Data transmission method and device between security domains, storage medium and electronic equipment

Abstract

The invention discloses a data transmission method and device between security domains, a storage medium and electronic equipment. Relates to the field of data transmission, and the method comprises: in a front-end application of a first security domain, in response to an interaction request triggered by a user, generating a request message containing a unique identifier, and issuing the request message to a message queue service in the first security domain, the message queue service being used for a large model processing service in a second security domain, consuming the request message according to a pre-configured security access strategy, and writing response data of the large model into a shared cache service of a first security domain; and initiating a query request to the shared cache service to obtain response data corresponding to the interaction request from the shared cache service, and displaying the response data to the user through a user interface of the front-end application. The problem that data transmission efficiency is low when data transmission between security domains in a one-way network isolation environment is realized by depending on a manual or semi-automatic off-line ferry mode in the prior art is solved.

Description

Technical Field

[0001] This application relates to the field of data transmission, and more specifically, to a secure inter-domain data transmission method and apparatus, storage medium and electronic device. Background Technology

[0002] Currently, in highly secure environments with strict one-way network isolation constraints (such as prohibiting network segment A from actively accessing network segment B), in order to achieve interaction between front-end applications and back-end large language models, related technologies generally adopt manual or semi-automatic data transfer and offline transmission mechanisms. That is, through physical media or specific relay servers, user request data from network segment A is exported and transmitted to network segment B, processed by the large model, and then the results are sent back. This method is inefficient, has poor real-time interaction capabilities, cannot meet the needs of streaming response, and seriously restricts user experience and application scenarios.

[0003] Currently, there is no effective solution to the problem of low data transmission efficiency in secure inter-domain data transmission in unidirectional network isolation environments that relies on manual or semi-automatic offline transfer methods. Summary of the Invention

[0004] The main objective of this application is to provide a secure inter-domain data transmission method, apparatus, storage medium, and electronic device to solve the problem of low data transmission efficiency in related technologies that rely on manual or semi-automatic offline transfer methods to achieve secure inter-domain data transmission in a one-way network isolation environment.

[0005] To achieve the above objectives, according to one aspect of this application, a method for data transmission between security domains is provided. The method includes: in a front-end application of a first security domain, in response to an interaction request triggered by a user, generating a request message containing a unique identifier, and publishing the request message to a message queue service in the first security domain, wherein the message queue service is used for a large model processing service in a second security domain; consuming the request message according to a pre-configured security access policy; and writing the response data of the large model to a shared cache service in the first security domain, wherein there is unidirectional network isolation between the first and second security domains; initiating a query request to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service; and displaying the response data to the user through the user interface of the front-end application.

[0006] Furthermore, consuming request messages according to a pre-configured security access policy and writing the response data of the large model into the shared cache service of the first security domain includes: obtaining request messages from the message queue service through the unidirectional network channel corresponding to the pre-configured security access policy, and calling the large model interface in the second security domain based on the unique identifier in the request message to obtain the streaming response data output by the large model; dividing the streaming response data into multiple ordered data fragments, and writing the multiple ordered data fragments sequentially into the shared cache service of the first security domain.

[0007] Furthermore, dividing the streaming response data into multiple ordered data fragments and writing the multiple ordered data fragments sequentially into the shared cache service of the first security domain includes: assigning an incrementing sequence number to each data fragment to obtain multiple ordered data fragments; encapsulating the multiple ordered data fragments and a unique identifier into cache key-value pairs, and writing the cache key-value pairs into an ordered set structure in the shared cache service of the first security domain.

[0008] Furthermore, a query request is initiated to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service, and the response data is displayed to the user through the user interface of the front-end application. This includes: initiating a query request to the shared cache service based on a preset time interval to obtain all data fragments associated with a unique identifier and whose sequence number is greater than the currently rendered highest sequence number from the shared cache service; rendering all data fragments on the user interface in real time to display all data fragments to the user through the user interface.

[0009] Furthermore, rendering all data fragments in real time on the user interface includes: sorting all data fragments in ascending order according to their sequence number to obtain a set of data fragments arranged in chronological order; concatenating the contents of each data fragment in the data fragment set sequentially to obtain a continuous text sequence; and incrementally updating the text display area of ​​the user interface with the continuous text sequence.

[0010] Furthermore, before responding to a user-triggered interaction request, the method further includes: determining a security access policy; deploying a message queue service and a shared cache service in a first security domain using service deployment instructions based on the security access policy; and configuring firewall rules for the first security domain using network policy configuration instructions based on the security access policy.

[0011] Furthermore, the method also includes: monitoring the queue backlog of the message queue service, the read / write response latency of the shared cache service, the running status of the large model processing service, and the connectivity of the unidirectional network channel corresponding to the pre-configured security access policy through the monitoring module; triggering a message retransmission policy when the queue backlog is detected to be greater than a first preset threshold or the read / write response latency is detected to be greater than a second preset threshold; and triggering a service reconnection policy when an abnormal running status or connectivity is detected.

