Server-based data synchronization method and system and storage medium

Abstract

The invention discloses a server-based data synchronization method and system and a storage medium. The method comprises the following steps: each group of quantum security privacy computers in a quantum security privacy computer cluster transmits generated encrypted data to a switch through respective connected terminals; the switch sends the encrypted data to a server cluster, a server in the server cluster receives the encrypted data and forwards the encrypted data to a main server network element, the main server network element decrypts the encrypted data and forwards the decrypted data to the server, and the server forwards the decrypted data to a business server; and the main server network element also classifies and stores the decrypted data, and synchronizes the data to the hot standby server network element. According to the method, the data are classified firstly, and then different modes are selected according to the types of the data to synchronize the data, so that the workload of direct synchronization of all the data is reduced; and the data and the application part are decoupled and backed up respectively, and the data and the application part do not influence each other, so that the data backup efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the field of communication technologies, and in particular to a server-based data synchronization method, system and storage medium. Background Art

[0002] At present, all devices passing through the server are required to have flexible hot standby capabilities, that is, when an abnormality occurs in one device and data communication cannot be achieved, the other device can "seamlessly" transfer the processing of subsequent data.

[0003] From the existing structure, to achieve seamless "master-slave" connection, the interaction between the terminal and the server needs to adopt a stateless connection method. If the interaction between the terminal and the server uses a stateful connection method as the communication basis, the stateful connection will inevitably affect the switching between server devices, because stateful link switching will inevitably bring about link reconnection operations. Therefore, the interaction between the terminal and the server needs to adopt a stateless connection method.

[0004] Secondly, the configuration information and stored data of the two equivalent "primary" and "standby" network elements must be as consistent as possible. If the network access codes and key files are inconsistent, the terminal will need to dynamically adapt, or even require manual intervention to change the configuration. On the one hand, the conditions and scenarios requiring dynamic adaptation are not exhaustive, which introduces uncertainty to the user experience. On the other hand, when the "standby" network element receives and processes information from the former "primary" network element after switching, if different basic information (such as the access gateway network code) is configured, it will affect the actual relay process and execution logic.

[0005] Again, it is necessary to carefully consider whether the "primary" and "standby" equivalent network elements should use completely identical carriers (including programs and data) or a separate mode (programs and data are each primary and standby respectively), because both are feasible from an implementation perspective and have their own advantages and disadvantages, which need to be comprehensively considered in the implementation plan.

[0006] At the same time, due to the need for data transmission security, a lot of data is encrypted using quantum security devices. After adding quantum security devices, it is bound to have an impact on the original terminal and server networking structure, because quantum security devices need to take over the communication data between terminals and business services and encrypt it before transmission; therefore, how to ensure the "master-slave" seamless transfer of subsequent data processing capabilities of server-side devices when adding quantum security devices is a technical problem that urgently needs to be solved. Summary of the Invention

[0007] Purpose of the Invention: The purpose of the present invention is to provide a server-based data synchronization method, system, and storage medium that address the problem of existing terminal and server networking structures being incompatible with quantum security devices, resulting in the inability of the "primary" and "standby" server devices to seamlessly transfer subsequent data. The present invention updates the network deployment and synchronizes the deployed primary and standby server network elements, ensuring that the primary and standby server network elements are in a completely equal position within the network, acting as the primary and standby for each other. This allows for seamless switching between the two network elements.

[0008] Technical solution: The present invention provides a server-based data synchronization method, comprising the following steps:

[0009] (1) Each group of quantum-safe privacy computers in the quantum-safe privacy computer cluster transmits the generated encrypted data to the switch through their respective connected terminals;

[0010] (2) The switch sends the encrypted data to the server cluster. The server in the server cluster receives the encrypted data from the switch and forwards it to the active server network element. The active server network element decrypts the encrypted data to obtain the decrypted data and then forwards it to the server. The server then forwards the decrypted data to the business service end. At the same time, the active server network element classifies and stores the decrypted data and synchronizes the data to the hot standby server network element.

[0011] Furthermore, the active server network element and the hot standby server network element inform each other of their current working status. If an abnormality occurs, the normal one will be immediately allowed to run to provide data decryption, data classification storage and data synchronization.

