File transmission control method, system and equipment based on external memory

Abstract

The invention relates to the technical field of data transmission, and provides a file transmission control method, system and device based on an external memory, and the system comprises a service platform, and a transmission dedicated terminal, a transmission dedicated server and a file cache server which are arranged in a security control area; the service platform provides the approved service work order information to a transmission dedicated server, wherein the service work order information comprises a first file directory bound with the work order identifier and a transmission operation type; the transmission dedicated terminal executes security detection on the mounted external memory; the transmission dedicated server identifies the information sink and the information source according to the transmission operation type after the external memory passes the security detection, creates a second file directory bound with the work order identifier in the information sink, reads the file from the first file directory of the information source, and transmits the file to the second file directory of the information sink; and the file cache server is used as an information sink or an information source. According to the embodiment of the invention, the security and transmission efficiency of data transmission between the external memory and the bank system can be improved.

Description

Technical Field

[0001] This application relates to the field of data transmission technology, and in particular to a file transfer control method, system and device based on external storage. Background Technology

[0002] In scenarios where operators copy data into or out of the bank's system using external storage devices (such as USB flash drives), authorized operators can insert the USB flash drive or other external storage device into their terminals and then manually perform the data copying or extraction operations according to established procedures. These procedures might include, for example, running antivirus software to perform a security scan on the USB flash drive, logging into an FTP transfer tool after confirming security, and then using the FTP transfer tool to copy data in or out. However, this process is not only cumbersome and inefficient in data transfer, but also prone to data security risks due to misoperation, omissions, or malicious actions. Summary of the Invention

[0003] The purpose of this application is to provide a file transfer control method, system, and device based on external storage, so as to improve the security and efficiency of data transfer between external storage and the banking system.

[0004] To achieve the above objectives, on the one hand, embodiments of this application provide a file transfer control system based on external storage, including a service platform and a dedicated transfer terminal, a dedicated transfer server, and a file cache server located in a secure control zone;

[0005] The service platform is used to provide the approved service work order information to the dedicated transmission server. The service work order information includes a first file directory and a transmission operation type bound to the work order identifier.

[0006] The dedicated transmission terminal is used to perform security checks on the mounted external storage device;

[0007] The dedicated transmission server is used to identify the destination and source of information based on the transmission operation type bound to the work order identifier after the external storage passes the security detection; create a second file directory bound to the work order identifier in the destination; read files from the first file directory bound to the work order identifier in the source; and transmit them to the second file directory bound to the work order identifier in the destination.

[0008] The file caching server is used as a destination or source of information.

[0009] In the file transfer control system of this application embodiment, the dedicated transfer terminal is configured with a first script; the first script is used to: periodically detect whether an external storage device is mounted, call a security protection program to perform security detection on the mounted external storage device, and report the detection result to the dedicated transfer server.

[0010] In the file transfer control system of this application embodiment, the timed detection of whether an external storage device is mounted includes:

[0011] Periodically check the number of file systems to determine if there is external storage mounted.

[0012] In the file transfer control system of this application embodiment, determining the destination and source of information based on the transfer operation type bound to the work order identifier includes:

[0013] If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the destination and the external storage is identified as the source; or,

[0014] If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the information source, and the external storage is identified as the information destination.

[0015] In the file transfer control system of this application embodiment, the dedicated transfer terminal is further configured with a second script; the step of reading a file from the first file directory of the source bound to the work order identifier and transferring it to the second file directory of the destination bound to the work order identifier includes:

[0016] After the external storage device passes the security check, if the file cache server is the destination and the external storage device is the source, the dedicated transmission server calls the second script to execute the following steps:

[0017] Determine whether a first file directory bound to the work order identifier exists in the external storage;

[0018] If the external storage device contains a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier in the external storage device.

[0019] Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status;

[0020] If the file to be transferred is in a successful transfer status in the transfer status table, then the file to be transferred is reread from the first file directory of the external storage that is bound to the work order identifier.

[0021] If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory of the file cache server that is bound to the work order identifier, and the transfer status table is updated.

[0022] In the file transfer control system of this application embodiment, reading a file from the file directory and transferring it to the second file directory of the destination that is bound to the work order identifier includes:

[0023] After the external storage device passes the security check, if the external storage device is the destination and the file cache server is the source, the dedicated transmission server calls the second script to execute the following steps:

[0024] Determine whether a first file directory bound to the work order identifier exists in the file cache server;

[0025] If the file cache server has a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier on the file cache server.

