A method, device, electronic device and storage medium for transmitting data across a network

Abstract

The application provides a data transmission method and device across networks, electronic equipment and a storage medium. The method comprises the following steps: establishing a transmission channel between a first production device in a first network environment and a second production device in a second network environment; and transmitting target transmission data from a source production device to a destination production device based on the transmission channel according to the grade of the first production device and the grade of the second device. The application breaks through the limitation of different network environments by establishing a transmission channel between production devices, and improves the security of data transmission by considering the importance of data when transmitting data between production devices.

Description

Technical Field

[0001] This application relates to the field of file transfer technology, and more specifically, to a method, apparatus, electronic device, and storage medium for data transfer across networks. Background Technology

[0002] With the development of information technology, production equipment and systems in various industries are evolving rapidly. Data is the foundation for the normal operation of information systems and application software, and the secure transmission of data is of paramount importance in the construction of information systems.

[0003] To ensure data security, many companies currently deploy servers and production equipment on their internal local area networks (LANs) without providing wireless networks. While this approach improves data security, it fails to consider the importance of data on the production equipment during transmission, introducing certain risks into the data transfer process. For example, sensitive data may be present during transmission from the source production equipment to the destination. Summary of the Invention

[0004] In view of this, the purpose of this application is to provide a method, apparatus, electronic device and storage medium for data transmission across a network to overcome the problems in the prior art.

[0005] In a first aspect, embodiments of this application provide a method for data transmission across a network, the method comprising:

[0006] In response to the setting operation of the intermediary device, the intermediary device is set between the first production device and the second production device; wherein the first production device is located in the first network environment, the second production device is located in the second network environment, the first network environment and the second network environment are different, and the intermediary device is used to establish a transmission channel between the first production device and the second production device;

[0007] The first production equipment level of the first production equipment is determined based on the data level of each first candidate data in the first production equipment.

[0008] The second equipment level of the second production equipment is determined based on the data level of each second candidate data in the second production equipment.

[0009] In response to a data transmission operation, target transmission data is sent from a source production device to a destination production device via the transmission channel, based on the first production device level and the second device level; wherein the target transmission data is either the first candidate data or the second candidate data; the source production device is either the first production device or the second production device; and the destination production device is either the second production device or the first production device.

[0010] In some technical solutions of this application, the target transmission data is the first candidate data; the source production equipment is the first production equipment; the destination production equipment is the second production equipment; and the first production equipment is of a lower grade than the second production equipment.

[0011] The step of responding to a data transmission operation by sending target transmission data from the source production equipment to the destination production equipment via the transmission channel, based on the first production equipment level and the second equipment level, includes:

[0012] In response to a data transmission operation, the first candidate data is transmitted from the first production equipment to the second production equipment via the transmission channel.

[0013] In some technical solutions of this application, the target transmission data is the first candidate data; the source production equipment is the first production equipment; the destination production equipment is the second production equipment; and the first production equipment is of a lower grade than the second production equipment.

[0014] Before sending the target transmission data from the source production equipment to the destination production equipment via the transmission channel in response to the data transmission operation, based on the first production equipment level and the second equipment level; the method further includes:

[0015] In response to the data verification operation, the first candidate data is verified;

[0016] After the first candidate data passes verification, the first candidate data is sent from the first production equipment to the second production equipment via the transmission channel.

[0017] In some technical solutions of this application, the above method also includes:

[0018] If the first candidate data fails the verification, an alarm message is generated and an anomaly scan is performed on the first candidate data;

[0019] After identifying the abnormal data in the first candidate data, the abnormal data is repaired using a preset repair method;

[0020] After the preset verification conditions are met, the first candidate data is verified again until the first candidate data passes the verification.

[0021] In some technical solutions of this application, in response to the setting operation of the intermediary device, the intermediary device is set between the first production device and the second production device; wherein, the intermediary device establishes a transmission channel between the first production device and the second production device, including:

[0022] The intermediary device is used to establish a first proxy virtual machine in the first production device and a second proxy virtual machine in the second production device;

[0023] The transmission channel is constructed using the first proxy virtual machine, the second proxy virtual machine, and the intermediary device.

[0024] In some technical solutions of this application, the determination of the first production equipment level of the first production equipment based on the data level of each first candidate data in the first production equipment includes:

[0025] The data level of the first candidate data is determined based on its data attributes.

[0026] The highest data level among the first candidate data is taken as the first production equipment level of the first production equipment.