[0012] To achieve the above objectives, according to another aspect of this application, a data transmission apparatus between security domains is provided. The apparatus includes: a first processing unit, configured to, in a front-end application of a first security domain, generate a request message containing a unique identifier in response to an interaction request triggered by a user, and publish the request message to a message queue service in the first security domain, wherein the message queue service is used for a large model processing service in a second security domain to consume the request message according to a pre-configured security access policy, and write the response data of the large model to a shared cache service in the first security domain, wherein there is a unidirectional network isolation between the first and second security domains; and a second processing unit, configured to initiate a query request to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service, and display the response data to the user through the user interface of the front-end application.

[0013] Furthermore, the first processing unit includes: a first processing subunit, used to obtain a request message from a message queue service through a unidirectional network channel corresponding to a pre-configured security access policy, and to call the large model interface in the second security domain based on the unique identifier in the request message to obtain the streaming response data output by the large model; and a second processing subunit, used to divide the streaming response data into multiple ordered data fragments and write the multiple ordered data fragments sequentially into the shared cache service of the first security domain.

[0014] Furthermore, the second processing subunit includes: a first processing module, used to assign an incrementing sequence number to each data segment to obtain multiple ordered data segments; and a second processing module, used to encapsulate the multiple ordered data segments and unique identifiers into cache key-value pairs, and write the cache key-value pairs into an ordered set structure in the shared cache service of the first security domain.

[0015] Furthermore, the second processing unit includes: a third processing subunit, used to initiate a query request to the shared cache service based on a preset time interval, so as to obtain all data fragments associated with a unique identifier and whose sequence number is greater than the currently rendered highest sequence number from the shared cache service; and a fourth processing subunit, used to render all data fragments on the user interface in real time, so as to display all data fragments to the user through the user interface.

[0016] Furthermore, the fourth processing subunit includes: a third processing module, used to sort all data segments in ascending order according to their sequence numbers to obtain a set of data segments arranged in chronological order; a fourth processing module, used to sequentially concatenate the contents of each data segment in the data segment set to obtain a continuous text sequence; and a fifth processing module, used to incrementally update the text display area of ​​the user interface with the continuous text sequence.

[0017] Furthermore, the device also includes: a determining unit, configured to determine a secure access policy before responding to an interactive request triggered by a user; a first configuration unit, configured to deploy a message queue service and a shared cache service in a first security domain based on the secure access policy using service deployment instructions; and a second configuration unit, configured to configure firewall rules for the first security domain based on the secure access policy using network policy configuration instructions.

[0018] Furthermore, the device also includes: a third processing unit, used to monitor the queue backlog of the message queue service, the read / write response latency of the shared cache service, the running status of the large model processing service, and the connectivity of the unidirectional network channel corresponding to the pre-configured security access policy through the monitoring module; a fourth processing unit, used to trigger a message retransmission policy when the queue backlog is detected to be greater than a first preset threshold or the read / write response latency is greater than a second preset threshold; and a fifth processing unit, used to trigger a service reconnection policy when an abnormal running status or connectivity is detected.

[0019] According to another aspect of the present invention, an electronic device is also provided, comprising: a memory storing an executable program; and a processor for running the program, wherein the program executes the security domain data transmission method described above during runtime.

[0020] According to another aspect of the present invention, a computer-readable storage medium is also provided, wherein the storage medium stores a program, wherein the program controls the device where the storage medium is located to execute any of the above-described methods for data transmission between security domains.

[0021] In this embodiment, the following steps are employed: In the front-end application of the first security domain, in response to a user-triggered interaction request, a request message containing a unique identifier is generated and published to a message queue service in the first security domain. The message queue service is used for large model processing services in the second security domain. It consumes the request message according to a pre-configured security access policy and writes the response data of the large model to a shared cache service in the first security domain. A one-way network isolation exists between the first and second security domains. A query request is initiated to the shared cache service to obtain the response data corresponding to the interaction request, and the response data is displayed to the user through the user interface of the front-end application. This solves the technical problem of low data transmission efficiency in related technologies that rely on manual or semi-automatic offline ferry methods to achieve data transmission between security domains in a one-way network isolation environment.

[0022] In this solution, a secure data transmission channel is constructed by deploying a message queue service and a shared cache service in the first security domain and leveraging the network feature of the second security domain, which allows unidirectional access to the first security domain. Requests are distributed through the message queue within the first security domain and retrieved by the services in the second security domain according to security policies. Responses are synchronously written back to the shared cache service in the first security domain by the services in the second security domain. This achieves logical synchronization of request and response states and efficient controlled exchange of streaming data, enabling controlled data transfer between security domains and streaming calls to large models. It solves the state synchronization problem under unidirectional secure access constraints and improves data transmission efficiency. Attached Figure Description

[0023] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:

[0024] Figure 1 A hardware structure block diagram of a computer terminal for implementing a method for data transmission between security domains is shown.

