Cross-screen operation method and device and storage medium

Abstract

The invention relates to a cross-screen operation method and device and a storage medium. The method comprises the steps that terminal equipment is connected with an extranet calculation blade and an intranet calculation blade at the same time; collecting a trigger event of the terminal equipment in real time, and judging the attribution of the current trigger event; if it is detected that the cross-screen operation exists in the trigger event, audio output signals of the switched calculation blade are transmitted to audio output equipment; if it is detected that the terminal equipment performs cross-screen operation after the terminal equipment has a copy behavior on the external network computing blade, the one-way data transmission module caches the clipboard data; and if the cross-screen window dragging operation is detected, outputting the window content to a display of the dragged calculation blade for displaying. A user is allowed to be connected with a keyboard, a mouse and two displays through a single cloud PC user terminal and simultaneously access and control a plurality of computing blade hosts in networks with different security levels.

Description

Technical Field

[0001] The present invention relates to the field of computer networks, and in particular to a cross-screen operation method, device and storage medium. Background Art

[0002] With the development of cloud desktop technology, more and more enterprises and organizations have begun to adopt cloud desktop systems to centrally manage virtual machines and terminal devices. However, in traditional cloud desktop systems, users access and control virtual machines through a unified network. This centralized architecture poses security risks, especially when transmitting and processing sensitive files. Since the terminal access network and the business data network usually share the same network, when users control the virtual machine through the management interface, they can directly access and copy sensitive data in the cloud desktop computer, causing the risk of data leakage.

[0003] Users often need to access networks with different security levels at the same time, such as the Internet, internal office networks, and confidential scientific research networks. Traditional methods usually require separate computers and peripherals for each network, which not only increases hardware costs but also reduces work efficiency. Although some existing solutions allow switching between multiple monitors, they often do not support simultaneous display and control of systems on different networks, and the operation is complicated. Summary of the invention

[0004] The present invention provides a cross-screen operation method, device and storage medium, aiming to solve at least one of the technical problems existing in the prior art.

[0005] The technical solution of the present invention is a cross-screen operation method, which is applied to a cross-screen operation device, which includes an external network cloud PC server, on which at least one external network computing blade connected to the external network is provided; an internal network cloud PC server, on which at least one internal network computing blade connected to the internal network is provided; a unidirectional data transmission module, through which the external network computing blade and the internal network computing blade are connected; a terminal device, which includes at least a first display, a second display, an audio output device, a keyboard and a mouse; and a terminal access network, to which the external network computing blade, the internal network computing blade and the terminal device are respectively connected, and the cross-screen operation method includes:

[0006] S100, based on cloud technology, the terminal device is connected to an external network computing blade and an internal network computing blade through a terminal access network at the same time, the external network computing blade outputs a desktop signal to a first display for display, and the internal network computing blade outputs a desktop signal to a second display for display;

[0007] S200, collecting trigger events of terminal devices in real time, determining the attribution of the current trigger events, and transmitting the trigger events to the external network computing blade or the internal network computing blade through the terminal access network. The external network computing blade or the internal network computing blade synthesizes the received trigger events into desktop signals and synchronously displays them on the first display or the second display through the terminal access network;

[0008] S300: If a cross-screen operation is detected in the triggering event, the audio output signal of the switched computing blade is transmitted to the audio output device through the terminal access network, and the audio output signal of the switched computing blade is stopped;

[0009] S400: If it is detected that the terminal device has a copying behavior on the external network computing blade and then performs a cross-screen operation, the one-way data transmission module caches the clipboard data;

[0010] S500: If a cross-screen window dragging operation is detected, the window content is output to the display of the dragged computing blade for display.

[0011] Further, in step S100,

[0012] The external network computing blade and the internal network computing blade connected to the terminal device are pre-bound external network computing blades and pre-bound internal network computing blades based on a unidirectional data transmission module, wherein:

[0013] An external network client with a one-way isolation module is installed on the pre-bound external network computing blade, and an internal network client with a one-way isolation module is installed on the pre-bound internal network computing blade. The external network client and the internal network client are connected through a one-way isolation gateway, and the external network client and the internal network client log in to the same user account.

[0014] Further, step S100 also includes:

[0015] According to the preset default playing parameters, the audio output device plays a default audio output signal, where the default audio output signal is the audio output signal of the external network computing blade or the audio output signal of the internal network computing blade.

[0016] Further, in step S200,

[0017] The trigger events include keyboard key events and mouse events, and the mouse events include mouse click events and mouse movement events.

[0018] When a keyboard key event is collected, it is sent to the external network computing blade or the internal network computing blade according to the application program where the current keyboard input state is located;

[0019] When a mouse click event is collected, it is mapped to an external network computing blade or an internal network computing blade according to the desktop where the mouse click is located;

[0020] When a mouse movement event is collected, the external network computing blade or the internal network computing blade is corresponded according to the desktop where the mouse is currently located. If a mouse cross-screen operation is detected, the real-time mouse position is transmitted to the corresponding external network computing blade or the internal network computing blade in chronological order. The mouse cross-screen operation includes the mouse moving from the edge of the first display to the second display and the mouse moving from the edge of the second display to the first display.

[0021] Further, step S400 includes:

[0022] S410: If the external network client and the internal network client log in to the same user account, the external network client detects the copying behavior in real time, where the copying behavior at least includes copying text, copying images, and copying files;

[0023] S420: If the external network client detects the copying behavior, the one-way data transmission module caches the clipboard data and performs detection and identification, and filters the copied data that does not meet the preset conditions;

[0024] S430: If a cross-screen operation is detected, the intranet computing blade is switched to and a paste operation is detected, and the cached data is pasted to the intranet computing blade.

[0025] Furthermore, step S400 further includes:

[0026] If it is detected that the terminal device has copied data on the intranet computing blade and then performs a cross-screen operation, the clipboard data of the intranet computing blade will be discarded.

[0027] Further, step S500 includes:

[0028] S510: If a cross-screen window drag operation is detected, the window content is synthesized into the dragged computing blade;

[0029] S520, outputting the desktop signal synthesized with the window content to the display corresponding to the dragged computing blade;

[0030] S530: If a window resize operation is detected, the operation content is transmitted to the original computing blade to which the window belongs for processing, then transmitted to the dragged computing blade for synthesis, and finally output to the display corresponding to the dragged computing blade for display;

[0031] S540: If an operation on the window content is detected, the operation content is transmitted to the original computing blade to which the window belongs for processing.

[0032] Further, in step S520,

[0033] The cross-screen display window includes a cross-screen mark, which includes a combination of one or more of a border color, watermark text in the window, and text in the window operation bar.