[0027] In some technical solutions of this application, the above method also includes:

[0028] The transmission restriction rule is generated based on the first production equipment attribute of the first production equipment or the second equipment attribute of the second production equipment.

[0029] In response to the data transmission operation, the target transmission data is sent from the source production equipment to the destination production equipment via the transmission channel according to the first production equipment level and the second equipment level; wherein the target transmission data is the first candidate data or the second candidate data; the source production equipment is the first production equipment or the second production equipment; and the destination production equipment is the second production equipment or the first production equipment, including:

[0030] In response to a data transmission operation, the target transmission data is transmitted from the source production equipment to the destination production equipment via the transmission channel, according to the transmission restriction rules.

[0031] Secondly, embodiments of this application provide an apparatus for data transmission across a network, the apparatus comprising:

[0032] A first response module is used to respond to the setting operation of an intermediary device and set the intermediary device between a first production device and a second production device; wherein the first production device is located in a first network environment, the second production device is located in a second network environment, the first network environment and the second network environment are different, and the intermediary device is used to establish a transmission channel between the first production device and the second production device.

[0033] The first determining module is used to determine the first production equipment level of the first production equipment based on the data level of each first candidate data in the first production equipment.

[0034] The second determining module is used to determine the second equipment level of the second production equipment based on the data level of each second candidate data in the second production equipment;

[0035] The second response module is used to respond to a data transmission operation by sending target transmission data from the source production equipment to the destination production equipment via the transmission channel according to the first production equipment level and the second equipment level; wherein the target transmission data is the first candidate data or the second candidate data; the source production equipment is the first production equipment or the second production equipment; and the destination production equipment is the second production equipment or the first production equipment.

[0036] Thirdly, embodiments of this application provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the above-described method for data transmission across a network.

[0037] Fourthly, embodiments of this application provide a computer-readable storage medium storing a computer program, which, when executed by a processor, performs the steps of the above-described method for data transmission across a network.

[0038] The technical solutions provided by the embodiments of this application may include the following beneficial effects:

[0039] The method of this application includes, in response to an operation of setting up an intermediary device, setting up the intermediary device between a first production device and a second production device; wherein the first production device is located in a first network environment, the second production device is located in a second network environment, the first network environment and the second network environment are different, and the intermediary device is used to establish a transmission channel between the first production device and the second production device; determining a first production device level of the first production device based on the data level of each first candidate data in the first production device; determining a second device level of the second production device based on the data level of each second candidate data in the second production device; and, in response to a data transmission operation, sending target transmission data from the source production device to the destination production device based on the transmission channel according to the first production device level and the second device level; wherein the target transmission data is either the first candidate data or the second candidate data; the source production device is either the first production device or the second production device; and the destination production device is either the second production device or the first production device.

[0040] This application establishes a transmission channel between production equipment, breaking down the limitations of different network environments. Furthermore, it considers the importance of the data when transmitting data between production equipment, thereby improving the security of data transmission.

[0041] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description

[0042] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of this application and should not be regarded as a limitation of the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0043] Figure 1 A flowchart illustrating a method for data transmission across a network provided in an embodiment of this application is shown.

[0044] Figure 2 This illustration shows a network environment provided by an embodiment of the present application;

[0045] Figure 3 A schematic diagram of a data transmission apparatus across a network provided in an embodiment of this application is shown;

[0046] Figure 4 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0047] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. It should be understood that the accompanying drawings in this application are for illustrative and descriptive purposes only and are not intended to limit the scope of protection of this application. Furthermore, it should be understood that the schematic drawings are not drawn to scale. The flowcharts used in this application illustrate operations implemented according to some embodiments of this application. It should be understood that the operations in the flowcharts may not be implemented in sequence, and steps without logical contextual relationships may be reversed or implemented simultaneously. In addition, those skilled in the art, guided by the content of this application, may add one or more other operations to the flowcharts, or remove one or more operations from the flowcharts.

[0048] Furthermore, the described embodiments are merely some, not all, of the embodiments of this application. The configurations of the embodiments of this application described and illustrated herein can generally be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0049] It should be noted that the term "comprising" will be used in the embodiments of this application to indicate the presence of the features declared thereafter, but does not exclude the addition of other features.

[0050] With the development of information technology, production equipment and systems in various industries are evolving rapidly. Data is the foundation for the normal operation of information systems and application software, and the secure transmission of data is of paramount importance in the construction of information systems.

