File transmission method and device, equipment, medium and program product

Abstract

The invention provides a file transmission method which can be applied to the technical field of information security. The method is applied to a file sender in a scene based on one-way gatekeeper transmission, and comprises the following steps: in a first period, creating N to-be-sent transmission files and registering a first period response list of the N transmission files; sending the N transmission files and the first periodic response list to a file receiver; a first periodic response receipt from the file receiver is received, and K received transmission files are registered in the first periodic response receipt; checking based on the first periodic response list and the first periodic response receipt to obtain L unreceived transmission files; and in a second period, P transmission files to be sent are created, a second period response list of the P transmission files is registered, and the P transmission files comprise L transmission files which are not received. The invention further provides a file transmission device, equipment, a medium and a program product.

Description

Technical Field

[0001] The present disclosure relates to the field of information security technology, and in particular to a file transmission method, device, equipment, medium and program product. Background Art

[0002] In the context of digital construction, digital transformation is increasingly valued in various fields, and system construction has entered a stage of rapid development. For customers who have high confidentiality requirements for data, data security is usually ensured through network isolation, such as setting up intranet and extranet to achieve data isolation. In this cross-network situation, how to ensure the safe, efficient and reliable transmission of files in the financial system has become a technical problem that needs to be solved urgently.

[0003] In the financial industry, in order to ensure the secure transmission and isolation of financial data, one-way network gates are often used to isolate internal and external networks and achieve secure file transmission. Due to the one-way transmission and non-protocol transmission characteristics of one-way network gates, once packet loss or other file transmission failures occur during the transmission of files across network segments, the sender of the file is often in a state of not knowing the file transmission result, that is, the sender of the file often does not know whether the receiver has received the file, which makes the file transmission unreliable in the one-way network gate scenario. Summary of the invention

[0004] In view of the above problems, the present disclosure provides a file transmission method, apparatus, device, medium and program product for improving the reliability of file transmission.

[0005] According to a first aspect of the present disclosure, a file transmission method is provided, which is applied to a file sender in a scenario based on unidirectional network gate transmission, and the method comprises: in a first cycle, creating N transmission files to be sent and a first cycle response list for registering the N transmission files, wherein N is a positive integer; sending the N transmission files and the first cycle response list to a file receiver; receiving a first cycle response receipt from the file receiver, wherein the first cycle response receipt registers K received transmission files, and K is a positive integer less than or equal to N; performing a check based on the first cycle response list and the first cycle response receipt to obtain L unreceived transmission files, and L is a non-negative integer; and in a second cycle, creating P transmission files to be sent and a second cycle response list for registering the P transmission files, wherein the P transmission files include the L unreceived transmission files, and P is a positive integer greater than or equal to L.

[0006] According to an embodiment of the present disclosure, the receiving of a first cycle response receipt from a file receiver includes: receiving a first cycle response receipt from the file receiver within the first cycle; or receiving multiple first cycle response receipts from the file receiver within the first cycle.

[0007] According to an embodiment of the present disclosure, the verification is performed based on the first cycle response list and the first cycle response receipt to obtain L unreceived transmission files, including: within the first cycle, when multiple first cycle response receipts are received from the file receiver, the L unreceived transmission files are calculated based on the collection of received transmission files in the multiple first cycle response receipts.

[0008] According to an embodiment of the present disclosure, the creation of N transmission files to be sent and the registration of the first cycle response list of the N transmission files include: obtaining plaintext files of the N transmission files to be sent; forming a plaintext file of the first cycle response list based on the plaintext files of the N transmission files; and performing encryption processing on the plaintext files of the N transmission files and the plaintext files of the first cycle response list to obtain the ciphertext of the N transmission files and the ciphertext of the first cycle response list.

[0009] According to an embodiment of the present disclosure, the file sender has its own first public key and first private key pre-stored therein, and the file sender also has a second public key from the file receiver pre-stored therein, and the encryption processing is performed on the plaintext files of the N transmission files and the plaintext files of the first cycle response list to obtain the ciphertexts of the N transmission files and the ciphertexts of the first cycle response list, including: encrypting the plaintext files of the N transmission files and the plaintext files of the first cycle response list based on the second public key to obtain the ciphertext files of the N transmission files and the ciphertext files of the first cycle response list; and signing the plaintext files of the N transmission files and the plaintext files of the first cycle response list based on the first private key to obtain the signature files of the N transmission files and the signature files of the first cycle response list.

[0010] According to an embodiment of the present disclosure, the receiving of the first cycle response receipt from the file recipient includes: receiving the ciphertext of the first cycle response receipt from the file recipient, the ciphertext of the first cycle response receipt including: the ciphertext file of the first cycle response receipt and the signature file of the first cycle response receipt; wherein, after receiving the first cycle response receipt from the file recipient, the method further includes: decrypting the ciphertext file of the first cycle response receipt based on the first private key to obtain the plaintext file of the first cycle response receipt; and verifying the signature file of the first cycle response receipt based on the second public key.

[0011] According to a second aspect of the present disclosure, a file transfer method is provided, which is applied to a file receiver in a scenario based on unidirectional network gate transmission, and the method comprises: in a first cycle, receiving K transmission files and a first cycle response list from a file sender, wherein K is a positive integer; forming a first cycle response receipt based on the K transmission files and the first cycle response list, wherein the first cycle response receipt registers K received transmission files, and K is a positive integer less than or equal to N; returning the first cycle response receipt to the file sender; and in a second cycle, creating Q transmission files to be sent and a second cycle response list registering P transmission files, wherein the P transmission files include L transmission files that were not received in the first cycle, Q, L, and P are positive integers, and P is greater than or equal to L or Q.

[0012] According to an embodiment of the present disclosure, after returning the first cycle response receipt to the file sender, it also includes: receiving M transmission files from the file sender within the first cycle, where M is a positive integer; updating the first cycle response receipt based on the M transmission files; and resending the first cycle response receipt.

[0013] According to an embodiment of the present disclosure, the receiving of K transmission files and a first-cycle response list from a file sender includes: receiving ciphertexts of K transmission files and a ciphertext of a first-cycle response list from the file sender, wherein the ciphertexts of the K transmission files include: ciphertext files of the K transmission files and signature files of the K transmission files, and the ciphertext of the first-cycle response list includes: ciphertext files of the first-cycle response list and signature files of the first-cycle response list; wherein a second public key and a second private key are pre-stored in the file receiver, and a first public key from the file sender is also pre-stored in the file receiver, and after the receiving of the K transmission files and the first-cycle response list from the file sender, the receiving of the K transmission files and the first-cycle response list also includes: decrypting the ciphertext files of the K transmission files and the ciphertext files of the first-cycle response list based on the second private key to obtain plaintext files of the K transmission files and the plaintext file of the first-cycle response list; and verifying the signature files of the K transmission files and the signature files of the first-cycle response list based on the first public key.

[0014] According to an embodiment of the present disclosure, forming a first cycle response receipt based on the K transmission files and the first cycle response list includes: forming a plaintext file of the first cycle response receipt based on the K transmission files and the first cycle response list; and performing encryption processing on the plaintext file of the first cycle response receipt to obtain a ciphertext of the first cycle response receipt.

[0015] According to an embodiment of the present disclosure, the encryption of the plaintext file of the first-cycle response receipt to obtain the ciphertext of the first-cycle response receipt includes: encrypting the plaintext file of the first-cycle response receipt based on the first public key to obtain the ciphertext file of the first-cycle response receipt; and signing the plaintext file of the first-cycle response receipt based on the second private key to obtain the signature file of the first-cycle response receipt.

[0016] The third aspect of the present disclosure provides a file transmission device, which is configured in a file sender in a scenario based on unidirectional network gate transmission, and the device includes: a transmission file creation module, which is used to create N transmission files to be sent and a first cycle response list for registering the N transmission files in a first cycle, wherein N is a positive integer; a transmission file sending module, which is used to send the N transmission files and the first cycle response list to the file receiver; a response receipt receiving module, which is used to receive a first cycle response receipt from the file receiver, wherein K received transmission files are registered in the first cycle response receipt, and K is a positive integer less than or equal to N; a response receipt verification module, which is used to perform verification based on the first cycle response list and the first cycle response receipt to obtain L unreceived transmission files, and L is a non-negative integer; and a transmission file creation module, which is also used to create P transmission files to be sent and a second cycle response list for registering the P transmission files in a second cycle, wherein the P transmission files include the L unreceived transmission files, and P is a positive integer greater than or equal to L.

