Optical element warehousing cooperation and safe interaction method and system for heterogeneous system

Abstract

This invention discloses a method and system for collaborative and secure interaction in the storage of optical components for heterogeneous systems, relating to the fields of industrial automation and information security. The method includes: Step 1, providing four standard interface methods—WebService, Socket, intermediate table, and QR code—through a protocol access gateway; Step 2, a security authentication center employs a unified identity authentication mechanism for each access request, combined with IP address blacklists and whitelists for access control, token authentication, and authorization; Step 3, a task scheduling engine decomposes received service access instructions into a sequence of executable tasks for the device and optimizes scheduling according to a pre-designed plan; Step 4, for systems that can directly establish a network connection, service access is performed directly; for systems that cannot directly establish a network connection, QR code encoding technology is used to achieve secure data transfer via a data transfer mechanism. This invention enables efficient collaborative control and data interaction among multiple heterogeneous systems while ensuring data security, improving system compatibility and integration efficiency.

Description

Technical Field

[0001] This invention relates to the fields of industrial automation and information security technology. More specifically, this invention relates to a method and system for collaborative and secure interaction in the storage of optical components for heterogeneous systems. Background Technology

[0002] Intelligent warehousing systems for optical components typically consist of multiple heterogeneous subsystems, including Resource Planning (ERP) systems, Manufacturing Execution Systems (MES), Warehouse Management Systems (WMS), Warehouse Control Systems (WCS), and various automated equipment (such as AGVs, stacker cranes, and robotic arms). These systems are often developed by different vendors, employing different technical architectures, communication protocols, and data formats, leading to significant challenges in system integration and the formation of "information silos." Furthermore, industrial automation places high demands on real-time collaboration.

[0003] In existing technologies, system integration mainly adopts the following methods:

[0004] Point-to-point custom development interfaces: An interface is developed between every two systems that need to communicate. This approach results in an exponential increase in the number of interfaces as the number of systems increases, leading to high development and maintenance costs, tight system coupling, and the potential impact of upgrading any system on others.

[0005] Enterprise Service Bus (ESB): Decoupling between systems is achieved through middleware. However, ESB implementation is complex and costly. In some high-security scenarios, because management systems such as ERP and MES may be located in different security network zones or even physically isolated from warehouse execution systems, ESB struggles to cross security boundaries. Furthermore, ESB cannot handle high real-time collaboration requirements.

[0006] Single communication protocol interface: such as providing only a WebService or Socket interface. This approach lacks flexibility and cannot achieve data exchange when encountering systems that cannot establish a direct network connection due to security restrictions.

[0007] Especially in the warehousing environment for equipment-related products, there are unique challenges: on the one hand, production management systems (such as ERP and MES) typically reside on high-security intranets because they contain core business data; on the other hand, warehouse execution systems (WMS and WCS) need to interact with automated equipment at the shop floor level in real time, and their network environment is relatively open. This difference in network architecture leads to security risks in direct communication between systems. Current technologies offer solutions for communication between physically isolated networks, such as industrial gateways and QR codes.

[0008] Industrial network gateways employ a "2+1" or "multi-host" physical architecture. One host (internal and external) is deployed on each of the two networks requiring isolation, connected by a dedicated isolation switching unit (or chip). This unit communicates only with one side of the host at any given time, using a high-speed "ferry" method to restore and retransmit data packets to the other side, thus achieving "protocol interruption, data persistence" and completely severing the direct TCP / IP connection. However, this method requires hardware deployment, resulting in high costs. Furthermore, although logical isolation is achieved, the device itself still needs to be connected to both networks, creating a physical access point, meaning it is not strictly physical isolation.

[0009] QR code transfer (or image transfer): The data to be transmitted is encrypted and encoded to generate a series of QR code images, which are displayed on the screen at the sending end. The receiving end captures these QR code images through a camera, and after decoding and decryption, the original data is restored. The entire process relies on optical signals and has no electrical or network connection of any kind, achieving complete physical isolation and extremely high security. However, due to its limited information carrying capacity, it is currently mostly used for flat, small-batch information transmission.

