File transfer method and device, computer device, storage medium and program product

Abstract

The application relates to a file transfer method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: receiving a target file sent by a first host and a receiving account of the target file, and performing a security processing operation on the target file to obtain a processing result, so that the target file is sent to a second host when the processing result is completed. The first host and the second host logged in by the receiving account belong to different local area network work groups. The method can realize cross-domain transmission of files between different local area network work groups, and improve the security of file transmission by performing a security processing operation on the target file.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular to a file transfer method and device, computer equipment, storage medium and computer program product. BACKGROUND

[0002] With the development of Internet technology, information security has become the focus of attention. Enterprises usually form a local area network to meet the needs of internal data sharing while preventing data leakage.

[0003] Generally, the local area network formed by the enterprise is divided into multiple workgroups, and different workgroups are isolated. In the traditional technology, USB (Universal Serial Bus) or FTP (File Transfer Protocol) is used to realize file transmission between different workgroups.

[0004] However, the above file transmission method has poor security. SUMMARY

[0005] Therefore, it is necessary to provide a file transfer method, device, computer equipment, computer readable storage medium and computer program product to solve the above technical problems.

[0006] In a first aspect, the present application provides a file transfer method, comprising:

[0007] receiving a target file and a receiving account of the target file sent by a first host; wherein the first host and the second host logged in by the receiving account belong to different local area network workgroups;

[0008] performing a security processing operation on the target file to obtain a processing result;

[0009] if the processing result is complete, sending the target file to the second host.

[0010] In one embodiment, the above method further comprises:

[0011] obtaining local area network formation information; wherein the local area network formation information includes information of multiple hosts in the same local area network and the local area network workgroup corresponding to each host and the associated account information;

[0012] generating an account list of each host according to the local area network formation information; wherein the account list includes the account information associated with the hosts in different local area network workgroups;

[0013] sending the account list of each host to each host.

[0014] In one of the embodiments, the receiving account of the target file is determined by the first host based on an account list of the first host.

[0015] In one of the embodiments, the security processing operation on the target file includes:

[0016] The virus detection operation, the watermark adding operation, the sensitive information detection operation, and the third-party auditing operation on the target file.

[0017] In one of the embodiments, the third-party auditing operation on the target file includes:

[0018] sending the target file to a third host and receiving a processing result sent by the third host; or

[0019] obtaining sensitive information in the target file;

[0020] sending the sensitive information to the third host and receiving a processing result sent by the third host.

[0021] In one of the embodiments, the obtaining of the sensitive information in the target file includes:

[0022] identifying text information in the target file and obtaining a target keyword matching the sensitive keyword in the text information;

[0023] obtaining a text image including the target keyword in the target file, and taking the text image as the sensitive information.

[0024] In one of the embodiments, the method further includes:

[0025] in the case that the processing result is incomplete, sending an auditing notification of auditing failure and the sensitive information to the first host.

[0026] In a second aspect, the application further provides a file transfer device, including:

[0027] a file receiving module, configured to receive a target file and a receiving account of the target file sent by a first host; wherein the first host and a second host logged in by the receiving account belong to different local area network workgroups;

[0028] a security processing module, configured to perform a security processing operation on the target file to obtain a processing result;

[0029] a file transfer module, configured to send the target file to the second host in the case that the processing result is complete.

[0030] In a third aspect, the present application provides a computer device. The computer device comprises a memory and a processor. The memory stores a computer program. The processor implements the following steps when executing the computer program:

[0031] receiving a target file and a receiving account of the target file sent by a first host; wherein the first host and a second host logged in by the receiving account belong to different local area network workgroups;

[0032] performing a security processing operation on the target file to obtain a processing result;

[0033] in a case where the processing result is complete, sending the target file to the second host.

[0034] In a fourth aspect, the present application provides a computer readable storage medium. The computer readable storage medium stores a computer program. The computer program is executed by a processor to implement the following steps:

[0035] receiving a target file and a receiving account of the target file sent by a first host; wherein the first host and a second host logged in by the receiving account belong to different local area network workgroups;

[0036] performing a security processing operation on the target file to obtain a processing result;

[0037] in a case where the processing result is complete, sending the target file to the second host.

[0038] In a fifth aspect, the present application provides a computer program product. The computer program product comprises a computer program. The computer program is executed by a processor to implement the following steps:

[0039] receiving a target file and a receiving account of the target file sent by a first host; wherein the first host and a second host logged in by the receiving account belong to different local area network workgroups;

[0040] performing a security processing operation on the target file to obtain a processing result;

[0041] in a case where the processing result is complete, sending the target file to the second host.