[0017] According to an embodiment of the present disclosure, the receiving of a first-cycle response receipt from a file recipient includes: a response receipt receiving module, which is specifically used to receive a first-cycle response receipt from a file recipient within the first cycle; or to receive multiple first-cycle response receipts from the file recipient within the first cycle.

[0018] According to an embodiment of the present disclosure, the response receipt verification module is specifically used to calculate the L unreceived transmission files based on the collection of received transmission files in the multiple first cycle response receipts when multiple first cycle response receipts are received from the file recipient within the first cycle.

[0019] According to an embodiment of the present disclosure, the transmission file creation module includes: a first plaintext acquisition unit and a first encryption unit, the first plaintext acquisition unit is used to obtain the plaintext files of N transmission files to be sent; the first encryption unit is used to form the plaintext file of the first cycle response list based on the plaintext files of the N transmission files; and the first encryption unit is also used to perform encryption processing on the plaintext files of the N transmission files and the plaintext files of the first cycle response list to obtain the ciphertext of the N transmission files and the ciphertext of the first cycle response list.

[0020] According to an embodiment of the present disclosure, the file sender has its own first public key and first private key pre-stored therein, and the file sender also has a second public key from the file receiver pre-stored therein, and the first encryption unit includes: a first encryption sub-unit and a first signing sub-unit, the first encryption sub-unit is used to encrypt the plaintext files of the N transmission files and the plaintext files of the first period response list based on the second public key to obtain the ciphertext files of the N transmission files and the ciphertext files of the first period response list; and the first signing sub-unit is used to sign the plaintext files of the N transmission files and the plaintext files of the first period response list based on the first private key to obtain the signature files of the N transmission files and the signature file of the first period response list.

[0021] According to an embodiment of the present disclosure, the response receipt receiving module includes: a response receipt ciphertext receiving unit, the response receipt ciphertext receiving unit is used to receive the ciphertext of the first cycle response receipt from the file recipient, the ciphertext of the first cycle response receipt includes: the ciphertext file of the first cycle response receipt and the signature file of the first cycle response receipt; wherein, the device also includes: a first decryption module, the first decryption module includes: a first decryption subunit and a first signature verification subunit, the first decryption subunit is used to decrypt the ciphertext file of the first cycle response receipt based on the first private key to obtain the plaintext file of the first cycle response receipt; and the first signature verification subunit is used to verify the signature file of the first cycle response receipt based on the second public key.

[0022] The fourth aspect of the present disclosure provides a file transmission device, which is configured in a file receiver in a scenario based on unidirectional network gate transmission, and the device includes: a transmission file receiving module, which is used to receive K transmission files and a first cycle response list from a file sender in a first cycle, wherein K is a positive integer; a response receipt creation module, which is used to form a first cycle response receipt based on the K transmission files and the first cycle response list, wherein K received transmission files are registered in the first cycle response receipt, and K is a positive integer less than or equal to N; a response receipt sending module, which is used to return the first cycle response receipt to the file sender; and a transmission file receiving module, which is also used to receive Q transmission files and a second cycle response list in which P transmission files are registered in a second cycle, wherein the P transmission files include L transmission files that were not received in the first cycle, Q, L, and P are positive integers, and P is greater than or equal to L or Q.

[0023] According to an embodiment of the present disclosure, the transmission file receiving module is also used to receive M transmission files from the file sender within the first cycle, where M is a positive integer; the response receipt creation module is also used to update the first cycle response receipt based on the M transmission files; and resend the first cycle response receipt.

[0024] According to an embodiment of the present disclosure, the transmission file receiving module includes: a transmission file ciphertext receiving unit, which is used to receive the ciphertexts of K transmission files and the ciphertext of the first cycle response list from the file sender, wherein the ciphertexts of the K transmission files include: the ciphertext files of the K transmission files and the signature files of the K transmission files, and the ciphertext of the first cycle response list includes: the ciphertext file of the first cycle response list and the signature file of the first cycle response list; wherein the file receiver pre-stores a second public key and a second private key, and the file receiver also pre-stores a first public key from the file sender, and the device also includes: a second decryption module, the second decryption module includes a second decryption subunit and a second signature verification subunit, the second decryption subunit is used to decrypt the ciphertext files of the K transmission files and the ciphertext files of the first cycle response list based on the second private key to obtain the plaintext files of the K transmission files and the plaintext file of the first cycle response list; and the second signature verification subunit is used to verify the signature files of the K transmission files and the signature files of the first cycle response list based on the first public key.

[0025] According to an embodiment of the present disclosure, the response receipt creation module includes: a response receipt plaintext acquisition unit and a second encryption unit, the response receipt plaintext acquisition unit is used to form a plaintext file of the first cycle response receipt based on the K transmission files and the first cycle response list; and the second encryption unit is used to perform encryption processing on the plaintext file of the first cycle response receipt to obtain the ciphertext of the first cycle response receipt.

[0026] According to an embodiment of the present disclosure, the second encryption unit includes: a second encryption sub-unit and a second signing sub-unit, the second encryption sub-unit being used to encrypt the plaintext file of the first periodic response receipt based on the first public key to obtain the ciphertext file of the first periodic response receipt; and the second signing sub-unit being used to sign the plaintext file of the first periodic response receipt based on the second private key to obtain the signature file of the first periodic response receipt.

[0027] A fifth aspect of the present disclosure provides an electronic device, comprising: one or more processors; and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors execute the above-mentioned file transfer method.

[0028] The sixth aspect of the present disclosure also provides a computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, causes the processor to execute the above-mentioned file transfer method.

[0029] A seventh aspect of the present disclosure further provides a computer program product, including a computer program, which implements the above-mentioned file transfer method when executed by a processor.

[0030] In the embodiment of the present disclosure, in order to solve the technical problem of unreliable file transmission of one-way network gates in cross-network situations, the embodiment of the present disclosure designs a set of response transmission solutions, through transmission files and designing corresponding lists of transmission files, response transmission is performed within one cycle, and the unreceived transmission files appearing in the received response receipt are sent together with the files to be sent in the next cycle in the next cycle to achieve retransmission. The embodiment of the present disclosure can at least achieve the following beneficial effects:

[0031] 1. Through the application of this technology, multiple partners can be connected through standard interfaces to achieve efficient distribution of files to recipients, thus improving file transmission efficiency;

[0032] 2. Through a responsive transmission mechanism, the sender can trigger the resending of files, effectively solving the problem of packet loss in file transmission and improving system continuity. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] The above contents and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0034] Figure 1A The application scenario diagram of the file transmission method according to the embodiment of the present disclosure is schematically shown;

[0035] Figure 1B The schematic diagram shows the architecture of the file transmission method under the one-way network gate according to the embodiment of the present disclosure;

[0036] Figure 2 A flowchart of a file transmission method according to an embodiment of the present disclosure is schematically shown;

[0037] Figure 3 A flowchart of an encryption communication method according to an embodiment of the present disclosure is schematically shown;

[0038] Figure 4 A flowchart of a file transmission method according to an embodiment of the present disclosure is schematically shown;

[0039] Figure 5 A flowchart schematically shows another encryption communication method according to an embodiment of the present disclosure;

[0040] Figure 6 The whole process diagram of a responsive file checking method based on a one-way network gate is schematically shown;

[0041] Figure 7 The whole process diagram of a file encryption transmission method based on a one-way network gate is schematically shown;

[0042] Figure 8 The structure block diagram of the file transmission device according to the embodiment of the present disclosure is schematically shown;

[0043] Fig. 9 A structural block diagram of a file transmission device according to an embodiment of the present disclosure is schematically shown; and

[0044] Fig.10 A block diagram of an electronic device suitable for implementing a file transmission method according to an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0045] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0046] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0047] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification, and should not be interpreted in an idealized or overly rigid manner.

