Data synchronization method and system based on isolation area

Abstract

The embodiment of the invention provides a data synchronization method and system based on an isolation area, and belongs to the technical field of information security technologies. The method comprises the following steps: generating a safety control parameter used for identifying a transmission constraint as a channel entrance of cross-environment data interaction; extracting to-be-synchronized data of the target service according to the security control parameter in the source environment, generating an encrypted data packet conforming to the transmission constraint, and writing the encrypted data packet into an isolation area communication channel; reading the encrypted data packet from the isolation area communication channel according to the security control parameter in the target environment, performing identity verification and content decryption on the encrypted data packet to obtain synchronous data for service updating, and generating corresponding receipt information to be fed back to the isolation area communication channel; and the isolation area communication channel transmits the synchronization data to the target business process based on the receipt information. According to the scheme of the invention, data security synchronization and state verifiable transmission between the development test network and the production office network are realized.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information security, and in particular to a data synchronization method based on an isolated area and a data synchronization system based on an isolated area. BACKGROUND

[0002] With the continuous improvement of the informatization level of the financial, government and scientific research industries, the research and development and operation and maintenance of business systems gradually show a trend of network partition and environment isolation. Usually, research and development activities are carried out in a development test network, while formal business deployment is run in a production office network. Due to security requirements, the two types of networks are often physically or logically isolated, resulting in the inability to directly communicate between them. However, with the increasing demand for digital management, various configuration data, test results and business parameters formed during the research and development stage often need to be summarized, verified or regulated in the production office network. At the same time, task information and management instructions generated in the production office network also need to be synchronized to the development test network for research and development iteration guidance. Therefore, under the premise of ensuring network isolation security, realizing safe transmission and synchronization of data across environments has become a key problem that needs to be solved in the current information management system.

[0003] Existing cross-network data synchronization schemes mainly rely on interface calls or message queue methods to achieve synchronization, but these methods are based on the premise that the networks can communicate, and cannot be applied to completely isolated network environments. If the communication path between the two networks is opened to realize data interconnection, the security boundary will be destroyed, and potential intrusion risks will be brought. If manual import or external storage media is used to transfer data, it is easy to cause data loss, tampering and synchronization delay. In addition, the existing synchronization mechanism generally lacks real-time verification capability for data transmission status, and cannot timely perceive and trace the source when an exception occurs, making it difficult to meet the cross-environment data management requirements of high security level and high consistency.

[0004] Therefore, under the condition that the development test network and the production office network are completely isolated, how to realize a safe, controllable and verifiable data synchronization process while ensuring the data integrity and synchronization accuracy between the two environments is a problem that needs to be solved at present. SUMMARY

[0005] The purpose of the embodiments of the present application is to provide a data synchronization method and system based on an isolated area to solve the problem that the development test network and the production office network cannot realize safe, controllable and verifiable data synchronization under the condition of complete isolation.

[0006] To achieve the above objectives, a first aspect of this application provides a data synchronization method based on an isolated zone. The method includes: establishing an isolated zone communication channel between a development / testing network and a production / office network, and generating security control parameters to identify transmission constraints, serving as the channel entry point for cross-environment data interaction; extracting target service data to be synchronized in the source environment according to the security control parameters, performing format verification and content encryption on the data to be synchronized, generating encrypted data packets conforming to transmission constraints, and writing them into the isolated zone communication channel; reading the encrypted data packets from the isolated zone communication channel in the target environment according to the security control parameters, performing authentication and content decryption on the encrypted data packets to obtain synchronized data for service updates, and generating corresponding receipt information to be fed back to the isolated zone communication channel; and transmitting the synchronized data to the target service process based on the receipt information.

[0007] In this embodiment of the application, an isolated communication channel is established between the development and testing network and the production and office network, and security control parameters for identifying transmission constraints are generated as the channel entry point for cross-environment data interaction. This includes: setting up an isolated relay node with physical and logical isolation between the development and testing network and the production and office network; dividing the isolated relay node into a message transmission area and a file transmission area; allocating access tokens to the message transmission area and the file transmission area respectively and establishing a session mapping table; and generating security control parameters including data transmission direction, access time limit and verification key based on the session mapping table.

[0008] In this embodiment, an isolation zone relay node with physical and logical isolation is set up between the development and testing network and the production office network. The isolation zone relay node is divided into a message transmission zone and a file transmission zone, including: configuring independent message queue components and file cache components inside the isolation zone relay node to carry the synchronous payload of structured data and unstructured data, respectively; setting independent storage paths and access ports for the message queue components and file cache components, and establishing a scheduling mapping relationship between the message transmission zone and the file transmission zone through a security proxy program in the isolation zone; configuring a data writing buffer pool in the message transmission zone to receive encrypted data uploaded by the development and testing network, and configuring a configuration temporary directory in the file transmission zone to store file data pulled by the production office network, so as to realize the partitioning, relaying and isolation of structured and unstructured data.

[0009] In this embodiment, the process of extracting the target service's data to be synchronized in the source environment according to the security control parameters, performing format verification and content encryption on the data to be synchronized, generating an encrypted data packet that conforms to transmission constraints, and writing it into the isolation zone communication channel includes: parsing the security control parameters to obtain the access range and encryption algorithm information of the target service, and extracting the data to be synchronized from the data storage of the source environment according to the access range of the target service; performing structure verification and sensitive information scanning on the data to be synchronized, and performing encryption processing according to the encryption algorithm information and encapsulating metadata to form an encrypted data packet if the verification passes; and writing the encrypted data packet into the corresponding transmission area of ​​the isolation zone communication channel and generating a write receipt.

