Data interaction method, device, system, electronic device and storage medium

Abstract

The present application discloses a data interaction method, device, system, electronic device and storage medium. The method includes: an external network server obtains the original data transmitted by the child application of the parent application; assigns tag information to the original data, and at least stores the first target data carrying the tag information in the cloud server, wherein the first target data in the cloud server can be directly read by the intranet server, and the intranet server stores the processing result of the first target data in the cloud server; queries the cloud server according to the query frequency whether there is a processing result of the first target data; if the query result is yes, returns the processing result of the first target data to the terminal device. The present application solves the technical problem that in the prior art, the intranet server needs to have an external public network IP and port during the interaction between the intranet and the parent network, which leads to security risks in the intranet system during the interaction with the external network data.

Description

Technical Field

[0001] The present application relates to the field of data security, and more specifically, to a data interaction method, device, system, electronic device and storage medium. Background Art

[0002] In mobile Internet applications, mobile terminal APP can easily realize data interaction in the Internet environment by using Web technologies such as HTML and JSON. However, there are many security risks in Web technology. Problems such as code logic vulnerabilities, server software vulnerabilities, storage of sensitive data in Web directories, and data source security seriously affect the security of the entire application. At present, the methods to improve application security are: patching vulnerabilities, timely repairing code vulnerabilities and server vulnerabilities; adding security equipment to filter incoming data; desensitizing sensitive data and backing up data in time. Although these methods have improved the security of applications to a certain extent, there are limitations in their scope of use. Developing application software patches requires a lot of manpower and material resources, is difficult, and cannot be completely eradicated. Adding security equipment is costly and is powerless against the vulnerabilities of the software itself.

[0003] In addition, when used in a real environment, the server is generally deployed in the intranet. In order to ensure that the mobile terminal APP can run normally, the server often needs to have an external public IP and port, which makes the intranet system have great security risks when interacting with the external network data.

[0004] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0005] The embodiments of the present application provide a data interaction method, device, system, electronic device and storage medium to at least solve the technical problem in the prior art that, during the interaction between the intranet and the extranet, the intranet server needs to have an external public IP and port, which leads to security risks in the process of data interaction between the intranet system and the extranet.

[0006] According to one aspect of an embodiment of the present application, a data interaction method is provided, including: an external network server obtains original data transmitted by a sub-application of a parent application, wherein the parent application is an application for providing an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of an external network; tag information is assigned to the original data, and at least first target data carrying the tag information is stored in a cloud server, wherein the first target data in the cloud server can be directly read by an intranet server, and the intranet server stores a processing result of the first target data in the cloud server; querying whether there is a processing result of the first target data in the cloud server according to a query frequency; and when the query result is yes, returning the processing result of the first target data to the terminal device.

[0007] Optionally, assigning tag information to the original data includes: determining a first tag field and a second tag field included in the tag information; and setting both the first tag field and the second tag field to a first value.

[0008] Optionally, after the external network server obtains the original data transmitted by the terminal device of the external network through the child application of the parent application, the method also includes: verifying the legitimacy of the fields of the original data; when the fields of the original data meet the corresponding verification conditions, determining that the fields of the original data are legal fields, and changing the format of the original data to the target format.

[0009] Optionally, querying whether there is a processing result of the first target data in the cloud server according to the query frequency includes: receiving the storage ID of the first target data returned by the cloud server; and querying whether there is a second target data in the cloud server according to the query frequency based on the storage ID of the first target data, wherein the second target data represents the processing result of the first target data, and the first tag field and the second tag field of the second target data are both set to a second value, and the second value is different from the first value.

[0010] Optionally, querying whether there is a processing result of the first target data in the cloud server according to the query frequency, including: when the query result indicates that there is no processing result of the first target data in the cloud server, querying again according to the query frequency whether there is a processing result of the first target data in the cloud server; when the query result indicates that there is a processing result of the first target data in the cloud server, obtaining the processing result of the first target data from the cloud server; and returning the processing result of the first target data to the terminal device.

[0011] Optionally, after returning the processing result of the first target data to the terminal device, the method further includes: sending target information to the cloud server, wherein the target information is used to delete the first target data in the cloud server.

[0012] According to another aspect of an embodiment of the present application, another data interaction method is provided, including: an intranet server obtains first target data in a cloud server, wherein the first target data is original data carrying at least marking information, and the original data is data transmitted from a child application of a parent application on a terminal device deployed on an external network to an external network server; processing the first target data to obtain a processing result of the first target data; and storing the processing result of the first target data in the cloud server.

[0013] Optionally, the intranet server obtains the first target data in the cloud server, including: determining the tag information carried in the first target data, wherein the tag information includes a first tag field and a second tag field; changing the first tag field from a first value to a second value, wherein the first value is different from the second value.

[0014] Optionally, before processing the first target data, the method further includes: verifying authentication information of the target object corresponding to the first target data, wherein the authentication information includes account information and permission information of the target object; and processing the first target data if the authentication information is verified successfully.

[0015] Optionally, verifying the authentication information of the target object corresponding to the first target data includes: obtaining account information of the target object corresponding to the first target data stored in the cloud server, wherein the account information includes a user name and a password; when the account information is consistent with the pre-set account information, obtaining the target authority corresponding to the account information stored in the intranet server; and verifying whether the target authority is consistent with the authority information of the target object corresponding to the first target data.

[0016] Optionally, processing the first target data includes: determining an operation type of the first target data; starting a target thread corresponding to the operation type according to the operation type; and sending the first target data to the target thread.

[0017] Optionally, storing the processing result of the first target data in the cloud server includes: changing the second tag field in the first target data to a second numerical value; when the verification result of the authentication information is verification passed, storing the second target data in the cloud server, wherein the second target data represents the processing result of the first target data when the authentication information verification passes; when the verification result of the authentication information is verification failed, storing the target information in the cloud server, wherein the target information is used to indicate that the authentication information verification fails.