[0048] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0049] Before the embodiments of the present disclosure are disclosed in detail, the key technical terms in the embodiments of the present disclosure are explained one by one, as follows:

[0050] One-way network gatekeeper: One-way network gatekeeper is a security device with one-way physical isolation at the application layer, and is an information security device that connects two independent host systems. One-way network gatekeeper uses non-feedback one-way transmission technology, so that there is no physical connection, logical connection and information transmission protocol for communication between systems, and there is no information exchange based on the protocol, but only non-protocol ferrying in the form of data files. Therefore, it logically isolates and blocks all network connections that have potential attacks on the intranet, ensuring the security of internal hosts.

[0051] Encryption algorithm: a technical means to protect data security and privacy. Common encryption algorithms include: 1. Symmetric encryption algorithm: use the same key for encryption and decryption. Common symmetric encryption algorithms include DES, AES, etc.; 2. Asymmetric encryption algorithm: contains public key and private key. Generally speaking, public key is used for encryption and private key is used for decryption. Common asymmetric encryption algorithms include RSA, ECC, etc.; 3. Hash algorithm: maps data of arbitrary length to a hash value of fixed length. Commonly used for data integrity verification, password storage, etc. Common hash algorithms include MD5, SHA-256, etc.

[0052] Digital signature: A digital signature is a technology used to verify data integrity, source identity, and that data has not been tampered with. The working principle of a digital signature is usually as follows: 1. Use a specific algorithm and key to process the file to generate a unique signature; 2. Attach the signature to the original file; 3. Transmit the signed file to the recipient; 4. The recipient uses the corresponding specific algorithm and key to verify the validity of the signature.

[0053] SM2: An asymmetric encryption algorithm that uses a pair of keys (public key and private key) to encrypt and decrypt information.

[0054] There is no effective means in the prior art to solve the technical problem of packet loss in file transmission under a one-way network gate file transmission scenario. How to make file transmission safe and reliable is a technical problem that needs to be solved urgently.

[0055] In order to solve the technical problems existing in the prior art, an embodiment of the present disclosure provides a file transmission method, which is applied to a file sender in a scenario based on unidirectional network gate transmission, and the method includes: in a first cycle, creating N transmission files to be sent and a first cycle response list for registering the N transmission files, wherein N is a positive integer; sending the N transmission files and the first cycle response list to a file receiver; receiving a first cycle response receipt from the file receiver, wherein the first cycle response receipt registers K received transmission files, and K is a positive integer less than or equal to N; performing a check based on the first cycle response list and the first cycle response receipt to obtain L unreceived transmission files, and L is a non-negative integer; and in a second cycle, creating P transmission files to be sent and a second cycle response list for registering the P transmission files, wherein the P transmission files include the L unreceived transmission files, and P is a positive integer greater than or equal to L.

[0056] In the embodiment of the present disclosure, in order to solve the technical problem of unreliable file transmission of one-way network gates in cross-network situations, the embodiment of the present disclosure designs a set of response transmission solutions, through transmission files and designing corresponding lists of transmission files, response transmission is performed within one cycle, and the unreceived transmission files appearing in the received response receipt are sent together with the files to be sent in the next cycle in the next cycle to achieve retransmission. The embodiment of the present disclosure can at least achieve the following beneficial effects:

[0057] 1. Through the application of this technology, multiple partners can be connected through standard interfaces to achieve efficient distribution of files to recipients, thus improving file transmission efficiency;

[0058] 2. Through a responsive transmission mechanism, the sender can trigger the resending of files, effectively solving the problem of packet loss in file transmission and improving system continuity.

[0059] Figure 1A The application scenario diagram of the file transmission method according to the embodiment of the present disclosure is schematically shown.

[0060] like Figure 1A As shown, the application scenario 100 according to this embodiment may include terminal devices 101, 102, 103, a network 104 and a server 105. The network 104 is used to provide a medium for a communication link between the terminal devices 101, 102, 103 and the server 105. The network 104 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0061] Users can use terminal devices 101, 102, 103 to interact with server 105 through network 104 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 101, 102, 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only examples).

[0062] The terminal devices 101 , 102 , and 103 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, and desktop computers.

[0063] The server 105 may be a server that provides various services, such as a background management server (only an example) that provides support for websites browsed by users using the terminal devices 101, 102, and 103. The background management server may analyze and process the received data such as user requests, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminal device.

[0064] It should be noted that the file transmission method provided in the embodiment of the present disclosure can generally be executed by the server 105. Accordingly, the file transmission device provided in the embodiment of the present disclosure can generally be set in the server 105. The file transmission method provided in the embodiment of the present disclosure can also be executed by a server or server cluster that is different from the server 105 and can communicate with the terminal devices 101, 102, 103 and / or the server 105. Accordingly, the file transmission device provided in the embodiment of the present disclosure can also be set in a server or server cluster that is different from the server 105 and can communicate with the terminal devices 101, 102, 103 and / or the server 105.

[0065] It should be understood that Figure 1A The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0066] Figure 1B The schematic diagram shows an architecture diagram of a file transmission method under a one-way network gate according to an embodiment of the present disclosure.

[0067] like Figure 1B As shown, the scenario of this embodiment includes a file sender 110 and a file receiver 120 , and communication between the file sender 110 and the file receiver 120 is achieved through a one-way network gatekeeper 130 .

[0068] It is understandable that the above-mentioned file sender 110 and file receiver 120 are both configured on different servers 105. The above-mentioned file sender 110 and file receiver 120 are only limitations on the actions performed by the server during the file transmission process, and do not constitute a limitation on whether it is an intranet / extranet. In a scenario of intranet / extranet communication, the intranet may actively send files to the extranet, then in this scenario, the intranet acts as the file sender 110 and the extranet acts as the file receiver 120; in another scenario of intranet / extranet communication, the extranet may actively send files to the intranet, then in this scenario, the extranet acts as the file sender 110 and the intranet acts as the file receiver 120.

[0069] Combination Figure 1B As shown, in the scenario of the architecture of the file transmission method under the one-way network gate, the interactive operations between the file sender 110 and the file receiver 120 include operations S11 to S19.

[0070] In operation S11, the file sending 110 creates N transmission files to be sent and a first cycle response list for registering the N transmission files in a first cycle, wherein N is a positive integer.

[0071] In operation S12, the file sender 110 sends the N transmission files and the first periodic response list to the file receiver.

[0072] In operation S13, the file receiver 120 receives K transmission files and a first-period response list from the file sender within the first period, where K is a positive integer.

[0073] In operation S14, the file receiver 120 forms a first periodic response receipt based on the K transmission files and the first periodic response list, wherein the first periodic response receipt registers K received transmission files, and K is a positive integer less than or equal to N.

[0074] In operation S15, the file receiver 120 returns the first cycle response receipt to the file sender.

[0075] In operation S16, the file sender 110 receives a first periodic response receipt from the file receiver, wherein the first periodic response receipt registers K received transmission files, where K is a positive integer less than or equal to N.

[0076] In operation S17, the file sender 110 performs a check based on the first periodic response list and the first periodic response receipt to obtain L unreceived transmission files, where L is a non-negative integer.

[0077] In operation S18, the file sender 110 creates P transmission files to be sent and registers a second cycle response list of the P transmission files within the second cycle, wherein the P transmission files include the L unreceived transmission files, and P is a positive integer greater than or equal to L.

[0078] In operation S19, the file receiver 120 receives Q transmission files and registers a second cycle response list of P transmission files in the second cycle, wherein the P transmission files include L transmission files that were not received in the first cycle, Q, L, and P are positive integers, and P is greater than or equal to L or Q.

[0079] It is understandable that in the case of unidirectional gatekeeper transmission, a unidirectional gatekeeper has only unidirectional conductivity, that is, it only allows signals to pass in one direction and prevents them from being transmitted in the opposite direction. Figure 1B As shown, if the file transfer method of the above-mentioned operations S11 to S19 is to be implemented, it is necessary to configure at least two one-way gates in opposite directions, wherein one one-way gate is used to transmit the files to be transmitted and the response list, and the other one-way gate is used to transmit the response receipt, which is transmitted from the file receiver 120 to the file sender 110.

