Data ferrying method, device, system and equipment and storage medium

Abstract

The invention discloses a data ferrying method, device, system and equipment and a storage medium, and relates to the technical field of communication, a data ferrying process is divided into a flexibly defined ferrying state and state transition through a ferrying state machine, data can be efficiently controlled to be transmitted between different network domains, meanwhile, the isolation requirement is met, and the data ferrying efficiency is improved. And data leakage and external attacks are effectively avoided. The method comprises the following steps: pre-constructing a network topology structure of data ferry, wherein the network topology structure comprises a network domain set and a ferry network set; on the basis of the network topology structure, a ferry state machine is defined, the ferry state machine is a state model for describing data transmission of the ferry network between at least two network domains, and the ferry state machine comprises at least one ferry state and state transition logic; and changing a connection state combination formed by the ferry network and the at least two network domains according to the state transition logic so as to control the ferry network to carry out data transmission between the at least two network domains.

Description

Technical Field

[0001] This application relates to the field of communication technologies, and particularly to a data ferry method, apparatus, system, device, and storage medium. Background Art

[0002] In a complex network environment, the demand for multi-security isolation is increasing. For scenarios such as industrial control networks and office networks, financial core systems and external interface networks, etc., direct data exchange in these scenarios may bring serious security risks. To address this situation, data can be ferried from one network environment to another through the data ferry method, and on the premise of ensuring the isolation of the two networks, the secure transmission of data is achieved.

[0003] In related technologies, data can be transferred between networks or systems with different security levels by manually operating physical storage media. This process mainly uses physical isolation to avoid network attacks and is applicable to low-frequency and low-risk scenarios. For example, manually copying data between physically isolated networks through storage devices such as USB flash drives and external hard drives. However, the method of manually ferrying physical storage media relies on manual operations and cannot respond to sudden high-frequency data transmission requirements, resulting in low data ferry efficiency. Summary of the Invention

[0004] In view of this, this application provides a data ferry method, apparatus, system, device, and storage device, mainly aiming to solve the problem that the method of using manually ferried physical storage media in the prior art relies on manual operations and cannot respond to sudden high-frequency data transmission requirements, resulting in low data ferry efficiency.

[0005] According to the first aspect of this application, a data ferry method is provided, including: Pre-construct a network topology structure for data ferry, where the network topology structure includes a network domain set and a ferry network set. The network domain set includes at least two network domains that satisfy an isolation relationship, and the ferry network set includes at least one ferry network. One ferry network has conductivity with at least two network domains; Based on the network topology structure, define a ferry state machine. The ferry state machine is a state model that describes data transmission of the ferry network between at least two network domains. The ferry state machine includes at least one ferry state and state transition logic. Each ferry state corresponds to a network connection combination, and the network connection state is a connection state combination formed by the ferry network and at least two network domains; Change the connection state combination formed by the ferry network and at least two network domains according to the state transition logic to control the ferry network to perform data transmission between the at least two network domains.

[0006] Further, on the basis of the network topology, a ferry state machine is defined, including: On the basis of the network topology, at least one ferry state is set according to the connection state combinations formed by the ferry network and at least two network domains, where the connection state combinations include a conduction state and a disconnection state. The conduction state means that the ferry network is connected to the network domain, and the disconnection state means that the ferry network is not connected to the network domain; On the basis of the network topology, state transition logic is set according to the events that trigger state transitions and the constraint conditions that drive state transitions during the data ferry process. The state transition logic indicates the intention of triggering state transitions through events and performs state transitions when at least one constraint condition is met. The events include external events and / or internal events, and the constraint conditions include at least one of time constraint conditions, sequence constraint conditions, and verification constraint conditions; According to the at least one ferry state and the state transition logic, a ferry state machine is defined so that the ferry state machine controls the sequential operation of the at least one ferry state during the data ferry process according to the state transition logic.

[0007] Further, the setting of at least one ferry state according to the connection state combinations formed by the ferry network and at least two network domains includes: According to the connection state combinations formed by the ferry network and at least two network domains, valid connection state combinations that meet the connection state constraints are selected, where the connection state constraints include network domain isolation constraints and data flow constraints; Using a pre-defined logical correspondence relationship, the connection states in the valid connection state combinations are converted into at least one ferry state.

[0008] Further, the setting of state transition logic according to the events that trigger state transitions and the constraint conditions that drive state transitions during the data ferry process includes The events that trigger state transitions and the constraint conditions that drive state transitions during the data ferry process are combined to obtain a state transition matrix, so as to define the events that are allowed to trigger for each state through the state transition matrix and add constraint conditions to each event; According to the state transition matrix, state transition logic is set.

[0009] Further, before changing the connection state combinations formed by the ferry network and at least two network domains according to the state transition logic to control data transmission of the ferry network between the at least two network domains, the method further includes: Obtain a first connection state combination of the data ferry network and at least two network domains in the current ferry state and a second connection state combination in the target ferry state; Correspondingly, according to the state transition logic, the connection state combination formed by the ferry network and at least two network domains is transferred from the first connection state combination to the second connection state combination to control data transmission of the ferry network between the at least two network domains.

[0010] Further, the transferring the connection state combination formed by the ferry network and at least two network domains from the first connection state combination to the second connection state combination according to the state transition logic to control data transmission of the ferry network between the at least two network domains includes: Monitoring the current ferry state according to the state transition logic, and if an event triggering state transition occurs in the current ferry state, performing state transition after verifying that the state transition process meets the constraint conditions; During the state transition process, transferring the connection state combination formed by the ferry network and at least two network domains from the first connection state combination to the second connection state combination to control data transmission of the ferry network between the at least two network domains.

[0011] Further, the changing the connection state combination formed by the ferry network and at least two network domains according to the state transition logic to control data transmission of the ferry network between the at least two network domains includes: During the process of changing the connection state combination formed by the ferry network and at least two network domains according to the state transition logic, obtaining the data flow direction corresponding to the ferry network and the network domains after state transition; Controlling data transmission of the ferry network between the at least two network domains according to the data flow direction.

