Method, device and equipment for accessing extranet by intranet equipment, medium and program product

Abstract

The embodiment of the invention provides a method, device and equipment for accessing an extranet by intranet equipment, a medium and a program product. In the method, after an intranet access request sent by intranet equipment is received through an intranet server, if it is determined that a first intranet access link in the intranet access request comprises an extranet access identifier, the first intranet access link is replaced with a first extranet access link, and an extranet access request is obtained. And sending the extranet access request to an extranet server, and after receiving extranet data sent by the extranet server, sending the extranet data to the intranet device. According to the scheme, the first intranet access link is replaced by the first extranet access link, so that the intranet equipment can obtain the extranet data, and the network security is ensured.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a method, device, equipment, medium and program product for an intranet device to access an extranet. Background Art

[0002] In order to ensure data security and network security, the network is usually divided into intranet and extranet, and intranet devices can only obtain intranet data.

[0003] In the prior art, after an intranet device sends an access request, the firewall will check the access request, filter out requests to access the external network, and only allow requests to access the intranet. After receiving the access request, the intranet server sends the corresponding intranet data to the intranet device. In addition, the intranet server does not have the authority to access the external network and cannot obtain the external network data.

[0004] Therefore, there is an urgent need for a method for intranet devices to access extranet data, which can enable intranet devices to obtain extranet data while ensuring network security. Summary of the invention

[0005] The embodiments of the present application provide a method, apparatus, device, medium and program product for an intranet device to access an extranet, so as to achieve the effect of enabling an intranet device to obtain extranet data while ensuring network security.

[0006] In a first aspect, an embodiment of the present application provides a method for an intranet device to access an external network, which is applied to an intranet server, and the method includes:

[0007] Receiving an intranet access request sent by an intranet device, the intranet access request comprising a first intranet access link, and the first intranet access link comprising an address of the intranet server;

[0008] If the first intranet access link includes an external network access identifier, the first intranet access link is replaced with a first external network access link according to a stored link replacement table to obtain an external network access request;

[0009] Sending the external network access request to the external network server;

[0010] Receiving external network data sent by the external network server;

[0011] The external network data is sent to the internal network device.

[0012] In a possible implementation manner, before sending the external network data to the internal network device, the method further includes:

[0013] Determine a second intranet access link corresponding to each second external network access link in the external network data, each of the second intranet access links including the external network access identifier;

[0014] For each second external network access link in the external network data, the second external network access link is replaced with a second internal network access link corresponding to the second external network access link to obtain updated external network data;

[0015] The sending the external network data to the internal network device includes:

[0016] The updated external network data is sent to the internal network device.

[0017] In a possible implementation manner, determining the second intranet access link corresponding to each second external network access link in the external network data includes:

[0018] For each of the second external network access links, replace the external network address in the second external network access link with the address of the intranet server, and add the external network access identifier to obtain the first link corresponding to the second external network access link;

[0019] For each first link corresponding to the second external network access link, the following processing is performed in sequence:

[0020] Determine whether the first link exists in the link replacement table;

[0021] If the first link does not exist in the link replacement table, using the first link as the second intranet access link corresponding to the second external network access link, and storing the second external network access link and the first link in the link replacement table;

[0022] If the first link exists in the link replacement table, characters are added to the first link to obtain a second link that does not exist in the link replacement table, the second link is used as the second intranet access link corresponding to the second external network access link, and the second external network access link and the second link are stored in the link replacement table.

[0023] In a possible implementation manner, sending the external network access request to the external network server includes:

[0024] Sending the external network access request to the external network server through a preset secure communication channel;

[0025] The receiving of external network data sent by the external network server includes:

[0026] The external network data sent by the external network server is received through the preset secure communication channel.

[0027] In a possible implementation, the preset secure communication channel includes any one of a secure socket layer SSL channel, a transport layer security TLS channel, a virtual private network VPN channel, and an encrypted tunnel.

