Digital campus service system based on one-way cross-network data transmission

Abstract

The application relates to a digital campus service system based on one-way cross-network data transmission, which comprises a user front-end display layer, a back-end interface layer, a one-way cross-network data transmission layer, a digital campus service system server, a data desensitization layer and an information push service layer, guarantees the security of core business data, can also handle core business and security transactions online, meanwhile, through the optical disc large-capacity one-way transmission module and the two-dimensional code small-capacity one-way data transmission module of the one-way cross-network data transmission layer, full-coverage transmission of large-capacity files, medium-capacity files and small-capacity files is realized, the transmission efficiency is greatly improved while the security is guaranteed, the file transmission is more convenient, and data loss, inability to retrieve and the like in the transmission process are avoided.

Description

Technical Field

[0001] This application relates to the field of digital service system development, and in particular to a digital campus service system based on one-way cross-network data transmission. Background Technology

[0002] In recent years, with the development of information technology, the number of people using network communication has been increasing. Compared with traditional offline services, online digital systems offer greater convenience. Many universities have established digital campus service systems to provide convenience for faculty, staff, and students, allowing them to schedule appointments online for services. However, online service systems often face security challenges. For some administrative units and enterprises, connecting their internal networks to the external network (Internet) is strictly prohibited. Therefore, online service systems typically only handle some common transactions online, while core business and security-related matters must be handled offline. Based on this, one-way data transmission technology, also known as one-way network technology or "data diode" technology, was developed. This network security technology ensures that data flows upwards from low-security networks while preventing high-security information from flowing into low-security networks. This one-way data transmission process can resist network attacks and prevent the leakage of sensitive information.

[0003] However, existing one-way data transmission technologies suffer from low transmission efficiency, especially when transmitting medium-sized files, which can easily lead to data loss and irretrievable data loss during transmission. Summary of the Invention

[0004] Therefore, it is necessary to provide a digital campus service system based on one-way cross-network data transmission to address the aforementioned technical issues and improve the efficiency and quality of one-way data transmission.

[0005] To achieve the above objectives, the embodiments of the present invention adopt the following technical solutions:

[0006] On one hand, embodiments of the present invention provide a digital campus service system based on one-way cross-network data transmission, including a user front-end display layer, a back-end interface layer, a one-way cross-network data transmission layer, a digital campus service system server, a data anonymization layer, and an information push service layer;

[0007] The user front-end presentation layer communicates with the back-end interface layer to display the functions of the digital campus service system to the user.

[0008] The backend interface layer is used to transmit data from the user's frontend presentation layer to the one-way cross-network data transmission layer;

[0009] The one-way cross-network data transmission layer includes a preprocessing module, a file size evaluation module, a large-capacity one-way optical disc transmission module, and a small-capacity QR code one-way data transmission module. The preprocessing module is used to preprocess the files to be transmitted. The file size evaluation module is used to divide the preprocessed files to be transmitted into large-capacity, medium-capacity, and small-capacity files. The large-capacity one-way optical disc transmission module is used to transmit large-capacity files. The QR code one-way data transmission module is used to transmit medium-capacity and small-capacity files, and includes a file splitting component, a QR code conversion component, an encoding component, a decoding component, and a transmission component. The file splitting component is used to split medium-capacity files into several small-capacity sub-files. The QR code conversion component is used to convert small-capacity files and small-capacity sub-files into QR codes. The encoding component is used to encode the QR codes converted from small-capacity sub-files. The decoding component is used to decode the encoded QR codes and reassemble them to restore medium-capacity files. The transmission component is used to transmit the QR codes.

[0010] The digital campus service system server is used to receive file information from the one-way cross-network data transmission layer, process the file information to obtain ordinary information and core information, and send the core information to the data desensitization layer and the ordinary information to the information push service layer; the file information includes large files, medium files, and small files;

[0011] The data anonymization layer is used to anonymize core information to obtain anonymized information;

[0012] The information push service layer is used to push ordinary information and de-identified information to users.

[0013] In one embodiment, the user front-end presentation layer displays the following functions to the user: ordinary user functions, platform management functions, and gesture diagrams; the back-end interface layer includes: ordinary user function interfaces, platform management function interfaces, and gesture diagram interfaces.

[0014] In one embodiment, the one-way cross-network data transmission layer supports file and database synchronization, and supports API interfaces and visually isolated channels.