[0051] To ensure data security, many companies currently deploy servers and production equipment on their internal local area networks (LANs) without providing wireless networks. While this approach improves data security, it fails to consider the importance of data on the production equipment during transmission, introducing certain risks into the data transfer process. For example, sensitive data may be present during transmission from the source production equipment to the destination.

[0052] Based on this, embodiments of this application provide a method, apparatus, electronic device, and storage medium for data transmission across networks, which are described below through embodiments.

[0053] Figure 1The illustration shows a flowchart of a method for data transmission across a network according to an embodiment of this application, wherein the method includes steps S101-S104; specifically:

[0054] S101. In response to the setting operation of the intermediary device, the intermediary device is set between the first production device and the second production device; wherein, the first production device is located in the first network environment, the second production device is located in the second network environment, the first network environment and the second network environment are different, and the intermediary device is used to establish a transmission channel between the first production device and the second production device.

[0055] S102. Determine the first production equipment level of the first production equipment based on the data level of each first candidate data in the first production equipment.

[0056] S103. Determine the second equipment level of the second production equipment based on the data level of each second candidate data in the second production equipment;

[0057] S104. In response to the data transmission operation, according to the first production equipment level and the second equipment level, the target transmission data is sent from the source production equipment to the destination production equipment via the transmission channel; wherein, the target transmission data is the first candidate data or the second candidate data; the source production equipment is the first production equipment or the second production equipment; and the destination production equipment is the second production equipment or the first production equipment.

[0058] This application establishes a transmission channel between production equipment, breaking down the limitations of different network environments. Furthermore, it considers the importance of the data when transmitting data between production equipment, thereby improving the security of data transmission.

[0059] The following describes some embodiments of this application in detail. Unless otherwise specified, the following embodiments and features can be combined with each other.

[0060] The data cross-network transmission method in this application embodiment is applied to production equipment in different network environments. There are multiple production equipment and multiple network environments. For ease of description, this application embodiment only uses a first production equipment in a first network environment and a second production equipment in a second network environment as examples. In actual business operations, there may also be a third and fourth production equipment in the first network environment, and similarly, a fifth production equipment in the second network environment. There may also be a third network environment, a fourth network environment, etc., each with its own corresponding production equipment. These network environments are all different and independent of each other (they cannot communicate with each other via the Internet).

[0061] like Figure 2 As shown, the office building is the first network environment, the data center R&D and testing environment is the second network environment, the operations and maintenance area is the third network environment, production environment 1 is the fourth network environment, and production environment 2 is the fifth network environment. Each network environment has corresponding production equipment.

[0062] When production equipment in different network environments transmits data, direct transmission is not possible due to the isolation between the different network environments. Therefore, this embodiment of the application requires establishing transmission channels in different network environments first. Specifically, this embodiment of the application adopts the method of setting up an intermediate device: by setting up an intermediary device between the first production equipment in the first network environment and the second production equipment in the second network environment, the permissions of the production equipment to each network are opened up.

[0063] Furthermore, after setting up the intermediate device, a first proxy virtual machine is established in the first production device and a second proxy virtual machine is established in the second production device using the intermediate device; the first proxy virtual machine, the second proxy virtual machine, and the intermediate device constitute the transmission channel. In specific implementation, this can be achieved by creating a file transfer channel based on SSH, FTP, SCP, etc., considering that traditional file transfer protocols cannot control or verify the transmitted content. The intermediate device creates and allocates a proxy virtual machine in each network area. The proxy and the device transfer files through an HTTPS encrypted channel. After the file arrives at the proxy virtual machine in a certain network area, the user can download the file in that area. Simultaneously, the file transfer channel implements functions such as verification, sensitive data identification, virus scanning, rate limiting, and behavior auditing.

[0064] After establishing a transmission channel between the first and second production equipment, this embodiment of the application, in order to further improve the security of data transmission, comprehensively considers the data levels of the candidate data in the production equipment and transmits the data based on the data levels. Specifically, a first production equipment level of the first production equipment is determined according to the data levels of each first candidate data in the first production equipment; and a second equipment level of the second production equipment is determined according to the data levels of each second candidate data in the second production equipment.

[0065] In this embodiment, the (first or second) equipment level of the production equipment is determined by the data level of the (first or second) candidate data in the production equipment, and the data level is determined by data attributes. Here, data attributes include the content of the data and the importance of the data.

