One-way optical isolation data transmission and release method and system for credential cross-platform

Abstract

The invention relates to a credential cross-platform unidirectional optical isolation data transmission and release method and system, and belongs to the field of data processing. The method comprises the following steps: triggering a signal-creative cross-platform one-way data acquisition isolation optical shutter through an initialization protocol, the one-way data acquisition isolation optical shutter covering an intranet processing layer, an extranet processing layer and a single link physical optical fiber layer, and executing the initialization protocol to perform dual-channel independent initialization on network hardware interfaces of the intranet processing layer and the extranet processing layer; the user configuration parameters are analyzed, and a configuration strategy is generated based on the user configuration parameters and used for configuring a one-way data acquisition isolation optical shutter; generating and executing an interface activation protocol of the one-way data acquisition isolation optical shutter based on the user configuration parameters; the intranet processing layer of the unidirectional data acquisition isolation optical shutter receives field network data and unidirectionally transmits the field network data to the extranet processing layer, and the extranet processing layer delivers the field network data to a specified server. According to the invention, one-way secure transmission of data between the internal network and the external network is realized, and no information flowing to the internal network from the external network is ensured.

Description

Technical Field

[0001] The present invention belongs to the field of data processing technology, and specifically relates to a cross-platform unidirectional optically isolated data transmission and publishing method and system. Background Art

[0002] As industrial enterprises develop digitalization and intelligentization, network security risks and hidden dangers have suddenly intensified. Many information systems have developed from isolation to interconnection, which has also brought new security challenges and risks in the process.

[0003] In addition, most of the related isolation equipment on the market currently uses foreign intellectual property CPU hardware and operating systems, which do not meet the requirements of independent control and information innovation, and there are deficiencies in industrial data collection and release. For example, there are hidden dangers in two-way communication: traditional optical gates are based on dual optical fibers to achieve two-way communication. Light transmission and light reception are two completely independent optical fibers that must be used in pairs, which poses a risk of reverse data leakage; poor protocol compatibility: only limited communication protocols are supported, making it difficult to adapt to diversified industrial scenarios; high platform dependence: difficult to run across different hardware architectures (such as single-chip microcomputers, servers) and operating systems, etc. Therefore, it is urgent to implement a one-way optical isolation data transmission and release method that is cross-platform and information innovation. Summary of the invention

[0004] In order to solve the above-mentioned problems existing in the prior art, the present invention provides a cross-platform unidirectional optically isolated data transmission and publishing method and system.

[0005] The purpose of the present invention can be achieved by the following technical solutions: A cross-platform unidirectional optically isolated data transmission and publishing method for information creation, the implementation of which includes the following steps: Trigger the cross-platform one-way data acquisition isolation optical gate of Xinchuang through the initialization protocol, the one-way data acquisition isolation optical gate covers the intranet processing layer, the extranet processing layer and the single-link physical optical fiber layer, and execute the initialization protocol to perform dual-channel independent initialization of the network hardware interfaces of the intranet processing layer and the extranet processing layer; Parsing user configuration parameters, and generating a configuration strategy based on the user configuration parameters for configuring the one-way data acquisition isolation optical gate, wherein the configuration strategy includes an intranet configuration sub-strategy and an extranet configuration sub-strategy; Generate and execute the interface activation protocol of the one-way data acquisition isolation optical gate based on the user configuration parameters, wherein the interface activation protocol includes an intranet interface activation sub-protocol and an extranet interface activation sub-protocol; The internal network processing layer of the one-way data acquisition isolation optical gate receives the field network data and transmits it unidirectionally to the external network processing layer, and the external network processing layer delivers the field network data to a designated server.

[0006] Preferably, the intranet processing layer includes an intranet interface and an intranet data buffer, the intranet interface is responsible for connecting to the intranet and terminating the network connection of the intranet user, and the intranet data buffer is used to store and schedule the stripped data.

