BPM process relay system and method between isolated networks

Abstract

The invention belongs to the technical field of data processing, and discloses a BPM process relay system and method between isolated networks, a BPM system at a first network side triggers a BPM process node capture service at a target process node to capture key data; the BPM process freezing service of the first network side downloads process data according to the key data, stores the process data as a metadata file, downloads all attachments to the same catalog, and ferries the catalog and files under the catalog to the second network side through a file ferry device; the BPM process freezing file capture service of the second network side captures a directory ferried by the first network side, records a directory path and analyzes key activation data in the directory; and the BPM process activation service of the second network side performs data integrity verification, uploads the attachment to the BPM system of the second network side again after the verification is passed, and initiates a new BPM process under the target process node according to the key activation data. The invention aims to solve the problem of flow connection between isolated BPM systems in a non-interconnected environment.

Description

Technical Field

[0001] This invention belongs to the field of data processing technology, specifically relating to a BPM process relay system and method between isolated networks. Background Technology

[0002] As enterprises grow, different security isolation strategies are often implemented between enterprise groups and subsidiaries, and between departments, to protect data security and prevent potential threats. Alternatively, physical isolation may exist due to historical reasons or non-human factors, hindering data interconnection between these groups. Therefore, an intermediate data connection and exchange component is needed for data exchange between isolated environments. While BPM systems, such as OA (Office Automation), are essential for enterprise office work, data exchange between application systems within the same network domain can typically be accomplished via HTTP interface requests. However, in actual business scenarios, multiple isolated network domains and isolated BPM systems often exist. In such cases, conventional interface interaction methods cannot solve the problem of workflow connection and transmission between different BPM systems, leading to BPM business process blockages.

[0003] BPM (Business Process Management) refers to the design, management, and execution of business processes in the most efficient way to achieve corporate goals. BPM systems in isolated networks involve the connection between upstream and downstream process nodes, the transmission of data and information, and the collaboration between team members in different network environments. In a complex situation where a process involves cross-network and cross-BPM systems, the lack of support from relevant mature technologies makes it necessary to design a seamless BPM process middleware for relaying process data and realizing the automatic connection and execution of the complete process under isolated conditions, thereby improving work efficiency. Summary of the Invention

[0004] In view of the above problems, one of the objectives of this invention is to provide a BPM process relay system between isolated networks, which aims to solve the problem of process connection between isolated BPM systems in non-interconnected environments, with high interaction accuracy and effectively improve work efficiency.

[0005] To achieve the above objectives, the technical solution adopted by the present invention is as follows: An inter-isolated network BPM process relay system is provided, comprising at least two isolated environments, each with a BPM system and a relay service system. The relay service system provides BPM process node capture service, BPM process freezing service, BPM process frozen file capture service, and BPM process activation service. The two isolated environments interacting across the isolated networks are designated as the first network side and the second network side. The inter-isolated network BPM process relay system performs the following operations: The BPM system on the first network side triggers the BPM process node capture service on the first network side at the target process node to capture key data in the BPM process document. The BPM process freeze service on the first network side downloads the process data of the BPM process document according to the key data and saves it as a metadata file. At the same time, it downloads all attachments to the same directory as the metadata file and transfers the directory and the files in the directory to the second network side through a file transfer device. The second network side enables the BPM process freeze file capture service to listen to the directory, capture the directory transferred from the first network side, record the directory path, and parse the key activation data in the directory; The second network side activates the BPM process activation service to verify the data integrity of files in the directory captured by the BPM process frozen file capture service. After the verification is successful, the attachments are re-uploaded to the BPM system on the second network side, and a new BPM process is initiated under the target process node based on the key activation data.

[0006] Several alternative methods are provided below, but they are not intended as additional limitations on the overall solution above. They are merely further additions or optimizations. Provided there are no technical or logical contradictions, each alternative method can be combined individually with respect to the overall solution above, or multiple alternative methods can be combined with each other.

[0007] Preferably, when the BPM process node capture service on the first network side captures key data in the BPM process document, it performs the following operations: The BPM system on the first network side transmits key data to the BPM process node capture service via HTTP. The BPM process node capture service saves the key data to the BPM pending freeze record table in the first network side database and marks the status of the BPM process as pending freeze.

[0008] Preferably, the BPM process freeze service on the first network side acquires key data before downloading, and performs the following operations when acquiring the key data: Based on fixed time intervals, key data corresponding to a BPM process to be frozen is retrieved from the BPM pending freeze record table in the first network side database in reverse chronological order, and the BPM process is marked as frozen.

