A data synchronization method and device under physical isolation environment of internal and external networks

Abstract

The present invention discloses a data synchronization method and device in an environment of physical isolation between an internal and external network, and belongs to the technical field of computer ERP software. The method comprises: generating a data preset table according to data to be synchronized; calling a data preset component to write the data to be synchronized into the data preset table; calling an export component in a data synchronization component to export all the data in the data preset table into a preset file, and storing the preset file after encrypting it according to preset encryption information; migrating the stored encrypted file to a target storage path of a target system, wherein the target system is an ERP system into which the data to be synchronized is to be imported; calling an import component in a data synchronization component to scan the target storage path to obtain the encrypted file and then decrypt it, and deploying the decrypted preset file into the target system using its corresponding file deployment tool.

Description

Technical Field

[0001] The present invention relates to the technical field of computer ERP software, and in particular to a data synchronization method and device in an environment of physical isolation between an intranet and an extranet. Background Art

[0002] Enterprises with high security requirements generally deploy two ERP systems, one in a closed intranet environment, also known as the intranet system, and the other in an extranet environment accessible through the Internet, also known as the extranet system. The two ERP systems are physically isolated from each other, and their functions overlap and differ. Some of the functions need to synchronize their data. For example, purchase orders compiled in the intranet system need to be synchronized to the extranet system for suppliers to view. After viewing, suppliers need to feed back the viewing time to the intranet system.

[0003] Traditional data synchronization between ERP systems is mostly based on network connectivity and is implemented using API interfaces. However, if the network is physically isolated, the interface method will not be available. At this time, the traditional way to achieve data synchronization is to export SQL scripts from one ERP system and then import them into another ERP system. However, the feature of SQL scripts that can be directly edited and viewed will pose a risk of leaking corporate data, resulting in a loss of data security. In addition, this method cannot solve the problem of attachment transmission. Summary of the invention

[0004] The present invention provides a data synchronization method and device in an environment where internal and external networks are physically isolated, for solving at least one of the above-mentioned technical problems.

[0005] The present invention adopts the following technical solutions:

[0006] On the one hand, the present invention provides a data synchronization method in an environment of physical isolation between an internal and external network, the method comprising: generating a data preset table according to data to be synchronized; calling a data preset component to write the data to be synchronized into the data preset table; calling an export component in the data synchronization component to export all the data in the data preset table into a preset file, and storing the preset file after encrypting it according to preset encryption information; migrating the stored encrypted file to a target storage path of a target system, wherein the target system is an ERP system into which the data to be synchronized will be imported; calling an import component in the data synchronization component to scan the target storage path to obtain the encrypted file and then decrypt it, and deploying the decrypted preset file to the target system using its corresponding file deployment tool.

[0007] In a possible implementation of the present invention, calling a data presetting component to write the data to be synchronized into the data presetting table specifically includes: searching the data presetting table to see whether a field corresponding to the data to be synchronized exists; if so, updating the data to be synchronized to the corresponding field of the data presetting table; if not, inserting the data to be synchronized and its corresponding field into the data presetting table.

[0008] In a possible implementation of the present invention, exporting all the data in the data preset table to a preset file specifically includes: obtaining a preset synchronization data configuration rule, the synchronization data configuration rule is used to define a database table corresponding to the data to be synchronized, the database table at least includes a database table to which the data to be synchronized belongs and a database table synchronized corresponding to the data to be synchronized; exporting all the data in the data preset table to a .data file according to the synchronization data configuration rule.

[0009] In a possible implementation of the present invention, the preset file is encrypted and stored according to preset encryption information, specifically including: determining the encryption method and encryption password corresponding to the .data file according to the preset encryption information; after encrypting the .data file using the encryption method and the encryption password, storing the encrypted file in an encrypted storage path specified in the preset encryption information, wherein the encrypted storage path includes at least a local path and a network path.

[0010] In a possible implementation of the present invention, the stored encrypted file is migrated to the target storage path of the target system, specifically including: migrating the encrypted file from the encrypted storage path to a removable disk, the migration method including at least copying and cutting; using the removable disk to copy the encrypted file to the target storage path.

[0011] In a possible implementation of the present invention, after the encrypted file is copied to the target storage path, the method further includes: decrypting the encrypted file according to a decryption method corresponding to the encryption method in the preset encryption information to obtain a .data file; and using a .data file deployment tool to directly deploy the .data file to a corresponding database table of the target system.