[0066] Specifically, by identifying the content of the data, the data level of the (first or second) candidate data is determined based on the number of preset keywords contained in the data. During the identification process, a first identification result can be obtained through keyword identification, and a second identification result can be obtained through semantic identification. The identification result is calculated by weighting the first and second identification results (the first weight of the first identification result is greater than or equal to the second weight of the second identification result, and the higher the semantic overlap, the greater the second weight). The more keywords contained in the identification result, the higher the data level of the (first or second) candidate data. The first sub-level is obtained by identifying the content of the (first or second) candidate data.

[0067] The importance of data here represents the extent of the impact caused by the data breach. The greater the impact, the higher the importance of the data, and vice versa. In practice, the degree of impact can be represented by the correlation between the data and other data, devices, and systems. The more other data, devices, and systems related to the data, and the stronger the correlation, the greater the impact of the data. The second sub-level of the data is obtained by identifying its importance.

[0068] By merging the first and second sub-levels of the (first or second) candidate data, the final data level of the (first or second) candidate data can be obtained. For example, the final data level can be obtained by adding the first and second sub-levels together.

[0069] After determining the data level of the first candidate data, the highest data level in the first production equipment is selected as the equipment level of the first production equipment by comparing the data levels of each candidate data in the second production equipment. After determining the data level of the second candidate data, the highest data level in the second production equipment is selected as the equipment level of the second production equipment by comparing the data levels of each candidate data in the second production equipment.

[0070] After determining the first production equipment level of the first production equipment and the second equipment level of the second production equipment, when transmitting data, it is necessary to consider the first production equipment level and the second equipment level. Based on the first production equipment level and the second equipment level, the target transmission data is sent from the source production equipment to the destination production equipment through the transmission channel; wherein, the target transmission data is the first candidate data or the second candidate data; the source production equipment is the first production equipment or the second production equipment; and the destination production equipment is the second production equipment or the first production equipment.

[0071] In an optional implementation, the target transmission data is the first or second candidate data; the source production equipment is the first or second production equipment; the destination production equipment is the second or first production equipment; and the first or second production equipment is of a lower level than the second or first production equipment. When data is transmitted from a lower-level production equipment to a higher-level production equipment, this embodiment of the application assumes that the data in the lower-level production equipment does not contain sensitive data, therefore no security processing measures are required. Direct transmission is sufficient: in response to the data transmission operation, the first or second candidate data is sent from the first or second production equipment to the second or first production equipment via the transmission channel.

[0072] If the target transmission data is the first or second candidate data; the source production equipment is the first or second production equipment; the destination production equipment is the second or first production equipment; and the first or second production equipment is of a higher level than the second or first production equipment. When transmitting data from a higher-level production equipment to a lower-level production equipment, this application embodiment considers that the data in the higher-level production equipment contains sensitive data, posing a risk when transmitting data to the lower-level production equipment. Therefore, security measures need to be taken for the data: In response to a data verification operation, the first or second candidate data is verified; after the first or second candidate data passes verification, the first or second candidate data is sent from the first or second production equipment to the second or first production equipment via the transmission channel. If the first or second candidate data fails verification, an alarm message is generated and an anomaly scan is performed on the first or second candidate data; after identifying the abnormal data in the first or second candidate data, a preset repair method is used to repair the abnormal data; after meeting the preset verification conditions, the first or second candidate data is verified again until the first or second candidate data passes verification.

[0073] Specifically, in this embodiment of the application, when data is transmitted from a higher-level production device to a lower-level production device, data verification is required to prevent the leakage of sensitive data. This data verification includes manual approval and machine scanning. Manual approval yields a first verification result, and machine scanning yields a second verification result. The combination of the first and second verification results is taken as the final target verification result. For example, if the first verification result includes abnormal data A1 and the second verification result includes abnormal data A2, then the target verification result includes both A1 and A2. After identifying abnormal data, it needs to be repaired. Specific repair methods include modifying and deleting the abnormal data. After repairing the abnormal data, this embodiment of the application also sets conditions for re-verification. After meeting these conditions, the repaired candidate data is verified again. These verification conditions include waiting for a preset time and responding to a repair completion operation.

[0074] In the actual data transmission, to ensure data transmission efficiency and security, this embodiment of the application also generates the transmission restriction rules based on the first equipment attribute of the first production equipment or the second equipment attribute of the second production equipment; according to the transmission restriction rules, the target transmission data is sent from the source production equipment to the destination production equipment via the transmission channel. These transmission restriction rules include virus detection rules and rate limiting rules, etc.