[0042] The file transfer method, device, computer device, storage medium and computer program product in the above file transfer method, device, computer device, storage medium and computer program product receive a target file and a receiving account of the target file sent by a first host, and perform a security processing operation on the target file to obtain a processing result, so that the target file is sent to a second host when the processing result is complete. The first host and the second host logged in by the receiving account belong to different local area network workgroups. The above method realizes cross-domain transmission of files between different local area network workgroups, and improves the security of file transmission by performing a security processing operation on the target file. BRIEF DESCRIPTION OF DRAWINGS

[0043] Figure 1 An application environment diagram of the file transfer method in an embodiment;

[0044] Figure 2 A flowchart of the file transfer method in an embodiment;

[0045] Figure 3 A flowchart of the file transfer method in another embodiment;

[0046] Figure 4 A flowchart of the third-party auditing operation on the target file in an embodiment;

[0047] Figure 5 A flowchart of determining sensitive information in an embodiment;

[0048] Figure 6 An application environment diagram of the file transfer method in another embodiment;

[0049] Figure 7 A flowchart of the file transfer method in another embodiment;

[0050] Figure 8 A deployment environment structure diagram of the file transfer server in an embodiment;

[0051] Figure 9 A structure block diagram of the file transfer device in an embodiment;

[0052] Figure 10 An internal structure diagram of the computer device in an embodiment. DETAILED DESCRIPTION

[0053] In order to make the purpose, technical scheme and advantages of the present application clearer, further detailed description of the present application will be given below in combination with the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and do not limit the present application.

[0054] The file transfer method provided by the embodiments of the present application can be applied to, for example Figure 1The application environment is shown. Among them, the first host 102 and the second host 106 communicate with the relay server 104 through the network. The data storage system can store the data required to be processed by the relay server 104. The data storage system can be integrated on the relay server 104, or placed on the cloud or other network servers. The relay server 104 receives the target file sent by the first host 102 and the receiving account of the target file. Among them, the first host 102 and the second host 106 logged in by the receiving account belong to different local area network workgroups. The relay server 104 performs security processing operation on the received target file to obtain the processing result, and sends the target file to the second host 106 when the processing result is complete. Among them, the first host 102 and the second host 106 can be but not limited to various personal computers, notebook computers, smart phones, tablet computers and portable wearable devices. The relay server 104 can be realized by an independent server or a server cluster composed of multiple servers.

[0055] In one embodiment, as shown in Figure 2 , a file relay method is provided, which is applied to the relay server in Figure 1 for example, including the following steps:

[0056] S210, receiving the target file sent by the first host and the receiving account of the target file.

[0057] Among them, the first host and the second host logged in by the receiving account belong to different local area network workgroups.

[0058] Optionally, the same local area network workgroup includes hosts for performing the same function and sharing the same data. The functions performed by the hosts in different local area network workgroups can not be the same, and the shared data can also not be the same. For example, different local area network workgroups can include business groups (or business domains) and office groups (or office domains). The hosts in the business group are used for daily office work and can access shared office data. The hosts in the business group are used for financial management and can access shared financial data.

[0059] Optionally, the host is a terminal device, such as a mobile phone, a computer, etc. The first host is a terminal device that sends the target file, and the second host is a terminal device that receives the target file. The receiving account is any one of the accounts pre-associated with the second host.

[0060] Specifically, in the process of transferring the target file from the first host to the second host, i.e., realizing the file cross-domain transmission, the user needs to log in the first host through the account associated with the first host in advance, which is used as the sending account. In response to the sending operation of the user on the first host for the target file, the first host sends the target file and the receiving account of the target file input by the user to the transfer server. The transfer server accordingly receives the target file and the receiving account of the target file sent by the first host. For example, the user logs in the first host A in the business group through the account a and performs the sending operation of sending the target file to the account b on the first host A, and the first host A sends the target file and the account b to the transfer server in response to the sending operation. The account b is used to log in the second host B in the office group.

[0061] Among them, the accounts associated with the first host can be used to log in the first host, and the accounts associated with the second host can be used to log in the second host.

[0062] S220, performing a security processing operation on the target file to obtain a processing result.

[0063] Optionally, the security processing operation includes at least one of a file security processing operation and an information security processing operation. The file security processing operation refers to the security processing on the file itself, such as virus killing operation or watermark adding operation, etc. The information security processing operation refers to the security processing on the information included in the file, such as sensitive information detection operation or third-party audit operation, etc. After the transfer server performs the above security processing operation on the received target file, the processing result is obtained accordingly.

[0064] S230, sending the target file to the second host when the processing result is complete.

[0065] Optionally, when the obtained processing result is complete, the transfer server sends the target file to the second host logged in by the receiving account, and also sends the processing result notification of the completion of the security processing operation to the first host logged in by the sending account.

[0066] Optionally, when the obtained processing result is incomplete, the transfer server sends the processing result notification of the incomplete security processing operation to the first host logged in by the sending account.

[0067] In the embodiment, the transfer server receives the target file and the receiving account of the target file sent by the first host, and performs a security processing operation on the target file to obtain a processing result. If the processing result is complete, the transfer server sends the target file to the second host. The first host and the second host logged in by the receiving account belong to different local area network workgroups. The above method realizes cross-domain transmission of files between different local area network workgroups, and improves the security of file transmission by performing a security processing operation on the target file.

[0068] In one embodiment, to improve the probability of successful file transfer, the above method further includes: Figure 3 as shown in the figure.

[0069] S310, obtain local area network group information.

[0070] The local area network group information includes information of a plurality of hosts in the same local area network, and local area network workgroups corresponding to each host and associated account information. The information of the host can be an identifier of the host, which is used to uniquely determine the host. Alternatively, the information of the host can be an IP address of the host, and can also be a number of the host. The account information associated with the host is the account information that can be used to log in to the host.

