Data sharing methods, apparatus, devices and storage media

Abstract

This application relates to a data sharing method, apparatus, device, and storage medium. By setting up two dual unidirectional gateways between two isolated network domains, and configuring different unidirectional transmission and reception channels for each platform in the two isolated network domains, data transmission is completed independently through the unidirectional channels in the dual unidirectional gateways during data sharing. This solves the problem of low security in data sharing between isolated network domains in related technologies, and ensures the closedness and security of data sharing.

Description

Technical Field

[0001] This application relates to the field of isolated network domain data sharing, and in particular to a data sharing method, apparatus, device, and storage medium. Background Technology

[0002] With the development of internet technology, cybersecurity is receiving increasing attention from governments, organizations, and enterprises, with data security being particularly crucial. However, data sharing between the external and internal networks of hierarchical units, or different branches and departments within a company, often involves domain shielding. Connecting these networks with a single network cable violates the initial security settings of each domain and easily leads to data leaks, posing a serious data security threat. In practical applications, close data exchange is often present between two isolated domains, especially when using the same data analysis platform across different units and departments. Some confidential units and departments deploying big data analysis platforms need to cascade with other units and departments to share logs, alerts, and intelligence information.

[0003] In related technologies, firewall mechanisms are usually used to restrict access to IP addresses. However, firewall mechanisms cannot prevent attacks that bypass firewalls. With the advancement of technology, there are now many ways to bypass firewall mechanisms. Moreover, most firewalls operate at the network layer, have a low level of content inspection and control, and can only guarantee the security of the network layer boundary, not the internal network.

[0004] Currently, no effective solution has been proposed for the issue of low security in data sharing between isolated network domains in related technologies. Summary of the Invention

[0005] This application provides a data sharing method, apparatus, device, and storage medium to at least address the problem of low security in data sharing between isolated network domains in related technologies.

[0006] In a first aspect, embodiments of this application provide a data sharing method, including:

[0007] Configure a channel for the first platform in the first isolated network domain within the first network gateway, wherein the first network gateway includes a first unidirectional transmitting channel and a first unidirectional receiving channel;

[0008] The data from the first platform is sent to the second platform through the first one-way transmission channel. The second platform is located in the second isolation network domain. The second isolation network domain includes a second network gateway. The second network gateway includes a second one-way transmission channel and a second one-way reception channel. The first one-way transmission channel is connected to the second one-way reception channel. The first one-way reception channel is connected to the second one-way transmission channel.

[0009] Data from the second platform is received through the first one-way receiving channel.

[0010] In some embodiments, receiving data from the second platform through the first unidirectional receiving channel includes:

[0011] Data from the second platform is obtained sequentially through the second one-way sending channel and the first one-way receiving channel.

[0012] In some embodiments, configuring the channel of the first platform in the first isolation domain within the first gateway includes:

[0013] Configure the channel numbers of the transmitting and receiving ends of the channel in the first network gateway, wherein the transmitting end and the receiving end with the same channel number form a unidirectional channel, and the channel numbers of different unidirectional channels are different.

[0014] In some embodiments, the first platform includes a control page for displaying channel numbers from the first platform to multiple second platforms, and for controlling the addition, deletion, and editing of channels on the second platforms.

[0015] In some embodiments, after configuring the channel numbers of the transmitting and receiving ends of the channels in the first gateway, the method further includes:

[0016] Based on the channel numbers of the channels corresponding to the first platform and the second platform, the IP addresses of the first platform and the second platform are determined, wherein the IP addresses include the channel numbers of the one-way sending channel and the one-way receiving channel corresponding to the first platform and the second platform.

[0017] In some embodiments, after determining the IP address of the platform, the method further includes:

[0018] Store the IP address and channel number corresponding to multiple platforms;

[0019] The corresponding channel number is obtained through the IP address of the target platform, and data is transmitted through the channel corresponding to the obtained channel number.

[0020] In some embodiments, after configuring the channel of the first platform in the first isolation domain in the first gateway, the method further includes:

[0021] The local server of the first isolated network domain randomly generates a machine code and sends it to the first platform. The first platform encapsulates the machine code and the channel number corresponding to the first platform and the second platform into a data packet, and sends the data packet to the first network gateway for storage. The machine code is used to verify whether the data transmitted by the first platform is legal.

