CN120358229A - Cross-network inter-system data and file ferry transmission system and method - Google Patents
Cross-network inter-system data and file ferry transmission system and methodInfo
- Publication number
- CN120358229A CN120358229A CN202510350822.0A CN202510350822A CN120358229A CN 120358229 A CN120358229 A CN 120358229A CN 202510350822 A CN202510350822 A CN 202510350822A CN 120358229 A CN120358229 A CN 120358229A
- Authority
- CN
- China
- Prior art keywords
- data
- module
- files
- domain
- area network
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
本发明公开一种跨网络跨系统间数据、文件摆渡传输系统，包括：高密区网络，包括密域通信模块和若干密域系统，密域通信模块用于获得数据文件处理获得密域数据、文件并传输至外部网络和接收外部传输的数据、文件进行处理并分发数据文件至相应的密域系统，密域系统用于将处理后的数据、文件传输至密域通信模块和用于接收处理密域通信模块分发的数据；低密区网络，包括业务通信模块和若干业务系统，业务通信模块用于归集数据、文件并处理获得数据、文件传输至密域通信模块和用于接收密域数据、文件并分发至业务系统，业务系统用于传输数据、文件至业务通信模块和用于接收处理分发的数据；传输中转模块用于连通密域通信模块和业务通信模块。
The present invention discloses a cross-network and cross-system data and file ferrying transmission system, comprising: a high-density area network, comprising a secret domain communication module and a plurality of secret domain systems, the secret domain communication module is used to obtain data files, process the obtained secret domain data and files, and transmit them to an external network, and receive externally transmitted data and files for processing and distribute the data files to the corresponding secret domain system, the secret domain system is used to transmit the processed data and files to the secret domain communication module, and is used to receive and process the data distributed by the secret domain communication module; a low-density area network, comprising a business communication module and a plurality of business systems, the business communication module is used to collect data and files, process the obtained data and files, and transmit them to the secret domain communication module, and is used to receive and distribute the secret domain data and files to the business system, the business system is used to transmit data and files to the business communication module, and is used to receive and process the distributed data; a transmission transit module is used to connect the secret domain communication module and the business communication module.
Description
Technical Field
The invention belongs to the technical field of data processing, and particularly relates to a cross-network cross-system data and file ferry transmission system and method.
Background
As business development and information sharing demands increase, data exchange across network domains and across dense areas becomes increasingly frequent. The data exchange changes network connectivity, improves information interactivity, and simultaneously brings serious challenges to an information security system, the original balance state is broken, and new information security protection requirements are generated. Therefore, in data transmission, not only the feasibility and availability of the transmission method, but also the security of the network and the data are considered.
The information ferry technology is a technology which can effectively resist external network attack and internal illegal operation and prevent data leakage and malicious software propagation through physical isolation and data transmission control, and is widely applied to the fields of government, financial institutions, enterprise data centers and the like. However, the security level, the bearing network and the deployment mode of the systems among different networks and the systems of the same network are different, the standards of various data resource specifications are not uniform, the decentralized distribution is difficult to integrate, and the data transmission across the network and the system is difficult to balance in efficiency, safety and usability.
Disclosure of Invention
The invention provides a cross-network cross-system data and file ferry transmission system and method, wherein a ferry module and a close-domain communication module of a forwarding module are arranged through a high-density area network, a low-density area network of a unpacking module and a packing module is arranged through the high-density area network, and ferry transmission among different close-domain networks is realized based on the system. The high-density area and the low-density area adopt a trusted optical disc module to realize offline ferry transmission, so that the safety and traceability of system data are ensured, and the low-density area and the high-density area realize unidirectional transmission through a unidirectional network gate module. All transmissions are encrypted by AES, and dynamic random characters enhance password security and flexibility. By introducing the first audit module and the second audit module, the network transmission logs of the high-density area and the low-density area are recorded, so that tracking and audit are facilitated, and the transparency of the system is improved. The method comprises the steps of presetting a transmission interface, calling regularly, collecting and processing data rapidly, improving data processing efficiency by utilizing JSON formatting and serialization technology, and enabling a unpacking module to cooperate with a service system efficiently to accelerate data distribution processing. The asynchronous task mechanism reduces the waiting time and improves the response speed of the system. The backup folder settings ensure data integrity and recoverability. Each component is independently updated and maintained, the whole operation is not affected, and the expansibility of the systems in different dense areas is strong.