[0025] Figure 2 This is a flowchart of a method for transmitting data between security domains according to an embodiment of this application;

[0026] Figure 3 This is a schematic diagram of a secure inter-domain data transmission system architecture provided according to an embodiment of this application;

[0027] Figure 4 This is a timing diagram of inter-domain data transmission according to an embodiment of this application;

[0028] Figure 5 This is a schematic diagram of a secure inter-domain data transmission apparatus according to an embodiment of this application;

[0029] Figure 6 This is a structural block diagram of an electronic device according to an embodiment of this application. Detailed Implementation

[0030] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0031] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0032] It should be noted that the information collected in this application (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) are information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, storage, use, processing, transmission, provision, disclosure, and application of this data all comply with relevant laws, regulations, and standards, necessary confidentiality measures have been taken, and they do not violate public order and good morals. Corresponding access points are provided for users to choose to authorize or refuse. For example, interfaces are set up between this system and relevant users or organizations, providing users with corresponding access points to choose to agree to or refuse automated decision-making results; if the user chooses to refuse, the process proceeds to the expert decision-making stage.

[0033] Example 1

[0034] According to an embodiment of this application, a method embodiment for data transmission between secure domains is also provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0035] The method embodiment provided in Embodiment 1 of this application can be executed on a mobile terminal, computer terminal, or similar computing device. Figure 1 A hardware block diagram of a computer terminal (or mobile device) for implementing a method for data transmission between secure domains is shown. Figure 1 As shown, the computer terminal 10 (or mobile device) may include one or more processors 102 (shown as 102a, 102b, ..., 102n in the figure) 102 (processor 102 may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, computer terminal 10 may also include... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.

[0036] It should be noted that the aforementioned one or more processors 102 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element within the computer terminal 10 (or mobile device). As involved in the embodiments of this application, the data processing circuits serve as a processor control mechanism (e.g., selection of a variable resistor termination path connected to an interface).

[0037] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the secure inter-domain data transmission method in this embodiment. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, thereby realizing the aforementioned secure inter-domain data transmission method. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the computer terminal 10 via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0038] The transmission device 106 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the computer terminal 10. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 106 may be a Radio Frequency (RF) module, used for wireless communication with the Internet.

[0039] The display may be a touchscreen liquid crystal display (LCD) that allows the user to interact with the user interface of the computer terminal 10 (or mobile device).

[0040] With the rapid development of artificial intelligence technology, complex AI models, represented by large language models, have shown enormous application potential in fields such as natural language processing, intelligent question answering, and content generation. Integrating the capabilities of these large models into various application systems, especially front-end user interfaces, has become an important trend in current technological development.

[0041] However, in actual deployment and application, especially within enterprises, in classified networks, or in environments with specific security requirements, complex and stringent network security segmentation management issues are often encountered. A typical scenario is that there is strict one-way data access control between the user front-end interface (usually located in network segment A, such as an intranet office area or isolated area) and the back-end server carrying large-scale computing services (usually located in network segment B, such as a core data center or isolated computing area). Specifically, network segment A cannot initiate access to network segment B in compliance with regulations, while network segment B, due to security policies or routing configurations, can be approved to access specific services or resources of network segment A according to the policies.

[0042] Under this topology with one-way secure access constraints, traditional synchronous call patterns face significant challenges. The front-end interface cannot request synchronous calls to the large model's interface via standard Hypertext Transfer Protocol (HTTP), preventing users from interacting with the large model in real time. Related technologies commonly employ manual or semi-automatic data transfer and offline transmission mechanisms. This involves exporting user request data from network segment A to network segment B via physical media or a specific relay server, where the large model processes the data and then sends the results back. This approach is inefficient, lacks real-time interaction capabilities, and cannot meet the demands of streaming responses, severely limiting user experience and application scenarios.

[0043] Against the above-mentioned technical background, this application provides as follows Figure 2 The method for data transmission between security domains is shown. Figure 2This is a flowchart of a secure inter-domain data transmission method according to Embodiment 1 of this application. The secure inter-domain data transmission method includes:

[0044] Step S201: In the front-end application of the first security domain, in response to the user-triggered interaction request, a request message containing a unique identifier is generated and published to the message queue service in the first security domain. The message queue service is used for the large model processing service in the second security domain to consume the request message according to the pre-configured security access policy and write the response data of the large model to the shared cache service of the first security domain. There is a one-way network isolation between the first security domain and the second security domain.

[0045] Step S202: Initiate a query request to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service, and display the response data to the user through the user interface of the front-end application.

[0046] Optionally, a message queue service (such as a message queue system) and a shared cache service (such as a distributed cache cluster) are deployed in the first security domain (such as network segment A). The front-end application located in network segment A captures user input, generates a unique request identifier (Request ID), and publishes a request message containing the query content and the request identifier to a designated switch of the message queue system. The message queue service then distributes the message to the target message queue according to a preset routing strategy.

[0047] Optionally, a large-scale model processing service is deployed within a second security domain (such as network segment B). A one-way network access policy (i.e., a secure access policy) is configured between network segments A and B. For example, the access policy may be: only allowing the second security domain to actively access the message queue service and shared cache service in the first security domain. Optionally, the first security domain is configured to prohibit actively initiating network access to the second security domain, while the second security domain is authorized to unidirectionally access the message queue service and shared cache service in the first security domain.

[0048] Optionally, the large model processing service, acting as a message consumer of the message queue system, actively pulls and consumes request messages from the target message queue through a transport layer security protocol encrypted channel, parsing out the request content and request identifier. For example, the large model processing service calls the large language model deployed in the second security domain, enables streaming output mode, receives the response text fragments returned by the large language model piece by piece, assigns an incrementing sequence number to each fragment, and encapsulates the fragment and the corresponding request identifier and sequence number into a cache key-value pair. Through a one-way network access strategy, it writes the data unidirectionally to the ordered set of the distributed cache cluster in the first security domain, storing it with the request identifier as the key and the sequence number as the fraction, thereby achieving ordered, incremental, and one-way synchronization of the response data.