[0071] Alternatively, the local area network group information can be pre-stored on the transfer server, and can also be obtained through each host in communication with the transfer server. For example, hosts 1-10 communicate with the transfer server, and the transfer server obtains the network environment of each of the hosts 1-10 and the associated account information, i.e., the above hosts 1-10 belong to the same local area network, and hosts 1-3 correspond to the business group, hosts 4-10 correspond to the office group, the account information associated with the hosts in the business group includes account 1-account 5, and the account information associated with the hosts in the office group includes account 6-account 20.

[0072] S320, generate an account list of each host according to the local area network group information.

[0073] The account list includes account information associated with hosts in different local area network workgroups.

[0074] S330, send the account list of the host to each host.

[0075] Specifically, the relay server determines the local area network workgroup corresponding to each host and the associated account information according to the acquired local area network configuration information, and for each host, aggregates the account information associated with the hosts in different local area network workgroups of the host, generates an account list corresponding to the host, and sends the account list to the host. For example, continuing the above example, the relay server determines that host 1 to host 3 correspond to the business group according to the acquired local area network configuration information, and the associated account information includes account 1 to account 5, and host 4 to host 10 correspond to the office group, and the associated account information includes account 6 to account 20. The relay server generates an account list including account 1 to account 5 for host 1 to host 3, and sends the account list including account 1 to account 5 to host 1 to host 3 respectively; generates an account list including account 6 to account 20 for host 4 to host 10, and sends the account list including account 6 to account 20 to host 4 to host 10 respectively.

[0076] The receiving account of the target file is determined by the first host based on the account list of the first host.

[0077] For the host side, the account list corresponding to the host sent by the relay server is received and displayed to allow the user to select and determine the receiving account of the target file.

[0078] Alternatively, the first host receives the account list corresponding to the first host sent by the relay server, and directly displays the account list, or in response to the user's sending operation of the target file on the first host, a window including the above account list is popped up to allow the user to select, and the account information selected by the user is determined as the receiving account of the target file.

[0079] The account list corresponding to the first host includes the account information associated with the hosts in different local area network workgroups of the first host.

[0080] In the embodiment, the transfer server generates an account list of each host by the obtained local area network construction information, and sends the account list corresponding to each host to each host, so that the first host determines the receiving account of the target file based on the account list of the first host; wherein the local area network construction information comprises information of a plurality of hosts in the same local area network and the local area network work group corresponding to each host and the associated account information, and the account list of each host comprises the account information associated with the host in different local area network work groups. In the above method, the transfer server can provide the first host with the account list of the first host for user selection to determine the receiving account of the target file. Since the account list of the first host comprises the account information associated with the host in different local area network work groups with the first host, the determined receiving account of the target file can be successfully logged in on the second host in different local area network work groups with the first host, avoiding the file transfer failure caused by the user's self-input receiving account which cannot be successfully logged in on the second host, and further improving the probability of successful file transfer.

[0081] In one embodiment, to improve the security of file transfer, the security processing operation on the target file in S220 comprises:

[0082] At least one of virus detection operation, watermark adding operation, sensitive information detection operation and third-party audit operation is performed on the target file.

[0083] Wherein, the virus detection operation is used to ensure the security of the file itself, the watermark adding operation is used to protect the ownership of the file, and the sensitive information detection operation and the third-party audit operation are used to prevent information leakage.

[0084] Optionally, the virus detection operation comprises the following contents:

[0085] Calling the virus detection software to perform virus scanning on the target file;

[0086] In the case where it is determined that the target file has virus, performing disinfection service on the target file.

[0087] Optionally, the antivirus software in the transfer server can acquire the target file feature information, which can include file version and file hash value, and determine whether there is a file record of the file feature information in the virus library. If there is, the transfer server can determine that the target file is a virus file, and can simultaneously send an alarm reminder information to the first host to remind the user that the target file is a virus file, and trigger the antivirus service to perform virus detection on the target file. Correspondingly, the first host end receives the above-mentioned alarm reminder information, and locks the target file to limit the user's use operation on the target file, and only provides the user with a delete operation. If there is not, the transfer server can determine that the target file is not a virus file, and can simultaneously send a safety reminder information to the first host to remind the user that the target file is not a virus file. Correspondingly, the first host end receives the above-mentioned safety reminder information.

[0088] If the target file is not a virus file or is successfully disinfected, the transfer server determines that the processing result corresponding to the virus detection operation is completed; if the target file is not successfully disinfected, the transfer server determines that the processing result corresponding to the virus detection operation is not completed.

[0089] Optionally, the watermark adding operation includes the following contents:

[0090] Adding watermark information to the text page of the target file.

[0091] Optionally, the watermark information can be a preset text unrelated to the file uploading party, such as "internal material, prohibit public" and the like, and can also be a characteristic text related to the file uploading party, such as "enterprise name + account information + date" and the like.

[0092] Optionally, the transfer server can also adjust the specific content, size, number, color, position coordinates and the like of the watermark information in response to the user's watermark adjustment operation.