[0026] Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status;

[0027] If the file to be transmitted is in a successful transmission status in the transmission status table, then the file to be transmitted is reread from the first file directory of the file cache server that is bound to the work order identifier.

[0028] If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory on the external storage that is bound to the work order identifier, and the transfer status table is updated.

[0029] In the file transfer control system of this application embodiment, the dedicated transfer terminal is a physical machine; the dedicated transfer server is a virtual machine.

[0030] On the other hand, embodiments of this application also provide a file transfer control method based on external storage, including:

[0031] Receive approved service order information from the service platform; the service order information includes a first file directory and a transmission operation type bound to the service order identifier.

[0032] In response to receiving a detection result from the dedicated transmission terminal, the sink and source are identified according to the transmission operation type bound to the work order identifier; the detection result includes the external storage mounted on the dedicated transmission terminal passing the security detection.

[0033] Create a second file directory in the destination that is bound to the work order identifier;

[0034] The file is read from the first file directory of the source that is bound to the work order identifier, and then transferred to the second file directory of the destination that is bound to the work order identifier.

[0035] In the file transfer control method of this application embodiment, determining the destination and source of information based on the transfer operation type bound to the work order identifier includes:

[0036] If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the destination, and the external storage is identified as the source; or,

[0037] If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the information source, and the external storage is identified as the information destination.

[0038] In the file transfer control method of this application embodiment, when the file cache server is the destination and the external storage is the source, the step of reading a file from the first file directory of the source bound to the work order identifier and transferring it to the second file directory of the destination bound to the work order identifier includes:

[0039] Determine whether a first file directory bound to the work order identifier exists in the external storage;

[0040] If the external storage device contains a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier in the external storage device.

[0041] Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status;

[0042] If the file to be transferred is in a successful transfer status in the transfer status table, then the file to be transferred is reread from the first file directory of the external storage that is bound to the work order identifier.

[0043] If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory of the file cache server that is bound to the work order identifier, and the transfer status table is updated.

[0044] In the file transfer control method of this application embodiment, when the external storage is the destination and the file cache server is the source, the step of reading a file from the first file directory of the source bound to the work order identifier and transferring it to the second file directory of the destination bound to the work order identifier includes:

[0045] Determine whether a first file directory bound to the work order identifier exists in the file cache server;

[0046] If the file cache server has a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier on the file cache server.

[0047] Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status;

[0048] If the file to be transmitted is in a successful transmission status in the transmission status table, then the file to be transmitted is reread from the first file directory of the file cache server that is bound to the work order identifier.

[0049] If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory on the external storage that is bound to the work order identifier, and the transfer status table is updated.

[0050] On the other hand, embodiments of this application also provide a computer device, including a memory, a processor, and a computer program stored in the memory, wherein the computer program, when run by the processor, executes instructions of the above-described method.

[0051] On the other hand, embodiments of this application also provide a computer storage medium storing a computer program thereon, wherein the computer program, when run by the processor of a computer device, executes instructions for the above-described method.

[0052] On the other hand, embodiments of this application also provide a computer program product, which includes a computer program that, when run by the processor of a computer device, executes instructions for the above-described method.

[0053] As can be seen from the technical solutions provided in the embodiments of this application above, compared with the prior art, the embodiments of this application establish a strong one-to-one correspondence between file directories and service work orders (the work order identifier is bound to the file directory and the transmission operation type), so that only files under the file directory bound to the service work order can be transmitted, and the transmission must be carried out according to the transmission operation type bound to the service work order (such as copy in or copy out), thereby preventing authorized users from using their authorized identity to transmit other files, thus improving the security of data transmission between external storage and the bank system; moreover, since the dedicated transmission terminal, dedicated transmission server and file cache server are all set up in a secure control area, and the dedicated transmission terminal can automatically perform security checks on the mounted external storage (avoiding the risk of human omission or malicious failure to perform security checks), the security of data transmission between external storage and the bank system is further improved. Furthermore, compared to manual data transmission operations in the prior art, the embodiments of this application can automatically perform security checks on the mounted external storage device. After the check passes, the device can automatically identify the destination and source of the data based on the transmission operation type bound to the work order identifier, automatically create a second file directory in the destination, and then automatically read the file from the first file directory of the source and transmit it to the second file directory of the destination. This automates the transmission process and significantly improves the transmission efficiency of data transmission between the external storage device and the banking system. Attached Figure Description