[0049] Optionally, the front-end application periodically polls the shared cache service in the first security domain to query all response fragments with the request identifier as the key and a score greater than the highest rendered sequence number. These fragments are then merged in ascending order of sequence number and rendered to the user interface fragment by fragment, achieving real-time, uninterrupted display of the streaming response.

[0050] In summary, by deploying message queue and shared cache services in the first security domain and leveraging the network characteristic of the second security domain's unidirectional access to the first security domain, a secure data transmission channel is constructed. Requests are distributed through the message queue within the first security domain, retrieved by services in the second security domain according to security policies, and responses are unidirectionally written back to the shared cache service in the first security domain by services in the second security domain. This achieves logical synchronization of request and response states and efficient controlled exchange of streaming data, enabling controlled data transfer between security domains and streaming calls to large models. It solves the state synchronization problem under unidirectional secure access constraints and improves data transmission efficiency.

[0051] Optionally, in the inter-security domain data transmission method provided in this application embodiment, consuming request messages according to a pre-configured security access policy and writing the response data of the large model into the shared cache service of the first security domain includes: obtaining request messages from a message queue service through a unidirectional network channel corresponding to the pre-configured security access policy, and calling the large model interface in the second security domain based on the unique identifier in the request message to obtain the streaming response data output by the large model; dividing the streaming response data into multiple ordered data segments, and writing the multiple ordered data segments sequentially into the shared cache service of the first security domain.

[0052] Optionally, in the inter-security domain data transmission method provided in this application embodiment, dividing the streaming response data into multiple ordered data segments and sequentially writing the multiple ordered data segments into the shared cache service of the first security domain includes: assigning an incrementing sequence number to each data segment to obtain multiple ordered data segments; encapsulating the multiple ordered data segments and a unique identifier into cache key-value pairs, and writing the cache key-value pairs into an ordered set structure in the shared cache service of the first security domain.

[0053] In an optional embodiment, the large model processing service in the second security domain connects to the message queue service in the first security domain via a one-way network channel corresponding to the security access policy. It listens for and retrieves request messages in the queue, parses the requests, and, based on the unique identifier in the request message, calls the large model interface in the second security domain to specify the enabled streaming output mode. The large language model then begins generating answers and returns response data in real-time as text fragments. Each time the large model processing service receives a text fragment, it assigns it an incrementing sequence number and then connects to the shared cache service in the first security domain via the approved one-way network channel. Each response fragment is then stored in the shared cache service in order of its sequence number, completing one-way state synchronization. For example, an incrementing sequence number is assigned to each data fragment, and key-value pairs are constructed with the unique identifier as the key, the sequence number as the fraction, and the data fragment content as the value. These key-value pairs are written into an ordered set structure in the shared cache service, with the ordered set arranged in ascending order of fractions to ensure the temporal integrity of the response fragments.

[0054] By implementing a one-way channel authorized by security policies to passively pull requests and orderly write back streaming responses, a cross-domain large-scale model interaction mechanism that does not require reverse connections, supports low latency, and is highly reliable can be constructed. Under the premise of strictly adhering to network security policies, it can effectively solve the problem of data security transfer between front-end applications and back-end large-scale models.

[0055] Optionally, in the secure inter-domain data transmission method provided in this application embodiment, initiating a query request to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service, and displaying the response data to the user through the user interface of the front-end application includes: initiating a query request to the shared cache service based on a preset time interval to obtain all data fragments associated with a unique identifier and whose sequence number is greater than the currently rendered highest sequence number from the shared cache service; rendering all data fragments on the user interface in real time to display all data fragments to the user through the user interface.

[0056] Optionally, in the secure inter-domain data transmission method provided in this application embodiment, rendering all data fragments on the user interface in real time includes: sorting all data fragments in ascending order according to their sequence numbers to obtain a set of data fragments arranged in chronological order; sequentially concatenating the contents of each data fragment in the data fragment set to obtain a continuous text sequence; and incrementally updating the text display area of ​​the user interface with the continuous text sequence.

[0057] In an optional embodiment, the front-end application sends requests to a shared cache service within the same A network segment at a configurable frequency. It retrieves all data fragments associated with a unique identifier and whose sequence number is greater than the currently rendered highest sequence number from the shared cache service. All data fragments are then rendered in real-time on the user interface (e.g., a chat interface) to display all data fragments to the user, achieving a smooth output effect. For example, the front-end application sorts all data fragments in ascending order by their sequence number, obtaining a set of data fragments arranged chronologically. Then, it concatenates the contents of each data fragment in the set to obtain a continuous text sequence, and incrementally updates the text display area of ​​the user interface with this continuous text sequence.

[0058] By periodically polling the shared cache service, incremental acquisition and orderly rendering of streaming response data are achieved, thereby ensuring that the user interface presents the complete and continuous text stream generated by the large model in real time with low latency and high synchronization without the need for long connections or push mechanisms.