[0015] In one embodiment, the platform management function interface and the gesture diagram interface are a set of configurable management menus. The management menus are used to enable administrators to perform user management, role management, identity management, unit management, authorization management, and display directory management functions.

[0016] In one embodiment, the preprocessing module of the one-way cross-network data transmission layer performs the following preprocessing steps:

[0017] IP verification: Verifies user identity;

[0018] Signature verification: Calculates the signature of the file to be transmitted and verifies data integrity, authenticating the data source;

[0019] File type verification: Verify the type of the file to be transmitted. File types are divided into whitelist and blacklist. If the file type is on the whitelist, the verification will pass; if the file type is on the blacklist, the data transmission will be terminated.

[0020] Rate limiting: Allocating transmission traffic;

[0021] Sensitive word verification: Matches for prohibited keywords; if a match is found, data transmission is terminated.

[0022] Rule validation: Match regular expressions using a blacklist pattern; if a match is found, data transmission is terminated.

[0023] Data encryption: Encrypting the data in the file to be transmitted;

[0024] Data approval: This is performed by the audit administrator, who checks the data in the files to be transferred.

[0025] In one embodiment, the high-capacity one-way optical disc transmission module includes cross-network data sending software, cross-network optical disc transfer machine, cross-network data receiving software, and configuration management software, wherein the configuration management software is used to simulate manual disc burning actions.

[0026] In one embodiment, a file splitting component is used to split a medium-sized file into several smaller sub-files, an encoding component is used to encode the QR codes converted from the smaller sub-files, and a decoding component is used to decode the encoded QR codes and reassemble them to restore the medium-sized file, including:

[0027] The file splitting component sets the maximum transmission capacity of a single QR code to Max, and splits a data file of size M into... A small sub-file is used as the data packet to be transmitted.

[0028] The encoding component uses identity information and a public key to encrypt the data packets to be transmitted, and adds a data identifier and a data packet sequence number before the data packets to be transmitted, and adds the next data packet sequence number after the data packets to be transmitted; the data identifier represents a unique identifier for the transmitted data;

[0029] The decoding component decodes the encoded QR code based on the data identifier, data packet sequence number, and next data packet sequence number, and then concatenates them to restore them into a medium-sized file. It also determines whether there are any unconcatenated data packets to be transmitted based on the data identifier and next data packet sequence number, and retransmits the data packets corresponding to the unconcatenated data packets.

[0030] In one embodiment, the transmission components of the QR code one-way data transmission module include cross-network data sending software, a display device, a camera, cross-network data receiving software, and configuration management software;

[0031] Cross-network data transmission software is used to send QR codes;

[0032] The display device is used to display QR codes;

[0033] The camera is used to simulate scanning QR codes;

[0034] Cross-network data receiving software is used to receive QR codes;

[0035] Configuration management software is used to recognize QR codes.

[0036] In one embodiment, the digital campus service system server includes a message middleware data module, a platform timed task module, and a token module;

[0037] The message middleware data module is used for data exchange of user consumption information;

[0038] The platform's scheduled task module is used to implement scheduled tasks for users and platform statistics.

[0039] The Token module is used for token issuance, verification, and microservice authentication.

[0040] In one embodiment, the data desensitization layer functions as rule-based desensitization, encryption-based desensitization, and data masking desensitization.

[0041] Rule-based desensitization involves formulating desensitization rules based on the sensitivity of the result information and the accumulated sensitive keywords, replacing key information with "*".

[0042] Encryption and desensitization involves encrypting sensitive data in the results information, allowing authorized personnel to decrypt and view the original data.

[0043] Data masking and anonymization involves masking sensitive data in the results to prevent it from being stored, transmitted, and used, allowing only authorized personnel to access it.

[0044] In one embodiment, the information push service layer includes a general business message push module and a core business message push module;

[0045] The general business message push module is used to push general information to users, including the completion status of each step in the system's business process;

[0046] The core business message push module is used to push de-identified information to users via SMS to inform them of the business processing progress.