[0075] Virus Scanning: When files are transferred between different isolated networks, each file is scanned for viruses and Trojans, identifying malicious files that may pose a risk to the system. Alerts are issued and file exchange to the peer network is automatically blocked. Before transmission, information such as upload time, file name, username, operation type (upload file, download file, delete file, create directory, share file, move file), terminal IP / MAC address, terminal location (external network, internal network), source / destination file path, and terminal name are determined. Verification of file exchange is achieved through recording transmission behavior and file retention.

[0076] File transfer rate limiting: When files are transferred between different isolated networks, the upload and download speeds are limited within different specified time periods.

[0077] In an alternative implementation, for Figure 2In the example, when the production system undergoes a version upgrade, the upgrade package sent by the vendor via email needs to be transferred to the production system server. The transfer area is from the office building to the operations and maintenance area. Lower-security-level areas do not contain sensitive company information. Data transfer between areas with lower to higher security levels is not restricted, and users can transfer data directly. For production system failures, fault logs need to be exported to the vendor for analysis and troubleshooting. The transfer area is from the operations and maintenance area to the office building. Because higher-security-level data cannot flow to lower-security-level areas, and to meet business requirements, verification is implemented to ensure that higher-security-level data is not included before allowing the transfer.

[0078] Figure 3 This illustration shows a schematic diagram of a data transmission apparatus across a network according to an embodiment of this application. The apparatus includes:

[0079] A first response module is used to respond to the setting operation of an intermediary device and set the intermediary device between a first production device and a second production device; wherein the first production device is located in a first network environment, the second production device is located in a second network environment, the first network environment and the second network environment are different, and the intermediary device is used to establish a transmission channel between the first production device and the second production device.

[0080] The first determining module is used to determine the first production equipment level of the first production equipment based on the data level of each first candidate data in the first production equipment.

[0081] The second determining module is used to determine the second equipment level of the second production equipment based on the data level of each second candidate data in the second production equipment;

[0082] The second response module is used to respond to a data transmission operation by sending target transmission data from the source production equipment to the destination production equipment via the transmission channel according to the first production equipment level and the second equipment level; wherein the target transmission data is the first candidate data or the second candidate data; the source production equipment is the first production equipment or the second production equipment; and the destination production equipment is the second production equipment or the first production equipment.

[0083] The target transmission data is the first candidate data; the source production equipment is the first production equipment; the destination production equipment is the second production equipment; the first production equipment is of a higher level than the second production equipment;

[0084] The step of responding to a data transmission operation by sending target transmission data from the source production equipment to the destination production equipment via the transmission channel, based on the first production equipment level and the second equipment level, includes:

[0085] In response to a data transmission operation, the first candidate data is transmitted from the first production equipment to the second production equipment via the transmission channel.

[0086] The target transmission data is the first candidate data; the source production equipment is the first production equipment; the destination production equipment is the second production equipment; the first production equipment is of a higher level than the second production equipment;

[0087] Before sending the target transmission data from the source production equipment to the destination production equipment via the transmission channel in response to the data transmission operation, based on the first production equipment level and the second equipment level; the method further includes:

[0088] In response to the data verification operation, the first candidate data is verified;

[0089] After the first candidate data passes verification, the first candidate data is sent from the first production equipment to the second production equipment via the transmission channel.

[0090] If the first candidate data fails the verification, an alarm message is generated and an anomaly scan is performed on the first candidate data;

[0091] After identifying the abnormal data in the first candidate data, the abnormal data is repaired using a preset repair method;

[0092] After the preset verification conditions are met, the first candidate data is verified again until the first candidate data passes the verification.

[0093] In response to the setting operation of the intermediary device, the intermediary device is set between the first production device and the second production device; wherein, the intermediary device establishes a transmission channel between the first production device and the second production device, including:

[0094] The intermediary device is used to establish a first proxy virtual machine in the first production device and a second proxy virtual machine in the second production device;

[0095] The transmission channel is constructed using the first proxy virtual machine, the second proxy virtual machine, and the intermediary device.

[0096] The step of determining the first production equipment level of the first production equipment based on the data level of each first candidate data in the first production equipment includes:

[0097] The data level of the first candidate data is determined based on its data attributes.