[0010] Therefore, existing system integration technologies face shortcomings in optical component storage environments, such as poor compatibility with heterogeneous systems, difficulties in cross-security domain data interaction, and insufficient interface flexibility. Furthermore, existing technologies are unable to achieve efficient and flexible collaborative control of various heterogeneous systems in optical component storage while ensuring security. Summary of the Invention

[0011] One object of the present invention is to solve at least the above-mentioned problems and / or defects, and to provide at least the advantages described below.

[0012] To achieve these objectives and other advantages of the present invention, a method for collaborative and secure interaction of optical component storage in heterogeneous systems is provided, comprising:

[0013] Step 1: The protocol access gateway provides four standard interface methods: WebService, Socket, intermediate table, and QR code. This enables resource planning systems (ERP), manufacturing execution systems (MES), warehouse management systems (WMS), warehouse control systems (WCS), and various automated equipment that implement optical component warehousing to select the corresponding access method according to their own technical characteristics and network security strategies.

[0014] Step 2: The security authentication center uses a unified identity authentication mechanism based on the authentication token JWT for each access request, and combines it with the IP address blacklist and whitelist for access control to complete the token authentication and authorization for each system.

[0015] Step 3: The task scheduling engine decomposes the received service access instructions into a sequence of tasks that can be executed by the device, and performs optimized scheduling.

[0016] Step 4: For systems MES and WCS that can directly establish network connections, directly perform the corresponding business access.

[0017] For ERP and WMS systems that cannot establish a direct network connection due to physical isolation, the data security transmission module uses QR code encoding technology to achieve secure data transfer via a transfer mechanism, thereby enabling the corresponding business access.

[0018] Preferably, the object of the shuttle-type secure transmission is a structured business instruction data packet that can be directly triggered for automated execution. The structured business instruction data packet adopts a four-layer structure of envelopes within envelopes, and the structure of the business instruction data packet is as follows:

[0019] The L1 outer layer is the QR code image layer that enables physical ferrying;

[0020] The L2 data presentation layer is a block of transmitted data that can be read directly from the raw byte stream by the barcode scanner.

[0021] The L3 secure transport layer is a structured data packet that enables core security encapsulation.

[0022] L4 is the core business layer, which consists of plaintext business instructions that can be directly driven to execute business operations.

[0023] Preferably, the content of the structured business instruction data packet mainly includes: JSON format inbound order, outbound order, inventory order, transfer / allocation order, return order, scrap disposal order, status query order and execution result receipt.

[0024] Preferably, the plaintext of the business instruction contains structured data unique to optical component warehousing;

[0025] Taking the outbound order as an example, the structured data includes: work order ID, optical component type, parameter details, and priority.

[0026] The parameter details refer to the material code, batch, quantity, and precise storage location corresponding to the optical element.

[0027] Preferably, the structured data packet achieves the separation and binding of identity and business by defining a version field, an authentication token (JWT) field, and an encrypted business data field.

[0028] Preferably, for ERP systems and warehouse execution systems that cannot directly establish a network connection, a shuttle-style secure transmission is used to complete outbound or inbound tasks. The outbound task processing flow includes:

[0029] S1. The ERP system generates a structured outbound task order based on the production plan.

[0030] S2. Based on the concept of secure transfer, the ERP system automatically performs a four-layer secure encapsulation process for outbound task orders, resulting in a QR code image displayed on the intranet terminal screen.

[0031] S3. Authorized personnel use certified scanning devices to scan the QR code image on the screen on the intranet side and upload the QR code data;

[0032] S4. The parser in the data security transmission module of the warehouse execution system is triggered. It reverse-engineers the read QR code data, decrypts and decompresses it, and then initiates a rapid verification to the security authentication center after extracting the JWT token in the package. This is to obtain a complete and structured outbound business instruction if the JWT token is valid and has not expired.

[0033] S5, the warehouse execution system sends outbound business instructions to the task scheduling engine for intelligent collaborative control of various automated devices;

[0034] S6. Each automated device receives the instruction and begins execution;

[0035] S7. When all outbound tasks are completed or terminated midway due to an abnormality, the warehouse execution system will send the execution results back to the ERP system to close the business loop.

