Physically isolated file ferry system, method, device, equipment and medium

Abstract

The embodiments of the present invention disclose a physically isolated file ferrying system, method, apparatus, equipment and medium. The physically isolated file ferrying system includes: a timing controller and a plurality of switch groups; the timing controller is used to determine the target switch group, and obtain or transmit the target file data through the target switch group; the target switch group is a connected switch group; each switch group is respectively connected to each data transmission interface, and each switch group is used to control the on and off of each data transmission interface. The solution of the embodiment of the present invention solves the problem that the ferrying medium is cross-used between the terminals of the two networks, which poses a risk to information security and confidentiality, avoids the risk of network attacks on the ferrying process of physically isolated file data, and provides help to enhance the advantages of informatization.

Description

Technical Field

[0001] Embodiments of the present invention relate to the technical field of physically isolated data ferrying, and in particular to a physically isolated file ferrying system, method, apparatus, device, and medium. Background Art

[0002] Physical isolation refers to the use of physical methods to isolate internal networks from external networks, thereby reducing the risk of intrusion or information leakage. Physical isolation is primarily used to address network security issues, particularly when connecting secure, private, and specialized networks to the internet. To prevent attacks from the internet and ensure the confidentiality, security, integrity, non-repudiation, and high availability of these high-security networks, physical isolation is almost universally required.

[0003] The file data ferrying and exchange between existing physically isolated networks adopts the direct ferrying method. The ferrying process is as follows: connect the ferrying medium to the terminal of one network, obtain the file data that needs to be ferryed in the terminal, disconnect the ferrying medium and disconnect the terminal of the network; connect the ferrying medium to the terminal of another network, transfer the file data in the ferrying medium to the terminal of the network, and disconnect the ferrying medium from the terminal of the network; perform the above two steps in reverse to realize the reverse file data ferrying.

[0004] However, in the existing file data ferry exchange between physically isolated networks, the same ferry medium is connected to the terminals of both networks, causing the ferry medium to be cross-used between the terminals of the two networks, posing a risk to information security and confidentiality. Summary of the Invention

[0005] The embodiments of the present invention provide a physically isolated file ferrying system, method, apparatus, equipment and medium to solve the problem of information security and confidentiality risks caused by cross-use of ferrying media between terminals of two networks, avoid the risk of network attacks during the ferrying process of physically isolated file data, and provide help for enhancing the advantages of informatization.

[0006] According to one aspect of an embodiment of the present invention, a physically isolated file ferry system is provided, comprising: a timing controller and a plurality of switch groups;

[0007] The timing controller is used to determine a target switch group and obtain or transmit target file data through the target switch group; wherein the target switch group is a connected switch group;

[0008] Each of the switch groups is connected to each of the data transmission interfaces, and each of the switch groups is used to control the on and off of each of the data transmission interfaces.

[0009] According to another aspect of an embodiment of the present invention, a physically isolated file ferrying method is provided, which is applied to the physically isolated file ferrying system described in any one of the embodiments of the present invention, comprising:

[0010] Determine a target switch group, and obtain or transmit target file data through the target switch group; wherein the target switch group is a connectivity switch group;

[0011] In response to the switching instruction of the target switch group, the target file data is transmitted or acquired through the switched target switch group.

[0012] According to another aspect of an embodiment of the present invention, a physically isolated data and physically isolated file ferrying device is provided, which is applied to the physically isolated file ferrying system described in any embodiment of the present invention, comprising:

[0013] a target switch group determining module, configured to determine a target switch group and obtain or transmit target file data through the target switch group; wherein the target switch group is a connectivity switch group;

[0014] The switching instruction response module is used to respond to the switching instruction of the target switch group and transmit or obtain the target file data through the switched target switch group.

[0015] According to another aspect of an embodiment of the present invention, an electronic device is provided, the electronic device comprising:

[0016] at least one processor; and

[0017] a memory communicatively connected to the at least one processor; wherein,

[0018] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the physically isolated file ferrying method described in any embodiment of the present invention.

[0019] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the physically isolated file ferrying method described in any embodiment of the present invention when executed.

[0020] The technical solution of the embodiment of the present invention involves a physically isolated file ferrying system, including: a timing controller and multiple switch groups; the timing controller is used to determine the target switch group and obtain or transmit target file data through the target switch group; wherein, the target switch group is a connected switch group; each of the switch groups is respectively connected to each data transmission interface, and each of the switch groups is used to control the on and off of each of the data transmission interfaces, which solves the problem of cross-use of ferrying media between terminals of two networks, posing a risk of information security and confidentiality, avoids the risk of network attacks in the ferrying process of physically isolated file data, and provides help for improving the advantages of informatization.