The invention provides a cross-network cross-system data and file ferry transmission system, which comprises a high-density area network, a low-density area network and a service transfer module, wherein the high-density area network comprises a dense area communication module and a plurality of service systems, the dense area communication module is used for acquiring data files, processing the data files and transmitting the data files to an external network and receiving the externally transmitted data, processing the files and directionally distributing the data files to the corresponding dense area systems, the dense area system is used for transmitting the processed data and the files to the dense area communication module and receiving the data distributed by the dense area communication module, the service communication module comprises a service communication module and a plurality of service systems, the service communication module is used for collecting the service area data and the files and transmitting the service area data, the file processing and transmitting the service area data and the files to the dense area communication module and receiving the data distributed by the service communication module, and the service transfer module is used for communicating the dense area communication module and the service area network from the high-density area network to the low-density area network, and the service area network is used for transmitting the data and the file from the high-density area network to the low-density area network.
Preferably, the transmission transfer module comprises a trusted optical disc module and a unidirectional network gate module, wherein the trusted optical disc module is respectively connected with the dense domain communication module and the service communication module through pluggable interfaces, and the unidirectional network gate module is respectively and permanently communicated with the dense domain communication module and the service communication module.
Preferably, the dense domain communication module comprises a ferry module and a forwarding module, the service communication module comprises a unpacking module and a packing module, the transmission transfer module is respectively connected with the ferry module and the unpacking module through pluggable interfaces and is used for transmitting the dense domain data and the file to the unpacking module through the transmission transfer module, and the transmission transfer module is respectively communicated with the packing module and the forwarding module and is used for transmitting the service domain data and the file to the forwarding module through the transmission transfer module.
Preferably, the high-density area network further comprises a first audit module, the low-density area network further comprises a second audit module, and the first audit module and the second audit module are used for recording and consulting logs of data and file ferry transmission processes.
The second aspect of the present invention provides a cross-network cross-system data and file ferry transmission method, which is applied to any one of the above cross-network cross-system data and file ferry transmission systems, where the system includes a high-density area network, a low-density area network, and a transmission transfer module, and the data and file are transmitted from the high-density area network to the low-density area network to be in a first ferry transmission mode, and the steps of the first ferry transmission mode include:
The method comprises the steps of obtaining first data to be processed and files containing time stamps through dense domain system identification and desensitization of a high-density area network;
Obtaining dense domain data and files by a dense domain communication module of a high-density area network based on the first data and files to be processed;
the dense domain communication module is used for transmitting the dense domain data and the file to the transmission transfer module based on the dense domain data and the file;
The encryption and decryption processes of the trusted optical disk module of the transmission transfer module and the unpacking module for realizing the low-density area network are used for obtaining the density area data and the file;
the unpacking module is used for detecting and starting the data distribution and file task, and based on the dense domain data and the file, the business system of the low-density area network receives and processes the corresponding data;
the data and files are transmitted from the low-density area network to the high-density area network to be in a second ferry transmission mode, and the steps of the second ferry transmission mode comprise:
the service system identifies and obtains second data and files to be processed containing time stamps;
Obtaining service domain data and files by a service communication module of the low-density area network based on the second data and files to be processed through the low-density area network;
The close domain communication module obtains the service domain data and the file based on the service domain data and the file, starts the task of distributing the data and the file, and receives and processes the corresponding data through the close domain system;
And obtaining the log flow of the first audit module of the high-density area network and the log flow of the second audit module of the low-density area network based on the above process through log record.
Preferably, the step of obtaining the dense domain data and the file by the dense domain communication module of the dense domain network based on the first data and the file to be processed specifically includes:
presetting transmission interfaces and interface mapping dictionaries by a plurality of dense domain systems;
The interface mapping dictionary is synchronized to a ferrying module of the close domain communication module;
Periodically calling the transmission interface to obtain the first data and the first file to be processed by taking 1h as a period through the ferrying module;
Obtaining second data and files based on the first data to be processed and the file merging summary;
And obtaining the close domain data and the file based on the second data and the file through data JSON formatting and serialization.
Preferably, the step of implementing, by the close domain communication module, the transfer of the close domain data and the file to the transfer module based on the close domain data and the file specifically includes:
triggering the packing ferrying module of the dense domain communication module to transmit the dense domain data and the file to the ferrying module in an FTP mode through the ferrying module of the dense domain communication module;
Storing the image files of the close-domain data and the files in a backup folder with the life cycle of 7 days, which is created by the packing ferry module;
Deleting the dense domain data and the file of the original collection of the dense domain communication module;
and the packaging ferry module downloads the close domain data and the file to the trusted optical disc module of the transmission transfer module.