[0034] Furthermore, the present invention also provides a cross-screen operation device for executing the cross-screen operation method, wherein the cross-screen operation device comprises:

[0035] An external network cloud PC server, wherein the external network cloud PC server is provided with at least one external network computing blade connected to the external network;

[0036] An intranet cloud PC server, wherein the intranet cloud PC server is provided with at least one intranet computing blade connected to the intranet;

[0037] A unidirectional data transmission module, wherein the unidirectional data transmission module only allows data to flow unidirectionally from the external network computing blade to the internal network computing blade, and the external network computing blade and the internal network computing blade are connected via the unidirectional data transmission module;

[0038] A terminal device, the terminal device at least comprising a first display, a second display, an audio output device, a keyboard and a mouse, the first display being used to display the screen output of the external network computing blade, the second display being used to display the screen output of the internal network computing blade, the audio output device being used to play the audio output of the external network computing blade or the internal network computing blade corresponding to the currently active screen in the first display and the second display, the number of the first display and the second display being at least one, and the number of the keyboard and the mouse being one;

[0039] A terminal access network, the external network computing blade, the internal network computing blade and the terminal device are respectively connected to the terminal access network.

[0040] Furthermore, the present invention also proposes a computer-readable storage medium on which program instructions are stored, and when the program instructions are executed by a processor, the cross-screen operation method is implemented.

[0041] The beneficial effects of the present invention are:

[0042] The cross-screen operation method, device and storage medium allow a user to simultaneously access and control multiple computing blade hosts located in networks with different security levels through a single cloud PC user terminal by connecting a keyboard, a mouse and two monitors. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 The figure is an overall flow chart of the cross-screen operation method.

[0044] Figure 2 It is a structural schematic diagram of a cross-screen operation device.

[0045] Figure 3 The schematic diagram is a structural diagram of an application example of a cross-screen operation device.

[0046] Figure 4 The present invention is a flowchart of a one-way data transmission method in a cross-screen operation method.

[0047] Figure 5 The figure is a flowchart showing the working principle of the one-way isolation firewall in the cross-screen operation method.

[0048] Figure 6 It is a structural schematic diagram of a one-way data transmission device in a cross-screen operation device.

[0049] Figure 7 It is a schematic diagram of the software module structure of the one-way data transmission device in the cross-screen operation device.

[0050] 100, external network cloud PC server; 110, external network computing blade; 200, internal network cloud PC server; 210, internal network computing blade; 300, one-way data transmission module; 400, terminal device; 410, first display; 420, second display; 430, audio output device; 440, keyboard; 450, mouse; 500, terminal access network. DETAILED DESCRIPTION

[0051] The following will be combined with the embodiments and drawings to clearly and completely describe the concept, specific structure and technical effects of the present invention, so as to fully understand the purpose, scheme and effect of the present invention. It should be noted that the embodiments and features in the embodiments of this application can be combined with each other without conflict.

[0052] It should be noted that, unless otherwise specified, when a feature is referred to as being "fixed" or "connected" to another feature, it may be directly fixed or connected to the other feature, or it may be indirectly fixed or connected to the other feature. In addition, the descriptions of up, down, left, right, top, bottom, etc. used in the present invention are only relative to the relative positional relationship of the components of the present invention in the drawings.

[0053] In addition, unless otherwise defined, all technical and scientific terms used herein have the same meaning as those generally understood by those skilled in the art. The terms used in this specification are only for describing specific embodiments, not for limiting the present invention. The term "and / or" used herein includes any combination of one or more related listed items.

[0054] It should be understood that, although the terms first, second, third, etc. may be used to describe various elements in the present disclosure, these elements should not be limited to these terms. These terms are only used to distinguish elements of the same type from each other. For example, without departing from the scope of the present disclosure, the first element may also be referred to as the second element, and similarly, the second element may also be referred to as the first element.

[0055] Reference Figures 1 to 7 In some embodiments, the technical solution of the present invention is a cross-screen operation method, which is applied to a cross-screen operation device, which includes an external network cloud PC server 100, on which at least one external network computing blade 110 connected to the external network is provided; an internal network cloud PC server 200, on which at least one internal network computing blade 210 connected to the internal network is provided; a unidirectional data transmission module 300, through which the external network computing blade 110 and the internal network computing blade 210 are connected; a terminal device 400, which includes at least a first display 410, a second display 420, an audio output device 430, a keyboard 440 and a mouse 450; a terminal access network 500, to which the external network computing blade 110, the internal network computing blade 210 and the terminal device 400 are respectively connected, with reference to Figure 1 , the cross-screen operation method includes:

[0056] S100, based on cloud technology, the terminal device 400 is connected to the external network computing blade 110 and the internal network computing blade 210 through the terminal access network 500 at the same time, the external network computing blade 110 outputs a desktop signal to the first display 410 for display, and the internal network computing blade 210 outputs a desktop signal to the second display 420 for display;

[0057] S200, real-time collection of trigger events of the terminal device 400, determination of the attribution of the current trigger event, transmission to the external network computing blade 110 or the internal network computing blade 210 through the terminal access network 500, the external network computing blade 110 or the internal network computing blade 210 synthesizes the received trigger event into a desktop signal and synchronously displays it on the first display 410 or the second display 420 through the terminal access network 500;

[0058] S300: If a cross-screen operation is detected in the triggering event, the audio output signal of the switched computing blade is transmitted to the audio output device 430 through the terminal access network 500, and the audio output signal of the switched computing blade is stopped;

[0059] S400, if it is detected that the terminal device 400 has a copy behavior in the external network computing blade 110 and then performs a cross-screen operation, the one-way data transmission module 300 caches the clipboard data;

[0060] S500: If a cross-screen window dragging operation is detected, the window content is output to the display of the dragged computing blade for display.

[0061] In a specific embodiment, the detailed operation process is as follows:

[0062] (1) User login: Connect to the terminal access network 500 through the terminal device 400; enter the identity credentials and access the cloud PC system after authentication.

[0063] (2) Configuring dual-screen mode: When it is detected that the user has connected two monitors, the dual-screen display mode is automatically enabled, or the user is prompted to configure it manually.

[0064] (3) Allocate computing resources: Allocate two or more computing modules based on user permissions. Each computing module corresponds to an independent desktop environment.

[0065] (4) Select display content: Select which computing module's desktop to display on each monitor, allowing users to connect to two desktop resources at the same time and display them on two monitors respectively.

[0066] (5) Unified control operation: The user uses the same keyboard 440 and mouse 450 to smoothly operate two desktop resources, and the system provides a seamless cross-screen operation experience, such as copying and pasting files or moving windows between two displays.

[0067] (6) Resource switching: Users can switch the desktop resources displayed on the monitor at any time. The switching process is fast and does not affect the user's work continuity.

[0068] (7) Peripheral management: The audio automatically follows the current active screen without the need for manual switching by the user. The connection of USB peripherals requires the user to take the initiative to ensure safety.