[0012] Furthermore, the active server network element and the hot standby server network element both include an external network machine and an internal network machine, wherein the external network machine is used for forwarding data; the internal network machine is used for decrypting encrypted data to obtain decrypted data, and is also used for classifying and storing the decrypted data and performing data synchronization.

[0013] Furthermore, the specific process of the active server network element classifying and storing the decrypted data and synchronizing the data to the hot standby server network element is as follows:

[0014] The intranet machine of the active server NE divides the decrypted data into state data and storage data by type, updates the state of the locally managed quantum secure privacy computer based on the state data, and then notifies the intranet machine of the hot standby server NE of the quantum secure privacy computer state data via a message. The intranet machine of the active server NE then stores the storage data on the local disk and sends the storage data to the intranet machine of the hot standby server NE.

[0015] When the intranet machine of the hot standby server network element receives a message, it updates the locally managed quantum security privacy computer status according to the quantum security privacy computer status data in the message; when storage-class data is received, it directly puts the storage-class data into local disk storage.

[0016] Furthermore, the status data includes heartbeat status data, access status data and link status data; the storage data includes key file data, database record data and log file data.

[0017] Furthermore, the active server network element also updates the application with the hot standby server network element. Specifically, when the active server network element detects that the local application has been updated, the updated application information is synchronized to the hot standby server network element, and the hot standby server network element also updates the application; wherein, the application update includes the increase in the number of applications, deletion and upgrade of the application.

[0018] The present invention also includes a system for the above-mentioned server-based data synchronization method, which includes a quantum-safe privacy computer cluster, terminals, switches, a server cluster, and a business service end, wherein each group of quantum-safe privacy computers in the quantum-safe privacy computer cluster is connected to a group of terminals, each group of terminals is connected to a switch, and the switches, server cluster, and business service end are connected in sequence;

[0019] The server cluster includes a server, an active server network element and a hot standby server network element. The server is connected to a switch, a service server and an active server network element respectively. The active server network element is connected to a hot standby server network element. The server is also connected to a hot standby server network element.

[0020] The present invention further includes a computer-readable storage medium storing a computer program, wherein the computer program, when executed by a processor, implements the server-based data synchronization method according to any one of the above claims.

[0021] The beneficial effects of the present invention are as follows: the present invention reduces the workload of direct synchronization of all data by first classifying the data and then selecting different methods to synchronize the data according to the type of data; and decouples the data and the application parts and backs them up separately, without affecting each other, thereby improving the efficiency of backing up data; at the same time, the network deployment is updated, and the deployed primary and backup server network elements are synchronized. The primary and backup server network elements are in a completely equal position in the network, and the backup of each other is also completely equal. Moreover, only the data and application parts are synchronized and backed up, and both are incremental backups, which minimizes the bandwidth congestion caused by the backup process and achieves a seamless switching effect when switching between two network elements. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 A schematic diagram of the system structure of the data synchronization method of the present invention;

[0023] Figure 2 Schematic diagram of the data synchronization method of the present invention. DETAILED DESCRIPTION

[0024] The present invention will be further described below with reference to the accompanying drawings and embodiments:

[0025] As described in the background technology, currently existing server-side devices are required to have flexible hot standby capabilities. However, due to the need for data transmission security, much data is encrypted using quantum security devices. After the addition of quantum security devices, there will inevitably be an impact on the original terminal and server-side networking structure, because the quantum security devices need to take over the communication data between the terminal and the business service and encrypt it before transmission, which will affect the original networking structure. Therefore, how to ensure the "primary and standby" processing capabilities of the server-side devices to seamlessly transfer subsequent data when adding quantum security devices is a technical problem that needs to be solved urgently.

[0026] like Figure 1 As shown, in view of this, the present invention proposes a server-based data synchronization system, which includes a quantum-safe privacy computer cluster 1, terminals 2, switches 3, server clusters 4 and business service terminals 5. Each group of quantum-safe privacy computers 11 in the quantum-safe privacy computer cluster 1 is connected to a group of terminals 2, and each group of terminals 2 is connected to the switches 3. The switches 3, server clusters 4 and business service terminals 5 are connected in sequence;

[0027] Server cluster 4 includes server 41, active server network element 42, and hot standby server network element 43. Server 41 is connected to switch 3, service server 5, and active server network element 42, respectively. Active server network element 42 is connected to hot standby server network element 43. Server 41 is also connected to hot standby server network element 43. Active server network element 42 and hot standby server network element 43 both include external network machines and internal network machines. The external network machines are used for data forwarding and have no storage function. The internal network machines have local disks and structured data storage requirements and are used to decrypt encrypted data to obtain decrypted data, classify and store the decrypted data, and synchronize data.