Preferably, the step of the unpacking module for checking, starting to distribute data and file tasks based on the close-domain data and the file, and the step of the business system of the low-close-area network for receiving and processing the corresponding data specifically includes:
Traversing the JSON data in the close domain data and the file, further traversing the value of each JSON read key value as 'serial' to be compared with the historical sequence value of the unpacking module plus 1, if the values are equal, automatically increasing and updating the sequence value, otherwise, terminating;
the unpacking module analyzes the dense domain data and the file into different distribution tasks and adaptive data and files according to different service identifications;
the unpacking module sorts the distributing tasks according to the queues and distributes the distributing tasks in a first-in first-out manner, and waits for corresponding service system responses;
The response message of the adaptive service system is received to trigger the unpacking module to distribute the next distributing task;
The service system receives the data and processes the analyzed data by adding, deleting and revising classification through the identification, and when the new added data is processed and the data is processed according to the revising mode.
Preferably, the step of implementing the close domain communication module to obtain the service domain data and the file based on the service domain data and the file and starting the task of distributing the data and the file specifically includes:
Adding serial number key value pairs and updating the service domain data and the file;
A first constant which is periodically changed is preset, the value range is 128-256, and the first constant is arranged in the high-density area network and the low-density area network;
generating a random character with a first constant length through a packaging module of the service communication module;
acquiring encrypted JSON data based on each JSON file of the service domain data through an AES encryption algorithm;
obtaining intermediate data based on the random characters and the JSON data by sequentially splicing;
updating the intermediate data to the corresponding JSON to obtain encrypted data;
Transmitting the encrypted data, the service domain data and the files in the files to a forwarding module of a dense domain communication module through a unidirectional gatekeeper module of the transmission forwarding module;
Updating the encrypted data based on the encrypted data by erasing characters of a first constant length;
obtaining the service domain data and the file based on the encrypted data and the file by an AES decryption algorithm;
And distributing data and files to the corresponding close domain systems based on the service domain data and the files through an asynchronous task mechanism of the forwarding module.
Preferably, the step of obtaining the close-domain data and the file based on the second data and the file through data JSON formatting and serialization specifically includes:
the ferrying module initializes a sequence value, and if the sequence value is self-increased;
Obtaining third data in a JSON format by classifying pages, table names and the second data based on the second data;
obtaining fourth data by traversing each JSON object in the third data and inserting a key-value pair with a key of "serial" and a value of sequence value in the JSON object;
Obtaining the close domain data and the file based on the fourth data, the second data and the file through mapping;
and storing the close domain data and the file into a folder of YYYYMMdd/HH created by a ferry module according to the current time.
By adopting the technical scheme, the invention has the following advantages and positive effects compared with the prior art:
The transmission transfer module comprises a trusted optical disc module and a unidirectional network gate module, different transmission strategies are adopted in different transmission directions, the data and the files of the high-density area network are transmitted to the low-density area network by adopting the trusted optical disc module, the offline ferry transmission ensures the system data security and the data transmission granulation traceability of the high-density area network, the data and the files of the low-density area network are transmitted to the high-density area network by adopting the unidirectional network gate module, the unidirectional transmission of the low-density area network to the high-density area network is realized, and further, the data encryption is adopted to avoid the transmission link data and the file transmission risk no matter the trusted optical disc module or the unidirectional network gate module is adopted to transmit the data. The security and flexibility of the password are enhanced by concatenating random characters of dynamic length and AES encrypted data for decryption when the low-density area network is transmitted to the high-density area network. The first audit module and the second audit module are introduced into the system and used for recording and inquiring network transmission logs of the high-density area network and the low-density area network, so that tracking and audit are facilitated, and transparency and traceability of the system are improved.
The efficiency is improved, namely, the rapid collection and processing of data are realized by presetting a transmission interface and an interface mapping dictionary and regularly calling the transmission interface. And the JSON formatting and serialization technology is utilized, so that the efficiency and accuracy of data processing are improved. The efficient cooperation of the unpacking module and the service system ensures the rapid distribution and processing of data.
The data security is enhanced, namely, the integrity and the restorability of the data are ensured through the setting of the backup folder. By applying the asynchronous task mechanism, the response speed and the processing capacity of the system are improved, and the waiting time caused by synchronous operation is reduced.