[0012] According to a second aspect of the present application, there is provided a data ferry device, including: A construction unit, configured to pre-construct a network topology structure for data ferry, the network topology structure including a network domain set and a ferry network set, the network domain set including at least two network domains satisfying an isolation relationship, and the ferry network set including at least one ferry network, and one ferry network has conductivity with at least two network domains; A definition unit, configured to define a ferry state machine on the basis of the network topology structure, the ferry state machine being a state model describing data transmission of the ferry network between at least two network domains, the ferry state machine including at least one ferry state and state transition logic, and each ferry state corresponding to a network connection combination, and the network connection state being a connection state combination formed by the ferry network and at least two network domains; A control unit, configured to change a connection state combination formed by the ferry network and at least two network domains according to the state transition logic, so as to control data transmission of the ferry network between the at least two network domains.

[0013] Further, the defining unit includes: A first setting module, configured to set at least one ferry state on the basis of the network topology according to a connection state combination formed by the ferry network and at least two network domains, where the connection state combination includes a conduction state and a disconnection state, the conduction state means that the ferry network is connected to a network domain, and the disconnection state means that the ferry network is not connected to a network domain; A second setting module, configured to set a state transition logic on the basis of the network topology according to an event that triggers state transition and a constraint condition that drives state transition during the data ferrying process, where the state transition logic triggers the intention of state transition through an event and performs state transition when at least one constraint condition is satisfied, the event includes an external event and / or an internal event, and the constraint condition includes at least one of a time constraint condition, a sequence constraint condition, and a verification constraint condition; A defining module, configured to define a ferry state machine according to the at least one ferry state and the state transition logic, so that the ferry state machine controls the sequential operation of the at least one ferry state during the data ferrying process according to the state transition logic.

[0014] Further, the first setting module is specifically configured to: Select a valid connection state combination that satisfies the connection state constraint according to a connection state combination formed by the ferry network and at least two network domains, where the connection state constraint includes a network domain isolation constraint and a data flow direction constraint; Convert the connection states in the valid connection state combination into at least one ferry state by using a pre-defined logical correspondence.

[0015] Further, the second setting module is specifically configured to: Select a valid connection state combination that satisfies the connection state constraint according to a connection state combination formed by the ferry network and at least two network domains, where the connection state constraint includes a network domain isolation constraint and a data flow direction constraint; Convert the connection states in the valid connection state combination into at least one ferry state by using a pre-defined logical correspondence.

[0016] Further, the apparatus further includes: An acquisition unit, configured to obtain a first connection state combination of the data ferry network and at least two network domains in the current ferry state and a second connection state combination of the data ferry network and at least two network domains in the target ferry state before changing the connection state combination formed by the ferry network and at least two network domains according to the state transition logic to control data transmission of the ferry network between the at least two network domains; Correspondingly, the control unit is specifically configured to transfer the connection state combination formed by the ferry network and at least two network domains from the first connection state combination to the second connection state combination according to the state transition logic to control data transmission of the ferry network between the at least two network domains.

[0017] Furthermore, the control unit is specifically further configured to: Monitor the current ferry state according to the state transition logic. If an event triggering state transition occurs in the current ferry state, after verifying that the state transition process meets the constraint conditions, perform state transition; During the state transition process, transfer the connection state combination formed by the ferry network and at least two network domains from the first connection state combination to the second connection state combination to control data transmission of the ferry network between the at least two network domains.

[0018] Furthermore, the control unit is specifically further configured to: During the process of changing the connection state combination formed by the ferry network and at least two network domains according to the state transition logic, obtain the data flow direction corresponding to the ferry network and the network domain after the state transition; Control data transmission of the ferry network between the at least two network domains according to the data flow direction.

[0019] According to a third aspect of the present application, a data ferry system is provided, including a ferry network, at least two network domains, and a ferry state machine; the ferry state machine is configured to control the at least two network domains and the ferry system to execute the steps of the data ferry method described in the first aspect above.

[0020] According to a fourth aspect of the present application, a computer device is provided, including a memory and a processor, the memory stores a computer program, and when the processor executes the computer program, the steps of the method described in the first aspect above are implemented.

[0021] According to a fifth aspect of the present application, a readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the method described in the first aspect above are implemented.

[0022] With the above technical solution, a data ferry method, apparatus, system, device, and storage medium provided by the present application, compared with the current method of realizing data ferry by manually operating physical storage media, the present application pre-constructs a network topology structure for data ferry. The network topology structure includes a network domain set and a ferry network set. The network domain set includes at least two network domains that satisfy an isolation relationship. The ferry network set includes at least one ferry network. One ferry network has conductivity with at least two network domains; based on the network topology structure, a ferry state machine is defined. The ferry state machine is a state model that describes the data transmission of the ferry network between at least two network domains. The ferry state machine includes at least one ferry state and state transition logic. Each ferry state corresponds to a network connection combination. The network connection state is a connection state combination formed by the ferry network and at least two network domains; according to the state transition logic, the connection state combination formed by the ferry network and at least two network domains is changed to control the data transmission of the ferry network between the at least two network domains. The entire process splits the data ferry process into flexibly defined ferry states and state transitions through the ferry state machine. In this way, only data that meets the state transition logic can be transmitted, which can efficiently control data transmission between different network domains while meeting the isolation requirements, effectively avoiding data leakage and external attacks, enabling the data ferry process to quickly adapt to various complex data transmission scenarios, and improving the data ferry efficiency.

[0023] The above description is only an overview of the technical solution of the present application. In order to be able to understand the technical means of the present application more clearly, it can be implemented according to the content of the specification. And in order to make the above and other purposes, features, and advantages of the present application more obvious and understandable, the specific embodiments of the present application are specifically exemplified below. Brief Description of the Drawings

[0024] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The schematic embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation to the present application. In the drawings: Figure 1 is a schematic flowchart of a data ferry method in an embodiment of the present application; Figure 2 is Figure 1 a schematic flowchart of a specific implementation manner of step 102 in Figure 3 is a schematic flowchart of a data ferry method in another embodiment of the present application; Figure 4 is Figure 1 a schematic flowchart of a specific implementation manner of step 103 in Figure 5 is a schematic structural diagram of a data ferry apparatus in an embodiment of the present application; Figure 6 It is a schematic diagram of the device structure of a computer device provided by an embodiment of the present invention. Detailed implementation manners

[0025] Now, the content of the present invention will be described with reference to several exemplary embodiments. It should be understood that the description of these embodiments is only for enabling those of ordinary skill in the art to better understand and thus implement the content of the present invention, rather than implying any limitation to the scope of the present invention.