[0059] Optionally, in the secure domain data transmission method provided in this application embodiment, before responding to the user-triggered interaction request, the method further includes: determining a secure access policy; deploying a message queue service and a shared cache service in a first secure domain using a service deployment instruction based on the secure access policy; and configuring firewall rules for the first secure domain using a network policy configuration instruction based on the secure access policy.

[0060] In an optional embodiment, suppose an enterprise needs to deploy a model request system for large-screen displays within its internal environment with strict one-way access constraints. First, a secure access policy is determined. For example, the network security rule between the enterprise's office network (network segment A) and data center (network segment B) is: network segment A cannot initiate compliant access to network segment B, while network segment B can access specific ports of network segment A according to the security policy. Then, a message queue service and a shared cache service are deployed on network segment A, and firewall rules for network segment A are configured. For example, the rule is: only IP addresses from network segment B are allowed to access the service ports of the message queue service and shared cache service on network segment A.

[0061] By uniformly deploying message queues and shared cache services based on secure access policies and configuring one-way firewall rules, controlled data transmission is achieved in a strictly one-way network isolation environment, allowing only the B network segment to actively pull requests and write back responses, thus ensuring security compliance and the feasibility of streaming interaction.

[0062] Optionally, in the secure inter-domain data transmission method provided in this application embodiment, the method further includes: monitoring the queue backlog of the message queue service, the read / write response latency of the shared cache service, the running status of the large model processing service, and the connectivity of the unidirectional network channel corresponding to the pre-configured secure access policy through a monitoring module; triggering a message retransmission policy when the queue backlog is detected to be greater than a first preset threshold or the read / write response latency is detected to be greater than a second preset threshold; and triggering a service reconnection policy when an abnormal running status or connectivity is detected.

[0063] In an optional embodiment, the system monitoring module deployed in the first security domain and the second security domain detects in real time the queue backlog of the message queue service, the read and write response latency of the shared cache service, the running status of the large model processing service, and the connectivity of the unidirectional network channel from the second security domain to the first security domain. When an anomaly is detected, such as when the network connection is interrupted for more than a preset timeout, a reconnection mechanism, a message retransmission strategy, or a fault tolerance degradation process is triggered to ensure the reliability and consistency of the end-to-end request and response link.

[0064] In an optional embodiment, Figure 3 This is a schematic diagram of a secure inter-domain data transmission system architecture provided according to an embodiment of this application, such as... Figure 3 As shown, it mainly includes the following modules:

[0065] Front-end request encapsulation and sending module: Deployed in the front-end application of network segment A, it is responsible for capturing user input, encapsulating it into standardized request objects, and publishing it as a message to the message queue service, which is also located in network segment A.

[0066] The large-model streaming call and response caching module is the core processing engine deployed on network segment B. Based on security policies, it proactively accesses the message queue service on network segment A to consume requests. After calling the large model and receiving a streaming response, it accesses the shared cache service on network segment A through an approved one-way channel, writing response fragments to the cache in real time to achieve one-way synchronization. Through the real-time fragmentation and sequence number mechanism of the large-model streaming call and response caching module, the order and integrity of the response content are ensured.

[0067] Front-end streaming response rendering module: Deployed in the front-end application of network segment A, it polls the shared cache service also located in network segment A at a fixed frequency, incrementally obtains the latest response fragments, and renders them to the user in real time with a "typewriter" effect.

[0068] System monitoring and fault tolerance module: This module spans both network segments A and B, and is responsible for monitoring the health status of message queue services and shared cache services in network segment A, the running status of core services in network segment B, and the availability and latency of network connections from network segment B to network segment A, and executing corresponding fault tolerance and recovery strategies.

[0069] By integrating distributed caching and message queue technologies, complete decoupling between modules is achieved. Asynchronous submission of frontend requests improves response speed. Message queues ensure the reliability and order of data transmission, while each module of the system can scale independently, providing scalability to handle high concurrency and large-scale model computational pressure.

[0070] In an optional embodiment, Figure 4 This is a timing diagram of inter-domain data transmission according to an embodiment of this application, such as... Figure 4 As shown, it mainly includes the following:

[0071] Step 1: Frontend Request Encapsulation and Internal Transmission (Network Segment A). The user generates a unique request ID through the frontend application module (located in Network Segment A) and constructs a request object containing the query content. Subsequently, this request object is published as a message to the designated switch of the message queue server deployed in Network Segment A.

[0072] Step Two: Secure Request Retrieval and Large Model Processing (B Network Segment). The large model streaming call and response caching module deployed in the data center (B network segment), as a consumer of the message queue service, connects to the message queue service in the A network segment according to the approved security policy, listens for and retrieves request messages in the queue, parses the requests, calls the large model interface deployed on the backend, and specifies that streaming output mode is enabled.

[0073] Step 3: One-way synchronous write and caching of responses (B network segment). The large model begins generating answers and returns them in real time as text fragments. Each time the large model streaming call and response caching module in network segment B receives a text fragment, it assigns it an incrementing sequence number. Then, through an approved one-way channel, it connects to the shared cache service located in network segment A, storing each response fragment (chunk 1, chunk 2, etc.) in an ordered set according to its sequence number into the ordered set of the shared cache service, completing the one-way state synchronization.