[0036] A collaborative and secure interaction system for optical component storage in heterogeneous systems, applied to a collaborative and secure interaction method for optical component storage in heterogeneous systems, includes:

[0037] A multi-protocol access gateway used to adapt to different communication protocols and enable unified access for heterogeneous systems;

[0038] A security authentication center responsible for identity authentication, token issuance and verification, and access control;

[0039] A task scheduling engine responsible for business logic processing, task decomposition, and optimized scheduling;

[0040] The data security transmission module for secure interaction across security domains mainly includes a QR code generator and a parser.

[0041] The present invention has at least the following beneficial effects:

[0042] Firstly, this invention proposes a QR code data encoding and parsing method that employs a four-layer secure encapsulation structure of "envelope within an envelope" to form a novel QR code transfer mechanism. This mechanism directly issues instructions and is specifically designed for physically isolated automated production scenarios with high security requirements. This method ensures that while transferring instructions via QR codes, it also guarantees identity credibility, transmission confidentiality, and business executability, thereby achieving real-time business collaboration in a secure isolation environment.

[0043] Secondly, this invention proposes a hybrid integration mode with four interface methods working together, rather than relying on a single technology. It can flexibly select the most suitable integration scheme according to different technical constraints and security requirements. Therefore, for the intelligent warehousing environment of optical components, it can realize safe and efficient collaborative control and data interaction between multiple heterogeneous systems (such as ERP, MES, WMS, WCS and various automated equipment).

[0044] Third, this invention uses a unified security authentication system based on JWT tokens across all interface methods to ensure the security consistency of the entire system.

[0045] Other advantages, objectives and features of the present invention will become apparent in part from the following description, and in part from those skilled in the art through study and practice of the invention. Attached Figure Description

[0046] Figure 1 This is a schematic diagram of the system module composition and data flow of the present invention;

[0047] Figure 2 This is a complete flowchart of the present invention when performing inbound and outbound tasks across security domains;

[0048] Figure 3 This is a schematic diagram of the protocol stack when the present invention uses a QR code interface in practical applications;

[0049] Figure 4 This is a schematic diagram of the protocol stack when the intermediate table interface is used in the actual application of the present invention;

[0050] Figure 5 This is a schematic diagram of the protocol stack when the Socket interface is used in the actual application of the present invention;

[0051] Figure 6 This is a schematic diagram of the protocol stack when using a Webservice interface in practical applications of the present invention;

[0052] Figure 7 This is a detailed schematic diagram illustrating the process of QR code data encoding, generation, and parsing in practical applications of the present invention. Detailed Implementation

[0053] The present invention will now be described in further detail with reference to the accompanying drawings, so that those skilled in the art can implement it based on the description.

[0054] This invention proposes a collaborative and secure interaction method for optical components in heterogeneous systems. It enables efficient collaborative control and data interaction among multiple heterogeneous systems while ensuring data security. This allows optical components used in equipment-critical, high-value, high-cleanliness, and strictly controlled storage environments to achieve collaborative control and secure data interaction through a hybrid interface adaptation mechanism. This hybrid interface adaptation mechanism is not a simple aggregation of interfaces, but rather automatically matches or allows the administrator to specify the optimal access point based on the type of access object, real-time requirements, and network reachability. The specific operation method is as follows:

[0055] 1. Multi-protocol adaptation: Provides four interface methods: WebService (service interface for business systems), Socket (streaming command interface for real-time devices), intermediate table (data exchange interface for legacy systems), and QR code (secure bridging interface for physically isolated networks). This allows heterogeneous systems to automatically match and select the most suitable access method based on their own technical and network security characteristics. It should be noted that the multi-protocol adaptation here applies to scenarios where the two communicating parties can directly establish a network connection, as well as scenarios where a direct network connection cannot be established due to security policies or physical isolation. For scenarios where a direct network connection can be established, real-time interfaces such as WebService and Socket are used for efficient collaboration. For scenarios where a direct network connection cannot be established, a QR code data transfer mechanism is used to achieve secure transmission of business instructions, thus forming a comprehensive heterogeneous system collaborative control solution. Typically, Enterprise Resource Planning (ERP) and Manufacturing Execution System (MES) are deployed in the Management Information Network (MIN) domain, responsible for production planning, work order issuance, and business instruction generation; Warehouse Management System (WMS) and Warehouse Control System (WCS) are deployed in the Production Control Network (PCN) domain, responsible for inventory management, location allocation, task decomposition, and equipment scheduling. Whether there is physical isolation on the network (i.e., whether a direct network connection can be established) refers to whether there is physical isolation between the MSN domain (such as ERP) and the PCN domain (such as WMS) in the actual application scenario. If there is, a QR code data transfer mechanism is used to achieve secure transmission of business instructions; otherwise, real-time interfaces such as WebService and Socket are used for efficient collaboration.

