appropriate security computational methods, thereby achieving the effect of meeting the security requirements of computational tasks.

Optionally, in the aforementioned computational information acquisition device, the second determining module 430 is further configured to:

Based on the first indicator information and/or the second indicator information, obtain the computing resources and corresponding computing methods that meet the requirements of the first computing task from among the at least one computing resource and the corresponding computing method, and use them to determine the target computing resources and the target computing method.

Optionally, in the aforementioned computational information acquisition device, the information acquisition module 410 is further configured to perform one or more of the following:

The first indicator information is obtained based on the computation information of historical computation tasks performed using the computing resources within a first preset time range;

The second indicator information is obtained based on the calculation information of historical calculation tasks performed using the calculation method within the second preset time range.

Optionally, in the computational information acquisition device, the first indicator information includes trustworthiness indicator information and/or security capability indicator information; and/or

The second indicator information includes one or more of the following: confidentiality indicator information, verifiability indicator information, computation latency, and computation accuracy.

Optionally, in the computational information acquisition device, the first determining module 420 obtains a security evaluation result for each computational resource corresponding to a different computational method based on the first indicator information and the second indicator information, including:

Based on each first indicator information of the computing resource, a first security score corresponding to the computing resource is obtained; and based on each second indicator information of the computing resource using one of the calculation methods, a corresponding second security score is obtained.

Based on the first security score and the second security score, a security evaluation result is obtained for the computing resource corresponding to one of the computing methods.

Optionally, in the computational information acquisition device, the first determining module 420 obtains a first security score corresponding to the computational resource based on each first indicator information of the computational resource, including:

Obtain the first security indicator value corresponding to each of the first indicator information;

Based on each of the first security index values, the first security score corresponding to the computing resource is obtained.

Optionally, in the computational information acquisition device, the first determining module 420 obtains a corresponding second security score based on each second indicator information of the computational resource using one of the computational methods, including:

Obtain the second security indicator value corresponding to each of the second indicator information;

Based on each of the second security index values, the second security score corresponding to the computing resource using one of the calculation methods is obtained.

Optionally, in the computational information acquisition device, the first determining module 420 obtains a security evaluation result of the computational resource corresponding to one of the computational methods based on the first security score and the second security score, including:

The first security score and the second security score are weighted to obtain the security evaluation result of the computing resource corresponding to one of the computing methods.

Optionally, in the computational information acquisition device, the second determining module 430 obtains the target computational resources and target computational method for performing the first computational task based on the security evaluation result, including:

Based on the resource selection strategy information of the first computing task and the security evaluation result, the target computing resources and target computing method for executing the first computing task are obtained.

The resource selection strategy information includes one or more of the following:

Resource selection factors;

Prioritization of resource selection factors;

Threshold parameters in resource selection factors.

Optionally, in the computational information acquisition device, the second determining module 430 obtains the target computational resources and target computational method for executing the first computational task based on the resource selection strategy information of the first computational task and the security evaluation result, including:

Based on the parameter thresholds in the resource selection factors, the computing resources and corresponding computing methods that meet the parameter thresholds of the corresponding resource selection factors are selected as candidate resource information; wherein, each candidate resource information includes a computing resource and a corresponding computing method.

When the security factor has the highest priority among the resource selection factors, the resource information corresponding to the highest value of the security evaluation result is selected as the target selection resource information; wherein, the computing resource in the target selection resource information is the target computing resource, and the calculation method in the target selection resource information is the target calculation method.

Optionally, in the computational information acquisition device, the second determining module 430 selects the resource information to be selected corresponding to the highest value of the security evaluation result as the target resource information, including:

Based on the priority of the resource selection factors, determine the resource selection factors with the second priority;

The resource information with the highest value of the security evaluation result is selected as the target resource information, and the resource information with the second priority as the optimal resource selection factor is selected from the resource information to be selected.

Optionally, in the computational information acquisition device, the second determining module 430 is further configured to perform one or more of the following:

Based on the numerical order of the security evaluation results corresponding to the resource information to be selected, from high to low, the multiple sets of resource information to be selected are sorted.

Based on the numerical order of the resource selection factors with the second priority from high to low, the resource information to be selected with the highest value of the security evaluation result is sorted.

Optionally, in the computational information acquisition device, the second determining module 430 obtains the target computational resources and target computational method for performing the computational task based on the resource selection strategy information of the first computational task and the security evaluation result, including:

If the priority of the first resource selection factor is determined to be the first priority based on the priority of the resource selection factors, and the first resource selection factor is not a security factor, the computing resources are sorted according to the numerical order of the first resource selection factor from high to low to obtain the optimal computing resources.