The modular design ensures that each component can be independently upgraded and maintained without affecting the operation of the whole system, and meanwhile, the system in different dense areas has strong expansibility.
Drawings
The invention is described in further detail below with reference to the attached drawing figures, wherein:
FIG. 1 is a schematic diagram of a cross-network cross-system data and file ferry transmission system;
FIG. 2 is a schematic diagram of the operation of a dense domain system and a ferrying module in a method for transmitting data and files between cross-networks and cross-systems in the invention;
FIG. 3 is a schematic flow chart of data and file transmission from a high-density area network to a low-density area network in a cross-network cross-system data and file ferry transmission method;
FIG. 4 is a schematic flow chart of data and file transmission from a low density area network to a high density area network in a cross-network cross-system data and file ferry transmission method in the invention;
FIG. 5 is a schematic flow chart of obtaining dense domain data and files in a cross-network cross-system data and file ferry transmission method in the invention;
FIG. 6 is a flow chart of the operation of the packing module and the unidirectional gatekeeper module in the method for transmitting data and files between the cross-network and the cross-system in the invention;
fig. 7 is a workflow diagram of a forwarding module in a method for transferring data and files across networks and across systems in the present invention.
Detailed Description
The invention is described in further detail below with reference to the drawings and the specific examples. Advantages and features of the invention will become more apparent from the following description and from the claims. It is noted that the drawings are in a very simplified form and utilize non-precise ratios, and are intended to facilitate a convenient, clear, description of the embodiments of the invention.
It should be noted that all directional indicators (such as up, down, left, right, front, and rear are used in the embodiments of the present invention) are merely for explaining the relative positional relationship, movement conditions, and the like between the components in a certain specific posture (as shown in the drawings), and if the specific posture is changed, the directional indicators are changed accordingly.
First embodiment
Referring to fig. 1, a first aspect of the present invention provides a cross-network cross-system data and file ferrying transmission system, comprising a high-density area network including a density area communication module and a plurality of density area systems, wherein the density area communication module is used for obtaining data file processing, obtaining the density area data and the file and transmitting the data file to an external network, receiving the externally transmitted data, processing the file and directing the distribution of the data file to the corresponding density area system, the density area system is used for transmitting the processed data and the file to the density area communication module and receiving the data distributed by the processing the density area communication module, the low-density area network includes a service communication module and a plurality of service systems, the service communication module is used for collecting the data and the file to obtain the service area data and the file and transmitting the service area data and the file to the density area communication module and receiving the data distributed by the processing the service communication module, and the transit module is used for communicating the density area communication module and the service communication module, and transmitting the data and the file from the high-density area network to the low-density area network.
The system comprises two isolated high-density area networks and a low-density area network, wherein the high-density area network comprises a plurality of density area systems, the low-density area network comprises a plurality of service systems, and a system module and an adaptive method design are adopted for realizing the data file communication between the density area systems and the service systems. The high-density area network also comprises a dense-domain communication module, further the dense-domain communication module comprises a ferrying module and a forwarding module, the ferrying module comprises a collecting module and a packing ferrying module, the low-density area network also comprises a service communication module, the service communication module comprises a unpacking module and a packing module, and the transmission and forwarding module comprises a trusted optical disc module and a unidirectional network gate module. The data security and the expansibility of the system are realized by the modularized design of different transmission nodes.
With continued reference to fig. 1, preferably, the transmission transfer module includes a trusted optical disc module and a unidirectional gatekeeper module, where the trusted optical disc module is connected with the dense domain communication module and the service communication module through pluggable interfaces, and the unidirectional gatekeeper module is permanently communicated with the dense domain communication module and the service communication module, respectively.
The unidirectional gatekeeper module is permanently communicated with the dense domain communication module and the business communication module and unidirectional in the data transmission direction, so that the security threat possibly brought by reverse transmission is effectively prevented. The trusted optical disc module has better isolation as a physical medium. When the high-density area network transmits data to the low-density area network, the data and the file to be transmitted are written into the trusted optical disk module through manual triggering, the trusted optical disk module encrypts and stores the data in the trusted optical disk in the process of writing the optical disk, and then the trusted optical disk module decrypts the flow to obtain the original written data file and transmits the data and the file to the low-density area network, so that the physical isolation between the high-density area network and the external network is realized, meanwhile, the log stream of the operation behavior is reserved, the risk of network attack is greatly reduced, and the security of sensitive data in the transmission process is ensured.