[0028] In a possible implementation, the method further includes:

[0029] If the first intranet access link does not include the external network access identifier, acquiring intranet data according to the first intranet access link;

[0030] The intranet data is sent to the intranet device.

[0031] In a second aspect, an embodiment of the present application provides a method for an intranet device to access an external network device, including:

[0032] A receiving module, configured to receive an intranet access request sent by an intranet device, wherein the intranet access request includes a first intranet access link, and the first intranet access link includes an address of an intranet server;

[0033] a processing module, configured to replace the first intranet access link with a first external network access link according to a stored link replacement table if the first intranet access link includes an external network access identifier, so as to obtain an external network access request;

[0034] A sending module, used for sending the external network access request to the external network server;

[0035] The receiving module is further used to receive the external network data sent by the external network server;

[0036] The sending module is also used to send the external network data to the internal network device.

[0037] In a third aspect, an embodiment of the present application provides a server, including:

[0038] Processor, memory, communication interface;

[0039] The memory is used to store executable instructions of the processor;

[0040] Wherein, the processor is configured to execute the method for an intranet device to access an external network as described in any one of the first aspects by executing the executable instructions.

[0041] In a fourth aspect, an embodiment of the present application provides a readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the method for an intranet device to access an external network as described in any one of the first aspects is implemented.

[0042] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, is used to implement the method for an intranet device to access an external network as described in any one of the first aspects.

[0043] The method, apparatus, device, medium and program product for an intranet device to access an external network provided in the embodiment of the present application, after receiving an intranet access request sent by an intranet device through an intranet server, if it is determined that the first intranet access link includes an external network access identifier, the first intranet access link is replaced with the first external network access link to obtain an external network access request. The external network access request is then sent to the external network server, and after receiving the external network data sent by the external network server, the external network data is sent to the intranet device. By replacing the first intranet access link with the first external network access link, this solution not only enables the intranet device to obtain external network data, but also ensures network security. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0045] Figure 1 Schematic diagram of application scenarios of the method for intranet device accessing extranet provided in this application;

[0046] Figure 2 A flowchart of a method for an intranet device to access an extranet provided in the present application;

[0047] Figure 3 A flowchart of Embodiment 2 of the method for an intranet device to access an extranet provided in this application;

[0048] Figure 4 A schematic diagram of the structure of an embodiment of an intranet device accessing an extranet device provided by the present application;

[0049] Figure 5 A schematic diagram of the structure of a server provided for this application.

[0050] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0051] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0052] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0053] In order to improve data security and network security, an internal network, referred to as intranet, is usually set up. The intranet devices in the intranet can only obtain intranet data.

[0054] In the prior art, after an intranet device sends an access request, the firewall will check the access request, filter out requests to access the external network, and only allow requests to access the intranet. That is, it checks whether the access link in the access request includes the address of the intranet server. When it is determined that the access link includes the address of the intranet server, it means that the access request is a request to access the intranet, and the access request will be allowed.

[0055] After receiving the access request, the intranet server sends the corresponding intranet data to the intranet device. In addition, the intranet server does not have the authority to access the external network and cannot obtain the external network data.

[0056] Therefore, there is an urgent need for a method for intranet devices to access extranet data, which can enable intranet devices to obtain extranet data while ensuring network security.

[0057] In view of the problems existing in the prior art, the inventor discovered during the process of studying the method for intranet devices to access the external network that, since the firewall only allows requests to access the intranet, the request to access the external network can be modified to be in the form of a request to access the intranet and include an external network access identifier. In this way, after the access request reaches the intranet server, the intranet server can determine that the access request is a request to access the external network based on the external network access identifier. In order to solve the problem that the intranet server does not have the authority to access the external network, the intranet server changes the access request back to a request to access the external network and sends the request to the external network server. The external network server obtains the external network data and sends it to the intranet server, and then the intranet server sends the external network data to the intranet device. Based on the above-mentioned inventive concept, the solution for intranet devices to access the external network in this application is designed.

