Online editing method and system for docking external server under network isolation

Abstract

The embodiment of the invention discloses an online editing method and system for docking an external server under network isolation. The method comprises the steps that an online editing special virtual machine is opened on a host machine, the online editing special virtual machine and an online editing server are configured in the same network, and the network is isolated from other networks on the host machine; and realizing an online preview editing service based on the online editing special virtual machine. The method has the following advantages: 1, the special kvm virtual machine is opened in the host machine and is specially used for docking an online preview editing service, so that a method for docking a third-party service system to carry out online preview editing in a multi-network isolation environment is provided; and 2, the method does not break the network isolation environment, and ensures the access service of each isolated network service. And 3, the deployment cost corresponding to the method is greatly reduced, and the services such as online preview and edition can be realized only by providing a third-party service server just like a single-network environment.

Description

Technical Field

[0001] This invention relates to the field of network isolation security technology, specifically to an online editing method and system for connecting to an external server under network isolation. Background Technology

[0002] In scenarios involving data leakage prevention and collaborative work, many business systems require online preview and editing. In a single-network environment, the typical integration solution is for the business server to directly interface with the online editing server (e.g., ...). Figure 1 (As shown). In the case of multi-network isolation, due to network unavailability, in order to enable preview and editing services across multiple networks, two deployment modes are used: (i) Connecting the business servers and preview and editing services on each network, so that all services can use the same preview and editing service. In this case, it is equivalent to connecting the isolated networks (e.g., Figure 2 (as shown). (ii) Should a preview and editing service be deployed in each isolated network, or should the network isolation status be maintained (e.g.) Figure 3 (As shown). This deployment method increases costs accordingly, requiring a preview / editing server to be deployed on each network. Currently, there is no good way to be compatible with both of the above methods. Summary of the Invention

[0003] In view of the technical problems existing in the background art, the purpose of the embodiments of this application is to provide an online editing method and system for connecting to an external server under network isolation.

[0004] To achieve the above objectives, in a first aspect, embodiments of this application provide an online editing method for connecting to an external server under network isolation, comprising:

[0005] A dedicated virtual machine for online editing is launched on the host machine; the dedicated virtual machine for online editing is configured on the same network as the online editing server, and this network is isolated from the other networks on the host machine;

[0006] The online preview and editing service is implemented based on the dedicated virtual machine for online editing.

[0007] As a specific implementation of this application, an online preview and editing service is implemented based on the aforementioned dedicated online editing virtual machine, specifically as follows:

[0008] The host machine responds to the first request to obtain response information and returns the response information to the browser; the first request comes from the browser and is a user request to use the online preview and editing service; the response information includes the file download address and the callback address that the online editing service needs to request;

[0009] The dedicated virtual machine for online editing receives the second request and forwards it to the online editing server; the second request is a browser request to call the online preview and editing service interface.

[0010] The online editing server responds to the second request, obtains the preview file content, and returns the preview file content to the browser for display and user editing.

[0011] Furthermore, before the host machine responds to the first request, the online editing method further includes:

[0012] The browser initiates a first request to the virtual machine on the switching network;

[0013] The switching network virtual machine sends the first request to the host machine via shared memory.

[0014] Furthermore, before the online editing server responds to the second request, the online editing method further includes:

[0015] The switching network virtual machine sends the second request to the host machine via shared memory.

[0016] As a preferred implementation of this application, after returning the preview file content to the browser for display and user editing, the online editing method further includes:

[0017] After the user finishes editing the file and exits, the online editing server receives a third request; the third request originates from the browser.

[0018] The online editing server responds to the third request and uploads the file call interface to the business server;

[0019] After the file is successfully saved to the business system, the online editing server will return a message indicating that the file editing has been exited to the browser.

[0020] Secondly, embodiments of this application provide an online editing system that interfaces with an external server under network isolation, including a browser, a virtual machine on a switching network, a host machine, and an online editing server that communicate with each other. The host machine has a dedicated online editing virtual machine, and online preview and editing services are implemented based on this dedicated online editing virtual machine. The dedicated online editing virtual machine and the online editing server are configured in the same network, and this network is isolated from the rest of the network on the host machine.

[0021] As one specific implementation of this application, the browser is used to send a first request, wherein the first request is a user request to use the online preview and editing service;

[0022] The switching network virtual machine is used to send the first request to the host machine via shared memory;

[0023] The host machine is used to respond to the first request to obtain response information and return the response information to the browser; the response information includes the file download address and the callback address that the online editing service needs to request;

[0024] The browser user sends a second request, which is a browser request to call the online preview and editing service interface;

[0025] The dedicated virtual machine for online editing receives the second request and forwards it to the online editing server;

[0026] The online editing server responds to the second request, obtains the preview file content, and returns the preview file content to the browser for display and user editing.

