A method and system for synchronizing data between different networks based on a dynamic resource pool of an isolation device

Abstract

The present invention relates to a method and system for synchronizing data in different networks based on a dynamic resource pool of an isolation device, the method comprising: constructing an isolation area, storing the required external network data in the isolation area; constructing a mirror operation isolation area in the isolation area, when a user executes a certain intranet program in the intranet: if the intranet program needs to use static data of the external network, read the corresponding static data from the isolation area, cache it in the storage area of ​​the intranet for use by the intranet program; if the intranet program needs to use dynamic data of the external network, read the input data of the corresponding intranet program, transfer the input data to the mirror operation isolation area, execute the intranet program in the mirror operation isolation area, call the required dynamic data in the isolation area, and obtain output data, cache the output data to the storage area of ​​the intranet, and read it into the memory. The present invention can effectively realize a resource scheduling method that converts traditional function and interface interactions into data interactions.

Description

Technical Field

[0001] The present invention relates to fields such as inter-network data operation and scheduling, and in particular to an inter-network data synchronization method and system based on a dynamic resource pool of an isolation device. Background Art

[0002] Due to industry requirements and business needs, the power sector has its own internal private network. A large number of business-related applications and data are deployed on the private network. However, in some application scenarios, it is necessary to use data and functional interfaces from the external network, or to interact with resources from the external network. For example, when predicting and dispatching electricity, it is necessary to read weather forecast information from the meteorological department. Traditionally, the interaction between power intranet and extranet data often uses manual review and directly penetrates the firewall to import it into the intranet (or copy it to the hard disk). This method is time-consuming and labor-intensive and cannot effectively ensure system security. Summary of the invention

[0003] In view of the technical defects and technical drawbacks in the prior art, the embodiments of the present invention provide a method and system for synchronizing data in different networks based on a dynamic resource pool of an isolation device to overcome the above problems or at least partially solve the above problems. The specific scheme is as follows:

[0004] As a first aspect of the present invention, a method for synchronizing data in different networks based on a dynamic resource pool of an isolation device is provided, the method comprising:

[0005] Construct an isolated area and store the required external network data in the isolated area, including static data and dynamic data;

[0006] Build an image in the isolated area and run the isolated area. When a user executes an intranet program in the intranet:

[0007] If the intranet program needs to use static data from the external network, the corresponding static data is read from the isolated area and cached in the storage area of ​​the intranet for use by the intranet program;

[0008] If the intranet program needs to use dynamic data from the external network, the input data of the corresponding intranet program is read, and the input data is transmitted to the mirror running isolation area, the intranet program is executed in the mirror running isolation area, the required dynamic data in the isolation area is called, and the output data is obtained, and the output data is cached in the storage area of ​​the intranet and read into the memory.

[0009] Furthermore, the method further comprises:

[0010] Determine whether the intranet program can be truncated;

[0011] For intranet programs that can be truncated:

[0012] When the intranet program needs to use static data from the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use; when the intranet program needs to use dynamic data from the external network, the intranet program is truncated and the subroutine that needs to use the dynamic data from the external network is obtained, the input data of the corresponding subroutine is read, the input data is transmitted to the mirror running isolation area, the subroutine is executed in the mirror running isolation area, the required dynamic data in the isolation area is called, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory as the output of the interrupted subroutine, and the interrupted subroutine is skipped in the intranet to continue executing the subsequent program;

[0013] For intranet programs that cannot be cut off:

[0014] First, search whether there is a program of the same version in the mirror running isolation area. If not, synchronize the intranet program to the mirror running isolation area, execute the complete program in the mirror running isolation area, copy the required intranet resources directly from the intranet to the isolation area, and retrieve and use the required external network resources directly in the isolation area, and return the program running results to the intranet. This means that when the intranet needs to execute a certain program, it is actually executed in the isolation area mirror, and the same data return result is obtained (similar to execution in the intranet), where the intranet resources include static data and dynamic data.

[0015] Further, judging whether the intranet program can be truncated includes: constructing an intranet program execution task management module to implement full-process operation monitoring of the program's function execution and judging whether the program can be truncated, specifically including:

[0016] Start the task management module. When a program is executed, the memory and CPU usage are monitored through the task management module. When the program needs to call some external dynamic data, the task management module tries to interrupt the execution of the program.