[0047] One of the above technical solutions has the following advantages and beneficial effects:

[0048] The aforementioned digital campus service system based on one-way cross-network data transmission, through the design of a user front-end display layer, a back-end interface layer, a one-way cross-network data transmission layer, a digital campus service system server, a data anonymization layer, and an information push service layer, ensures the security of core business data. It also enables online processing of core business and security matters. Furthermore, the one-way cross-network data transmission layer utilizes a large-capacity optical disc transmission module and a small-capacity QR code transmission module to achieve full coverage transmission of large, medium, and small files, ensuring security while significantly improving transmission efficiency and making file transfer more convenient, avoiding data loss or irretrievable data during transmission. Attached Figure Description

[0049] Figure 1 This is a schematic diagram of a digital campus service system structure based on one-way cross-network data transmission in one embodiment;

[0050] Figure 2 This is a schematic diagram of the structure of a unidirectional cross-network data transmission layer in one embodiment. Detailed Implementation

[0051] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0052] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to be limiting of the application.

[0053] Furthermore, the technical solutions of the various embodiments of the present invention can be combined with each other, but only if they are implemented by those skilled in the art. When the combination of technical solutions is contradictory or cannot be implemented, it should be considered that such combination of technical solutions does not exist and is not within the scope of protection claimed by the present invention.

[0054] This application provides an embodiment of the present invention that provides a digital campus service system based on one-way cross-network data transmission, such as... Figure 1 As shown, it includes a user front-end display layer 101, a back-end interface layer 102, a one-way cross-network data transmission layer 103, a digital campus service system server 104, a data anonymization layer 105, and an information push service layer 106.

[0055] The user front-end presentation layer 101 communicates with the back-end interface layer 102 to display the functions of the digital campus service system to the user.

[0056] The backend interface layer 102 is used to transmit data from the user frontend display layer 101 to the one-way cross-network data transmission layer 103;

[0057] like Figure 2 As shown, the one-way cross-network data transmission layer 103 includes a preprocessing module, a file size evaluation module, a large-capacity one-way optical disc transmission module, and a small-capacity QR code one-way data transmission module. The preprocessing module is used to preprocess the files to be transmitted. The file size evaluation module is used to divide the preprocessed files to be transmitted into large-capacity files, medium-capacity files, and small-capacity files. The large-capacity one-way optical disc transmission module is used to transmit large-capacity files. The QR code one-way data transmission module is used to transmit medium-capacity files and small-capacity files, and includes a file splitting component, a QR code conversion component, an encoding component, a decoding component, and a transmission component. The file splitting component is used to split the medium-capacity file into several small-capacity sub-files. The QR code conversion component is used to convert the small-capacity file and the small-capacity sub-files into QR codes. The encoding component is used to encode the QR codes converted from the small-capacity sub-files. The decoding component is used to decode the encoded QR codes and reassemble them to restore the medium-capacity file. The transmission component is used to transmit the QR codes.

[0058] The digital campus service system server 104 is used to receive file information from the one-way cross-network data transmission layer, process the file information to obtain ordinary information and core information, and send the core information to the data desensitization layer and the ordinary information to the information push service layer; the file information includes large-capacity files, medium-capacity files and small-capacity files;

[0059] Data desensitization layer 105 is used to desensitize core information to obtain desensitized information;

[0060] The information push service layer 106 is used to push ordinary information and de-identified information to users.

[0061] Understandably, the digital campus service system based on unidirectional cross-network data transmission is built using a B / S architecture, developed with a front-end separation model, and uses RESTful communication-style interfaces for interaction. The front-end and back-end adopt unified data and models, reducing the difficulty of front-end integration across multiple channels (Web UI, mobile App) and facilitating optimization for each domain. The system supports cluster deployment and integrates a CAS single sign-on system and the Activiti workflow engine platform. The platform's front-end is built using Vue.js and CSS3, with Nginx for load balancing and reverse proxying. The back-end is developed using Java, based on popular open-source frameworks such as Spring and Spring Boot, using Nacos as the registry center, and data storage using MySQL relational databases and non-relational databases such as Redis and MongoDB. With front-end and back-end separation, the front-end only needs to focus on page styles and dynamic data parsing and rendering, while the back-end focuses on specific business logic.

[0062] It's understandable that the user front-end presentation layer is developed using a front-end separation model, built with Vue2 and CSS3, and utilizes Nginx for load balancing and reverse proxying. The back-end interface layer is developed using Java, based on popular open-source frameworks such as Spring and Spring Boot, using Nacos as the registry center, and interacting with each other using RESTful APIs. The front-end and back-end use a unified set of data and models.