[0012] In a possible implementation of the present invention, when the data to be synchronized includes attachments, the method further includes: calling an export component in the data synchronization component to download the attachment from the first file server and then export it; encrypting the exported attachment and the preset file together to obtain the encrypted file; after the import component in the data synchronization component decrypts the encrypted file, uploading the decrypted attachment to the second file server, the second file server being the file server corresponding to the target system.

[0013] In a possible implementation of the present invention, after the data to be synchronized is imported into the target system, the method further includes: calling a data post-processing component, writing data processing logic in the data post-processing component, the data processing logic being used to indicate the corresponding processing process of the data to be synchronized in the target system; calling the data processing logic through the RPC interface of the target system to complete the processing process of the data to be synchronized.

[0014] In a possible implementation of the present invention, the method further includes: generating a data synchronization task according to the data to be synchronized; and setting an execution mode of the data synchronization task, wherein the execution mode includes at least scheduled automatic execution and immediate manual execution.

[0015] On the other hand, the present invention also provides a data synchronization device in an environment of physical isolation between an internal and external network, the device comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor so that the at least one processor can execute: generating a data preset table based on the data to be synchronized; calling a data preset component to write the data to be synchronized into the data preset table; calling an export component in the data synchronization component to export all the data in the data preset table into a preset file, and encrypting the preset file according to preset encryption information and storing it; migrating the stored encrypted file to a target storage path of a target system, wherein the target system is an ERP system into which the data to be synchronized will be imported; calling an import component in the data synchronization component to scan the target storage path to obtain the encrypted file and then decrypt it, and deploying the decrypted preset file to the target system using its corresponding file deployment tool.

[0016] The present invention provides a data synchronization method and device in an environment where the internal and external networks are physically isolated, which has the following beneficial effects:

[0017] The present invention can synchronize certain fields in the database table that need to be exported by constructing a data preset table, and then the export component exports all the data in the data preset table to generate an encrypted file. Since the network between the intranet system and the extranet system is not interoperable, the encrypted file is first migrated to a mobile disk, and then the mobile disk is used to copy the encrypted file to the target system, and the encrypted file is decrypted and deployed by the import component to complete the data synchronization work. In this process, the data synchronization in the network physical isolation environment is achieved through the mutual cooperation of the export component and the import component, and the data is transmitted in the form of an encrypted file during the synchronization process, which also ensures the security of the data and avoids the risk of data leakage. At the same time, the data synchronization method in the present invention also supports the synchronization of attachments, solves the problem that attachments cannot be synchronized in the existing data synchronization scheme, and after the data to be synchronized is imported into the target system, the data post-processing component can also be used to perform secondary processing on the data, so that the synchronized data can better meet the data usage requirements of the target system and improve the availability of the synchronized data. Finally, the data synchronization method of the present invention can realize a two-way data synchronization process, that is, the data of the same table can be synchronized from the intranet system to the external network system, and from the external network system back to the intranet system, and the fields of two-way synchronization can also be set separately. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0019] Figure 1 A flow chart of a data synchronization method in an environment of physical isolation of internal and external networks provided by the present invention;

[0020] Figure 2 A diagram of a data synchronization process in an application scenario provided by the present invention;

[0021] Figure 3 A structural schematic diagram of a data synchronization device in an environment of physical isolation of an internal and external network provided by the present invention. DETAILED DESCRIPTION

[0022] In order to enable those skilled in the art to better understand the technical solutions in the present invention, the technical solutions in the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0023] The data synchronization method provided by the present invention can realize data synchronization between two ERP systems in an environment of physical network isolation by exporting data to an intermediate medium and then importing it into the other party's target system. It can effectively support data synchronization when two systems of ERP software / system are deployed in enterprise applications and the network is isolated.

[0024] The method of the present invention is described in detail below with reference to the accompanying drawings.

[0025] Figure 1 The present invention provides a data synchronization method flow chart in an environment where the internal and external networks are physically isolated. Figure 1 As shown, the data synchronization method in the present invention at least includes the following execution steps:

[0026] Step 101: Generate a data preset table according to the data to be synchronized.

[0027] The amount of data in the business table of an enterprise ERP system is generally very large, because new documents are constantly added with the date. If a large amount of data is exported in a scheduled task, it may affect the normal business operations of users. In addition, the data fields to be exported may also be different from the business table fields. For example, there is only a "material ID" field but no "material name" field in the business table, but there is a "material name" field in the target table to be imported, which requires that the "material name" field be exported together when exporting. For this reason, the present invention designs a "data preset table" for each type of data to be exported. All fields in the "data preset table" need to be exported, and it is even possible that they may be different from the source business table.