[0021] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present invention, nor is it intended to limit the scope of the embodiments of the present invention. Other features of the embodiments of the present invention will become easy to understand through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0023] Figure 1 This is a schematic structural diagram of a physically isolated file ferry system provided according to the first embodiment of the present invention;

[0024] Figure 2 This is a connection diagram of a physically isolated file ferry system provided according to the first embodiment of the present invention;

[0025] Figure 3 This is a flowchart of a physically isolated file ferrying method provided according to the second embodiment of the present invention;

[0026] Figure 4 This is a schematic structural diagram of a physically isolated file ferrying device provided according to a third embodiment of the present invention;

[0027] Figure 5 It is a structural diagram of an electronic device that implements the physically isolated file ferrying method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0028] In order to enable those skilled in the art to better understand the embodiments of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the embodiments of the present invention.

[0029] It should be noted that the terms "first", "second", etc. in the description and claims of the embodiments of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0030] Example 1

[0031] Figure 1 1 is a schematic diagram of a physically isolated file ferry system according to a first embodiment of the present invention. The physically isolated file ferry system in this embodiment can be applied to the case of ferrying file data in terminals of different networks. The terminals in this embodiment can be computers, servers, or industrial computers, etc. Specifically, refer to Figure 1 , the physically isolated file ferry system 100 includes a timing controller 110 and a plurality of switch groups 120; it should be noted that, Figure 1 The four switch groups are merely used as an example for illustration, which is not a limitation to the embodiments of the present invention.

[0032] In an optional implementation of this embodiment, the timing controller 110 can be used to determine the target switch group and obtain or transmit the target file data through the target switch group; wherein, the target switch group is a connected switch group; each of the switch groups 120 is respectively connected to each data transmission interface, and each of the switch groups is used to control the on and off of each of the data transmission interfaces.

[0033] The data transmission interface may be a USB interface, a TYPE-C interface or other data transmission interfaces, which are not limited in this embodiment.

[0034] Optionally, in this embodiment, after determining the connected target switch group, the timing controller 110 can further obtain or transmit target file data through the target switch group; illustratively, if the target switch group is connected to terminal A in network A through a data transmission interface, the target file data in terminal A can be obtained through the target switch group; if the target switch group is connected to a ferry medium (for example, a USB flash drive) through a data transmission interface, the target file data can be transmitted to the ferry medium through the target switch group; wherein the target file data is the data to be ferryed, and after the target file data is obtained, the target file data is stored in a storage area of a physically isolated file ferry system.

[0035] It should be noted that in this embodiment, there is only one target switch group. At the same time, in this embodiment, the target switch group is connected to the target data transmission interface, and the target data transmission interface is connected to the target terminal or the target ferry medium, so that the target file data can be obtained or transmitted through the target switch group; it is understandable that if the target data transmission interface is connected to the target terminal, the target file data in the target terminal can be obtained through the target switch group, and the target file data can be stored in a set area; if the target data transmission interface is connected to the ferry medium, the target file data stored in the set area can be transmitted to the ferry medium through the target switch group. In this embodiment, the ferry medium can be a storage medium such as a USB flash drive, a mobile hard disk, or an optical disk, which is not limited in this embodiment.

[0036] It should be noted that, in this embodiment, the setting of the timing controller 110 can be configured once through an independent interface, or alternatively, can be configured through a preset program. Meanwhile, during the configuration process, there will be no network connection related to file data ferrying.

[0037] exist Figure 1 The USB 2.0 port contains four switch groups (AB, BC, CD, and DE). Switch group AB connects the four pins of USB receptacle A to the four pins of USB receptacle B. Similarly, switch group BC connects USB receptacle B to USB receptacle C, CD connects C to D, and DE connects D to E.

[0038] In this embodiment, the on / off instructions of the switch group are issued by the timing controller. To ensure the independence of the timing controller, the switch group uses an electromagnetic relay to execute the on / off between the USB sockets, and the USB interface (data transmission interface) and the timing controller are in a signal isolation state.

[0039] In an optional implementation of this embodiment, the timing controller 110 is specifically used to receive a preset program and send opening and closing instructions to each of the switch groups according to the preset program to determine the on and off status of each of the switch groups; wherein, at the same time, at most one switch group is connected.