[0063] It is understandable that a one-way cross-network data transmission layer can ensure that data can only be transmitted from one network to another and not in the reverse direction. This is generally achieved through a physical one-way channel. This channel is designed so that the data stream can only flow in one direction during transmission. It uses opto-isolation technology, where data is sent from the sending end to the receiving end in the form of light, and the receiving end receives the data in the form of electricity, ensuring that the data can only flow in one direction.

[0064] It is understandable that the data anonymization process in the data anonymization layer is based on the actual situation of the school's teaching, scientific research, management, and logistics, and formulates rules and clauses that meet the confidentiality requirements. Under the premise of not violating the confidentiality rules, the information is anonymized and then circulated.

[0065] In one embodiment, the functions displayed to the user by the user front-end presentation layer include: ordinary user functions, platform management functions, and gesture diagrams; the back-end interface layer includes: ordinary user function interfaces, platform management function interfaces, and gesture diagram interfaces.

[0066] As is understood, a pose graph is a common data structure used in this invention to represent a user's position and orientation, as well as the relationships between these positions.

[0067] In one embodiment, the one-way cross-network data transmission layer supports file and database synchronization, and supports API interfaces and visually isolated physical channels.

[0068] An API, or Application Programming Interface, is a set of predefined rules and specifications that allow different software applications to connect and communicate with each other; it's a communication protocol. Common API types include Web APIs, operating system APIs, remote APIs, and library-based class APIs. Web APIs are a very common form, allowing different software systems to exchange data via the HTTP protocol, such as REST APIs and GraphQL.

[0069] As we can understand, physical isolation channels refer to separating different networks or systems at the physical level to prevent data leakage or unauthorized access. This may involve using different hardware devices or preventing signal leakage through physical means (such as separating machines with walls or other barriers).

[0070] In one embodiment, the platform management function interface and the gesture diagram interface are a set of configurable management menus. The management menus are used to enable administrators to perform user management, role management, identity management, unit management, authorization management, and display directory management functions.

[0071] It's understandable that the management menu can have specific functions for managing single pages.

[0072] In one embodiment, the preprocessing module of the unidirectional cross-network data transmission layer performs the following preprocessing steps:

[0073] IP verification: Verifies user identity;

[0074] Signature verification: Calculates the signature of the file to be transmitted and verifies data integrity, authenticating the data source;

[0075] File type verification: Verify the type of the file to be transmitted. File types are divided into whitelist and blacklist. If the file type is on the whitelist, the verification will pass; if the file type is on the blacklist, the data transmission will be terminated.

[0076] Rate limiting: Allocating transmission traffic;

[0077] Sensitive word verification: Matches for prohibited keywords; if a match is found, data transmission is terminated.

[0078] Rule validation: Match regular expressions using a blacklist pattern; if a match is found, data transmission is terminated.

[0079] Data encryption: Encrypting the data in the file to be transmitted;

[0080] Data approval: This is performed by the audit administrator, who checks the data in the files to be transferred.

[0081] Understandably, if data violations are detected during the data preprocessing stage, the system will terminate the current data transmission process and push the data to the upper-layer application. If no violations are found, data transmission tasks are prioritized by the task scheduling module, and the prioritized data is transmitted across the network sequentially. Upon arrival at the receiving system, the data is first parsed and verified to reconstruct the data for the upper-layer application.

[0082] In one embodiment, the high-capacity one-way optical disc transmission module includes cross-network data sending software, cross-network optical disc transfer machine, cross-network data receiving software, and configuration management software, wherein the configuration management software is used to simulate manual disc burning actions.

[0083] As we can understand it, a CD / DVD transfer machine is a device used to manage and automate the operation of CDs and DVDs. It can automatically load and unload CDs into the CD / DVD drive, and can also perform operations such as CD / DVD copying and data backup.

[0084] The process of simulating manual disc burning can be understood as follows: First, data is copied to the source system's cache area. Then, this data is simulatedly "burned" into a virtual optical disc image file (such as an ISO file). This process can be viewed as a "manual disc burning" process in the source environment. After creating this virtual optical disc image file, the source system sends this file to the receiving system. On the receiving system, this optical disc image file is simulatedly "loaded" into a virtual optical drive, just like a "manual disc mounting" process in the target environment. Finally, the target system uses standard file system operations to read data from this virtual optical drive, thus completing the data transfer. This method enables one-way data transfer while simulating the processes of manual disc burning and mounting.