[0058] For example, Figure 1 The following is a schematic diagram of an application scenario of the method for intranet device accessing extranet provided in this application, such as Figure 1 As shown, the application scenario may include: an intranet device 11 , an intranet device 12 , a firewall 13 , an intranet server 14 and an extranet server 15 .

[0059] exist Figure 1 In the application scenario shown, the intranet device 12 sends an external network access request, and the external network access request does not include the address of the intranet server 14, so the firewall 13 intercepts the external network access request.

[0060] The intranet device 11 sends an intranet access request, which includes a first intranet access link. The first intranet access link includes the address of the intranet server 14, so the firewall 13 releases the intranet access request, and then the intranet server 14 can receive the intranet access request.

[0061] Then, the intranet server 14 determines that the first intranet access link includes an external network access identifier, indicating that the intranet device 12 wants to obtain external network data. The intranet server 14 replaces the first intranet access link with the first external network access link according to the stored link replacement table, obtains an external network access request, and then sends the external network access request to the external network server 15.

[0062] After acquiring the external network data according to the external network access request, the external network server 15 sends the external network data to the internal network server 14 .

[0063] The intranet server 14 then sends the external network data to the intranet device 12, and the intranet device 12 can obtain the external network data.

[0064] It should be noted that Figure 1 This is only a schematic diagram of an application scenario provided by the embodiment of the present application. Figure 1 The actual form of the various devices included in the Figure 1 The interaction mode between devices is limited, and in the specific application of the solution, it can be set according to actual needs.

[0065] The technical solution of the present application is described in detail below through specific embodiments. It should be noted that the following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments.

[0066] Figure 2 The flowchart of the first embodiment of the method for intranet device accessing extranet provided by the present application is as follows. The present application embodiment describes the situation that the intranet server replaces the first intranet access link in the intranet access request with the first extranet access link, and then sends the extranet data to the intranet device after the extranet server obtains it. The method in this embodiment can be implemented by software, hardware, or a combination of software and hardware. Figure 2 As shown, the method for the intranet device to access the extranet specifically includes the following steps:

[0067] S201: Receive an intranet access request sent by an intranet device.

[0068] When an intranet device needs to obtain external network data, in order to ensure data security and network security, it also needs to send an intranet access request, which includes a first intranet access link, and the first intranet access link includes the address of the intranet server. Since the intranet access request includes the address of the intranet server, the intranet access request will be sent to the intranet server through the firewall.

[0069] In this step, after the intranet sends the intranet access request, the intranet server can receive the intranet access request.

[0070] It should be noted that the intranet access request can be input by the user; it can also be obtained by the intranet device modifying the actual extranet access request; it can also be obtained by the intranet service network modifying the actual extranet access request and then sending it to the intranet device.

[0071] S202: If the first intranet access link includes an external network access identifier, the first intranet access link is replaced with a first external network access link according to a stored link replacement table to obtain an external network access request.

[0072] In this step, after the intranet server receives the intranet access request, in order to determine whether the intranet access request is a real request to access the intranet or a modified request to access the external network, it is necessary to determine whether the first intranet access link in the intranet access request includes an external network access identifier.

[0073] If the intranet server determines that the first intranet access link includes an external network access identifier, it means that the intranet access request is a modified request for actually accessing the external network. In order to obtain the external network data, the first intranet access link is replaced with the first external network access link according to the stored link replacement table to obtain the external network access request.

[0074] It should be noted that the method for determining whether the first intranet access link includes an external network access identifier may be: determining whether the specified position in the first intranet access link is an external network access identifier. The specified position may be the first position, the last position, the nth position, the first to the nth position, the nth to the mth position, or the mth to the last position; the external network access identifier may be / maps, outernet, 1, etc.; n and m may be 2, 5, 7, 9, etc. The embodiment of the present application does not limit the specified position, the external network access identifier, n, and m, and may be determined according to actual conditions.