[0040] Among them, the preset program may include timing information of the closure or connection of each switch group, and may also include the duration of the closure of each switch group, which is not limited in this embodiment; illustratively, the preset program may include the first switch group being closed for 10 minutes and all other switch groups being disconnected; further, the second switch group being closed for 10 minutes and all other switch groups being disconnected; it can be understood that the closing time of each switch group is positively correlated with the size of the file data to be transmitted, and may also be positively correlated with the transmission rate of each data transmission interface, which is not limited in this embodiment.

[0041] Optionally, in this embodiment, after receiving the preset program, the timing controller may further parse the preset program, and thereby send opening and closing instructions to each switch group in the physically isolated file ferry system according to the parsing result of the preset program, thereby determining the on-off status of each switch group; wherein, the opening and closing instructions sent by the timing controller to each switch group may include 0 or 1, wherein 0 may represent closed and 1 may represent disconnected; an instruction sent by the timing controller may be "0 1 1 1", that is, except for the first switch group, the connectivity status of the remaining switch groups is disconnected.

[0042] In another optional implementation of this embodiment, the timing controller 110 can also be specifically used to determine the closing time of each of the switch groups according to the preset program; and switch each of the switch groups on and off in sequence according to the closing time.

[0043] It is understandable that the preset program can also include the closing time of each switch group. For example, the closing time of the first to fourth switch groups is ten minutes. Then, after the timing control detects that the first switch group has been closed for ten minutes, it can send an opening instruction to the first switch group and a closing instruction to the second switch group. This reciprocating operation can realize the cyclic opening and closing of each switch group.

[0044] In a specific implementation, file data needs to be input and output through a network terminal. In order to avoid media crossover, an intermediate terminal needs to be introduced. In an optional implementation of this embodiment, Figure 2 FIG. 1 is a connection diagram of a physically isolated file ferry system according to a first embodiment of the present invention. Figure 2 As shown, the three terminals can be connected to the data transmission interface A, the data transmission interface C and the data transmission interface E of the physically isolated file ferry system respectively.

[0045] In an optional implementation of this embodiment, the timing controller in the physically isolated file ferry system can control the on and off of four switch groups, namely AB, BC, CD, and DE, according to the following four timing cycles.

[0046] 1. Time series 1.

[0047] AB is connected, terminal A supplies power to USB drive B and connects data;

[0048] BC disconnected.

[0049] CD is connected, terminal C supplies power to USB drive D and connects data

[0050] DE disconnect

[0051] 2. Time series 2.

[0052] AB, BC, CD, and DE are all broken.

[0053] 3. Time series 3.

[0054] AB is disconnected;

[0055] BC is connected, terminal C supplies power to USB drive B and connects data;

[0056] CD disconnected;

[0057] DE is connected, and terminal E supplies power to USB drive D and connects data.

[0058] 4. Time series 4.

[0059] AB, BC, CD, and DE are all broken.

[0060] 5. Repeat the cycle.

[0061] Then, sequence 1, sequence 2, sequence 3, and sequence 4 are repeated.

[0062] The physically isolated file ferrying system involved in this embodiment may include: a timing controller and multiple switch groups; the timing controller is used to determine the target switch group and obtain or transmit the target file data through the target switch group; wherein, the target switch group is a connected switch group; each of the switch groups is respectively connected to each data transmission interface, and each of the switch groups is used to control the on and off of each of the data transmission interfaces, which solves the problem of cross-use of ferrying media between terminals of two networks, posing a risk of information security and confidentiality, avoids the risk of network attacks in the ferrying process of physically isolated file data, and provides help for improving the advantages of informatization.

[0063] Example 2

[0064] Figure 3This is a flowchart of a physically isolated file ferrying method provided according to Example 2 of the present invention. This embodiment is applicable to the situation where network isolated file data is ferryed through the physically isolated file ferry system involved in the above embodiments. The method can be executed by a physically isolated file ferry device. The physically isolated file ferry device can be implemented in the form of hardware and / or software. The physically isolated file ferry device can be configured in electronic devices such as computers, servers or tablets.

[0065] Specifically, refer to Figure 3 , the method specifically comprises the following steps:

[0066] Step 310: Determine a target switch group, and obtain or transmit target file data through the target switch group.

[0067] The target switch group is a connected switch group; it can be understood that, in this embodiment, there is only one target switch group.