[0022] Secondly, embodiments of this application provide a data sharing device, including:

[0023] The configuration module is used to configure the channel of the first platform in the first isolation network domain in the first network gateway, wherein the first network gateway includes a first unidirectional transmission channel and a first unidirectional reception channel;

[0024] The sending module is used to send data from the first platform to the second platform through the first one-way sending channel. The second platform is located in a second isolated network domain. The second isolated network domain includes a second network gateway. The second network gateway includes a second one-way sending channel and a second one-way receiving channel. The first one-way sending channel is connected to the second one-way receiving channel, and the first one-way receiving channel is connected to the second one-way sending channel.

[0025] The receiving module is used to receive data from the second platform through the first unidirectional receiving channel.

[0026] Thirdly, embodiments of this application provide a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that the processor executes the computer program to implement the steps of the data sharing method as described in the first aspect above.

[0027] Fourthly, embodiments of this application provide a computer-readable storage medium having a computer program stored thereon, characterized in that, when executed by a processor, the program implements the steps of the data sharing method as described in the first aspect above.

[0028] Compared to related technologies, the data sharing method, apparatus, device, and storage medium provided in this application solve the problem of low security in data sharing between isolated network domains by setting up two dual unidirectional gateways between two isolated network domains and configuring different unidirectional sending and receiving channels for each platform in the two isolated network domains. During data sharing, data transmission is completed independently through the unidirectional channels in the dual unidirectional gateways, thus solving the problem of low security in data sharing between isolated network domains in related technologies.

[0029] Details of one or more embodiments of this application are set forth in the following drawings and description to make other features, objects and advantages of this application more readily apparent. Attached Figure Description

[0030] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0031] Figure 1This is a hardware structure block diagram of a terminal for a data sharing method according to an embodiment of this application;

[0032] Figure 2 This is a flowchart of a data sharing method according to an embodiment of this application;

[0033] Figure 3 This is a schematic diagram of data transmission in a data sharing method according to an embodiment of this application;

[0034] Figure 4 This is a schematic diagram of a data sharing method according to an embodiment of this application;

[0035] Figure 5 This is a structural block diagram of an apparatus for a data sharing method according to an embodiment of this application. Detailed Implementation

[0036] To make the objectives, technical solutions, and advantages of this application clearer, the application is described and illustrated below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application. All other embodiments obtained by those skilled in the art based on the embodiments provided in this application without inventive effort are within the scope of protection of this application.

[0037] Obviously, the accompanying drawings described below are merely some examples or embodiments of this application. Those skilled in the art can apply this application to other similar scenarios based on these drawings without any inventive effort. Furthermore, it is understood that although the efforts made in this development process may be complex and lengthy, for those skilled in the art related to the content disclosed in this application, any changes to design, manufacturing, or production based on the technical content disclosed in this application are merely conventional technical means and should not be construed as insufficient disclosure of the content of this application.

[0038] In this application, the reference to "embodiment" means that a specific feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment that is mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described in this application may be combined with other embodiments without conflict.

[0039] Unless otherwise defined, the technical or scientific terms used in this application shall have the ordinary meaning understood by one of ordinary skill in the art to which this application pertains. The terms “a,” “an,” “an,” “the,” and similar words used in this application do not indicate quantity limitation and may indicate singular or plural. The terms “comprising,” “including,” “having,” and any variations thereof used in this application are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that includes a series of steps or modules (units) is not limited to the listed steps or units, but may also include steps or units not listed, or may include other steps or units inherent to these processes, methods, products, or apparatuses. The term “multiple” used in this application refers to two or more.

[0040] The method embodiments provided in this example can be executed on a terminal, computer, or similar computing device. For example, it can run on a terminal. Figure 1 This is a hardware structure block diagram of the terminal for the data sharing method in this embodiment. For example... Figure 1 As shown, the terminal may include one or more ( Figure 1 Only one is shown in the diagram. A processor 102 and a memory 104 for storing data are also included. The processor 102 may be, but is not limited to, a microprocessor (MCU) or a programmable logic device (FPGA). The terminal may also include a transmission device 106 for communication functions and an input / output device 108. Those skilled in the art will understand that… Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the terminal described above. For example, the terminal may also include components that are larger than... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown are illustrated.