[0056] In practical applications, QR code interfaces offer the highest level of security and are suitable for data exchange between physically isolated networks or mobile terminals across security domains. Their protocol stack includes... Figure 3As shown; for systems requiring batch data exchange / asynchronous processing, an intermediate table interface is used. The intermediate table interface is primarily for integration with legacy systems that do not support secondary development (such as systems that do not support APIs). Its protocol stack is as follows: Figure 4 As shown; for high real-time / point-to-point communication, the Socket interface is used. The Socket interface is suitable for real-time control communication with automated equipment (such as AGVs / stall cranes), and its protocol stack is as follows. Figure 5 As shown; a Webservice interface with high security and low real-time requirements, its main application scenario is ERP / MES integration (such as integration with standard commercial software such as ERP and MES), and its protocol stack is as follows. Figure 6 As shown;

[0057] It should be noted that this solution, through a multi-protocol adapter gateway, is compatible with heterogeneous systems of various technical architectures, exhibiting excellent system flexibility and scalability. Specifically, the four interface methods can be flexibly selected according to the actual scenario. This design allows for the expansion of new functions or the integration of new systems without modifying the core architecture, significantly reducing maintenance costs. In practical implementation, the system access time in this invention is shortened from the original 2-4 weeks to 3-5 days, and integration efficiency is improved by more than 70%, enhancing system compatibility and integration efficiency.

[0058] 2. Token authentication and authorization: All access requests adopt a unified identity authentication mechanism based on JWT (JSON Web Token) tokens, and access control is carried out in combination with IP address blacklists and whitelists.

[0059] It should be noted that this solution enhances data security by employing a dual security mechanism of JWT tokens and IP blacklists / whitelists to effectively prevent unauthorized access. Compared to traditional username and password authentication, security is improved, and the stateless nature of the token is more suitable for distributed systems.

[0060] 3. Intelligent task scheduling: Receives business instructions from upper-level systems (such as ERP and MES), decomposes them into a sequence of tasks that can be executed by the equipment, and optimizes scheduling based on factors such as equipment status and task priority.

[0061] 4. Command Issuance Between Physically Isolated Networks: For systems that cannot directly establish a network connection, QR code encoding technology is used to achieve secure "ferry" transmission. However, unlike existing QR code ferry technologies, the transmitted object is not a file or information to be interpreted, but rather a structured business instruction data packet (including JSON-formatted outbound orders) that directly triggers automated execution. The entire data packet adopts a hierarchical "envelope-within-an-envelope" structure.

[0062]

[0063] This design structurally binds Unified Identity Authentication (JWT) to core business data before encryption, enabling the recipient to immediately verify identity and distribute business data after decryption, achieving "decryption once, verification twice" rather than general file transfer.

[0064] It should be noted that this solution addresses the challenge of cross-security domain communication by successfully resolving data exchange between physically isolated networks through an innovative QR code data transfer scheme. In one implementation, it successfully achieved secure data interaction between the production network and the management network under zero-connectivity conditions, breaking down "information silos."

[0065] Example 1

[0066] like Figure 1 As shown, the core of the collaborative control system of this invention mainly includes:

[0067] A multi-protocol access gateway designed to adapt to different communication protocols and enable unified access for heterogeneous systems: Serving as the system's unified entry point, it supports four standard interface protocols. This gateway can automatically identify the access protocol type and perform corresponding data parsing and format conversion.