[0098] The highest data level among the first candidate data is taken as the first production equipment level of the first production equipment.

[0099] The transmission restriction rule is generated based on the first production equipment attribute of the first production equipment or the second equipment attribute of the second production equipment.

[0100] In response to the data transmission operation, the target transmission data is sent from the source production equipment to the destination production equipment via the transmission channel according to the first production equipment level and the second equipment level; wherein the target transmission data is the first candidate data or the second candidate data; the source production equipment is the first production equipment or the second production equipment; and the destination production equipment is the second production equipment or the first production equipment, including:

[0101] In response to a data transmission operation, the target transmission data is transmitted from the source production equipment to the destination production equipment via the transmission channel, according to the transmission restriction rules.

[0102] like Figure 4 As shown, this application provides an electronic device for executing the data cross-network transmission method described in this application. The device includes a memory, a processor, a bus, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the steps of the data cross-network transmission method described above.

[0103] Specifically, the aforementioned memory and processor can be general-purpose memory and processor, without any specific limitations. When the processor runs the computer program stored in the memory, it can execute the aforementioned method of data transmission across the network.

[0104] Corresponding to the data cross-network transmission method in this application, embodiments of this application also provide a computer-readable storage medium storing a computer program, which, when executed by a processor, performs the steps of the above-described data cross-network transmission method.

[0105] Specifically, the storage medium can be a general-purpose storage medium, such as a removable disk or hard disk. When the computer program on the storage medium is run, it can execute the above-mentioned method of data transmission across the network.

[0106] In the embodiments provided in this application, it should be understood that the disclosed systems and methods can be implemented in other ways. The system embodiments described above are merely illustrative. For example, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. Furthermore, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Additionally, the shown or discussed mutual couplings, direct couplings, or communication connections may be through some communication interfaces. Indirect couplings or communication connections between systems or units may be electrical, mechanical, or other forms.

[0107] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment, depending on actual needs.

[0108] In addition, the functional units in the embodiments provided in this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0109] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0110] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures. In addition, the terms "first", "second", "third", etc. are used only to distinguish descriptions and should not be construed as indicating or implying relative importance.

[0111] Finally, it should be noted that the above-described embodiments are merely specific implementations of this application, used to illustrate the technical solutions of this application, and not to limit them. The protection scope of this application is not limited thereto. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that any person skilled in the art can still modify or easily conceive of changes to the technical solutions described in the foregoing embodiments, or make equivalent substitutions for some of the technical features, within the scope of the technology disclosed in this application; and these modifications, changes, or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application. All should be covered within the protection scope of this application. Therefore, the protection scope of this application should be determined by the protection scope of the claims.

Claims

1. A method for data transmission across a network, characterized in that, The method includes: In response to the setting operation of the intermediary device, the intermediary device is set between the first production device and the second production device; wherein the first production device is located in a first network environment and the second production device is located in a second network environment, the first network environment and the second network environment are different, and the intermediary device is used to establish a transmission channel between the first production device and the second production device; The first production equipment level is determined based on the data level of each first candidate data in the first production equipment; wherein, the data level of the first candidate data is determined by preset keywords in the content of the first candidate data and the correlation between the first candidate data and other data, equipment and systems. The second equipment level of the second production equipment is determined based on the data level of each second candidate data in the second production equipment; wherein, the data level of the second candidate data is determined by preset keywords in the content of the second candidate data and the correlation between the second candidate data and other data, equipment and systems; In response to a data transmission operation, target transmission data is sent from a source production device to a destination production device via the transmission channel, based on the first production device level and the second device level; wherein the target transmission data is either the first candidate data or the second candidate data; the source production device is either the first production device or the second production device; and the destination production device is either the second production device or the first production device. When data is transmitted from the source production equipment at a lower level to the destination production equipment at a higher level, there is no sensitive data in the source production equipment at the lower level, so there is no need to take security measures for the target transmitted data, and the data is transmitted directly. When data is transmitted from a high-level source production device to a low-level destination production device, if there is sensitive data in the high-level source production device, the target transmission data is verified in response to a data verification operation, and transmission is carried out after the verification is passed.

2. The method according to claim 1, characterized in that, The target transmission data is the first candidate data; the source production equipment is the first production equipment; the destination production equipment is the second production equipment; the first production equipment is of a lower grade than the second production equipment. The step of responding to a data transmission operation by sending target transmission data from the source production equipment to the destination production equipment via the transmission channel, based on the first production equipment level and the second equipment level, includes: In response to a data transmission operation, the first candidate data is transmitted from the first production equipment to the second production equipment via the transmission channel.