[0017] If the program cannot be interrupted, then it is determined that the program cannot be truncated;

[0018] If the program can be interrupted, try to read the input data, return the output data after running in the mirror running isolation pool, determine that the program can be truncated, and skip the interrupted subroutine.

[0019] Furthermore, the method further comprises: constructing an intranet resource storage structure, specifically comprising:

[0020] In the storage server, create a new first-level folder named 00 to store all library files;

[0021] Under the 00 folder, create different subfolders according to different programming languages;

[0022] For each subfolder, create a new secondary subfolder according to the operating system.

[0023] Furthermore, the method further includes: constructing an optimized storage method of the intranet resource pool, configuring each individual intranet data into two parts: a confirmation table and a base file, specifically including:

[0024] For a file abc.d to be stored in the intranet, search for files with the same name in the entire intranet, and record the retrieved files with the same name in sequence: abc.d-1, abc.d-2, ..., abc.dn; where n means there are n files with the same name in the entire external network;

[0025] Convert abc.d and bc.d-1, abc.d-2, ..., abc.dn (n+1 files in total) into hexadecimal sequences;

[0026] Extract the same part of n+1 files (same position, same hexadecimal code), and record the same part as abc.d-part;

[0027] For n+1 files, let the remaining parts after removing the same parts be recorded as abc.d-part0, abc.part1, abc.part2, ..., abc.partn;

[0028] When abc.d is stored in the intranet resource library, two parts of content will be stored, namely abc.d-part and abc.d-part0, where abc.d-part0 serves as the confirmation table file of the abc.d file; and abc.d-part serves as the base file of the abc.d file.

[0029] Furthermore, the method also includes: constructing an optimized storage method for the external network resource pool, specifically: for external network data resources, first check through the "suspicious file database" of the antivirus software to confirm that the external network data resources do not contain Trojan viruses, and then configure each external network data after the check into two parts: a confirmation table and a base file and store them in an isolated area.

[0030] Furthermore, the method further includes: setting a synchronization mechanism to update the external network data of the isolation zone to the internal network to dynamically update the internal network data resources, specifically:

[0031] For static data: the preset usage frequency is used as the threshold. If the usage frequency of a static data item is greater than the preset usage frequency, the static data will be synchronously stored in the intranet after a preset period.

[0032] For dynamic data: if the operation it performs is a query, retrieval or data calculation operation, the dynamic data will be synchronously stored in the intranet using the static data processing method; if the operation it performs only includes deletion or modification of data, the dynamic data will be synchronously stored in the intranet using the static data processing method, and the previous data will be deleted or modified and saved in the data backup area of ​​the intranet at the same time; if the operation it performs includes data transmission operations, and the transmission path crosses permissions, an early warning message will be issued, and the operation administrator will manually determine whether it can be updated to the intranet, where cross-permission includes transmitting data from the intranet to the external network or sending high-authority data to a low-authority system in the intranet.

[0033] As a second aspect of the present invention, a heterogeneous network data synchronization system based on a dynamic resource pool of an isolation device is provided, the system comprising: an isolation area construction unit and a mirror operation unit;

[0034] The isolation area construction unit is used to construct an isolation area and store the required external network data in the isolation area, including static data and dynamic data;

[0035] The mirror operation unit is used to build a mirror operation isolation area in the isolation area. When a user executes an intranet program in the intranet: if the intranet program needs to use static data from the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use by the intranet program; if the intranet program needs to use dynamic data from the external network, the input data of the corresponding intranet program is read, and the input data is transmitted to the mirror operation isolation area, the intranet program is executed in the mirror operation isolation area, the dynamic data required in the isolation area is called, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory.

[0036] Furthermore, the system further includes a truncation judgment unit, which is used to judge whether the intranet program can be truncated, and the mirror operation unit is specifically used to:

[0037] For intranet programs that can be truncated:

[0038] When the intranet program needs to use static data from the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use; when the intranet program needs to use dynamic data from the external network, the intranet program is truncated and the subroutine that needs to use the dynamic data from the external network is obtained, the input data of the corresponding subroutine is read, the input data is transmitted to the mirror running isolation area, the subroutine is executed in the mirror running isolation area, the required dynamic data in the isolation area is called, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory as the output of the interrupted subroutine, and the interrupted subroutine is skipped in the intranet to continue executing the subsequent program;

[0039] For intranet programs that cannot be cut off:

[0040] First, search whether there is a program of the same version in the mirror running isolation area. If not, synchronize the intranet program to the mirror running isolation area, execute the complete program in the mirror running isolation area, copy the required intranet resources directly from the intranet to the isolation area, and call and use the required external network resources directly in the isolation area, and return the program running result to the intranet, that is, when the intranet needs to execute a certain program, it is actually executed in the isolation area mirror, and the same data return result is obtained (similar to execution in the intranet), wherein the intranet resources include static data and dynamic data;

[0041] The truncation judgment unit implements the full-process operation monitoring of the program's function execution by building a task management module for the execution of the intranet program, and determines whether the program can be truncated, including:

[0042] Start the task management module. When a program is executed, the memory and CPU usage are monitored through the task management module. When the program needs to call some external dynamic data, the task management module tries to interrupt the execution of the program. If the program cannot be interrupted, it is judged that the program cannot be truncated. If the program can be interrupted, it tries to read the input data, returns the output data after running in the image running isolation pool, judges that the program can be truncated, and skips the interrupted subroutine.

[0043] Furthermore, the system also includes an intranet data updating unit, which is used to set a synchronization mechanism to update the external network data of the isolation zone to the intranet to dynamically update the intranet data resources, specifically:

[0044] For static data: the preset usage frequency is used as the threshold. If the usage frequency of a static data item is greater than the preset usage frequency, the static data will be synchronously stored in the intranet after a preset period.

[0045] For dynamic data: if the operation it performs is a query, retrieval or data calculation operation, the dynamic data will be synchronously stored in the intranet using the static data processing method; if the operation it performs only includes deletion or modification of data, the dynamic data will be synchronously stored in the intranet using the static data processing method, and the previous data will be deleted or modified and saved in the data backup area of ​​the intranet at the same time; if the operation it performs includes data transmission operations, and the transmission path crosses permissions, an early warning message will be issued, and the operation administrator will manually determine whether it can be updated to the intranet, where cross-permission includes transmitting data from the intranet to the external network or sending high-authority data to a low-authority system in the intranet.

[0046] The present invention has the following beneficial effects:

[0047] 1. The present invention can effectively realize a resource scheduling method that converts traditional function and interface interactions into data interactions, and can effectively improve the overall security of the system while ensuring program execution efficiency.

[0048] 2. The present invention adopts an incremental storage method for document file data that is easy to be repeatedly stored in large quantities, thereby achieving optimized storage.

[0049] 3. The present invention adopts a storage method of "confirmation table" + "base file" for files with the same name, which can achieve optimized storage on the basis of effectively distinguishing file differences.

[0050] 4. The present invention proposes the concept of "truncible programs" and divides the executing programs into two categories, so as to more accurately target the program execution process and realize the unified scheduling of internal and external network resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] Figure 1 A flow chart of a method for synchronizing data in different networks based on a dynamic resource pool of an isolation device provided by an embodiment of the present invention;

[0052] Figure 2 A structural diagram of a heterogeneous network data synchronization system based on a dynamic resource pool of an isolation device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0053] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0054] like Figure 1 As shown, a method for synchronizing data in different networks based on a dynamic resource pool of an isolation device is provided in an embodiment of the present invention, and the method includes:

[0055] Construct an isolated area and store the required external network data in the isolated area, including static data and dynamic data, where static data is defined as: non-executable documents, pictures and other types of data; dynamic data is defined as: executable programs, library files and other types of data;

[0056] Build an image in the isolated area and run the isolated area. When a user executes an intranet program in the intranet:

[0057] If the intranet program needs to use static data from the external network, the corresponding static data is read from the isolated area and cached in the storage area of ​​the intranet for use by the intranet program;

[0058] If the intranet program needs to use dynamic data from the external network, the input data of the corresponding intranet program is read, and the input data is transmitted to the mirror running isolation area, the intranet program is executed in the mirror running isolation area, and the required dynamic data in the isolation area is called during the execution of the intranet program. The output data is obtained, and the output data is cached in the storage area of ​​the intranet and read into the memory.

[0059] The present invention can effectively realize a resource scheduling method that converts traditional functions and interface interactions into data interactions by constructing isolation areas and mirror operation isolation areas, and can effectively improve the overall security of the system while ensuring program execution efficiency.