[0074] Step 4: Front-end streaming responsive rendering (Network Segment A). The front-end application queries the shared cache service in Network Segment A at a configurable frequency to retrieve all elements with scores greater than the currently rendered highest sequence number. After obtaining a new text fragment, it is immediately appended to the chat interface to achieve a smooth output effect.

[0075] Step 5: System Monitoring and Fault Tolerance. Monitor the health status of the transmission control protocol connection and network latency of the secure access channel from network segment B to network segment A. If a connection loss or response timeout is detected, an alarm will be triggered immediately, and reconnection or retry logic will be executed. The integrity and orderliness of data transmission are ensured through request IDs and sequence numbers.

[0076] The data transmission method between security domains provided in this application includes the following steps: In the front-end application of the first security domain, in response to an interaction request triggered by a user, a request message containing a unique identifier is generated and published to a message queue service in the first security domain. The message queue service is used for large model processing services in the second security domain. It consumes the request message according to a pre-configured security access policy and writes the response data of the large model to a shared cache service in the first security domain. A unidirectional network isolation exists between the first and second security domains. A query request is initiated to the shared cache service to obtain the response data corresponding to the interaction request, and the response data is displayed to the user through the user interface of the front-end application. This method solves the technical problem of low data transmission efficiency in related technologies that rely on manual or semi-automatic offline ferry methods to achieve data transmission between security domains in a unidirectional network isolation environment.

[0077] In this solution, a secure data transmission channel is constructed by deploying a message queue service and a shared cache service in the first security domain and leveraging the network feature of the second security domain, which allows unidirectional access to the first security domain. Requests are distributed through the message queue within the first security domain and retrieved by the services in the second security domain according to security policies. Responses are synchronously written back to the shared cache service in the first security domain by the services in the second security domain. This achieves logical synchronization of request and response states and efficient controlled exchange of streaming data, enabling controlled data transfer between security domains and streaming calls to large models. It solves the state synchronization problem under unidirectional secure access constraints and improves data transmission efficiency.

[0078] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0079] Example 2

[0080] This application also provides a secure inter-domain data transmission apparatus. It should be noted that this secure inter-domain data transmission apparatus can be used to execute the secure inter-domain data transmission method provided in this application. The secure inter-domain data transmission apparatus provided in this application will be described below.

[0081] According to embodiments of this application, a secure inter-domain data transmission apparatus for implementing the above-described secure inter-domain data transmission method is also provided, such as... Figure 5 As shown, the device includes: a first processing unit 501 and a second processing unit 502.

[0082] The first processing unit 501 is used in the front-end application of the first security domain to generate a request message containing a unique identifier in response to an interaction request triggered by the user, and publish the request message to the message queue service in the first security domain. The message queue service is used for the large model processing service in the second security domain to consume the request message according to the pre-configured security access policy and write the response data of the large model to the shared cache service of the first security domain. There is a one-way network isolation between the first security domain and the second security domain.

[0083] The second processing unit 502 is used to initiate a query request to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service, and to display the response data to the user through the user interface of the front-end application.

[0084] The inter-security domain data transmission apparatus provided in this application embodiment, through a first processing unit 501 in the front-end application of the first security domain, responds to an interaction request triggered by a user, generates a request message containing a unique identifier, and publishes the request message to a message queue service in the first security domain. The message queue service is used for a large model processing service in the second security domain to consume the request message according to a pre-configured security access policy, and writes the response data of the large model to a shared cache service in the first security domain. There is a one-way network isolation between the first security domain and the second security domain. The second processing unit 502 initiates a query request to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service, and displays the response data to the user through the user interface of the front-end application.

[0085] Optionally, in the inter-security domain data transmission apparatus provided in this application embodiment, the first processing unit includes: a first processing subunit, configured to obtain a request message from a message queue service through a unidirectional network channel corresponding to a pre-configured security access policy, and call the large model interface in the second security domain based on the unique identifier in the request message to obtain streaming response data output by the large model; and a second processing subunit, configured to divide the streaming response data into multiple ordered data fragments and write the multiple ordered data fragments sequentially into the shared cache service of the first security domain.

[0086] Optionally, in the inter-domain data transmission apparatus provided in this application embodiment, the second processing subunit includes: a first processing module, used to assign an incrementing sequence number to each data segment to obtain multiple ordered data segments; and a second processing module, used to encapsulate the multiple ordered data segments and a unique identifier into cache key-value pairs, and write the cache key-value pairs into an ordered set structure in the shared cache service of the first security domain.

[0087] Optionally, in the secure inter-domain data transmission apparatus provided in this application embodiment, the second processing unit includes: a third processing subunit, configured to initiate a query request to the shared cache service based on a preset time interval, so as to obtain all data fragments associated with a unique identifier and whose sequence number is greater than the currently rendered highest sequence number from the shared cache service; and a fourth processing subunit, configured to render all data fragments on the user interface in real time, so as to display all data fragments to the user through the user interface.