[0026] As used herein, the term "comprising" and its variants are to be construed as open-ended terms meaning "including but not limited to". The term "based on" is to be construed as "at least partially based on". The term "one embodiment" and "an embodiment" are to be construed as "at least one embodiment". The term "another embodiment" is to be construed as "at least one other embodiment".

[0027] In the related art, the data ferry process can perform data transmission between networks or systems with different security levels by manually operating physical storage media. This process mainly uses physical isolation to avoid network attacks and is applicable to low-frequency and low-risk scenarios. For example, manually copy data between physically isolated networks through storage devices such as USB flash drives and external hard drives. However, the method of manually ferrying physical storage media relies on manual operations and cannot respond to sudden high-frequency data transmission requirements, resulting in low data ferry efficiency.

[0028] To solve this problem, this embodiment provides a data ferry method, as Figure 1 shown, including the following steps: 101. Pre-construct the network topology structure for data ferrying.

[0029] Among them, the network topology structure includes a network domain set and a ferry network set. The network domain set includes at least two network domains that satisfy the isolation relationship. This network domain can be an intranet domain, that is, a private network with a relatively high security level built within an enterprise or organization, usually physically or logically isolated from the external public network. This network domain can also be an extranet domain, that is, a non-trusted network directly connected to the public network, facing security threats from the outside. Correspondingly, the network domain set can be composed of at least two intranet domains, can also be composed of at least two extranet domains, and can also be composed of at least one intranet domain and at least one extranet domain.

[0030] The above network domain set can be represented as , where is any network domain, any and satisfy the isolation relationship, that is, there is no direct connection between network domains.

[0031] Among them, the ferry network set includes at least one ferry network, and one ferry network is conductive to at least two network domains. The ferry network can be a ferry network with unidirectional data flow, that is, only allowing the data in the first network domain to flow from the ferry network to the second network domain, while the second network cannot flow from the ferry network to the first network domain. The ferry network can also be a ferry network with bidirectional data flow, that is, allowing the data in the first network domain to flow from the ferry network to the second network domain, and at the same time allowing the second network to flow from the ferry network to the first network domain. Correspondingly, the ferry network set can be composed of at least one unidirectional data flow ferry network and / or at least one bidirectional data flow ferry network.

[0032] The above ferry network set can be expressed as Among them, is any ferry network, and one ferry network is connected to at least two network domains, so that the ferry network is conductive to at least two network domains.

[0033] It can be understood that at least two network domains that satisfy the isolation relationship cannot be directly connected and need to be relayed through a ferry network. For example, the ferry network set includes ferry network M, the network domain set includes network domains D1 and D2, and network domain D1 cannot be directly connected to network domain D2. Instead, ferry network M is used as an intermediate bridge to connect network domain D1 and network D2 to the ferry network. At this time, ferry network M is connected to network domains D1 and D2 respectively.

[0034] In this example, the network topology of data ferrying isolates different network domains and uses the ferry network to achieve secure data transmission between different network domains, which is applicable to scenarios with extremely high requirements for data security and isolation. For example, scenarios where strict physical isolation is required between classified networks and public networks, and also for example, scenarios where controlled data exchange is required between government affairs networks with different security levels.

[0035] 102. On the basis of the above network topology, define a ferry state machine.

[0036] Among them, the ferry state machine is a state model that describes the data transmission of the ferry network between at least two network domains. Through the ferry state model, the change state of the data transmission of the ferry network between different network domains can be controlled to ensure that the data flow complies with the security policy. Here, the ferry state machine includes at least one ferry state and state transition logic. Each ferry state corresponds to a network connection combination, and the network connection state is the connection state combination formed by the ferry network and at least two network domains. The connection state can be on or off. For example, the ferry network is in a disconnected state with at least two network domains, the ferry network is in a conductive state with some of the at least two network domains, and the remaining network domains are in a disconnected state, or the ferry network is in a conductive state with at least two network domains.

[0037] In this embodiment, the state transition logic is equivalent to the trigger events predefined for triggering the ferry state transition and the constraint conditions for driving the ferry state transition. Generally speaking, the ferry state transition needs to be based on the data transmission requirements and security policies.

[0038] On the one hand, the ferry state transition needs to meet the trigger event, which can be a data request. For example, network domain A initiates a request to transfer a file to network domain B. The trigger event can also be a security authentication. For example, network domain B completes the identity verification required by network domain A. The trigger event can also be a policy compliance check. For example, whether the data content complies with the transmission policy.

[0039] On the other hand, ferry state transitions need to meet certain constraints. These constraints can be data transmission direction constraints. Here, the direction constraint can be unidirectional transfer. For example, the transition of the ferry state controls the unidirectional transfer of data between network domain A and network domain B. That is, ferry state 1 (the ferry network is connected to network domain A) can be switched to ferry state 2 (the ferry network is connected to network domain B), and ferry state 2 cannot be directly switched to ferry state 1. It needs to go through an intermediate ferry state or an independent ferry network. This direction constraint can also be bidirectional transfer. For example, the transition of the ferry state controls the mutual transfer of data between network domain A and network domain B. That is, ferry state 1 (the ferry network is connected to network domain A) can be switched to ferry state 2 (the ferry network is connected to network domain B), and ferry state 2 can also be switched to ferry state 1. This direction constraint can also be multi-domain cascaded transfer. For example, the transition of the ferry state controls the sequential transfer of data among network domain A, network domain B, and network domain C. That is, ferry state 1 (the ferry network is connected to network domain A) can be switched to ferry state 2 (the ferry network is connected to network domain B), and ferry state 2 can be switched to ferry state 3 (the ferry network is connected to network domain C). These constraints can also be data security constraints. Here, the data security constraint can be that the ferry state transition needs to meet the minimum connection principle. For example, in the current ferry state, only network domain A and the ferry network are allowed to be connected, and the ferry network and network domain B are allowed to be connected, and all other ferry networks and network domains are disconnected. In this way, the current ferry state can only achieve data transmission between network domain A and network domain B. Here, the data security constraint can also be that the ferry state transition needs to verify the user identity or device permissions. For example, only administrators or authorized devices can switch from ferry state 1 to ferry state 2. Here, the data security constraint can also be that the ferry state transition needs data compliance constraints. For example, if ferry state 1 allows file transmission, the file type needs to be verified, and data that violates the format, content, or sensitivity level is prohibited from being transmitted. Further, in order to better control the sequence of the state transition process, these constraints can also be sequence constraints for state transitions. This sequence constraint can be that when the ferry state is transitioning, all network domains connected to the ferry network in the source ferry state must be disconnected first, and then new connections in the target ferry state are established. For example, if ferry state 1 has the ferry network connected to network domain A and network domain B respectively, and the data transmission link is network domain A - ferry network - network domain B, and ferry state 2 has the ferry network connected to network domain A and network domain B respectively, and the data link is network domain B - ferry network - network domain A, then when switching from ferry state 1 to ferry state 2, although the ferry network is connected to network domain A and network domain B respectively, it is necessary to first disconnect network domain A and network domain B connected to the ferry network in the source ferry state 1, and then establish the connection between the ferry network and network domain A and network domain B respectively in ferry state 2.