[0007] Preferably, the single-link physical optical fiber layer includes a transmitting end and a receiving end, retaining a single physical optical fiber link from the internal network processing layer to the external network processing layer, and removing a single physical optical fiber link from the external network processing layer to the internal network processing layer.

[0008] Preferably, the intranet configuration sub-strategy includes: Configure the security domain network parameters of the intranet processing layer based on the user configuration parameters, wherein the security domain network parameters of the intranet processing layer include usage mode, server IP address, server port number and Log information; Setting the IP address, gateway information and mask information of the LAN network interface of the intranet processing layer based on the user configuration parameters; Establish a local service listening endpoint based on the user configuration parameters, and set the local listening port number and local listening IP address information of the intranet processing layer; Execute persistent storage of intranet configuration parameters and store the user configuration parameters in the intranet processing layer.

[0009] Preferably, the external network configuration sub-strategy includes: The security domain network parameters of the external network processing layer are set based on the user configuration parameters, and the security domain network parameters of the external network processing layer include usage mode, server IP address, server port number and Log information; Setting the IP address, gateway information and mask information of the LAN network interface of the external network processing layer based on the user configuration parameters; Configure the target service endpoint based on the user configuration parameters, and set the target server port number and server IP address information of the external network processing layer; Execute persistent storage of external network configuration parameters and save the user configuration parameters to the external network processing layer.

[0010] Preferably, the intranet interface activation sub-protocol includes: Initialize the state of the LAN network interface of the intranet processing layer, and set the state of the LAN network interface of the intranet processing layer to UDP Server service, and bind the listening port; Initialize the IP address of the sending end of the intranet processing layer.

[0011] Preferably, the external network interface activation sub-protocol includes: Initialize the state of the LAN network interface of the external network processing layer, and set the state of the LAN network interface of the external network processing layer to UDP Client service, and bind the sending server IP address and port; Initialize the IP address of the receiving end of the external network processing layer.

[0012] Preferably, the one-way transmission includes: The LAN network interface of the intranet processing layer monitors whether the UDP Server port accepts the field network data. If so, the intranet processing layer transmits the field network data to the external network processing layer through the single-link physical optical fiber layer, and sends it to the designated server through the LAN network interface of the external network processing layer; if not, return to the one-way transmission step.

[0013] A cross-platform unidirectional optically isolated data transmission and publishing system for innovating, used to execute the above-mentioned unidirectional optically isolated data transmission and publishing method, including an initialization module, a configuration module, an interface activation module, and a data transmission and publishing module: The initialization module is used to trigger the cross-platform one-way data acquisition isolation optical gate of Xinchuang through the initialization protocol. The one-way data acquisition isolation optical gate covers the intranet processing layer, the extranet processing layer and the single-link physical optical fiber layer. The initialization protocol is executed to perform dual-channel independent initialization of the network hardware interfaces of the intranet processing layer and the extranet processing layer. The configuration module is used to parse user configuration parameters, and generate a configuration strategy based on the user configuration parameters for configuring the one-way data acquisition isolation optical gate, wherein the configuration strategy includes an intranet configuration sub-strategy and an extranet configuration sub-strategy; The interface activation module is used to generate and execute the interface activation protocol of the one-way data acquisition isolation optical gate based on the user configuration parameters, and the interface activation protocol includes an intranet interface activation sub-protocol and an extranet interface activation sub-protocol; The data transmission and publishing module is used for the internal network processing layer of the one-way data acquisition isolation optical gate to receive field network data and transmit it one-way to the external network processing layer, and the external network processing layer delivers the field network data to the designated server.

[0014] The beneficial effects of the present invention are: (1) By retaining only the data link from the internal network processing layer to the external network processing layer of the on-site network data, the data link from the external network processing layer to the internal network processing layer is removed, and the on-site network data is isolated from the Internet network data of the target server to achieve one-way data transmission. The remote server network cannot reversely invade the on-site network, which solves the problem of the contradiction between on-site network security and data sending to the Internet. It not only ensures the transmission security of on-site network data and meets the data requirements of big data servers, but also protects the on-site network and avoids security risks such as data leakage or hacker intrusion.