[0028] In this system, the active server network element 42 and the hot standby server network element 43 serve as a master-standby relationship. The external network machines of the active and standby network elements remain unchanged, while the data on the internal network machines is separated to obtain the data portion of the quantum security server network elements, one active and one standby. Of course, the application can also be separated to obtain the application portion. The data portion corresponds only to the state data and storage data (persistent information that may change within a time period) on the internal network machine; the external network machine does not inherently require data storage. The newly added quantum security devices in this system only perform data encryption and decryption operations and do not participate in communication between business services. There is no logical data coupling with the original network services, and the deployment model only adds nodes to the data path. The newly added nodes are all located on the side directly related to data transmission and reception. The quantum security privacy computer 11 added on the terminal side is used to initiate encryption of business content and decrypt the plaintext transparent transmission of received data. The active server network element 42 and hot standby server network element 43 added on the business service side are used to transparently transmit decrypted business content and encrypt feedback data. It is transparent to the original networking structure, and when one of the paths is abnormally interrupted, it can switch to another path without rebuilding the communication link.

[0029] The system of the present invention updates the network deployment and performs synchronous operations on the deployed primary and backup server network elements. The primary and backup server network elements are in a completely equal position in the network, and the backup of each other is also completely equal. Moreover, only the data and application parts are synchronously backed up, and they are all incremental backups. The bandwidth congestion caused by the backup process is reduced as much as possible, and the switching effect of the two network elements is achieved.

[0030] like Figure 2 As shown, the present invention includes a server-based data synchronization method, comprising the following steps:

[0031] (1) Each group of quantum-secure privacy computers 11 in the quantum-secure privacy computer cluster 1 transmits the generated encrypted data to the switch 3 through the respective connected terminals 2;

[0032] (2) Switch 3 sends the encrypted data to server cluster 4. Server 41 in server cluster 4 receives the encrypted data from switch 3 and forwards it to active server network element 42. Active server network element 42 decrypts the encrypted data to obtain the decrypted data and then forwards it to server 41. Server 41 then forwards the decrypted data to business service end 5. At the same time, active server network element 42 stores the decrypted data in categories and synchronizes the data to hot standby server network element 43. Active server network element 42 and hot standby server network element 43 inform each other of their current working status. If an abnormality occurs, the side without the abnormality will be immediately allowed to run to provide data decryption, data classification storage and data synchronization.

[0033] Among them, the specific process of the active server network element 42 classifying and storing the decrypted data and synchronizing the data to the hot standby server network element 43 is as follows: the intranet machine of the active server network element 42 classifies the decrypted data into status data and storage data according to type, and updates the status of the locally managed quantum secure privacy computer according to the status data, and then notifies the intranet machine of the hot standby server network element 43 of the quantum secure privacy computer status data in the form of a message; then, the intranet machine of the active server network element 42 puts the storage class data into the local disk storage, and sends the storage class data to the intranet machine of the hot standby server network element 43; when the intranet machine of the hot standby server network element 43 receives the message, it updates the status of the locally managed quantum secure privacy computer according to the quantum secure privacy computer status data in the message; when the storage class data is received, the storage class data is directly put into the local disk storage.

[0034] For example, status data may include heartbeat status data, access status data, and link status data; for example, the intranet machine of the active server network element 42 receives the access status data of the quantum secure privacy computer A, and updates the status of the locally managed quantum secure privacy computer A according to the access status data, such as updating the status of the quantum secure privacy computer A to access; then the status data (access) of the quantum secure privacy computer A is notified to the intranet machine of the hot standby server network element 43 in the form of a message; when the intranet machine of the hot standby server network element 43 receives the message, it updates the status A of the locally managed quantum secure privacy computer according to the quantum secure privacy computer status data (access) in the message, and updates the status of the quantum secure privacy computer A in the hot standby server network element 43 to access; the notification of status data in the form of a message is more efficient than directly sending the access status data to the hot standby server network element 43.