[0068] The security authentication center, responsible for identity authentication, token issuance and verification, and access control, is responsible for authenticating all access requests. When the system connects for the first time, a valid JWT token needs to be obtained through a secure channel; subsequent requests must include this token.

[0069] The task scheduling engine, responsible for business logic processing, task decomposition, and optimized scheduling, is the core business logic processing unit. It receives inbound and outbound instructions from ERP / MES, decomposes them into sub-tasks such as WMS inventory query, WCS equipment scheduling, and AGV path planning, and monitors the task execution status.

[0070] This module, comprising a QR code generator and parser, is used for secure data transmission across security domains. When exchanging data with physically isolated systems, it serializes, compresses, and encrypts the business data to generate a QR code image. The recipient obtains the data by scanning the QR code and then performs reverse parsing for use.

[0071] Example 2

[0072] like Figure 2 As shown, this example uses a cross-security domain inbound / outbound task as an example to illustrate in detail how to securely and completely execute an outbound instruction for an optical component when the ERP system (located in a high-security management intranet) and the warehouse execution system (located in a relatively open workshop network) are physically isolated. The main processing content is as follows:

[0073] 1. Task generation and instruction encapsulation (internal network side)

[0074] Based on the production plan, the ERP system generates a structured outbound task order. This task order not only includes regular outbound instructions but also integrates key business data specific to the high value, high precision, and strict traceability requirements of optical components. (It should be noted that, in addition to regular instructions, the outbound task order of this invention also integrates key business data unique to optical components, such as cleanliness level, shockproof and anti-static requirements, batch traceability codes, and precise storage locations, to ensure quality control and full traceability of high-value components in cross-network collaboration.) Its core plaintext JSON format is as follows:

[0075] {

[0076] "task_id": "OUT-20251027-001",

[0077] "type": "Outbound to XXX",

[0078] "project_code": "PROJ-ASTRO-2025", / / Related projects

[0079] "requirement": {

[0080] "cleanliness_class": "100", / / Cleanliness requirements

[0081] "humidity_control": "<40%", / / Humidity control requirements

[0082] "anti_static": true / / Antistatic requirements

[0083] },

[0084] "items": [

[0085] {

[0086] "material_code": "OPTIC-001",

[0087] "material_name": "Aspherical mirror",

[0088] "batch": "B2025-10-A01", / / Accurate to sub-batch

[0089] "quantity": 2,

[0090] "source_storage_location": "A-01-02-05", / / Precise storage location, including the temperature and humidity control cabinet number.

[0091] "traceability_code": "TR-8X7Y6Z" / / Individual item traceability code (optional)

[0092] }

[0093] ],

[0094] "priority": "high",

[0095] "planned_time": "2025-10-27T14:30:00Z"

[0096] }

[0097] After generating plaintext, the system automatically executes a four-layer security encapsulation process of "envelope within an envelope": First, the above-mentioned business JSON data is encrypted using the recipient's public key to generate Encrypted_Biz_Data; then, it is assembled into an L3 layer secure transport packet together with the short-lived JWT token currently issued by the system; next, the entire transport packet is binary compressed and encrypted to form an L2 layer transport data block; finally, the QR code generator is called to render the final L1 layer QR code image using a high fault tolerance level (QR CodeH level), and the L1 layer QR code image is displayed on the screen of the intranet terminal.

[0098] 2. Safe shuttle and identity verification (crossing physical barriers)

[0099] Authorized personnel scan a QR code on the screen using a certified scanning device on the intranet side and then upload the QR code data. On the warehouse system side, the parser in the data security transmission module is triggered. It first reads the original QR code data, then reverses the process by performing decryption and decompression operations to restore the L3 layer secure transmission packet. The system immediately extracts the JWT token from the packet and initiates rapid verification with the security authentication center. Only if the token is valid and has not expired will the system use the corresponding private key to decrypt Encrypted_Biz_Data to obtain the complete and structured outbound business instructions.