[0015] (2) Dynamic configuration can be achieved by modifying and setting multiple parameters such as the on-site network IP address, port, server IP address, port, security isolation method, data transmission method, etc., effectively solving the problem of changing on-site requirements and diversified functional requirements.

[0016] (3) The sending end can be deployed across platforms on the physical computer of the existing system, and the receiving end can be deployed on the external network layer of the isolation network gate. The internal network layer does not necessarily have to be inside the physical optical gate. This is fundamentally different from the traditional optical gate. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to facilitate understanding by those skilled in the art, the present invention is further described below with reference to the accompanying drawings.

[0018] Figure 1 This is a flow chart of the steps of a cross-platform unidirectional optically isolated data transmission and publishing method of the present invention. DETAILED DESCRIPTION

[0019] In order to further explain the technical means and effects adopted by the present invention to achieve the predetermined invention purpose, the specific implementation methods, structures, features and effects of the present invention are described in detail below in conjunction with the accompanying drawings and preferred embodiments.

[0020] The working principle and use process of the present invention: See also Figure 1 , a cross-platform unidirectional optical isolation data transmission and publishing method, comprising: S1: Trigger the cross-platform one-way data acquisition isolation optical gate of Xinchuang through the initialization protocol, the one-way data acquisition isolation optical gate covers the intranet processing layer, the extranet processing layer and the single-link physical optical fiber layer, execute the initialization protocol to perform dual-channel independent initialization on the network hardware interfaces of the intranet processing layer and the extranet processing layer, so that the one-way data acquisition isolation optical gate enters the program configuration state; S2: parsing user configuration parameters, and generating a configuration strategy based on the user configuration parameters for configuring the one-way data acquisition isolation optical gate, wherein the configuration strategy includes an intranet configuration sub-strategy and an extranet configuration sub-strategy, which are used to configure the intranet processing layer and the extranet processing layer respectively; S3: Generate and execute the interface activation protocol of the one-way data acquisition isolation light gate based on the user configuration parameters, the interface activation protocol is used to start the corresponding network hardware interface according to the user configuration parameters, so that the one-way data acquisition isolation light gate enters the data sending and receiving state, and the interface activation protocol includes an intranet interface activation sub-protocol and an extranet interface activation sub-protocol; S4: The intranet processing layer of the one-way digital acquisition isolation optical gate receives the on-site network data and transmits it one-way to the external network processing layer. The external network processing layer delivers the on-site network data to the designated server to realize the cross-platform data transmission and release of the information innovation.

[0021] In this embodiment, the intranet processing layer is used to connect to the intranet, including an intranet interface and an intranet data buffer. The intranet interface is responsible for connecting to the intranet and terminating the network connection of the intranet user. The intranet data buffer is used to store and schedule the stripped data. The external network processing layer is connected to the external network. The single-link physical optical fiber layer is the only data transmission channel between the intranet and the external network. Only a single physical optical fiber link from the intranet processing layer to the external network processing layer is retained, and the single physical optical fiber link from the external network processing layer to the intranet processing layer is removed. That is, only a single optical fiber is supported and only one-way communication is allowed. The intranet processing layer is allowed to transmit data to the external network processing layer, while the external network processing layer is prohibited from transmitting data to the intranet processing layer. The single-link physical optical fiber layer includes a transmitting end and a receiving end, supports PCIe, miniPCIe, M.2 interface or onboard mode, supports deployment on single-chip microcomputers, embedded systems, desktop computers and server devices, and can achieve cross-platform and operating system operation. The transmitting end can be deployed across platforms on the physical computer of the existing system, and the receiving end can be deployed in the external network layer of the isolation gateway.