[0040] 103. Change the connection state combination formed by the ferry network and at least two network domains according to the state transition logic, so as to control the ferry network to perform data transmission between the at least two network domains.

[0041] It can be understood that the state transition logic can control the switching of the ferry state, and can change the connection state combination formed by the ferry network and at least two network domains. For the ferry network and network domain with the connection state being the conducting state, data transmission in at least one direction can be realized, and for the ferry network and network domain in the disconnected state, data transmission cannot be realized.

[0042] Taking two ferry state transition processes as an example for illustration, the network topology of data ferrying includes a ferry network, network domain 1 and network domain 2, and the state transition logic is: the ferry state S0 transitions to the ferry state S1. Specifically, during the state transition process, the ferry state S0 is that the ferry network is in the disconnected state with both network domain 1 and network domain 2, and the ferry state S1 is that the ferry network is in the conducting state with network domain A. The trigger event for the state transition is a data transmission request, and the constraint condition is that the data transmission policy has been authorized. When network domain 1 and / or network domain 2 applies for data transmission, it triggers the switching of the ferry state S0 to the ferry state S1, and then judges whether both network domain 1 and network domain 2 pass the identity verification according to the constraint condition. If the constraint condition is met, the ferry state S0 is driven to switch to the ferry state S1, and the network domain A is controlled to transmit data to the ferry network.

[0043] Taking four ferry-like transfer processes as an example for illustration, the network topology of data ferrying also includes a ferrying network, as well as network domain 1 and network domain 2. The state transfer logic is as follows: the ferry state S0 transfers to the ferry state S1, the ferry state S1 transfers to the ferry state S2, the ferry state S2 transfers to the ferry state S3, and the ferry state S3 transfers to the ferry state S4. Specifically, during the state transfer process, the ferry state S0 is in a conducting state between the ferrying network and network domain 1, and the ferrying network and network domain 2 are in a disconnected state. The trigger event for state transfer is the transmission end response, and the constraint condition is to maintain the conducting duration t1. When network domain 1 initiates the transmission end response and the conducting duration between the ferrying network and network domain 1 reaches t1, it drives the ferry state S0 to switch to the ferry state S1. The ferry state S1 is in a disconnected state between the ferrying network and both network domain 1 and network domain 2. The trigger event for state transfer is the data transmission request, and the constraint condition is to maintain the disconnected duration t2. When network domain 2 initiates the data transmission request and the disconnected duration reaches t2, it drives the ferry state S1 to switch to the ferry state S2. The ferry state S2 is in a disconnected state between the ferrying network and network domain 1 and a conducting state between the ferrying network and network domain 2. The trigger event for state transfer is the transmission end response, and the constraint condition is to maintain the conducting duration t3. When network domain 2 initiates the transmission end response and the conducting duration between the ferrying network and network domain 2 reaches t3, it drives the ferry state S2 to switch to the ferry state S3. The ferry state S3 is in a disconnected state between the ferrying network and both network domain 1 and network domain 2. The trigger event for state transfer is the data transmission request, and the constraint condition is to maintain the disconnected duration t4. When any network domain initiates the data transmission request and the disconnected duration reaches t4, it drives the ferry state S3 to switch to the ferry state S4. For the ferry state S4, if the initiating data transmission request is from network domain 1 and the maintained disconnected duration in the constraint condition is the same as t1, it means that the ferry state S4 is equivalent to the ferry state S0. At this time, the ferry state machine is equivalent to a sequential cyclic state transfer formed by the ferry states S0 - S2 - S2 - S3. Here, the order of state transfer can be flexibly set according to business requirements. Correspondingly, in the ferry states S1 and S3, the ferrying network is only connected to one network domain, ensuring that network domain A and network domain B can achieve data transmission while satisfying the isolation relationship. Due to the setting of the constraint time during the state transfer process, the connection state between the ferrying network and different network domains can have timeliness, so that the data transmission and data disconnection between the ferrying network and different network domains are controllable, greatly improving the efficiency of data ferrying.

[0044] The data ferry method provided by the embodiments of the present application, compared with the current method of realizing data ferry by manually operating physical storage media, the present application pre-constructs a network topology structure for data ferry. The network topology structure includes a network domain set and a ferry network set. The network domain set includes at least two network domains that satisfy an isolation relationship. The ferry network set includes at least one ferry network. One ferry network has conductivity with at least two network domains; on the basis of the network topology structure, a ferry state machine is defined. The ferry state machine is a state model that describes the data transmission of the ferry network between at least two network domains. The ferry state machine includes at least one ferry state and state transition logic. Each ferry state corresponds to a network connection combination. The network connection state is the connection state combination formed by the ferry network and at least two network domains; according to the state transition logic, the connection state combination formed by the ferry network and at least two network domains is changed to control the data transmission of the ferry network between the at least two network domains. The entire process splits the data ferry process into flexibly defined ferry states and state transitions through the ferry state machine. In this way, only the data that meets the state transition logic can be transmitted, which can efficiently control the data transmission between different network domains while meeting the isolation requirements, effectively avoiding data leakage and external attacks, enabling the data ferry process to quickly adapt to various complex data transmission scenarios, and improving the data ferry efficiency.