[0054] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. In the drawings:

[0055] Figure 1 The following are schematic diagrams illustrating the structure of a file transfer control system based on external storage in some embodiments of this application;

[0056] Figure 2 The diagram illustrates a flowchart of reading a file from a first file directory on external storage bound to a work order identifier and transferring it to a second file directory on a file cache server bound to a work order identifier, according to some embodiments of this application.

[0057] Figure 3 The flowchart illustrates a process in some embodiments of this application of reading a file from a first file directory on a file cache server that is bound to a work order identifier and transferring it to a second file directory on external storage that is bound to a work order identifier.

[0058] Figure 4The flowcharts of file transfer control methods based on external storage in some embodiments of this application are shown;

[0059] Figure 5 A structural block diagram of a computer device in some embodiments of this application is shown.

[0060] [Explanation of Labels in the Attached Image]

[0061] 10. Service Platform;

[0062] 20. Dedicated transmission terminal;

[0063] 30. Dedicated transmission server;

[0064] 40. File caching server;

[0065] 50. External storage device;

[0066] 502. Computer equipment;

[0067] 504, Processor;

[0068] 506. Memory;

[0069] 508. Drive mechanism;

[0070] 510. Input / output interface;

[0071] 512. Input devices;

[0072] 514. Output devices;

[0073] 516. Presentation equipment;

[0074] 518. Graphical User Interface;

[0075] 520. Network interface;

[0076] 522. Communication link;

[0077] 524. Communication bus. Detailed Implementation

[0078] To enable those skilled in the art to better understand the technical solutions in this application, the technical solutions in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of this application.

[0079] It should be noted that in the embodiments of this application, the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved are all information and data authorized and agreed upon by the user and fully authorized by all parties. That is, the acquisition, transmission, storage, use, and processing of data in the technical solution of this application all comply with the relevant provisions of national laws and regulations.

[0080] Figure 1 The diagram illustrates a file transfer control system based on external storage according to some embodiments of this application. The system includes a service platform 10 and a dedicated transfer terminal 20, a dedicated transfer server 30, and a file cache server 40, all located within a secure control zone. The service platform 10 provides approved service order information to the dedicated transfer server 30. The service order information includes a first file directory bound to a service order identifier and a transfer operation type. The dedicated transfer terminal 20 performs security checks on the mounted external storage device 50. After the external storage device 50 passes the security check, the dedicated transfer server 30 identifies the destination and source of the data based on the transfer operation type bound to the service order identifier. It creates a second file directory bound to the service order identifier in the destination, reads files from the first file directory bound to the service order identifier in the source, and transfers them to the second file directory bound to the service order identifier in the destination. The file cache server 40 acts as either a destination or a source. The service platform 10, dedicated transfer terminal 20, dedicated transfer server 30, and file cache server 40 can form part of a banking system.

[0081] Thus, compared with the prior art, this application embodiment establishes a strong one-to-one association between file directories and service work orders (the work order identifier is bound to the file directory and the transmission operation type). This ensures that only files in the file directory bound to the service work order can be transmitted, and the transmission must be performed according to the transmission operation type bound to the service work order (such as copy in or copy out). This prevents authorized users from using their authorized identities to transmit other files, thereby improving the security of data transmission between the external storage and the bank system. Furthermore, since the dedicated transmission terminal, dedicated transmission server, and file cache server are all located within a secure control zone, and the dedicated transmission terminal can automatically perform security checks on the mounted external storage (avoiding the risk of human omissions or malicious failure to perform security checks), the security of data transmission between the external storage and the bank system is further improved. Furthermore, compared to manual data transmission operations in the prior art, the embodiments of this application can automatically perform security checks on the mounted external storage device. After the check passes, the device can automatically identify the destination and source of the data based on the transmission operation type bound to the work order identifier, automatically create a second file directory in the destination, and then automatically read the file from the first file directory of the source and transmit it to the second file directory of the destination. This automates the transmission process and significantly improves the transmission efficiency of data transmission between the external storage device and the banking system.