[0080] In addition, considering that the action of sending a file and the action of receiving a response receipt need to be executed in the same cycle, a cycle can be divided into at least two parts (of course, it can also be greater than 2 to ensure that at least one sending and receiving action can be completed in one cycle). For example, a cycle is divided into two parts, the first part is used to prepare the transmission file and the response list, and the transmission file and the response list; the second part is used to receive the response receipt. In this way, the disorder caused by the intersection of the transmission process and the receipt process can be avoided.

[0081] Therefore, in the following description, it is assumed that the preparation of the file to be transmitted and the sending of the file to be transmitted are performed in a certain part of the same cycle, and it is assumed that the process of receiving the receipt is performed in another part of the same cycle.

[0082] The following will be based on Figure 1A and Figure 1B The scene described by Figure 2 to Figure 7 The file transmission method of the disclosed embodiment is described in detail.

[0083] Figure 2 The flowchart of the file transmission method according to the embodiment of the present disclosure is schematically shown.

[0084] like Figure 2 As shown, the file transmission method of this embodiment includes operations S210 to S250 , and the file transmission method can be executed by the file sender 110 .

[0085] In operation S210, in a first cycle, N transmission files to be sent and a first cycle response list for registering the N transmission files are created, where N is a positive integer.

[0086] The file transmission method is to perform the file transmission in batches according to a certain cycle. In one cycle, multiple transmission files to be sent and a response list of these transmission files are prepared. One response list corresponds to one cycle, that is, the response list records all transmission files to be sent in one cycle.

[0087] Among them, "creating N transmission files to be sent and registering the first cycle response list of the N transmission files" includes: creating a file in plain text form for the N transmission files and the first cycle response list for registering the N transmission files; or creating a file in cipher text form for the N transmission files and the first cycle response list for registering the N transmission files.

[0088] In the case of creating a file in plain text, N transmission files to be sent are obtained; and a corresponding list of the period (ie, a first period corresponding list) is created based on the obtained N transmission files to be sent.

[0089] When creating a file in ciphertext form, obtain N transmission files to be sent; and create a corresponding list of the period (i.e., the corresponding list of the first period) based on the obtained N transmission files to be sent; then, symmetric encryption or asymmetric encryption can be used to encrypt the transmission file and / or the response list to obtain a ciphertext file of the transmission file and / or the response list.

[0090] Figure 3 The flowchart of an encryption communication method according to an embodiment of the present disclosure is schematically shown.

[0091] like Figure 3 As shown, the encryption communication method includes operations S310 to S330, and the operations S310 to S330 can at least partially execute the above-mentioned operation S210.

[0092] In operation S310, plain text files of N transmission files to be sent are obtained.

[0093] In operation S320, a plain text file of a first period response list is formed based on the plain text files of the N transmission files.

[0094] In operation S330, encryption processing is performed on the plaintext files of the N transmission files and the plaintext file of the first periodic response list to obtain ciphertexts of the N transmission files and the ciphertext of the first periodic response list.

[0095] Specifically, the plain text files of the full amount of N transmission files that need to be transmitted and the first cycle response list are encrypted to obtain files in ciphertext form.

[0096] In the embodiment of the present disclosure, considering the importance of data transmission security in the file in the financial scenario, an asymmetric encryption algorithm is adopted to sacrifice a certain encryption and decryption speed while ensuring a certain complexity and security, as shown below:

[0097] According to an embodiment of the present disclosure, the file sender has its own first public key and first private key pre-stored therein, and the file sender also has a second public key from the file receiver pre-stored therein, and the encryption processing is performed on the plaintext files of the N transmission files and the plaintext files of the first cycle response list to obtain the ciphertexts of the N transmission files and the ciphertexts of the first cycle response list, including: encrypting the plaintext files of the N transmission files and the plaintext files of the first cycle response list based on the second public key to obtain the ciphertext files of the N transmission files and the ciphertext files of the first cycle response list; and signing the plaintext files of the N transmission files and the plaintext files of the first cycle response list based on the first private key to obtain the signature files of the N transmission files and the signature files of the first cycle response list.

[0098] Among them, the first public key and the first private key are generated in advance by the file sender 110, and the second public key and the second private key are generated in advance by the file receiver 120. Before encrypted transmission, the file sender 110 and the file receiver 120 exchange public keys with each other. For example, the intranet business system and the file transmission device (extranet) each generate a pair of keys for SM2 encryption and decryption and a pair of keys for signature verification, and exchange the public keys of the two pairs of keys to each other. The key pair for signature verification can also directly reuse the key pair for encryption and decryption.

[0099] The key usage rules are: exchange public keys with each other; encrypt with public keys and decrypt with private keys; sign with private keys and verify with public keys. That is, the sender signs with his own private key and encrypts with the public key given by the receiver; the receiver decrypts with his own private key and verifies with the public key given by the other party.

[0100] Specifically, the public key of the file receiver 120 is used to encrypt the plaintext files of the N transmission files and the plaintext file of the first cycle response list; the private key of the file sender 110 is used to sign the plaintext files of the N transmission files and the plaintext file of the first cycle response list.

[0101] In the embodiments of the present disclosure, the ciphertext includes a ciphertext file and a signature file. The ciphertext file is a transmission file in ciphertext form or a response list in ciphertext form; the signature file is mainly used to implement data integrity verification and identity authentication. The combination of ciphertext files and signature files can greatly improve the confidentiality of data transmission.

[0102] In operation S220, the N transmission files and the first periodic response list are sent to a file receiver.

[0103] Specifically, the plain text files of the N transmission files and the plain text file of the first periodic response list may be sent to the file receiver.

[0104] Specifically, the N transmission file ciphertexts and the ciphertext of the first cycle response list may also be sent to the file receiver, wherein the ciphertext includes a ciphertext file and a signature file.

[0105] In operation S230, a first periodic response receipt is received from a file receiver, wherein K received transmission files are registered in the first periodic response receipt, where K is a positive integer less than or equal to N.

[0106] The first cycle response receipt includes K received transmission files, and the number of these transmission files is less than or equal to the number of N sent transmission files.

[0107] According to an embodiment of the present disclosure, the receiving of a first cycle response receipt from a file receiver includes: receiving a first cycle response receipt from the file receiver within the first cycle; or receiving multiple first cycle response receipts from the file receiver within the first cycle.

[0108] Specifically, within one cycle, the response receipt may be received once or multiple times.

[0109] According to an embodiment of the present disclosure, the receiving of the first cycle response receipt from the file recipient includes: receiving the ciphertext of the first cycle response receipt from the file recipient, the ciphertext of the first cycle response receipt including: the ciphertext file of the first cycle response receipt and the signature file of the first cycle response receipt.

[0110] According to an embodiment of the present disclosure, after receiving the first cycle response receipt from the file recipient, the method also includes: decrypting the ciphertext file of the first cycle response receipt based on the first private key to obtain the plaintext file of the first cycle response receipt; and verifying the signature file of the first cycle response receipt based on the second public key.

[0111] Specifically, the private key of the file sender 110 is used to decrypt the ciphertext file of the first-cycle response receipt, and the public key of the file receiver 120 is used to decrypt the signature file of the first-cycle response receipt, thereby implementing signature verification.

[0112] In operation S240, a check is performed based on the first periodic response list and the first periodic response receipt to obtain L unreceived transmission files, where L is a non-negative integer.

[0113] Wherein, L is zero or a positive integer, in a response list, depending on whether the above K is equal to N. If K is equal to N, then L is zero; if K is less than N, then L is a positive integer.

[0114] According to an embodiment of the present disclosure, the verification is performed based on the first cycle response list and the first cycle response receipt to obtain L unreceived transmission files, including: within the first cycle, when multiple first cycle response receipts are received from the file receiver, the L unreceived transmission files are calculated based on the collection of received transmission files in the multiple first cycle response receipts.

[0115] Specifically, in the case where multiple response receipts are received, the union of the received transmission files in the multiple response receipts is taken as the total received transmission files.

[0116] It is understandable that if the sender receives multiple response receipts for the same response list, if it has been clearly marked as received by the other party, even if the business file is not included in a certain response receipt, it will no longer trigger retransmission.

[0117] In operation S250, in the second cycle, P transmission files to be sent and a second cycle response list for registering the P transmission files are created, wherein the P transmission files include the L unreceived transmission files, and P is a positive integer greater than or equal to L.