[0018] According to another aspect of the embodiment of the present application, there is also provided a data interaction device, which is applied to an external network server, and includes: a first acquisition module, which is used to acquire original data transmitted by a sub-application through a parent application, wherein the parent application is an application used to provide an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of an external network; a first storage module, which is used to assign tag information to the original data, and at least store the first target data carrying the tag information in a cloud server, wherein the first target data in the cloud server can be directly read by an intranet server, and the intranet server stores the processing result of the first target data in the cloud server; a query module, which is used to query whether there is a processing result of the first target data in the cloud server according to a query frequency; and a return module, which is used to return the processing result of the first target data to the terminal device when the query result is yes.

[0019] According to another aspect of the embodiment of the present application, another data interaction device is provided, which is applied to an intranet server and includes: a second acquisition module, used to acquire first target data in a cloud server, wherein the first target data is original data carrying at least marking information, and the original data is data transmitted from a child application of a parent application on a terminal device deployed on an external network to an external network server; a processing module, used to process the first target data to obtain a processing result of the first target data; and a second storage module, used to store the processing result of the first target data in the cloud server.

[0020] According to another aspect of the embodiment of the present application, a data interaction system is also provided, including: an external network server, an intranet server and a cloud server, wherein the external network server is used to obtain original data transmitted by a sub-application of a parent application, wherein the parent application is an application used to provide an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of an external network; tag information is assigned to the original data, and at least the first target data carrying the tag information is stored in the cloud server, wherein the first target data in the cloud server can be directly read by the intranet server, and the intranet server stores the processing result of the first target data in the cloud server; querying whether there is a processing result of the first target data in the cloud server according to the query frequency; if the query result is yes, returning the processing result of the first target data to the terminal device; the intranet server is used to obtain the first target data in the cloud server; processing the first target data to obtain the processing result of the first target data; storing the processing result of the first target data in the cloud server; the cloud server is at least used to store the first target data.

[0021] According to another aspect of the embodiments of the present application, there is also provided an electronic device, comprising one or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by one or more processors, the one or more processors implement the above-mentioned data interaction method.

[0022] According to another aspect of the embodiments of the present application, a non-volatile storage medium is provided, which includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the above-mentioned data interaction method by running the computer program.

[0023] In an embodiment of the present application, an external network server obtains original data transmitted by a sub-application of a parent application, wherein the parent application is an application for providing an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of an external network; tag information is assigned to the original data, and at least the first target data carrying the tag information is stored in a cloud server, wherein the first target data in the cloud server can be directly read by the intranet server, and the intranet server stores the processing result of the first target data in the cloud server; the cloud server is queried according to the query frequency whether there is a processing result of the first target data; when the query result is yes, the processing result of the first target data is returned to the terminal device, thereby achieving the purpose of exchanging data between the internal and external networks, thereby realizing the technical effect of secure data transmission, and further solving the technical problem that in the prior art, the intranet server needs to have an external public network IP and port during the interaction between the internal and external networks, resulting in security risks in the intranet system during the interaction with the external network data. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0025] Figure 1 It is a hardware structure block diagram of a computer terminal (or electronic device) for implementing a data interaction method according to an embodiment of the present application;

[0026] Figure 2 is a flow chart of a data interaction method according to an embodiment of the present application;

[0027] Figure 3 is a flow chart of another data interaction method according to an embodiment of the present application;

[0028] Figure 4 is a structural diagram of a data interaction device according to an embodiment of the present application;

[0029] Figure 5is a structural diagram of another data interaction device according to an embodiment of the present application;

[0030] Figure 6 is a structural diagram of a data interaction system according to an embodiment of the present application;

[0031] Figure 7 It is a flow chart of intranet and extranet data interaction according to an embodiment of the present application. DETAILED DESCRIPTION

[0032] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0033] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0034] The method embodiments provided in the embodiments of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 FIG. 1 shows a hardware structure block diagram of a computer terminal (or electronic device) for implementing a data interaction method. Figure 1 As shown, the computer terminal 10 (or electronic device 10) may include one or more (102a, 102b, ..., 102n are used to illustrate) processors (the processor may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 104 for storing data, and a transmission module 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the I / O interface), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 1The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations are shown.

[0035] It should be noted that the one or more processors and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the computer terminal 10 (or electronic device). As described in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0036] The memory 104 can be used to store software programs and modules of application software, such as program instructions / data storage devices corresponding to the data interaction method in the embodiment of the present application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory 104, that is, realizing the above-mentioned data interaction method. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0037] The transmission module 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 10. In one example, the transmission module 106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission module 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0038] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 10 (or electronic device).

[0039] It should be noted that, in some optional embodiments, the above Figure 1The computer device (or electronic device) shown may include hardware elements (including circuits), software elements (including computer code stored on a computer-readable medium), or a combination of hardware elements and software elements. It should be noted that Figure 1 This is merely one example of a particular embodiment and is intended to illustrate the types of components that may be present in the above-described computer device (or electronic device).

[0040] In the above-mentioned operating environment, an embodiment of the present application provides an embodiment of a data interaction method. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0041] Figure 2 is a flow chart of a data interaction method according to an embodiment of the present application, such as Figure 2 As shown, the method comprises the following steps:

[0042] Step S202, the external network server obtains original data transmitted by the sub-application of the parent application, wherein the parent application is an application for providing an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of the external network.

[0043] In the above step S202, the external network server is a server deployed in an external network, and the external network server can be a server corresponding to the sub-application. The parent application is an application that carries the sub-application and provides an environment for the implementation of the sub-application. The parent application is a native application, and the native application is an application that can run directly on the operating system. The parent application can be a social application, a dedicated application that specifically supports the sub-application, a file management application, an email application, or a game application, etc. Social applications include instant messaging applications, SNS (Social Network Service, social networking site) applications, or live broadcast applications, etc. The sub-application is an application that can be implemented in the environment provided by the parent application, and the sub-application can specifically be a social application, a file management application, an email application, or a game application, etc. In the present application, the parent application can be an instant messaging application software, and the sub-application is a mini-program in the instant messaging application software.