[0028] Therefore, when the data synchronization method in the present invention is executed, the data preset table is first generated according to the data to be synchronized. The data to be synchronized here refers to the data that has changed in the ERP system that needs to export data, and the changed data needs to be synchronized with the data of another ERP system. The generated data preset table includes at least the field name and specific data of the data to be synchronized.

[0029] It should be noted that, for the convenience of description, the ERP system into which the data to be synchronized is imported is described as a target system in the present invention below.

[0030] Step 102: Call the data presetting component to write the data to be synchronized into the data presetting table.

[0031] The data synchronization method proposed in the present invention is realized through the cooperation of various components. The components may include execution programs, and the functions corresponding to the components are realized by running the execution programs. The present invention only uses the functions of the components. The component generation or writing process occurs before the application and can be implemented by technical operation and maintenance personnel. The present invention will not go into details here, that is, it only focuses on the functions realized by the components.

[0032] After generating the data preset table, when it is necessary to synchronize a piece of data in a business table, the first step is to write the piece of data into the data preset table. However, it will be cumbersome if this logic is written for each business form. For this reason, the present invention utilizes a unified data preset component. When data needs to be synchronized, it only needs to call this component to write the data to be synchronized into the data preset table.

[0033] In a possible implementation of the present invention, when writing the data to be synchronized into the data preset table, it is necessary to first search in the data preset table whether the field corresponding to the data already exists in the data preset table. If not, it means that the data preset table does not have this data yet, and the data needs to be inserted into it. If it already exists, it means that the data has not been exported, and the data can be directly updated.

[0034] Step 103: call the export component in the data synchronization component to export all the data in the data preset table to a preset file, and encrypt the preset file according to the preset encryption information before storing it.

[0035] After the data to be synchronized is written into the data preset table, the subsequent data export process and data import process can be executed.

[0036] In a possible implementation of the present invention, the export and import of data, that is, the data synchronization process, needs to be executed according to preset rules. These rules will be configured in advance, that is, the synchronization data configuration rules performed before data synchronization. These rules are used to define the database tables that need to be synchronized, support enabling and disabling records, support modifying export rules, specify the target library type when attachment processing is required, support identifying whether the record type is "initiated" or "received", etc.

[0037] After obtaining the above rules, export all the data in the data preset table to the .data file according to the rules.

[0038] Furthermore, in order to ensure that data is not leaked during the synchronization process and improve data security, the present invention, after exporting the data into a .data file, also needs to use pre-configured encryption information to encrypt the .data file, and then store the obtained encrypted file. In an example of the present invention, the aforementioned encryption information at least includes an encryption method, an encryption password, and an encrypted storage path, where the encrypted storage path is the storage path of the encrypted file, which can be a network path or a local path, and the encrypted storage path can be encrypted, or it can only be used to represent that the storage address of the encrypted file is not encrypted.

[0039] Step 104: Migrate the stored encrypted file to the target storage path of the target system.

[0040] The data synchronization method of the present invention is applicable to an environment where the internal and external networks are physically isolated, that is, the system exporting data and the system importing data are isolated from each other by network and cannot communicate or transmit data. Therefore, the stored encrypted files cannot be automatically copied to the target storage path of the target system. At this time, a removable disk is required as an intermediate storage medium to migrate the encrypted files.

[0041] Specifically, firstly, the encrypted file is migrated from the encrypted storage path to the removable disk. The migration method here can be selected by copying, cutting and other file transfer methods. Then, the encrypted file in the removable disk is copied to the target storage path of the target system. Here, only copying is selected to migrate the encrypted file to the target system because it is considered that the encrypted file can be migrated by copying, and the encrypted file can still be retained in the removable disk, so as to achieve the effect of file backup and facilitate subsequent use and viewing.

[0042] Step 105: call the import component in the data synchronization component, scan the target storage path to obtain the encrypted file, perform decryption processing, and deploy the decrypted preset file to the target system using its corresponding file deployment tool.

[0043] The data synchronization component in the present invention includes an export component and an import component. The export component is responsible for exporting the data to be synchronized from the data preset table to the .data file and subsequently generating an encrypted file, while the import component is responsible for importing / deploying the encrypted file to the target system, thereby realizing data synchronization.