[0093] If the target file successfully adds watermark information, the transfer server determines that the processing result corresponding to the watermark adding operation is completed; if the target file does not successfully add watermark information, the transfer server determines that the processing result corresponding to the watermark adding operation is not completed. For example, if the target file is an encrypted file, the transfer server cannot successfully add watermark information to the target file, and the processing result corresponding to the watermark adding operation is not completed.

[0094] Optionally, the sensitive information detection operation includes the following contents:

[0095] Identifying the text information in the target file, and comparing the text information with the preset keywords in the keyword library to obtain a comparison result.

[0096] Specifically, the transit server can invoke a data leakage prevention (DLP) system to scan and identify the target file, and compare the text information with preset keywords in a keyword library to obtain a comparison result.

[0097] If the comparison result is that the text information in the target file includes the preset keyword, it is determined that the processing result corresponding to the sensitive information detection operation is not passed; if the comparison result is that the text information in the target file does not include the preset keyword, it is determined that the processing result corresponding to the sensitive information detection operation is passed.

[0098] Optionally, the transit server can further obtain text snapshot information in the target file, and perform a third-party audit operation based on the text snapshot information.

[0099] Optionally, in the case where the comparison result is that the text information in the target file includes the preset keyword, the text snapshot information can be image information including the preset keyword in the target file, such as an image of a paragraph in which the preset keyword is located in the target file; in the case where the comparison result is that the text information in the target file does not include the preset keyword, the text snapshot information can be image information at a preset position in the target file, such as an image of the first 30% of the content in the target file.

[0100] Optionally, the text snapshot information can be in an image format, such as JPEG, TIFF, RAW, etc., or in a portable document format, such as PDF.

[0101] Optionally, the third-party audit operation includes the following contents:

[0102] The target file is sent to a third host, and a processing result sent by the third host is received.

[0103] Optionally, the transit server sends the target file to a third host for account login for auditing, so that a user logs in the third host through an account for auditing to manually audit the received target file, the third host receives a processing result input by the user, and sends the processing result to the transit server.

[0104] If the target file passes the manual audit, the third host receives an audit result input by an auditor that the audit is passed, and sends the audit result to the transit server, based on which the transit server can determine that the processing result corresponding to the third-party audit operation is completed; if the target file does not pass the manual audit, the third host receives an audit result input by the auditor that the audit is not passed, and sends the audit result to the transit server, based on which the transit server can determine that the processing result corresponding to the third-party audit operation is not completed.

[0105] In this embodiment, the relay server implements the security processing operation on the target file by at least one of the virus killing operation, the watermark adding operation, the sensitive information detecting operation and the third-party auditing operation, so as to improve the security of the file relay.

[0106] In one embodiment, in order to improve the processing efficiency of the third-party auditing operation, as shown in Figure 4 The third-party auditing operation on the target file includes the following steps.

[0107] S410, acquiring sensitive information in the target file.

[0108] Optionally, the sensitive information can be a preset keyword included in the target file, and can also be a paragraph including the preset keyword.

[0109] Optionally, the relay server identifies the text information in the target file, and compares the text information with the preset keyword in the keyword library, to determine that the preset keyword included in the text information is the sensitive information, or to determine that the paragraph including the preset keyword in the text information is the sensitive information.

[0110] S420, sending the sensitive information to a third host, and receiving a processing result sent by the third host.

[0111] The third host is a host associated with the auditing account, i.e., a host that the auditing account can log in.

[0112] Optionally, the third host can be a host in the same local area network workgroup as the first host, or a host in a different local area network workgroup as the first host, which is not limited here.

[0113] Optionally, the relay server sends the acquired sensitive information to the third host for the auditing account to log in, so that the user logs in the third host through the auditing account, manually audits the received sensitive information, the third host receives the processing result input by the user, and sends the processing result to the relay server. When the sensitive information passes the manual audit, the corresponding processing result is completed; when the sensitive information does not pass the manual audit, the corresponding processing result is not completed.

[0114] Optionally, in the case where the processing result is not completed, the relay server sends a processing result notification that the security processing operation is not completed to the first host, and sends the sensitive information to the first host. The first host displays the processing result notification and the above-mentioned sensitive information, so that the user can clearly know the reason for the incomplete, and modify the target file accordingly.

[0115] In the embodiment, the transit server acquires sensitive information in the target file, sends the sensitive information to the third host, and receives a processing result sent by the third host to implement third-party auditing of the target file. Through the above method, the third-party auditing operation does not need to audit the entire target file, but only needs to audit part of the information in the target file, i.e., the sensitive information, thereby greatly reducing the workload of auditing and avoiding excessive leakage of information.

[0116] In one embodiment, the restoration degree of the acquired sensitive information in the target file is improved, and the accuracy of the third-party auditing operation for auditing the target file is correspondingly improved, as shown in the following table. Figure 5 As shown in the above S410, the above S410 includes:

[0117] S510, identifying text information in the target file, and acquiring a target keyword in the text information that matches a sensitive keyword.

[0118] Optionally, the transit server identifies text information in the target file, and compares the text information with a preset keyword in a keyword library to determine that the preset keyword included in the text information is the target keyword. For example, the preset keyword in the keyword library includes accountability, system, etc. If the transit server identifies that the text information obtained from the target file includes "accountability", it can be determined that "accountability" is the target keyword.