[0041] The memory 104 can be used to store computer programs, such as application software programs and modules, like the computer program corresponding to the data sharing method in this embodiment. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, thereby implementing the above-described method. The memory 104 may include high-speed random access memory and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0042] The transmission device 106 is used to receive or send data via a network. This network includes a wireless network provided by the terminal's communication provider. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 106 can be a Radio Frequency (RF) module used for wireless communication with the Internet.

[0043] This embodiment provides a data sharing method. Figure 2 This is a flowchart of the data sharing method in this embodiment, such as... Figure 2 As shown, the process includes the following steps:

[0044] Step S201: Configure the channel of the first platform in the first isolation network domain in the first network gateway, wherein the first network gateway includes a first one-way transmitting channel and a first one-way receiving channel.

[0045] The network gateway used is a dual unidirectional gateway, meaning data is transmitted bidirectionally within the gateway via unidirectional channels. Each platform holds one unidirectional sending channel to send data to a platform in another isolated network domain, and simultaneously holds one unidirectional receiving channel to receive data from a platform in another isolated network domain. It is understood that the first isolated network domain may contain more than one platform, each independently holding different unidirectional sending and receiving channels within the first network gateway. Specifically, the channels described in this application are not physically connected channels, but rather virtual logical channels.

[0046] For example, such as Figure 3 As shown, the big data analytics platform AP represents the first platform, and network domain A represents the first isolated network domain. The platform AP is connected to network gateway 1 via switch 1, and network gateway 1 and switch 1 are connected via two unidirectional channels.

[0047] Step S202: The data from the first platform is sent to the second platform through the first one-way transmission channel. The second platform is located in the second isolation network domain. The second isolation network domain includes a second network gateway. The second network gateway includes a second one-way transmission channel and a second one-way reception channel. The first one-way transmission channel is connected to the second one-way reception channel, and the first one-way reception channel is connected to the second one-way transmission channel.

[0048] Similar to the platforms in the first isolated network domain, the second isolated network domain may also include multiple platforms, each independently holding different one-way transmit and receive channels within the second gateway. One-way data transmission is possible between the one-way transmit channel of the first gateway and the one-way receive channel of the second gateway; similarly, one-way data transmission is also possible between the one-way transmit channel of the second gateway and the one-way receive channel of the second gateway. This embodiment uses two dual one-way gateways for data sharing. When one platform is attacked or threatened, the compromised entity can be quickly traced through the data transmission channels in the two gateways. Furthermore, the two gateways ensure that the two isolated network domains are not easily breached, guaranteeing the security of the isolated network domains and the data.

[0049] For example, such as Figure 3 As shown, the big data analytics platform BP represents the second platform, and network domain B represents the second isolated network domain. Platform BP is connected to network gateway 2 via switch 2, and network gateway 2 and switch 2 are connected via two unidirectional channels. During data sharing, all data sharing is based on interface requests. Each interface has a "Request" and a "Response." In this embodiment, when data is synchronized from platform AP to platform BP, the interface "Request" is transmitted via channel 1, and the interface "Response" is transmitted via channel 2. Since both channel 1 and channel 2 are unidirectional channels, the closed and secure nature of data transmission can be guaranteed.

[0050] Step S203: Receive data from the second platform through the first unidirectional receiving channel.

[0051] The data sent by the second platform is transmitted to the first platform through the first one-way receiving channel after passing through the second network gateway, so as to synchronize information such as logs, alarms, assets, and models.

[0052] Through the above steps S201 to S203, by setting up two dual unidirectional gateways between the two isolated network domains, and configuring different unidirectional sending and receiving channels for each platform in the two isolated network domains, data transmission is completed independently through the unidirectional channels in the dual unidirectional gateways during data sharing. This solves the problem of low security in data sharing between isolated network domains in related technologies and achieves the beneficial effect of ensuring the closedness and security of data sharing.

[0053] In some embodiments, receiving data from the second platform through the first one-way receiving channel includes: sequentially obtaining data from the second platform through the second one-way sending channel and the first one-way receiving channel.

[0054] Similar to the method used by the first platform to send or receive data, the second platform can also obtain data sent by the first platform through the first one-way sending channel and the second one-way receiving channel. The first platform may share data with multiple second platforms, and the second one-way sending channel and the second one-way receiving channel used each time data is sent or received will be different depending on the second platform transmitting the data.