[0085] In one embodiment, a file splitting component is used to split a medium-sized file into several smaller sub-files, an encoding component is used to encode the QR codes converted from the smaller sub-files, and a decoding component is used to decode the encoded QR codes and reassemble them to restore the medium-sized file, including:

[0086] The file splitting component sets the maximum transmission capacity of a single QR code to Max, and splits a data file of size M into... A small sub-file is used as the data packet to be transmitted.

[0087] The encoding component uses identity information and a public key to encrypt the data packets to be transmitted, and adds a data identifier and a data packet sequence number before the data packets to be transmitted, and adds the next data packet sequence number after the data packets to be transmitted; the data identifier represents a unique identifier for the transmitted data;

[0088] The decoding component decodes the encoded QR code based on the data identifier, data packet sequence number, and next data packet sequence number, and then concatenates them to restore them into a medium-sized file. It also determines whether there are any unconcatenated data packets to be transmitted based on the data identifier and next data packet sequence number, and retransmits the data packets corresponding to the unconcatenated data packets.

[0089] As can be understood, the specific structure of the data packet to be transmitted is as follows:

[0090] Data identifier | Packet sequence number | Packet | Next packet sequence number.

[0091] In this configuration, aside from the first data packet beginning and the last data packet ending with special start and end markers, the structure of all other data packets to be transmitted is as shown above. Therefore, when verifying whether a file of size M has been successfully transmitted, it is only necessary to check if any data packets were not concatenated during decoding, and whether the start and end markers have been fully transmitted. If any are missing, simply find the corresponding sequence numbered data packet and retransmit it.

[0092] In one embodiment, the transmission components of the QR code one-way data transmission module include cross-network data sending software, a display device, a camera, cross-network data receiving software, and configuration management software;

[0093] Cross-network data transmission software is used to send QR codes;

[0094] The display device is used to display QR codes;

[0095] The camera is used to simulate scanning QR codes;

[0096] Cross-network data receiving software is used to receive QR codes;

[0097] Configuration management software is used to recognize QR codes.

[0098] As can be understood, the process of encoding information using QR codes and transmitting it one-way involves the source device encoding the information to be sent into a QR code, which is then displayed on a screen; the receiving device's camera or QR code scanner scans this QR code and decodes it to obtain the information. In this process, information is transmitted only from the source device to the receiving device, completing a one-way transmission.

[0099] In one embodiment, the digital campus service system server includes a message middleware data module, a platform timed task module, and a token module;

[0100] The message middleware data module is used for data exchange of user consumption information;

[0101] The platform's scheduled task module is used to implement scheduled tasks for users and platform statistics.

[0102] The Token module is used for token issuance, verification, and microservice authentication.

[0103] It's understandable that the message middleware data module reads data from the user account management database, submits the business process, writes it to the message queue, and then calls the platform's core services to write to the database. The platform's scheduled task module implements tasks related to news, user dual identities, semester configuration, and platform statistics through platform scheduled tasks.

[0104] As you can understand, the Token module specifically refers to the token issuance, verification, and microservice authentication provided by the third-party application. Each microservice client is assigned a clientId and clientSecret to verify its legitimacy. For RPC calls, the server verifies the clientId and clientSecret each time it is invoked, and the server's business logic may also need to know the currently logged-in user's information. For RESTful calls, the microservice client first requests an accessToken from the TokenService using the clientId and clientSecret. When the microservice is invoked, it verifies the accessToken's validity with the TokenService. The server's business logic may also need to know the currently logged-in user's information. If the microservices provided by the third-party application need to integrate this authentication mechanism, they can do so through the TokenService. For RESTful services, methods of the TokenService can be called in the interceptor; for RPC services, methods of the TokenService can be called in the AOP aspect class.

[0105] In one embodiment, the data desensitization layer functions as rule-based desensitization, encryption-based desensitization, and data masking desensitization.

[0106] Rule-based desensitization involves formulating desensitization rules based on the sensitivity of the result information and the accumulated sensitive keywords, replacing key information with "*".

[0107] Encryption and desensitization involves encrypting sensitive data in the results information, allowing authorized personnel to decrypt and view the original data.

[0108] Data masking and anonymization involves masking sensitive data in the results to prevent it from being stored, transmitted, and used, allowing only authorized personnel to access it.