[0060] In an optional embodiment, for the executed intranet program, the intranet program is decomposed into various small-grained sub-programs for execution. If a sub-program of the intranet program needs to use static data of the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use by the corresponding sub-program; if a sub-program of the intranet program needs to use dynamic data of the external network, the input data of the corresponding intranet sub-program is read, and the input data is transmitted to the mirror running isolation area, and the sub-program is executed in the mirror running isolation area. During the execution of the sub-program, the required dynamic data in the isolation area is called, and the output data is obtained, and the output data is cached in the storage area of ​​the intranet and read into the memory. At the same time, the interrupted sub-program is skipped in the intranet to continue executing the subsequent program.

[0061] Among them, since some system applications of the power service center have high requirements for computing power, it is necessary to network multiple independent servers;

[0062] In the embodiment of the present invention, 10 networked servers are used, of which 1 is used for task distribution, 1 is used for data exchange, 1 is used for user data cache, and the remaining 7 are used for high-performance computing. When a user executes a program in the intranet, the intranet program is decomposed into small-grained subroutine execution steps through the task distribution server. If a step needs to call external network dynamic data, it is executed in the mirror operation isolation area and fed back to the intranet in the form of output result data. Therefore, when the user executes a certain operation in the intranet program, there is no need to exchange the internal and external network programs (interface call), but only a simple static data exchange is required to ensure the security of the intranet.

[0063] Preferably, the method further includes: constructing a task management module for executing intranet programs, realizing full-process operation monitoring of a function of a program, and determining whether the program can be truncated, specifically including:

[0064] A. First, the task management module needs to run in memory for a long time and in real time, and monitor the memory and CPU usage when a certain program is executed;

[0065] B. When the program needs to call some external dynamic data, the task management module tries to interrupt the execution of the program;

[0066] C. If the program cannot be interrupted, then it is concluded that the program cannot be truncated;

[0067] D. If the program is interruptible, further attempt to read input data, return output data after running in the mirrored run isolation pool, and skip the corresponding interrupt subroutine;

[0068] If step d) is executable, it is concluded that the program can be truncated; otherwise, the program cannot be truncated.

[0069] In an optional embodiment, for a truncateable intranet program:

[0070] When the intranet program needs to use static data from the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use; when the intranet program needs to use dynamic data from the external network, the intranet program is truncated and the subroutine that needs to use the dynamic data from the external network is obtained, the input data of the corresponding subroutine is read, the input data is transmitted to the mirror running isolation area, the subroutine is executed in the mirror running isolation area, and the required dynamic data in the isolation area is called during the execution of the subroutine, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory as the output of the interrupted subroutine, and the interrupted subroutine is skipped in the intranet to continue executing the subsequent program;

[0071] In an optional embodiment, for an intranet program that cannot be intercepted:

[0072] First, search whether there is a program of the same version in the mirror running isolation area. If not, synchronize the intranet program to the mirror running isolation area, execute the complete program in the mirror running isolation area, copy the required intranet resources directly from the intranet to the isolation area, and retrieve and use the required external network resources directly in the isolation area during program execution. Finally, return the program running result to the intranet, that is, when the intranet needs to execute a certain program, it is actually executed in the isolation area mirror, and the same data return result is obtained (similar to execution in the intranet), wherein the intranet resources include static data and dynamic data.

[0073] Preferably, the method further comprises: constructing an intranet resource storage structure, specifically comprising:

[0074] In the storage server, create a new first-level folder named 00 to store all library files;

[0075] Under the 00 folder, create different subfolders according to different programming languages, such as 01 for C language, 02 for C++, 03 for C#, etc.

[0076] For each subfolder, create a second-level subfolder according to the different operating systems. The operating system needs to be specific to different versions, such as: win 7 beta1 home edition, etc., and the name is also named in 2-digit decimal.

[0077] The present invention realizes three-level folder management by constructing a first-level folder, a subfolder and a second-level subfolder, and stores various corresponding library files through the three-level folder, such as the temp.dll library file applicable to the win 10 beta 2 ultimate version, whose storage path is 00 01 12, wherein 00 represents the first-level folder (first-level directory) of the storage library file, 01 represents the library file is in C language, 12 represents the corresponding operating system version is win 10 beta 2 ultimate version, and constructs an intranet resource storage structure, and each library file has a unique storage path represented by a 6-digit decimal number; further, since there may be library files with the same name under the same third-level folder, it is necessary to add one digit to distinguish them, and finally each library file will be indexed by a 7-digit decimal number.