Referring to fig. 1 and 2, preferably, the dense domain communication module includes a ferry module and a forwarding module, the service communication module includes an unpacking module and a packing module, the transmission transfer module is connected with the ferry module and the unpacking module through pluggable interfaces respectively and is used for transmitting the dense domain data and the file to the unpacking module through the transmission transfer module, and the transmission transfer module is communicated with the packing module and the forwarding module respectively and is used for transmitting the service domain data and the file to the forwarding module through the transmission transfer module.
Optionally, the ferrying module comprises a collecting module and a packing ferrying module, wherein the collecting module is used for collecting data and files of the close domain system and transmitting the corresponding data and files to the packing ferrying module, and the packing ferrying module receives the data and files and transmits the data and files to the transmission transit module.
The system is enabled to efficiently cooperate and the expansibility of the system is enhanced through the modularized design. The transmission transfer module and different modules adopt different connection modes, so that the safety and controllability of data transmission are enhanced.
Referring to fig. 7, preferably, the high-density area network further includes a first audit module, and the low-density area network further includes a second audit module, where the first audit module and the second audit module are used for recording and referring to the data and the log of the file ferry transmission process.
The first audit module in the high-density area network and the second audit module in the low-density area network enhance data transmission monitoring, optimize management and operation and maintenance efficiency, and provide the basis for fault investigation, ferry transmission performance analysis and risk assessment.
Second embodiment
Referring to fig. 1, 3,4 and 5, a second aspect of the present invention provides a cross-network cross-system data and file ferry transmission method, which is applied to any one of the above cross-network cross-system data and file ferry transmission systems, where the system includes a high-density area network, a low-density area network and a transmission transfer module, and the data and file are transmitted from the high-density area network to the low-density area network to be in a first ferry transmission mode, and the steps of the first ferry transmission mode include:
The method comprises the steps of obtaining first data to be processed and files containing time stamps through dense domain system identification and desensitization of a high-density area network;
obtaining dense domain data and files by a dense domain communication module of a high-density area network based on first data to be processed and files;
The transmission transfer module is used for transmitting the dense domain data and the file to the transmission transfer module based on the dense domain data and the file through the dense domain communication module;
obtaining the dense domain data and files through the trusted optical disc module encryption and decryption flow of the transmission transfer module and the unpacking module for realizing the low-dense area network;
The unpacking module is used for detecting and starting the distributed data and file tasks based on the dense domain data and the files, and the business system of the low-density area network is used for receiving and processing the corresponding data;
The data and files are transmitted from the low-density area network to the high-density area network to be in a second ferry transmission mode, and the steps of the second ferry transmission mode comprise:
The second data to be processed and the file containing the time stamp are obtained through the service system identification;
Obtaining service domain data and files by a service communication module of the low-density area network based on the second data to be processed and the files;
the method comprises the steps that a dense domain communication module obtains service domain data and files based on the service domain data and the files, starts data distribution and file tasks, and receives and processes corresponding data through a dense domain system;
And obtaining the log flow of the first audit module of the high-density area network and the log flow of the second audit module of the low-density area network based on the above process through log record.
Referring to fig. 3 and fig. 5, preferably, the step of obtaining, by the dense area network, the dense area data and the file based on the first data and the file to be processed by the dense area network, by using the dense area communication module, specifically includes:
Presetting transmission interfaces and interface mapping dictionaries by a plurality of dense domain systems;
The interface mapping dictionary is synchronized to a ferrying module of the close domain communication module;
Periodically calling a transmission interface to obtain first data and files to be processed by taking 1h as a period through a ferrying module;
Obtaining second data and files based on the first data to be processed and the file merging summary;
and obtaining the close domain data and the file based on the second data and the file through data JSON formatting and serialization.