[0009] Preferably, the BPM process freeze service on the first network side downloads the process data of the BPM process document based on the key data and saves it as a metadata file. At the same time, it downloads all attachments to the same directory as the metadata file and performs the following operations: By sending an HTTP request to the process data query interface of the BPM system on the first network side through key data, the system obtains the full text data of the form in the process data and saves the full text data of the form to a metadata file named with the serial number. Download all attachments based on the attachment information in the full text data of the form, and save all attachments in the same directory as the metadata file; While downloading each attachment, calculate the attachment's hash value and file size, and append the attachment's filename, hash value, and file size as attributes to the metadata file.

[0010] Preferably, the BPM process freeze service on the first network side transfers the directory and its files to the second network side via a file transfer device, and performs the following operations: After all process data and attachments are locally documented, the BPM process is marked as frozen. The entire directory and its files are copied to a one-way file transfer device, which then transfers the directory and its files to the second network side.

[0011] Preferably, the BPM process freeze file capture service on the second network side records the directory path and parses the key activation data in the directory, performing the following operations: Parse the directory name to obtain the username, serial number, and timestamp, calculate the freeze time, and save the username, serial number, timestamp, freeze time, and directory path to the BPM pending activation record table in the second network side database, marking the BPM process status as pending activation.

[0012] Preferably, the formula for calculating the freezing time is as follows: Freezing time = Current time on the second network side - Timestamp.

[0013] Preferably, the BPM process activation service on the second network side performs data integrity verification on the files in the directory captured by the BPM process frozen file capture service, and performs the following operations: At fixed time intervals, retrieve one record to be activated from the BPM pending activation record table in the second network side database in reverse chronological order, mark the BPM process status as active, locate the file in the directory based on the directory path in the pending activation record, and perform data integrity verification.

[0014] Preferably, the BPM process activation service on the second network side initiates a new BPM process under the target process node based on the key activation data, and performs the following operations: After re-uploading all attachments to the BPM system on the second network side, obtain the new attachment IDs returned. Combine this with the key activation data, call the BPM process initiation interface of the BPM system on the second network side to create a new BPM process under the target process node. If the creation is successful, mark the BPM process status as activated; otherwise, if the process recovery fails, mark the BPM process status as failed.

[0015] The second objective of this invention is to provide a BPM process relay method between isolated networks, which aims to solve the problem of process connection between isolated BPM systems in a non-interconnected environment.

[0016] To achieve the above objectives, the technical solution adopted by the present invention is as follows: A BPM process relay method between isolated networks, wherein two isolated environments interacting across isolated networks are designated as a first network side and a second network side, the method comprising: The BPM system on the first network side triggers the BPM process node capture service on the first network side at the target process node to capture key data in the BPM process document. The BPM process freeze service on the first network side downloads the process data of the BPM process document according to the key data and saves it as a metadata file. At the same time, it downloads all attachments to the same directory as the metadata file and transfers the directory and the files in the directory to the second network side through a file transfer device. The second network side enables the BPM process freeze file capture service to listen to the directory, capture the directory transferred from the first network side, record the directory path, and parse the key activation data in the directory; The second network side activates the BPM process activation service to verify the data integrity of files in the directory captured by the BPM process frozen file capture service. After the verification is successful, the attachments are re-uploaded to the BPM system on the second network side, and a new BPM process is initiated under the target process node based on the key activation data.

[0017] This invention provides a BPM workflow relay system and method between isolated networks, which enables seamless connection for the execution of BPM system workflows in two isolated environments. Users only need to operate according to the normal BPM business process. The relay service system is completely transparent to users and supports the full transmission of BPM text and attachment data, making office automation possible in isolated networks. This not only expands the scope of business processes but also improves work efficiency. Attached Figure Description

[0018] Figure 1 This is a schematic diagram of the structure of a BPM process relay system between isolated networks according to the present invention; Figure 2 This is a flowchart of a BPM process relay method between isolated networks according to the present invention. Detailed Implementation

[0019] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0020] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. The terminology used herein in the description of the invention is for the purpose of describing particular embodiments only and is not intended to limit the invention.