[0078] Preferably, the method further includes constructing an optimized storage method of the intranet resource pool, configuring each individual intranet data into two parts: a confirmation table and a base file, specifically including:

[0079] For a file abc.d to be stored in the intranet, search for files with the same name in the entire intranet, and record the retrieved files with the same name in sequence: abc.d-1, abc.d-2, ..., abc.dn; where n means there are n files with the same name in the entire external network;

[0080] Convert abc.d and bc.d-1, abc.d-2, ..., abc.dn (n+1 files in total) into hexadecimal sequences;

[0081] Extract the same part of n+1 files (same position, same hexadecimal code), and record the same part as abc.d-part;

[0082] For n+1 files, let the remaining parts after removing the same parts be recorded as abc.d-part0, abc.part1, abc.part2, ..., abc.partn;

[0083] When abc.d is stored in the intranet resource library, two parts of content will be stored, namely abc.d-part and abc.d-part0, where abc.d-part0 serves as the confirmation table file of the abc.d file; and abc.d-part serves as the base file of the abc.d file.

[0084] Preferably, the method further includes constructing a storage structure of other files and composite resources, wherein other files are defined as: other files remaining after removing the dynamic and static resources, and a composite resource is a complete functional module composed of multiple files, and the storage method thereof is:

[0085] Take "Electric Power Pipeline System V1.0" as an example, which contains multiple subfolders and multiple files. Create a new "Electric Power Pipeline System V1.0" directory in the storage server;

[0086] In the "Electric Power Pipeline System V1.0" directory, the hierarchical structure and names of subfolders and other files remain unchanged and are stored in the "Electric Power Pipeline System V1.0" folder;

[0087] In the "Electric Power Pipeline System V1.0" folder, create a new index file to store the storage path of dynamic data and static data resources, as well as the path where the original file "Electric Power Pipeline System V1.0" is located;

[0088] When the resource pool needs to be released (for downloading and use by intranet personnel), the index file will be read first, and the original file package will be "joined" into a complete folder before further operation and use.

[0089] In an optional embodiment, by constructing an isolation area, the coordinated operation of internal and external network data is achieved, and the specific implementation steps are:

[0090] First, when a user performs an operation, sort out the data resources that he needs to use;

[0091] For the data resources needed, first perform an intranet search to check whether they exist in the intranet resource pool. The search method is:

[0092] In the intranet resource pool storage structure, search by file name to see if there is data resource that needs to be used;

[0093] If there is no data resource with the same name in the intranet resource pool, it is concluded that the data does not exist in the intranet;

[0094] If there is a data resource with the same name in the intranet resource pool, extract the data file in the intranet, find its "confirmation table" file, create a fixed-length field (such as 160 bytes) at the beginning of the confirmation table file to represent the user operation information, and number all possible user operations. For example, if "query power outlets" is numbered CD (hexadecimal), the first 4 bytes are CD, indicating that the data is associated with the user's "query power outlets" operation;

[0095] For the fixed-length field at the beginning (160 bytes), a total of 40 data-related operations can be stored;

[0096] When the user needs to combine the "confirmation table" file and the "base file" into a complete file, the first 160 bytes (fixed length field) of the "confirmation table" file must be removed first;

[0097] If there is no data resource with the same name in the intranet resource pool, you need to search on the external network, identify it and store it in the intranet after searching. The implementation method is as follows:

[0098] First, set up an isolation area for subsequent storage of external network data resources that will be used;

[0099] For external network data resources, first check the "suspicious file database" of the anti-virus software to confirm whether the file is a Trojan horse, virus or other harmful resource;

[0100] For the external network data resources that have passed the investigation, assuming the name is xy, search for files with the same name and type in the entire network;

[0101] Based on the documents with the same name and type found, xy is divided into two parts, the base file xy-part and the confirmation table xy-part0, in the same way as the intranet data, and stored in the isolated area;

[0102] When a user needs to use internal and external network data for a certain operation, a combination of direct access from the internal network and access from the isolation area will be adopted.

[0103] Preferably, the method further comprises: setting a synchronization mechanism to update the external network data of the isolation zone to the internal network to dynamically update the internal network data resources, specifically:

[0104] For static data, the usage frequency is used as the threshold. If the usage frequency of a static data item is greater than once a day, the data will be synchronously stored in the intranet after a certain period (such as one month).