The data and files are transmitted from the high-density area network to the low-density area network as a first ferry transmission mode, and the specific flow of the first ferry transmission mode is as follows:
The method comprises the steps that a plurality of dense domain systems preset transmission interfaces and interface mapping dictionaries, the interface mapping dictionaries are synchronized to a gathering module of a ferrying module of a dense domain communication module, the dense domain systems identify data and files to be transmitted, each piece of data in the data and the files to be transmitted contains a time stamp and a synchronous identifier, the synchronous identifiers are added, deleted and changed, the dense domain systems further judge whether the data marked as deleted is logically deleted or physically deleted, and if the data is physically deleted, the identifier of the data is changed into the logical deletion. The aggregation module of the ferrying module is provided with a periodic task with a period of 1h to traverse the transmission interface of each dense domain system of the high-density area network at regular time to pull data, and the specific steps are that the aggregation module of the ferrying module reads the current time, and the aggregation module of the ferrying module uploads the data in a time range of [ currentTime-2:50:00, currentTime
-1:59:59]. And merging the first data and the file to be processed obtained by different dense domain systems to obtain second data and the file. Acquiring a sequence value of the ferrying module, and initializing the sequence value if the sequence value is not available;
Generating data sets with different JSON formats according to paging and table name dimension in the second data and the file, wherein the table name comprises a sub-service system name and a target table name to be operated, adding a pair of key value pairs in the data set with the JSON format, namely a self-increasing sequence value, and storing the data set with the JSON format as the file, wherein the rule of the file name is tableName _paged page number JSON. The aggregation module of the ferrying module creates a folder, the name of the folder is defined by converting the acquired current time into YYYYMMdd/HH, and the dense domain data and the file are saved to the folder;
The method comprises the steps of triggering clicking of a packing ferrying module of a dense domain communication module, transmitting the dense domain data and files to the packing ferrying module of the ferrying module in an FTP mode, storing mirror image files of the dense domain data and files under a back folder by the packing ferrying module of the ferrying module, deleting the dense domain data and files under YYYYMMdd/HH files of a gathering module of the ferrying module, and downloading the dense domain data and files to a trusted optical disc module of the transmission and transfer module by the packing ferrying module.
The trusted optical disk module of the transmission transfer module encrypts and decrypts the flow, and the unpacking module for realizing the low-density area network obtains the density area data and the file;
Traversing the JSON data in the close domain data and the file, further traversing the JSON read key value of each JSON to be compared with the historical sequence value of the unpacking module plus 1, if the values are equal, the sequence value is automatically increased and updated, otherwise, the unpacking module analyzes the close domain data and the file into different distribution tasks and adaptive data and files according to different service identifications, the unpacking module sorts the distribution tasks according to queues and distributes the distribution tasks in a first-in first-out manner, waits for a corresponding service system to respond, triggers the unpacking module to distribute the next distribution task when receiving the response message of the adaptive service system, and processes the analyzed data by sorting through identification, logical deletion and revision when processing the new added data in a wrong way, and processes the data according to the revision mode.
The transmission of data and files from the low density area network to the high density area network is a second ferry transmission mode, and the specific steps are as follows:
the service system identifies and obtains a second data to be processed and a file which contain a time stamp and a synchronous mark, wherein the synchronous mark is added, deleted and changed;
transmitting the second data and the file to be processed to a packaging module of a service communication module by different service systems to obtain service domain data and a file;
The packing module starts a periodic task which is 15 minutes, and transmits the service domain data and the file to a forwarding module of the high-density area network after the periodic task is encrypted in a serialization mode;
The method comprises the steps of presetting a periodically changed first constant, setting the value range to 128-256, setting the first constant on the high-density area network and the low-density area network, generating a random character with the first constant length through a packing module of a service communication module, obtaining encrypted JSON data based on each JSON file of the service domain data through an AES encryption algorithm, obtaining intermediate data based on the random character and the JSON data through sequential splicing, updating the intermediate data to the corresponding JSON to obtain the encrypted data, transmitting the encrypted data and the service domain data through a unidirectional gatekeeper module of the transmission transfer module and a file in the file to a forwarding module of the dense domain communication module, updating the encrypted data based on the encrypted data through a character with the first constant length, obtaining the service domain data and the file through an AES decryption algorithm, triggering a verification task distribution through a forwarding module if the random character and the JSON data are sequentially spliced, presetting a receiving interface of a dense domain system, updating the intermediate data to the corresponding JSON to obtain the encrypted data, transmitting the intermediate data through a unidirectional gatekeeper module of the transmission transfer module, and a task is judged to be successfully performed when a task is not successfully transmitted to a first-in-stage, if a task is successfully transmitted to a first-in-out queue is not successfully-waiting task is judged after the task is successfully is judged to be distributed, and a task is not successfully is judged to be in a waiting state is sent to be in a waiting domain after the receiving interface is sent.
And obtaining the log flow of the first audit module of the high-density area network and the log flow of the second audit module of the low-density area network through log records based on the transmission process of the first ferry transmission mode and the second ferry transmission mode.