[0082] In some embodiments of this application, the service platform can receive service ticket requests initiated by users (service ticket requests aiming to obtain permission for file transfer between external storage and the banking system), and invoke the workflow engine to process the service ticket request. Once the service ticket request is approved, the approved service ticket information can be provided to the dedicated transmission server. The service ticket information may include a ticket identifier (e.g., ticket number), transmission operation type (e.g., copy in or copy out), file directory, etc. The file directory may include metadata such as file name, file size, timestamp (creation / modification / access time), permission information, file owner / user group, and storage location. In some embodiments of this application, the service platform, as the front-end interactive interface of the entire system, can also receive the data transmission result returned by the dedicated transmission server and automatically close the current service ticket processing. Subsequently, the data transmission result can be displayed to the user based on the user's request.

[0083] In some embodiments of this application, the dedicated transmission terminal can be a dedicated physical machine for transmission. This dedicated transmission terminal is configured with a dedicated transmission interface (e.g., a USB interface) and a mount check script (first script); and it is not configured with other input / output devices such as a monitor, keyboard, and mouse to minimize manual operation permissions and risks. The mount check script can be used to periodically check whether external storage is mounted on the dedicated transmission interface. If external storage is mounted, a security protection program is invoked to perform a security check on the mounted external storage, and the check result is reported to the dedicated transmission server. The security protection program may include antivirus and / or anti-Trojan programs. In other embodiments of this application, the dedicated transmission terminal can also enable a udev daemon process to prevent abnormal mount points. In other embodiments of this application, the mount check script can also be used to perform compliance checks on the mounted external storage. The compliance check strategy can be customized; for example, to ensure the compliance of the external storage name, it can identify whether the external storage name contains illegal characters (e.g., Chinese characters, spaces, etc.).

[0084] In some embodiments of this application, the mount check script of the dedicated transmission terminal can periodically determine whether external storage is mounted by counting the number of file systems. If the number of file systems increases, it indicates that external storage is currently mounted on the dedicated transmission interface; otherwise, it can be assumed that no external storage is currently mounted on the dedicated interface. In this way, it is possible to identify whether external storage is mounted on the dedicated transmission interface in a simple and efficient manner.

[0085] In some embodiments of this application, the dedicated transmission server can be a virtual machine (such as a Red Hat virtual machine) running in a specific virtual environment dedicated to data transmission, and the dedicated transmission server has a drone interaction interface.

[0086] In some embodiments of this application, the file cache server is a server that can temporarily store files, specifically a virtual machine running in a specific virtual environment (such as a Red Hat virtual machine). The file cache server can periodically scan its internal file directory, mark service tickets that have timed out and have not been completed, and can automatically clean up historical data that has reached the end of its lifecycle.

[0087] In some embodiments of this application, the external storage device can be a portable electronic device, such as a USB flash drive, external hard drive, tablet computer, laptop computer, or smart wearable device (such as a smart bracelet, smartwatch, smart glasses, or smart helmet).

[0088] In some embodiments of this application, the security control zone is a physically isolated area equipped with real-time security monitoring and emergency response equipment (such as security access control), and cross-regional access and data flow of devices located in the security control zone (such as dedicated transmission terminals, dedicated transmission servers, etc.) are restricted.

[0089] In some embodiments of this application, determining the destination and source of information based on the transmission operation type bound to the work order identifier may include:

[0090] (1) If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the sink and the external storage is identified as the source.

[0091] In some embodiments of this application, the copy-in or copy-out operation is relative to the file cache server. If the transmission operation type bound to the work order identifier is a copy-in operation, it indicates that the task of this service work order is to transfer a file from the external storage to the file cache server; if the transmission operation type bound to the work order identifier is a copy-out operation, it indicates that the task of this service work order is to transfer a file from the file cache server to the external storage.

[0092] In some embodiments of this application, binding a file directory to a work order identifier can mean naming the file directory with the work order identifier or carrying the work order identifier in the file directory. For example, in an exemplary embodiment, if the work order number of a service work order is 20241224001, then when creating a file directory at the destination, a file directory named 20241224001 can be created.

[0093] (2) If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the source and the external storage is identified as the destination.