[0075] Illustratively, Table 1 is a link replacement table provided by this application.

[0076] Table 1

[0077] Intranet access link External network access link http: / / ABCdef / maps http: / / 12345def http: / / ABCJKIF / maps http: / / 79364JKIF http: / / ABCHUF / maps http: / / 45801HUF

[0078] As shown in Table 1, ABC in the intranet access link is the address of the intranet server, and / maps is the external network access identifier. The first intranet access link is http: / / ABCdef / maps, and the corresponding first external network access link is found to be http: / / 12345def through the link replacement table.

[0079] It should be noted that Table 1 is only an example of a link replacement table. The embodiment of the present application does not limit the link replacement table, and it can be determined according to actual conditions.

[0080] It should be noted that if the intranet server determines that the first intranet access link does not include the external network access identifier, indicating that the intranet access request is a real request to access the intranet, it obtains the intranet data according to the first intranet access link and then sends the intranet data to the intranet device.

[0081] S203: Send the external network access request to the external network server.

[0082] In this step, after the intranet server receives the external network access request, since the intranet server does not have the authority to access the external network, the external network access request is sent to the external network server.

[0083] After receiving the external network access request, the external network server obtains the external network data according to the external network access request, and then sends the external network data to the internal network server.

[0084] It should be noted that in order to ensure the security of external network access requests and external network data, the internal network server sends the external network access request to the external network server through a preset secure communication channel; the external network server sends the external network data to the internal network server through a preset secure communication channel.

[0085] The preset secure communication channel includes any one of a Secure Sockets Layer (SSL) channel, a Transport Layer Security (TLS) channel, a Virtual Private Network (VPN) channel, an encrypted tunnel, etc. The embodiment of the present application does not limit the preset secure communication channel and can be determined according to actual conditions.

[0086] S204: After receiving the external network data sent by the external network server, the external network data is sent to the internal network device.

[0087] In this step, after the external network server sends the external network data to the internal network server, the internal network server can receive the external network data, and then send the external network data to the internal network device, so that the internal network device can obtain the external network data.

[0088] It should be noted that in order to ensure the security of external network data, the external network server sends the external network data to the internal network server through a preset secure communication channel, that is, the internal network server receives the external network data sent by the external network server through a preset secure communication channel.

[0089] The method for an intranet device to access an extranet provided in this embodiment, after receiving an intranet access request sent by an intranet device through an intranet server, if it is determined that the first intranet access link includes an extranet access identifier, the first intranet access link is replaced with the first extranet access link to obtain an extranet access request. The extranet access request is then sent to the extranet server, and after receiving extranet data sent by the extranet server, the extranet data is sent to the intranet device. This solution replaces the first intranet access link with the first extranet access link, and uses the extranet server to obtain extranet data, so that the intranet device and the intranet server are not exposed to the extranet, which not only enables the intranet device to obtain extranet data, but also ensures network security. And there is no need to make changes to the intranet device, which improves compatibility.

[0090] Figure 3 The flowchart of the second embodiment of the method for accessing the external network by an intranet device provided in this application is based on the above embodiment. The embodiment of this application describes the situation where the second external network access link in the external network data is replaced before the intranet server sends the external network data to the intranet device. Figure 3As shown, the method for the intranet device to access the extranet specifically includes the following steps:

[0091] S301: Determine a second intranet access link corresponding to each second external network access link in the external network data.

[0092] In this step, after the intranet server receives the external network data sent by the external network server, since there may be an external network access link in the external network data, if it is not processed, the subsequent user will not obtain the corresponding external network data when clicking the external network access link in the intranet device, so the external network data needs to be processed.

[0093] First, determine the second intranet access link corresponding to each second external network access link in the external network data, each second intranet access link includes an external network access identifier, and the link that does not include the intranet server address is the second external network access link.