[0105] For dynamic data, if all operations performed are query and retrieval, the processing method is the same as "static data";

[0106] For dynamic data, if the operations performed on it only include data calculation operations, the processing method is the same as "static data";

[0107] For dynamic data, if the operations performed only include deletion and modification of data, the processing method is the same as that of "static data". At the same time, the data before deletion and modification will be saved in the data backup area of ​​the intranet.

[0108] For dynamic data, if the operations performed include data transmission operations, and the transmission path is "cross-authority": such as transmitting data from the intranet to the extranet, or sending high-authority data to low-authority systems (users) in the intranet, an early warning message will be issued, and the operation administrator will manually determine whether it can be updated to the intranet.

[0109] like Figure 2 As shown, as another embodiment of the present invention, a heterogeneous network data synchronization system based on a dynamic resource pool of an isolation device is also provided, the system comprising: an isolation area construction unit and a mirror operation unit;

[0110] The isolation area construction unit is used to construct an isolation area and store the required external network data in the isolation area, including static data and dynamic data;

[0111] The mirror operation unit is used to build a mirror operation isolation area in the isolation area. When a user executes an intranet program in the intranet: if the intranet program needs to use static data from the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use by the intranet program; if the intranet program needs to use dynamic data from the external network, the input data of the corresponding intranet program is read, and the input data is transmitted to the mirror operation isolation area, the intranet program is executed in the mirror operation isolation area, the dynamic data required in the isolation area is called, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory.

[0112] Preferably, the system further comprises a truncation judgment unit, which is used to judge whether the intranet program can be truncated, and the mirror operation unit is specifically used to:

[0113] For intranet programs that can be truncated:

[0114] When the intranet program needs to use static data from the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use; when the intranet program needs to use dynamic data from the external network, the intranet program is truncated and the subroutine that needs to use the dynamic data from the external network is obtained, the input data of the corresponding subroutine is read, the input data is transmitted to the mirror running isolation area, the subroutine is executed in the mirror running isolation area, the required dynamic data in the isolation area is called, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory as the output of the interrupted subroutine, and the interrupted subroutine is skipped in the intranet to continue executing the subsequent program;

[0115] For intranet programs that cannot be cut off:

[0116] First, search whether there is a program of the same version in the mirror running isolation area. If not, synchronize the intranet program to the mirror running isolation area, execute the complete program in the mirror running isolation area, copy the required intranet resources directly from the intranet to the isolation area, and call and use the required external network resources directly in the isolation area, and return the program running result to the intranet, that is, when the intranet needs to execute a certain program, it is actually executed in the isolation area mirror, and the same data return result is obtained (similar to execution in the intranet), wherein the intranet resources include static data and dynamic data;

[0117] The truncation judgment unit implements the full-process operation monitoring of the program's function execution by building a task management module for the execution of the intranet program, and determines whether the program can be truncated, including:

[0118] Start the task management module. When a program is executed, the memory and CPU usage are monitored through the task management module. When the program needs to call some external dynamic data, the task management module tries to interrupt the execution of the program. If the program cannot be interrupted, it is judged that the program cannot be truncated. If the program can be interrupted, it tries to read the input data, returns the output data after running in the image running isolation pool, judges that the program can be truncated, and skips the interrupted subroutine.

[0119] Preferably, the system further comprises an intranet data updating unit, which is used to set a synchronization mechanism to update the external network data of the isolation zone to the intranet so as to dynamically update the intranet data resources, specifically:

[0120] For static data: the preset usage frequency is used as the threshold. If the usage frequency of a static data item is greater than the preset usage frequency, the static data will be synchronously stored in the intranet after a preset period.

[0121] For dynamic data: if the operation it performs is a query, retrieval or data calculation operation, the dynamic data will be synchronously stored in the intranet using the static data processing method; if the operation it performs only includes deletion or modification of data, the dynamic data will be synchronously stored in the intranet using the static data processing method, and the previous data will be deleted or modified and saved in the data backup area of ​​the intranet at the same time; if the operation it performs includes data transmission operations, and the transmission path crosses permissions, an early warning message will be issued, and the operation administrator will manually determine whether it can be updated to the intranet, where cross-permission includes transmitting data from the intranet to the external network or sending high-authority data to a low-authority system in the intranet.