[0068] In an optional implementation of this embodiment, the physically isolated file ferry system can determine the target switch group through a preset program written in the control interface. For example, the target switch group can be determined based on the connectivity status of each switch group at the current moment in the preset program. For example, if the connectivity status of the first switch group is closed, the first switch group can be determined as the target switch group.

[0069] In an optional implementation of this embodiment, before determining the target switch group, it may also include: receiving a preset program, and sending opening and closing instructions to each of the switch groups according to the preset program; exemplarily, in this embodiment, the preset program sent by the server can be received through the control interface of the physically isolated file ferry system, and the preset program can be parsed, so as to send opening and closing instructions to each switch group according to the parsing result.

[0070] Furthermore, determining the target switch group may include: determining the target switch group based on the switch-on / off instructions; wherein, at most one switch group is connected at a time. For example, if the switch-on / off instructions determine that the first switch group is connected and the other switch groups are all closed, then the first switch group may be determined as the target switch group.

[0071] In an optional implementation of this embodiment, after receiving a preset program, the physically isolated file ferry system may further include: determining the closing time of each of the switch groups according to the preset program; and switching each of the switch groups on and off in turn according to each of the closing time periods.

[0072] Optionally, in this embodiment, the acquisition and transmission cycle of file data can be realized according to the timing cycle of the physically isolated file ferry system; as described above, in Figure 2 In the connection relationship of the physically isolated file ferry system shown, cyclic control with different timings can be realized, that is, the regular plug-in of two ferry media and three terminals can be simulated to provide hardware support for the ferrying of file information.

[0073] Step 320: In response to the switching instruction of the target switch group, transmit or obtain the target file data through the switched target switch group.

[0074] In an optional implementation of this embodiment, after determining that the target switch group is switched, that is, after the closing state of the switch group is changed, the target file data can be further transmitted or obtained through the switched target switch group.

[0075] Optionally, in this embodiment, according to the time sequence involved in the above embodiment, the synchronization process of file data may be:

[0076] 1. Time series 1:

[0077] AB is connected, BC is disconnected, CD is connected, and DE is disconnected, triggering data synchronization between terminal A and USB drive B, and at the same time triggering data synchronization between terminal C and USB drive D.

[0078] 2. Time series 2:

[0079] AB, BC, CD, and DE are all disconnected, and there is no synchronization behavior.

[0080] 3. Time series 3:

[0081] AB is disconnected, BC is connected, CD is disconnected, and DE is connected, triggering data synchronization between USB drive B and terminal C, and at the same time triggering data synchronization between USB drive D and terminal E.

[0082] 4. Time series 4:

[0083] AB, BC, CD, and DE are all disconnected, and there is no synchronization behavior.

[0084] When the above four time sequences are cycled, the file information on terminal A and the file information on terminal E can be exchanged.

[0085] The solution of this embodiment determines a target switch group through a physically isolated file ferrying system, and obtains or transmits target file data through the target switch group; wherein, the target switch group is a connected switch group; in response to a switching instruction of the target switch group, the target file data is transmitted or obtained through the switched target switch group, thereby solving the problem of information security and confidentiality risks caused by cross-use of ferry media between terminals of two networks, avoiding the risk of network attacks on the ferrying process of physically isolated file data, and providing help to enhance the advantages of informatization.

[0086] It should be noted that, in this embodiment, to ensure information security, Terminal A, Terminal E, and Terminal C should install virus and malicious code protection software and enable the automatic file scanning function to automatically scan the ferry files for computer viruses and malicious codes. The update of the protection software signature database of the two network terminals is the responsibility of the management end of each network, and the signature database files are regularly ferryed to the intermediate machine ( Figure 2 In terminal C), after the automatic synchronization software of the intermediate machine recognizes the new feature library, it calls the update function of the protection software to update it.

[0087] The solution of the embodiment of the present invention is to use an intermediate machine ( Figure 2 The terminal C) converter adopts network-independent timing control technology, cooperates with automatic mobile storage media detection and file synchronization software, and at the same time improves the information security protection of the intermediate machine. The use of this invention has a relatively comprehensive security and confidentiality protection mechanism.

[0088] In the technical solutions of the embodiments of the present invention, the acquisition, storage and application of user personal information (such as facial information, voice information, etc.) are in compliance with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0089] Example 3

[0090] Figure 4 This is a schematic diagram of the structure of a physically isolated file ferrying device provided according to the third embodiment of the present invention. Figure 4 As shown, the device includes: a target switch group determination module 410 and a switching instruction response module 420.