3. The method according to claim 1, characterized in that, The target transmission data is the first candidate data; the source production equipment is the first production equipment; the destination production equipment is the second production equipment; the first production equipment is of a higher level than the second production equipment; Before sending the target transmission data from the source production equipment to the destination production equipment via the transmission channel in response to the data transmission operation, based on the first production equipment level and the second equipment level; the method further includes: In response to the data verification operation, the first candidate data is verified; After the first candidate data passes verification, the first candidate data is sent from the first production equipment to the second production equipment via the transmission channel.

4. The method according to claim 3, characterized in that, The method further includes: If the first candidate data fails the verification, an alarm message is generated and an anomaly scan is performed on the first candidate data; After identifying the abnormal data in the first candidate data, the abnormal data is repaired using a preset repair method; After the preset verification conditions are met, the first candidate data is verified again until the first candidate data passes the verification.

5. The method according to claim 1, characterized in that, In response to the setting operation of the intermediary device, the intermediary device is set between the first production device and the second production device; wherein, the intermediary device establishes a transmission channel between the first production device and the second production device, including: The intermediary device is used to establish a first proxy virtual machine in the first production device and a second proxy virtual machine in the second production device; The transmission channel is constructed using the first proxy virtual machine, the second proxy virtual machine, and the intermediary device.

6. The method according to claim 1, characterized in that, The step of determining the first production equipment level of the first production equipment based on the data level of each first candidate data in the first production equipment includes: The data level of the first candidate data is determined based on its data attributes. The highest data level among the first candidate data is taken as the first production equipment level of the first production equipment.

7. The method according to claim 1, characterized in that, The method further includes: Generate transmission restriction rules based on the first production equipment attribute of the first production equipment or the second equipment attribute of the second production equipment; In response to the data transmission operation, the target transmission data is sent from the source production equipment to the destination production equipment via the transmission channel according to the first production equipment level and the second equipment level; wherein the target transmission data is the first candidate data or the second candidate data; the source production equipment is the first production equipment or the second production equipment; and the destination production equipment is the second production equipment or the first production equipment, including: In response to a data transmission operation, the target transmission data is transmitted from the source production equipment to the destination production equipment via the transmission channel, according to the transmission restriction rules.

8. A device for data transmission across a network, characterized in that, The device includes: A first response module is used to respond to the setting operation of an intermediary device and set the intermediary device between a first production device and a second production device; wherein the first production device is located in a first network environment and the second production device is located in a second network environment, the first network environment and the second network environment are different, and the intermediary device is used to establish a transmission channel between the first production device and the second production device; The first determining module is used to determine the first production equipment level of the first production equipment based on the data level of each first candidate data in the first production equipment; wherein, the data level of the first candidate data is determined by preset keywords in the content of the first candidate data and the correlation between the first candidate data and other data, equipment and systems; The second determining module is used to determine the second equipment level of the second production equipment based on the data level of each second candidate data in the second production equipment; wherein, the data level of the second candidate data is determined by preset keywords in the content of the second candidate data and the correlation between the second candidate data and other data, equipment, and systems; The second response module is configured to respond to a data transmission operation by sending target transmission data from the source production equipment to the destination production equipment via the transmission channel, based on the first production equipment level and the second equipment level; wherein the target transmission data is either the first candidate data or the second candidate data; the source production equipment is either the first production equipment or the second production equipment; and the destination production equipment is either the second production equipment or the first production equipment. When data is transmitted from the source production equipment at a lower level to the destination production equipment at a higher level, there is no sensitive data in the source production equipment at the lower level, so there is no need to take security measures for the target transmitted data, and the data is transmitted directly. When data is transmitted from a high-level source production device to a low-level destination production device, if there is sensitive data in the high-level source production device, the target transmission data is verified in response to a data verification operation, and transmission is carried out after the verification is passed.

9. An electronic device, characterized in that, include: The device includes a processor, a memory, and a bus, wherein the memory stores machine-readable instructions executable by the processor, and when the electronic device is in operation, the processor communicates with the memory via the bus, and the machine-readable instructions, when executed by the processor, perform the steps of the method for data transmission across a network as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, performs the steps of the method for data transmission across a network as described in any one of claims 1 to 7.

Images