[0094] Specifically, for each second external network access link, the external network address in the second external network access link is replaced with the address of the intranet server, and an external network access identifier is added to obtain the first link corresponding to the second external network access link.

[0095] It should be noted that the location for adding the external network access identifier can be: before the first bit, after the last bit, between the first bit and the second bit, between the Kth bit and the K+1th bit in the second external network access link after replacing the external network address. K can be 2, 4, 7, etc. The embodiment of the present application does not limit the location and K for adding the external network access identifier, and it can be determined according to actual conditions.

[0096] Exemplarily, the second external network access link is http: / / 07943lmn, where 07943 is the external network address, the address of the internal network server is ABC, and the external network access identifier is / maps, so the first link is http: / / ABClmn / maps.

[0097] After obtaining the first link corresponding to each second external network access link, in order to prevent the link from being repeated and unable to be replaced later, the first link needs to be processed again.

[0098] For each first link corresponding to the second external network access link, the following processing is performed in turn:

[0099] It is determined whether the first link exists in the link replacement table.

[0100] If the first link does not exist in the link replacement table, it means that there is no link duplicated with the first link in the link replacement table, and the first link is used as the second intranet access link corresponding to the second external network access link, and the second external network access link and the first link are stored in the link replacement table.

[0101] If the first link exists in the link replacement table, it means that there is a link in the link replacement table that is repeated with the first link. Characters are added to the first link to obtain a second link that does not exist in the link replacement table. The second link is used as the second intranet access link corresponding to the second external network access link, and the second external network access link and the second link are stored in the link replacement table.

[0102] It should be noted that after adding characters to the first link, if the first link after the characters are added still exists in the link replacement table, it is necessary to continue adding characters until the first link after the characters are added no longer exists in the link replacement table, thereby obtaining a second link.

[0103] It should be noted that when adding characters, you cannot add the identifier in the external network access identifier to avoid the subsequent inability to identify the link after the added characters as a link that requires access to the external network; you cannot add the identifier in the intranet server address to avoid the intranet server being unable to receive the link after the added characters; and it is necessary to ensure that the external network access identifier is in the specified position after the characters are added to avoid the subsequent inability to identify the link after the added characters as a link that requires access to the external network.

[0104] For example, the first link is http: / / ABCl / maps, which exists in the link replacement table, the address of the intranet server is ABC, the external network access identifier is / maps, and the specified position is the fifth to the last digit, so m can be added after l to get http: / / ABClm / maps, which also exists in the link replacement table. So continue to add characters, add g after m, and get http: / / ABClmg / maps, which does not exist in the link replacement table, so the second link is http: / / ABClmg / maps.

[0105] It should be noted that there may be data of various data types in the external network data, and the data types may be link type, text type, code type, video type, picture type, etc., among which the link type, text type and code type data may contain a second external network access link.

[0106] S302: For each second external network access link in the external network data, the second external network access link is replaced with a second internal network access link corresponding to the second external network access link to obtain updated external network data.

[0107] In this step, after the intranet server determines the second intranet access link corresponding to each second external network access link, in order for subsequent intranet devices to be able to obtain the external network data corresponding to the second external network access link, for each second external network access link in the external network data, the second external network access link is replaced with the second intranet access link corresponding to the second external network access link to obtain updated external network data.

[0108] S303: Send the updated external network data to the internal network device.

[0109] In this step, after the computer obtains the updated external network data, it sends the updated external network data to the internal network device so that the internal network device outputs relevant content according to the external network data.

[0110] The method for intranet device accessing the external network provided in this embodiment replaces the second external network access link with the second intranet access link, so that subsequent intranet devices can obtain the external network data corresponding to the second external network access link through the second intranet access link.

[0111] The following is an embodiment of the device of the present application, which can be used to execute the embodiment of the method of the present application. For details not disclosed in the embodiment of the device of the present application, please refer to the embodiment of the method of the present application.