[0091] The target switch group determining module 410 is configured to determine a target switch group and obtain or transmit target file data through the target switch group; wherein the target switch group is a connectivity switch group;

[0092] The switching instruction response module 420 is configured to respond to the switching instruction of the target switch group and transmit or obtain the target file data through the switched target switch group.

[0093] The solution of this embodiment determines the target switch group through the target switch group determination module, and obtains or transmits the target file data through the target switch group; wherein, the target switch group is a connected switch group; the switching instruction response module responds to the switching instruction of the target switch group, and transmits or obtains the target file data through the switched target switch group. This solves the problem of information security and confidentiality risks caused by the cross-use of ferry media between terminals of two networks, avoids the risk of network attacks on the ferrying process of physically isolated file data, and provides help to enhance the advantages of informatization.

[0094] In an optional implementation of this embodiment, the physically isolated file ferry device further includes: a receiving module for

[0095] receiving a preset program and sending an opening and closing instruction to each of the switch groups according to the preset program;

[0096] Accordingly, determining the target switch group includes:

[0097] The target switch group is determined by the opening and closing instructions; wherein, at the same time, at most one switch group is connected.

[0098] In an optional implementation of this embodiment, the physically isolated file ferry device further includes: a switching module for determining the closing time of each of the switch groups according to the preset program;

[0099] The switch groups are switched on and off in sequence according to the closing time lengths.

[0100] The physically isolated file ferrying device provided in the embodiment of the present invention can execute the physically isolated file ferrying method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0101] Example 4

[0102] Figure 5 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the embodiments of the present invention described and / or claimed herein.

[0103] like Figure 5As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., which is communicatively connected to the at least one processor 11. The memory stores a computer program that can be executed by the at least one processor. The processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 into the random access memory (RAM) 13. Various programs and data required for the operation of the electronic device 10 can also be stored in the RAM 13. The processor 11, ROM 12, and RAM 13 are connected to each other via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0104] Multiple components in the electronic device 10 are connected to the I / O interface 15, including an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a magnetic disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks.

[0105] The processor 11 can be any general-purpose and / or specialized processing component with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various specialized artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the physically isolated file ferrying method.

[0106] In some embodiments, the physically isolated file ferrying method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the physically isolated file ferrying method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the physically isolated file ferrying method in any other appropriate manner (e.g., by means of firmware).

[0107] Various embodiments of the systems and techniques described herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), system-on-chip systems (SOCs), programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include being implemented in one or more computer programs that are executable and / or interpreted on a programmable system that includes at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0108] The computer programs for implementing the methods of the embodiments of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer programs are executed by the processor, the functions / operations specified in the flowcharts and / or block diagrams are implemented. The computer programs may be executed entirely on the machine, partially on the machine, as a stand-alone software package, partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0109] In the context of an embodiment of the present invention, a computer-readable storage medium can be a tangible medium that can contain or store a computer program for use by an instruction execution system, device or equipment or used in combination with an instruction execution system, device or equipment. A computer-readable storage medium can include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium can be a machine-readable signal medium. A more specific example of a machine-readable storage medium can include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0110] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0111] The systems and techniques described herein can be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0112] A computing system may include clients and servers. The clients and servers are typically remote from each other and typically interact via a communication network. This client-server relationship arises through computer programs running on the respective computers, creating a client-server relationship. The server may be a cloud server, also known as a cloud computing server or cloud host. This server is a hosting product within the cloud computing service ecosystem that addresses the management difficulties and limited scalability of traditional physical hosting and VPS services.

[0113] It should be understood that the various forms of processes shown above can be used to reorder, add, or delete steps. For example, the steps described in the embodiments of the present invention can be executed in parallel, sequentially, or in a different order, as long as the desired results of the technical solutions of the embodiments of the present invention can be achieved. This is not limited herein.

[0114] The above specific embodiments do not limit the scope of protection of the embodiments of the present invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions may be made based on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the embodiments of the present invention should be included in the scope of protection of the embodiments of the present invention.