[0010] In this embodiment, structural verification and sensitive information scanning are performed on the data to be synchronized. If the verification passes, encryption processing is performed according to the encryption algorithm information, and metadata is encapsulated to form an encrypted data packet. This includes: verifying the structural integrity of the data to be synchronized based on a preset set of field rules, and generating a corresponding structural verification result; when the structural verification result indicates that the data has passed, calling a sensitive word scanning model to perform semantic comparison and keyword recognition on the content of the data to be synchronized, and generating a sensitive information scanning result; when the sensitive information scanning result indicates that the data has passed, calling the corresponding encryption algorithm component according to the encryption algorithm information to perform encryption processing on the data to be synchronized, and generating an encrypted data body; and encapsulating the encrypted data body together with its corresponding encryption algorithm identifier, data digest, timestamp, and transmission number into an encrypted data packet.

[0011] In this embodiment, in the target environment, encrypted data packets are read from the isolated communication channel according to security control parameters. Authentication and content decryption are performed on the encrypted data packets to obtain synchronization data for business updates, and corresponding receipt information is generated and fed back to the isolated communication channel. This includes: determining the target environment's access permissions to the isolated communication channel based on security control parameters, and reading encrypted data packets with corresponding identifiers from the isolated communication channel; performing authentication on the encrypted data packets, and after successful authentication, performing content decryption according to the encryption algorithm information indicated in the security control parameters to generate synchronization data; generating receipt information based on the synchronization data, wherein the receipt information includes a receiving status and a decryption status identifier, and feeding the receipt information back to the isolated communication channel to update the synchronization status.

[0012] In this embodiment, authentication is performed on the encrypted data packet. After successful authentication, the content is decrypted according to the encryption algorithm information indicated in the security control parameters to generate synchronization data. This includes: calling the verification rules of the isolation zone communication channel based on the security control parameters to match and verify the identity information attached to the encrypted data packet; when the matching and verification result indicates success, loading the corresponding decryption key according to the encryption algorithm information recorded in the security control parameters to perform decryption operation on the encrypted data packet; generating synchronization data after the decryption operation is completed, writing the synchronization data into the business processing module of the target environment, and simultaneously returning the decryption completion status information to the isolation zone communication channel for updating the synchronization record.

[0013] In this embodiment, the isolation zone communication channel transmits synchronization data to the target business process based on the receipt information, including: parsing the receipt information in the isolation zone communication channel to confirm the reception and decryption status of the corresponding encrypted data packet; when the receipt information indicates that both reception and decryption are complete, reading the synchronization data from the target environment buffer and triggering the data distribution process; writing the synchronization data into the input interface of the target business process according to a preset business mapping relationship, and generating a transmission confirmation record after writing is completed; and returning the transmission confirmation record to the source environment to update the synchronization status.

[0014] In this embodiment of the application, the method further includes: establishing a reconciliation mechanism in the isolation zone communication channel, wherein any environment generates data details at a preset time period and sends them to another environment through the isolation zone communication channel; the receiver performs a field-level comparison with the local synchronized data based on the data details to generate a reconciliation result; when the reconciliation result indicates that there is a data inconsistency, an abnormal record is generated and written into the abnormal queue of the isolation zone communication channel, and an email or message notification is triggered to indicate a data synchronization abnormality.

[0015] In this embodiment of the application, the method further includes: establishing a heartbeat mechanism in the isolation zone communication channel, wherein one party initiates a heartbeat request through the isolation zone communication channel at a preset time interval, and the other party generates a heartbeat response and returns it to the initiator after receiving it; when the initiator receives the heartbeat response within a specified time, the synchronization status is updated to normal; if no response is received, a timeout alarm is generated and a synchronization abnormality prompt is sent through a preset notification channel. A second aspect of this application provides a data synchronization system based on an isolated zone. The system includes: a channel construction unit, used to establish an isolated zone communication channel based on a development and testing network and a production and office network, and generate security control parameters for identifying transmission constraints, serving as the channel entry point for cross-environment data interaction; an encryption unit, used to extract the target service's data to be synchronized in the source environment according to the security control parameters, perform format verification and content encryption on the data to be synchronized, generate encrypted data packets that conform to transmission constraints, and write them into the isolated zone communication channel; a decryption unit, used to read the encrypted data packets from the isolated zone communication channel in the target environment according to the security control parameters, perform authentication and content decryption on the encrypted data packets, obtain synchronized data for business updates, and generate corresponding receipt information to be fed back to the isolated zone communication channel; and a synchronization unit, used by the isolated zone communication channel to transmit the synchronized data to the target business process based on the receipt information.

[0016] A third aspect of this application provides a processor configured to perform the aforementioned data synchronization method based on an isolation zone.

[0017] A fourth aspect of this application provides a machine-readable storage medium storing instructions that, when executed by a processor, configure the processor to perform the aforementioned isolation-based data synchronization method.

[0018] The fifth aspect of this application provides a computer program product, including a computer program that is executed by a processor using the aforementioned data synchronization method based on an isolation zone.

[0019] Through the above technical solution, this invention achieves secure data transmission across isolated environments by establishing an isolated communication channel between the development / testing network and the production / office network and configuring security control parameters. A hierarchical processing mechanism, performing data verification and encryption in the source environment and authentication and decryption in the target environment, ensures the integrity and confidentiality of data during transmission. The isolated communication channel acts as a bidirectional, controlled relay, enabling secure interaction between the two environments while maintaining physical and logical isolation. Combined with a feedback mechanism, the synchronization status can be confirmed in real time, ensuring data consistency and traceability, thereby achieving secure, standardized, and verifiable cross-environment data synchronization.

[0020] Other features and advantages of the embodiments of this application will be described in detail in the following detailed description section. Attached Figure Description

[0021] The accompanying drawings are provided to further illustrate the embodiments of this application and form part of the specification. They are used together with the following detailed description to explain the embodiments of this application, but do not constitute a limitation on the embodiments of this application. In the drawings: Figure 1 The flowchart illustrating the steps of a data synchronization method based on an isolation zone according to an embodiment of this application is shown in the schematic diagram. Figure 2 This illustration schematically shows a data synchronization process based on an isolation zone according to an embodiment of the present application; Figure 3 This illustration schematically shows a system architecture diagram of a data synchronization system based on an isolation zone according to an embodiment of this application; Figure 4 The diagram illustrates the internal structure of a computer device according to an embodiment of this application. Detailed Implementation

[0022] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are only for illustration and explanation of the embodiments of this application and are not intended to limit the embodiments of this application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application.