[0118] The second cycle refers to a cycle subsequent to the first cycle. The second cycle may be the next cycle continuous with the first cycle, or may be a subsequent cycle discontinuous with the first cycle.

[0119] In the second cycle, the created P transmission files to be sent and the corresponding response lists include L unreceived transmission files that were not received by the file receiver 120 in the first cycle. This method can achieve retransmission across cycles.

[0120] In the embodiment of the present disclosure, in order to solve the technical problem of unreliable file transmission of one-way network gates in cross-network situations, the embodiment of the present disclosure designs a set of response transmission solutions, through transmission files and designing corresponding lists of transmission files, response transmission is performed within one cycle, and the unreceived transmission files appearing in the received response receipt are sent together with the files to be sent in the next cycle in the next cycle to achieve retransmission. The embodiment of the present disclosure can at least achieve the following beneficial effects:

[0121] 1. Through the application of this technology, multiple partners can be connected through standard interfaces to achieve efficient distribution of files to recipients, thereby improving file transmission efficiency;

[0122] 2. Through a responsive transmission mechanism, the sender can trigger the resending of files, effectively solving the problem of packet loss in file transmission and improving system continuity.

[0123] Figure 4 The flowchart of the file transmission method according to the embodiment of the present disclosure is schematically shown.

[0124] like Figure 4 As shown, the file transmission method of this embodiment includes operations S410 to S440, and the file transmission method can be executed by the file receiver 120.

[0125] In operation S410, in a first cycle, K transmission files and a first cycle response list are received from a file sender, where K is a positive integer.

[0126] K is a positive integer less than or equal to N. Specifically, the file receiver 120 may receive all N transmitted files; the file receiver 120 may not receive all N transmitted files, but may receive only less than N transmitted files.

[0127] The received K transmission files and the first period response list may exist in a ciphertext form. The received K transmission files and the first period response list may also exist in a ciphertext form.

[0128] According to an embodiment of the present disclosure, the receiving of K transmission files and a first cycle response list from a file sender includes: receiving ciphertexts of K transmission files and a first cycle response list from a file sender, wherein the ciphertexts of the K transmission files include: ciphertext files of the K transmission files and signature files of the K transmission files, and the ciphertext of the first cycle response list includes: a ciphertext file of the first cycle response list and a signature file of the first cycle response list.

[0129] Specifically, the ciphertext includes a signature file and a ciphertext file, wherein the ciphertext file may be implemented by symmetric encryption or asymmetric encryption.

[0130] According to an embodiment of the present disclosure, a second public key and a second private key are pre-stored in the file receiver, and a first public key from a file sender is also pre-stored in the file receiver. After receiving K transmission files and a first cycle response list from the file sender, it also includes: decrypting the ciphertext files of the K transmission files and the ciphertext files of the first cycle response list based on the second private key to obtain the plaintext files of the K transmission files and the plaintext file of the first cycle response list; and verifying the signature files of the K transmission files and the signature files of the first cycle response list based on the first public key.

[0131] Among them, the first public key and the first private key are generated in advance by the file sender 110, and the second public key and the second private key are generated in advance by the file receiver 120. Before encrypted transmission, the file sender 110 and the file receiver 120 exchange public keys with each other. For example, the intranet business system and the file transmission device (extranet) each generate a pair of keys for SM2 encryption and decryption and a pair of keys for signature verification, and exchange the public keys of the two pairs of keys to each other. The key pair for signature verification can also directly reuse the key pair for encryption and decryption.

[0132] The key usage rules are: exchange public keys with each other; encrypt with public keys and decrypt with private keys; sign with private keys and verify with public keys. That is, the sender signs with his own private key and encrypts with the public key given by the receiver; the receiver decrypts with his own private key and verifies with the public key given by the other party.

[0133] In operation S420, a first periodic response receipt is formed based on the K transmission files and the first periodic response list, wherein the first periodic response receipt registers K received transmission files, and K is a positive integer less than or equal to N.

[0134] Here, "forming a first-cycle response receipt" includes: forming a file in plain text form of the first-cycle response receipt; or forming a file in cipher text form of the first-cycle response receipt.

[0135] When creating a file in plain text form, count the K received transmission files, and fill in the response receiving identification on the first cycle response list to form a plain text file of the first cycle response receipt.

[0136] When creating a file in ciphertext form, count the K transmission files received, and fill in the response receiving identification on the first cycle response list to form a plaintext file of the first cycle response receipt; then, encrypt the plaintext file of the first cycle response receipt to obtain the ciphertext file of the first cycle response receipt.

[0137] Figure 5 The flowchart schematically shows another encryption communication method according to an embodiment of the present disclosure.

[0138] like Figure 5 As shown, the encryption communication method includes operations S510 to S520, and the operations S510 to S520 can at least partially execute the above-mentioned operation S420.

[0139] In operation S510, a plain text file of a first periodic response receipt is formed based on the K transmission files and the first periodic response list.

[0140] In operation S520, encryption is performed on the plaintext file of the first-cycle response receipt to obtain a ciphertext of the first-cycle response receipt.

[0141] Specifically, all the first-cycle response receipts are encrypted to obtain a ciphertext file.

[0142] According to an embodiment of the present disclosure, the encryption of the plaintext file of the first-cycle response receipt to obtain the ciphertext of the first-cycle response receipt includes: encrypting the plaintext file of the first-cycle response receipt based on the first public key to obtain the ciphertext file of the first-cycle response receipt; and signing the plaintext file of the first-cycle response receipt based on the second private key to obtain the signature file of the first-cycle response receipt.

[0143] Likewise, following the key usage rules in the disclosed embodiment, the public key of the file sender 110 is used to encrypt the plaintext data, and the private key of the file receiver 120 is used to form a signature file.

[0144] In operation S430, the first cycle response receipt is returned to the file sender.

[0145] According to an embodiment of the present disclosure, after returning the first cycle response receipt to the file sender, it also includes: receiving M transmission files from the file sender within the first cycle, where M is a positive integer; updating the first cycle response receipt based on the M transmission files; and resending the first cycle response receipt.

[0146] Among them, M is less than or equal to NK. Within a cycle, after a response receipt is returned, after receiving other transmission files from the same sender again, a new response receipt needs to be re-formed and returned to the file sender 110 within the same cycle.

[0147] In operation S440, in the second cycle, Q transmission files are received and a second cycle response list of P transmission files is registered, wherein the P transmission files include L transmission files that were not received in the first cycle, Q, L, and P are positive integers, and P is greater than or equal to L or Q.

[0148] When the file sender 110 sends P transmission files in the second cycle (including L transmission files that were not received in the first cycle), the file receiver 120 may only receive Q transmission files.

[0149] In the embodiment of the present disclosure, in order to solve the technical problem of unreliable file transmission of one-way network gates in cross-network situations, the embodiment of the present disclosure designs a set of response transmission solutions, through transmission files and designing corresponding lists of transmission files, response transmission is performed within one cycle, and the unreceived transmission files appearing in the received response receipt are sent together with the files to be sent in the next cycle in the next cycle to achieve retransmission. The embodiment of the present disclosure can at least achieve the following beneficial effects:

[0150] 1. Through the application of this technology, multiple partners can be connected through standard interfaces to achieve efficient distribution of files to recipients, thereby improving file transmission efficiency;

[0151] 2. Through a responsive transmission mechanism, the sender can trigger the resending of files, effectively solving the problem of packet loss in file transmission and improving system continuity.

[0152] Figure 6 The full process diagram of a responsive file verification method based on a one-way network gate is schematically shown.

[0153] like Figure 6 As shown, this scenario includes a file sender 110, a file receiver 120, and a one-way network gatekeeper 130. The specific operations are as follows:

[0154] The transmission file is sent independently by the transmission file sending process according to its own rules.

[0155] In the responsive process, the sender creates a response list file at a regular (configurable) time. The list contains the transmission files sent since the last response list up to the current list.

[0156] The sender sends the response list to the other recipient via a one-way transmission device and waits for the response receipt to be returned.

[0157] After receiving the response list, the receiver needs to give a response receipt based on the content of the list, provide the information of the transmission files received in the list, and do not need to provide the information of the unreceived files. The receipt file is sent through another one-way transmission device.