[0044] In one possible implementation of the present invention, after completing the migration of the encrypted file to the target storage path, the target storage path is scanned using the import component in the data synchronization component to obtain the encrypted file, and then the encrypted file is decrypted to obtain the .data file. It should be noted that the decryption algorithm used to decrypt the file here is consistent with the encryption algorithm corresponding to the encryption method configured in the encryption information to avoid unsuccessful decryption.

[0045] Furthermore, after decrypting the .data file, the .data file is deployed to the target system using the .data file deployment tool. After the deployment is completed, the synchronization process of the data to be synchronized is completed.

[0046] That is, the core process of the data synchronization solution in the present invention is the data export and import process: 1) When exporting, all the data in the data synchronization preset table is exported to the .data file according to the data synchronization configuration rules. When all the data is exported, the export component will automatically package all the files, encrypt them, and copy them to the specified path, and the export task is completed. 2) When importing, the import component will automatically scan the encrypted files in the specified path and decrypt them. After obtaining the .data file, the corresponding .data file deployment tool will be used to directly complete the data storage and complete the import task.

[0047] In a possible implementation of the present invention, the synchronization of attachments is sometimes involved in the data synchronization process, and the existing synchronization scheme does not support the synchronization of attachments. In order to solve this problem, when there are attachments that need to be synchronized, the export component in the present invention will download the attachments from the first file server while exporting the data from the data preset table to the .data file. After that, the downloaded attachments and the .data file are packaged and encrypted together to generate an encrypted file. The first file server here refers to the file server corresponding to the ERP system that exports the data to be synchronized. After that, after decrypting the attachment, the import component uploads the attachment to the second file server corresponding to the target system, thus completing the synchronization process of the attachment.

[0048] In one possible implementation of the present invention, the data imported into the target system through the data synchronization method is sometimes incomplete because the data comes from another ERP system and some data is not available in the other ERP system. This requires some necessary post-processing operations after the data is imported into the target system. Therefore, the present invention also introduces a "data post-processing component". The data processing logic can be written in this component method. The data processing logic here refers to the processing process that needs to be performed on the data to be synchronized in the target system, and the processing logic of different businesses is called through the RPC interface.

[0049] In a possible implementation of the present invention, the actions to be performed by the data synchronization method of the present invention can be configured as a scheduled task, which is executed regularly every day. Of course, if necessary, it can also be executed immediately by manually clicking a button.

[0050] Furthermore, the data synchronization process in the present invention is also recorded through a synchronization log to facilitate viewing by operation and maintenance personnel.

[0051] Figure 2 The data synchronization process diagram is provided in an application scenario of the present invention. Figure 2 As shown, there is a physical network isolation between the intranet system and the external network system that need to synchronize data, and the two cannot communicate and transmit data directly. Therefore, when synchronizing data, taking the export of the intranet system as an example, the intranet system first exports the data that needs to be synchronized as a file, and then imports it into the intranet system by manual copying. The data export process of the external network system is similar. Therefore, it can be seen that the data synchronization scheme in the present invention supports two-way synchronization, that is, data in the intranet system can be synchronized to the external network system, and data in the external network system can also be synchronized to or synchronized back to the intranet system.

[0052] Based on the same inventive concept, the present invention also provides a data synchronization device in an environment where the internal and external networks are physically isolated, and its structure is as follows: Figure 3 shown.

[0053] Figure 3 The present invention provides a structural diagram of a data synchronization device in a physical isolation environment between the internal and external networks. Figure 3 As shown, the data synchronization device 300 in the physical isolation environment of the internal and external networks in the present invention specifically includes: at least one processor 301; and a memory 303 that is communicatively connected to the at least one processor 301 (connected through a bus 302); wherein the memory 303 stores instructions that can be executed by at least one processor 301, so that the at least one processor 301 can execute a data synchronization method in the physical isolation environment of the internal and external networks as described in the above embodiment.

[0054] In one or more possible implementations of the present invention, the aforementioned processor is used to execute: generate a data preset table according to the data to be synchronized; call the data preset component to write the data to be synchronized into the data preset table; call the export component in the data synchronization component to export all the data in the data preset table into a preset file, and encrypt the preset file according to preset encryption information and store it; migrate the stored encrypted file to the target storage path of the target system, and the target system is the ERP system into which the data to be synchronized will be imported; call the import component in the data synchronization component, scan the target storage path to obtain the encrypted file and then decrypt it, and deploy the decrypted preset file to the target system using its corresponding file deployment tool.