[0023] It should be noted that if the embodiments of this application involve directional indicators (such as up, down, left, right, front, back, etc.), the directional indicators are only used to explain the relative positional relationship and movement of each component in a certain specific posture (as shown in the figure). If the specific posture changes, the directional indicators will also change accordingly.

[0024] Furthermore, if the embodiments of this application involve descriptions such as "first" or "second," these descriptions are for descriptive purposes only and should not be construed as indicating or implying their relative importance or implicitly specifying the number of technical features indicated. Therefore, features defined with "first" or "second" may explicitly or implicitly include at least one of those features. Additionally, the technical solutions of various embodiments can be combined with each other, but this must be based on the ability of those skilled in the art to implement them. If the combination of technical solutions is contradictory or impossible to implement, it should be considered that such a combination of technical solutions does not exist and is not within the scope of protection claimed in this application.

[0025] The acquisition, transmission, storage, use, and processing of data in this application comply with relevant national laws and regulations. Furthermore, it should be noted that existing industry solutions such as software, components, and models may be mentioned in the embodiments of this application. These should be considered exemplary, intended only to illustrate the feasibility of implementing the technical solution of this application, and do not imply that the applicant has already used or necessarily used such solutions.

[0026] Figure 1 A schematic flowchart illustrating a data synchronization method based on an isolated zone according to an embodiment of this application is shown. Figure 1 As shown in one embodiment of this application, a data synchronization method based on an isolation zone is provided, including the following steps: Step S10: Establish an isolated communication channel between the development and testing network and the production office network, and generate security control parameters to identify transmission constraints, serving as the channel entry point for cross-environment data interaction.

[0027] Specifically, an isolation zone relay node with physical and logical isolation is set up between the development and testing network and the production office network. The isolation zone relay node is divided into a message transmission zone and a file transmission zone. Access tokens are allocated to the message transmission zone and the file transmission zone respectively, and a session mapping table is established. Based on the session mapping table, security control parameters including data transmission direction, access time limit and verification key are generated.

[0028] Furthermore, an isolation zone relay node with physical and logical isolation is set up between the development and testing network and the production office network. The isolation zone relay node is divided into a message transmission zone and a file transmission zone, including: configuring independent message queue components and file cache components inside the isolation zone relay node to carry the synchronous payload of structured data and unstructured data, respectively; setting independent storage paths and access ports for the message queue components and file cache components, and establishing a scheduling mapping relationship between the message transmission zone and the file transmission zone through a security proxy program in the isolation zone; configuring a data writing buffer pool in the message transmission zone to receive encrypted data uploaded from the development and testing network, and configuring a temporary storage directory in the file transmission zone to store file data pulled by the production office network, so as to realize the partitioning, relaying and isolation of structured and unstructured data.

[0029] In this embodiment of the invention, in actual cross-environment data management scenarios, development and testing networks and production / office networks are often strictly isolated. Although they are physically deployed in different network segments, and even different security domains, they have frequent data transfer requirements in terms of business operations. The development and testing network needs to perform functional debugging and verification based on the business rules, configuration parameters, and monitoring data of the production environment, while the production / office network often needs to periodically summarize the analysis data, algorithm models, or report content generated during the R&D phase for management decisions or regulatory filing. To break this contradiction of needing to communicate but having limited paths, the present invention proposes a communication channel construction method based on isolation zones. Its core idea is to allow data to cross the network isolation layer without breaking the security boundary, achieving a secure and controllable data interaction method.

[0030] Specifically, an independent isolation relay node is set up between the development / testing network and the production / office network. This node does not belong to either the development / testing network or directly belong to the production / office network; instead, it sits as a buffer zone between the two. This isolation relay node is responsible for data storage, queue distribution, and access control, and also enables controlled communication through a two-way authorization mechanism. To ensure the matching of data types and transmission methods, the relay node is internally divided into two functional areas: a message transmission area and a file transmission area. The message transmission area is mainly for the transmission of structured data, such as task parameters, configuration items, and command information; the file transmission area is used for the transmission of unstructured data, such as log files, images, reports, and other large files. This partitioning design allows data to be classified as it enters the isolation area, thus avoiding the chaos and risks caused by different data formats sharing the same channel.

[0031] Within the message transmission area, a separate message queue component is configured. This component can employ a first-in, first-out (FIFO) queue model to achieve multi-threaded writing and asynchronous reading, thereby improving the concurrency of cross-environment data transmission. The message queue component also includes a write buffer pool to receive encrypted data from the development and testing network. After data is written to the buffer pool, the system generates a unique message number based on the current transmission status and security policy, and appends a timestamp and sending identifier so that the target end can verify and sort the data during retrieval. In the file transmission area, a configuration cache component and its corresponding temporary directory are configured. The file cache component provides block storage and breakpoint resumption capabilities, ensuring that large files do not cause overall transmission interruption during network fluctuations. The file temporary directory path is designed with read-only and write-only separation; that is, the development and testing network only has write permissions, while the production and office network only has read permissions, fundamentally preventing data back-end penetration.

[0032] In the overall architecture of the transit node in the isolation zone, a security proxy program needs to be introduced to manage the access logic between the two transmission zones. The security proxy program uses a dynamic scheduling mapping table to achieve access isolation and scheduling conversion of data between the message transmission zone and the file transmission zone. When the development and test network initiates a data upload, the security proxy program verifies the validity of the access token and then distributes the data to the corresponding transmission zone according to the data type. When the production and office network performs data retrieval, authentication based on the access token is also required, and the corresponding data resources are only allowed to be read after the security proxy program confirms the permissions.