[0045] In an actual application scenario, a network domain set and a ferry network set are defined in the network topology structure. Among them, the network domain set can be expressed as Γ = , where . Let the isolation relationship be R ⊆ Γ × Γ. At least two network domains , satisfy: ∀ , ∈ Γ, ( , ) ∈ R ⇔ and have an isolation relationship. The ferry network set Δ = . Each ferry network has a connection port set . Each ferry network also has an isolation control matrix . Among them, = 1, the network domain and the network domain are in a conductive state, = 0, the network domain and the network domain are in a disconnected state.

[0046] In an actual application scenario, the ferry state machine is essentially a cross-network transmission control model based on the theory of finite state automata. The core lies in the closed-loop formed by the ferry state definition and the state transition logic, which transforms the data ferry process from an unordered set of operations into a controllable and ordered model to meet the security and compliance requirements of data transmission in a network isolation environment. Specifically, as Figure 2 shown, Figure 1 step 102 in the middle includes the following steps: 201. Based on the network topology structure, set at least one ferry state according to the connection state combinations formed by the ferry network and at least two network domains.

[0047] 202. Based on the network topology structure, set the state transition logic according to the events that trigger state transitions and the constraint conditions that drive state transitions during the data ferry process.

[0048] 203. Define the ferry state machine according to the at least one ferry state and the state transition logic, so that the ferry state machine controls the sequential operation of the at least one ferry state during the data ferry process according to the state transition logic.

[0049] In this embodiment, the connection state combinations include a conducting state and a disconnecting state. The conducting state means that the ferry network is connected to the network domain, and the disconnecting state means that the ferry network is not connected to the network domain. Here, the ferry network is only conducting with one network domain within one ferry state. For example, for a connection state combination formed by a ferry network and two network domains, it includes: {the ferry network is disconnected from network domain 1, the ferry network is disconnected from network domain 2}, {the ferry network is conducting with network domain 1, the ferry network is disconnected from network domain 2}, {the ferry network is disconnected from network domain 1, the ferry network is conducting with network domain 2}; for a connection state combination formed by a ferry network and three network domains, it includes: {the ferry network is disconnected from network domain 1, the ferry network is disconnected from network domain 2, the ferry network is disconnected from network domain 3}, {the ferry network is conducting with network domain 1, the ferry network is disconnected from network domain 2, the ferry network is disconnected from network domain 3}, {the ferry network is disconnected from network domain 1, the ferry network is conducting with network domain 2, the ferry network is disconnected from network domain 3}, {the ferry network is disconnected from network domain 1, the ferry network is disconnected from network domain 2, the ferry network is conducting with network domain 3}.

[0050] Specifically, according to the connection state combinations formed by the ferry network and at least two network domains, valid connection state combinations that meet the connection state constraints can be selected. The connection state constraints include network domain isolation constraints and data flow constraints. Then, using the pre-defined logical correspondence, the connection states in the valid connection state combinations are converted into at least one ferry state. Here, the network domain isolation constraints can be set according to the network domain scenario, including grouping isolation constraints. For example, the network domain is divided into a sending group and a receiving group, and the network domains within each group are only allowed to conduct one-way conduction with the ferry network. It also includes cascade isolation. For example, multiple ferry networks are connected in series, and each ferry network is only connected to two network domains to avoid direct interaction between multiple network domains. Here, the data flow constraints can be set for different ferry scenarios. In the case of a one-way ferry scenario, the valid connection state includes data transmission from network domain A to network domain B, and does not include data transmission from network domain B to network domain A. In the case of a two-way ferry scenario, the valid connection state includes data transmission from network domain A to network domain B and data transmission from network domain B to network domain A.

[0051] In this embodiment, the state transition logic triggers the intention of state transition through events and performs state transition when at least one constraint condition is met. The events include external events and / or internal events. Here, the internal events are triggered by users or external systems and can be data transmission requests initiated by network domain A, such as clicking a button, interface call, etc., or can be network domain A's confirmation of receiving data, such as button confirmation, automatic service startup, etc. The internal events are automatically triggered by the system and can be data reception completion, such as the cache reaching the set threshold, file transfer completion, etc., or can be triggered by a scheduled task, such as synchronizing data at 8 o'clock every day, or can be verification failure, such as hash value mismatch, virus scan finding an anomaly, etc. It should be noted that if multiple events are combined to trigger, the ferry state transition can be achieved through logical AND for state transition. For example, the state transition needs to meet both the external request and the scheduled trigger events. It can also be achieved through logical OR for state transition. For example, the state transition needs to meet one of the external request or the scheduled trigger events. The constraint conditions include at least one of time constraint conditions, sequence constraint conditions, and verification constraint conditions. Here, the time constraint can be for constraints such as transmission time, state time, etc. The sequence constraint can be the sequence constraint for the ferry state transition. The verification constraint can be the verification of data format, data integrity, etc. It should be noted that if there are conflicts in the constraint conditions, the priority of the constraint conditions can be defined. For example, the time constraint condition has a higher priority than the sequence constraint condition. Even if the data meets the sequence constraint condition, if it does not meet the time constraint condition, the state transition still cannot be executed.

[0052] In this way, the state transition logic can drive state migration through events, filter illegal operations with constraint conditions, and transform the complex data ferry process of cross-network transmission into a verifiable finite state transition chain, which not only meets the business flexibility but also ensures the security and credibility of the data ferry process through multiple constraints.