[0094] In some embodiments of this application, binding the transmission operation type with the work order identifier can mean that the transmission operation type carries a work order identifier. For example, in an exemplary embodiment, if the work order number of a service work order is 20241224001, the transmission operation type can be a key-value pair (20241224001, copy-in) or (20241224001, copy-out).

[0095] In some embodiments of this application, the dedicated transmission terminal is further configured with a data transmission script (second script); the step of reading a file from the first file directory of the source bound to the work order identifier and transmitting it to the second file directory of the destination bound to the work order identifier may include: after the external storage passes the security check, if the file cache server is the destination and the external storage is the source, the dedicated transmission server may call the data transmission script to execute, as follows: Figure 2 The steps shown are as follows:

[0096] Step 201: Determine whether a first file directory bound to the work order identifier exists in the external storage.

[0097] If the external storage device contains a first file directory bound to the work order identifier, then proceed to step 202; otherwise, the process ends.

[0098] In some embodiments of this application, the first file directory refers to the file directory where the file to be transmitted is located in the information source.

[0099] Step 202: Read the file to be transferred from the first file directory of the external storage that is bound to the work order identifier.

[0100] In some embodiments of this application, a file to be transferred can be read sequentially or randomly from a first file directory of the external storage that is bound to the work order identifier.

[0101] Step 203: Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status.

[0102] If the file to be transferred is not in a successful state in the transfer status table (e.g., the state is empty or the state is unprocessed), then proceed to step 204; otherwise, proceed to step 205. If the file to be transferred is in a successful state in the transfer status table, it indicates that the file to be transferred has been transferred to the second file directory of the file cache server and does not need to be transferred again.

[0103] Step 204: Call the sendfile tool to transfer the file to be transferred to the second file directory of the file cache server that is bound to the work order identifier, and update the transfer status table.

[0104] In some embodiments of this application, the second file directory refers to the file directory where the file to be transmitted will fall in the destination.

[0105] In some embodiments of this application, the sendfile tool transfers files based on kernel-provided system calls. By reducing the number of data copies between user space and kernel space, it enables direct file data transfer to the network socket, resulting in high security and reduced memory copying and context switching. Furthermore, when the sendfile tool is invoked to transfer files, the bastion host can automatically retrieve the username and password (without requiring user input) to ensure that the username and password are not known to the user of the service ticket.

[0106] Step 205: Determine whether there are any unprocessed files to be transferred in the first file directory.

[0107] If there are unprocessed files to be transferred in the first file directory, proceed to step 202 to reread another unprocessed file to be transferred from the first file directory bound to the work order identifier in the external storage. If there are no unprocessed files to be transferred in the first file directory, the process ends.

[0108] In some embodiments of this application, in a scenario where the dedicated transmission terminal is configured with a data transmission script, the step of reading a file from the first file directory of the source bound to the work order identifier and transmitting it to the second file directory of the destination bound to the work order identifier may include: after the external storage passes the security check, if the external storage is the destination and the file cache server is the source, the dedicated transmission server may call the data transmission script to execute, as follows: Figure 3 The steps shown are as follows:

[0109] Step 301: Determine whether a first file directory bound to the work order identifier exists in the file cache server.

[0110] If the file cache server has a first file directory bound to the work order identifier, then proceed to step 302; otherwise, end.

[0111] Step 302: Read the file to be transferred from the first file directory of the file cache server that is bound to the work order identifier.

[0112] Step 303: Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status.

[0113] If the file to be transmitted is not in a successful transmission status in the transmission status table, then proceed to step 304; otherwise, proceed to step 305.

[0114] Step 304: Call the sendfile tool to transfer the file to be transferred to the second file directory of the external storage that is bound to the work order identifier, and update the transfer status table.

[0115] Step 305: Determine whether there are any unprocessed files to be transferred in the first file directory.

[0116] If there are unprocessed files to be transferred in the first file directory, proceed to step 302 to reread another unprocessed file to be transferred from the first file directory of the file cache server that is bound to the work order identifier. If there are no unprocessed files to be transferred in the first file directory, the process ends.

[0117] In some embodiments of this application, the dedicated transmission server can also record information such as the timestamp of file transmission, operator, and file name, and supports minute-level data retention period management to facilitate tracing, tracking, or viewing.

[0118] For ease of description, the above devices are described separately by function as various units. Of course, in implementing this application, the functions of each unit can be implemented in one or more software and / or hardware.