[0033] To further ensure the stringency of access control, independent access tokens are assigned to the message transmission area and the file transmission area, and a session mapping table is established. Each access token corresponds to a set of session identifiers, access validity periods, and encryption keys, used to describe the legal status of the current session. The security agent program generates security control parameters based on the session mapping table. These parameters include not only the access token but also core constraint information such as data transmission direction, access validity periods, and verification keys. The data transmission direction is used to distinguish path control for uploads and downloads, the access validity period ensures that the validity of each communication is limited, and the verification key is used to verify the integrity of data packets during transmission.

[0034] Once the communication channel is established, an access policy table for the isolated communication channel is automatically generated. This table records each access token and its corresponding transmission permission information, including which directories are readable, which queues are writable, and when they expire. All data interactions between the production office network and the development and testing network must be matched and judged against this policy table; only data requests that meet the access conditions are allowed to pass. This multi-layered authorization and partitioned relay mechanism makes the entire cross-environment data interaction process both flexible and secure.

[0035] Step S20: Extract the target service's data to be synchronized in the source environment according to the security control parameters, perform format verification and content encryption on the data to be synchronized, generate encrypted data packets that meet the transmission constraints, and write them into the isolation zone communication channel.

[0036] Specifically, the security control parameters are parsed to obtain the access range and encryption algorithm information of the target service, and the data to be synchronized is extracted from the data storage of the source environment according to the access range of the target service; the data to be synchronized is subjected to structure verification and sensitive information scanning, and if the verification passes, encryption processing is performed according to the encryption algorithm information and the metadata is encapsulated to form an encrypted data packet; the encrypted data packet is written to the corresponding transmission area of ​​the isolation zone communication channel and a write receipt is generated.

[0037] Furthermore, structural verification and sensitive information scanning are performed on the data to be synchronized. If the verification passes, encryption processing is performed according to the encryption algorithm information, and metadata is encapsulated to form an encrypted data packet. This includes: verifying the structural integrity of the data to be synchronized based on a preset set of field rules, and generating a corresponding structural verification result; when the structural verification result indicates that it passes, calling a sensitive word scanning model to perform semantic comparison and keyword recognition on the content of the data to be synchronized, and generating a sensitive information scanning result; when the sensitive information scanning result indicates that it passes, calling the corresponding encryption algorithm component according to the encryption algorithm information to perform encryption processing on the data to be synchronized, and generating an encrypted data body; and encapsulating the encrypted data body together with its corresponding encryption algorithm identifier, data digest, timestamp, and transmission number into an encrypted data packet.

[0038] In this embodiment of the invention, before performing data synchronization in the source environment, it is necessary to clarify the transmission range and security constraints. Therefore, the entire process begins with security control parameters. These security control parameters consist of elements such as access range, encryption algorithm information, time limits, and verification keys. They determine which business data in the source environment can be extracted, how it is encrypted, and under what conditions transmission is permitted. The process of parsing the security control parameters is essentially a constraint confirmation of the target business access boundaries. Only when the target business identifier, data range, and parameter settings completely match will the data extraction logic be activated, ensuring that no unauthorized data can enter the synchronization process.

[0039] During the extraction phase, the source environment filters the dataset corresponding to the target business from its local data storage structure according to the data access scope defined in the security control parameters. These datasets are often complex in structure, potentially containing structured fields from database tables as well as unstructured text or log fragments. Therefore, the first step after extraction is to perform structure verification. Structure verification follows a preset set of field rules, primarily verifying the integrity and consistency of the data, such as whether the number of fields matches, whether the data types are correct, and whether there are any anomalies in the primary key and index relationships. The verification process is performed row by row, and abnormal data is automatically marked and output to the verification log for easy investigation later. This ensures that the transmitted data is logically self-consistent and will not cause subsequent parsing failures due to structural defects.

[0040] After the structural verification passes, further confirmation of data content security is required. At this stage, a sensitive word scanning model is invoked to perform semantic comparison and keyword identification on the data to be synchronized. This step acts as an information filtering gate, preventing the accidental synchronization of confidential fields, private information, or content subject to regulatory restrictions. The scanning model employs a dual strategy of dictionary matching and semantic embedding; the former identifies explicit keywords, while the latter identifies potential risk expressions through contextual semantic relationships. Only when the scan results show that the data content meets transmission requirements is it allowed to enter the encryption stage; otherwise, it is immediately intercepted, and a rejection record is generated in the isolated communication channel.

[0041] Based on the encryption algorithm information indicated in the security control parameters, the corresponding encryption algorithm component is invoked to perform content encryption. The encryption algorithm can be symmetric or asymmetric, depending on the security agreement between the transmitting parties. To prevent risks arising from the long-term use of a single algorithm, the encryption component can support an algorithm rotation mechanism, that is, automatically changing the encryption algorithm or key version within a preset period. During the encryption process, the original data is converted into an encrypted data body, and a data digest and timestamp are generated simultaneously, so that the target environment can perform consistency verification after decryption.

[0042] After the encrypted data body is generated, it needs to be encapsulated. The purpose of encapsulation is to enable the target environment to accurately identify the source, version, and validity period of the received data. The encapsulated content generally includes information such as the encryption algorithm identifier, data digest, timestamp, and transmission number. The transmission number is used to identify a complete data synchronization transaction, enabling precise matching in subsequent reconciliation and receipt stages. After encapsulation, a complete encrypted data packet is formed. The encrypted data packet is both a data carrier and a unit carrying security policies. The metadata it carries allows the target environment to strictly verify according to security control parameters during retrieval and decryption, preventing any unauthorized or forged data from entering the business processing flow.