[0069] (8) Session management: Users can save the current dual-screen configuration so that they can quickly restore the working environment next time. The system supports session persistence, allowing users to quickly restore the previous working status after temporarily disconnecting.

[0070] (9) Safe exit: After completing their work, users can choose to log out or close a specific desktop environment; the system ensures that all resources are properly released and cleans up possible sensitive data.

[0071] The beneficial effects of the present invention are:

[0072] The cross-screen operation method, device and storage medium allow a user to connect a keyboard 440, a mouse 450 and two monitors through a single cloud PC user terminal, and simultaneously access and control multiple computing blade hosts located in networks with different security levels.

[0073] Further, in step S100,

[0074] The external network computing blade 110 and the internal network computing blade 210 connected to the terminal device 400 are the external network computing blade 110 and the internal network computing blade 210 pre-bound based on the unidirectional data transmission module 300, wherein:

[0075] The pre-bound external network computing blade 110 is installed with an external network client of a one-way isolation module, and the pre-bound internal network computing blade 210 is installed with an internal network client of a one-way isolation module. The external network client and the internal network client are connected through a one-way isolation gateway, and the external network client and the internal network client log in to the same user account.

[0076] Further, step S100 also includes:

[0077] According to the preset default playing parameters, the audio output device 430 plays a default audio output signal, where the default audio output signal is the audio output signal of the external network computing blade 110 or the audio output signal of the internal network computing blade 210 .

[0078] Specifically, if the default playback parameter is to play the audio output signal of the external network computing blade 110, the audio output signal of the external network computing blade 110 is played; if the default playback parameter is to play the audio output signal of the internal network computing blade 210, the audio output signal of the internal network computing blade 210 is played. The output signal of the audio output device 430 is not changed until step S300 occurs.

[0079] Specifically, in step S100, the desktop of the cloud PC computing blade is pulled, and the user initiates an operation through the cloud PC user terminal, selects the desktop of the cloud PC computing blade to be pulled, and requires that these desktops be displayed in real time on the local display. On the two displays connected to the cloud PC user terminal, different cloud PC computing blade desktops are pulled respectively to realize simultaneous viewing of two machines.

[0080] Further, in step S200,

[0081] The trigger events include keyboard key events and mouse events, and the mouse events include mouse click events and mouse movement events.

[0082] When a keyboard key event is collected, it is sent to the external network computing blade 110 or the internal network computing blade 210 according to the application program where the current keyboard 440 input state is located;

[0083] When a mouse click event is collected, it is mapped to the external network computing blade 110 or the internal network computing blade 210 according to the desktop where the mouse 450 clicks;

[0084] When a mouse movement event is collected, the desktop where the mouse 450 is currently located is corresponded to the external network computing blade 110 or the internal network computing blade 210. If a cross-screen operation of the mouse 450 is detected, the real-time position of the mouse 450 is transmitted to the corresponding external network computing blade 110 or the internal network computing blade 210 in chronological order. The cross-screen operation of the mouse 450 includes the mouse 450 moving from the edge of the first display 410 to the second display 420 and the mouse 450 moving from the edge of the second display 420 to the first display 410.

[0085] Specifically, in step S200, collecting local keyboard and mouse events includes:

[0086] (1) Keyboard and mouse input capture: When the user performs keyboard 440 and mouse 450 input on the cloud PC user terminal, the system will collect all input events in real time. These input events (such as keyboard keys, mouse movements, clicks, etc.) will be transmitted to the corresponding cloud PC computing blade and synchronized to the remote desktop.

[0087] (2) Event transmission: The captured local keyboard and mouse input events will be transmitted to the corresponding cloud PC computing blade according to the currently displayed desktop status (that is, the computing blade desktop currently operated by the user), ensuring that the user's input can immediately affect the corresponding remote desktop.

[0088] It also includes detecting cross-screen operations:

[0089] (1) Cross-screen recognition: If multiple cloud PC computing blade desktops are displayed on the user's monitor, the system needs to monitor in real time whether the mouse 450 crosses the boundaries of different desktops, that is, whether a "cross-screen operation" occurs.

[0090] (2) Screen boundary detection: The system determines whether a cross-screen operation occurs by detecting whether the mouse 450 moves to the edge of different cloud PC computing blade desktops. For example, when the mouse 450 pointer moves from one cloud PC desktop to the edge of another cloud PC desktop, the system will recognize a cross-screen operation.

[0091] Switching between desktops includes:

[0092] (1) Switching conditions: Once a cross-screen operation is detected, the system will automatically switch to the target desktop where the user's mouse 450 is located. The user's keyboard and mouse input will be passed to this desktop, ensuring that the user can seamlessly operate between different cloud PC computing blade desktops.

[0093] (2) Desktop synchronization: The system will automatically switch to the target desktop and display the content of the desktop synchronously. For the desktop of the cloud PC computing blade, the system will ensure that the target desktop has been decoded and is ready for display, and the switching process remains smooth to avoid delays or freezes.

[0094] In step S300, audio switching includes:

[0095] (1) Audio acquisition and transmission: In synchronization with the video stream, the audio output of the cloud PC computing blade also needs to be acquired and transmitted to the user's local terminal. When the user operates on the desktop of the cloud PC computing blade, the cloud PC computing blade will capture the audio stream in the current desktop environment and transmit it to the local terminal through the network.

[0096] (2) Audio and video synchronization: When operating across desktops, the audio stream and video stream will switch simultaneously, ensuring that when the user switches to a new Cloud PC computing blade desktop, not only the picture changes, but the audio can also be switched to the corresponding host in real time. For example, the audio played when the user operates on the first Cloud PC computing blade desktop will switch to the next Cloud PC computing blade desktop along with the desktop, and the audio of that desktop will start playing.

[0097] Further, step S400 includes:

[0098] S410: If the external network client and the internal network client log in to the same user account, the external network client detects the copying behavior in real time, where the copying behavior at least includes copying text, copying images, and copying files;

[0099] S420: If the external network client detects the copying behavior, the one-way data transmission module 300 caches the clipboard data and performs detection and identification, and filters the copied data that does not meet the preset conditions;

[0100] S430 , if a cross-screen operation is detected, the intranet computing blade 210 is switched to and a paste operation is detected, and the cached data is pasted to the intranet computing blade 210 .

[0101] Furthermore, step S400 further includes:

[0102] If it is detected that the terminal device 400 performs a cross-screen operation after copying the intranet computing blade 210, the clipboard data of the intranet computing blade 210 is discarded.

[0103] In a specific embodiment, the cross-network copy and paste process is described as follows: Cloud PC users, under the same account, unidirectionally copy and paste data from a low-security network (Internet) to a high-security network (office intranet). The data transmission delay is small and the user is unaware, which ensures data security while providing an efficient and smooth cross-network collaborative office experience.