[0119] Based on the file transfer control system of the above embodiments, this application also provides a file transfer control method based on external storage, which can be applied to the above-mentioned dedicated transfer server side. (See reference...) Figure 4 As shown, in some embodiments of this application, the file transfer control method based on external storage may include the following steps:

[0120] Step 401: Receive approved service work order information from the service platform; the service work order information includes a first file directory and a transmission operation type bound to the work order identifier.

[0121] Step 402: In response to receiving the detection result from the dedicated transmission terminal, identify the sink and source of the information according to the transmission operation type bound to the work order identifier; the detection result includes the external storage mounted on the dedicated transmission terminal passing the security detection.

[0122] Step 403: Create a second file directory in the destination that is bound to the work order identifier.

[0123] Step 404: Read the file from the first file directory of the information source that is bound to the work order identifier, and transfer it to the second file directory of the information sink that is bound to the work order identifier.

[0124] Compared to existing technologies, this application's embodiments establish a strong one-to-one association between file directories and service work orders (work order identifiers are bound to file directories and transmission operation types). This ensures that only files within the file directories bound to the service work order can be transmitted, and transmission must be performed according to the transmission operation type (e.g., copy in or copy out) bound to the service work order. This prevents authorized users from using their authorized identities to transmit other files, thereby improving the security of data transmission between the external storage device and the bank system. Furthermore, compared to manual data transmission operations in existing technologies, this application's embodiments can automatically perform security checks on the mounted external storage device. After passing the check, it automatically identifies the destination and source based on the transmission operation type bound to the work order identifier, automatically creates a second file directory in the destination, and then automatically reads files from the first file directory of the source and transmits them to the second file directory of the destination. This automates the transmission process and significantly improves the transmission efficiency between the external storage device and the bank system.

[0125] In some embodiments of the file transfer control method of this application, determining the destination and source of information based on the transfer operation type bound to the work order identifier includes:

[0126] If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the destination, and the external storage is identified as the source; or,

[0127] If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the information source, and the external storage is identified as the information destination.

[0128] In some embodiments of the file transfer control method of this application, when the file cache server is the destination and the external storage is the source, the step of reading a file from the first file directory of the source bound to the work order identifier and transferring it to the second file directory of the destination bound to the work order identifier includes:

[0129] Determine whether a first file directory bound to the work order identifier exists in the external storage;

[0130] If the external storage device contains a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier in the external storage device.

[0131] Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status;

[0132] If the file to be transferred is in a successful transfer status in the transfer status table, then the file to be transferred is reread from the first file directory of the external storage that is bound to the work order identifier.

[0133] If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory of the file cache server that is bound to the work order identifier, and the transfer status table is updated.

[0134] In some embodiments of the file transfer control method of this application, when the external storage is the destination and the file cache server is the source, the step of reading a file from the first file directory of the source bound to the work order identifier and transferring it to the second file directory of the destination bound to the work order identifier includes:

[0135] Determine whether a first file directory bound to the work order identifier exists in the file cache server;

[0136] If the file cache server has a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier on the file cache server.

[0137] Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status;

[0138] If the file to be transmitted is in a successful transmission status in the transmission status table, then the file to be transmitted is reread from the first file directory of the file cache server that is bound to the work order identifier.

[0139] If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory on the external storage that is bound to the work order identifier, and the transfer status table is updated.

[0140] Although the process described above includes multiple operations that occur in a specific order, it should be clearly understood that these processes may include more or fewer operations that can be executed sequentially or in parallel (e.g., using parallel processors or a multithreaded environment).

[0141] Embodiments of this application also provide a computer device. For example... Figure 5As shown, in some embodiments of this application, the computer device 502 may include one or more processors 504, such as one or more central processing units (CPUs) or graphics processing units (GPUs), each of which may implement one or more hardware threads. The computer device 502 may also include any memory 506 for storing any kind of information such as code, settings, data, etc. In one specific embodiment, a computer program is stored on the memory 506 and can run on the processor 504. When the computer program is run by the processor 504, it can execute instructions of the file transfer control method described in any of the above embodiments. Non-limitingly, for example, the memory 506 may include any type of RAM, any type of ROM, flash memory, hard disk, optical disk, etc. More generally, any memory can use any technology to store information. Further, any memory can provide volatile or non-volatile retention of information. Further, any memory can represent a fixed or removable component of the computer device 502. In one case, when the processor 504 executes associated instructions stored in any memory or combination of memories, the computer device 502 can perform any operation of the associated instructions. Computer device 502 also includes one or more drive mechanisms 508 for interacting with any memory, such as hard disk drive mechanism, optical disk drive mechanism, etc.