[0055] In some embodiments, configuring the channel of the first platform in the first isolation domain within the first gateway includes:

[0056] Configure the channel numbers of the transmitting and receiving ends of the channel in the first network gateway. The transmitting and receiving ends with the same channel number form a unidirectional channel, and the channel numbers of different unidirectional channels are different.

[0057] Among them, such as Figure 4 As shown, each unidirectional channel includes a transmitter and a receiver. The channel number of the transmitter and receiver within each gateway is unique. A unidirectional channel can only be formed when the channel numbers of the transmitter and receiver correspond one-to-one. Each gateway has multiple unidirectional channels, but the number of channels will be limited for performance reasons.

[0058] In some embodiments, the first platform includes a control page for displaying channel numbers from the first platform to multiple second platforms, and for controlling the addition, deletion, and editing of channels on the second platforms.

[0059] Since the first platform may share data with multiple second platforms, a control page needs to be designed. This page primarily displays the gateway's channel numbers, as well as the channel numbers from the first platform to the other multiple second platforms, allowing users to easily view the channel information between platforms in each isolated network domain. In addition, the page also controls the addition, editing, and deletion of channels. For example, clicking the "Add" module on the page, entering the target platform's address and the corresponding channel, and saving will add an entry for the new channel, and the new channel information will be stored in the database.

[0060] In some embodiments, after configuring the channel numbers of the transmitting and receiving ends of the channels in the first network gateway, the method further includes: determining the IP addresses of the first platform and the second platform based on the channel numbers of the channels corresponding to the first platform and the second platform, wherein the IP addresses include the channel numbers of the one-way transmitting channels and one-way receiving channels corresponding to the first platform and the second platform.

[0061] Each platform has an IP address, which contains the platform's one-way transmit channel number and one-way receive channel number. For example, such as... Figure 3As shown, the address of the platform AP is 10.1.1.1, the address of the platform BP is 20.1.1.1, the platform AP to the platform BP uses channel number 1, and the platform BP to the platform AP uses channel number 2. The platform AP needs to store the IP information of the destination platform "20.1.1.1, using channel number 1". At this time, the platform's control page will add a new line of data information, including the addresses of the two platforms sharing data and the channel number used.

[0062] In some embodiments, after determining the IP address of the platform, the method further includes: storing IP addresses and channel numbers corresponding to multiple platforms; obtaining the corresponding channel number through the IP address of the target platform; and transmitting data through the channel corresponding to the obtained channel number.

[0063] Since the first platform may share data with multiple second platforms, it is necessary to determine the channel number of the channel to be used when transmitting data to the platform by using the IP address of each platform.

[0064] In some embodiments, after configuring the channel of the first platform in the first isolation network domain in the first network gateway, the method further includes: the local server of the first isolation network domain randomly generates a machine code and sends it to the first platform; the first platform encapsulates the machine code and the channel number corresponding to the first platform and the second platform into a data packet and sends the data packet to the first network gateway for storage; wherein the machine code is used to verify whether the data transmitted by the first platform is legal.

[0065] After configuring the channel, the system also needs to perform data sharing tests. First, it determines whether data transmission to the destination IP needs to go through a gateway. If the destination IP belongs to another isolated network domain, it needs to go through the gateway. The interface request and machine code are encapsulated into a data packet that passes through the gateway. The machine code is the hash value sent by the local service platform of the first isolated network domain, which is used to verify whether the data packet sent by the first platform is valid. After the first gateway authorizes the hash value, it performs a configuration synchronization operation, synchronizing the sender's IP and the corresponding gateway channel number to the first platform.

[0066] This embodiment also provides a data sharing device for implementing the above embodiments and preferred embodiments; details already described will not be repeated. As used below, the terms "module," "unit," "subunit," etc., can refer to a combination of software and / or hardware that performs a predetermined function. Although the device described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated.

[0067] like Figure 5 As shown, the data sharing device in this embodiment includes:

[0068] Configuration module 51 is used to configure the channel of the first platform in the first isolation network domain in the first network gateway, wherein the first network gateway includes a first unidirectional transmission channel and a first unidirectional reception channel;

[0069] The sending module 52 is used to send data from the first platform to the second platform through the first one-way sending channel. The second platform is located in the second isolation network domain. The second isolation network domain includes a second network gateway. The second network gateway includes a second one-way sending channel and a second one-way receiving channel. The first one-way sending channel is connected to the second one-way receiving channel, and the first one-way receiving channel is connected to the second one-way sending channel.