[0100] 3. Task Parsing and Cooperative Scheduling (Workshop Network Side): Verified plaintext service commands are sent to the task scheduling engine. After parsing the command, the engine does not simply forward it, but initiates an intelligent cooperative control sequence:

[0101] (1) Environmental pre-check: Based on the requirement field in the instruction, the scheduling engine first checks whether the current environmental parameters (temperature, humidity, cleanliness) of the target storage area (such as a constant temperature and humidity cabinet) meet the requirements. If they do not meet the requirements, the task is automatically delayed and environmental control is triggered.

[0102] (2) Inventory and storage location locking: Send a query and locking request to the WMS system to confirm the availability of the specified batch and the material status of the storage location in the items, and reserve the space to prevent conflicts with other tasks.

[0103] (3) Device Coordinated Scheduling: The engine decomposes macro-level tasks into device-level micro-instruction sequences and distributes them to various subsystems through different interfaces:

[0104] a. Send a real-time instruction to WCS via the Socket interface: dispatch the stacker crane to the A-01-02-05 storage location to perform a pickup operation.

[0105] b. At the same time, notify WMS to update the inventory status to "pending shipment" via the WebService interface.

[0106] c. Based on the real-time location and status of the AGV system, plan the optimal path through the Socket interface and instruct it to move to the delivery port to wait for receiving the goods.

[0107] 4. Task execution and status synchronization

[0108] Each automated device receives instructions and begins execution. The WCS, acting as the hub for device control, aggregates real-time status feedback from stacker cranes and AGVs (e.g., "picking complete," "carrying," "arrived at the shipping gate"). The task scheduling engine monitors the entire process and updates key milestone statuses (e.g., "goods have been transported out of the warehouse by AGV") to the WMS in real time, ensuring inventory consistency between records and actual stock. All device status and task progress are recorded in a logbook to generate a complete traceability chain.

[0109] 5. Result feedback and business closed loop (reverse transfer)

[0110] When all outbound tasks are completed, or when the process is terminated due to an anomaly (such as failed barcode scanning or inaccurate inventory), the warehouse system needs to send the execution results back to the ERP system to close the business loop.

[0111] (1) Result encapsulation: The WMS / WCS system generates a JSON result package containing information such as task_id, final status (success / failed), actual completion time, operator, and reason for exception (if any).

[0112] (2) Reverse transfer: Repeat the reverse process of S201 and S202. On the workshop side, the result packet is encrypted and encoded to generate a result QR code. The QR code is then transmitted back to the intranet area using the above transfer method.

[0113] (3) Data injection: The receiving program on the intranet scans and parses the QR code of the result, verifies its JWT signature, and then automatically injects the result data into the ERP system to update the status of the original outbound task and complete the entire cross-security domain business loop.

[0114] It should be noted that this embodiment is not a simple data transmission, but rather a complete business automation system that, under physical isolation constraints, covers environmental pre-inspection, automated storage location operation, real-time equipment collaboration, and full-process log traceability. It demonstrates that the method of this invention can not only securely "ferry" data, but also drive and execute complex warehousing and production collaborative logic, making it an effective solution to the "information silo" problem in high-security industrial scenarios.

[0115] Example 3

[0116] This example focuses on real-time device control scenarios. In scenarios requiring real-time control (such as AGV scheduling), the system uses a Socket interface to achieve millisecond-level response. During operation, WCS sends real-time control commands to the AGV control system via Socket, and all real-time control commands carry JWT tokens for authentication. Furthermore, in practical applications, the AGV control system uses an IP whitelist mechanism to only accept commands from authorized servers, and real-time status data is continuously transmitted back to WCS via a long Socket connection.

[0117] The above solution is merely an illustration of a preferred example and is not limited thereto. When implementing this invention, appropriate substitutions and / or modifications can be made according to the user's needs.

[0118] Although embodiments of the present invention have been disclosed above, they are not limited to the applications listed in the specification and embodiments. It can be applied to various fields suitable for the present invention. Other modifications can be readily made by those skilled in the art. Therefore, without departing from the general concept defined by the claims and their equivalents, the present invention is not limited to the specific details and examples shown and described herein.