[0053] Specifically, the events that trigger state transitions and the constraint conditions that drive state transitions during the data ferry process can be combined to obtain a state transition matrix. Each state is defined with allowed triggering events through the state transition matrix, and constraint conditions are added to each event. Then, the state transition logic is set according to the state transition matrix. Here, the state transition matrix can be represented in the form of a triple of the ferry state set, event set, and constraint condition set. Exemplarily, the state transition matrix can be represented in the following form:

[0054] In an actual application scenario, the ferry state machine can be represented as M = , where is the ferry state set, and each ferry state corresponds to a specific connection configuration , is the event set, including timing events , data arrival events , verification result events v ∈ {success, failure}, etc. Among them, the event is the state transition logic. Here, represents the null event. At this time, the state can transition without triggering an event, satisfying such that the ferry state transitions from the ferry state to the ferry state under the drive of the triggering event . Among them, is the initial ferry state, and F S is the set of termination states. For any state transition , it is necessary to meet the isolation constraint, that is, any two network domains satisfy the isolation relationship. It is also necessary to meet the time constraint, that is, the time maintained by the switched ferry state needs to be greater than 0. It is also necessary to meet the data integrity constraint, that is, data integrity verification needs to be performed during the state transition process. It is also necessary to meet the order constraint, that is, the order of the ferry states during the state transition process is predetermined.

[0055] In an actual application scenario, in order to accurately control the state combination of the connection between the ferry network and different network domains during the data ferry process. Further, as Figure 3 shown, before step 103, the method further includes the following steps: 301. Obtain the first connection status combination of the data ferry network and at least two network domains in the current ferry state and the second connection status combination in the target ferry state.

[0056] Correspondingly, in step 103, according to the state transition logic, transfer the connection status combination formed by the ferry network and at least two network domains from the first connection status combination to the second connection status combination, so as to control the data transmission of the ferry network between the at least two network domains.

[0057] In this embodiment, the first connection status combination in the current ferry state may be that the ferry network is in a conducting state with network domain 1 and the ferry network is in a disconnected state with network domain 2. At this time, the ferry network receives data from network domain 1. The second connection status combination in the target ferry state may be that the ferry network is in a disconnected state with network domain 1 and the ferry network is in a conducting state with network domain 2. At this time, the ferry network sends the verified data received from network domain 1 to network domain 2. In this way, the data transmission of the ferry network between network domain 1 and network domain 2 can be controlled.

[0058] It can be understood that the trigger condition for the above state transition process can be manual trigger. For example, an administrator issues a switching instruction through the console. It can also be automatic trigger. For example, it is triggered after data reception is completed, after security verification is passed, after a set time window is reached, etc.

[0059] Specifically, the data ferry process can be described in combination with the event trigger mechanism, constraint conditions, and the execution process of state transition. The current ferry state can be monitored according to the state transition logic. If the event that triggers the state transition occurs in the current ferry state, then after verifying that the state transition process meets the constraint conditions, execute the state transition; during the state transition process, transfer the connection status combination formed by the ferry network and at least two network domains from the first connection status combination to the second connection status combination, so as to control the data transmission of the ferry network between the at least two network domains.

[0060] In an actual application scenario, considering that the change of the ferry state during the data ferry process will change the data flow direction, by obtaining the data flow direction, the data can be strictly restricted to flow unidirectionally or bidirectionally from the source current network domain to the target network domain only, preventing the cross-domain transmission of unverified data and avoiding the leakage of sensitive information. Specifically, as Figure 4 shown, Figure 1 step 103 in 401. During the process of changing the connection status combination formed by the ferry network and at least two network domains according to the state transition logic, obtain the data flow direction corresponding to the ferry network and the network domain after the state transition.

[0061] 402. Control the ferry network to transfer data between the at least two network domains according to the data flow direction.

[0062] In this embodiment, the state transition process will change the data flow direction between the ferry network and the at least two network domains. The data flow direction corresponding to the entire ferry state machine is usually preset before data transfer. For example, if network domain A needs to transfer data to network B, in the data ferry scenario using one ferry network, the overall data flow direction corresponding to the ferry state is network domain A → ferry network → network domain B. If the current ferry state corresponds to a data flow direction, for another example, if network domain A needs to transfer data to network B and network domain C, in the data ferry scenario using one ferry network, the overall data flow direction corresponding to the ferry state includes network domain A → ferry network → network domain B, and network domain A → ferry network → network domain C. Correspondingly, the data flow direction corresponding to each ferry state in the ferry state machine, as a part of the overall data flow direction, is also preset. Of course, the flow direction can also be changed according to the actual application scenario. For example, if the current data flow direction of the ferry state is network domain A → ferry network, and the target ferry state is ferry network → network domain B, correspondingly, control the ferry network to transfer the data of network domain A to network domain B according to the data flow direction.

[0063] Further, as Figure 1-4 a specific implementation of the method, an embodiment of the present application provides a data ferry device, as Figure 5 shown. The device includes: a construction unit 51, a definition unit 52, and a control unit 53.

[0064] The construction unit 51 is used to pre-construct the network topology structure of data ferrying. The network topology structure includes a network domain set and a ferry network set. The network domain set includes at least two network domains that satisfy the isolation relationship. The ferry network set includes at least one ferry network. One ferry network has conductivity with at least two network domains. The definition unit 52 is used to define a ferry state machine on the basis of the network topology structure. The ferry state machine is a state model describing the data transfer of the ferry network between at least two network domains. The ferry state machine includes at least one ferry state and state transition logic. Each ferry state corresponds to a network connection combination. The network connection state is a connection state combination formed by the ferry network and at least two network domains. The control unit 53 is used to change the connection state combination formed by the ferry network and at least two network domains according to the state transition logic, so as to control the ferry network to transfer data between the at least two network domains.

[0065] The data ferry device provided by the embodiment of the present application, compared with the current method of realizing data ferry by manually operating physical storage media, constructs a network topology structure for data ferry in advance. The network topology structure includes a network domain set and a ferry network set. The network domain set includes at least two network domains that satisfy the isolation relationship. The ferry network set includes at least one ferry network. One ferry network has conductivity with at least two network domains. On the basis of the network topology structure, a ferry state machine is defined. The ferry state machine is a state model that describes the data transmission of the ferry network between at least two network domains. The ferry state machine includes at least one ferry state and state transition logic. Each ferry state corresponds to a network connection combination. The network connection state is the connection state combination formed by the ferry network and at least two network domains. According to the state transition logic, the connection state combination formed by the ferry network and at least two network domains is changed to control the data transmission of the ferry network between the at least two network domains. In the whole process, the data ferry process is split into flexibly defined ferry states and state transitions through the ferry state machine. Only the data that meets the state transition logic can be transmitted. It can efficiently control the data transmission between different network domains while meeting the isolation requirements, effectively avoid data leakage and external attacks, and make the data ferry process quickly adapt to various complex data transmission scenarios, improving the data ferry efficiency.