[0070] The receiving module 53 is used to receive data from the second platform through the first unidirectional receiving channel.

[0071] In one embodiment, the sending module 52 includes an acquisition unit, configured to acquire data from the second platform sequentially through a second one-way sending channel and a first one-way receiving channel.

[0072] In one embodiment, the configuration module 51 includes a configuration unit for configuring the channel numbers of the transmitting end and the receiving end of the channel in the first network gateway, wherein the transmitting end and the receiving end with the same channel number form a unidirectional channel, and the channel numbers of different unidirectional channels are different.

[0073] Optionally, the first platform includes a control page for displaying channel numbers from the first platform to multiple second platforms, and for controlling the addition, deletion, and editing of channels on the second platforms.

[0074] In one embodiment, the data sharing device further includes: a determining module, configured to determine the IP addresses of the first platform and the second platform based on the channel numbers of the channels corresponding to the first platform and the second platform, wherein the IP addresses include the channel numbers of the one-way sending channel and the one-way receiving channel corresponding to the first platform and the second platform.

[0075] In one embodiment, the data sharing device further includes: a storage module for storing IP addresses and channel numbers corresponding to multiple platforms; and an acquisition module for acquiring the corresponding channel number through the IP address of the target platform and transmitting data through the channel corresponding to the acquired channel number.

[0076] In one embodiment, the data sharing device further includes: a generation module, used by a local server in the first isolated network domain to randomly generate a machine code and send it to the first platform; and a sealing module, used by the first platform to encapsulate the machine code and the channel number corresponding to the first platform and the second platform into a data packet, and send the data packet to the first network gateway for storage, wherein the machine code is used to verify whether the data transmitted by the first platform is legal.

[0077] It should be noted that the above modules can be functional modules or program modules, and can be implemented through software or hardware. For modules implemented through hardware, the above modules can reside in the same processor; or the above modules can be located in different processors in any combination.

[0078] In one embodiment, a computer device is provided, including a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the steps of the data sharing method provided in the above embodiments.

[0079] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps in the data sharing methods provided in the above embodiments.

[0080] In one embodiment, when a computer program is executed by a processor, it implements the steps in the following data sharing method:

[0081] Configure the channel of the first platform in the first isolated network domain in the first network gateway, wherein the first network gateway includes a first unidirectional transmission channel and a first unidirectional reception channel;

[0082] Data from the first platform is sent to the second platform through the first one-way transmission channel. The second platform is located in the second isolation network domain, which includes a second network gateway. The second network gateway includes a second one-way transmission channel and a second one-way reception channel. The first one-way transmission channel is connected to the second one-way reception channel, and the first one-way reception channel is connected to the second one-way transmission channel.

[0083] Data from the second platform is received through the first one-way receiving channel.

[0084] In one embodiment, when a computer program is executed by a processor, it implements the steps in the following data sharing method:

[0085] Data from the second platform is obtained sequentially through the second one-way sending channel and the first one-way receiving channel.

[0086] In one embodiment, when a computer program is executed by a processor, it implements the steps in the following data sharing method:

[0087] In one embodiment, when a computer program is executed by a processor, it implements the steps in the following data sharing method:

[0088] Configure the channel numbers of the transmitting and receiving ends of the channel in the first network gateway. The transmitting and receiving ends with the same channel number form a unidirectional channel, and the channel numbers of different unidirectional channels are different.

[0089] Optionally, the first platform includes a control page for displaying channel numbers from the first platform to multiple second platforms, and for controlling the addition, deletion, and editing of channels on the second platforms.

[0090] In one embodiment, when a computer program is executed by a processor, it implements the steps in the following data sharing method:

[0091] Based on the channel numbers of the corresponding channels of the first platform and the second platform, determine the IP addresses of the first platform and the second platform. The IP addresses include the channel numbers of the one-way sending channel and the one-way receiving channel corresponding to the first platform and the second platform.

[0092] In one embodiment, when a computer program is executed by a processor, it implements the steps in the following data sharing method:

[0093] Stores IP addresses and channel numbers corresponding to multiple platforms;

[0094] Obtain the corresponding channel number through the IP address of the target platform, and transmit data through the channel corresponding to the obtained channel number.