[0142] Computer device 502 may also include an input / output interface 510 (I / O) for receiving various inputs (via input device 512) and providing various outputs (via output device 514). A specific output mechanism may include a presentation device 516 and an associated graphical user interface 518 (GUI). In other embodiments, the input / output interface 510 (I / O), input device 512, and output device 514 may be omitted, and the device may function solely as a computer device within a network. Computer device 502 may also include one or more network interfaces 520 for exchanging data with other devices via one or more communication links 522. One or more communication buses 524 couple the components described above together.

[0143] Communication link 522 can be implemented in any way, such as via a local area network, a wide area network (e.g., the Internet), a point-to-point connection, or any combination thereof. Communication link 522 may include any combination of hardwired links, wireless links, routers, gateway functions, name servers, etc., governed by any protocol or combination of protocols.

[0144] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), computer-readable storage media, and computer program products according to some embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processor to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processor, create a machine for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0145] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processor to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0146] These computer program instructions may also be loaded onto a computer or other programmable data processor, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable device for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0147] In a typical configuration, a computer device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0148] Memory may include non-persistent storage in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0149] Computer-readable media, including both permanent and non-permanent, removable and non-removable media, can store information using any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by computer equipment. As defined in this application, computer-readable media does not include transient media, such as modulated data signals and carrier waves.

[0150] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, embodiments of this application can take the form of entirely hardware embodiments, entirely software embodiments, or embodiments combining software and hardware aspects. Furthermore, embodiments of this application can take the form of computer program products implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0151] The embodiments of this application can be described in the general context of computer-executable instructions, such as program modules, that are executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc., that perform a specific task or implement a specific abstract data type. The embodiments of this application can also be practiced in distributed computing environments where tasks are performed by remote processors connected via a communication network. In distributed computing environments, program modules can reside in local and remote computer storage media, including storage devices.

[0152] It should also be understood that, in the embodiments of this application, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. Additionally, the character " / " in this document generally indicates that the preceding and following related objects have an "or" relationship.

[0153] The various embodiments in this application are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0154] In the description of this application, the terms "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., refer to specific features, structures, materials, or characteristics described in connection with that embodiment or example, which are included in at least one embodiment or example of the embodiments of this application. In this application, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples. Furthermore, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this application, as well as the features of different embodiments or examples.

[0155] The above description is merely an embodiment of this application and is not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A file transfer control system based on external storage, characterized in that, This includes the service platform, as well as dedicated transmission terminals, dedicated transmission servers, and file cache servers located within the security control zone; The service platform is used to provide the approved service work order information to the dedicated transmission server. The service work order information includes a first file directory and a transmission operation type bound to the work order identifier. The dedicated transmission terminal is used to perform security checks on the mounted external storage device; The dedicated transmission server is used to identify the destination and source of information based on the transmission operation type bound to the work order identifier after the external storage passes the security detection; create a second file directory bound to the work order identifier in the destination; read files from the first file directory bound to the work order identifier in the source; and transmit them to the second file directory bound to the work order identifier in the destination. The file caching server is used as a destination or source of information.

2. The file transfer control system as described in claim 1, characterized in that, The dedicated transmission terminal is configured with a first script; the first script is used to: periodically detect whether an external storage device is mounted, call a security protection program to perform a security check on the mounted external storage device, and report the check result to the dedicated transmission server.

3. The file transfer control system as described in claim 2, characterized in that, The periodic detection of whether an external storage device is mounted includes: Periodically check the number of file systems to determine if there is external storage mounted.

4. The file transfer control system as described in claim 2, characterized in that, The step of determining the destination and source of information based on the transmission operation type bound to the work order identifier includes: If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the destination and the external storage is identified as the source; or, If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the information source, and the external storage is identified as the information destination.