[0066] In an actual application scenario, the defining unit includes: A first setting module, configured to set at least one ferry state on the basis of the network topology structure according to the connection state combination formed by the ferry network and at least two network domains. The connection state combination includes a conduction state and a disconnection state. The conduction state means that the ferry network is connected to the network domain, and the disconnection state means that the ferry network is not connected to the network domain; A second setting module, configured to set state transition logic on the basis of the network topology structure according to the events that trigger state transitions and the constraint conditions that drive state transitions during the data ferry process. The state transition logic triggers the intention of state transition through events and performs state transition when at least one constraint condition is met. The events include external events and / or internal events. The constraint conditions include at least one of a time constraint condition, a sequence constraint condition, and a verification constraint condition; A defining module, configured to define a ferry state machine according to the at least one ferry state and the state transition logic, so that the ferry state machine controls the sequential operation of the at least one ferry state during the data ferry process according to the state transition logic.

[0067] In an actual application scenario, the first setting module is specifically configured to: Select a valid connection state combination that meets the connection state constraints according to the connection state combination formed by the ferry network and at least two network domains, where the connection state constraints include network domain isolation constraints and data flow constraints; Use a pre-defined logical correspondence to convert the connection states in the valid connection state combination into at least one ferry state.

[0068] In an actual application scenario, the second setting module is specifically configured to: Select a valid connection state combination that meets the connection state constraints according to the connection state combination formed by the ferry network and at least two network domains, where the connection state constraints include network domain isolation constraints and data flow constraints; Use a pre-defined logical correspondence to convert the connection states in the valid connection state combination into at least one ferry state.

[0069] In an actual application scenario, the device further includes: An acquisition unit, configured to obtain a first connection state combination of the data ferry network and at least two network domains in the current ferry state and a second connection state combination in the target ferry state before changing the connection state combination formed by the ferry network and at least two network domains according to the state transition logic to control data transmission of the ferry network between the at least two network domains; Correspondingly, the control unit is specifically configured to transfer the connection state combination formed by the ferry network and at least two network domains from the first connection state combination to the second connection state combination according to the state transition logic to control data transmission of the ferry network between the at least two network domains.

[0070] In an actual application scenario, the control unit is specifically further configured to: Monitor the current ferry state according to the state transition logic. If an event that triggers a state transition occurs in the current ferry state, perform a state transition after verifying that the state transition process meets the constraint conditions; During the state transition, transfer the connection state combination formed by the ferry network and at least two network domains from the first connection state combination to the second connection state combination to control data transmission of the ferry network between the at least two network domains.

[0071] In an actual application scenario, the control unit is specifically further configured to: Obtain the data flow direction corresponding to the ferry network and the network domain after the state transition during the process of changing the connection state combination formed by the ferry network and at least two network domains according to the state transition logic; Control the ferry network to transfer data between the at least two network domains according to the data flow direction.

[0072] It should be noted that for other corresponding descriptions of each functional unit involved in the data ferry device provided in this embodiment, reference can be made to Figure 1 - Figure 4 the corresponding description in, which will not be elaborated here.

[0073] Furthermore, as Figure 1-4 a specific implementation of the method, an embodiment of the present application provides a data ferry system, including a ferry network, at least two network domains, and a ferry state machine; the ferry state machine is used to control the at least two network domains and the ferry system to execute the data ferry method as described above Figure 1 - Figure 4 shown.

[0074] Based on the method as described above Figure 1 - Figure 4 shown, correspondingly, an embodiment of the present application also provides a storage medium, on which a computer program is stored, and when the program is executed by a processor, it implements the data ferry method as described above Figure 1 - Figure 4 shown.

[0075] Based on such an understanding, the technical solution of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), including several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in various implementation scenarios of the present application.

[0076] Based on the method as described above Figure 1 - Figure 4 shown, and Figure 5 the virtual device embodiment shown, in order to achieve the above object, an embodiment of the present application also provides an entity device for the data ferry method, which can specifically be a computer, a smart phone, a tablet computer, a smart watch, a server, or a network device, etc. The entity device includes a storage medium and a processor; the storage medium is used to store a computer program; the processor is used to execute the computer program to implement the data ferry method as described above Figure 1 - Figure 4 shown.

[0077] Optionally, the entity device may further include a user interface, a network interface, a camera, a radio frequency (RF) circuit, sensors, an audio circuit, a WI-FI module, etc. The user interface may include a display screen (Display), an input unit such as a keyboard (Keyboard), etc., and optionally the user interface may further include a USB interface, a card reader interface, etc. The network interface may optionally include a standard wired interface, a wireless interface (such as a WI-FI interface), etc.

[0078] In an exemplary embodiment, see Figure 6 The physical device includes a communication bus, a processor, a memory and a communication interface, and may also include an input / output interface and a display device, wherein each functional unit can communicate with each other through the bus. The memory stores a computer program, and the processor is used to execute the program stored in the memory and execute the data ferry method in the above embodiment.

[0079] Those skilled in the art will appreciate that the physical device structure for data ferrying provided in this embodiment does not constitute a limitation on the physical device, and may include more or fewer components, or a combination of certain components, or different arrangements of components.

[0080] The storage medium may also include an operating system and a network communication module. The operating system is a program that manages the hardware and software resources of the physical device for the data ferry, and supports the operation of the information processing program and other software and / or programs. The network communication module is used to realize the communication between the components inside the storage medium, and the communication with other hardware and software in the information processing physical device.

[0081] Through the description of the above implementation methods, those skilled in the art can clearly understand that the present application can be implemented by means of software plus a necessary general hardware platform, or by hardware. By applying the technical solution of the present application, compared with the current existing methods, the present application splits the data ferrying process into flexibly defined ferrying states and state transfers through a ferrying state machine, so that only data that meets the state transfer logic can be transmitted, and data transmission between different network domains can be efficiently controlled while meeting isolation requirements, effectively avoiding data leakage and external attacks, so that the data ferrying process can quickly adapt to various complex data transmission scenarios and improve data ferrying efficiency.