[0088] Optionally, in the secure inter-domain data transmission apparatus provided in this application embodiment, the fourth processing subunit includes: a third processing module, used to sort all data segments in ascending order according to their sequence numbers to obtain a set of data segments arranged in chronological order; a fourth processing module, used to sequentially concatenate the contents of each data segment in the data segment set to obtain a continuous text sequence; and a fifth processing module, used to incrementally update the text display area of ​​the user interface with the continuous text sequence.

[0089] Optionally, in the secure domain data transmission apparatus provided in this application embodiment, the apparatus further includes: a determining unit, configured to determine a secure access policy before responding to an interaction request triggered by a user; a first configuration unit, configured to deploy a message queue service and a shared cache service in a first secure domain based on the secure access policy and through service deployment instructions; and a second configuration unit, configured to configure firewall rules of the first secure domain based on the secure access policy and through network policy configuration instructions.

[0090] Optionally, in the secure inter-domain data transmission apparatus provided in this application embodiment, the apparatus further includes: a third processing unit, used to monitor the queue backlog of the message queue service, the read / write response latency of the shared cache service, the running status of the large model processing service, and the connectivity of the unidirectional network channel corresponding to the pre-configured secure access policy through the monitoring module; a fourth processing unit, used to trigger a message retransmission policy when the queue backlog is detected to be greater than a first preset threshold or the read / write response latency is greater than a second preset threshold; and a fifth processing unit, used to trigger a service reconnection policy when an abnormal running status or connectivity is detected.

[0091] It should be noted that the first processing unit 501 and the second processing unit 502 mentioned above correspond to steps S201 to S202 in Embodiment 1. The two units and the corresponding steps implement the same instances and application scenarios, but are not limited to the content disclosed in Embodiment 1. It should be noted that the above modules or units can be hardware or software components stored in memory (e.g., memory 104) and processed by one or more processors (e.g., processors 102a, 102b, ..., 102n). The above units can also be part of a device and run in the computer terminal 10 provided in Embodiment 1.

[0092] Example 3

[0093] Embodiments of this application may provide an electronic device. Figure 6 This is a structural block diagram of an electronic device according to an embodiment of this application. Figure 6 As shown, the electronic device may include: one or more ( Figure 6 (Only one is shown) Processor 602, memory 604, memory controller, and peripheral interface, wherein the peripheral interface is connected to the radio frequency module, audio module and display.

[0094] The memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the methods and apparatus in the embodiments of this application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, thereby implementing the above-described methods. The memory may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include memory remotely located relative to the processor, and these remote memories can be connected to the terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0095] The processor can invoke information and applications stored in memory via a transmission device to perform the following steps: In the front-end application of the first security domain, in response to an interaction request triggered by the user, a request message containing a unique identifier is generated and published to the message queue service in the first security domain. The message queue service is used for the large model processing service in the second security domain. The processor consumes the request message according to a pre-configured security access policy and writes the response data of the large model to the shared cache service of the first security domain. There is a one-way network isolation between the first security domain and the second security domain. The processor initiates a query request to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service and displays the response data to the user through the user interface of the front-end application.

[0096] The processor can invoke information and applications stored in memory through the transmission device to perform the following steps: obtain a request message from the message queue service through the unidirectional network channel corresponding to the pre-configured security access policy, and call the large model interface in the second security domain based on the unique identifier in the request message to obtain the streaming response data output by the large model; divide the streaming response data into multiple ordered data fragments, and write the multiple ordered data fragments sequentially into the shared cache service of the first security domain.

[0097] The processor can invoke information and applications stored in memory through the transmission device to perform the following steps: assign an incrementing sequence number to each data segment to obtain multiple ordered data segments; encapsulate the multiple ordered data segments and a unique identifier into cache key-value pairs, and write the cache key-value pairs into an ordered set structure in the shared cache service of the first security domain.

[0098] The processor can invoke information and applications stored in memory through the transmission device to perform the following steps: based on a preset time interval, initiate a query request to the shared cache service to obtain all data fragments associated with a unique identifier and whose sequence number is greater than the currently rendered highest sequence number from the shared cache service; render all data fragments in real time on the user interface to display all data fragments to the user through the user interface.

[0099] The processor can access information and applications stored in memory via a transmission device to perform the following steps: sort all data segments in ascending order by their sequence numbers to obtain a set of data segments arranged in chronological order; concatenate the contents of each data segment in the data segment set sequentially to obtain a continuous text sequence; and incrementally update the text display area of ​​the user interface with the continuous text sequence.

[0100] The processor can invoke information and applications stored in memory via a transmission device to perform the following steps: determining a security access policy before responding to a user-triggered interaction request; deploying a message queue service and a shared cache service in a first security domain using service deployment instructions based on the security access policy; and configuring firewall rules for the first security domain using network policy configuration instructions based on the security access policy.

[0101] The processor can access information and applications stored in the memory via the transmission device to execute the following steps: monitor the queue backlog of the message queue service, the read / write response latency of the shared cache service, the running status of the large model processing service, and the connectivity of the unidirectional network channel corresponding to the pre-configured security access policy through the monitoring module; trigger the message retransmission policy when the queue backlog is detected to be greater than the first preset threshold or the read / write response latency is detected to be greater than the second preset threshold; trigger the service reconnection policy when an abnormal running status or connectivity is detected.