Referring to fig. 3, preferably, the steps of implementing, by the close domain communication module, the close domain data and the file transmission to the transmission transfer module based on the close domain data and the file specifically include:
triggering the dense domain data and the file to be transmitted to a packing ferrying module of the ferrying module in an FTP mode through the ferrying module of the dense domain communication module;
storing the image files of the dense domain data and the files in a backup folder with the life cycle of 7 days created by the packing ferry module;
deleting the original collected secret domain data and files of the secret domain communication module;
And the packaging ferry module downloads the close domain data and the file to the trusted optical disc module of the transmission transfer module.
The step of transmitting the data and the files to the transmission transfer module is realized based on the data and the files in the secret domain by the secret domain communication module, so that the transmission efficiency and stability, the safety and the integrity of the data and the files are improved, and reliable guarantee is provided for cross-network cross-system data and file ferry transmission.
Referring to fig. 3, preferably, the step of the unpacking module for checking, starting to distribute data and file tasks based on the close-domain data and the file, and the step of the business system of the low-close-area network for receiving and processing the corresponding data specifically includes:
Traversing the JSON data in the close domain data and the file, further traversing the value of each JSON read key value as 'serial' and comparing with the historical sequence value of the unpacking module by adding 1, if the values are equal, automatically increasing and updating the sequence value, otherwise, stopping;
the unpacking module analyzes the dense domain data and the file into different distribution tasks and adaptive data and files according to different service identifications;
The unpacking module sorts the distributing tasks according to the queues and distributes the tasks in first-out mode, and waits for corresponding service system responses;
the response message of the adaptive service system is received to trigger the unpacking module to distribute the next distribution task;
The business system receives the data and processes the analyzed data by adding, deleting and revising classification through the identification, and when the newly added data is processed and reported in error, the data is processed according to the revising mode.
The unpacking module ensures data consistency according to the sequence value check, and then distributes tasks according to the queue ordering first-in first-out, thereby effectively improving accuracy and efficiency. After the business system receives the data, the business system can automatically perform classification processing, including operations of adding, logic deleting, revising and the like, and when new data processing errors occur, the business system automatically converts the new data processing errors into a revising mode processing mode, so that the reliability of data processing is ensured. The whole flow optimizes the efficiency of trans-regional data transmission and processing and enhances the synergy and stability of the system.
Referring to fig. 4, 6 and 7, preferably, the steps of obtaining service domain data and files and starting data distribution and file tasks based on the service domain data and files by the file implementation close domain communication module specifically include:
The service domain data and the file are updated by adding a serial number key value pair;
Presetting a periodically changed first constant, wherein the value range is 128-256, and the first constant is arranged in a high-density area network and a low-density area network;
generating a random character with a first constant length through a packaging module of the service communication module;
obtaining encrypted JSON data based on each JSON file of service domain data through an AES encryption algorithm;
Obtaining intermediate data by sequentially splicing random character-based JSON data;
updating the intermediate data to the corresponding JSON to obtain encrypted data;
Transmitting the encrypted data and the service domain data and the files in the files to a forwarding module of the close domain communication module through a unidirectional gatekeeper module of the transmission transit module;
updating the encrypted data based on the encrypted data by erasing the character having the first constant length;
obtaining service domain data and files based on the encrypted data and the files through an AES decryption algorithm;
And distributing data and files to corresponding close domain systems based on the service domain data and the files through an asynchronous task mechanism of the forwarding module.
Through the steps of presetting constants, random character generation, AES encryption, data splicing, secure transmission, character erasure, data decryption, asynchronous distribution and the like, the efficient and secure processing and distribution of service domain data and files in a dense domain communication module are realized. The security and confidentiality of data and file transmission are ensured, and the data and file are also ensured to be efficiently transmitted to a corresponding close domain system.
Referring to fig. 3 and 5, preferably, the step of obtaining the close-domain data and the file based on the second data and the file by formatting and serializing the data JSON specifically includes:
the ferrying module initializes the sequence value, if the sequence value is self-increased;
obtaining third data in a JSON format by classifying pages, table names and second data based on the second data;
obtaining fourth data by traversing each JSON object in the third data and inserting a key value pair with a key value of 'serial' and a value of sequence value into the JSON object;
obtaining dense domain data and files based on the fourth data, the second data and the files in the files through mapping;
and storing the close domain data and the file into a folder of YYYYMMdd/HH created by the ferrying module according to the current time.