[0104] (1) Copy data from the external network

[0105] After a cloud PC user logs into the client software of their terminal (such as the Internet), they copy text, images or files;

[0106] (2) Intelligent clipboard recognition

[0107] The client software monitors the content of the terminal clipboard in real time and intelligently identifies qualified content (such as text content, image data, and files with a capacity of less than 10MB);

[0108] (3) One-way transmission of clipboard data

[0109] The clipboard data is transmitted to the terminal of the target business data network (such as the office intranet) through a one-way isolation network gate;

[0110] (4) Paste data on the intranet

[0111] The user logs in with the corresponding account on the target terminal (such as the office intranet). The user receives the transmitted content without noticing it, executes the paste action, and completes the cross-network copy and paste of data.

[0112] Further, step S500 includes:

[0113] S510: If a cross-screen window drag operation is detected, the window content is synthesized into the dragged computing blade;

[0114] S520, outputting the desktop signal synthesized with the window content to the display corresponding to the dragged computing blade;

[0115] S530: If a window resize operation is detected, the operation content is transmitted to the original computing blade to which the window belongs for processing, then transmitted to the dragged computing blade for synthesis, and finally output to the display corresponding to the dragged computing blade for display;

[0116] S540: If an operation on the window content is detected, the operation content is transmitted to the original computing blade to which the window belongs for processing.

[0117] Further, in step S520,

[0118] The cross-screen display window includes a cross-screen mark, which includes a combination of one or more of a border color, watermark text in the window, and text in the window operation bar.

[0119] Further, refer to Figure 2 and Figure 3 The present invention further provides a cross-screen operation device for executing the cross-screen operation method. The cross-screen operation device includes:

[0120] An external network cloud PC server 100, wherein the external network cloud PC server 100 is provided with at least one external network computing blade 110 connected to the external network;

[0121] An intranet cloud PC server 200, wherein the intranet cloud PC server 200 is provided with at least one intranet computing blade 210 connected to the intranet;

[0122] A unidirectional data transmission module 300, wherein the unidirectional data transmission module 300 only allows data to flow unidirectionally from the external network computing blade 110 to the internal network computing blade 210, and the external network computing blade 110 and the internal network computing blade 210 are connected via the unidirectional data transmission module 300;

[0123] A terminal device 400, wherein the terminal device 400 comprises at least a first display 410, a second display 420, an audio output device 430, a keyboard 440 and a mouse 450, wherein the first display 410 is used to display the screen output of the external network computing blade 110, the second display 420 is used to display the screen output of the internal network computing blade 210, the audio output device 430 is used to play the audio output of the external network computing blade 110 or the internal network computing blade 210 corresponding to the currently active screen in the first display 410 and the second display 420, the number of the first display 410 and the number of the second display 420 are both at least one, and the number of the keyboard 440 and the number of the mouse 450 are both one;

[0124] The terminal access network 500, the external network computing blade 110, the internal network computing blade 210 and the terminal device 400 are respectively connected to the terminal access network 500.

[0125] In a specific embodiment, the external network cloud PC server 100 and the internal network cloud PC server 200 are used to provide computing resources, and the terminal device 400 is a cloud PC terminal device 400, and the terminal device 400 is connected to a keyboard 440, a mouse 450 and two monitors, and is connected to the business data network through a terminal access network 500. The cross-screen operation device supports multi-network access, is connected to the internal network cloud PC server 200 through an internal network (business data network), and is connected to the terminal device 400 through a terminal access network 500.

[0126] In a specific embodiment, the external network cloud PC server 100 and the internal network cloud PC server 200 correspond to an independent operating environment respectively, and are connected to the encoding module through an HDMI interface. The encoding module is used to collect and encode the video output of the computing module, and communicate with the terminal device 400 through a management switch board.

[0127] It supports displaying the interface of the cloud PC server on two monitors at the same time, realizing seamless switching and collaborative work of multiple remote desktop environments. In terms of terminal control, all connected computing modules are controlled through a single keyboard 440 and mouse 450, supporting cross-screen operation and resource switching.

[0128] Regarding the one-way data transmission module 300, the one-way isolation network gate uses technologies such as FPGA, data security island and ferry control system to achieve one-way transmission from the external network to the internal network, ensuring that data can only flow from the low-security level network to the high-security level network in one direction, effectively preventing reverse transmission of data. The one-way transmission process of the one-way isolation network gate is divided into the following three steps:

[0129] (1) Stripping network protocols

[0130] The external network access unit sends the payload data stripped of the TCP / IP protocol to the external network isolation module and stores it in the external network data security island at the same time. During this process, the ferry control system disconnects from the external network access unit and switches to communicate with the internal network isolation module.

[0131] (2) One-way ferry data

[0132] After the ferry control system is switched, the external network isolation module transmits the payload data to the internal network isolation module in one direction through a dedicated private protocol. After the data is transmitted to the internal network isolation module, it is also stored in the internal network data security island.

[0133] (3) Encapsulation of network protocols

[0134] The ferry control system switches the connection again, and the intranet isolation module establishes a connection with the intranet access unit. At this time, the intranet isolation module transfers the previously stored data payload to the intranet access unit, completing the entire one-way data transmission process and ensuring that the data is safely transmitted from the low-security level network to the high-security level network.

[0135] In some embodiments, regarding the unidirectional data transmission module 300, the present invention also proposes a unidirectional data transmission method, which is applied to a unidirectional data transmission device, wherein the unidirectional data transmission device includes an external network client, a unidirectional isolation network gate and an internal network client connected in sequence, wherein the external network server is arranged on an external network host computer connected to the external network, and the internal network server is arranged on an internal network host computer connected to the internal network; the unidirectional isolation network gate includes: an external network processing module, wherein the external network processing module includes an external network access unit and an external network isolation unit connected in sequence, wherein the external network isolation unit is provided with an external network data security island; an isolation module, which is used for IPSec processing and algorithm encryption and decryption; an internal network processing module, wherein the internal network processing module includes an internal network isolation unit and an internal network access unit connected in sequence; a main control module, which is used to perform key negotiation and operation and maintenance management; a security protection module, which is used to collect and transmit destruction signals, refer to Figure 4 , the one-way data transmission method comprises:

[0136] S10, use the same account to log in to the external network server and the internal network server, and establish a communication link between the external network host computer, the one-way isolation network gateway and the internal network host computer;

[0137] S20, the external network server continuously monitors the clipboard content and file changes of the external network host computer. If the external network server captures the changes, it reads the changed data and sends the changed data to the one-way isolation network gate through the network protocol;

[0138] S30, the external network processing module of the one-way isolation network gate receives the changed data and caches the changed data to the external network data security island;

[0139] S40, the isolation module of the one-way isolation gateway caches the changed data cached in the external network data security island to the internal network data security island;

[0140] S50, the intranet processing module of the one-way isolation network gate receives and reconstructs the changed data, and forwards it to the intranet client;

[0141] S60. The intranet client periodically obtains the changed data from the one-way isolation network gate, and writes the changed data into the clipboard of the intranet host computer or saves it as a file of the intranet host computer.