[0102] Those skilled in the art will understand that Figure 6 The structure shown is for illustrative purposes only. Electronic devices can also be smartphones, tablets, handheld computers, mobile internet devices (MIDs), PADs, and other terminal devices. Figure 6 This does not limit the structure of the aforementioned electronic device. For example, electronic devices may also include components that are more... Figure 6 The more or fewer components shown (such as network interfaces, display devices, etc.), or having the same Figure 6 The different configurations shown.

[0103] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a computer-readable storage medium, which may include: flash drive, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.

[0104] Example 4

[0105] Embodiments of this application also provide a computer-readable storage medium. Optionally, in this embodiment, the storage medium can be used to store the program code executed by the secure inter-domain data transmission method provided in Embodiment 1.

[0106] Optionally, in this embodiment, the storage medium may be located in any computer terminal in a group of computer terminals in a computer network, or in any mobile terminal in a group of mobile terminals.

[0107] This application also provides a computer program product that, when executed on a data processing device, is suitable for performing steps of a method for data transmission between security domains.

[0108] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0109] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0110] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling, direct coupling, or communication connection may be through some interfaces; the indirect coupling or communication connection between units or modules may be electrical or other forms.

[0111] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0112] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0113] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0114] The above description is only a preferred embodiment of this application. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A method for data transmission between secure domains, characterized in that, include: In the front-end application of the first security domain, in response to the user-triggered interaction request, a request message containing a unique identifier is generated and the request message is published to the message queue service in the first security domain. The message queue service is used for the large model processing service in the second security domain to consume the request message according to the pre-configured security access policy and write the response data of the large model into the shared cache service of the first security domain. There is a one-way network isolation between the first security domain and the second security domain. A query request is sent to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service, and the response data is displayed to the user through the user interface of the front-end application.

2. The method according to claim 1, characterized in that, Consuming the request message according to a pre-configured security access policy and writing the response data of the large model into the shared cache service of the first security domain includes: The request message is obtained from the message queue service through the one-way network channel corresponding to the pre-configured security access policy, and the large model interface in the second security domain is called based on the unique identifier in the request message to obtain the streaming response data output by the large model. The streaming response data is divided into multiple ordered data segments, and the multiple ordered data segments are written sequentially into the shared cache service of the first security domain.

3. The method according to claim 2, characterized in that, The process of dividing the streaming response data into multiple ordered data segments and sequentially writing the multiple ordered data segments into the shared cache service of the first security domain includes: Each of the data segments is assigned an incrementing sequence number to obtain the plurality of ordered data segments; The plurality of ordered data fragments and the unique identifier are encapsulated into cache key-value pairs, and the cache key-value pairs are written into the ordered set structure in the shared cache service of the first security domain.

4. The method according to claim 1, characterized in that, Initiating a query request to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service, and displaying the response data to the user through the user interface of the front-end application includes: Based on a preset time interval, a query request is initiated to the shared cache service to obtain all data fragments associated with the unique identifier and whose sequence number is greater than the currently rendered highest sequence number from the shared cache service; All data fragments are rendered in real time on the user interface so that they can be displayed to the user through the user interface.

5. The method according to claim 4, characterized in that, Rendering all the data fragments in real time onto the user interface includes: All the data segments are sorted in ascending order according to their sequence numbers to obtain a set of data segments arranged in chronological order. The contents of each data segment in the data segment set are concatenated sequentially to obtain a continuous text sequence; The continuous text sequence is incrementally updated to the text display area of ​​the user interface.

6. The method according to claim 1, characterized in that, Prior to responding to a user-triggered interaction request, the method further includes: Determine the security access policy; Based on the security access policy, the message queue service and the shared cache service are deployed in the first security domain using service deployment instructions; Based on the security access policy, the firewall rules for the first security domain are configured using network policy configuration instructions.

7. The method according to claim 1, characterized in that, The method further includes: The monitoring module monitors the queue backlog of the message queue service, the read / write response latency of the shared cache service, the running status of the large model processing service, and the connectivity of the one-way network channel corresponding to the pre-configured security access policy. If the queue backlog is detected to be greater than a first preset threshold or the read / write response latency is greater than a second preset threshold, a message retransmission strategy is triggered. If an abnormality is detected in the operating status or the connectivity, a service reconnection strategy is triggered.

8. A secure inter-domain data transmission device, characterized in that, include: The first processing unit is configured to, in the front-end application of the first security domain, respond to an interaction request triggered by a user, generate a request message containing a unique identifier, and publish the request message to a message queue service in the first security domain. The message queue service is used to provide a large model processing service in the second security domain with the request message according to a pre-configured security access policy, and write the response data of the large model into a shared cache service in the first security domain. There is a one-way network isolation between the first security domain and the second security domain. The second processing unit is configured to initiate a query request to the shared cache service to obtain the response data corresponding to the interaction request from the shared cache service, and to display the response data to the user through the user interface of the front-end application.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a stored executable program, wherein, when the executable program is executed, it controls the device containing the computer-readable storage medium to perform the secure inter-domain data transmission method according to any one of claims 1 to 7.

10. An electronic device, characterized in that, include: Memory, which stores executable programs; A processor for running the program, wherein the program, when running, performs the inter-domain data transmission method according to any one of claims 1 to 7.

Images