Through initializing a sequence value of a ferrying module (self-increasing to ensure uniqueness), classifying and JSON formatting based on second data pages and table names to generate third data, traversing and inserting a 'serial' key value pair to obtain fourth data, mapping to generate dense domain data and files, and finally creating a folder according to the current time for storage, orderly generation and management of the dense domain data and files are realized, and the processing efficiency and traceability of the data and the files are improved.
In the description of the present application, it should be noted that, the azimuth or positional relationship indicated by the terms "inner", "outer", etc. are based on the azimuth or positional relationship shown in the drawings, or the azimuth or positional relationship that is commonly put in use of the product of this application, are merely for convenience of describing the present application and simplifying the description, and do not indicate or imply that the device or element to be referred to must have a specific azimuth, be configured and operated in a specific azimuth, and therefore should not be construed as limiting the present application. Furthermore, the terms "first," "second," and the like, are used merely to distinguish between descriptions and should not be construed as indicating or implying relative importance.
It should also be noted that, unless explicitly stated or limited otherwise, the terms "disposed" and "connected" should be construed broadly, and may be, for example, fixedly connected, detachably connected, or integrally connected, directly connected, indirectly connected through an intermediate medium, or communicating between two elements. The specific meaning of the above terms in the present application will be understood in specific cases by those of ordinary skill in the art.
It will be apparent to those skilled in the art that, for convenience and brevity of description, reference may be made to the corresponding procedures in the foregoing method embodiments for identifying the specific implementation of the above-described system and apparatus.
The embodiments of the present invention have been described in detail with reference to the drawings, but the present invention is not limited to the above embodiments. Even if various changes are made to the present invention, it is within the scope of the appended claims and their equivalents to fall within the scope of the invention.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202510350822.0A CN120358229A (en) | 2025-03-24 | 2025-03-24 | Cross-network inter-system data and file ferry transmission system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202510350822.0A CN120358229A (en) | 2025-03-24 | 2025-03-24 | Cross-network inter-system data and file ferry transmission system and method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN120358229A true CN120358229A (en) | 2025-07-22 |
Family
ID=96403688
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202510350822.0A Pending CN120358229A (en) | 2025-03-24 | 2025-03-24 | Cross-network inter-system data and file ferry transmission system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN120358229A (en) |
-
2025
- 2025-03-24 CN CN202510350822.0A patent/CN120358229A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10289694B1 (en) | Method and system for restoring encrypted files from a virtual machine image | |
| US6230156B1 (en) | Electronic mail interface for a network server | |
| US7581077B2 (en) | Method and system for transferring data in a storage operation | |
| US8126853B2 (en) | Log managing apparatus, log managing system, log managing method and log managing program | |
| US20040170190A1 (en) | System and method of communicating data | |
| US8391167B2 (en) | Method to precisely and securely determine propagation delay and distance between sending and receiving node in packet network and packet network node system for executing the method | |
| CN111478828B (en) | Pressure testing method, device and system for block chain network | |
| US8423792B2 (en) | Apparatus, system, and method for communication between a driver and an encryption source | |
| CN104820701A (en) | Method and system for recording and synchronizing data | |
| CN112073442A (en) | Data transmission method and monitoring system based on double one-way protocol mutual conversion channel | |
| US20200084264A1 (en) | System and method for secure cross-domain file transfer | |
| CN109067790A (en) | Data transmission method and device | |
| CN113535477B (en) | Method and equipment for data disaster recovery | |
| CN111522499A (en) | Operation and maintenance data reading device and reading method thereof | |
| US7644266B2 (en) | Apparatus, system, and method for message level security | |
| US20110137866A1 (en) | Method for generating backup script | |
| CN119854046A (en) | Session key capturing and security event analyzing method, device, equipment and medium | |
| CN120358229A (en) | Cross-network inter-system data and file ferry transmission system and method | |
| US20240330939A1 (en) | Transaction uploading method, associated apparatus, and medium | |
| CN115408590B (en) | Document tracking and tracing method, device and system | |
| CN109450794B (en) | Communication method and device based on SDN network | |
| JP2007249569A (en) | Transaction authentication method, file transmission / reception system, client device, server device, and recording medium | |
| CN114978507B (en) | Electronic bill blockchain networking method, device, terminal and storage medium | |
| CN113973104B (en) | Transaction system and method based on binary communication protocol of event | |
| CN119544224B (en) | Data exchange system and method based on data compression identifier |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |