An intranet-extranet data penetration system and method suitable for group enterprises

Abstract

The present application relates to a kind of internal and external network data penetration system and method suitable for group enterprise, including deployment in internet side ferry service cluster and deployment in information intranet side strong isolation cluster, ferry service cluster receives mobile APP service request, obtains request parameter, data coding is calculated by algorithm, again Hash calculation is carried out to the data coding, obtain the connection address of a operation database in strong isolation cluster, according to the connection address of operation database, request parameter and data coding are sent to the strong isolation cluster, the operation database receives and stores the request parameter and data coding, call stored procedure to parse request parameter and construct HTTP request, then call HTTP link to access the information system of intranet.The present application has the advantages of easy deployment, easy configuration and easy expansion, etc., while realizing internal and external network data penetration, it can meet the demand and expansion demand of group enterprise data penetration.

Description

Technical Field

[0001] This invention relates to the field of data penetration deployment within an intranet, and more particularly to a data penetration system and method suitable for intranet and extranet networks of group enterprises. Background Technology

[0002] Most existing technical solutions for enabling mobile apps or business systems on the internet to access intranet information systems suffer from scalability limitations. When large enterprises need to support thousands or even tens of thousands of users, system performance degrades or becomes unstable, and the technical architecture faces scalability challenges. Because existing technologies may be dependent on specific operating systems or devices, when expansion is needed, deploying new devices requires rewriting code and re-running, resulting in long expansion cycles, high costs, and poor flexibility. Furthermore, existing penetration systems use data transfer services to call database stored procedures, passing all request parameters from the external network to the stored procedure for parsing and execution, and then initiating HTTP requests in real time within the stored procedure to achieve real-time interaction in a strongly isolated environment. While prioritizing timeliness, this ignores the complexity of stored procedures handling large numbers of input parameters, leading to low execution efficiency. Moreover, when system requirements change, requiring the addition or removal of fields in request parameters, the stored procedure needs to be modified, resulting in poor system compatibility, high update and maintenance costs, and increased integration and compatibility complexity for enterprises. Summary of the Invention

[0003] To address the aforementioned issues, the present invention aims to provide a data penetration system for internal and external networks suitable for group enterprises. This system is characterized by its ease of deployment, configuration, and expansion, and can meet the data penetration and expansion needs of group enterprises while achieving data penetration between internal and external networks.

[0004] To achieve the above objectives, the present invention adopts the following technical solution:

[0005] A data penetration system for internal and external networks suitable for group enterprises includes a data transfer service cluster deployed on the internet side and a strongly isolated cluster deployed on the internal information network side. The data transfer service cluster includes a main database, and the strongly isolated cluster includes multiple operational databases. The data transfer service cluster receives business requests from mobile apps or internet-side business systems, parses and processes the business requests to obtain request parameters, calculates a unique data code corresponding to the request parameters using an algorithm, performs a hash calculation on the data code to obtain the connection address of an operational database in the strongly isolated cluster, and sends the request parameters and data code to the operational database corresponding to the connection address in the strongly isolated cluster. Simultaneously, the data transfer service cluster waits for the request result, and when it receives the request result, returns the request result to the mobile app or internet-side business system. The operational database of the strongly isolated cluster receives and stores the request parameters and data code, calls a stored procedure to parse the request parameters and construct an HTTP request, and then calls an HTTP link to access the internal information system. The stored procedure waits for and receives the request result returned by the information system, and then sends the request result to the data transfer service.

[0006] More preferably, the main database of the ferry service cluster stores a configuration table, which stores the connection addresses of each operation database in the strongly isolated cluster and the address IDs corresponding to each connection address. The address IDs increment sequentially from 0. The specific process of encoding this data and performing a hash calculation to obtain the connection address of an operation database in the strongly isolated cluster is as follows: When the ferry service cluster receives the business request, it queries the configuration table to obtain the total number of addresses in the configuration table. After the data encoding is hashed, a hash value is obtained. Then, the hash value is moduloed by the total number of addresses in the configuration table to obtain a unique address ID. Finally, the connection address of the corresponding operation database is obtained based on the address ID.

[0007] More preferably, when it is necessary to expand the system's business processing capabilities, a logically independent service group is added to the strongly isolated cluster, and the connection addresses of each connected operation database in the service group are written into the configuration table; when the data is encoded and hashed, the result is any operation database in the current strongly isolated cluster, thus completing the system expansion.

[0008] More preferably, the main database of the ferry service cluster stores a mapping table that stores the mapping relationship between external network service request addresses and internal network information system service request interfaces. When the ferry service cluster receives an external network service request, the steps for parsing and processing the service request are as follows: parsing the service request to obtain the external network service request address and service parameters, then obtaining the internal network information system service request interface according to the mapping table, and repackaging the service parameters and the service request interface according to the interface requirements of the internal network information system to generate the request parameters.

[0009] More preferably, in the strongly isolated cluster, each of the operation databases creates a temporary table. After receiving the request parameters and data encoding, the operation database stores the data encoding, business parameters, and business request interface fields into the temporary table and uses the data encoding as the primary key. The stored procedure receives the data encoding and uses it as an input parameter, queries the temporary table to obtain the corresponding request parameters, constructs the HTTP request according to the business request interface, and simultaneously passes the business parameters to the current link to call the HTTP link to access the information system on the intranet.

[0010] More preferably, the stored procedure waits for and receives the request result returned by the information system. When the request result is received, it stores the request result in the operation database and establishes a mapping relationship with the data encoding, and then sends the request result to the data transfer service.

[0011] More preferably, after the operation database of the strongly isolated cluster receives and stores the request parameters and data encoding, it queries the operation database using an SQL statement to see if the request result corresponding to the data encoding is stored. If it is, the request result is read and sent to the data transfer service. If not, the stored procedure is executed to receive the data encoding and use the data encoding as an input parameter to query the temporary table, obtain the corresponding request parameters, construct the HTTP request, and then call the HTTP link to access the information system on the intranet.

[0012] Based on the same inventive concept, this invention also provides a method for data penetration between internal and external networks applicable to group enterprises.

[0013] The technical solution is as follows:

[0014] A method for data penetration between internal and external networks applicable to group enterprises is disclosed. This method utilizes a data penetration step based on a ferry service cluster located on the internet side and a strongly isolated cluster located on the internal information network side. The ferry service cluster includes a main database, and the strongly isolated cluster includes multiple operational databases. The data penetration steps are as follows: A mobile app or internet-side business system sends a business request to the ferry service cluster; the ferry service cluster parses and processes the business request, obtains request parameters, calculates a unique data code corresponding to the request parameters using an algorithm, performs a hash calculation on the data code to obtain a connection address of an operational database in the strongly isolated cluster, and sends the request parameters and data code to the operational database in the strongly isolated cluster corresponding to the connection address based on the connection address; the operational database in the strongly isolated cluster receives and stores the request parameters and data code, calls a stored procedure to parse the request parameters and construct an HTTP request, and then calls an HTTP link to access the internal information system; the stored procedure waits for and receives the request result returned by the information system, and then sends the request result to the data ferry service; the ferry service cluster waits for and receives the request result, and then returns the request result to the mobile app or internet-side business system.

[0015] The present invention has the following beneficial effects:

[0016] 1. This invention provides a data penetration system and method for internal and external networks applicable to group enterprises. It uses a unique data code generated from request parameters as a key factor in the data penetration and processing between the external network's ferry service cluster and the internal network's strongly isolated cluster. This can be achieved by combining the configuration table on the ferry service cluster with the hash calculation of the data code to determine the connection address for operating the internal database, or by combining the temporary table of the strongly isolated cluster and using only the data code as an input parameter for a stored procedure to quickly construct an HTTP request. Therefore, this invention reduces the complexity of the penetration system and simplifies system deployment and configuration.

[0017] 2. This invention provides a data penetration system and method for internal and external networks applicable to group enterprises. Under high concurrency, by horizontally expanding the database in a strongly isolated cluster and writing the new database address into the configuration table of the ferry service cluster, and then combining the Hash algorithm to encode the data, the processing capacity of the system can be improved. Therefore, the penetration system of this invention has strong scalability.

[0018] 3. This invention provides a data penetration system and method for internal and external networks applicable to group enterprises. It also simplifies the data processing process of the strong isolation cluster by temporarily storing data in a strong isolation cluster and utilizing the uniqueness and consistency of data encoding. This improves the system's ability to resist communication network failures and its response speed, makes data processing more flexible, and enhances system stability. It avoids performance issues such as system crashes and increased latency, ensuring the stable operation of the internal and external network data penetration system and guaranteeing a smooth user experience and business processes. Attached Figure Description

[0019] Figure 1 This is a schematic diagram of the overall structure of the internal and external network data penetration system of the present invention;

[0020] Figure 2 This is a flowchart of the internal and external network data penetration method of the present invention. Detailed Implementation

[0021] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments:

[0022] Example 1

[0023] Please see Figure 1 and Figure 2 A data penetration system for internal and external networks suitable for group enterprises is proposed, consisting of a strongly isolated cluster deployed on the internal information network and a bridging service cluster deployed on the internet side. The strongly isolated cluster can be composed of multiple Oracle clusters, each of which is a logically independent service group. Therefore, the strongly isolated cluster includes multiple operational databases, and its main services include: 1. Temporary data storage, such as temporary storage of request parameters and request results, with a storage time limit of one day; 2. Stored procedure execution, such as querying and retrieving business parameters, constructing HTTP requests, and returning request results; 3. Temporary data querying, such as using SQL statements to query whether the request result corresponding to the data code has been stored in the operational database.

[0024] The ferry service cluster includes a main database, which stores a configuration table and a mapping table. The configuration table stores the connection addresses of each operation database in the strongly isolated cluster and the address IDs corresponding to each connection address. The address IDs start from 0 and increment sequentially. The mapping table stores the mapping relationship between external network service request addresses and internal network information system service request interfaces.

[0025] Based on the above deployment, the data penetration process is as follows: First, the ferry service cluster receives business requests from mobile apps or internet-side business systems, parses and processes these requests to obtain request parameters. Simultaneously, the ferry service cluster queries the configuration table to obtain the total number of addresses within the table. The specific process of parsing and processing the business request is as follows: Parse the business request to obtain the external network business request address and business parameters. Then, obtain the business request interface of the internal network information system from the mapping table. Repackage the business parameters and the business request interface according to the interface requirements of the internal network information system to generate the request parameters. Next, process the request parameters using an algorithm to calculate a unique data code corresponding to the request parameter. For example, the MD5 message digest algorithm can be used to encode the request method to obtain a unique data code. Perform a hash calculation on this data code to obtain a hash value. Then, take the remainder between the hash value and the total number of addresses in the configuration table to obtain a unique address ID. Finally, obtain the corresponding connection address for operating the database based on the address ID. For example, if the total number of addresses in the configuration table is 10, then the hash algorithm is Hash(CommonUtil.getUUID())%10, resulting in a unique hash value between 0 and 9 (inclusive). The request parameters and data encoding are sent to the operation database corresponding to the connection address. Simultaneously, the data transfer service cluster waits for the request result. Upon receiving the result, it returns it to the mobile app or the business system on the internet side. Next, the operation database of the strongly isolated cluster receives and stores the request parameters and data encoding, calls a stored procedure to parse the request parameters and construct an HTTP request, and then calls the HTTP link to access the internal network information system. The stored procedure waits for and receives the request result returned by the information system, and then sends the result to the data transfer service.

[0026] The aforementioned network penetration system calculates a unique data code corresponding to the request parameters using an algorithm. Utilizing the uniqueness of this data code, a hash algorithm is used to determine the internal network operation database used to execute the request parameters. When it is necessary to expand the system's business processing capacity, a logically independent service group is added to the strongly isolated cluster. The connection addresses of each operation database within the service group are written into the configuration table. Any operation database connection address written into the configuration table is included in the address selection range for hash calculation. Specifically, when the ferry service cluster receives a business request, it queries the configuration table to obtain the total number of addresses currently in the table. When performing a hash calculation on this data code, the hash algorithm automatically updates the remainder value, thus enabling the newly added operation database within the strongly isolated cluster. Then, based on the data code, the connection address of one operation database in the configuration table is obtained, and the request parameters are processed through that operation database. For example, when a new database is added and the total number of addresses in the configuration table is 20, the hash value is moduloed by the total number of addresses in the configuration table. The hash algorithm is Hash(CommonUtil.getUUID())%20. The calculated hash value is a unique value between 0 and 19 (inclusive), resulting in a unique address ID corresponding to the data encoding. Then, the connection address of the corresponding operation database is obtained based on the address ID. Therefore, when a large enterprise faces a large number of concurrent tasks, resulting in request processing delays, congestion, and overall performance degradation in the system, a new operation database can be deployed. The connection address of the operation database is written into the configuration table. After the ferry service cluster reads the total number of addresses in the configuration table, the hash algorithm automatically updates the modulo value, thus enabling the new operation database. The entire expansion process is simple and efficient, greatly reducing expansion costs and quickly resolving system task congestion.

[0027] To improve system data processing speed and compatibility during system upgrades, the method of constructing HTTP requests for stored procedures has been improved. A stored procedure is a set of SQL statements written for a specific function, stored in the database, and does not require recompilation after the initial compilation. Request parameters from the external network contain a large amount of information, including not only the two key pieces of information mentioned in this solution for accessing the internal network information system—business parameters and the business request interface of the internal information system—but also security verification information, validation information, etc. Existing publicly available stored procedure calls use all request parameters as input parameters, with the stored procedure parsing the key information from the request parameters. This not only increases the complexity of stored procedure compilation but also significantly impacts processing efficiency. Furthermore, when new requirements are added, such as adding custom parameter fields to the request parameters, requiring system updates, the stored procedure must be recompiled to parse the new request parameters. Therefore, the existing direct calling method of stored procedures significantly reduces system compatibility and future maintainability. In this embodiment, a method is proposed to use data encoding as an input parameter for a stored procedure and combine it with a temporary table to obtain key information. This not only improves the reusability and execution efficiency of the stored procedure but also simplifies deployment, enhances system compatibility, and reduces the difficulty of later maintenance. The execution steps of this implementation are as follows: In the strongly isolated cluster, a temporary table is created in each of the operation databases. After receiving the request parameters and data encoding, the operation database stores the data encoding, the business parameters in the request parameters, and the business request interface fields into the temporary table and uses the data encoding as the primary key. The stored procedure receives the data encoding and uses it as an input parameter, queries the temporary table to obtain the corresponding request parameters, constructs the HTTP request according to the business request interface, and simultaneously passes the business parameters to the current link, calling the HTTP link to access the information system on the intranet.

[0028] This embodiment also utilizes the consistency maintained by the same information after algorithmic encoding, the consistency of the corresponding hash value, and the uniqueness of the data encoding to solve the problem of communication network instability and repeated submission of the same request by the requesting end. It avoids the repeated execution of the same operation in the database, improving system performance and response speed. The specific steps are as follows: After the stored procedure calls the HTTP link to access the intranet information system, it waits for and receives the request result returned by the information system. When the request result is received, it stores the request result in the operation database and establishes a mapping relationship with the data encoding. Then, it sends the request result to the data transfer service. The storage of the request result is temporary. With this storage operation, when the requesting end on the external network submits the same business request multiple times, since the parsed business request is consistent with the previous request, the data encoding calculated by the algorithm remains unchanged. Correspondingly, the hash calculation result of the data encoding also remains unchanged, and the operation database connection address obtained from the configuration table is the same as the operation database connection address used to process the property request last time. Therefore, when the stored procedure receives a data encoding from the data transfer service cluster, it first checks the operation database to see if the corresponding request result is stored in the data encoding. If so, it reads the request result and sends it to the data transfer service. If not, it executes the stored procedure to receive the data encoding and uses it as an input parameter to query the temporary table, obtain the corresponding request parameters, construct the HTTP request, and then call the HTTP link to access the intranet information system. Through these technical means, the problem of a sharp increase in business request processing volume due to repeated submissions during system communication congestion can be solved, improving system stability and providing a better user experience.

[0029] This invention provides a data penetration system for internal and external networks suitable for group enterprises. It uses a unique data code generated from request parameters as a key factor in the data penetration and processing between the external network's ferry service cluster and the internal network's strongly isolated cluster. This system can determine the connection address for the internal network database by combining the configuration table on the ferry service cluster with the hash calculation of the data code. Alternatively, it can combine the temporary table in the strongly isolated cluster, using the data code as input parameters for stored procedures to quickly construct HTTP requests. Therefore, this invention reduces the complexity of the penetration system, simplifies system deployment and configuration, and improves system scalability. Furthermore, by temporarily storing data in the strongly isolated cluster and utilizing the uniqueness and consistency of the data code, it simplifies the processing of the strongly isolated cluster, improves the system's resilience to communication network failures and response speed, enhances data processing flexibility, and increases system stability. It avoids performance issues such as system crashes and increased latency, ensuring the stable operation of the internal and external network data penetration system and guaranteeing a smooth user experience and business processes.

[0030] Based on the same inventive concept, this application also provides a method corresponding to the system in Embodiment 1, as detailed in Embodiment 2.

[0031] Example 2

[0032] Please see Figure 1 and Figure 2 A method for data penetration between internal and external networks applicable to group enterprises is disclosed. This method utilizes a data penetration step based on a ferry service cluster located on the internet side and a strongly isolated cluster located on the internal information network side. The ferry service cluster includes a main database, and the strongly isolated cluster includes multiple operational databases. The data penetration steps are as follows: A mobile app or internet-side business system sends a business request to the ferry service cluster; the ferry service cluster parses and processes the business request, obtains request parameters, calculates a unique data code corresponding to the request parameters using an algorithm, performs a hash calculation on the data code to obtain the connection address of an operational database in the strongly isolated cluster, and sends the request parameters and data code to the operational database corresponding to the connection address in the strongly isolated cluster; the operational database of the strongly isolated cluster receives and stores the request parameters and data code, calls a stored procedure to parse the request parameters and construct an HTTP request, and then calls an HTTP link to access the internal information system; the stored procedure waits for and receives the request result returned by the information system, and then sends the request result to the data ferry service; the ferry service cluster waits for and receives the request result, and then returns the request result to the mobile app or internet-side business system.

[0033] The main database of the ferry service cluster stores a configuration table containing the connection addresses of each operation database in the strongly isolated cluster. The specific process of encoding this data and performing a hash calculation to obtain the connection address of an operation database in the strongly isolated cluster is as follows: After hash calculation, a hash value is obtained. The storage location in the configuration table is located based on the hash value, and the operation database connection address at that storage location is read. When it is necessary to expand the system's business processing capabilities, a logically independent service group is added to the strongly isolated cluster. The connection addresses of each operation database within the service group are written into the configuration table. When the data is encoded and hashed, a hash value is obtained. The storage location in the configuration table is located using the hash value, thereby obtaining the corresponding connection address and completing the system expansion.

[0034] The main database of the ferry service cluster stores a mapping table that stores the mapping relationship between external network business request addresses and internal network information system business request interfaces. When the ferry service cluster receives an external network business request, the steps for parsing and processing the business request are as follows: parsing the business request to obtain the external network business request address and business parameters; then, obtaining the internal network information system's business request interface according to the mapping table; repackaging the business parameters and the business request interface according to the interface requirements of the internal network information system to generate the request parameters; in the strongly isolated cluster, each of the operation databases creates a temporary table. After receiving the request parameters and data encoding, the operation database stores the data encoding, business parameters, and business request interface fields into the temporary table, using the data encoding as the primary key; the stored procedure receives the data encoding and uses it as an input parameter, queries the temporary table to obtain the corresponding request parameters, constructs the HTTP request according to the business request interface, and simultaneously passes the business parameters to the current link, calling the HTTP link to access the internal network information system.