[0109] It's understandable that in terms of data security and privacy protection, data masking can transform sensitive information into non-sensitive information, allowing data to be used without disclosing the original information. The main difference between rule-based data masking, encryption-based data masking, and data masking lies in their implementation methods. Rule-based data masking modifies data according to certain rules to achieve the purpose of data masking; encryption-based data masking uses encryption algorithms to transform the original data into an encrypted string. The advantage of this method is that the masked data cannot be decrypted (if an irreversible encryption algorithm is used), providing high security. However, because the masked data cannot be decrypted, it is only suitable for situations where data decryption is not required; data masking, also known as dynamic data masking, is mainly implemented at the application layer, allowing the application system to replace or obscure some sensitive fields when providing data. For example, when displaying data, it can directly replace them with special characters or obscured information, thus protecting sensitive data while allowing the business system to operate normally.

[0110] In one embodiment, the information push service layer includes a general business message push module and a core business message push module;

[0111] The general business message push module is used to push general information to users, including the completion status of each step in the system's business process;

[0112] The core business message push module is used to push de-identified information to users via SMS to inform them of the business processing progress.

[0113] In essence, the push notification service layer is a service layer responsible for sending notification information to client devices (such as mobile phones and computers). Simply put, it's a mechanism that ensures users receive the latest information anytime, anywhere, as long as they are connected to the internet. The main advantage of the push notification service layer is its ability to improve user experience, allowing users to quickly access the information they care about without frequently checking or refreshing the application. Furthermore, for application developers and service providers, it's an effective way to increase user activity and customer engagement.

[0114] One of the above technical solutions has the following advantages and beneficial effects:

[0115] The aforementioned digital campus service system based on one-way cross-network data transmission ensures the security of core business data by designing a user front-end display layer, a back-end interface layer, a one-way cross-network data transmission layer, a digital campus service system server, a data anonymization layer, and an information push service layer. It also enables online processing of core business and security matters. Furthermore, the system utilizes a large-capacity optical disc one-way transmission module and a small-capacity QR code one-way data transmission module within the one-way cross-network data transmission layer to achieve full coverage transmission of large, medium, and small files. This ensures security while significantly improving transmission efficiency and preventing data loss or irretrievable data during transmission.

[0116] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0117] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the invention patent. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this patent application should be determined by the appended claims.

Claims

1. A digital campus service system based on one-way cross-network data transmission, characterized in that, It includes a user front-end presentation layer, a back-end interface layer, a one-way cross-network data transmission layer, a digital campus service system server, a data anonymization layer, and an information push service layer; the user front-end presentation layer is built using Vue2 and CSS3, and uses Nginx for load balancing and reverse proxy, while the back-end interface layer is developed using the JAVA language; The user front-end display layer is communicatively connected to the back-end interface layer and is used to display the functions of the digital campus service system to the user. The backend interface layer is used to transmit the data of the user frontend display layer to the one-way cross-network data transmission layer; The one-way cross-network data transmission layer includes a preprocessing module, a file size evaluation module, a large-capacity one-way optical disc transmission module, and a QR code one-way data transmission module. The preprocessing module preprocesses the file to be transmitted. The file size evaluation module divides the preprocessed file into large, medium, and small files. The large-capacity one-way optical disc transmission module transmits the large file. The QR code one-way data transmission module transmits the medium and small files and includes a file splitting component, a QR code conversion component, an encoding component, a decoding component, and a transmission component. The file splitting component splits the medium-capacity file into several small sub-files. The QR code conversion component converts the small files and sub-files into QR codes. The encoding component encodes the QR codes converted from the small sub-files. The decoding component decodes the encoded QR codes and reassembles them to reconstruct the medium-capacity file. The transmission component transmits the QR codes. The digital campus service system server is used to receive file information from the one-way cross-network data transmission layer, process the file information to obtain ordinary information and core information, and send the core information to the data desensitization layer and the ordinary information to the information push service layer. The file information includes large-capacity files, medium-capacity files, and small-capacity files; The data desensitization layer is used to desensitize the core information to obtain desensitized information; The information push service layer is used to push the ordinary information and de-identified information to the user.

2. A digital campus service system based on unidirectional cross-network data transmission according to claim 1, characterized in that, The user front-end display layer presents the following functions to the user: ordinary user functions, platform management functions, and gesture diagrams; the back-end interface layer includes: ordinary user function interfaces, platform management function interfaces, and gesture diagram interfaces.

3. A digital campus service system based on unidirectional cross-network data transmission according to claim 2, characterized in that, The one-way cross-network data transmission layer supports file and database synchronization, and supports API interfaces and visual physical isolation channels.