[0027] In a preferred implementation of this application, the browser is also used to send a third request;

[0028] The online editing server is also used for:

[0029] In response to the third request, the file call interface is uploaded to the business server;

[0030] After the file is successfully saved to the business system, a response page will be sent to the browser indicating that the file editing has been exited.

[0031] The advantages of implementing the online editing method and system for connecting to external servers under network isolation provided in the embodiments of the present invention are as follows:

[0032] 1. By opening a dedicated KVM virtual machine on the host machine specifically for connecting to the online preview and editing service, a method is provided for connecting to third-party business systems for online preview and editing in a multi-network isolated environment.

[0033] 2. The above method does not break the network isolation environment, and at the same time ensures the access service of each isolated network service.

[0034] 3. The deployment cost of the above method is greatly reduced. Similar to a single-network environment, only one third-party business server is needed to provide online preview and editing services. Attached Figure Description

[0035] To more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the accompanying drawings used in the description of the specific embodiments or the prior art will be briefly introduced below.

[0036] Figure 1This is a flowchart illustrating the integration process between the client, business systems, and online preview / editing services in a single-network environment.

[0037] Figure 2 This is a schematic diagram of the first deployment and docking method under an isolated network;

[0038] Figure 3 This is a diagram illustrating the second deployment and integration method under an isolated network.

[0039] Figure 4 This is a schematic diagram of this application;

[0040] Figure 5 This is a flowchart of an online editing method for connecting to an external server under network isolation, provided in an embodiment of this application.

[0041] Figure 6 yes Figure 5 The sub-flowchart of step S2 is shown below;

[0042] Figure 7 This is another flowchart illustrating the online editing functionality of this application. Detailed Implementation

[0043] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0044] It should be understood that, when used in this specification and the appended claims, the terms "comprising" and "including" indicate the presence of the described features, integrals, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or collections thereof.

[0045] The inventive concept of this application is to provide a solution for connecting a business system and an online editing service system under network isolation. The objectives to be achieved include: (1) the business system can connect to the online editing server under network isolation to provide business support for the business system; (2) multiple isolated networks can connect to the same online editing server while maintaining network isolation; and (3) the deployment is fast, simple and economical.

[0046] To achieve the above objectives, this application mainly involves the following aspects:

[0047] (1) such as Figure 4As shown, a dedicated KVM virtual machine is opened on the host machine, specifically for connecting to the online preview and editing service. The dedicated virtual machine and the online editing service are configured on the same network, which is isolated from other isolated networks.

[0048] (2) Each KVM is isolated from the others and can only communicate through shared memory, blocking all network communication and ensuring the isolation of each network. All business networks that need to access the online preview service must connect through a dedicated KVM.

[0049] (3) Through this service connection, all isolated networks are kept in an isolated state, and only one online preview and editing server is used to provide business services.

[0050] Please refer to Figure 5 This application provides an online editing method for connecting to an external server under network isolation, comprising:

[0051] S1 is a dedicated virtual machine for online editing that is launched on the host machine.

[0052] The dedicated virtual machine for online editing is configured in the same network as the online editing server, and this network is isolated from the rest of the network on the host machine.

[0053] S2 provides online preview and editing services based on a dedicated virtual machine for online editing.

[0054] Furthermore, combined Figure 6 and Figure 7 Step S2 specifically includes:

[0055] S21, the browser sends the first request.

[0056] The first request is a user request to use the online preview and editing service. Specifically, assuming a user on a switching network needs to use the online preview and editing service, they can initiate the first request through a browser.

[0057] S22, the switching network virtual machine sends the first request to the host machine via shared memory.

[0058] In practice, the virtual machine on the switching network sends the first request to the host machine through shared memory, requesting the download address of the file and the callback address required by the online editing service.

[0059] S23, the host machine responds to the first request to obtain the response information and returns the response information to the browser.

[0060] The response information includes the file download address and the callback address that the online editing service needs to request.

[0061] S24, the browser user sends a second request.

[0062] The second request is a browser request to call the online preview and editing service interface.

[0063] S25, the switching network virtual machine sends the second request to the online editing dedicated virtual machine via shared memory.

[0064] S26, the dedicated virtual machine for online editing receives the second request and forwards it to the online editing server.

[0065] S27, the online editing server responds to the second request, obtains the preview file content, and returns the preview file content to the browser for display and user editing.

[0066] In practice, after the online preview editing virtual machine calls the online preview editing service interface to request the service, the online preview editing server sends the request to a dedicated virtual machine to obtain the preview file and other content, and then returns it to the browser to display the file content.

[0067] Furthermore, after the user finishes editing the file and exits, the request is forwarded to the online editor via shared memory. The online editor then uploads the file to the business server via the API. Once the file is successfully saved to the business system, the online editor responds to the request and returns it to the browser, thus completing the entire process.