[0044] Step S204, assigning tag information to the original data, and storing at least the first target data carrying the tag information in the cloud server, wherein the first target data in the cloud server can be directly read by the intranet server, and the intranet server stores the processing result of the first target data in the cloud server.

[0045] In the above step S204, after the external network server obtains the original data, it assigns tag information to the original data, the tag information includes a first tag field and a second tag field, and the first tag field and the second tag field are both set to 0, and the first target data carrying the tag information and the operation type corresponding to the first target data are stored in the cloud server. The cloud server randomly assigns a storage ID to the first target data and returns the storage ID to the external network server. The intranet server reads the data in the cloud server where the first tag field and the second tag field are both 0, processes them, and stores the processing results in the cloud server.

[0046] Step S206: query the cloud server according to the query frequency whether there is a processing result of the first target data.

[0047] In an embodiment of the present application, when the first target data is processed, the first mark field and the second mark field corresponding to the first target data are both 1. In the above step S206, by judging whether the first mark field and the second mark field corresponding to the queried first target data are both 1, it is determined whether the first target data is processed, and then it is determined whether the processing result of the first target data exists in the cloud server.

[0048] Step S208: When the query result is yes, the processing result of the first target data is returned to the terminal device.

[0049] In the above step S208, when the first mark field and the second mark field corresponding to the first target data are both 1, it is determined that the processing result of the first target data exists in the cloud server, and then the processing result of the first target data is returned to the sub-application of the terminal device.

[0050] In step S204 of the above data interaction method, tag information is assigned to the original data, which specifically includes the following steps: determining a first tag field and a second tag field included in the tag information; and setting both the first tag field and the second tag field to a first value.

[0051] In an embodiment of the present application, after the external network server receives the original data, it needs to assign tag information to the original data, that is, assign a first tag field and a second tag field to each original data, and the external network server sets a first value for the first tag field and the second tag field, and the first value is 0.

[0052] In step S202 of the above-mentioned data interaction method, after the external network server obtains the original data transmitted by the terminal device of the external network through the child application of the parent application, the method also includes the following steps: verifying the legitimacy of the fields of the original data; when the fields of the original data meet the corresponding verification conditions, determining that the fields of the original data are legal fields, and changing the format of the original data to the target format.

[0053] In the embodiment of the present application, for example, when the original data is a form, it is necessary to verify whether each field in the form is legal. The legality can be understood as whether the type of the current field is consistent with the preset type. If the two are consistent, the field is considered legal. If not, the field is considered illegal. After determining that the field of the original data is a legal field, in order to facilitate data processing and reduce the memory occupied by the data, the format of the original data is changed to the target format, and the target format can be, for example, json format.

[0054] In step S206 of the above data interaction method, querying whether there is a processing result of the first target data in the cloud server according to the query frequency specifically includes the following steps: receiving the storage ID of the first target data returned by the cloud server; based on the storage ID of the first target data, querying whether there is a second target data in the cloud server according to the query frequency, wherein the second target data represents the processing result of the first target data, and the first tag field and the second tag field of the second target data are both set to a second value, and the second value is different from the first value.

[0055] In the embodiment of the present application, the external network server starts a query thread according to the storage ID of the first target data returned by the cloud server, and queries the processing process of the first target data stored in the cloud server according to the query frequency according to the storage ID, and the processing process can be reflected by the first tag field and the second tag field of the first target data. When the first tag field and the second tag field of the first target data are both the second value, it is determined that the processing result of the first target data (i.e., the second target data) exists in the cloud server, and the second value is 1.

[0056] In step S206 of the above data interaction method, querying whether there is a processing result of the first target data in the cloud server is performed according to the query frequency, specifically including the following steps: when the query result indicates that there is no processing result of the first target data in the cloud server, continue to wait for a period of time, and then query again according to the query frequency whether there is a processing result of the first target data in the cloud server; when the query result indicates that there is a processing result of the first target data in the cloud server, obtain the processing result of the first target data from the cloud server; and return the processing result of the first target data to the terminal device.

[0057] In the embodiment of the present application, when the first tag field and the second tag field of the first target data are not 1 at the same time, such as when the first tag field is 1 and the second tag field is 0, it is determined that the processing result of the first target data does not exist in the cloud server, and it is necessary to query again whether the processing result of the first target data exists in the cloud server according to the query frequency. When the first tag field and the second tag field of the first target data are 1 at the same time, that is, when the first tag field is 1 and the second tag field is 1, it is determined that the processing result of the first target data exists in the cloud server, and the processing result of the first target data is returned to the sub-application in the terminal device, and the user is prompted to operate according to the processing result.

[0058] In step S208 of the above data interaction method, after returning the processing result of the first target data to the terminal device, the method further includes the following steps: sending target information to the cloud server, wherein the target information is used to delete the first target data in the cloud server.

[0059] In an embodiment of the present application, after the external network server determines to return the processing result of the first target data to the terminal device, it sends target information to the cloud server, and the target information carries the storage ID of the first target data. The cloud server deletes the first target data stored in the cloud server based on the target information, thereby achieving the technical effect of reducing the memory occupied by data.