[0142] The beneficial effects of the one-way data transmission method are:

[0143] The one-way data transmission method adopts physical computing blades and a physically isolated dual network design to completely separate the management network from the business data transmission network. This technical solution ensures that users can only control the interface and operations of the cloud PC in the cloud desktop system, and cannot directly access files or data in the cloud PC, thus ensuring the security of data transmission.

[0144] The technical solution of the one-way data transmission method can effectively solve the security risks in the traditional cloud desktop system. The specific effects are as follows:

[0145] (1) Preventing data leakage: Since the terminal access network 500 and the business data network are physically isolated, users cannot directly access or copy the data and files in the virtual machine through the management network, completely eliminating the risk of data leakage through the network.

[0146] (2) Improve system security: The physical isolation design of the two networks enhances the security of the system, so that the security vulnerabilities of either network will not affect the other network, reducing potential security threats.

[0147] (3) Adaptability to scenarios with high security requirements: The present invention is suitable for scenarios with extremely high data security requirements, such as finance, enterprise sensitive information processing and other fields, ensuring the security of data during storage and transmission.

[0148] (4) Improve user experience: Although users can only control the interface of the cloud PC computer through the terminal access network 500, their operations are smooth and the interface responds quickly. It will not be affected by the security protection measures of the business data transmission network, ensuring the efficiency and security of the system.

[0149] The protection points of the one-way data transmission method mainly include: the management network and the business data transmission network adopt a physical isolation technical solution to ensure the dual network structure of data security. Users can only operate the virtual machine interface in the management network and cannot access any files or data in the business data transmission network. Data files are only transmitted and stored through the physically isolated business network, eliminating the risk of obtaining data through the management network and ensuring data security.

[0150] In a specific application scenario, a server with a one-way isolation firewall is set up between the PC on the external network and the PC on the internal network. The internal and external network units of the server run service programs respectively. The internal and external network PCs install client programs respectively and log in to the corresponding servers. After running the client program, the copy action is executed on the external network PC, and the copied content will be transferred to the internal network PC. When the paste action is executed, the copied internal network can be seen, thereby realizing copy and paste between different PCs in different networks and improving the development efficiency of R&D personnel.

[0151] The advantages of the one-way data transmission method are: easy to use. After setting up the network environment, installing the client and logging in, you can copy and paste content from the external network PC to the internal network at will, which is the same as copying and pasting on the same PC, greatly improving office efficiency; no manual intervention is required, reducing labor costs; it is universal and can be used in similar R&D companies with multiple network separations while facilitating the work of R&D personnel.

[0152] Further, refer to Figure 4 , the step S30 comprises:

[0153] S31, the external network access unit strips off the TCP / IP protocol to obtain payload data, where the payload data is the data content in the changed data;

[0154] S32, the external network access unit sends the payload data to the external network isolation unit;

[0155] S33. The external network isolation unit receives the payload data and stores it in the external network data security island at the same time.

[0156] Further, refer to Figure 4 , the step S40 comprises:

[0157] S41, the external network isolation unit disconnects from the external network access unit;

[0158] S42, the external network isolation unit is connected to the internal network isolation unit;

[0159] S43, the external network isolation unit sends the payload data to the internal network isolation unit;

[0160] S44, the intranet isolation unit receives the payload data and stores it in the intranet data security island at the same time.

[0161] Further, refer to Figure 4 , the step S50 comprises:

[0162] S51, the internal network isolation unit disconnects from the external network isolation unit;

[0163] S52, the intranet isolation unit is connected to the intranet access unit;

[0164] S53, the intranet isolation unit sends the payload data to the intranet access unit;

[0165] S54. The intranet access unit re-encapsulates the network protocol and forwards it to the intranet client.

[0166] Further, refer to Figure 4 , before step S30, the step further includes: the external network processing module receives the clipboard data sent by the external network host computer, first checks the data format to confirm whether the data format is correct, and then performs a privatization protocol conversion on the data. If the data format verification fails, the data is discarded;

[0167] Before step S40, the step further includes: the isolation module receives the data sent by the external network processing module, first checks the data format, and discards the data that fails the check;

[0168] The step S50 also includes: the intranet processing module receives the data sent by the isolation module, first checks the data format to confirm whether the data format is correct, if the data format check fails, the data is discarded, the data format check is performed on the data through the data conversion module to convert the data into a private protocol, and finally the converted data is written into the intranet unit data queue of the intranet client software.

[0169] Further, refer to Figure 6 , and also proposes a one-way data transmission device for executing the one-way data transmission method, wherein the one-way data transmission device comprises an external network client, a one-way isolation network switch and an internal network client connected in sequence, wherein,

[0170] The external network server is arranged on an external network host computer connected to the external network, and the internal network server is arranged on an internal network host computer connected to the internal network, wherein the security level of the internal network is higher than that of the external network;

[0171] The one-way isolation network gate comprises:

[0172] An external network processing module, the external network processing module includes an external network access unit and an external network isolation unit connected in sequence, and the external network isolation unit is provided with an external network data security island;

[0173] An isolation module, used for IPSec processing and algorithm encryption and decryption, wherein the isolation module is connected to the external network processing module via a low voltage differential signaling technology interface LVDS;

[0174] An intranet processing module, used for quintuple filtering and data forwarding, the intranet processing module comprises an intranet isolation unit and an intranet access unit connected in sequence, the intranet processing module is connected to the isolation module via a low voltage differential signaling technology interface LVDS, and only allows data to flow unidirectionally from the external network isolation unit to the intranet isolation unit;

[0175] A main control module, used for performing key negotiation and operation and maintenance management, the main control module and the isolation module are connected via a reduced gigabit media independent interface RGMII (RGMII) for a service data channel and a secure digital input and output interface SDIO (SDIO) for a management data channel;

[0176] The safety protection module is used for collecting and transmitting the destruction signal, and the safety protection module is connected with the main control module via a universal asynchronous receiving and transmitting interface UART.

[0177] Specifically, the one-way isolation gateway is designed to provide secure data transmission between networks with different security levels. It only allows data to flow from a low-security network (such as the Internet) to a high-security network (such as an intranet) in one direction, preventing any reverse data flow and ensuring data security in the high-security network. The one-way isolation gateway uses technologies such as FPGA, data security islands, and ferry control systems to achieve one-way transmission from the external network to the internal network, ensuring that data can only flow from a low-security network to a high-security network in one direction, effectively preventing reverse data transmission.