[0022] Example: The intranet processing layer includes a first power module, a first single-link sending end optical fiber module, a first network interface module, a first RS232 / 485 module, a first wireless and expansion module, a first CPU memory module, a first memory, a first operating system and a first data acquisition software; the external network processing layer includes a second power module, a second single-link receiving end optical fiber module, a second network interface module, a second RS232 / 485 module, a second wireless and expansion module, a second CPU memory module, a second memory, a second operating system and a second data publishing software. On the one hand, the intranet processing layer is connected to the field equipment, and on the other hand, unidirectional data transmission is realized through the first single-link sending end optical fiber module and the second single-link receiving end optical fiber module of the external network processing layer.

[0023] In this embodiment, the intranet configuration sub-strategy can be implemented by the following steps: Configure the security domain network parameters of the intranet processing layer based on the user configuration parameters, wherein the security domain network parameters of the intranet processing layer include usage mode, server IP address, server port number and Log information; Setting the IP address, gateway information and mask information of the LAN network interface of the intranet processing layer based on the user configuration parameters; Establish a local service listening endpoint based on the user configuration parameters, and set the local listening port number and local listening IP address information of the intranet processing layer; Execute persistent storage of intranet configuration parameters, and store the user configuration parameters in the intranet processing layer for reuse at the next startup.

[0024] In this embodiment, the external network configuration sub-strategy can be implemented by the following steps: The security domain network parameters of the external network processing layer are set based on the user configuration parameters, and the security domain network parameters of the external network processing layer include usage mode, server IP address, server port number and Log information; Setting the IP address, gateway information and mask information of the LAN network interface of the external network processing layer based on the user configuration parameters; Configure the target service endpoint based on the user configuration parameters, and set the target server port number and server IP address information of the external network processing layer; Execute the persistent storage of the external network configuration parameters, and save the user configuration parameters to the external network processing layer for reuse at the next startup.

[0025] In this embodiment, the intranet interface activation sub-protocol may be implemented by the following steps: Initialize the state of the LAN network interface of the intranet processing layer, and set the state of the LAN network interface of the intranet processing layer to UDP Server service, and bind the listening port; Initialize the IP address of the sending end of the intranet processing layer.

[0026] In this embodiment, the external network interface activation sub-protocol may be implemented by the following steps: Initialize the state of the LAN network interface of the external network processing layer, and set the state of the LAN network interface of the external network processing layer to UDP Client service, and bind the sending server IP address and port; Initialize the IP address of the receiving end of the external network processing layer.

[0027] In this embodiment, the one-way transmission can be implemented by the following steps: The LAN network interface of the intranet processing layer monitors whether the UDP Server port accepts the field network data. If so, the intranet processing layer transmits the field network data to the external network processing layer through the single-link physical optical fiber layer, and sends it to the designated server through the LAN network interface of the external network processing layer; if not, return to the one-way transmission step.

[0028] A cross-platform unidirectional optical isolation data transmission and publishing system, including an initialization module, a configuration module, an interface activation module, and a data transmission and publishing module.

[0029] The initialization module is used to trigger the cross-platform one-way data acquisition isolation optical gate of Xinchuang through the initialization protocol. The one-way data acquisition isolation optical gate covers the intranet processing layer, the extranet processing layer and the single-link physical optical fiber layer. The initialization protocol is executed to perform dual-channel independent initialization on the network hardware interfaces of the intranet processing layer and the extranet processing layer, so that the one-way data acquisition isolation optical gate enters the program configuration state; The configuration module is used to parse user configuration parameters, and generate a configuration strategy based on the user configuration parameters for configuring the one-way data acquisition isolation optical gate, wherein the configuration strategy includes an intranet configuration sub-strategy and an extranet configuration sub-strategy, which are used to configure the intranet processing layer and the extranet processing layer respectively; The interface activation module is used to generate and execute the interface activation protocol of the one-way data acquisition isolation light gate based on the user configuration parameters, and the interface activation protocol is used to start the corresponding network hardware interface according to the user configuration parameters, so that the one-way data acquisition isolation light gate enters the data sending and receiving state, and the interface activation protocol includes an intranet interface activation sub-protocol and an extranet interface activation sub-protocol; The data transmission and publishing module is used for the internal network processing layer of the one-way digital acquisition isolation optical gate to receive field network data and transmit it unidirectionally to the external network processing layer. The external network processing layer delivers the field network data to the designated server to realize the data transmission and publishing across the platform of the information innovation.