[0082] Those skilled in the art will appreciate that the accompanying drawings are only schematic diagrams of a preferred implementation scenario, and the modules or processes in the accompanying drawings are not necessarily necessary for implementing the present application. Those skilled in the art will appreciate that the modules in the devices in the implementation scenario can be distributed in the devices of the implementation scenario according to the description of the implementation scenario, or can be changed accordingly and located in one or more devices different from the present implementation scenario. The modules of the above-mentioned implementation scenario can be combined into one module, or can be further split into multiple submodules.

[0083] The above serial numbers of this application are only for description and do not represent the advantages and disadvantages of the implementation scenarios. The above disclosure is only a few specific implementation scenarios of this application, but this application is not limited to them, and any changes that can be thought of by technicians in this field should fall within the scope of protection of this application.

Claims

1. A data ferry method, characterized in that, Including: Pre-construct a network topology for data ferry, where the network topology includes a set of network domains and a set of ferry networks. The set of network domains includes at least two network domains that satisfy an isolation relationship, and the set of ferry networks includes at least one ferry network. One ferry network has conductivity with at least two network domains; Based on the network topology, define a ferry state machine, which is a state model describing data transfer of the ferry network between at least two network domains. The ferry state machine includes at least one ferry state and state transition logic. Each ferry state corresponds to a network connection combination, and the network connection state is a connection state combination formed by the ferry network and at least two network domains; According to the state transition logic, change the connection state combination formed by the ferry network and at least two network domains to control data transfer of the ferry network between the at least two network domains.

2. The method according to claim 1, wherein The step of, based on the network topology, defining a ferry state machine includes: Based on the network topology, set at least one ferry state according to the connection state combination formed by the ferry network and at least two network domains. The connection state combination includes a conduction state and a disconnection state. The conduction state means that the ferry network is connected to the network domain, and the disconnection state means that the ferry network is not connected to the network domain; Based on the network topology, set state transition logic according to the events that trigger state transition and the constraint conditions that drive state transition during the data ferry process. The state transition logic triggers the intention of state transition through events and performs state transition when at least one constraint condition is satisfied. The events include external events and / or internal events, and the constraint conditions include at least one of time constraint conditions, sequence constraint conditions, and verification constraint conditions; According to the at least one ferry state and the state transition logic, define a ferry state machine so that the ferry state machine controls the sequential operation of the at least one ferry state during the data ferry process according to the state transition logic.

3. The method according to claim 2, wherein The step of setting at least one ferry state according to the connection state combination formed by the ferry network and at least two network domains includes: According to the connection state combination formed by the ferry network and at least two network domains, select valid connection state combinations that satisfy connection state constraints. The connection state constraints include network domain isolation constraints and data flow constraints; Using a pre-defined logical correspondence relationship, convert the connection states in the valid connection state combinations into at least one ferry state.

4. The method according to claim 2, characterized in that, The step of setting state transition logic according to the events that trigger state transition and the constraint conditions that drive state transition during the data ferry process includes Combine the events that trigger state transition and the constraint conditions that drive state transition during the data ferry process to obtain a state transition matrix, so as to define the events allowed to trigger for each state through the state transition matrix and add constraint conditions to each event; According to the state transition matrix, set state transition logic.

5. The method according to any one of claims 1 to 4, characterized in that Before changing the connection state combination formed by the ferry network and at least two network domains according to the state transition logic to control data transmission of the ferry network between the at least two network domains, the method further includes: Obtaining a first connection state combination of the data ferry network and at least two network domains in the current ferry state and a second connection state combination in the target ferry state; Correspondingly, transferring the connection state combination formed by the ferry network and at least two network domains from the first connection state combination to the second connection state combination according to the state transition logic to control data transmission of the ferry network between the at least two network domains; The transferring the connection state combination formed by the ferry network and at least two network domains from the first connection state combination to the second connection state combination according to the state transition logic to control data transmission of the ferry network between the at least two network domains includes: Monitoring the current ferry state according to the state transition logic, and if an event triggering state transition occurs in the current ferry state, performing state transition after verifying that the state transition process meets the constraint conditions; During the state transition process, transferring the connection state combination formed by the ferry network and at least two network domains from the first connection state combination to the second connection state combination to control data transmission of the ferry network between the at least two network domains.

6. The method according to any one of claims 1 to 4, characterized in that The changing the connection state combination formed by the ferry network and at least two network domains according to the state transition logic to control data transmission of the ferry network between the at least two network domains includes: During the process of changing the connection state combination formed by the ferry network and at least two network domains according to the state transition logic, obtaining the data flow direction corresponding to the ferry network and the network domains after the state transition; Controlling data transmission of the ferry network between the at least two network domains according to the data flow direction.

7. A data ferry device, characterized in that, Including: A construction unit configured to pre-construct a network topology structure for data ferrying, the network topology structure including a network domain set and a ferry network set, the network domain set including at least two network domains satisfying an isolation relationship, and the ferry network set including at least one ferry network, and one ferry network has conductivity with at least two network domains; A definition unit configured to define a ferry state machine on the basis of the network topology structure, the ferry state machine being a state model describing data transmission of the ferry network between at least two network domains, the ferry state machine including at least one ferry state and a state transition logic, and each ferry state corresponding to a network connection combination, and the network connection state being a connection state combination formed by the ferry network and at least two network domains; A control unit configured to change the connection state combination formed by the ferry network and at least two network domains according to the state transition logic to control data transmission of the ferry network between the at least two network domains.

8. A data ferry system, characterized in that, It includes a ferry network, at least two network domains, and a ferry state machine; the ferry state machine is used to control the at least two network domains and the ferry system to execute the data ferry method described in any one of claims 1-6 above.

9. A computer device, comprising a memory and a processor, the memory storing a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the data ferry method described in any one of claims 1 to 6.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the steps of the data ferry method described in any one of claims 1 to 6.

Images