[0158] After the sender receives the response receipt file, it will compare it with the list, and if the other party receives it, it will be marked as finally sent. If the transmission file is not returned in the response receipt, it is considered that the other party has not received it, triggering the transmission file to be resent.

[0159] In the next response list creation cycle, if the previous response list has not received the corresponding response receipt, it will be sent to the recipient again when the new response list is sent.

[0160] The sender establishes an early warning mechanism and a retry limit (configurable) for the response list. If the number of retries to send the response list exceeds the upper limit, the response list will be terminated and an alarm will be sent to the technology operation and maintenance personnel for manual intervention to troubleshoot the problem.

[0161] If the sender receives multiple response receipts for the same response list, if it has been clearly marked as received by the other party, even if the transmission file is not included in a certain response receipt, it will no longer trigger retransmission.

[0162] The response file format is as follows:

[0163] The response list and response receipt in the responsive process are exchanged in the form of files. The file itself contains the file name and file content. The file name format is: RMQ-[sender flag]-[timestamp][-return flag].BIN, such as:

[0164] Response manifest file: RMQ-A-20220507092345.BIN;

[0165] Response receipt file: RMQ-A-20220507092345-R.BIN;

[0166] RMQ: a fixed prefix representing the file type of the responsive process mechanism;

[0167] [A]: sender flag, A for intranet and B for extranet;

[0168] [20220507092345]: 14-bit timestamp in the format of yyyyMMddHHmmss;

[0169] [R]: Response receipt file;

[0170] [.BIN]: file format suffix;

[0171] Note: The response receipt file is a response list file with a return ID added to it.

[0172] The specific description is shown in Table 1 below:

[0173] Table 1

[0174]

[0175] Figure 7 The full process diagram of a file encryption transmission method based on a one-way network gate is schematically shown.

[0176] like Figure 7 As shown, this scenario includes the intranet, extranet, and partners. The specific operations are as follows:

[0177] In operation S701, the business system of the intranet performs encryption and signing, wherein soft encryption is adopted, the intranet private key is used for signing, and the external network public key is used for encryption.

[0178] In operation S702, a one-way network gate is used to transmit the encrypted and signed file to an external network.

[0179] In operation S703, the file transfer platform of the external network calls the encryption machine to perform decryption and signature verification on the encrypted and signed file from the internal network, wherein soft encryption is adopted, and the signature is verified using the private key of the external network and the public key of the internal network.

[0180] In operation S704, the file transfer platform on the external network calls the encryption machine to re-encrypt and sign.

[0181] In operation S705, a dedicated line is used to transmit the encrypted and signed file to the partner.

[0182] In operation S706, the partner system calls the encryption machine to perform decryption and signature verification on the received encrypted and signed file to obtain the plain text of the file.

[0183] At this point, the encrypted file sending path from the intranet to the extranet and then to the partner is completed.

[0184] In operation S707, the partner system calls the encryption machine to encrypt and sign the file sent to the intranet.

[0185] In operation S708, a dedicated line is used to transmit the encrypted and signed file to an external file transmission platform.

[0186] In operation S709, the file transfer platform on the external network calls the encryption machine to perform decryption and signature verification on the encrypted and signed file from the partner.

[0187] In operation S710, the file transfer platform on the external network calls the encryption machine to re-encrypt and sign.

[0188] In operation S711, a one-way gateway is used to transmit the encrypted and signed file to the intranet.

[0189] In operation S7 12, the encrypted and signed file is distributed to the business system by the file transfer platform of the intranet.

[0190] In operation S713, the business system in the intranet uses the intranet private key to decrypt and the external network public key to verify the signature to obtain the plain text of the file.

[0191] At this point, the encrypted file sending path from the partner to the external network and then to the internal network is completed.

[0192] Based on the above file transmission method, the present disclosure also provides a file transmission device. Figure 8 and Fig. 9 The device is described in detail.

[0193] Figure 8 The structural block diagram of the file transmission device according to the embodiment of the present disclosure is schematically shown.

[0194] like Figure 8 As shown, the file transmission device 800 of this embodiment is configured in the file sender 110 , and the file transmission device 800 includes a transmission file creation module 810 , a transmission file sending module 820 , a response receipt receiving module 830 and a response receipt checking module 840 .

[0195] The transmission file creation module 810 is used to create N transmission files to be sent and register the first cycle response list of the N transmission files in the first cycle, where N is a positive integer. In one embodiment, the transmission file creation module 810 can be used to perform the operation S210 described above, which will not be repeated here.

[0196] The transmission file sending module 820 is used to send the N transmission files and the first periodic response list to the file receiver. In one embodiment, the transmission file sending module 820 can be used to perform the operation S220 described above, which will not be described in detail here.

[0197] The response receipt receiving module 830 is used to receive a first-period response receipt from a file receiver, wherein the first-period response receipt registers K received transmission files, and K is a positive integer less than or equal to N. In one embodiment, the response receipt receiving module 830 can be used to perform the operation S230 described above, which will not be described in detail here.

[0198] The response receipt checking module 840 is used to perform a check based on the first periodic response list and the first periodic response receipt to obtain L unreceived transmission files, where L is a non-negative integer. In one embodiment, the response receipt checking module 840 can be used to perform the operation S240 described above, which will not be repeated here.

[0199] The transmission file creation module 810 is further used to create P transmission files to be sent and register the second period response list of the P transmission files in the second period, wherein the P transmission files include the L unreceived transmission files, and P is a positive integer greater than or equal to L. In one embodiment, the transmission file creation module 850 can be used to perform the operation S250 described above, which will not be repeated here.

[0200] In the embodiment of the present disclosure, in order to solve the technical problem of unreliable file transmission of one-way network gates in cross-network situations, the embodiment of the present disclosure designs a set of response transmission solutions, through transmission files and designing corresponding lists of transmission files, response transmission is performed within one cycle, and the unreceived transmission files appearing in the received response receipt are sent together with the files to be sent in the next cycle in the next cycle to achieve retransmission. The embodiment of the present disclosure can at least achieve the following beneficial effects:

[0201] 1. Through the application of this technology, multiple partners can be connected through standard interfaces to achieve efficient distribution of files to recipients, thus improving file transmission efficiency;

[0202] 2. Through a responsive transmission mechanism, the sender can trigger the resending of files, effectively solving the problem of packet loss in file transmission and improving system continuity.

[0203] According to an embodiment of the present disclosure, the receiving of a first-cycle response receipt from a file recipient includes: a response receipt receiving module, which is specifically used to receive a first-cycle response receipt from a file recipient within the first cycle; or to receive multiple first-cycle response receipts from the file recipient within the first cycle.

[0204] According to an embodiment of the present disclosure, the response receipt verification module is specifically used to calculate the L unreceived transmission files based on the collection of received transmission files in the multiple first cycle response receipts when multiple first cycle response receipts are received from the file recipient within the first cycle.

[0205] According to an embodiment of the present disclosure, the transmission file creation module includes: a first plaintext acquisition unit and a first encryption unit, the first plaintext acquisition unit is used to obtain the plaintext files of N transmission files to be sent; the first encryption unit is used to form the plaintext file of the first cycle response list based on the plaintext files of the N transmission files; and the first encryption unit is also used to perform encryption processing on the plaintext files of the N transmission files and the plaintext files of the first cycle response list to obtain the ciphertext of the N transmission files and the ciphertext of the first cycle response list.

[0206] According to an embodiment of the present disclosure, the file sender has its own first public key and first private key pre-stored therein, and the file sender also has a second public key from the file receiver pre-stored therein, and the first encryption unit includes: a first encryption sub-unit and a first signing sub-unit, the first encryption sub-unit is used to encrypt the plaintext files of the N transmission files and the plaintext files of the first period response list based on the second public key to obtain the ciphertext files of the N transmission files and the ciphertext files of the first period response list; and the first signing sub-unit is used to sign the plaintext files of the N transmission files and the plaintext files of the first period response list based on the first private key to obtain the signature files of the N transmission files and the signature file of the first period response list.