[0119] S520, acquiring a text image including the target keyword in the target file, and taking the text image as sensitive information.

[0120] Optionally, after the transit server determines the target keyword in the target file, it intercepts a text image including the target keyword in the target text as the above sensitive information.

[0121] Optionally, the interception range of the text image can be a paragraph where the target keyword is located, or can be a preset number of lines extending upward and downward with the target keyword as the middle line.

[0122] Optionally, the transit server can also perform different display processing on the target keyword and the remaining text in the sensitive information. For example, the target keyword is highlighted, bolded, inclined, underlined, and backgrounded, or the remaining text is blurred.

[0123] In the embodiment, the transfer server identifies the text information in the target file, obtains the target keyword matched with the sensitive keyword in the text information, and obtains the text image including the target keyword in the target file, so as to take the text image as the sensitive information, improve the restoration degree of the obtained sensitive information in the target file, and facilitate the third party audit operation to audit based on the actual text environment of the sensitive information in the target file, thereby improving the accuracy of the target file audit by the third party audit operation.

[0124] In one embodiment, the file transfer method provided by the embodiment of the application can also be applied to an application environment as shown in Figure 6 . The first host 601 communicates with the first transfer server 603 through a network, the second host 602 communicates with the second transfer server 604 through a network, and the first transfer server 603 and the second transfer server 604 communicate through a network. The first transfer server 603 receives the target file and the receiving account of the target file sent by the first host 601. The first host 102 and the second host 106 logged in by the receiving account belong to different local area network workgroups. The first transfer server 603 performs a security processing operation on the received target file to obtain a processing result, and sends the target file to the second transfer server 604 when the processing result is complete, and the second transfer server 604 forwards the target file to the second host 602. The first host 601 and the second host 602 can be, but are not limited to, various personal computers, notebook computers, smart phones, tablet computers, and portable wearable devices. The first transfer server 603 and the second transfer server 604 can be implemented by an independent server or a server cluster composed of multiple servers.

[0125] In one embodiment, as shown in Figure 7 , a file transfer method is provided. Taking the first transfer server in Figure 6 as an example, the method includes the following steps:

[0126] S710, obtain local area network group information; the local area network group information includes information of a plurality of hosts in the same local area network and account information associated with each host and a local area network workgroup corresponding to the host.

[0127] S720, generate an account list of each host according to the local area network group information; the account list includes account information associated with hosts in different local area network workgroups.

[0128] S730, send the account list of the host to each host.

[0129] S740, receiving the target file and a receiving account of the target file sent by the first host; wherein the first host and the second host logged in by the receiving account belong to different local area network workgroups; and the receiving account of the target file is determined by the first host based on an account list of the first host.

[0130] S750, identifying text information in the target file, and obtaining a target keyword in the text information that matches a sensitive keyword.

[0131] S760, obtaining a text image including the target keyword in the target file, and taking the text image as sensitive information.

[0132] S770, sending the sensitive information to a third host, and receiving a processing result sent by the third host.

[0133] S780, in a case where the processing result is complete, sending the target file to the second transfer server, and forwarding the target file to the second host by the second transfer server.

[0134] It should be noted that the file transfer method implemented by the first transfer server can refer to the file transfer method implemented by the transfer server in the foregoing embodiments, which will not be described here.

[0135] Please refer to Figure 8 Taking the business domain and the office domain divided by the local area network as an example, the deployment environment structure of the transfer server is described as follows:

[0136] The business terminal in the business domain and the office terminal in the office domain belong to the traditional data center (DC), and the ecological cloud is the above-mentioned transfer server. The office domain, the business domain and the cloud platform are isolated by a firewall. A user accessing the file transfer service on the cloud needs to be authenticated by a unified identity authentication and access management system, and can access the file transfer service only after logging in with an authenticated account.

[0137] From Figure 8 As can be seen from the right, the entire architecture is a dual-active deployment architecture, mainly involving container services of the software-defined data center (SDDC zone) business domain and the office domain, object storage, Redis service, RabbitMQ message queue and MySql database service in the bare metal zone. It mainly involves a container module, and the file transfer service is deployed in a set of containers in the office domain and the business domain, and the object storage in the bare metal zone is also deployed in a set in the office domain and the business domain. The office domain and the business domain share the same database, and the database is deployed in the business domain. The office domain connects to the database and other resources by opening the firewall in the business domain bare metal zone. The container services share data through the database.

[0138] From the above overall architecture, it can be seen that the file transfer service first logs in through the office domain or business domain terminal browser, and then sends the instructions sent by the browser through the F5 hardware load to balance the work tasks and distribute them to multiple operation units for execution, reducing the pressure on servers, network transmission and applications.

[0139] Secondly, the request is forwarded to a specific service through software load balancing SLB (Server Load Balancing). Load balancing refers to distributing user access traffic to multiple servers on the back end through a load balancer according to a certain forwarding strategy, and the servers on the back end can independently respond and process requests, thereby achieving the effect of dispersing the load. Load balancing technology improves the service capacity of the system and enhances the availability of the application. Figure 8 As can be seen from the above, the deployed container service is single, but as the number of users increases, multiple container services need to be added, which further demonstrates the role of load balancing SLB.