[0060] In an embodiment of the present application, an external network server obtains original data transmitted by a terminal device of an external network through a sub-application of a parent application, wherein the parent application is an application for providing an operating environment for the sub-application; tag information is assigned to the original data, and at least the first target data carrying the tag information is stored in the cloud server, wherein the first target data in the cloud server can be directly read by the intranet server, and the intranet server stores the processing result of the first target data in the cloud server; the cloud server is queried according to the query frequency whether there is a processing result of the first target data; when the query result is yes, the processing result of the first target data is returned to the terminal device, thereby achieving the purpose of exchanging data between the internal and external networks, thereby realizing the technical effect of secure data transmission, and further solving the technical problem that in the prior art, the intranet server needs to have an external public network IP and port during the interaction between the internal and external networks, resulting in security risks in the intranet system during the interaction with the external network data.

[0061] Figure 3 is a flow chart of another data interaction method according to an embodiment of the present application. Figure 3 As shown, the method comprises the following steps:

[0062] Step S302, the intranet server obtains the first target data in the cloud server, wherein the first target data is original data carrying at least marking information, and the original data is data transmitted from the sub-application of the parent application on the terminal device deployed on the external network to the external network server.

[0063] In the above step S302, the intranet server is a server deployed in the internal network. The intranet server periodically reads the first target data in the cloud server. The tag information carried in the first target data includes a first tag field and a second tag field, and the first tag field and the second tag field are both 0.

[0064] Step S304: process the first target data to obtain a processing result of the first target data.

[0065] In the above step S304, the intranet server updates the first tag field and the second tag field in the first target data during processing of the first target data, thereby obtaining a processing result of the first target data, which may include success or failure.

[0066] Step S306: storing the processing result of the first target data in the cloud server.

[0067] In the above step S306, the intranet server can directly access the cloud server, and after processing the first target data, the processing result of the first target data is stored in the cloud server for reading by the external network server.

[0068] In step S302 of the above data interaction method, the intranet server obtains the first target data in the cloud server, which specifically includes the following steps: determining the tag information carried in the first target data, wherein the tag information includes a first tag field and a second tag field; changing the first tag field from a first value to a second value, wherein the first value is different from the second value.

[0069] In an embodiment of the present application, after the intranet server reads the first target data in the cloud server, the first mark field in the first target data is changed from the first value 0 to the second value 1, indicating that the first target data has been read.

[0070] In step S304 of the above data interaction method, before processing the first target data, the method also includes the following steps: verifying the authentication information of the target object corresponding to the first target data, wherein the authentication information includes the account information and permission information of the target object; if the authentication information is verified, processing the first target data.

[0071] In the embodiment of the present application, before processing the first target data, the intranet server needs to first verify the authentication information of the target object that sent the first target data. When the external network server stores the first target data in the cloud server, the authentication information is stored in the cloud server together with the first target data. When the intranet server obtains the first target data, it also obtains the authentication information of the target object corresponding to the first target data. By verifying the account information of the target object and the permission information of the role corresponding to the account, if the account information and permission information of the target object are both verified, the intranet server processes the first target data.

[0072] In the above steps, verifying the authentication information of the target object corresponding to the first target data specifically includes the following steps: obtaining the account information of the target object corresponding to the first target data stored in the cloud server, wherein the account information includes a user name and a password; when the account information is consistent with the pre-set account information, obtaining the target authority corresponding to the account information stored in the intranet server; verifying whether the target authority is consistent with the authority information of the target object corresponding to the first target data.

[0073] In the embodiment of the present application, the intranet server stores the permissions of users with different roles. When the permission information of the role corresponding to the target object corresponding to the first target data is inconsistent with the permission information corresponding to the role stored in the intranet server, it is considered that the verification fails. At this time, the second tag field in the first target data is set to the second value 1, and the verification result is written to the cloud server. The verification result is the processing result of the first target data. In the case of successful verification, the first target data is processed by a thread. After the thread processing is completed, the second tag field in the first target data is set to the second value 1, and the processing result of the thread is written to the cloud server as the processing result of the first target data.

[0074] It should be noted that in the above process, regardless of whether the verification fails or the first target data is processed after the verification succeeds, the second mark field in the first target data is set to the second value 1. Therefore, the process of setting the second mark field in the first target data to 1 can be after verification or before verification, and is not limited here.

[0075] In step S304 of the above data interaction method, the first target data is processed, specifically including the following steps: determining the operation type of the first target data; starting a target thread corresponding to the operation type according to the operation type; and sending the first target data to the target thread.

[0076] In an embodiment of the present application, different types of data need to start different threads for processing. After determining the operation type to which the first target data belongs, the corresponding target thread is started according to the operation type to process the first target data.

[0077] It should be noted that in the above process, the authentication information of the target object corresponding to the first target data can be verified first, and then the target thread corresponding to the first target data can be started. In another optional embodiment, the target thread corresponding to the first target data can also be started first, and then the authentication information of the target object corresponding to the first target data can be verified. The embodiment of the present application does not limit the order of these two steps.

[0078] In step S306 of the above-mentioned data interaction method, the processing result of the first target data is stored in the cloud server, which specifically includes the following steps: changing the second tag field in the first target data to a second numerical value; when the verification result of the authentication information is verification passed, storing the second target data in the cloud server, wherein the second target data represents the processing result of the first target data when the authentication information verification passes; when the verification result of the authentication information is verification failed, storing the target information in the cloud server, wherein the target information is used to indicate that the authentication information verification fails.

[0079] In the embodiment of the present application, when any one of the account information and the permission information contained in the authentication information fails to pass the verification or the verification fails, the second tag field in the first target data is set to the second value 1, and the verification result is written to the cloud server. The verification result is the processing result of the first target data, that is, the above-mentioned target information. When the account information and the permission information contained in the authentication information are both verified, the first target data is processed by the thread. After the thread processing is completed, the second tag field in the first target data is set to the second value 1, and the thread processing result is written to the cloud server as the processing result of the first target data. The processing result of the thread is also the above-mentioned second target data.