[0068] As can be seen from the above description, the advantages of implementing the online editing method and system for connecting to external servers under network isolation provided in the embodiments of the present invention are as follows:

[0069] 1. By opening a dedicated KVM virtual machine on the host machine specifically for connecting to the online preview and editing service, a method is provided for connecting to third-party business systems for online preview and editing in a multi-network isolated environment.

[0070] 2. The above method does not break the network isolation environment, and at the same time ensures the access service of each isolated network service.

[0071] 3. The deployment cost of the above method is greatly reduced. Similar to a single-network environment, only one third-party business server is needed to provide online preview and editing services.

[0072] Based on the same inventive concept, this application also provides an online editing system that interfaces with an external server under network isolation, including a browser, a virtual machine on a switching network, a host machine, and an online editing server that communicate with each other. The host machine has a dedicated online editing virtual machine running, and online preview and editing services are implemented based on this dedicated online editing virtual machine. The dedicated online editing virtual machine and the online editing server are configured in the same network, and this network is isolated from the rest of the network on the host machine.

[0073] In a specific implementation, the browser is used to send a first request, which is a user request to use the online preview and editing service;

[0074] The switching network virtual machine is used to send the first request to the host machine via shared memory;

[0075] The host machine is used to respond to the first request to obtain response information and return the response information to the browser; the response information includes the file download address and the callback address that the online editing service needs to request;

[0076] The browser user sends a second request, which is a browser request to call the online preview and editing service interface;

[0077] The dedicated virtual machine for online editing receives the second request and forwards it to the online editing server;

[0078] The online editing server responds to the second request, obtains the preview file content, and returns the preview file content to the browser for display and user editing.

[0079] Furthermore, the browser is also used to send third requests;

[0080] The online editing server is also used for:

[0081] In response to the third request, the file call interface is uploaded to the business server;

[0082] After the file is successfully saved to the business system, a response page will be sent to the browser indicating that the file editing has been exited.

[0083] It should be noted that the specific workflow of this embodiment is described in the foregoing method embodiment section, and will not be repeated here.

[0084] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in the present invention, and these modifications or substitutions should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method for online editing that connects to an external server under network isolation, characterized in that, include: Activate a dedicated virtual machine for online editing on the host machine; The dedicated virtual machine for online editing is configured on the same network as the online editing server, and this network is isolated from the rest of the network on the host machine; The online preview and editing service is implemented based on the dedicated virtual machine for online editing.

2. The online editing method as described in claim 1, characterized in that, The online preview and editing service is implemented based on the aforementioned dedicated virtual machine for online editing, specifically as follows: The host machine responds to the first request to obtain response information and returns the response information to the browser; the first request comes from the browser and is a user request to use the online preview and editing service; the response information includes the file download address and the callback address that the online editing service needs to request; The dedicated virtual machine for online editing receives the second request and forwards it to the online editing server; the second request is a browser request to call the online preview and editing service interface. The online editing server responds to the second request, obtains the preview file content, and returns the preview file content to the browser for display and user editing.

3. The online editing method as described in claim 2, characterized in that, Before the host machine responds to the first request, the online editing method further includes: The browser initiates a first request to the virtual machine on the switching network; The switching network virtual machine sends the first request to the host machine via shared memory.

4. The online editing method as described in claim 3, characterized in that, Before the online editing server responds to the second request, the online editing method further includes: The switching network virtual machine sends the second request to the host machine via shared memory.

5. The online editing method as described in claim 4, characterized in that, After returning the preview file content to the browser for display and user editing, the online editing method further includes: After the user finishes editing the file and exits, the online editing server receives a third request; the third request originates from the browser. The online editing server responds to the third request and uploads the file call interface to the business server; After the file is successfully saved to the business system, the online editing server will return a message indicating that the file editing has been exited to the browser.

6. An online editing system that interfaces with an external server under network isolation, comprising a browser, a virtual machine on a switching network, a host machine, and an online editing server that communicate with each other, characterized in that, The host machine has a dedicated virtual machine for online editing, and online preview and editing services are implemented based on the dedicated virtual machine for online editing. The dedicated virtual machine for online editing and the online editing server are configured in the same network, and this network is isolated from the other networks on the host machine.

7. The online editing system as described in claim 6, characterized in that, The browser is used to send a first request, which is a user request to use the online preview and editing service; The switching network virtual machine is used to send the first request to the host machine via shared memory; The host machine is used to respond to the first request to obtain response information and return the response information to the browser; the response information includes the file download address and the callback address that the online editing service needs to request; The browser user sends a second request, which is a browser request to call the online preview and editing service interface; The dedicated virtual machine for online editing receives the second request and forwards it to the online editing server; The online editing server responds to the second request, obtains the preview file content, and returns the preview file content to the browser for display and user editing.

8. The online editing system as described in claim 7, characterized in that, The browser is also used to send third requests; The online editing server is also used for: In response to the third request, the file call interface is uploaded to the business server; After the file is successfully saved to the business system, a response page will be sent to the browser indicating that the file editing has been exited.

Images