[0140] Then, SLB sends specific requests to the container. The container is the file transfer service. Service containerization can significantly reduce the number of virtual machines to start and manage, and smaller computing overhead means lower overall cost. Based on the consistency and standardization of the environment provided by the container, the container image can be version-controlled using tools such as Git, which can also version-control the entire application running environment, and can quickly roll back in case of failure. Compared with the previous virtual machine image, the container is faster in compression and backup, and the image starts as quickly as starting a normal process. Therefore, the file transfer service is containerized and the container is deployed in a K8S-based cluster.

[0141] Finally, as can be seen from the above Figure 8 , the resources accessed by the container are in the bare metal area. The container service needs to access the object storage service to push the file stream. Access the MySql database service to perform metadata operations. Access Redis for session data caching. Access RabbitMQ message queue for consumption.

[0142] It should be understood that although the steps in the flowcharts involved in the embodiments described above are shown in sequence according to the arrows, the steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified herein, the execution of the steps is not strictly limited in sequence, and the steps can be executed in other orders. Moreover, at least some of the steps in the flowcharts involved in the embodiments described above can include multiple steps or multiple stages, which are not necessarily executed at the same time but can be executed at different times, and the execution of the steps or stages is not necessarily sequential but can be executed alternately or alternately with at least some of the other steps or steps or stages in other steps.

[0143] Based on the same inventive concept, the embodiments of the present application also provide a file transfer device for implementing the above-mentioned file transfer method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, so the specific limitations in one or more file transfer device embodiments provided below can refer to the limitations of the file transfer method described above, which will not be repeated here.

[0144] In one embodiment, as shown in Figure 9 a file transfer device is provided, comprising: a file receiving module 901, a security processing module 902 and a file transfer module 903, wherein:

[0145] The file receiving module 901 is configured to receive a target file sent by a first host and a receiving account of the target file; wherein the first host and the second host logged in by the receiving account belong to different local area network workgroups;

[0146] The security processing module 902 is configured to perform a security processing operation on the target file to obtain a processing result;

[0147] The file transfer module 903 is configured to send the target file to the second host if the processing result is complete.

[0148] In one embodiment, the device further comprises a local component module.

[0149] The local component module is configured to obtain local area network component information, wherein the local area network component information includes information of a plurality of hosts in the same local area network and account information associated with each host and the local area network workgroup corresponding to each host; generate an account list of each host according to the local area network component information; wherein the account list includes account information associated with hosts in different local area network workgroups; and send the account list of each host to each host.

[0150] In one of the embodiments, the receiving account of the target file is determined by the first host based on an account list of the first host.

[0151] In one of the embodiments, the security processing module 902 is specifically configured to:

[0152] perform at least one of the following operations on the target file: virus detection, watermark adding, sensitive information detection, and third-party review.

[0153] In one of the embodiments, the security processing module 902 is specifically configured to:

[0154] send the target file to a third host and receive a processing result sent by the third host, or obtain sensitive information in the target file, send the sensitive information to the third host, and receive a processing result sent by the third host.

[0155] In one of the embodiments, the security processing module 902 is specifically configured to:

[0156] identify text information in the target file, obtain a target keyword in the text information that matches a sensitive keyword, obtain a text image including the target keyword in the target file, and take the text image as the sensitive information.

[0157] In one of the embodiments, the security processing module 902 is further configured to:

[0158] In a case where the processing result is incomplete, send a review notification of failed review and the sensitive information to the first host.

[0159] The above modules in the file transfer device can be all or partially implemented by software, hardware, and combinations thereof. The above modules can be embedded in or independent of a processor in a computer device in hardware form, or stored in a memory in a computer device in software form, so as to be called and executed by a processor to perform operations corresponding to the above modules.

[0160] In one of the embodiments, a computer device is provided, which can be a server, and an internal structure diagram of the computer device can be as shown in Figure 10As shown in the figure. The computer device includes a processor, a memory and a network interface connected by a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The database of the computer device is used to store data related to file transfer. The network interface of the computer device is used to communicate with external terminals through network connection. The computer program is executed by the processor to implement a file transfer method.

[0161] Those skilled in the art can understand that, Figure 10 The structure shown in the figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different component arrangement.

[0162] In one embodiment, a computer device is provided, including a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the following steps:

[0163] Receiving a target file sent by a first host and a receiving account of the target file; wherein the first host and a second host logged in by the receiving account belong to different local area network workgroups; performing a security processing operation on the target file to obtain a processing result; and sending the target file to the second host in the case that the processing result is complete.

[0164] In one of the embodiments, the processor executing the computer program further implements the following steps:

[0165] Obtaining local area network construction information; wherein the local area network construction information includes information of a plurality of hosts in the same local area network and account information associated with each host and the local area network workgroup corresponding to each host; generating an account list of each host according to the local area network construction information; wherein the account list includes account information associated with hosts in different local area network workgroups; and sending the account list of each host to each host.

[0166] In one of the embodiments, the receiving account of the target file is determined by the first host based on the account list of the first host.