[0035] This embodiment also utilizes the consistency maintained by the same information after algorithmic encoding, the consistency of the corresponding hash value, and the uniqueness of the data encoding to solve the problem of communication network instability and repeated submission of the same request by the requesting end. It avoids the repeated execution of the same operation in the database, improving system performance and response speed. The specific steps are as follows: After the stored procedure calls the HTTP link to access the intranet information system, it waits for and receives the request result returned by the information system. When the request result is received, it stores the request result in the operation database and establishes a mapping relationship with the data encoding. Then, it sends the request result to the data transfer service. The storage of the request result is temporary. With this storage operation, when the requesting end on the external network submits the same business request multiple times, since the parsed business request is consistent with the previous request, the data encoding calculated by the algorithm remains unchanged. Correspondingly, the hash calculation result of the data encoding also remains unchanged, and the operation database connection address obtained from the configuration table is the same as the operation database connection address used to process the property request last time. Therefore, when the stored procedure receives a data encoding from the data transfer service cluster, it first checks the operation database to see if the corresponding request result is stored in the data encoding. If so, it reads the request result and sends it to the data transfer service. If not, it executes the stored procedure to receive the data encoding and uses it as an input parameter to query the temporary table, obtain the corresponding request parameters, construct the HTTP request, and then call the HTTP link to access the intranet information system. Through these technical means, the problem of a sharp increase in business request processing volume due to repeated submissions during system communication congestion can be solved, improving system stability and providing a better user experience.

[0036] Since the method described in Embodiment 2 of the present invention is the step executed in the system of Embodiment 1 of the present invention, those skilled in the art can understand the specific implementation method of the system based on the system described in Embodiment 1 of the present invention, and therefore will not be repeated here. All methods employed in the system of Embodiment 1 of the present invention fall within the scope of protection of the present invention.

[0037] The above description is merely a specific embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent structural transformations made based on the content of the present invention specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of the present invention.

Claims

1. A data penetration system for internal and external networks suitable for group enterprises, comprising a ferry service cluster deployed on the Internet side and a strongly isolated cluster deployed on the internal information network side, wherein the ferry service cluster includes a main database and the strongly isolated cluster includes multiple operational databases, characterized in that: The ferry service cluster receives business requests from mobile apps or internet-based business systems, parses and processes the requests to obtain request parameters, calculates a unique data code corresponding to the request parameters using an algorithm, performs a hash calculation on the data code to obtain a connection address for an operation database in a strongly isolated cluster, and sends the request parameters and data code to the operation database in the strongly isolated cluster corresponding to the connection address based on the connection address. At the same time, the ferry service cluster waits for the request result, and when it receives the request result, returns the request result to the mobile app or internet-based business system. The operation database of the strongly isolated cluster receives and stores the request parameters and data encoding, calls the stored procedure to parse the request parameters and construct an HTTP request, and then calls the HTTP link to access the information system on the intranet. The stored procedure waits for and receives the request result returned by the information system, and then sends the request result to the data transfer service.

2. The data penetration system for internal and external networks of a group enterprise according to claim 1, characterized in that: The main database of the ferry service cluster stores a configuration table, which stores the connection addresses of each operation database in the strongly isolated cluster and the address IDs corresponding to each connection address. The address IDs start from 0 and increment sequentially. The specific process of encoding this data and performing a hash calculation to obtain the connection address of an operation database in the strongly isolated cluster is as follows: When the ferry service cluster receives the business request, it queries the configuration table to obtain the total number of addresses in the configuration table. After the data encoding is hashed, a hash value is obtained. Then, the hash value is moduloed by the total number of addresses in the configuration table to obtain a unique address ID. Finally, the connection address of the corresponding operation database is obtained based on the address ID.

3. The data penetration system for internal and external networks of a group enterprise according to claim 2, characterized in that: When it is necessary to expand the system's business processing capabilities, a logically independent service group is added to the strongly isolated cluster, and the connection addresses of each connected operation database within the service group are written into the configuration table. When this data is encoded and hashed, the result is an operation database in the current strongly isolated cluster, thus completing the system expansion.

4. The data penetration system for internal and external networks of a group enterprise according to claim 1, characterized in that: The main database of the ferry service cluster stores a mapping table, which stores the mapping relationship between external network service request addresses and internal network information system service request interfaces. When the ferry service cluster receives an external network service request, the steps for parsing and processing the service request are as follows: parsing the service request to obtain the external network service request address and service parameters, then obtaining the internal network information system service request interface according to the mapping table, and repackaging the service parameters and the service request interface according to the interface requirements of the internal network information system to generate the request parameters.