[0122] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for synchronizing data in different networks based on a dynamic resource pool of an isolation device, characterized in that: The method comprises: Construct an isolated area and store the required external network data in the isolated area, including static data and dynamic data; Build an image in the isolated area and run the isolated area. When a user executes an intranet program in the intranet: If the intranet program needs to use static data from the external network, the corresponding static data is read from the isolated area and cached in the storage area of ​​the intranet for use by the intranet program; If the intranet program needs to use dynamic data from the external network, the input data of the corresponding intranet program is read, the input data is transmitted to the mirror operation isolation area, the intranet program is executed in the mirror operation isolation area, the dynamic data required in the isolation area is called, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory; Wherein, the method further comprises: Determine whether the intranet program can be truncated; For intranet programs that can be truncated: When the intranet program needs to use static data from the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use; when the intranet program needs to use dynamic data from the external network, the intranet program is truncated and the subroutine that needs to use the dynamic data from the external network is obtained, the input data of the corresponding subroutine is read, the input data is transmitted to the mirror running isolation area, the subroutine is executed in the mirror running isolation area, the required dynamic data in the isolation area is called, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory as the output of the interrupted subroutine, and the interrupted subroutine is skipped in the intranet to continue executing the subsequent program; For intranet programs that cannot be cut off: First, search whether there is the same version of the program in the mirror running isolation area. If not, synchronize the intranet program to the mirror running isolation area, execute the complete program in the mirror running isolation area, copy the required intranet resources directly from the intranet to the isolation area, and call and use the required external network resources directly in the isolation area, and return the program running results to the intranet, where the intranet resources include static data and dynamic data.

2. The method for synchronizing data in different networks based on a dynamic resource pool of an isolation device according to claim 1, characterized in that: Determining whether an intranet program can be truncated includes: building an intranet program execution task management module to implement full-process operation monitoring of the program's function execution and determine whether the program can be truncated, specifically including: Start the task management module. When a program is executed, the memory and CPU usage are monitored through the task management module. When the program needs to call some external dynamic data, the task management module tries to interrupt the execution of the program. If the program cannot be interrupted, then it is determined that the program cannot be truncated; If the program can be interrupted, try to read the input data, return the output data after running in the mirror running isolation pool, determine that the program can be truncated, and skip the interrupted subroutine.

3. The method for synchronizing data in different networks based on a dynamic resource pool of an isolation device according to claim 1, characterized in that: The method further includes: constructing an intranet resource storage structure, specifically including: In the storage server, create a new first-level folder named 00 to store all library files; Under the 00 folder, create different subfolders according to different programming languages; For each subfolder, create a new secondary subfolder according to the operating system.

4. The method for synchronizing data in different networks based on a dynamic resource pool of an isolation device according to claim 1, characterized in that: The method further includes: constructing an optimized storage method for the intranet resource pool, configuring each individual intranet data into two parts: a confirmation table and a base file, specifically including: For a file abc.d to be stored in the intranet, search for files with the same name in the entire intranet, and record the retrieved files with the same name in sequence: abc.d-1, abc.d-2, ..., abc.dn; where n means there are n files with the same name in the entire external network; Convert abc.d and bc.d-1, abc.d-2, ..., abc.dn (n+1 files in total) into hexadecimal sequences; Extract the same part of n+1 files, and record the same part as abc.d-part; For n+1 files, let the remaining parts after removing the same parts be recorded as abc.d-part0, abc.part1, abc.part2, ..., abc.partn; When abc.d is stored in the intranet resource library, two parts of content will be stored, namely abc.d-part and abc.d-part0, where abc.d-part0 serves as the confirmation table file of the abc.d file; and abc.d-part serves as the base file of the abc.d file.

5. The method for synchronizing data in different networks based on a dynamic resource pool of an isolation device according to claim 4, characterized in that: The method also includes: constructing an optimized storage method for the external network resource pool, specifically: for external network data resources, firstly check through the suspicious file database of the antivirus software to confirm that the external network data resources do not have Trojan viruses, and then configure each external network data after the check into two parts: a confirmation table and a base file and store them in an isolated area.