[0030] Example: A unidirectional data acquisition isolation optical switch includes an intranet processing layer, an extranet processing layer and a single-link physical optical fiber layer.

[0031] The intranet processing layer is installed in the industrial site intranet and is used to receive field network data, including CPU memory module, storage, power module, network interface module, RS232 / 485 module, wireless and expansion module, single-link transmitting end optical fiber module and operating system. The CPU memory module adopts the Xinchuang chip, which can support the single-chip microcomputer MCU, embedded CPU, desktop-level CPU, and server CPU, and control each module and / or network hardware interface to work together; the memory is used to store the dynamic configuration data of the intranet processing layer; the power module is used to provide the power required for the operation of each module and network hardware interface of the intranet processing layer. It can support a wide voltage input range and can effectively resist the problem of unstable voltage in industrial sites; the network interface module is used to receive intranet network data; the RS232 / 485 module plays the role of serial port communication and can also expand other communication interface modules; the wireless and expansion modules can support communication modules such as Wi-Fi, 4G, 5G, Lora, etc., and can also be expanded to support Profinet, Profibus-DP, EtherCAT, EtherNet / IP, DeviceNet, BACnet, CAN / CANOpen, M-BUS, OPC UA and other protocol modules; the single-link transmitting end optical fiber module is used for unidirectional data transmission; the operating system adopts the domestic Xinchuang operating system, which can support a full range of cross-platform single-chip microcomputers, embedded, desktop computers, servers and other devices. The data acquisition software can collect protocol data from mainstream PLCs, HMI / SCADA, DCS, CNC machine tools, robots, environmental protection / building / telecommunication / power protocols, instruments, industrial standard protocols (OPC DA, OPC UA, Modbus RTU / TCP, etc.), industrial real-time historical databases, time series databases, relational databases, etc. at home and abroad, and package the data into UDP data packets to realize UDP transmission across unidirectional physical isolation gates / security isolation gateways; The external network processing layer is installed in the industrial site external network and is used to send field network data and connect to the internal network processing layer. It includes CPU memory module, storage, power module, network interface module, RS232 / 485 module, wireless and expansion module, single-link receiving end fiber module and operating system. The CPU memory module of the external network processing layer adopts Xinchuang chip, which can support single-chip microcomputer MCU, embedded CPU, desktop CPU, server CPU, and control each module and / or network hardware interface to work together. The memory is used to store the dynamic configuration data of the intranet processing layer; the power module is used to provide the power required for the various modules and network hardware interfaces of the intranet processing layer. It can support a wide voltage input range and can effectively resist the problem of unstable voltage in industrial sites; the network interface module is used to receive intranet network data; the RS232 / 485 module plays the role of serial port communication, and can also expand other communication interface modules; the wireless and expansion modules can support Wi-Fi, 4G, 5G, Lora and other communication modules, and can also be expanded to support Profinet, Profibus-DP, EtherCAT, EtherNet / IP, DeviceNet, BACnet, CAN / CANOpen, M-BUS, OPC UA and other protocol modules; the single-link receiving end optical fiber module is used for unidirectional data reception; the operating system adopts the domestically produced Xinchuang operating system, which can support a full range of cross-platform single-chip microcomputers, embedded systems, desktops, servers and other devices. The data publishing software can publish data as Modbus TCP / RTU server, OPC UA server, MQTT server, WebAPI server, WebSocket server, and can upload it to industrial real-time historical database, time series database, relational database, MQTT server, real-time big data platform, etc.