[0095] In one embodiment, when a computer program is executed by a processor, it implements the steps in the following data sharing method:

[0096] The local server in the first isolated network domain randomly generates a machine code and sends it to the first platform. The first platform encapsulates the machine code and the corresponding channel number of the first platform and the second platform into a data packet, and sends the data packet to the first network gateway for storage. The machine code is used to verify whether the data transmitted by the first platform is legal.

[0097] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. This computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), RAMbus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and RAMbus dynamic RAM (RDRAM), etc.

[0098] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0099] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the invention patent. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this patent application should be determined by the appended claims.

Claims

1. A data sharing method, characterized in that, include: Configure a channel for the first platform in the first isolated network domain within the first network gateway, wherein the first network gateway includes a first unidirectional transmitting channel and a first unidirectional receiving channel; The data from the first platform is sent to the second platform through the first one-way transmission channel. The second platform is located in the second isolation network domain. The second isolation network domain includes a second network gateway. The second network gateway includes a second one-way transmission channel and a second one-way reception channel. The first one-way transmission channel is connected to the second one-way reception channel. The first one-way reception channel is connected to the second one-way transmission channel. Data from the second platform is received through the first one-way receiving channel; After configuring the channel of the first platform in the first isolation network domain in the first gateway, the method further includes: Based on the channel numbers of the channels corresponding to the first platform and the second platform, determine the IP addresses of the first platform and the second platform, wherein the IP addresses include the channel numbers of the one-way sending channel and the one-way receiving channel corresponding to the first platform and the second platform; The first isolated network domain includes multiple first platforms, and each first platform independently holds different one-way transmission channels and one-way reception channels in the first network gateway; The second isolation network domain includes multiple second platforms, each of which independently holds different one-way transmission channels and one-way reception channels in the second network gateway.

2. The data sharing method according to claim 1, characterized in that, Receiving data from the second platform through the first one-way receiving channel includes: Data from the second platform is obtained sequentially through the second one-way sending channel and the first one-way receiving channel.

3. The data sharing method according to claim 1, characterized in that, The configuration of the first platform in the first isolation domain within the first network gateway includes: Configure the channel numbers of the transmitting and receiving ends of the channel in the first network gateway, wherein the transmitting end and the receiving end with the same channel number form a unidirectional channel, and the channel numbers of different unidirectional channels are different.

4. The data sharing method according to claim 3, characterized in that, The first platform includes a control page, which is used to display the channel numbers of the first platform to multiple second platforms, and to control the addition, deletion and editing of channels on the second platforms.

5. The data sharing method according to claim 3, characterized in that, After determining the IP address of the platform, the method further includes: Store the IP address and channel number corresponding to multiple platforms; The corresponding channel number is obtained through the IP address of the target platform, and data is transmitted through the channel corresponding to the obtained channel number.

6. The data sharing method according to claim 1, characterized in that, After configuring the channel of the first platform in the first isolation domain within the first gateway, the method further includes: The local server of the first isolated network domain randomly generates a machine code and sends it to the first platform. The first platform encapsulates the machine code and the channel number corresponding to the first platform and the second platform into a data packet, and sends the data packet to the first network gateway for storage. The machine code is used to verify whether the data transmitted by the first platform is legal.

7. A data sharing device, characterized in that, include: The configuration module is used to configure the channel of the first platform in the first isolation network domain in the first network gateway, wherein the first network gateway includes a first unidirectional transmission channel and a first unidirectional reception channel; The sending module is used to send data from the first platform to the second platform through the first one-way sending channel. The second platform is located in a second isolated network domain. The second isolated network domain includes a second network gateway. The second network gateway includes a second one-way sending channel and a second one-way receiving channel. The first one-way sending channel is connected to the second one-way receiving channel, and the first one-way receiving channel is connected to the second one-way sending channel. The receiving module is used to receive data from the second platform through the first unidirectional receiving channel; The configuration module is further configured to determine the IP addresses of the first platform and the second platform based on the channel numbers of the channels corresponding to the first platform and the second platform, wherein the IP addresses include the channel numbers of the one-way sending channel and the one-way receiving channel corresponding to the first platform and the second platform; The first isolated network domain includes multiple first platforms, and each first platform independently holds different one-way transmission channels and one-way reception channels in the first network gateway; The second isolation network domain includes multiple second platforms, each of which independently holds different one-way transmission channels and one-way reception channels in the second network gateway.

8. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the data sharing method as described in any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the steps of the data sharing method as described in any one of claims 1 to 6.

Images