[0035] Storage-type data may include key file data, database record data, log file data, etc. This type of data needs to be stored permanently, so the storage-type data is directly sent to the intranet machine of the hot standby server network element 43 and stored in the local disk.

[0036] Active server NE 42 also works with hot standby server NE 43 to update applications. Specifically, when active server NE 42 detects a local application update, it synchronizes the updated application information with hot standby server NE 43, which then updates the application, ensuring real-time consistency between the active and standby applications. Application updates include adding, deleting, and upgrading applications. Application updates can be performed entirely, making them simple to use in practice.

[0037] The present invention reduces the workload of directly synchronizing all data by first classifying the data and then selecting different methods to synchronize the data according to the type of data; and decouples the data and the application part and backs them up separately without affecting each other, thereby improving the efficiency of backing up data.

[0038] An embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the steps of the server-based data synchronization method of the embodiment of the present invention are implemented.

Claims

1. A server-based data synchronization method, characterized in that: The following steps are involved: (1) Each group of quantum-safe privacy computers in the quantum-safe privacy computer cluster transmits the generated encrypted data to the switch through their respective connected terminals; (2) The switch sends the encrypted data to the server cluster. The server in the server cluster receives the encrypted data from the switch and forwards it to the active server network element. The active server network element decrypts the encrypted data to obtain the decrypted data and then forwards it to the server. The server then forwards the decrypted data to the business service end. At the same time, the active server network element classifies and stores the decrypted data and synchronizes the data to the hot standby server network element.

2. A server-based data synchronization method according to claim 1, characterized in that: The active server network element and the hot standby server network element inform each other of their current working status. If an abnormality occurs, the normal party will be immediately allowed to run to provide data decryption, data classification storage and data synchronization.

3. The server-based data synchronization method according to claim 1, wherein: The active server network element and the hot standby server network element both include an external network machine and an internal network machine. The external network machine is used for forwarding data; the internal network machine is used for decrypting encrypted data to obtain decrypted data, and is also used for classifying and storing the decrypted data and performing data synchronization.

4. The server-based data synchronization method according to claim 3, characterized in that: The specific process of the active server network element classifying and storing the decrypted data and synchronizing the data to the hot standby server network element is as follows: The intranet machine of the active server NE divides the decrypted data into state data and storage data by type, updates the state of the locally managed quantum secure privacy computer based on the state data, and then notifies the intranet machine of the hot standby server NE of the quantum secure privacy computer state data via a message. The intranet machine of the active server NE then stores the storage data on the local disk and sends the storage data to the intranet machine of the hot standby server NE. When the intranet machine of the hot standby server network element receives a message, it updates the locally managed quantum security privacy computer status according to the quantum security privacy computer status data in the message; when storage-class data is received, it directly puts the storage-class data into local disk storage.

5. The server-based data synchronization method according to claim 4, characterized in that: The state data includes heartbeat state data, access state data and link state data; the storage data includes key file data, database record data and log file data.

6. The server-based data synchronization method according to claim 1, characterized in that: The active server network element also updates the application with the hot standby server network element. Specifically, when the active server network element detects that the local application has been updated, the updated application information is synchronized to the hot standby server network element, and the hot standby server network element also updates the application; wherein, the application update includes the increase in the number of applications, deletion and upgrade of the application.

7. A system based on the server-based data synchronization method according to any one of claims 1 to 6, characterized in that: The system includes a quantum-safe privacy computer cluster, terminals, switches, server clusters, and business service terminals. Each group of quantum-safe privacy computers in the quantum-safe privacy computer cluster is connected to a group of terminals, and each group of terminals is connected to a switch. The switches, server clusters, and business service terminals are connected in sequence. The server cluster includes a server, an active server network element and a hot standby server network element. The server is connected to a switch, a service server and an active server network element respectively. The active server network element is connected to a hot standby server network element. The server is also connected to a hot standby server network element.

8. A computer-readable storage medium, characterized in that: It stores a computer program, which, when executed by a processor, implements the server-based data synchronization method as described in any one of claims 1 to 6.

Images