[0043] After the encrypted data packet is generated, it will be written to the corresponding transmission area of ​​the isolated communication channel. Structured data is written to the message transmission area, while unstructured data is stored in the file transmission area. During the writing process, a unique write receipt is generated, including the data packet number, write time, and verification status. This receipt is returned to the source environment to update the execution status of this synchronization task and is recorded in the synchronization log. If the write fails, a retry mechanism is triggered to avoid data interruption due to network fluctuations or momentary failures.

[0044] Step S30: In the target environment, read the encrypted data packet from the isolation zone communication channel according to the security control parameters, perform authentication and content decryption on the encrypted data packet, obtain the synchronization data for business updates, and generate corresponding receipt information to be fed back to the isolation zone communication channel.

[0045] Specifically, the access permissions of the target environment to the isolation zone communication channel are determined based on security control parameters, and encrypted data packets with corresponding identifiers are read from the isolation zone communication channel; authentication is performed on the encrypted data packets, and after successful authentication, the content is decrypted according to the encryption algorithm information indicated in the security control parameters to generate synchronization data; receipt information is generated based on the synchronization data, wherein the receipt information includes the receiving status and decryption status identifiers, and the receipt information is fed back to the isolation zone communication channel to update the synchronization status.

[0046] Furthermore, the encrypted data packet undergoes authentication. Upon successful authentication, the content is decrypted according to the encryption algorithm information indicated in the security control parameters, generating synchronization data. This includes: calling the verification rules of the isolation zone communication channel based on the security control parameters to match and verify the identity information attached to the encrypted data packet; when the matching and verification result indicates success, loading the corresponding decryption key according to the encryption algorithm information recorded in the security control parameters, and performing a decryption operation on the encrypted data packet; generating synchronization data after the decryption operation is completed, writing the synchronization data to the business processing module of the target environment, and simultaneously returning the decryption completion status information to the isolation zone communication channel for updating the synchronization record.

[0047] In this embodiment of the invention, after the data encryption and writing in the source environment are completed, the target environment needs to retrieve the corresponding data packets from the isolated communication channel under strictly controlled conditions. This process involves a complete set of permission verification, algorithm matching, and data verification logic. First, the access boundaries of the target environment must be confirmed based on security control parameters. These security control parameters not only record encryption algorithm information but also include access permissions, valid time periods, data direction, and identity identifiers. When the target environment attempts to access the isolated communication channel, it will prioritize parsing these parameters. Only when the access identifier, timestamp, and transmission direction match perfectly will the retrieval action be allowed. This layer of permission judgment acts as a logical gate, preventing unauthorized environments from reading data not related to the current task and ensuring that every read operation is within a traceable and secure range.

[0048] After access is authorized, the target environment locates the corresponding encrypted data packet within the isolated communication channel based on the transmission number recorded in the security control parameters. Each encrypted data packet carries a unique number and metadata, which are bound during the encapsulation phase and include key information such as a data digest, encryption algorithm identifier, and timestamp. When reading the packet, the target environment first verifies the integrity of this information. If the number or digest is inconsistent, subsequent operations will be immediately interrupted and the anomaly will be logged. This design ensures the continuity and accuracy of the data stream even in the event of network jitter or transmission delays through number alignment.

[0049] Furthermore, performing authentication on the encrypted data packet essentially involves matching the identity information attached to the data packet with the authorization information recorded in the security control parameters. The identity information generally includes the source environment identifier, data transmission token, and transmission digest fingerprint. The verification rules are defined by the verification template pointed to by the security control parameters, employing a dual mechanism of hash verification and time window matching. That is, the verification process will only return a pass status if the data packet's identity matches the token and the timestamp is within the authorization window. If verification fails, the data packet will be automatically marked as invalid by the isolated communication channel and added to the re-verification queue, fundamentally eliminating the risk of forged data or duplicate transmissions.

[0050] After successful authentication, the target environment performs decryption based on the encryption algorithm information specified in the security control parameters. This involves invoking the corresponding decryption component and loading the key version number and key file path defined in the security control parameters. To prevent key leakage, the decryption process is performed in a limited memory space, and the cache is cleared immediately upon completion. The encryption algorithm can be symmetric AES, asymmetric RSA, or a hybrid encryption structure, automatically adapting according to the security level agreed upon by both parties. After decryption, synchronized data is generated, along with a decryption digest for subsequent comparison and confirmation.

[0051] The generated synchronized data does not directly enter the business processing logic; instead, it first undergoes a validity verification. This verification primarily checks the consistency between the data structure and the original transmission description, such as the number of fields, data format, and timestamps. If the verification passes, the synchronized data is written to the target environment's business processing module for configuration updates, parameter synchronization, or log archiving. The entire process logically forms a closed loop with the data generation stage in the source environment, ensuring the contextual integrity of the synchronized data.

[0052] After data is written to the target business module, the target environment immediately generates a receipt. This receipt is a crucial link in the feedback loop of the entire synchronization chain; it not only indicates that the target environment has successfully received and decrypted the data but also carries a status description. The receipt typically includes the reception status, decryption status, writing time, and task number. After generation, the receipt is re-encrypted and written to the isolation zone communication channel as the end marker for this synchronization task. Upon receiving this receipt, the isolation zone communication channel updates the task status to "complete" and records it in the log table, providing foundational data for subsequent reconciliation and heartbeat checks.

[0053] This design is a synchronization process with a closed-loop confirmation mechanism. Data originates from the source environment, is encrypted, enters the isolation zone, and is then retrieved, verified, decrypted, and acknowledged by the target environment. Each step has clearly defined triggering conditions and verification methods. Even under isolated network conditions, both parties can achieve consistent synchronization status awareness through security control parameters and the acknowledgment mechanism.

[0054] Step S40: The isolation zone communication channel transmits the synchronization data to the target business process based on the receipt information.