[0080] Figure 4 is a structural diagram of a data interaction device according to an embodiment of the present application, such as Figure 4 As shown, the device is applied to an external network server and includes:

[0081] A first acquisition module 402 is used to acquire original data transmitted by a sub-application of a parent application, wherein the parent application is an application for providing an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of an external network;

[0082] A first storage module 404 is used to assign tag information to the original data, and store at least the first target data carrying the tag information in the cloud server, wherein the first target data in the cloud server can be directly read by the intranet server, and the intranet server stores the processing result of the first target data in the cloud server;

[0083] A query module 406, configured to query the cloud server according to the query frequency whether there is a processing result of the first target data;

[0084] The return module 408 is used to return the processing result of the first target data to the terminal device when the query result is yes.

[0085] In the first storage module in the above data interaction device, the tag information is assigned to the original data, which specifically includes the following process: determining the first tag field and the second tag field included in the tag information; setting both the first tag field and the second tag field to the first value.

[0086] In the first acquisition module in the above-mentioned data interaction device, the module is also used to verify the legitimacy of the fields of the original data; when the fields of the original data meet the corresponding verification conditions, the fields of the original data are determined to be legal fields, and the format of the original data is changed to the target format.

[0087] In the query module in the above-mentioned data interaction device, the module is used to receive the storage ID of the first target data returned by the cloud server; based on the storage ID of the first target data, query whether the second target data exists in the cloud server according to the query frequency, wherein the second target data represents the processing result of the first target data, and the first tag field and the second tag field of the second target data are both set to a second value, and the second value is different from the first value.

[0088] In the query module in the above-mentioned data interaction device, the module is also used to, when the query result indicates that the processing result of the first target data does not exist in the cloud server, again query whether there is a processing result of the first target data in the cloud server according to the query frequency; when the query result indicates that the processing result of the first target data exists in the cloud server, obtain the processing result of the first target data from the cloud server; and return the processing result of the first target data to the terminal device.

[0089] In the return module in the above-mentioned data interaction device, the module is also used to send target information to the cloud server, wherein the target information is used to delete the first target data in the cloud server.

[0090] It should be noted that Figure 4 The data interaction device shown is used to perform Figure 2 The data interaction method shown, therefore Figure 2The relevant explanations and instructions in the data interaction method in are also applicable to the data interaction device and will not be repeated here.

[0091] Figure 5 is a structural diagram of another data interaction device according to an embodiment of the present application, such as Figure 5 As shown, the device is applied to an intranet server and includes:

[0092] The second acquisition module 502 is used to acquire the first target data in the cloud server, wherein the first target data is original data carrying at least tag information, and the original data is data transmitted from the child application of the parent application on the terminal device of the external network to the external network server;

[0093] The processing module 504 is used to process the first target data to obtain a processing result of the first target data;

[0094] The second storage module 506 is used to store the processing result of the first target data in the cloud server.

[0095] In the second acquisition module in the above-mentioned data interaction device, the module is used to determine the tag information carried in the first target data, wherein the tag information includes a first tag field and a second tag field; the first tag field is changed from a first value to a second value, wherein the first value is different from the second value.

[0096] In the processing module in the above-mentioned data interaction device, the module is also used to verify the authentication information of the target object corresponding to the first target data, wherein the authentication information includes the account information and authority information of the target object; if the authentication information is verified, the first target data is processed.

[0097] In the processing module in the above-mentioned data interaction device, the module is also used to obtain the account information of the target object corresponding to the first target data stored in the cloud server, wherein the account information includes a user name and a password; when the account information is consistent with the pre-set account information, obtain the target authority corresponding to the account information stored in the intranet server; and verify whether the target authority is consistent with the authority information of the target object corresponding to the first target data.

[0098] In the processing module in the above data interaction device, the module is also used to determine the operation type of the first target data; start the target thread corresponding to the operation type according to the operation type; and send the first target data to the target thread.

[0099] In the second storage module in the above-mentioned data interaction device, the module is used to change the second tag field in the first target data to a second numerical value; when the verification result of the authentication information is verification passed, the second target data is stored in the cloud server, wherein the second target data represents the processing result of the first target data when the authentication information is verified passed; when the verification result of the authentication information is verification failed, the target information is stored in the cloud server, wherein the target information is used to indicate that the authentication information verification failed.

[0100] It should be noted that Figure 5 The data interaction device shown is used to perform Figure 3 The data interaction method shown, therefore Figure 3 The relevant explanations and instructions in the data interaction method in are also applicable to the data interaction device and will not be repeated here.

[0101] Figure 6 is a structural diagram of a data interaction system according to an embodiment of the present application, such as Figure 6 As shown, the data interaction system 600 includes: an external network server 602, an internal network server 604 and a cloud server 606, wherein the external network server is used to obtain the original data transmitted by the sub-application of the parent application, wherein the parent application is an application for providing an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of an external network; tag information is assigned to the original data, and at least the first target data carrying the tag information is stored in the cloud server, wherein the first target data in the cloud server can be directly read by the internal network server, and the internal network server stores the processing result of the first target data in the cloud server; querying whether there is a processing result of the first target data in the cloud server according to the query frequency; if the query result is yes, returning the processing result of the first target data to the terminal device; the internal network server is used to obtain the first target data in the cloud server; processing the first target data to obtain the processing result of the first target data; storing the processing result of the first target data in the cloud server; the cloud server is at least used to store the first target data.

[0102] In the above-mentioned data interaction system, the external network system 601 where the external network server 602 is located includes a terminal device 603, an external network server 602, and a cloud server 606. The terminal device is one or more of a tablet computer, a smart phone or a handheld computer. The terminal device is provided with a sub-application of the parent application, such as a mini-program in an instant messaging application software. The external network server is a server corresponding to the sub-application. The external network server is provided with a processor that is communicatively connected to the above-mentioned sub-application. The cloud server includes a cloud database and cloud storage, and the cloud server can be communicatively connected to the above-mentioned sub-application.