Claims

1. A method for collaborative and secure interaction in the storage of optical components for heterogeneous systems, characterized in that, include: Step 1: The protocol access gateway provides four standard interface methods: WebService, Socket, intermediate table, and QR code. This enables the resource planning system (ERP), manufacturing execution system (MES), warehouse management system (WMS), and warehouse control system (WCS) that implement optical component warehousing to select the corresponding access method according to their own technical characteristics and network security strategies. Step 2: The security authentication center uses a unified identity authentication mechanism based on the authentication token JWT for each access request, and combines it with the IP address blacklist and whitelist for access control to complete the token authentication and authorization for each system. Step 3: The task scheduling engine decomposes the received service access instructions into a sequence of tasks that can be executed by the device, and performs optimized scheduling. Step four: For systems that can directly establish a network connection, directly access the corresponding services. For the ERP and warehouse execution systems of optical component warehouses that cannot directly establish network connections due to physical isolation, the data security transmission module uses QR code encoding technology to realize the secure transmission of data in a transfer manner, thereby completing outbound or inbound tasks. The warehouse execution system includes: warehouse management system (WMS) and warehouse control system (WCS). The object of the shuttle-style secure transmission is a structured business instruction data packet that can be directly triggered for automated execution. The structured business instruction data packet adopts a four-layer structure of envelopes within envelopes, and the structure of the business instruction data packet is as follows: The L1 outer layer is the QR code image layer that enables physical ferrying; The L2 data presentation layer is a block of transmitted data that can be read directly from the raw byte stream by the barcode scanner. The L3 secure transport layer is a structured data packet that enables core security encapsulation. L4 core business layer, which is the plaintext of business instructions that can be directly driven to execute business operations; The processing flow for the outbound task includes: S1. The ERP resource planning system for optical component warehousing generates a structured outbound task order based on the production plan. S2. Based on the concept of shuttle-style secure transmission, the ERP resource planning system for optical component warehousing automatically performs a four-layer secure encapsulation process of envelope-within-encapsulation on the outbound task order, resulting in a QR code image displayed on the intranet terminal screen. S3. Authorized personnel use certified scanning devices to scan the QR code image on the screen on the intranet side and upload the QR code data; S4. The parser in the data security transmission module of the warehouse execution system is triggered. It reverse-engineers the read QR code data, decrypts and decompresses it, and then initiates a rapid verification to the security authentication center after extracting the JWT token in the package. This is to obtain a complete and structured outbound business instruction if the JWT token is valid and has not expired. S5, the warehouse execution system sends outbound business instructions to the task scheduling engine for intelligent collaborative control of various automated devices; S6. Each automated device receives the instruction and begins execution; S7. When all outbound tasks are completed or terminated midway due to an abnormality, the warehouse execution system will send the execution results back to the ERP system of the optical component warehouse to close the business loop.

2. The method for collaborative and secure interaction of optical component storage for heterogeneous systems as described in claim 1, characterized in that, The structured business instruction data package includes: JSON-formatted inbound orders, outbound orders, inventory instructions, transfer / allocation orders, return orders, scrap disposal orders, status query instructions, and execution result receipts.

3. The method for collaborative and secure interaction of optical component storage for heterogeneous systems as described in claim 1, characterized in that, The plaintext of the business instructions contains structured data unique to optical component warehousing. The structured data includes: work order ID, optical component type, parameter details, and priority. The parameter details refer to the material code, batch, quantity, and precise storage location corresponding to the optical element.

4. The method for collaborative and secure interaction of optical component storage for heterogeneous systems as described in claim 1, characterized in that, The structured data packet achieves the separation and binding of identity and business by defining version field, authentication token (JWT) field, and encrypted business data field.

5. A collaborative and secure data interaction system for optical component storage in heterogeneous systems, applied in the collaborative and secure data interaction method for optical component storage in heterogeneous systems as described in any one of claims 1-4, characterized in that, include: A multi-protocol access gateway used to adapt to different communication protocols and enable unified access for heterogeneous systems; A security authentication center responsible for identity authentication, token issuance and verification, and access control; A task scheduling engine responsible for business logic processing, task decomposition, and optimized scheduling; A data security transmission module for secure interaction across security domains, including a QR code generator and a parser.

Images