[0032] One-way data transmission is adopted between the intranet processing layer and the external network processing layer. Only the intranet processing layer is allowed to transmit data to the external network processing layer, while the external network processing layer is prohibited to transmit data to the intranet processing layer. That is, only the data link of the field network data from the intranet processing layer to the external network processing layer is retained, and the data link from the external network processing layer to the intranet processing layer is removed. The field network data is isolated from the Internet network data of the target server, and the field network data collected on site can only be sent one-way to the designated server; the remote server network cannot reversely invade the intranet field network, which solves the contradiction between the field network security and the data sending to the Internet. It not only ensures the transmission security of the field network data and meets the data requirements of the big data server, but also protects the field network to avoid security risks such as data leakage or hacker intrusion.

[0033] The internal network processing layer and the external network processing layer are connected through a single optical fiber of a single-link optical fiber module. Due to its cross-platform and operating system communication characteristics, the internal network processing layer and the external network generator can choose different chips, operating systems, communication modules, and protocol modules, and freely combine them to meet different application requirements.

[0034] The computer storage medium of the embodiment of the present invention may adopt any combination of one or more computer-readable media. The computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this document, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, device or device.

[0035] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, which carry computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0036] The program code included on the computer readable medium can be transmitted with any appropriate medium, including but not limited to wireless, electric wire, optical cable, RF, etc., or any suitable combination of the above. The computer program code for performing the operation of the present invention can be written in one or more programming languages ​​or their combinations, and the programming language includes object-oriented programming languages-such as Java, Smalltalk, C++, and also includes conventional procedural programming languages-such as "C" language or similar programming languages. The program code can be executed completely on the user's computer, partially on the user's computer, as an independent software package, partially on the user's computer and partially on the remote computer, or completely on the remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computer (for example, using an Internet service provider to connect through the Internet).

[0037] The above description is only a preferred embodiment of the present invention and does not limit the present invention in any form. Although the present invention has been disclosed as a preferred embodiment as above, it is not used to limit the present invention. Any technical personnel in this field can make some changes or modify the technical contents disclosed above into equivalent embodiments without departing from the scope of the technical solution of the present invention. However, any simple modification, equivalent change and modification made to the above embodiments according to the technical essence of the present invention without departing from the content of the technical solution of the present invention still fall within the scope of the technical solution of the present invention.

Claims

1. A cross-platform one-way optical isolation data transmission and publishing method, characterized in that: The implementation of the one-way optical isolation data transmission and publishing method comprises the following steps: The cross-platform one-way data acquisition isolation optical gate of Xinchuang is triggered through the initialization protocol. The one-way data acquisition isolation optical gate covers the intranet processing layer, the extranet processing layer and the single-link physical optical fiber layer. The initialization protocol is executed to perform dual-channel independent initialization on the network hardware interfaces of the intranet processing layer and the extranet processing layer. The single-link physical optical fiber layer includes a transmitting end and a receiving end, retains a single physical optical fiber link from the intranet processing layer to the extranet processing layer, and removes a single physical optical fiber link from the extranet processing layer to the intranet processing layer; Parsing user configuration parameters, and generating a configuration strategy based on the user configuration parameters for configuring the one-way data acquisition isolation optical gate; Generate and execute the interface activation protocol of the one-way data acquisition isolation optical gate based on the user configuration parameters; The internal network processing layer of the one-way data acquisition isolation optical gate receives the field network data and transmits it unidirectionally to the external network processing layer, and the external network processing layer delivers the field network data to a designated server.

2. The one-way optical isolation data transmission and publishing method according to claim 1, characterized in that: The intranet processing layer includes an intranet interface and an intranet data buffer. The intranet interface is responsible for connecting to the intranet and terminating the network connection of intranet users. The intranet data buffer is used to store and schedule the stripped data.