[0103] In the above data interaction system, the intranet system 605 where the intranet server 604 is located includes a switch 607 and an intranet server 604. The switch is connected to the cloud server through a firewall 608, and the intranet server is connected to the switch. The intranet server is provided with a processing unit and an operation and maintenance unit. The operation and maintenance unit interacts with the processing unit for feedback of data submitted by users, entry of daily log operation and maintenance information, and regular generation of operation reports.

[0104] In the above data interaction system, the sub-application is used to log in, submit data, view information, send notifications to the login personnel, etc., the external network server is used to write data, read data, delete data, etc. to the cloud server, the internal network server is used to cyclically read the data in the cloud server, modify the tag information in the cloud server, exchange data with the operation and maintenance work unit, regularly clean up the data in the cloud server (referring to regularly clean up the outdated data left in the cloud server due to operation failure or program abnormality), etc., the user role permission unit is used to assign corresponding account permissions to different users, assign functions corresponding to the account, assign maintenance areas, etc., the operation and maintenance work unit is used to process the data submitted by the feedback user, enter daily log operation and maintenance information, regularly generate operation reports, etc., the log operation and maintenance information is reflected in the form of a form, including area, operator, operation type, input parameters, operation results and operation time, etc.; the operation report is reflected in the form of a report, including analysis and integration of the original data from the perspectives of area, operation type, operation time, etc. In this embodiment, the text is written to the cloud database, and the pictures and audio and video are written to the cloud storage.

[0105] The external network system and the internal network system work independently, wherein the working process of the external network system includes the following steps:

[0106] Step 1: The user submits the original data in the above sub-application. After the external network server where the sub-application is located obtains the original data submitted by the user, it performs preliminary processing on the obtained original data. The preliminary processing process is the process of determining the legitimacy of the fields of the original data, or refers to the verification of the validity of the data. Only after passing the verification, the next step will be entered;

[0107] Step 2: After determining that the field of the original data is a legal field, the external network server processes the format of the original data into a target format, such as JSON format, and assigns tag information to the original data, that is, assigns a first tag field and a second tag field to the original data, the first tag field and the second tag field are set to 0 respectively, and writes the first target data carrying the first tag field and the second tag field, and the operation type of the first target data into the cloud server, and records the storage ID assigned by the cloud server to the first target data;

[0108] Step 3: The external network server starts a query thread and queries the values ​​of the first tag field and the second tag field of the first target data stored in the cloud server through the storage ID;

[0109] Step 4: Determine whether the values ​​of the first tag field and the second tag field of the queried first target data are both 1. If so, feed back the result to the sub-application in the terminal device to prompt the user to perform the next operation based on the result. At the same time, send target information to the cloud server, which carries the storage ID of the first target data. After receiving the target information, the cloud server deletes the first target data corresponding to the storage ID; if not, continue to wait for a period of time and query the values ​​of the first tag field and the second tag field of the first target data again.

[0110] The working process of the above intranet system includes the following steps:

[0111] Step a: When the intranet system is started, the intranet server will periodically read the data in the cloud server where both the first tag field and the second tag field are 0 (i.e., the first target data);

[0112] Step b: after reading the first target data in the cloud server where both the first tag field and the second tag field are 0, setting the first tag field of the read first target data to 1;

[0113] Step c: After the intranet server obtains the first target data in the cloud server, it determines the operation type of the first target data, starts the corresponding operation and maintenance work unit thread processing according to the operation type, and passes the data with the operation type of json in the first target data to the corresponding thread;

[0114] Step d: After receiving the JSON data, the started operation and maintenance work unit thread first verifies the user authentication information field corresponding to the first target data. After the verification is completed, the verification result is returned and the operation and maintenance work unit thread is returned.

[0115] There are two types of verification results mentioned above: 1. When the verification fails, the second mark field of the current first target data is set to 1, and the verification result is written to the cloud server; 2. When the verification passes, the operation and maintenance work unit thread performs the corresponding operation, and after completion, the second mark field of the current first target data is set to 1, and the processing result of the thread is written to the cloud server.

[0116] In the above data interaction system, in order to achieve the security of intranet and intranet interaction, the intranet system 605 also includes an intrusion detection system 609, which is in communication connection with the switch.

[0117] The above-mentioned intranet server is also provided with a user role permission unit, which is used to assign corresponding account permissions to different users, their respective functions and set their respective maintenance areas to verify the legitimacy of usernames and passwords, role permissions and user area legitimacy.

[0118] The operation and maintenance work unit in step d above is also used to call the user role permission unit in the intranet server and determine whether the user role permission is legal. If it is legal, the relevant permission should be allocated; if it is not legal, the permission restriction will be prompted, and the operation and maintenance work unit records all operation log information. In addition, the operation and maintenance work unit can also regularly generate operation reports and send them to the maintenance manager's mailbox in the form of emails.

[0119] The data interaction system provided in the embodiment of the present application, by deploying the terminal device business of the external network in the sub-application, and writing the request information and data into the cloud server, the internal network server reads the data in the cloud server through the firewall, and writes the interaction information after processing back to the cloud server, so as to safely realize the data exchange between the internal and external networks. Since the two independent systems of the internal and external networks are isolated by the firewall and the intrusion detection system, there is no logical connection and communication transmission protocol for communication between the internal and external network systems, and there is no information exchange based on the protocol, but only non-protocol exchange in the form of text, pictures, audio and video files. Therefore, the system logically isolates and blocks all external attacks on the internal network through network connections, so that external attackers cannot directly invade and attack the internal network, and the security of the internal host is guaranteed. Through the data synchronization method of the cloud database and cloud storage isolated by the firewall and the intrusion detection system, the synchronization of the external network business data and the internal network business data is realized, so as to realize the data interaction between the internal and external networks, and the internal network does not need to have an external public network IP and an open port, that is, the security of the data interaction between the external network and the internal network can be guaranteed. In addition, the terminal device uses applet technology, and the application program that can be used without downloading makes the user acceptance high.