[0207] According to an embodiment of the present disclosure, the response receipt receiving module includes: a response receipt ciphertext receiving unit, the response receipt ciphertext receiving unit is used to receive the ciphertext of the first cycle response receipt from the file recipient, the ciphertext of the first cycle response receipt includes: the ciphertext file of the first cycle response receipt and the signature file of the first cycle response receipt; wherein, the device also includes: a first decryption module, the first decryption module includes: a first decryption subunit and a first signature verification subunit, the first decryption subunit is used to decrypt the ciphertext file of the first cycle response receipt based on the first private key to obtain the plaintext file of the first cycle response receipt; and the first signature verification subunit is used to verify the signature file of the first cycle response receipt based on the second public key.

[0208] According to an embodiment of the present disclosure, any multiple modules of the transmission file creation module 810, the transmission file sending module 820, the response receipt receiving module 830, and the response receipt checking module 840 can be combined in one module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in one module. According to an embodiment of the present disclosure, at least one of the transmission file creation module 810, the transmission file sending module 820, the response receipt receiving module 830, and the response receipt checking module 840 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware, and firmware, or in any appropriate combination of any of them. Alternatively, at least one of the transmission file creation module 810, the transmission file sending module 820, the response receipt receiving module 830, and the response receipt checking module 840 may be at least partially implemented as a computer program module, which may perform corresponding functions when executed.

[0209] Fig. 9 The structural block diagram of the file transmission device according to the embodiment of the present disclosure is schematically shown.

[0210] like Fig. 9 As shown, the file transmission device 900 of this embodiment is configured in the file receiver 120 , and the file transmission device 900 includes a transmission file receiving module 910 , a response receipt creating module 920 and a response receipt sending module 930 .

[0211] The transmission file receiving module 910 is used to receive K transmission files and a first period response list from a file sender in the first period, where K is a positive integer. In one embodiment, the transmission file receiving module 910 can be used to perform the operation S410 described above, which will not be repeated here.

[0212] The response receipt creation module 920 is used to form a first period response receipt based on the K transmission files and the first period response list, wherein the first period response receipt registers K received transmission files, and K is a positive integer less than or equal to N. In one embodiment, the response receipt creation module 920 can be used to perform the operation S420 described above, which is not repeated here.

[0213] The response receipt sending module 930 is used to return the first cycle response receipt to the file sender. In one embodiment, the response receipt sending module 930 can be used to perform the operation S430 described above, which will not be repeated here.

[0214] The transmission file receiving module 910 is further used to receive Q transmission files and register a second period response list of P transmission files in the second period, wherein the P transmission files include L transmission files that were not received in the first period, Q, L, and P are positive integers, and P is greater than or equal to L or Q. In one embodiment, the transmission file receiving module 910 can be used to perform the operation S440 described above, which will not be repeated here.

[0215] In the embodiment of the present disclosure, in order to solve the technical problem of unreliable file transmission of one-way network gates in cross-network situations, the embodiment of the present disclosure designs a set of response transmission solutions, through transmission files and designing corresponding lists of transmission files, response transmission is performed within one cycle, and the unreceived transmission files appearing in the received response receipt are sent together with the files to be sent in the next cycle in the next cycle to achieve retransmission. The embodiment of the present disclosure can at least achieve the following beneficial effects:

[0216] 1. Through the application of this technology, multiple partners can be connected through standard interfaces to achieve efficient distribution of files to recipients, thereby improving file transmission efficiency;

[0217] 2. Through a responsive transmission mechanism, the sender can trigger the resending of files, effectively solving the problem of packet loss in file transmission and improving system continuity.

[0218] According to an embodiment of the present disclosure, the transmission file receiving module is also used to receive M transmission files from the file sender within the first cycle, where M is a positive integer; the response receipt creation module is also used to update the first cycle response receipt based on the M transmission files; and resend the first cycle response receipt.

[0219] According to an embodiment of the present disclosure, the transmission file receiving module includes: a transmission file ciphertext receiving unit, which is used to receive the ciphertexts of K transmission files and the ciphertext of the first cycle response list from the file sender, wherein the ciphertexts of the K transmission files include: the ciphertext files of the K transmission files and the signature files of the K transmission files, and the ciphertext of the first cycle response list includes: the ciphertext file of the first cycle response list and the signature file of the first cycle response list; wherein the file receiver pre-stores a second public key and a second private key, and the file receiver also pre-stores a first public key from the file sender, and the device also includes: a second decryption module, the second decryption module includes a second decryption subunit and a second signature verification subunit, the second decryption subunit is used to decrypt the ciphertext files of the K transmission files and the ciphertext files of the first cycle response list based on the second private key to obtain the plaintext files of the K transmission files and the plaintext file of the first cycle response list; and the second signature verification subunit is used to verify the signature files of the K transmission files and the signature files of the first cycle response list based on the first public key.

[0220] According to an embodiment of the present disclosure, the response receipt creation module includes: a response receipt plaintext acquisition unit and a second encryption unit, the response receipt plaintext acquisition unit is used to form a plaintext file of the first cycle response receipt based on the K transmission files and the first cycle response list; and the second encryption unit is used to perform encryption processing on the plaintext file of the first cycle response receipt to obtain the ciphertext of the first cycle response receipt.

[0221] According to an embodiment of the present disclosure, the second encryption unit includes: a second encryption sub-unit and a second signing sub-unit, the second encryption sub-unit being used to encrypt the plaintext file of the first periodic response receipt based on the first public key to obtain the ciphertext file of the first periodic response receipt; and the second signing sub-unit being used to sign the plaintext file of the first periodic response receipt based on the second private key to obtain the signature file of the first periodic response receipt.

[0222] According to an embodiment of the present disclosure, any multiple modules of the transmission file receiving module 910, the response receipt creation module 920, and the response receipt sending module 930 can be combined in one module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in one module. According to an embodiment of the present disclosure, at least one of the transmission file receiving module 910, the response receipt creation module 920, and the response receipt sending module 930 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware, and firmware, or in an appropriate combination of any of them. Alternatively, at least one of the transmission file receiving module 910, the response receipt creating module 920, and the response receipt sending module 930 may be at least partially implemented as a computer program module, and when the computer program module is executed, the corresponding function may be performed.

[0223] Fig.10 A block diagram of an electronic device suitable for implementing a file transmission method according to an embodiment of the present disclosure is schematically shown.

[0224] like Fig.10 As shown, the electronic device 1000 according to an embodiment of the present disclosure includes a processor 1001, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1002 or a program loaded from a storage part 1008 into a random access memory (RAM) 1003. The processor 1001 may include, for example, a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or a related chipset and / or a special-purpose microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 1001 may also include an onboard memory for caching purposes. The processor 1001 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0225] In RAM 1003, various programs and data required for the operation of electronic device 1000 are stored. Processor 1001, ROM 1002 and RAM 1003 are connected to each other via bus 1004. Processor 1001 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 1002 and / or RAM 1003. It should be noted that the program can also be stored in one or more memories other than ROM 1002 and RAM 1003. Processor 1001 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in the one or more memories.

[0226] According to an embodiment of the present disclosure, the electronic device 1000 may further include an input / output (I / O) interface 1005, which is also connected to the bus 1004. The electronic device 1000 may further include one or more of the following components connected to the I / O interface 1005: an input portion 1006 including a keyboard, a mouse, etc.; an output portion 1007 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 1008 including a hard disk, etc.; and a communication portion 1009 including a network interface card such as a LAN card, a modem, etc. The communication portion 1009 performs communication processing via a network such as the Internet. A drive 1010 is also connected to the I / O interface 1005 as needed. A removable medium 1011, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 1010 as needed, so that a computer program read therefrom is installed into the storage portion 1008 as needed.

[0227] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0228] According to an embodiment of the present disclosure, a computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, an apparatus or a device. For example, according to an embodiment of the present disclosure, a computer-readable storage medium may include the ROM 1002 and / or RAM 1003 described above and / or one or more memories other than ROM 1002 and RAM 1003.

[0229] The embodiment of the present disclosure also includes a computer program product, which includes a computer program, and the computer program contains program code for executing the method shown in the flowchart. When the computer program product is run in a computer system, the program code is used to enable the computer system to implement the item recommendation method provided by the embodiment of the present disclosure.