[0055] Specifically, the acknowledgment information is parsed in the communication channel of the isolation zone to confirm the reception and decryption status of the corresponding encrypted data packet; when the acknowledgment information indicates that both reception and decryption are completed, the synchronization data is read from the target environment buffer and the data distribution process is triggered; the synchronization data is written into the input interface of the target business process according to the preset business mapping relationship, and a transmission confirmation record is generated after the writing is completed; the transmission confirmation record is returned to the source environment to update the synchronization status.

[0056] In this embodiment of the invention, when the receipt information arrives, it is first parsed to confirm the reception and decryption status of the corresponding encrypted data packet. This parsing process is equivalent to a double check, verifying whether the data number, timestamp, and task identifier match, and also verifying whether the decryption digest matches the checksum recorded in the security control parameters. Only when both checks indicate success is the data synchronization considered to have passed integrity verification for this round.

[0057] Once the receipt clearly indicates that reception and decryption are complete, the isolation zone communication channel automatically enters the data distribution phase. At this point, the newly generated synchronized data is read from the target environment's cache, and the corresponding business flow template is matched according to the task identifier. Each piece of synchronized data has a clear business mapping relationship, indicating which business process the data should enter, which type of parameter should be updated, or what operation should be triggered. The advantage of this design is that the isolation zone does not need to concern itself with the specific execution details of the business logic; it is only responsible for accurately pushing the data to the input interface of the target business process, provided that the data is valid.

[0058] Once the synchronized data is written, a transmission confirmation record is generated immediately. This record includes the write time, target process identifier, and data verification summary for subsequent traceability and comparison. This transmission confirmation record is sent back to the source environment, overwriting the original synchronization task's execution status and marking it as "completed." In this way, the source environment can know the final result of the data synchronization in real time, eliminating the need for external manual verification.

[0059] Preferably, the method further includes: establishing a reconciliation mechanism in the isolation zone communication channel, wherein any environment generates data details at a preset time period and sends them to another environment through the isolation zone communication channel; the receiver performs a field-level comparison with the local synchronized data based on the data details to generate a reconciliation result; when the reconciliation result indicates that there is a data inconsistency, an abnormal record is generated and written to the abnormal queue of the isolation zone communication channel, and an email or message notification is triggered to indicate a data synchronization abnormality.

[0060] In this embodiment of the invention, after data synchronization has been running for a period of time, in order to avoid minor deviations or data omissions that may occur during long-term transmission, a periodic reconciliation mechanism is needed to verify the synchronization results. Reconciliation is not simply a comparison of quantities or statuses, but a thorough, field-level check. Typically, within a preset time period, either party generates a detailed data statement for the current period, including basic information such as task number, timestamp, data summary, and encryption identifier. This statement is transmitted to the other party through the isolated communication channel for comparison with local synchronization records.

[0061] Once the recipient receives the data details, it will perform item-by-item matching according to the task number. The comparison logic is quite detailed, first checking if the data exists, and then checking if the field values ​​are consistent. For structured data, the data values ​​are compared with the verification digest field by field; for unstructured data, consistency is confirmed by calculating the file digest or hash value. The reconciliation results will generate a clear comparison report, indicating the number of successfully matched records, the location of inconsistent fields, and the reason for the anomaly. This report is not viewed manually, but is directly generated by the reconciliation logic module and returned to the isolated communication channel for archiving and anomaly trigger judgment.

[0062] If the reconciliation results show inconsistencies, the isolation zone communication channel will immediately create an anomaly record. The anomaly record typically includes the anomaly task number, corresponding data packet identifier, time information, and anomaly type, such as missing fields, mismatched digests, or duplicate transmissions. These anomaly records are uniformly written to the isolation zone's anomaly queue, simultaneously triggering message or email notifications. The notification mechanism supports multiple channels, such as direct push to the operations and maintenance monitoring platform, or notification to the responsible party via encrypted email.

[0063] This design eliminates the need for additional network connections during the reconciliation process, with all information exchange completed within the isolated communication channel. It maintains physical isolation between the development / testing network and the production / office network while enabling cross-environment synchronous data verification. Through fine-grained field-level comparisons, it can not only detect potential data drift early but also quickly pinpoint the source of anomalies. Its technical effectiveness lies in ensuring the accuracy and integrity of cross-environment data synchronization while providing a sustainable self-checking mechanism, ensuring data consistency and reliability even in isolation.

[0064] Preferably, the method further includes: establishing a heartbeat mechanism in the isolation zone communication channel, wherein one party initiates a heartbeat request through the isolation zone communication channel at a preset time interval, and the other party generates a heartbeat response and returns it to the initiator after receiving it; when the initiator receives the heartbeat response within a specified time, the synchronization status is updated to normal; if no response is received, a timeout alarm is generated and a synchronization abnormality prompt is sent through a preset notification channel.

[0065] In this embodiment of the invention, during cross-environment data synchronization, in addition to the security and integrity of the data itself, the availability of the channel is equally important. Therefore, a lightweight heartbeat mechanism needs to be established within the isolated communication channel to continuously monitor the channel's activity and the stability of the transmission link. The basic logic of the heartbeat mechanism is periodic probing and response confirmation; it does not involve the transmission of actual business data, but rather uses a specific format of heartbeat data packets to achieve status detection.

[0066] In practice, at preset time intervals, one party initiates a heartbeat request to the isolation zone's communication channel. The heartbeat request typically includes the initiator's identifier, a timestamp, and a task sequence number to distinguish between different batches of detection signals. Upon receiving the request, the isolation zone routes it to the other party and generates a heartbeat response immediately after the other party confirms receipt. The response message transmits the original timestamp and task sequence number, along with processing delay parameters to determine if there are any abnormal fluctuations in the link. The entire round-trip process is controlled within an adjustable time window, ensuring both a reasonable detection frequency and no impact on normal data synchronization tasks.