[0120] It should be noted that Figure 2 and Figure 3 The explanations about data interaction methods in the Figure 6 The data interaction system shown will not be described in detail here.

[0121] Figure 7 is a flow chart of intranet and extranet data interaction according to an embodiment of the present application, such as Figure 7As shown, the external network server performs the following steps: Step 701, the user submits the original data in the above sub-application, and the external network server where the sub-application is located obtains the original data submitted by the user and performs preliminary processing on the obtained original data; Step 702, writes the data with the first tag field and the second tag field both being 0 and the operation type of the data into the cloud server; Step 703, queries the data stored in the cloud server with the first tag field and the second tag field both being 1; Step 704, determines whether the query is found, and if the query result is yes, executes step 701, and if the query result is no, executes step 703 again according to the query frequency. The intranet server performs the following steps: Step 704, reads the data with the first tag field and the second tag field both being 0 in the cloud server; Step 705, after the data is read, sets the first tag field of the read data to 1; Step 706, sends the data to the corresponding operation and maintenance work unit for processing through the thread; Step 706, after the operation and maintenance work unit thread processes the data, sets the second tag field of the data to 1, and writes the processing result of the data into the cloud server.

[0122] An embodiment of the present application also provides a non-volatile storage medium, which includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the following data interaction method by running the computer program: an external network server obtains original data transmitted by a terminal device in an external network through a sub-application of a parent application, wherein the parent application is an application for providing an operating environment for the sub-application; assigns tag information to the original data, and stores at least first target data carrying the tag information in a cloud server, wherein the first target data in the cloud server can be directly read by an intranet server, and the intranet server stores the processing result of the first target data in the cloud server; queries the cloud server according to the query frequency whether there is a processing result of the first target data; and when the query result is yes, returns the processing result of the first target data to the terminal device.

[0123] The device where the above-mentioned non-volatile storage medium is located can also execute another data interaction method by running a computer program: the intranet server obtains the first target data in the cloud server, wherein the first target data is the original data carrying at least marking information, and the original data is the data transmitted by the terminal device of the external network obtained by the external network server through the child application of the parent application; the first target data is processed to obtain the processing result of the first target data; and the processing result of the first target data is stored in the cloud server.

[0124] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0125] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0126] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0127] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0128] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0129] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0130] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A data interaction method, characterized in that: include: The external network server obtains original data transmitted by the sub-application of the parent application, wherein the parent application is an application for providing an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of the external network; Assigning tag information to the original data, and storing at least first target data carrying the tag information in the cloud server, wherein the first target data in the cloud server can be directly read by the intranet server, and the intranet server stores the processing result of the first target data in the cloud server; querying the cloud server according to the query frequency whether there is a processing result of the first target data; If the query result is yes, returning the processing result of the first target data to the terminal device; The method further includes: the intranet server obtains the first target data in the cloud server, including: the intranet server determines the tag information carried in the first target data, wherein the tag information includes a first tag field and a second tag field; the intranet server changes the first tag field from a first value to a second value, wherein the first value is different from the second value; The method further includes: the intranet server verifies authentication information of a target object corresponding to the first target data, wherein the authentication information includes account information and authority information of the target object; if the authentication information is verified, the intranet server processes the first target data; The intranet server stores the processing result of the first target data in the cloud server, including: the intranet server changes the second tag field in the first target data to the second value; the intranet server stores the second target data in the cloud server when the verification result of the authentication information is passed, wherein the second target data represents the processing result of the first target data when the authentication information is passed; when the verification result of the authentication information is failed, the intranet server stores the target information in the cloud server, wherein the target information is used to indicate that the authentication information verification fails.

2. The method according to claim 1, characterized in that Assigning tag information to the original data includes: Determine a first tag field and a second tag field included in the tag information; The first tag field and the second tag field are both set to a first value.

3. The method according to claim 1, characterized in that After the external network server obtains the original data transmitted by the terminal device of the external network through the sub-application of the parent application, the method further includes: Verifying the legitimacy of the fields of the original data; In the case where the field of the original data meets the corresponding verification condition, the field of the original data is determined to be a legal field, and the format of the original data is changed to a target format.

4. The method according to claim 2, characterized in that: The processing result of querying whether the cloud server has the first target data according to the query frequency includes: Receiving the storage ID of the first target data returned by the cloud server; Based on the storage ID of the first target data, query whether the second target data exists in the cloud server according to the query frequency, wherein the second target data represents the processing result of the first target data, and the first tag field and the second tag field of the second target data are both set to a second value, and the second value is different from the first value.

5. The method according to claim 1, characterized in that The processing result of querying whether the cloud server has the first target data according to the query frequency includes: If the query result indicates that the processing result of the first target data does not exist in the cloud server, query again according to the query frequency whether the processing result of the first target data exists in the cloud server; When the query result indicates that the processing result of the first target data exists in the cloud server, obtaining the processing result of the first target data from the cloud server; The processing result of the first target data is returned to the terminal device.

6. The method according to claim 1, characterized in that After returning the processing result of the first target data to the terminal device, the method further includes: Sending target information to the cloud server, wherein the target information is used to delete first target data in the cloud server.