Based on the security evaluation results corresponding to the optimal computing resources, the target computing resources and target computing methods for performing the first computing task are determined.

Optionally, in the computational information acquisition device, the second determining module 430 determines the target computational resources and target computational method for performing the first computational task based on the security evaluation result corresponding to the optimal computational resources, including:

Based on the priority of the resource selection factors, the resource selection factor with the next highest priority after the first priority is selected as the second resource selection factor.

If the second resource selection factor is not a security factor, the optimal computing resources obtained in the previous sorting are sorted according to the numerical order of the second resource selection factor from high to low. If the second resource selection factor is a security factor, the optimal computing resources obtained in the previous sorting are combined with the corresponding calculation methods and sorted according to the numerical order of the corresponding security evaluation results from high to low to obtain the optimal candidate resource information.

After sorting the resource selection factors according to each priority, the optimal computing resource in the candidate resource information is selected as the target computing resource, and the computing method in the candidate resource information is selected as the target computing method.

One embodiment of this disclosure also provides a network device, including a processor, a memory, and a program stored in the memory and executable on the processor, wherein the program, when executed by the processor, implements the computational information acquisition method as described in any of the preceding claims.

In the network device described in this embodiment, when the program is executed by the processor, it implements the specific implementation of the computational information acquisition method as described above. For details, please refer to the detailed description of the corresponding specific implementation of the method, which will not be repeated here.

In addition, specific embodiments of this disclosure also provide a readable storage medium having a computer program stored thereon, wherein when the program is executed by a processor, it implements the steps in the computational information acquisition method described in any of the above.

Specifically, the readable storage medium is applied to the aforementioned network device. When applied to the network device, the execution steps in the corresponding computational information acquisition method are described in detail above and will not be repeated here.

Another embodiment of this disclosure also provides a computer program product, which includes computer instructions that, when executed by a processor, implement the steps of the computational information acquisition method as described above.

Optionally, embodiments of this disclosure may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, compact disc read-only memory (CD-ROM), optical storage, etc.) containing computer-usable program code.

The computer program product described in this disclosure includes computer instructions that, when executed by a processor, implement the various processes of the computational information acquisition method embodiment shown above, and can achieve the same technical effect. To avoid repetition, these will not be repeated here.

In the several embodiments provided in this disclosure, it should be understood that the disclosed methods and apparatus can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative. For instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces, or indirect coupling or communication connection between devices or units, and may be electrical, mechanical, or other forms.

Furthermore, the functional units in the various embodiments of this disclosure can be integrated into one processing unit, or each unit can be physically comprised separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or in the form of hardware plus software functional units.

The integrated units implemented as software functional units described above can be stored in a computer-readable storage medium. These software functional units, stored in a storage medium, include several instructions that cause a computer device (which may be a personal computer, server, or network device, etc.) to execute some steps of the transmission and reception methods described in the various embodiments of this disclosure. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

The above describes the preferred embodiments of this disclosure. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles described in this disclosure, and these improvements and modifications should also be considered within the scope of protection of this disclosure.

Claims (17)