[0021] Example 1: As Figure 1 As shown, this embodiment provides a BPM process relay system between isolated networks, involving at least two isolated environments, each composed of peer components. Specifically, each isolated environment includes a BPM system and a relay service system. To support process operation, each isolated environment also includes a web service and a database. Data exchange between the isolated environments is performed through a file transfer device, i.e., one-way data transmission between isolated networks is based on files via network gateways or optical gateways. The relay service system provides four components: BPM process node capture service, BPM process freeze service, BPM process freeze file capture service, and BPM process activation service.

[0022] For ease of description, this embodiment refers to the two isolated environments interacting across isolated networks as the first network side and the second network side. The example given is the transfer of data from the first network side to the second network side. When the second network side needs to transfer data to the first network side, the original second network side is designated as the new first network side, and the original first network side is designated as the new second network side, and the same steps are performed. It is easy to understand that when there are multiple isolated environments, the two isolated environments currently requiring data exchange and transfer are the first network side and the second network side.

[0023] During process data exchange, the BPM process relay system between isolated networks performs the following operations: Step S1: The BPM system on the first network side triggers the BPM process node capture service on the first network side at the target process node to capture key data in the BPM process document.

[0024] In this embodiment, a BPM process node capture service is set up on the first network side. When the BPM process flows to the target process node, the BPM process node capture service is triggered. The BPM process node capture service passively receives key data from the current BPM process document.

[0025] Key data in the current process includes, but is not limited to, serial number, process node, and timestamp. This data is transmitted via HTTP from the BPM system to the BPM process node capture service. The BPM process node capture service saves this key data to the BPM pending-freeze record table in the first network-side database and marks the BPM process status as pending freezing. The relay service system uses a relational database; however, to make the system more lightweight and easier to deploy, a built-in SQLite database can be used for storage.

[0026] In this embodiment, the BPM process node capture service is a web interface service based on HTTP. When the BPM system triggers the call to the BPM process node capture service interface at the target process node, it passes the key data to the interface and stores the key data in the database for querying by the BPM process freeze service.

[0027] Step S2: The BPM process freeze service on the first network side downloads the process data of the BPM process document according to the key data and saves it as a metadata file. At the same time, it downloads all attachments to the same directory as the metadata file and transfers the directory and the files in the directory to the second network side through a file transfer device.

[0028] The BPM process freezing service on the first network side retrieves key data corresponding to a BPM process to be frozen from the BPM pending freeze record table in the first network side database in reverse chronological order based on fixed time intervals, and marks the BPM process as frozen. The time interval must be at least 10 seconds to ensure complete file download.

[0029] Then, an HTTP request is sent to the process data query interface of the BPM system on the first network side through the key data to obtain the full text data of the form in the process data, and the full text data of the form is saved to the metadata file named with the serial number. In this embodiment, the metadata file is a JSON metadata file.

[0030] Simultaneously, all attachments are downloaded based on the attachment information in the full text data of the form, and all attachments are saved in the same directory as the metadata file. The directory is named with username + underscore + serial number + underscore + timestamp to facilitate information transfer using the directory.

[0031] While downloading each attachment, it is necessary to calculate the attachment's hash value and file size, and then append the attachment's file name, hash value, and file size as attributes to the metadata file.

[0032] After all process data and attachments are locally documented, the BPM process is marked as frozen. The entire directory and its files are then copied to a one-way file transfer device, which transfers the directory and its files to the second network side. The one-way file transfer device performs cross-environment transfer tasks. Cross-environment transfer is conducted between systems or network hardware devices; therefore, files must be copied to the specified directory according to the specified file directory format.

[0033] If an exception occurs during the BPM process freeze service processing on the first network side, the BPM process status is marked as failed, the freeze action is terminated and the process ends, in order to avoid wasting computing resources.

[0034] Step S3: The second network side starts the BPM process freeze file capture service to listen to the directory, captures the directory transferred from the first network side, records the directory path and parses the key activation data in the directory.

[0035] The second network side initiates a BPM process freeze file capture service to monitor the file exchange directory. After capturing the BPM persistent file directory transferred from the first network side, it parses the directory name to obtain the username, serial number, and timestamp, calculates the freeze time, and then saves the username, serial number, timestamp, freeze time, and directory path as key activation data to the BPM pending activation record table in the second network side database, marking the BPM process status as pending activation. The freeze time is calculated using the following formula: Freeze Time = Current Time on the Second Network Side - Timestamp.

[0036] Step S4: The second network side activates the BPM process activation service to perform data integrity verification on the files in the directory captured by the BPM process frozen file capture service. After the verification is passed, the attachments are re-uploaded to the BPM system on the second network side, and a new BPM process under the target process node is initiated based on the key activation data.