[0167] In one of the embodiments, the processor executing the computer program further implements the following steps:

[0168] Performing at least one of a virus killing operation, a watermark adding operation, a sensitive information detection operation and a third party review operation on the target file.

[0169] In one of the embodiments, the processor, when executing the computer program, also implements the following steps:

[0170] sending the target file to the third host and receiving a processing result sent by the third host, or obtaining sensitive information in the target file, sending the sensitive information to the third host, and receiving a processing result sent by the third host.

[0171] In one of the embodiments, the processor, when executing the computer program, also implements the following steps:

[0172] identifying text information in the target file, obtaining a target keyword in the text information that matches a sensitive keyword, and obtaining a text image including the target keyword in the target file, and taking the text image as the sensitive information.

[0173] In one of the embodiments, the processor, when executing the computer program, also implements the following steps:

[0174] in a case where the processing result is incomplete, sending an audit notification of audit failure and the sensitive information to the first host.

[0175] In one of the embodiments, a computer readable storage medium is provided, and the computer readable storage medium stores a computer program. The computer program, when executed by a processor, implements the following steps:

[0176] receiving a target file and a receiving account of the target file sent by a first host, wherein the first host and a second host logged in by the receiving account belong to different local area network workgroups; performing a security processing operation on the target file to obtain a processing result; and in a case where the processing result is complete, sending the target file to the second host.

[0177] In one of the embodiments, the computer program, when executed by the processor, also implements the following steps:

[0178] obtaining local area network construction information, wherein the local area network construction information includes information of a plurality of hosts in the same local area network and account information associated with each host and a local area network workgroup corresponding to each host; generating an account list of each host according to the local area network construction information, wherein the account list includes account information associated with hosts in different local area network workgroups; and sending the account list of each host to each host.

[0179] In one of the embodiments, the receiving account of the target file is determined by the first host based on the account list of the first host.

[0180] In one of the embodiments, the computer program, when executed by the processor, also implements the following steps:

[0181] At least one of a virus scanning operation, a watermark adding operation, a sensitive information detection operation, and a third-party auditing operation is performed on the target file.

[0182] In one of the embodiments, the computer program, when executed by the processor, further implements the following steps:

[0183] The target file is sent to a third host, and a processing result sent by the third host is received; or, sensitive information in the target file is obtained; the sensitive information is sent to the third host, and a processing result sent by the third host is received.

[0184] In one of the embodiments, the computer program, when executed by the processor, further implements the following steps:

[0185] Text information in the target file is identified, and a target keyword matching the sensitive keyword in the text information is obtained; a text image including the target keyword is obtained from the target file, and the text image is taken as the sensitive information.

[0186] In one of the embodiments, the computer program, when executed by the processor, further implements the following steps:

[0187] In a case where the processing result is incomplete, an auditing notification of auditing failure and the sensitive information are sent to the first host.

[0188] In one of the embodiments, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0189] The target file and a receiving account of the target file sent by the first host are received; wherein the first host and the second host logged in by the receiving account belong to different local area network workgroups; a security processing operation is performed on the target file, and a processing result is obtained; in a case where the processing result is complete, the target file is sent to the second host.

[0190] In one of the embodiments, the computer program, when executed by the processor, further implements the following steps:

[0191] Local area network construction information is obtained; wherein the local area network construction information comprises information of a plurality of hosts in the same local area network and account information associated with each host and a local area network workgroup corresponding to each host; an account list of each host is generated according to the local area network construction information; wherein the account list comprises account information associated with hosts in different local area network workgroups; the account list of the host is sent to each host.

[0192] In one of the embodiments, the receiving account of the target file is determined by the first host based on the account list of the first host.

[0193] In one of the embodiments, the computer program, when executed by the processor, further implements the following steps:

[0194] At least one of the virus scanning operation, the watermark adding operation, the sensitive information detection operation and the third-party auditing operation is performed on the target file.

[0195] In one of the embodiments, the computer program, when executed by the processor, further implements the following steps:

[0196] The target file is sent to the third host, and the processing result sent by the third host is received; or, the sensitive information in the target file is obtained; the sensitive information is sent to the third host, and the processing result sent by the third host is received.

[0197] In one of the embodiments, the computer program, when executed by the processor, further implements the following steps:

[0198] The text information in the target file is identified, and the target keyword matching the sensitive keyword in the text information is obtained; the text image including the target keyword is obtained from the target file, and the text image is taken as the sensitive information.

[0199] In one of the embodiments, the computer program, when executed by the processor, further implements the following steps:

[0200] In the case that the processing result is not completed, the auditing notification of unpassing auditing and the sensitive information are sent to the first host.

[0201] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when the computer program is executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (Read-Only Memory, ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetoresistive random access memory (Magnetoresistive Random Access Memory, MRAM), ferroelectric memory (Ferroelectric Random Access Memory, FRAM), phase change memory (Phase Change Memory, PCM), graphene memory, etc. Volatile memory can include random access memory (Random Access Memory, RAM) or external cache memory, etc. As an illustration but not limitation, RAM can be in various forms, such as static random access memory (Static Random Access Memory, SRAM) or dynamic random access memory (Dynamic Random Access Memory, DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., without being limited thereto.