[0178] The one-way isolation gateway is mainly composed of an internal network processing module, an external network processing module, an isolation module, a main control module, and a security protection module. The internal network processing module / external network processing module and the isolation module are connected through the LVDS bus, the main control module and the isolation module are connected through the RGMII and SDIO buses, and the main control module and the security protection module are connected through the UART interface.

[0179] 1) Intranet processing module

[0180] The internal network processing module consists of 1 FPGA, which mainly completes the quintuple filtering and data forwarding functions. The internal network processing module is connected to the isolation module through the LVDS bus, and provides 2 Ethernet interfaces to the outside, supporting 10 / 100 / 1000M self-adaptation.

[0181] 2) External network processing module

[0182] The external network processing module consists of 1 CPU and 1 FPGA, which are connected via the SDIO interface. The CPU mainly completes the functions of MAC learning and operation and maintenance management agent, and the FPGA mainly completes the quintuple filtering and data forwarding functions. The external network processing module is connected to the isolation module via the LVDS bus, and provides an Ethernet interface to the outside, supporting 10 / 100 / 1000M self-adaptation.

[0183] 3) Isolation module

[0184] The isolation module mainly completes the IPSec processing and algorithm encryption and decryption functions. It is implemented using FPGA and is connected to the intranet FPGA and the extranet FPGA through the LVDS bus. It is connected to the main control module through the RGMII and SDIO buses. The RGMII bus serves as the business data channel and the SDIO serves as the management data channel.

[0185] 4) Main control module

[0186] The main control module mainly completes the key negotiation and operation and maintenance management functions of the equipment.

[0187] 5) Security module

[0188] The security module mainly completes the collection and transmission functions of the destruction signal and is connected to the main control module through the UART interface.

[0189] Reference Figure 5 , introduces the working principle of the one-way isolation firewall. The one-way isolation firewall ensures one-to-one transmission of data from the external network to the internal network through strict user authentication and data binding mechanisms, eliminating the possibility of data transmission errors. The core of the system design is to ensure the high security and accuracy of data transmission and ensure that data can only be received by the designated recipient (the same user). The system supports manual creation of users and docking with existing AD domains for user management. Users need to log in with the same account on both the external network client and the internal network client. The data entered by the external network user can only be entered into the computer where the client logged in with the same user on the internal network is located.

[0190] The working principle of the external network client is that the external network client software monitors the clipboard content and file changes of the external network computer through a scheduled task or real-time monitoring mechanism. Once a change in the clipboard content or a new / modified file is detected, the software will immediately read the corresponding data and send it to the one-way isolation network gate through the network protocol.

[0191] 1) Clipboard monitoring and reading: After the external network client software is started, it will continue to monitor the changes in the clipboard content. When the user copies new content on the clipboard, the monitoring module will capture the change and call the content reading module to obtain the clipboard data. The read data will be pre-processed, including formatting, to ensure the security of the data during transmission.

[0192] 2) File change monitoring and upload: The software will monitor file changes in the specified directory and capture file addition or modification events. The changed files will be read and uploaded to the one-way isolation network gate. The file upload module supports batch transfer of large files and multiple files, and can resume breakpoint transfer to ensure the stability of file transfer.

[0193] The working principle of the intranet client is that the intranet client software periodically obtains data from the one-way isolation network gate and writes the data to the clipboard of the intranet computer or saves it as a file. Through the scheduled task, the intranet client software can ensure the timely synchronization of the clipboard and file data.

[0194] 1) Clipboard data synchronization: The intranet client software periodically calls the synchronization interface to obtain clipboard data from the one-way isolation network gate. The obtained data will be decoded and format converted, and written to the clipboard of the intranet computer. Users can directly access and use the synchronized clipboard content on the intranet computer.

[0195] 2) File data synchronization: The intranet client software periodically calls the download interface to obtain file data from the one-way isolation network gate. The downloaded files will be saved to the specified directory, and users can directly access and use the synchronized files on the intranet computer. The file download module supports batch download of large files and multiple files to ensure the efficiency and stability of file transmission.

[0196] Further, the external network processing module includes an external network CPU for MAC learning and operation and maintenance management agent, an external network FPGA for quintuple filtering and data forwarding, and a first Ethernet interface, the external network CPU and the external network FPGA are connected through a secure digital input and output interface (Secure Digital Input and Output, SDIO), and the first Ethernet interface is adaptive to 10M / 100M / 1000M network;

[0197] The isolation module includes an isolation FPGA;

[0198] The intranet processing module includes an intranet FPGA, a second Ethernet interface and a third Ethernet interface, wherein the second Ethernet interface and the third Ethernet interface are adaptive to 10M / 100M / 1000M networks;

[0199] The main control module includes a main control CPU and an authentication interface connected via an I2C bus, wherein the authentication interface is connected to the main control CPU;

[0200] The safety protection module includes a security MCU and a destruction input terminal connected to the security MCU.

[0201] Specifically, the intranet FPGA mainly completes the functions of five-tuple filtering, message parsing, message fragmentation, etc.; the isolation FPGA mainly completes the IPSec protocol processing, data encryption and decryption functions; the external network FPGA mainly completes the functions of five-tuple filtering, message analysis, etc. The intranet FPGA and the isolation FPGA, as well as the isolation FPGA and the external network FPGA, are interconnected using proprietary protocols.

[0202] 1) Intranet FPGA

[0203] a) Intranet Gigabit Ethernet port module: provides an Ethernet interface for the intranet cloud PC management platform;

[0204] b) Message parsing module: extracts message header information and performs parsing and stripping;

[0205] c) Message editing module: uses the characteristic information separated by the message analysis module and the logical channel number obtained by searching the security association database to reassemble the message to form a standard Ethernet message;

[0206] d) Message scheduling module: completes the scheduling of messages;

[0207] e) Message filtering module: mainly performs five-tuple filtering on messages entering the device.

[0208] 2) Isolate FPGA

[0209] a) Isolation authentication module: responsible for providing the logic unit for calling the algorithm in the external algorithm engine, and filtering the message according to the authentication result. The authenticated message is sent to the IPSec processing module;

[0210] b) IPSec processing module: mainly responsible for IPSec protocol processing of messages and filtering of input and output messages according to the security association database;

[0211] c) SP table lookup module: implements table lookup of the internal security policy database;

[0212] d) SA table lookup module: implements table lookup of the internal security association database;

[0213] e) FIFO interface module: mainly realizes the communication between the trusted module and the isolated FPGA;

[0214] f) IP layer data processing module: encrypts and decrypts IP layer data using SM2 / SM3 / SM4 algorithms.

[0215] 3) External FPGA

[0216] a) External Gigabit Ethernet port module: provides Ethernet interface for external network;

[0217] b) Message parsing module: extracts message header information and performs parsing and stripping;

[0218] c) Message editing module: uses the characteristic information separated by the message analysis module and the logical channel number obtained by searching the security association database to reassemble the message to form a standard Ethernet message.