7. A data interaction method, characterized in that: include: The intranet server obtains first target data in the cloud server, wherein the first target data is original data carrying at least tag information, and the original data is data transmitted from a sub-application of a parent application on a terminal device deployed on an external network to the external network server; Processing the first target data to obtain a processing result of the first target data; storing the processing result of the first target data in the cloud server; The intranet server obtains the first target data in the cloud server, including: determining the tag information carried in the first target data, wherein the tag information includes a first tag field and a second tag field; changing the first tag field from a first value to a second value, wherein the first value is different from the second value; Before processing the first target data, the method further includes: verifying authentication information of a target object corresponding to the first target data, wherein the authentication information includes account information and authority information of the target object; and processing the first target data if the authentication information is verified successfully; Wherein, storing the processing result of the first target data in the cloud server includes: changing the second tag field in the first target data to the second numerical value; when the verification result of the authentication information is verification passed, storing the second target data in the cloud server, wherein the second target data represents the processing result of the first target data when the authentication information is verified passed; when the verification result of the authentication information is verification failed, storing the target information in the cloud server, wherein the target information is used to indicate that the authentication information verification failed.

8. The method according to claim 7, characterized in that Verifying authentication information of a target object corresponding to the first target data includes: Acquire the account information of the target object corresponding to the first target data stored in the cloud server, wherein the account information includes a user name and a password; When the account information is consistent with the preset account information, obtaining the target authority corresponding to the account information stored in the intranet server; Verify whether the target permission is consistent with permission information of the target object corresponding to the first target data.

9. The method according to claim 7, characterized in that: Processing the first target data includes: determining an operation type of the first target data; Starting a target thread corresponding to the operation type according to the operation type; The first target data is sent to the target thread.

10. A data interaction device, characterized in that: Applied to external network servers, including: A first acquisition module is used to acquire original data transmitted by a sub-application of a parent application, wherein the parent application is an application for providing an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of an external network; The first storage module is used to assign tag information to the original data, and at least store the first target data carrying the tag information in the cloud server, wherein the first target data in the cloud server can be directly read by the intranet server, and the intranet server stores the processing result of the first target data in the cloud server, wherein the intranet server obtains the first target data in the cloud server, including: the intranet server determines the tag information carried in the first target data, wherein the tag information includes a first tag field and a second tag field; the intranet server changes the first tag field from a first value to a second value, wherein the first value is different from the second value; the intranet server verifies the authentication information of the target object corresponding to the first target data, wherein the authentication information includes a first tag field and a second tag field; The method comprises: the intranet server processes the first target data in the case where the authentication information is verified to be passed; the intranet server processes the first target data; the intranet server stores the processing result of the first target data in the cloud server, including: the intranet server changes the second tag field in the first target data to the second value; the intranet server stores the second target data in the cloud server in the case where the verification result of the authentication information is verified to be passed, wherein the second target data represents the processing result of the first target data in the case where the authentication information is verified to be failed; the intranet server stores the target information in the cloud server in the case where the verification result of the authentication information is verified to be failed; A query module, used for querying whether there is a processing result of the first target data in the cloud server according to a query frequency; The returning module is used to return the processing result of the first target data to the terminal device when the query result is yes.

11. A data interaction device, characterized in that: Applied to intranet servers, including: The second acquisition module is used to acquire the first target data in the cloud server, wherein the first target data is original data carrying at least tag information, and the original data is data transmitted from the child application of the parent application deployed on the terminal device of the external network to the external network server, wherein acquiring the first target data in the cloud server includes: determining the tag information carried in the first target data, wherein the tag information includes a first tag field and a second tag field; changing the first tag field from a first value to a second value, wherein the first value is different from the second value; a processing module, configured to process the first target data to obtain a processing result of the first target data, wherein before processing the first target data, the processing module further includes: verifying authentication information of a target object corresponding to the first target data, wherein the authentication information includes account information and authority information of the target object; and processing the first target data if the authentication information is verified successfully; A second storage module is used to store the processing result of the first target data in the cloud server, wherein storing the processing result of the first target data in the cloud server includes: changing the second tag field in the first target data to the second numerical value; if the verification result of the authentication information is passed, storing the second target data in the cloud server, wherein the second target data represents the processing result of the first target data when the authentication information is passed; if the verification result of the authentication information is failed, storing the target information in the cloud server, wherein the target information is used to indicate that the authentication information verification has failed.

12. A data interaction system, characterized in that: include: Extranet servers, intranet servers and cloud servers, among which, The external network server is used to obtain original data transmitted by the sub-application of the parent application, wherein the parent application is an application for providing an operating environment for the sub-application, and the parent application and the sub-application are deployed in a terminal device of the external network; assigning tag information to the original data, and storing at least first target data carrying the tag information in the cloud server, wherein the first target data in the cloud server can be directly read by the intranet server, and the intranet server stores the processing result of the first target data in the cloud server; querying whether the processing result of the first target data exists in the cloud server according to the query frequency; and returning the processing result of the first target data to the terminal device if the query result is yes; The intranet server is used to obtain the first target data in the cloud server; process the first target data to obtain the processing result of the first target data; and store the processing result of the first target data in the cloud server, wherein the intranet server obtains the first target data in the cloud server, including: determining the tag information carried in the first target data, wherein the tag information includes a first tag field and a second tag field; changing the first tag field from a first value to a second value, wherein the first value is different from the second value; wherein before processing the first target data, it also includes: verifying the authentication information of the target object corresponding to the first target data, wherein the authentication information The information includes the account information and permission information of the target object; if the authentication information is verified, the first target data is processed; wherein the processing result of the first target data is stored in the cloud server, including: changing the second tag field in the first target data to the second value; if the verification result of the authentication information is that the verification is passed, the second target data is stored in the cloud server, wherein the second target data represents the processing result of the first target data when the authentication information is verified; if the verification result of the authentication information is that the verification fails, the target information is stored in the cloud server, wherein the target information is used to indicate that the authentication information verification fails; The cloud server is used to store at least the first target data and the second target data.

13. An electronic device, characterized in that: It includes one or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the data interaction method described in any one of claims 1 to 6 or claims 7 to 9.

14. A non-volatile storage medium, characterized in that: The non-volatile storage medium includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the data interaction method described in any one of claims 1 to 6 or claims 7 to 9 by running the computer program.

Images