[0112] Figure 4 This is a schematic diagram of the structure of an embodiment of the intranet device accessing the external network provided by the present application; the device can be integrated into the intranet server in the above method embodiment, or can be implemented by the intranet server in the above method embodiment. Figure 4 As shown, the intranet device accesses the external network device 40 including:

[0113] The receiving module 41 is used to receive an intranet access request sent by an intranet device, wherein the intranet access request includes a first intranet access link, and the first intranet access link includes an address of an intranet server;

[0114] The processing module 42 is configured to replace the first intranet access link with a first external network access link according to a stored link replacement table if the first intranet access link includes an external network access identifier, thereby obtaining an external network access request;

[0115] A sending module 43, used for sending the external network access request to the external network server;

[0116] The receiving module 41 is also used to receive external network data sent by the external network server;

[0117] The sending module 43 is further configured to send the external network data to the internal network device.

[0118] Furthermore, before sending the external network data to the internal network device, the processing module 42 is further used to:

[0119] Determine a second intranet access link corresponding to each second external network access link in the external network data, each of the second intranet access links including the external network access identifier;

[0120] For each second external network access link in the external network data, the second external network access link is replaced with a second internal network access link corresponding to the second external network access link to obtain updated external network data;

[0121] The sending module 43 is specifically configured to send the updated external network data to the internal network device.

[0122] Furthermore, the processing module 42 is specifically configured to:

[0123] For each of the second external network access links, replace the external network address in the second external network access link with the address of the intranet server, and add the external network access identifier to obtain the first link corresponding to the second external network access link;

[0124] For each first link corresponding to the second external network access link, the following processing is performed in sequence:

[0125] Determine whether the first link exists in the link replacement table;

[0126] If the first link does not exist in the link replacement table, using the first link as the second intranet access link corresponding to the second external network access link, and storing the second external network access link and the first link in the link replacement table;

[0127] If the first link exists in the link replacement table, characters are added to the first link to obtain a second link that does not exist in the link replacement table, the second link is used as the second intranet access link corresponding to the second external network access link, and the second external network access link and the second link are stored in the link replacement table.

[0128] Furthermore, the sending module 43 is specifically used to send the external network access request to the external network server through a preset secure communication channel;

[0129] The receiving module 41 is specifically configured to receive the external network data sent by the external network server through the preset secure communication channel.

[0130] Furthermore, the preset secure communication channel includes any one of an SSL channel, a TLS channel, a VPN channel, and an encrypted tunnel.

[0131] Furthermore, the processing module 42 is further configured to obtain the intranet data according to the first intranet access link if the first intranet access link does not include the external network access identifier;

[0132] The sending module 43 is further configured to send the intranet data to the intranet device.

[0133] The intranet device accessing the extranet device provided in this embodiment is used to execute the technical solution of the intranet server in any of the aforementioned method embodiments. Its implementation principle and technical effect are similar and will not be repeated here.

[0134] Figure 5 A schematic diagram of the structure of a server provided in this application. Figure 5 As shown, the server 50 includes:

[0135] Processor 51, memory 52, and communication interface 53;

[0136] The memory 52 is used to store executable instructions of the processor 51;

[0137] The processor 51 is configured to execute the technical solution of the intranet server in any of the aforementioned method embodiments by executing the executable instructions.

[0138] Optionally, the memory 52 may be independent or integrated with the processor 51 .

[0139] Optionally, when the memory 52 is a device independent of the processor 51, the server 50 may further include:

[0140] The bus 54 , the memory 52 and the communication interface 53 are connected to the processor 51 via the bus 54 and communicate with each other. The communication interface 53 is used to communicate with other devices.

[0141] Optionally, the communication interface 53 may be implemented by a transceiver. The communication interface is used to implement communication between the database access device and other devices (such as a client, a read-write library, and a read-only library). The memory may include a random access memory (RAM) and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage.