4. A digital campus service system based on unidirectional cross-network data transmission according to claim 2, characterized in that, The platform management function interface and posture diagram interface are a set of configurable management menus. The management menus are used to enable administrators to perform user management, role management, identity management, unit management, authorization management, and display directory management functions.

5. A digital campus service system based on unidirectional cross-network data transmission according to claim 1, characterized in that, The preprocessing module of the unidirectional cross-network data transmission layer performs the following preprocessing steps: IP verification verifies user identity; Signature verification: Calculate the signature of the file to be transmitted and verify data integrity, and authenticate the data source; File type verification verifies the file type of the file to be transmitted. The file types are divided into a whitelist and a blacklist. If the file type is in the whitelist, the verification passes; if the file type is in the blacklist, the data transmission is terminated. Rate limiting is used to allocate transmission traffic. Sensitive word verification matches prohibited keywords; if a match is found, data transmission is terminated. Rule validation involves matching regular expressions using a blacklist pattern; data transmission is terminated upon successful match. Data encryption: Encrypting the data in the file to be transmitted. Data approval is handled by the audit administrator, who checks the data in the files to be transferred.

6. A digital campus service system based on unidirectional cross-network data transmission according to claim 1, characterized in that, The high-capacity one-way optical disc transmission module includes cross-network data sending software, cross-network optical disc transfer machine, cross-network data receiving software, and configuration management software. The configuration management software is used to simulate manual disc burning.

7. A digital campus service system based on unidirectional cross-network data transmission according to claim 6, characterized in that, The file splitting component is used to split the medium-sized file into several small-sized sub-files; the encoding component is used to encode the QR codes converted from the small-sized sub-files; and the decoding component is used to decode the encoded QR codes and reassemble them to restore the medium-sized file, including: The file splitting component is configured to have a maximum transmission capacity for a single QR code. Max The file splitting component will have a capacity of M Data files split into A small sub-file is used as a data packet to be transmitted; The encoding component uses identity information and a public key to encrypt the data packet to be transmitted, and adds a data identifier and a data packet sequence number before the data packet to be transmitted, and adds the next data packet sequence number after the data packet to be transmitted; the data identifier represents a unique identifier for the transmitted data; The decoding component decodes the encoded QR code based on the data identifier, data packet sequence number, and next data packet sequence number, and then concatenates and restores it into the medium-sized file. It also determines whether there are any unconcatenated data packets to be transmitted based on the data identifier and next data packet sequence number, and retransmits the data packets corresponding to the unconcatenated data packets.

8. A digital campus service system based on unidirectional cross-network data transmission according to claim 6, characterized in that, The transmission components of the QR code one-way data transmission module include cross-network data sending software, display device, camera, cross-network data receiving software, and configuration management software; The cross-network data transmission software is used to send the QR code; The display device is used to display the QR code; The camera is used to simulate scanning the QR code; The cross-network data receiving software is used to receive the QR code; The configuration management software is used to recognize the QR code.

9. A digital campus service system based on unidirectional cross-network data transmission according to claim 1, characterized in that, The digital campus service system server includes a message middleware data module, a platform timed task module, and a token module; The message middleware data module is used for data exchange of user consumption information; The platform's scheduled task module is used to implement scheduled tasks related to users and platform statistics. The Token module is used for Token issuance, verification, and microservice authentication.

10. A digital campus service system based on unidirectional cross-network data transmission according to claim 1, characterized in that, The data desensitization layer includes functions such as rule-based desensitization, encryption-based desensitization, and data masking desensitization. The rule-based desensitization is based on the sensitivity of the core information and accumulated sensitive keywords to formulate desensitization rules, using "..." to desensitize key information. "replace; The encryption and desensitization process involves encrypting the sensitive data of the core information, allowing authorized personnel to decrypt and view the original data. The data masking and desensitization refers to masking the sensitive data of the core information to prevent it from being stored, transmitted, and used, allowing only authorized personnel to access it.

11. A digital campus service system based on unidirectional cross-network data transmission according to claim 1, characterized in that, The information push service layer includes a general business message push module and a core business message push module; The general business message push module is used to push the general information to the user, and the general information includes the completion status of each step in the system business process; The core business message push module is used to push the de-identified information to the user via SMS to indicate the progress of business processing.

Images