[0037] In this embodiment, the BPM process freeze service, BPM process freeze file capture service, and BPM process activation service in the relay service system are background timed tasks that scan database records or disk file directories at a polling frequency of not less than 10 seconds to obtain tasks to be processed.

[0038] The second network side initiates the BPM process activation service. At fixed intervals, it retrieves one record from the BPM pending activation record table in the second network side database, sorted in reverse chronological order. This record is then marked as "activating." The system locates the file in the directory based on the directory path in the pending activation record and performs data integrity checks. Integrity checks include verifying the existence of the metadata file and the completeness of the JSON data; checking if the number of attachments specified in the metadata file matches the actual number of attachments in the directory; recalculating the hash value of each attachment; and comparing it with the hash value calculated by the first network side as recorded in the metadata file. If the integrity check fails, the BPM process is marked as failed, the activation process is terminated, and the process ends. If the integrity check succeeds, the next step, BPM process recovery, is executed.

[0039] The BPM process activation service on the second network side re-initiates a new BPM process under the target process node on the second network side's BPM system, based on the process data persisted as files on the first network side. Before BPM process restoration, all attachment files need to be re-uploaded to the second network side's BPM system. After obtaining all returned new attachment IDs, and combining the process data in the metadata file, mainly the parsed key activation data, the BPM process initiation interface of the second network side's BPM system is called to create a new BPM process under the specific node. If creation is successful, the BPM process status is marked as activated; otherwise, if process restoration fails, the BPM process status is marked as failed.

[0040] Furthermore, to facilitate user viewing and operation, the relay service system in this embodiment is designed based on a web architecture, with a supporting data query front-end interface. Users can query the execution status of each task and perform retry operations or manual execution for abnormal tasks. In one embodiment, the relay service system is a web application based on the HTTP data transmission protocol. The entire stack utilizes open-source components to reduce costs. The backend is developed using the Python 3.9 high-level language, employing the Flask lightweight web development framework to transmit front-end and back-end data. It integrates the SQLAlchemy persistence library to handle DBMS database interactions. The web page views and interactions are built using open-source JavaScript and CSS (Cascading Style Sheets) libraries such as LayUI and jQuery. File storage supports both local storage and object file storage based on the minio framework.

[0041] Example 2: As Figure 2 As shown, this embodiment provides a BPM process relay method between isolated networks, where two isolated environments interacting across isolated networks are designated as the first network side and the second network side. The BPM process relay method between isolated networks includes: The BPM system on the first network side triggers the BPM process node capture service on the first network side at the target process node to capture key data in the BPM process document. The BPM process freeze service on the first network side downloads the process data of the BPM process document according to the key data and saves it as a metadata file. At the same time, it downloads all attachments to the same directory as the metadata file and transfers the directory and the files in the directory to the second network side through a file transfer device. The second network side enables the BPM process freeze file capture service to listen to the directory, capture the directory transferred from the first network side, record the directory path, and parse the key activation data in the directory; The second network side activates the BPM process activation service to verify the data integrity of files in the directory captured by the BPM process frozen file capture service. After the verification is successful, the attachments are re-uploaded to the BPM system on the second network side, and a new BPM process is initiated under the target process node based on the key activation data.

[0042] For specific limitations on a BPM process relay method between isolated networks, please refer to the limitations on a BPM process relay system between isolated networks mentioned above, which will not be repeated here.

[0043] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0044] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the appended claims.

Claims

1. A BPM process relay system between isolated networks, characterized in that: The BPM process relay system between isolated networks involves at least two isolated environments, and each isolated environment is provided with a BPM system and a relay service system, the relay service system provides BPM process node capture service, BPM process freezing service, BPM process freezing file capture service and BPM process activation service, and the two isolated environments interacting across the isolated network are recorded as the first network side and the second network side, and the BPM process relay system between isolated networks performs the following operations: The BPM system on the first network side triggers the BPM process node capture service on the first network side at the target process node to capture key data in the BPM process document; The BPM process freezing service on the first network side downloads the process data of the BPM process document according to the key data and saves it as a metadata file, and downloads all attachments to the same directory as the metadata file, and transfers the directory and the files under the directory to the second network side through the file transfer device; The second network side starts the BPM process freeze file capture service to monitor the directory, captures the directory transferred from the first network side, records the directory path and parses the key activation data in the directory; The second network side starts the BPM process activation service to perform data integrity verification on the files in the directory captured by the BPM process frozen file capture service, and re-uploads the attachments to the BPM system on the second network side after the verification passes, and initiates a new BPM process under the target process node based on the key activation data.