[0142] The bus 54 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0143] The above-mentioned processor can be a general-purpose processor, including a central processing unit CPU, a network processor (NP), etc.; it can also be a digital signal processor DSP, an application-specific integrated circuit ASIC, a field programmable gate array FPGA or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0144] The server is used to execute the technical solution of the intranet server in any of the aforementioned method embodiments, and its implementation principle and technical effect are similar and will not be repeated here.

[0145] An embodiment of the present application also provides a readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the technical solution provided by any of the aforementioned method embodiments is implemented.

[0146] An embodiment of the present application also provides a computer program product, including a computer program, which is used to implement the technical solution provided by any of the aforementioned method embodiments when executed by a processor.

[0147] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0148] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for an intranet device to access an extranet, characterized in that: Applied to an intranet server, the method comprises: Receiving an intranet access request sent by an intranet device, the intranet access request comprising a first intranet access link, and the first intranet access link comprising an address of the intranet server; If the first intranet access link includes an external network access identifier, the first intranet access link is replaced with a first external network access link according to a stored link replacement table to obtain an external network access request; Sending the external network access request to the external network server; Receiving external network data sent by the external network server; The external network data is sent to the internal network device.

2. The method according to claim 1, characterized in that Before sending the external network data to the internal network device, the method further includes: Determine a second intranet access link corresponding to each second external network access link in the external network data, each of the second intranet access links including the external network access identifier; For each second external network access link in the external network data, the second external network access link is replaced with a second internal network access link corresponding to the second external network access link to obtain updated external network data; The sending the external network data to the internal network device includes: The updated external network data is sent to the internal network device.

3. The method according to claim 2, characterized in that The determining the second intranet access link corresponding to each second external network access link in the external network data includes: For each of the second external network access links, replace the external network address in the second external network access link with the address of the intranet server, and add the external network access identifier to obtain the first link corresponding to the second external network access link; For each first link corresponding to the second external network access link, the following processing is performed in sequence: Determine whether the first link exists in the link replacement table; If the first link does not exist in the link replacement table, using the first link as the second intranet access link corresponding to the second external network access link, and storing the second external network access link and the first link in the link replacement table; If the first link exists in the link replacement table, characters are added to the first link to obtain a second link that does not exist in the link replacement table, the second link is used as the second intranet access link corresponding to the second external network access link, and the second external network access link and the second link are stored in the link replacement table.

4. The method according to any one of claims 1 to 3, characterized in that: The sending the external network access request to the external network server includes: Sending the external network access request to the external network server through a preset secure communication channel; The receiving of external network data sent by the external network server includes: The external network data sent by the external network server is received through the preset secure communication channel.

5. The method according to claim 4, characterized in that The preset secure communication channel includes any one of a secure socket layer SSL channel, a transport layer security TLS channel, a virtual private network VPN channel, and an encrypted tunnel.

6. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: If the first intranet access link does not include the external network access identifier, acquiring intranet data according to the first intranet access link; The intranet data is sent to the intranet device.

7. An intranet device accessing an extranet device, characterized in that: include: A receiving module, configured to receive an intranet access request sent by an intranet device, wherein the intranet access request includes a first intranet access link, and the first intranet access link includes an address of an intranet server; a processing module, configured to replace the first intranet access link with a first external network access link according to a stored link replacement table if the first intranet access link includes an external network access identifier, so as to obtain an external network access request; A sending module, used for sending the external network access request to the external network server; The receiving module is also used to receive external network data sent by the external network server; The sending module is also used to send the external network data to the internal network device.

8. A server, characterized in that: include: Processor, memory, communication interface; The memory is used to store executable instructions of the processor; Wherein, the processor is configured to execute the method for an intranet device to access an external network as described in any one of claims 1 to 6 by executing the executable instructions.

9. A readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method for an intranet device to access an external network as described in any one of claims 1 to 6 is implemented.

10. A computer program product, characterized in that It includes a computer program, which, when executed by a processor, is used to implement the method for an intranet device to access an external network as described in any one of claims 1 to 6.

Images