[0067] When the initiator receives the corresponding heartbeat response within the specified time, it determines that the communication channel between the isolated zone and the target environment is normal, and then updates the synchronization status and writes it to the status log. If no response is received within the set time limit, or if the response content is abnormal, a timeout alarm is automatically generated. The alarm information is encapsulated as a simplified exception record and sent out through a preset notification channel, which can be email, instant message, or event push from the operations and maintenance platform. This mechanism can detect communication delays or channel congestion in advance, helping maintenance personnel to intervene and handle the situation before data synchronization is affected.

[0068] In one specific implementation, such as Figure 2 The isolated communication channel is set up between the development and testing network and the production office network to achieve secure data transmission across environments. The isolated relay node is internally divided into a message transmission area and a file transmission area. The message transmission area is equipped with a message queue component for synchronizing structured data; the file transmission area is equipped with a file cache component for storing unstructured data. After generating encrypted data packets, the source environment writes them to the corresponding transmission area. The target environment then retrieves the encrypted data packets from the transmission area according to security control parameters, performs authentication and content decryption, generates synchronization data, and returns a receipt. The isolated communication channel updates the synchronization status based on the receipt information and distributes the synchronized data to the target business process. This embodiment achieves secure data relay and controllable synchronization between different network environments through a dual mechanism of physical and logical isolation.

[0069] Figure 1 This is a flowchart illustrating a data synchronization method based on an isolation zone in one embodiment. It should be understood that, although... Figure 1 The steps in the flowchart are shown sequentially as indicated by the arrows, but these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order in which these steps are executed, and they can be performed in other orders. Figure 1 At least some of the steps in the process may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least some of the sub-steps or stages of other steps.

[0070] In one embodiment, such as Figure 3As shown, a data synchronization system in an isolated area is provided. The system includes: a channel construction unit, used to establish an isolated area communication channel based on the development and testing network and the production office network, and generate security control parameters for identifying transmission constraints, serving as the channel entry point for cross-environment data interaction; an encryption unit, used to extract the target business's data to be synchronized in the source environment according to the security control parameters, perform format verification and content encryption on the data to be synchronized, generate encrypted data packets that conform to transmission constraints, and write them into the isolated area communication channel; a decryption unit, used to read the encrypted data packets from the isolated area communication channel in the target environment according to the security control parameters, perform authentication and content decryption on the encrypted data packets, obtain synchronized data for business updates, and generate corresponding receipt information to be fed back to the isolated area communication channel; and a synchronization unit, used by the isolated area communication channel to transmit the synchronized data to the target business process based on the receipt information.

[0071] This application provides a storage medium storing a program that, when executed by a processor, implements the aforementioned data synchronization method based on an isolation zone.

[0072] This application provides a processor for running a program, wherein the program executes the above-described data synchronization method based on an isolation zone.

[0073] In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 4 As shown, the computer device includes a processor A01, a network interface A02, a display screen A04, an input device A05, and a memory (not shown) connected via a system bus. The processor A01 provides computing and control capabilities. The memory includes internal memory A03 and a non-volatile storage medium A06. The non-volatile storage medium A06 stores an operating system B01 and a computer program B02. The internal memory A03 provides an environment for the operation of the operating system B01 and the computer program B02 stored in the non-volatile storage medium A06. The network interface A02 is used for communication with external terminals via a network connection. When the computer program is executed by the processor A01, it implements a data synchronization method based on an isolation zone. The display screen A04 can be a liquid crystal display (LCD) or an e-ink display. The input device A05 can be a touch layer covering the display screen, buttons, a trackball, or a touchpad mounted on the computer device casing, or an external keyboard, touchpad, or mouse.

[0074] Those skilled in the art will understand that Figure 4The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0075] This application also provides a computer program product that, when executed on a data processing device, is suitable for performing the above-described data synchronization method based on an isolation zone.

[0076] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0077] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0078] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0079] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0080] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0081] Memory may include non-persistent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, like read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0082] Computer-readable media include both permanent and non-permanent, removable and non-removable media, which can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0083] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0084] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A data synchronization method based on an isolation zone, characterized in that, The method comprises: Based on the development test network and the production office network to establish the isolation zone communication channel, and generate security control parameters for identifying transmission constraints as the channel entrance of cross-environment data interaction; In the source environment, according to the security control parameters, extract the target business data to be synchronized, perform format verification and content encryption on the data to be synchronized, generate encrypted data packets conforming to the transmission constraints and write them into the isolation zone communication channel; In the target environment, according to the security control parameters, read the encrypted data packets from the isolation zone communication channel, perform identity authentication and content decryption on the encrypted data packets, obtain the synchronization data for business update, and generate the corresponding receipt information feedback to the isolation zone communication channel; The isolation zone communication channel transmits the synchronization data to the target business process based on the receipt information.

2. The method of claim 1, wherein, Based on the development test network and the production office network to establish the isolation zone communication channel, and generate security control parameters for identifying transmission constraints as the channel entrance of cross-environment data interaction, comprising: Set up an isolation zone transfer node with physical isolation and logical isolation between the development test network and the production office network, divide the isolation zone transfer node into a message transmission area and a file transmission area; Assign access tokens to the message transmission area and the file transmission area respectively and establish a session mapping table, and generate security control parameters containing data transmission direction, access time limit and verification key according to the session mapping table.

3. The method of claim 2, wherein, Setting up an isolation zone transfer node with physical isolation and logical isolation between the development test network and the production office network, dividing the isolation zone transfer node into a message transmission area and a file transmission area, comprising: Configure independent message queue components and file cache components inside the isolation zone transfer node, respectively used to carry the synchronization load of structured data and unstructured data; Set up independent storage paths and access ports for the message queue components and file cache components respectively, and establish the scheduling mapping relationship of the message transmission area and the file transmission area through the security agent program in the isolation zone; Configure a data write buffer pool in the message transmission area to receive encrypted data uploaded from the development test network, and configure a file staging directory in the file transmission area to store file data pulled from the production office network, to realize the partition transfer and isolation of structured and unstructured data.