[0230] The above functions defined in the system / device of the embodiment of the present disclosure are performed when the computer program is executed by the processor 1001. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0231] In one embodiment, the computer program may rely on tangible storage media such as optical storage devices, magnetic storage devices, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of signals on a network medium, and downloaded and installed through the communication part 1009, and / or installed from the removable medium 1011. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0232] In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 1009, and / or installed from the removable medium 1011. When the computer program is executed by the processor 1001, the above functions defined in the system of the embodiment of the present disclosure are performed. According to the embodiment of the present disclosure, the system, device, means, module, unit, etc. described above can be implemented by a computer program module.

[0233] According to an embodiment of the present disclosure, the program code for executing the computer program provided by the embodiment of the present disclosure can be written in any combination of one or more programming languages. Specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, Java, C++, python, "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on the remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect through the Internet).

[0234] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0235] It will be appreciated by those skilled in the art that the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways, even if such combinations and / or combinations are not explicitly described in the present disclosure. In particular, the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways without departing from the spirit and teachings of the present disclosure. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0236] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. The scope of the present disclosure is defined by the attached claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. A file transmission method, characterized in that: The method is applied to a file sender in a scenario based on unidirectional gatekeeper transmission, and the method comprises: In a first cycle, create N transmission files to be sent and register a first cycle response list of the N transmission files, where N is a positive integer; Sending the N transmission files and the first periodic response list to a file receiver; Receiving a first-cycle response receipt from a file receiver, wherein the first-cycle response receipt registers K received transmission files, where K is a positive integer less than or equal to N; Performing a check based on the first periodic response list and the first periodic response receipt to obtain L unreceived transmission files, where L is a non-negative integer; and In the second cycle, P transmission files to be sent and a second cycle response list for registering the P transmission files are created, wherein the P transmission files include the L unreceived transmission files, and P is a positive integer greater than or equal to L.

2. The method according to claim 1, characterized in that The receiving of a first cycle response receipt from a file receiver includes: During the first period, a first period response receipt is received from the document recipient; or In the first cycle, a plurality of first cycle response receipts are received from the file receivers.

3. The method according to claim 2, characterized in that The checking based on the first periodic response list and the first periodic response receipt to obtain L unreceived transmission files includes: In the first cycle, when multiple first cycle response receipts are received from the file receiver, the L unreceived transmission files are calculated based on the collection of the received transmission files in the multiple first cycle response receipts.

4. The method according to any one of claims 1 to 3, characterized in that: The step of creating N transmission files to be sent and registering a first cycle response list of the N transmission files includes: Get the plain text files of N transmission files to be sent; Forming a plaintext file of a first period response list based on the plaintext files of the N transmission files; and Encryption processing is performed on the plaintext files of the N transmission files and the plaintext file of the first periodic response list to obtain ciphertexts of the N transmission files and the ciphertext of the first periodic response list.

5. The method according to claim 4, characterized in that The file sender has its own first public key and first private key pre-stored in it, and the file sender also has a second public key from the file receiver pre-stored in it. The performing encryption processing on the plaintext files of the N transmission files and the plaintext file of the first periodic response list to obtain the ciphertext of the N transmission files and the ciphertext of the first periodic response list includes: Encrypting the plaintext files of the N transmission files and the plaintext file of the first periodic response list based on the second public key to obtain the ciphertext files of the N transmission files and the ciphertext file of the first periodic response list; and The plaintext files of the N transmission files and the plaintext file of the first periodic response list are signed based on the first private key to obtain signature files of the N transmission files and the signature file of the first periodic response list.

6. The method according to claim 5, characterized in that The receiving of a first cycle response receipt from a file receiver includes: Receiving a ciphertext of a first-cycle response receipt from a file receiver, wherein the ciphertext of the first-cycle response receipt includes: a ciphertext file of the first-cycle response receipt and a signature file of the first-cycle response receipt; in, After receiving the first cycle response receipt from the file recipient, the method further includes: Decrypting the ciphertext file of the first-period response receipt based on the first private key to obtain the plaintext file of the first-period response receipt; and The signature file of the first periodic response receipt is verified based on the second public key.

7. A file transmission method, characterized in that: The method is applied to a file receiver in a scenario based on unidirectional gatekeeper transmission, and the method comprises: In the first cycle, receiving K transmission files and a first cycle response list from the file sender, where K is a positive integer; Based on the K transmission files and the first periodic response list, a first periodic response receipt is formed, wherein the first periodic response receipt registers K received transmission files, and K is a positive integer less than or equal to N; Returning the first cycle response receipt to the file sender; In the second cycle, Q transmission files are received and a second cycle response list of P transmission files is registered, wherein the P transmission files include L transmission files that were not received in the first cycle, Q, L, and P are positive integers, and P is greater than or equal to L or Q.

8. The method according to claim 7, characterized in that After returning the first cycle response receipt to the file sender, the method further includes: In the first cycle, M transmission files are received from the file sender, where M is a positive integer; Updating the first periodic response receipt based on the M transmission files; and Resend the first cycle response receipt.

9. The method according to claim 7 or 8, characterized in that: The receiving of K transmission files and a first cycle response list from a file sender includes: Receiving ciphertexts of K transmission files and ciphertexts of a first-cycle response list from a file sender, wherein the ciphertexts of the K transmission files include: ciphertext files of the K transmission files and signature files of the K transmission files, and the ciphertexts of the first-cycle response list include: ciphertext files of the first-cycle response list and signature files of the first-cycle response list; The file receiver has a second public key and a second private key pre-stored in it, and the file receiver also has a first public key from the file sender pre-stored in it. After receiving the K transmission files and the first cycle response list from the file sender, the method further includes: decrypting the ciphertext files of the K transmission files and the ciphertext file of the first periodic response list based on the second private key to obtain plaintext files of the K transmission files and the plaintext file of the first periodic response list; and The signature files of the K transmission files and the signature file of the first period response list are verified based on the first public key.

10. The method according to claim 9, characterized in that The forming a first periodic response receipt based on the K transmission files and the first periodic response list includes: Based on the K transmission files and the first periodic response list, forming a plaintext file of a first periodic response receipt; and The plaintext file of the first-cycle response receipt is encrypted to obtain the ciphertext of the first-cycle response receipt.

11. The method according to claim 10, characterized in that The encrypting of the plaintext file of the first-cycle response receipt to obtain the ciphertext of the first-cycle response receipt includes: Encrypting the plaintext file of the first-period response receipt based on the first public key to obtain the ciphertext file of the first-period response receipt; and The plaintext file of the first-cycle response receipt is signed based on the second private key to obtain the signature file of the first-cycle response receipt.

12. A file transmission device, characterized in that: The device is configured in a file sender in a scenario based on one-way gatekeeper transmission, and the device includes: A transmission file creation module, used to create N transmission files to be sent and register a first cycle response list of the N transmission files in a first cycle, wherein N is a positive integer; A transmission file sending module, used for sending the N transmission files and the first periodic response list to a file receiver; A response receipt receiving module, used to receive a first-period response receipt from a file receiver, wherein the first-period response receipt registers K received transmission files, where K is a positive integer less than or equal to N; a response receipt checking module, configured to perform a check based on the first periodic response list and the first periodic response receipt to obtain L unreceived transmission files, where L is a non-negative integer; and The transmission file creation module is also used to create P transmission files to be sent and register the second period response list of the P transmission files within the second period, wherein the P transmission files include the L unreceived transmission files, and P is a positive integer greater than or equal to L.

13. A file transmission device, characterized in that: The device is configured in a file receiver in a scenario based on one-way network gate transmission, and the device includes: The transmission file receiving module is used to receive K transmission files and a first cycle response list from a file sender in a first cycle, where K is a positive integer; A response receipt creation module, configured to form a first cycle response receipt based on the K transmission files and the first cycle response list, wherein the first cycle response receipt registers K received transmission files, and K is a positive integer less than or equal to N; a response receipt sending module, configured to return the first cycle response receipt to the file sender; and The transmission file receiving module is also used to receive Q transmission files and register a second period response list of P transmission files in the second period, wherein the P transmission files include L transmission files that were not received in the first period, Q, L, and P are positive integers, and P is greater than or equal to L or Q.

14. An electronic device comprising: one or more processors; a storage device for storing one or more computer programs, The method is characterized in that the one or more processors execute the one or more computer programs to implement the steps of the method according to any one of claims 1 to 11.

15. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 11 are implemented.

16. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 11 are implemented.

Images