[0219] Furthermore, the master control CPU is provided with a master control CPU software for implementing key negotiation and operation and maintenance management, and the master control CPU software includes:

[0220] A main control CPU communication module, wherein the main control CPU communication module is used for communicating with the external network CPU, the isolated FPGA and the internal network FPGA;

[0221] A configuration management module, wherein the configuration management module receives a configuration query command and executes an action of querying each configuration of the device;

[0222] A security policy management module, which is used to configure, query and modify security policy rules;

[0223] A key negotiation module, wherein the key negotiation module is used in the negotiation process of the IPSec protocol and generates an SPD table and a SAD table;

[0224] A password management module, which is used to import and manage resources such as algorithm parameters and keys;

[0225] Self-check module, the self-check module is used for random number self-check and algorithm self-check. The random number self-check completes the detection of the quality of the random numbers generated by the random number chip to determine whether they meet the random number specification requirements. During the algorithm self-check, preset data is used to verify whether the algorithm is in normal working state.

[0226] Furthermore, the external network CPU is provided with external network CPU software for MAC learning, management agent and policy management, and the external network CPU software includes:

[0227] A MAC learning module, wherein the MAC learning module is used to cooperate with an external network FPGA to complete MAC learning;

[0228] A management agent module, which is used to cooperate with the operation and maintenance management of the device to complete the management of the external network CPU;

[0229] The external network CPU communication module is used to provide internal communication with other units inside the device.

[0230] In a specific embodiment, referring to Figure 7 The functions of the external network client and the internal network client are similar, and they include an interface module, a login module, a clipboard monitoring and management module, a data processing module, and a communication module respectively; the one-way isolation gateway device includes an external network service program and an internal network service program with similar functions, and the external network service program and the internal network service program include a user management module, a data processing module, a channel management module, and a communication module respectively.

[0231] Among them, the interface module mainly provides functions such as interface display, client configuration options, and user login portal. After login, the client is automatically minimized to the system tray and the interface is no longer displayed. When needed, double-click in the system tray to display it again.

[0232] The login module mainly provides user login function, interacts with the server to log in, and verifies whether the user is a legitimate user.

[0233] The clipboard monitoring and management module monitors the status changes of the system clipboard. When the user presses the key to perform a copy action or right-clicks to perform a copy action, the corresponding content information will be inserted into the system clipboard. After the clipboard monitoring and management module detects the changes in the system clipboard, it obtains the relevant information and change information in the clipboard; when the intranet client receives data sent by the external network client, it parses the data and inserts it into the clipboard, updates the system clipboard status, and when the user performs a key paste action or right-clicks to paste, it copies the data from the clipboard to the target.

[0234] The data processing module on the client side of the external network is mainly responsible for formatting the data taken from the clipboard, packaging it into data packets and sending it to the communication module; on the client side of the internal network, the communication module is mainly responsible for processing the data after receiving it, restoring it to the data format that meets the clipboard requirements, and sending it to the clipboard monitoring and management module.

[0235] The client communication module is mainly used to communicate with the server, ensure link availability, maintain link status, and provide reliable transmission services.

[0236] The server-side user management module is used to maintain registered user information, verify user login information when the user logs in through the client, and synchronize user information from the enterprise AD domain server through the AD domain.

[0237] The server-side data processing module performs format processing, encapsulation and decapsulation on the data sent by the client.

[0238] The server communication module is used for communication between users and clients to realize data transmission, and at the same time controls data to be transmitted in one direction only; the server communication module is also used to maintain connections with multiple clients, realize concurrency of multiple user connections, and maintain link status; the server communication module is also used to realize the ferry function between the intranet server communication module and the extranet server communication module.

[0239] The working principle is:

[0240] 1) Log in to the client on the external network PC and log in to the client on the internal network PC;

[0241] 2) If there is data on the external PC that you want to copy and paste to the internal PC, select the object (file or text) to be copied and pasted on the external PC, and then press key or right-click to copy, and the object information will be inserted into the system clipboard;

[0242] 3) After the clipboard monitoring management module detects the change of the system clipboard status, it takes out the information in the clipboard;

[0243] 4) The data processing module receives the information, packages it, and sends it to the communication module;

[0244] 5) The communication module uses the pre-established link to send data to the server program;

[0245] 6) After receiving the data, the server program performs ferry processing, identifies the corresponding client and channel link, and then sends the data on the corresponding link;

[0246] 7) After receiving the data, the PC client on the intranet side performs data restoration processing and inserts it into the system clipboard after processing is completed;

[0247] 8) The clipboard monitoring and management module on the intranet side will update the corresponding status information;

[0248] 9) When you perform a paste operation on the PC on the intranet side, the information in the clipboard will be copied to the corresponding target.

[0249] In summary, the present invention can copy and paste content from an external network PC to an internal network at will, which is the same as copying and pasting on the same PC. It is convenient and timely to use, and the user is unaware of it. It is the same as local copy and paste, which greatly improves office efficiency. It can only copy and paste from the external network to the internal network, but not from the internal network to the external network, thus realizing one-way copy and paste. It has universality and can be used in similar R&D enterprises with multiple network separations while facilitating the office work of R&D personnel. There is no need for manual intervention in data import, which reduces labor costs.

[0250] In a specific embodiment, the one-way data transmission device is arranged on the cloud PC system. Different from the virtual machine used in the traditional cloud desktop, the cloud PC server of the present invention adopts the physical computing blade.

[0251] On the premise of physical computing blades, the present invention adopts a physically isolated dual network architecture, that is, two independent networks are used to process management operations and business data transmission respectively. Specifically:

[0252] (1) Terminal access network (external network): This network is only used for user interface interaction with the cloud PC computer, including displaying the computer screen, transmitting mouse 450 and keyboard 440 control and other basic operations. Users can only control the cloud PC computer through the terminal access network 500, but cannot directly access the files and data inside the cloud PC computer.

[0253] (2) Business data network (intranet): This network is used exclusively for the storage, transmission, and processing of data in the cloud PC. All sensitive files, data, and information are transmitted through this network, and users cannot access or operate them in any form through the terminal access network 500.

[0254] Furthermore, the present invention also proposes a computer-readable storage medium on which program instructions are stored, and when the program instructions are executed by a processor, the cross-screen operation method is implemented.

[0255] The above is only a preferred embodiment of the present invention. The present invention is not limited to the above implementation. As long as the technical effect of the present invention is achieved by the same means, any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present disclosure shall be included in the scope of protection of the present disclosure. All should belong to the protection scope of the present invention. Within the protection scope of the present invention, its technical scheme and / or implementation method can have various modifications and changes.