3. The one-way optical isolation data transmission and publishing method according to claim 1, characterized in that: The configuration strategy includes an intranet configuration sub-strategy and an extranet configuration sub-strategy, and the interface activation protocol includes an intranet interface activation sub-protocol and an extranet interface activation sub-protocol.

4. The one-way optical isolation data transmission and publishing method according to claim 3 is characterized in that: The intranet configuration sub-strategy includes: Configure the security domain network parameters of the intranet processing layer based on the user configuration parameters, wherein the security domain network parameters of the intranet processing layer include usage mode, server IP address, server port number and Log information; Setting the IP address, gateway information and mask information of the LAN network interface of the intranet processing layer based on the user configuration parameters; Establish a local service listening endpoint based on the user configuration parameters, and set the local listening port number and local listening IP address information of the intranet processing layer; Execute persistent storage of intranet configuration parameters and store the user configuration parameters in the intranet processing layer.

5. The one-way optical isolation data transmission and publishing method according to claim 3 is characterized in that: The external network configuration sub-strategy includes: The security domain network parameters of the external network processing layer are set based on the user configuration parameters, and the security domain network parameters of the external network processing layer include usage mode, server IP address, server port number and Log information; The IP address, gateway information and mask information of the LAN network interface of the external network processing layer are set based on the user configuration parameters; Configure the target service endpoint based on the user configuration parameters, and set the target server port number and server IP address information of the external network processing layer; Execute persistent storage of external network configuration parameters and save the user configuration parameters to the external network processing layer.

6. The one-way optical isolation data transmission and publishing method according to claim 3 is characterized in that: The intranet interface activation sub-protocol includes: Initialize the state of the LAN network interface of the intranet processing layer, and set the state of the LAN network interface of the intranet processing layer to UDP Server service, and bind the listening port; Initialize the IP address of the sending end of the intranet processing layer.

7. The one-way optical isolation data transmission and publishing method according to claim 3 is characterized in that: The external network interface activation sub-protocol includes: Initialize the state of the LAN network interface of the external network processing layer, and set the state of the LAN network interface of the external network processing layer to UDP Client service, and bind the sending server IP address and port; Initialize the IP address of the receiving end of the external network processing layer.

8. The one-way optical isolation data transmission and publishing method according to claim 1, characterized in that: The one-way transmission includes: The LAN network interface of the intranet processing layer monitors whether the UDP Server port accepts the field network data. If so, the intranet processing layer transmits the field network data to the external network processing layer through the single-link physical optical fiber layer, and sends it to the designated server through the LAN network interface of the external network processing layer; if not, return to the one-way transmission step.

9. A cross-platform one-way optical isolation data transmission and publishing system, characterized in that: The one-way optically isolated data transmission and publishing system is applied to the one-way optically isolated data transmission and publishing method as described in any one of claims 1 to 8, including an initialization module, a configuration module, an interface activation module, and a data transmission and publishing module; The initialization module is used to trigger the cross-platform one-way data acquisition isolation optical gate of Xinchuang through the initialization protocol. The one-way data acquisition isolation optical gate covers the intranet processing layer, the extranet processing layer and the single-link physical optical fiber layer. The initialization protocol is executed to perform dual-channel independent initialization of the network hardware interfaces of the intranet processing layer and the extranet processing layer. The configuration module is used to parse user configuration parameters, and generate a configuration strategy based on the user configuration parameters for configuring the one-way data acquisition isolation optical gate, wherein the configuration strategy includes an intranet configuration sub-strategy and an extranet configuration sub-strategy; The interface activation module is used to generate and execute the interface activation protocol of the one-way data acquisition isolation optical gate based on the user configuration parameters, and the interface activation protocol includes an intranet interface activation sub-protocol and an extranet interface activation sub-protocol; The data transmission and publishing module is used for the internal network processing layer of the one-way data acquisition isolation optical gate to receive field network data and transmit it one-way to the external network processing layer, and the external network processing layer delivers the field network data to the designated server.

Images