5. A data penetration system for internal and external networks of a group enterprise according to claim 4, characterized in that: In the strongly isolated cluster, a temporary table is created in each of the operation databases. After receiving the request parameters and data encoding, the operation database stores the data encoding, business parameters and business request interface fields into the temporary table and uses the data encoding as the primary key. The stored procedure receives the data encoding and uses the data encoding as input parameters, queries the temporary table to obtain the corresponding request parameters, constructs the HTTP request according to the business request interface, and simultaneously passes the business parameters to the current link, and calls the HTTP link to access the information system on the intranet.

6. A data penetration system for internal and external networks of a group enterprise according to claim 5, characterized in that: The stored procedure waits for and receives the request result returned by the information system. When the request result is received, it stores the request result in the operation database and establishes a mapping relationship with the data encoding, and then sends the request result to the data transfer service.

7. A data penetration system for internal and external networks of a group enterprise according to claim 6, characterized in that: After receiving and storing the request parameters and data encoding in the operation database of the strongly isolated cluster, the database queries the operation database to see if the request result corresponding to the data encoding is stored. If it is, the request result is read and sent to the data transfer service. If not, the stored procedure is executed to receive the data encoding and use the data encoding as an input parameter to query the temporary table, obtain the corresponding request parameters, construct the HTTP request, and then call the HTTP link to access the information system on the intranet.

8. A method for data penetration between internal and external networks applicable to group enterprises, characterized in that: This method performs a data penetration step based on a ferry service cluster located on the Internet side and a strongly isolated cluster located on the intranet side. The ferry service cluster includes a main database, and the strongly isolated cluster includes multiple operational databases. The data penetration step is as follows: The mobile app or internet-based business system sends a business request to the shuttle service cluster. The ferry service cluster parses and processes the business request, obtains the request parameters, calculates the unique data code corresponding to the request parameters through an algorithm, performs a hash calculation on the data code, obtains the connection address of an operation database in the strong isolation cluster, and sends the request parameters and data code to the operation database in the strong isolation cluster corresponding to the connection address according to the connection address. The operation database of the strongly isolated cluster receives and stores the request parameters and data encoding, calls the stored procedure to parse the request parameters and construct an HTTP request, and then calls the HTTP link to access the information system on the intranet. The stored procedure waits for and receives the request result returned by the information system, and then sends the request result to the data transfer service; The shuttle service cluster waits for and receives the request result, and then returns the request result to the mobile APP or the business system on the Internet side.

9. The method for data penetration between internal and external networks of a group enterprise according to claim 8, characterized in that: The main database of the ferry service cluster stores a configuration table, which stores the connection addresses of each operation database in the strongly isolated cluster and the corresponding address IDs. The address IDs increment sequentially from 0. The specific process of encoding this data and performing a hash calculation to obtain the connection address of an operation database in the strongly isolated cluster is as follows: When the ferry service cluster receives the business request, it queries the configuration table to obtain the total number of addresses in the configuration table. After the data encoding is hashed, a hash value is obtained. Then, the hash value is moduloed by the total number of addresses in the configuration table to obtain a unique address ID. The connection address of the corresponding operation database is then obtained based on the address ID. When it is necessary to expand the system's business processing capabilities, a logically independent service group is added to the strongly isolated cluster. The connection addresses of each operation database in the service group are written into the configuration table. When the data encoding is hashed, a hash value is obtained. The storage location in the configuration table is located by the hash value, thereby obtaining the corresponding connection address and completing the system expansion.

10. The method for data penetration between internal and external networks of a group enterprise according to claim 8, characterized in that: The main database of the ferry service cluster stores a mapping table, which stores the mapping relationship between external network service request addresses and internal network information system service request interfaces. When the ferry service cluster receives an external network service request, the steps for parsing and processing the service request are as follows: parsing the service request to obtain the external network service request address and service parameters, then obtaining the internal network information system service request interface according to the mapping table, and repackaging the service parameters and the service request interface according to the interface requirements of the internal network information system to generate the request parameters. In the strongly isolated cluster, a temporary table is created in each of the operation databases. After receiving the request parameters and data encoding, the operation database stores the data encoding, business parameters and business request interface fields into the temporary table and uses the data encoding as the primary key. The stored procedure receives the data encoding and uses the data encoding as input parameters, queries the temporary table to obtain the corresponding request parameters, constructs the HTTP request according to the business request interface, and simultaneously passes the business parameters to the current link, and calls the HTTP link to access the information system on the intranet.

Images