5. The file transfer control system as described in claim 1, characterized in that, The dedicated transmission terminal is also configured with a second script; the step of reading a file from the first file directory of the information source that is bound to the work order identifier and transmitting it to the second file directory of the information sink that is bound to the work order identifier includes: After the external storage device passes the security check, if the file cache server is the destination and the external storage device is the source, the dedicated transmission server calls the second script to execute the following steps: Determine whether a first file directory bound to the work order identifier exists in the external storage; If the external storage device contains a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier in the external storage device. Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status; If the file to be transferred is in a successful transfer status in the transfer status table, then the file to be transferred is reread from the first file directory of the external storage that is bound to the work order identifier. If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory of the file cache server that is bound to the work order identifier, and the transfer status table is updated.

6. The file transfer control system as described in claim 1, characterized in that, The dedicated transmission terminal is also configured with a second script; the step of reading a file from the first file directory of the information source that is bound to the work order identifier and transmitting it to the second file directory of the information sink that is bound to the work order identifier includes: After the external storage device passes the security check, if the external storage device is the destination and the file cache server is the source, the dedicated transmission server calls the second script to execute the following steps: Determine whether a first file directory bound to the work order identifier exists in the file cache server; If the file cache server has a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier on the file cache server. Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status; If the file to be transmitted is in a successful transmission status in the transmission status table, then the file to be transmitted is reread from the first file directory of the file cache server that is bound to the work order identifier. If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory on the external storage that is bound to the work order identifier, and the transfer status table is updated.

7. The file transfer control system as described in claim 1, characterized in that, The dedicated transmission terminal is a physical machine; the dedicated transmission server is a virtual machine.

8. A file transfer control method based on external storage, characterized in that, include: Receive approved service order information from the service platform; The service order information includes a first file directory and a transmission operation type bound to the service order identifier; In response to receiving a detection result from the dedicated transmission terminal, the sink and source are identified according to the transmission operation type bound to the work order identifier; the detection result includes the external storage mounted on the dedicated transmission terminal passing the security detection. Create a second file directory in the destination that is bound to the work order identifier; The file is read from the first file directory of the source that is bound to the work order identifier, and then transferred to the second file directory of the destination that is bound to the work order identifier.

9. The file transfer control method as described in claim 8, characterized in that, The step of determining the destination and source of information based on the transmission operation type bound to the work order identifier includes: If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the destination, and the external storage is identified as the source; or, If the transmission operation type bound to the work order identifier is a copy operation, then the file cache server is identified as the information source, and the external storage is identified as the information destination.

10. The file transfer control method as described in claim 8, characterized in that, When the file cache server is the destination and the external storage is the source, the step of reading a file from the first file directory of the source bound to the work order identifier and transferring it to the second file directory of the destination bound to the work order identifier includes: Determine whether a first file directory bound to the work order identifier exists in the external storage; If the external storage device contains a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier in the external storage device. Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status; If the file to be transferred is in a successful transfer status in the transfer status table, then the file to be transferred is reread from the first file directory of the external storage that is bound to the work order identifier. If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory of the file cache server that is bound to the work order identifier, and the transfer status table is updated.

11. The file transfer control method as described in claim 8, characterized in that, When the external storage is the destination and the file cache server is the source, the step of reading a file from the first file directory of the source bound to the work order identifier and transferring it to the second file directory of the destination bound to the work order identifier includes: Determine whether a first file directory bound to the work order identifier exists in the file cache server; If the file cache server has a first file directory bound to the work order identifier, then the file to be transferred is read from the first file directory bound to the work order identifier on the file cache server. Determine whether the transmission status of the file to be transmitted in the transmission status table is a successful status; If the file to be transmitted is in a successful transmission status in the transmission status table, then the file to be transmitted is reread from the first file directory of the file cache server that is bound to the work order identifier. If the file to be transferred is not in a successful transfer status in the transfer status table, the sendfile tool is invoked to transfer the file to the second file directory on the external storage that is bound to the work order identifier, and the transfer status table is updated.

12. A computer device comprising a memory, a processor, and a computer program stored in the memory, characterized in that, When the computer program is run by the processor, it executes the instructions of the method according to any one of claims 8-11.

13. A computer storage medium having a computer program stored thereon, characterized in that, When the computer program is run by the processor of the computer device, it executes the instructions of the method according to any one of claims 8-11.

14. A computer program product, characterized in that, The computer program product includes a computer program that, when run by the processor of a computer device, executes instructions according to any one of claims 8-11.

Images