Claims

1. A cross-screen operation method, the cross-screen operation method being applied to a cross-screen operation device, the cross-screen operation device comprising an external network cloud PC server (100), the external network cloud PC server (100) being provided with at least one external network computing blade (110) connected to the external network; an internal network cloud PC server (200), the internal network cloud PC server (200) being provided with at least one internal network computing blade (210) connected to the internal network; a unidirectional data transmission module (300), the external network computing blade (110) and The intranet computing blade (210) is connected via a unidirectional data transmission module (300); a terminal device (400), the terminal device (400) at least comprising a first display (410), a second display (420), an audio output device (430), a keyboard (440) and a mouse (450); a terminal access network (500), the external network computing blade (110), the intranet computing blade (210) and the terminal device (400) being respectively connected to the terminal access network (500), characterized in that: The cross-screen operation method includes: S100, based on cloud technology, the terminal device (400) is connected to the external network computing blade (110) and the internal network computing blade (210) through the terminal access network (500) at the same time, the external network computing blade (110) outputs a desktop signal to the first display (410) for display, and the internal network computing blade (210) outputs a desktop signal to the second display (420) for display; S200, real-time collection of trigger events of the terminal device (400), determination of the attribution of the current trigger event, and transmission to the external network computing blade (110) or the internal network computing blade (210) through the terminal access network (500); the external network computing blade (110) or the internal network computing blade (210) synthesizes the received trigger event into a desktop signal and synchronously displays it on the first display (410) or the second display (420) through the terminal access network (500); S300, if a cross-screen operation is detected in the triggering event, the audio output signal of the switched computing blade is transmitted to the audio output device (430) through the terminal access network (500), and the audio output signal of the switched computing blade is stopped at the same time; S400, if it is detected that the terminal device (400) performs a cross-screen operation after copying the data on the external network computing blade (110), the one-way data transmission module (300) caches the clipboard data; S500: If a cross-screen window dragging operation is detected, the window content is output to the display of the dragged computing blade for display.

2. The cross-screen operation method according to claim 1, characterized in that: In step S100, The external network computing blade (110) and the internal network computing blade (210) connected to the terminal device (400) are the external network computing blade (110) and the internal network computing blade (210) pre-bound based on the unidirectional data transmission module (300), wherein: An external network client with a one-way isolation module is installed on the pre-bound external network computing blade (110), and an internal network client with a one-way isolation module is installed on the pre-bound internal network computing blade (210). The external network client and the internal network client are connected via a one-way isolation gateway, and the external network client and the internal network client log in to the same user account.

3. The cross-screen operation method according to claim 1, characterized in that: Step S100 also includes, According to preset default playback parameters, the audio output device (430) plays a default audio output signal, wherein the default audio output signal is the audio output signal of the external network computing blade (110) or the audio output signal of the internal network computing blade (210).

4. The cross-screen operation method according to claim 1, characterized in that: In step S200, The trigger events include keyboard key events and mouse events, and the mouse events include mouse click events and mouse movement events. When a keyboard key event is collected, the external network computing blade (110) or the internal network computing blade (210) is sent to the corresponding application program according to the current keyboard (440) input state; When a mouse click event is collected, the external network computing blade (110) or the internal network computing blade (210) is matched according to the desktop where the mouse (450) is clicked; When a mouse movement event is collected, the desktop where the mouse (450) is currently located is corresponded to the external network computing blade (110) or the internal network computing blade (210). If a cross-screen operation of the mouse (450) is detected, the real-time position of the mouse (450) is transmitted to the corresponding external network computing blade (110) or the internal network computing blade (210) in chronological order. The cross-screen operation of the mouse (450) includes the movement of the mouse (450) from the edge of the first display (410) to the second display (420) and the movement of the mouse (450) from the edge of the second display (420) to the first display (410).

5. The cross-screen operation method according to claim 1, characterized in that: Step S400 includes: S410: If the external network client and the internal network client log in to the same user account, the external network client detects the copying behavior in real time, where the copying behavior at least includes copying text, copying images, and copying files; S420, if the external network client detects the copying behavior, the one-way data transmission module (300) caches the clipboard data and performs detection and identification, and filters the copied data that does not meet the preset conditions; S430: If a cross-screen operation is detected, the intranet computing blade (210) is switched to and a paste operation is detected, and the cached data is pasted to the intranet computing blade (210).

6. The cross-screen operation method according to claim 1, characterized in that: Step S400 also includes: If it is detected that the terminal device (400) performs a cross-screen operation after copying the intranet computing blade (210), the clipboard data of the intranet computing blade (210) is discarded.

7. The cross-screen operation method according to claim 1, characterized in that: Step S500 includes: S510: If a cross-screen window drag operation is detected, the window content is synthesized into the dragged computing blade; S520, outputting the desktop signal synthesized with the window content to the display corresponding to the dragged computing blade; S530: If a window resize operation is detected, the operation content is transmitted to the original computing blade to which the window belongs for processing, then transmitted to the dragged computing blade for synthesis, and finally output to the display corresponding to the dragged computing blade for display; S540: If an operation on the window content is detected, the operation content is transmitted to the original computing blade to which the window belongs for processing.

8. The cross-screen operation method according to claim 7, characterized in that: In step S520, The cross-screen display window includes a cross-screen mark, which includes a combination of one or more of a border color, watermark text in the window, and text in the window operation bar.

9. A cross-screen operation device, used to execute the cross-screen operation method according to any one of claims 1 to 8, characterized in that: The cross-screen operation device comprises: An external network cloud PC server (100), wherein the external network cloud PC server (100) is provided with at least one external network computing blade (110) connected to the external network; An intranet cloud PC server (200), wherein the intranet cloud PC server (200) is provided with at least one intranet computing blade (210) connected to the intranet; A unidirectional data transmission module (300), wherein the unidirectional data transmission module (300) only allows data to flow unidirectionally from the external network computing blade (110) to the internal network computing blade (210), and the external network computing blade (110) and the internal network computing blade (210) are connected via the unidirectional data transmission module (300); A terminal device (400), the terminal device (400) comprising at least a first display (410), a second display (420), an audio output device (430), a keyboard (440) and a mouse (450), the first display (410) being used to display the screen output of an external network computing blade (110), the second display (420) being used to display the screen output of an internal network computing blade (210), the audio output device (430) being used to play the audio output of the external network computing blade (110) or the internal network computing blade (210) corresponding to the current active screen in the first display (410) and the second display (420), the number of the first display (410) and the number of the second display (420) are both at least one, and the number of the keyboard (440) and the number of the mouse (450) are both one; A terminal access network (500), wherein the external network computing blade (110), the internal network computing blade (210) and the terminal device (400) are respectively connected to the terminal access network (500).

10. A computer-readable storage medium having program instructions stored thereon, characterized in that: When the program instructions are executed by a processor, the method according to any one of claims 1 to 8 is implemented.

Images