[0055] In summary, the data synchronization method in the present invention 1) provides a data synchronization configuration tool, which can flexibly enable and disable data synchronization rules, and can configure relevant parameters in data synchronization; 2) provides a unified interface for data preset tables, and supports automatic processing of attachments and data fields; 3) provides the function of exporting data and attachments to encrypted files to avoid corporate data leakage and ensure data security; 4) provides a secondary processing function after data import, which can be used to supplement missing information and write back other data.

[0056] Each embodiment of the present invention is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the IoT device and medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.

[0057] The system and medium provided by the present invention correspond one-to-one to the method, and therefore, the system and medium also have similar beneficial technical effects to the corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the system and medium will not be repeated here.

[0058] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0059] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0060] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0061] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0062] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0063] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0064] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0065] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0066] The above are only embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A data synchronization method in an environment where the internal and external networks are physically isolated, characterized in that: The method comprises: Generating a data preset table according to the data to be synchronized specifically includes: searching the data preset table to see whether a field corresponding to the data to be synchronized exists; if so, updating the data to be synchronized to the corresponding field of the data preset table; if not, inserting the data to be synchronized and its corresponding field into the data preset table; Calling the data presetting component to write the data to be synchronized into the data presetting table; Calling the export component in the data synchronization component, exporting all the data in the data preset table to a preset file, and storing the preset file after encryption processing according to the preset encryption information, specifically including: obtaining a preset synchronization data configuration rule, the synchronization data configuration rule is used to define the database table corresponding to the data to be synchronized, the database table at least includes the database table to which the data to be synchronized belongs and the database table synchronized with the data to be synchronized, and exporting all the data in the data preset table to the .data file according to the synchronization data configuration rule; Migrating the stored encrypted file to a target storage path of a target system, where the target system is an ERP system into which the data to be synchronized will be imported; Calling the import component in the data synchronization component, scanning the target storage path to obtain the encrypted file, decrypting it, and deploying the decrypted preset file to the target system using its corresponding file deployment tool; If the data to be synchronized includes an attachment, the export component in the data synchronization component is called to download the attachment from the first file server and then export it, the exported attachment and the preset file are encrypted together to obtain the encrypted file, and after the import component in the data synchronization component decrypts the encrypted file, the decrypted attachment is uploaded to the second file server, and the second file server is the file server corresponding to the target system; Call a data post-processing component, write data processing logic in the data post-processing component, the data processing logic is used to supplement missing information and write back other data, and call the data processing logic through the RPC interface of the target system to complete the supplement of missing information and write back other data for the data to be synchronized.

2. According to claim 1, a data synchronization method in an environment of physical isolation between internal and external networks is characterized in that: The preset file is encrypted and stored according to the preset encryption information, specifically including: Determine the encryption method and encryption password corresponding to the .data file according to the preset encryption information; After the .data file is encrypted using the encryption method and the encryption password, the encrypted file is stored in an encrypted storage path specified in the preset encryption information, and the encrypted storage path includes at least a local path and a network path.

3. According to claim 1, a data synchronization method in an environment of physical isolation between internal and external networks is characterized in that: Migrate the stored encrypted files to the target storage path of the target system, including: Migrating the encrypted file from the encrypted storage path to a removable disk, wherein the migration method includes at least copying and cutting; The encrypted file is copied to the target storage path using the removable disk.

4. According to claim 3, a data synchronization method in an environment of physical isolation between internal and external networks is characterized in that: After copying the encrypted file to the target storage path, the method further includes: Decrypt the encrypted file according to the decryption method corresponding to the encryption method in the preset encryption information to obtain a .data file; The .data file is directly deployed to the corresponding database table of the target system using a .data file deployment tool.

5. The data synchronization method in an environment of physical isolation of internal and external networks according to claim 1, characterized in that: The method further comprises: Generate a data synchronization task according to the data to be synchronized; The execution mode of the data synchronization task is set, and the execution mode at least includes scheduled automatic execution and immediate manual execution.

6. A data synchronization device in an environment where the internal and external networks are physically isolated, characterized in that: The device comprises: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, so that the at least one processor can execute the data synchronization method in an environment of physical isolation between the internal and external networks as described in any one of claims 1 to 5.

Images