4. The method of claim 1, wherein, In the source environment, according to the security control parameters, extract the target business data to be synchronized, perform format verification and content encryption on the data to be synchronized, generate encrypted data packets conforming to the transmission constraints and write them into the isolation zone communication channel, comprising: Parse the security control parameters to obtain the access range and encryption algorithm information of the target business, and extract the data to be synchronized from the data storage of the source environment according to the access range of the target business; Perform structure verification and sensitive information scanning on the data to be synchronized, and perform encryption processing according to the encryption algorithm information under the condition of passing the verification and encapsulate meta information to form an encrypted data packet; Write the encrypted data packet into the corresponding transmission area of the isolation zone communication channel and generate a write receipt.

5. The method of claim 4, wherein, The method comprises the following steps: performing structure verification and sensitive information scanning on the to-be-synchronized data, performing encryption processing according to the encryption algorithm information under the condition that the verification is passed, and encapsulating meta-information to form an encrypted data packet, comprising: checking the structure integrity of the to-be-synchronized data based on a preset field rule set, and generating a corresponding structure verification result; when the structure verification result indicates that the verification is passed, calling a sensitive word scanning model to perform semantic comparison and keyword identification on the content of the to-be-synchronized data, and generating a sensitive information scanning result; when the sensitive information scanning result indicates that the verification is passed, calling a corresponding encryption algorithm component according to the encryption algorithm information to perform encryption processing on the to-be-synchronized data, and generating an encrypted data body; 6. The method of claim 1, wherein, the encrypted data body, the corresponding encryption algorithm identifier, the data digest, the timestamp and the transmission number are collectively encapsulated as an encrypted data packet. In the target environment, the encrypted data packet is read from the isolation zone communication channel according to the security control parameter, the identity authentication and content decryption of the encrypted data packet are performed, the synchronization data used for business update is obtained, and the corresponding receipt information is fed back to the isolation zone communication channel, comprising: determining the access permission of the target environment to the isolation zone communication channel based on the security control parameter, and reading the encrypted data packet with the corresponding identifier from the isolation zone communication channel; performing identity authentication on the encrypted data packet, and performing content decryption according to the encryption algorithm information indicated in the security control parameter after the verification is passed, to generate synchronization data; 7. The method of claim 6, wherein, generating receipt information according to the synchronization data, wherein the receipt information contains reception state and decryption state identifier, and feeding back the receipt information to the isolation zone communication channel for updating the synchronization state. performing identity authentication on the encrypted data packet, and performing content decryption according to the encryption algorithm information indicated in the security control parameter after the verification is passed, to generate synchronization data, comprising: calling the verification rule of the isolation zone communication channel based on the security control parameter, and matching and verifying the identity information attached in the encrypted data packet; when the matching verification result indicates that the verification is passed, loading the corresponding decryption key according to the encryption algorithm information recorded in the security control parameter, and performing decryption operation on the encrypted data packet; 8. The method of claim 1, wherein, generating synchronization data after the decryption operation is completed, and writing the synchronization data into the business processing module of the target environment, and returning the state information of the decryption completion to the isolation zone communication channel for updating the synchronization record. The isolation zone communication channel transmits the synchronization data to the target business process based on the receipt information, comprising: parsing the receipt information in the isolation zone communication channel to confirm the reception state and decryption state of the corresponding encrypted data packet; when the receipt information indicates that the reception and decryption are both completed, reading the synchronization data from the target environment cache area and triggering the data distribution process; writing the synchronization data into the input interface of the target business process according to the preset business mapping relationship, and generating a transmission confirmation record after the writing is completed; 9. The method of claim 1, wherein, returning the transmission confirmation record to the source environment to update the synchronization state. The method further comprises: establishing an account mechanism in the isolation zone communication channel, and generating data details by any environment in a preset time period and sending the data details to another environment through the isolation zone communication channel; the receiver performs field-level comparison according to the data details and local synchronization data, and generates an account result; When the reconciliation result indicates that there is inconsistency in the data, an exception record is generated and written to the exception queue of the quarantine communication channel, and a mail or message notification is triggered to prompt the data synchronization exception.

10. The method of claim 1, wherein, The method further comprises: A heartbeat mechanism is established in the quarantine communication channel, and at a preset time interval, one party initiates a heartbeat request through the quarantine communication channel, and the other party generates a heartbeat response after receiving and returns to the initiating party; When the initiating party receives the heartbeat response within a specified time, the synchronization state is updated to normal, and in the case where no response is received, a timeout alarm is generated and a synchronization exception prompt is sent through a preset notification channel.

11. A quarantine-based data synchronization system, comprising: The system comprises: A channel construction unit is configured to establish a quarantine communication channel based on the development test network and the production office network, and generate security control parameters for identifying transmission constraints as a channel entrance for cross-environment data interaction; An encryption unit is configured to extract the to-be-synchronized data of the target business in the source environment according to the security control parameters, perform format verification and content encryption on the to-be-synchronized data, generate an encrypted data packet that meets the transmission constraints, and write it to the quarantine communication channel; A decryption unit is configured to read the encrypted data packet from the quarantine communication channel according to the security control parameters in the target environment, perform identity authentication and content decryption on the encrypted data packet, obtain synchronization data for business update, and generate corresponding receipt information feedback to the quarantine communication channel; A synchronization unit is configured to transfer the synchronization data to the target business process based on the receipt information in the quarantine communication channel.

12. A processor, comprising: The computer program is configured to implement the quarantine-based data synchronization method according to any one of claims 1-10.

13. A machine-readable storage medium having stored thereon instructions, the instructions being executable by a machine to cause the machine to: The computer program is configured to implement the quarantine-based data synchronization method according to any one of claims 1-10.

14. A computer program product comprising a computer program, characterized in that, The computer program is configured to implement the quarantine-based data synchronization method according to any one of claims 1-10.

Images