Claims

1. A physically isolated file ferry system, characterized in that: include: A timing controller and multiple switch groups; The timing controller is used to determine a target switch group and obtain or transmit target file data through the target switch group; wherein the target switch group is a connected switch group; Each of the switch groups is connected to each of the data transmission interfaces, and each of the switch groups is used to control the on and off of each of the data transmission interfaces; The target switch group is connected to a target data transmission interface, and the target data transmission interface is connected to a target terminal or a target ferry medium; Wherein, the physically isolated file ferry system further includes: at least one intermediate terminal; The intermediate terminal is located between any two target terminals and is connected to their corresponding data transmission interfaces. A ferry medium exists between the intermediate terminal and any target terminal, and the ferry medium is connected to its corresponding data transmission interface. The target terminal transfers target file data to the intermediate terminal via one ferry medium, and then transfers the target file data from the intermediate terminal to another target terminal via another ferry medium, thereby avoiding the cross-use of the same ferry medium when transferring files between any two target terminals. The intermediate terminal transfers the signature database files of all target terminals corresponding to it to the intermediate terminal according to a preset regular update cycle, and automatically and synchronously updates the signature database files to the intermediate terminal; The target terminal or the intermediate terminal performs a security scan check on the target file data according to their respective feature library files, and uses the target file data that passes the check for subsequent operations of acquiring or transmitting the target file data; wherein, the intermediate terminal adopts a timing control technology that is independent of the network.

2. The physically isolated file ferry system according to claim 1, characterized in that: The timing controller is specifically used for A preset program is received, and an opening and closing instruction is sent to each of the switch groups according to the preset program to determine the on and off status of each of the switch groups; wherein, at the same time, at most one switch group is connected.

3. The physically isolated file ferry system according to claim 2, characterized in that: The timing controller is also specifically used for Determining the closing time of each of the switch groups according to the preset program; The switch groups are switched on and off in sequence according to the closing time lengths.

4. A physically isolated file ferrying method, applied to the physically isolated file ferrying system according to any one of claims 1 to 3, characterized in that: include: Determine a target switch group, and obtain or transmit target file data through the target switch group; wherein the target switch group is a connectivity switch group; In response to a switching instruction of the target switch group, transmitting or acquiring target file data through the switched target switch group; The physically isolated file ferrying method further includes: Before acquiring or transmitting the target file data through the target switch group, the target terminal or the intermediate terminal performs a security scan check on the target file data according to their respective feature library files, and uses the target file data that passes the check for subsequent acquisition or transmission of the target file data; Before transmitting or acquiring the target file data through the switched target switch group, the target terminal or the intermediate terminal performs a security scan check on the target file data according to their respective signature database files, and uses the target file data that passes the check for subsequent transmission or acquisition of the target file data; In response to a preset periodic update instruction, each intermediate terminal will ferry the signature library files of all corresponding target terminals to the intermediate terminal, and automatically synchronize and update the signature library files to the intermediate terminal; wherein, the intermediate terminal adopts a timing control technology that is independent of the network.

5. The method according to claim 4, characterized in that Before determining the target switch group, also include: receiving a preset program and sending an opening and closing instruction to each of the switch groups according to the preset program; Accordingly, determining the target switch group includes: The target switch group is determined by the opening and closing instructions; wherein, at the same time, at most one switch group is connected.

6. The method according to claim 5, characterized in that After receiving the preset program, it also includes: Determining the closing time of each of the switch groups according to the preset program; The switch groups are switched on and off in sequence according to the closing time lengths.

7. A physically isolated file ferry device, applied to the physically isolated file ferry system according to any one of claims 1 to 3, characterized in that: include: a target switch group determining module, configured to determine a target switch group and obtain or transmit target file data through the target switch group; wherein the target switch group is a connectivity switch group; A switching instruction response module, configured to respond to a switching instruction of a target switch group and transmit or obtain target file data through the switched target switch group; Wherein, the physically isolated file ferrying device further includes: a first checking module, configured to, before acquiring or transmitting the target file data through the target switch group, enable the target terminal or the intermediate terminal to perform a security scan check on the target file data according to their respective signature database files, and use the target file data that has passed the check for subsequent acquisition or transmission of the target file data; A second checking module is configured to, before transmitting or acquiring the target file data through the switched target switch group, enable the target terminal or the intermediate terminal to perform a security scan check on the target file data according to their respective signature database files, and use the target file data that passes the check for subsequent transmission or acquisition of the target file data; The automatic update module is used to respond to the preset periodic update instructions, so that each intermediate terminal will ferry the feature library files of all corresponding target terminals to the intermediate terminal, and automatically synchronize and update each feature library file to the intermediate terminal; wherein, the intermediate terminal adopts a timing control technology that is independent of the network.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor to enable the at least one processor to execute the physically isolated file ferrying method according to any one of claims 4 to 6.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the physically isolated file ferrying method according to any one of claims 4 to 6 when executed.

Images