2. The BPM process relay system between isolated networks according to claim 1, characterized in that: The BPM process node capture service on the first network side performs the following operations when capturing key data in the BPM process document: The BPM system on the first network side transmits the key data to the BPM process node capture service via HTTP. The BPM process node capture service saves the key data to the BPM to-be-frozen record table of the first network side database and marks the status of the BPM process as to-be-frozen.

3. The BPM process relay system between isolated networks according to claim 1, characterized in that: The BPM process freezing service on the first network side obtains key data before downloading, and performs the following operations when obtaining the key data: Based on a fixed time interval, key data corresponding to a BPM process to be frozen is pulled from the BPM to-be-frozen record table of the first network-side database in reverse chronological order, and the state of the BPM process is marked as being frozen.

4. The BPM process relay system between isolated networks according to claim 1, characterized in that: The BPM process freezing service on the first network side downloads the process data of the BPM process document according to the key data and saves it as a metadata file, and downloads all attachments to the same directory as the metadata file, and performs the following operations: Initiate an HTTP request to the process data query interface of the BPM system on the first network side through the key data, obtain the full text data of the form in the process data, and save the full text data of the form into a metadata file named with a serial number; Traverse and download all attachments according to the attachment information in the full text data of the form, and save all attachments in the same directory as the metadata file; When each attachment is downloaded, the hash value and file size of the attachment are calculated, and the file name, hash value and file size of the attachment are appended as attributes to the metadata file.

5. The BPM process relay system between isolated networks according to claim 1, characterized in that: The BPM process freezing service on the first network side transfers the directory and the files under the directory to the second network side through the file transfer device, and performs the following operations: After completing the local documentation of all process data and attachments, mark the status of the BPM process as frozen, and fully copy the directory and the files under the directory to the one-way file ferry device, which will ferry the directory and the files under the directory to the second network side.

6. The BPM process relay system between isolated networks according to claim 1, characterized in that: The BPM process on the second network side freezes the file capture service, records the directory path and parses the key activation data in the directory, and performs the following operations: Parse the directory name to obtain the user name, serial number and timestamp, calculate the freezing time, save the user name, serial number, timestamp, freezing time and directory path to the BPM to-be-activated record table in the second network side database, and mark the status of the BPM process as to-be-activated.

7. The BPM process relay system between isolated networks according to claim 6, characterized in that: The calculation formula of the freezing time is as follows: freezing time=current time of the second network side-time stamp.

8. The BPM process relay system between isolated networks according to claim 1, characterized in that: The BPM process activation service on the second network side performs data integrity check on the files in the directory captured by the BPM process frozen file capture service, and performs the following operations: At fixed time intervals, a record to be activated is obtained from the BPM to be activated record table in the second network side database in reverse chronological order, the status of the BPM process is marked as being activated, and the file in the directory is located according to the directory path in the record to be activated and a data integrity check is performed.

9. The BPM process relay system between isolated networks according to claim 1, characterized in that: The BPM process activation service on the second network side initiates a new BPM process under the target process node according to the key activation data and performs the following operations: Get the new attachment ID returned after all attachments are re-uploaded to the BPM system on the second network side, combine it with the key activation data, call the BPM process initiation interface of the BPM system on the second network side to create a new BPM process under the target process node. If the creation is successful, mark the status of the BPM process as activated; otherwise, the process recovery fails and the status of the BPM process is marked as failed.

10. A BPM process relay method between isolated networks, characterized in that: The two isolated environments interacting across the isolated network are recorded as a first network side and a second network side, and the BPM process relay method between isolated networks includes: The BPM system on the first network side triggers the BPM process node capture service on the first network side at the target process node to capture key data in the BPM process document; The BPM process freezing service on the first network side downloads the process data of the BPM process document according to the key data and saves it as a metadata file, and downloads all attachments to the same directory as the metadata file, and transfers the directory and the files under the directory to the second network side through the file transfer device; The second network side starts the BPM process freeze file capture service to monitor the directory, captures the directory transferred from the first network side, records the directory path and parses the key activation data in the directory; The second network side starts the BPM process activation service to perform data integrity verification on the files in the directory captured by the BPM process frozen file capture service, and re-uploads the attachments to the BPM system on the second network side after the verification passes, and initiates a new BPM process under the target process node based on the key activation data.

Images