A method for acquiring computational information, comprising: Obtain first indicator information of at least one computing resource, and obtain second indicator information of the computing method used for each computing resource; Based on the first indicator information and the second indicator information, obtain the security evaluation results of each computing resource corresponding to different computing methods; Based on the security evaluation results, the target computing resource and target computing method for performing the first computing task are obtained from the at least one computing resource and the corresponding computing method. The computational information acquisition method according to claim 1, further comprising: Based on the first indicator information and/or the second indicator information, obtain the computing resources and corresponding computing methods that meet the requirements of the first computing task from among the at least one computing resource and the corresponding computing method, and use them to determine the target computing resources and the target computing method. The computational information acquisition method according to claim 1 further includes one or more of the following: The first indicator information is obtained based on the computation information of historical computation tasks performed using the computing resources within a first preset time range; The second indicator information is obtained based on the calculation information of historical calculation tasks performed using the calculation method within the second preset time range. According to the computational information acquisition method of claim 1, obtaining the security evaluation result of each computational resource corresponding to different computational methods based on the first indicator information and the second indicator information includes: Based on each first indicator information of the computing resource, a first security score corresponding to the computing resource is obtained; and based on each second indicator information of the computing resource using one of the calculation methods, a corresponding second security score is obtained. Based on the first security score and the second security score, a security evaluation result is obtained for the computing resource corresponding to one of the computing methods. According to the computational information acquisition method of claim 4, obtaining the first security score corresponding to the computational resource based on each first indicator information of the computational resource includes: Obtain the first security indicator value corresponding to each of the first indicator information; Based on each of the first security index values, the first security score corresponding to the computing resource is obtained. According to the computational information acquisition method of claim 4, obtaining the corresponding second security score based on each second indicator information of the computational resource using one of the computational methods includes: Obtain the second security indicator value corresponding to each of the second indicator information; Based on each of the second security index values, the second security score corresponding to the computing resource using one of the calculation methods is obtained. According to the computational information acquisition method of claim 4, obtaining the security evaluation result of the computational resource corresponding to one of the computational methods based on the first security score and the second security score includes: The first security score and the second security score are weighted to obtain the security evaluation result of the computing resource corresponding to one of the computing methods. According to the computational information acquisition method of claim 1, obtaining the target computational resources and target computational method for performing the first computational task based on the security evaluation result includes: Based on the resource selection strategy information of the first computing task and the security evaluation result, the target computing resources and target computing method for executing the first computing task are obtained. The resource selection strategy information includes one or more of the following: Resource selection factors; Prioritization of resource selection factors; Threshold parameters in resource selection factors. According to the computational information acquisition method of claim 8, obtaining the target computational resources and target computational method for executing the first computational task based on the resource selection strategy information of the first computational task and the security evaluation result includes: Based on the parameter thresholds in the resource selection factors, the computing resources and corresponding computing methods that meet the parameter thresholds of the corresponding resource selection factors are selected as candidate resource information; wherein, each candidate resource information includes a computing resource and a corresponding computing method. When the security factor has the highest priority among the resource selection factors, the resource information corresponding to the highest value of the security evaluation result is selected as the target selection resource information; wherein, the computing resource in the target selection resource information is the target computing resource, and the calculation method in the target selection resource information is the target calculation method. According to the calculation information acquisition method of claim 9, wherein selecting the resource information to be selected corresponding to the highest value of the security evaluation result as the target resource information includes: Based on the priority of the resource selection factors, determine the resource selection factors with the second priority; The resource information with the highest value of the security evaluation result is selected as the target resource information, and the resource information with the second priority as the optimal resource selection factor is selected from the resource information to be selected. The computational information acquisition method according to claim 9 or 10 further includes one or more of the following: Based on the numerical order of the security evaluation results corresponding to the resource information to be selected, from high to low, the multiple sets of resource information to be selected are sorted. Based on the numerical order of the resource selection factors with the second priority from high to low, the resource information to be selected with the highest value of the security evaluation result is sorted. According to the computational information acquisition method of claim 8, obtaining the target computational resources and target computational method for executing the computational task based on the resource selection strategy information of the first computational task and the security evaluation result includes: If the priority of the first resource selection factor is determined to be the first priority based on the priority of the resource selection factors, and the first resource selection factor is not a security factor, the computing resources are sorted according to the numerical order of the first resource selection factor from high to low to obtain the optimal computing resources. Based on the security evaluation results corresponding to the optimal computing resources, the target computing resources and target computing methods for performing the first computing task are determined. According to the computational information acquisition method of claim 12, determining the target computational resource and target computational method for performing the first computational task based on the security evaluation result corresponding to the optimal computational resource includes: Based on the priority of the resource selection factors, the resource selection factor with the next highest priority after the first priority is selected as the second resource selection factor. If the second resource selection factor is not a security factor, the optimal computing resources obtained in the previous sorting are sorted according to the numerical order of the second resource selection factor from high to low. If the second resource selection factor is a security factor, the optimal computing resources obtained in the previous sorting are combined with the corresponding calculation methods and sorted according to the numerical order of the corresponding security evaluation results from high to low to obtain the optimal candidate resource information. After sorting the resource selection factors according to each priority, the optimal computing resource in the candidate resource information is selected as the target computing resource, and the computing method in the candidate resource information is selected as the target computing method. A computational information acquisition device, comprising: The information acquisition module is used to acquire first indicator information of at least one computing resource, and to acquire second indicator information of the computing method used for each computing resource. The first determining module is used to obtain the security evaluation results of different computing methods corresponding to each computing resource based on the first indicator information and the second indicator information. The second determining module is used to obtain, based on the security evaluation result, the target computing resource and the target computing method used to perform the first computing task from among the at least one computing resource and the corresponding computing method. A network device includes a processor, a memory, and a program stored in the memory and executable on the processor, wherein the program, when executed by the processor, implements the computational information acquisition method as described in any one of claims 1 to 13. A readable storage medium storing a program that, when executed by a processor, implements the steps of the computational information acquisition method as described in any one of claims 1 to 13. A computer program product includes computer instructions that, when executed by a processor, implement the steps of the computational information acquisition method as described in any one of claims 1 to 13.