[0202] Any combination of the technical features of the above embodiments can be made. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described, however, as long as the combination of the technical features does not exist contradictory, it should be considered as the scope of the present application.

[0203] The above embodiments only express several implementation manners of the present application, and the description is more specific and detailed, but it should not be understood as a limitation on the scope of the patent of the present application. It should be pointed out that for ordinary skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are within the scope of protection of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A file transfer method characterized by, The method comprises: receiving a target file and a receiving account of the target file sent by a first host; wherein the first host and the second host logged in by the receiving account belong to different local area network workgroups; performing a security processing operation on the target file to obtain a processing result; in a case where the processing result is completed, sending the target file to the second host; the security processing operation on the target file to obtain a processing result comprises: obtaining a file version and a file hash value of the target file, judging whether there is a file record of the target file in a virus library based on the file version and the file hash value, determining that the target file is a virus file if there is a file record of the target file in the virus library, triggering an antivirus service to perform virus detection on the target file, determining that the processing result is not completed if the virus detection on the target file is not successful, and determining that the processing result is completed if the virus detection on the target file is successful or there is no file record of the target file in the virus library; and / or, scanning the target file through a data leakage prevention system, comparing the identified text information with preset keywords in a keyword library to obtain a comparison result, determining that the processing result corresponding to a sensitive information detection operation is not passed if the comparison result cannot be obtained or the comparison result is that the text information in the target file includes the preset keywords, and otherwise, determining that the processing result is passed; and / or, obtaining text snapshot information from the target file through a transfer server, the text snapshot information being image information including the preset keywords in the target file in a case where the comparison result is that the text information in the target file includes the preset keywords, the text snapshot information being image information at a preset position of the target file in a case where the comparison result is that the text information in the target file does not include the preset keywords, performing a third-party audit operation based on the text snapshot information, and determining that the processing result of the third-party audit operation is completed if the third-party audit operation is passed, and otherwise, determining that the processing result of the third-party audit operation is not completed.

2. The method of claim 1, wherein, The method further comprises: obtaining local area network construction information; wherein the local area network construction information comprises information of a plurality of hosts in the same local area network and account information associated with each host and a local area network workgroup corresponding to each host; generating an account list of each host according to the local area network construction information; wherein the account list comprises account information associated with hosts in different local area network workgroups from the host; sending the account list of the host to each host.

3. The method of claim 2, wherein, The receiving account of the target file is determined by the first host based on an account list of the first host.

4. The method of claim 1, wherein, the security processing operation on the target file comprises: performing a watermark adding operation on the target file.

5. The method of claim 4, wherein, the third-party audit operation on the target file comprises: sending the target file to a third host and receiving a processing result sent by the third host; or obtaining sensitive information in the target file; Send the sensitive information to a third host, and receive a processing result sent by the third host.

6. The method of claim 5, wherein, The sensitive information in the target file is obtained by: Identifying the text information in the target file, and obtaining a target keyword in the text information that matches a sensitive keyword; In the target file, a text image including the target keyword is obtained, and the text image is taken as the sensitive information.

7. The method of claim 5, wherein, The method further comprises: In the case where the processing result is not completed, an audit notification of audit failure and the sensitive information are sent to the first host.

8. A file transfer apparatus characterized by comprising: The device comprises: A file receiving module is configured to receive a target file sent by a first host and a receiving account of the target file; wherein the first host and a second host logged in by the receiving account belong to different local area network workgroups; A security processing module is configured to perform a security processing operation on the target file to obtain a processing result; the security processing operation on the target file to obtain the processing result comprises: obtaining a file version and a file hash value of the target file, judging whether there is a file record of the target file in a virus library based on the file version and the file hash value, determining that the target file is a virus file if there is a file record of the target file in the virus library, triggering an antivirus service to perform virus detection on the target file, determining that the processing result is not completed if the virus detection on the target file is not successful, and determining that the processing result is completed if the virus detection on the target file is successful or there is no file record of the target file in the virus library; And / or, the target file is scanned by a data leakage prevention system, the identified text information is compared with a preset keyword in a keyword library to obtain a comparison result; if the comparison result cannot be obtained or the comparison result is that the text information in the target file includes the preset keyword, it is determined that the processing result corresponding to the sensitive information detection operation is not passed; otherwise, the processing result is passed; And / or, text snapshot information is obtained from the target file by a transfer server; in the case where the comparison result is that the text information in the target file includes the preset keyword, the text snapshot information is image information including the preset keyword in the target file; in the case where the comparison result is that the text information in the target file does not include the preset keyword, the text snapshot information is image information at a preset position of the target file; third-party audit operation is performed based on the text snapshot information; if it is passed, it is determined that the processing result of the third-party audit operation is completed; if it is not passed, it is determined that the processing result of the third-party audit operation is not completed; A file transfer module is configured to send the target file to the second host in the case where the processing result is completed. 9.A computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the computer device is configured to perform the method according to any one of claims 1-8 when the computer program is executed by the processor. The processor executes the computer program to implement the steps of the method of any one of claims 1 to 7.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method of any one of claims 1 to 7.

11. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method of any one of claims 1 to 7.

Images