基于区块链的网络配置管理模型及方法

Model and method of network configuration management based on blockchain

近年来,随着网络规模的迅速扩大和企业信息化水平的提高,企业网络的运行维护管理日趋复杂,由于内部人员操作不当或误操作造成的数据安全问题不断涌现,网络设备所能支持的功能越来越多,导致网络配置错误经常出现。统一配置管理方法通过设置中间服务器的方式,能够实现对人员和账号的统一管理和权限控制,规范运维操作,保证网络系统的安全运行。作为核心部件,服务器的安全性至关重要,但目前的中心化架构可能出现单点故障问题,并且难以抵御网络攻击,存在潜在的安全风险。针对这一问题,本文利用区块链去中心化的特性,提出了一种基于区块链的网络配置管理模型,在区块链架构下实现账号管理、权限控制和日志记录功能,避免了可能出现的单点故障问题,提高攻击成本,提升整个系统的可靠性和安全性。

In recent years, with the rapid expansion of network scale and the improvement of enterprise information level,the operation, maintenance and management of enterprise network are becoming more and more complex, and data security problems caused by improper or misoperation of internal personnel are constantly emerging. Network equipment can support more and more functions, resulting in frequent network configuration errors. The unified configuration management approach works by setting up intermediate servers, can realize the unified management of personnel and accounts and access control. It standardizes the operation and maintenance operation, and ensures the safe operation of the network system. As the core component, the security of the server is very important. But the current centralized architecture may have a single point of failure, and is difficult to resist network attacks, which has potential security risks. In order to solve these problems,we propose a large-scale network operational audit model based on blockchain, using blockchain’s decentralized characteristics. Our model implements account management, access control and log record function under the framework of blockchain. It is a good way to avoid the single point of failure problem, improve the attack cost, and improve the reliability and security of the whole system.