6. The method for synchronizing data in different networks based on a dynamic resource pool of an isolation device according to claim 1, characterized in that: The method further includes: setting a synchronization mechanism to update the external network data of the isolation zone to the internal network to dynamically update the internal network data resources, specifically: For static data: the preset usage frequency is used as the threshold. If the usage frequency of a static data item is greater than the preset usage frequency, the static data will be synchronously stored in the intranet after a preset period. For dynamic data: if the operation it performs is a query, retrieval or data calculation operation, the dynamic data will be synchronously stored in the intranet using the static data processing method; if the operation it performs only includes deletion or modification of data, the dynamic data will be synchronously stored in the intranet using the static data processing method, and the previous data will be deleted or modified and saved in the data backup area of ​​the intranet at the same time; if the operation it performs includes data transmission operations, and the transmission path crosses permissions, an early warning message will be issued, and the operation administrator will manually determine whether it can be updated to the intranet, where cross-permission includes transmitting data from the intranet to the external network or sending high-authority data to a low-authority system in the intranet.

7. A data synchronization system for different networks based on a dynamic resource pool of an isolation device, characterized in that: The system comprises: an isolation area construction unit and a mirror operation unit; The isolation area construction unit is used to construct an isolation area and store the required external network data in the isolation area, including static data and dynamic data; The mirror operation unit is used to construct a mirror operation isolation area in the isolation area. When a user executes an intranet program in the intranet: if the intranet program needs to use static data from the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use by the intranet program; if the intranet program needs to use dynamic data from the external network, the input data of the corresponding intranet program is read, the input data is transmitted to the mirror operation isolation area, the intranet program is executed in the mirror operation isolation area, the dynamic data required in the isolation area is called, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory; The system further includes a truncation judgment unit, which is used to judge whether the intranet program can be truncated, and the mirror operation unit is specifically used to: For intranet programs that can be truncated: When the intranet program needs to use static data from the external network, the corresponding static data is read from the isolation area and cached in the storage area of ​​the intranet for use; when the intranet program needs to use dynamic data from the external network, the intranet program is truncated and the subroutine that needs to use the dynamic data from the external network is obtained, the input data of the corresponding subroutine is read, the input data is transmitted to the mirror running isolation area, the subroutine is executed in the mirror running isolation area, the required dynamic data in the isolation area is called, and the output data is obtained, the output data is cached in the storage area of ​​the intranet, and read into the memory as the output of the interrupted subroutine, and the interrupted subroutine is skipped in the intranet to continue executing the subsequent program; For intranet programs that cannot be cut off: First, search whether there is a program of the same version in the mirror running isolation area. If not, synchronize the intranet program to the mirror running isolation area, execute the complete program in the mirror running isolation area, copy the required intranet resources directly from the intranet to the isolation area, and call and use the required external network resources directly in the isolation area, and return the program running results to the intranet, wherein the intranet resources include static data and dynamic data; The truncation judgment unit implements the full-process operation monitoring of the program's function execution by building a task management module for the execution of the intranet program, and determines whether the program can be truncated, including: Start the task management module. When a program is executed, the memory and CPU usage are monitored through the task management module. When the program needs to call some external dynamic data, the task management module tries to interrupt the execution of the program. If the program cannot be interrupted, it is judged that the program cannot be truncated. If the program can be interrupted, it tries to read the input data, returns the output data after running in the image running isolation pool, judges that the program can be truncated, and skips the interrupted subroutine.

8. The system for synchronizing data in different networks based on a dynamic resource pool of an isolation device according to claim 7, characterized in that The system also includes an intranet data update unit, which is used to set a synchronization mechanism to update the external network data of the isolation zone to the intranet to dynamically update the intranet data resources, specifically: For static data: the preset usage frequency is used as the threshold. If the usage frequency of a static data item is greater than the preset usage frequency, the static data will be synchronously stored in the intranet after a preset period. For dynamic data: if the operation performed is a query, retrieval or data calculation operation, the dynamic data is synchronously stored in the intranet using the static data processing method; If the operations performed only include deletion or modification of data, the dynamic data will be synchronously stored in the intranet using the static data processing method, and the data before deletion or modification will be stored in the data backup area of ​​the intranet at the same time; If the operations it performs include data transmission operations and the transmission path crosses permissions, an early warning message will be issued and the operation administrator will manually determine whether it can be updated to the intranet. Crossing permissions includes transmitting data from the intranet to the extranet or sending high-authority data to a low-authority system in the intranet.

Images