A data transmission integrity verification method and device for a heterogeneous bi-directional unidirectional isolation network

Abstract

The application provides a data transmission integrity verification method and device of a heterogeneous dual one-way isolation network. The method is executed at a first side network end in the heterogeneous dual one-way isolation network. The first side network end and a corresponding second side network end are respectively arranged in two independent network domains, and perform one-way communication through a first cross-network isolation device and a second cross-network isolation device. The method comprises the following steps: a first cross-network sending service end sends a task message to a second cross-network receiving service end through the isolation device, and generates a sending task record containing a task data element. The second cross-network receiving service end receives a feedback document returned by the second network end through the isolation device and parses the feedback document into verification information. The first cross-network sending service end listens to the verification message, parses the verification message to generate a receiving completion task record, and compares the task data elements in the sending task record and the receiving completion task record to verify the integrity of data transmission. The method ensures the safe transmission of the task message between the heterogeneous networks and provides an effective data integrity verification means.

Description

Technical Field

[0001] This invention relates to the field of network information security technology, and in particular to a method and apparatus for verifying the integrity of data transmission in a heterogeneous dual unidirectional isolated network. Background Technology

[0002] Heterogeneous networks refer to different network domains with different architectures, protocols, or security requirements, such as the internal and external networks of government agencies with different security levels. Dual unidirectional isolation networks refer to two network domains with two unidirectional data flow channels. Using unidirectional network isolation technology, it ensures that data can only flow from one network domain to another, and not in the opposite direction. This mechanism is typically implemented through hardware devices such as unidirectional optical gates to prevent potential data leaks or network attacks, enhancing data security and isolation.

[0003] Dual one-way network isolation technology transmits data between different network domains by setting up one-way cross-network isolation devices, but it cannot directly know whether the data has been successfully received by the other network end, ensuring that the data is not tampered with, lost or damaged during the transmission from one network domain to another, and it is also difficult to verify the integrity of the data. Summary of the Invention

[0004] In view of this, embodiments of the present invention provide a method and apparatus for verifying the data transmission integrity of a heterogeneous dual unidirectional isolation network, so as to eliminate or improve the defects of data verification difficulties in the prior art.

[0005] One aspect of the present invention provides a data transmission integrity verification method for a heterogeneous dual-unidirectional isolation network. The method is executed on a first side network terminal in the heterogeneous dual-unidirectional isolation network. The first side network terminal and a corresponding second side network terminal are deployed in two independent network domains, respectively. The first side network terminal and the second side network terminal communicate unidirectionally through a first cross-network isolation device and a second cross-network isolation device. The first side network terminal includes a first cross-network sending server, a first cross-network receiving server, and a first message middleware. The second side network terminal includes a second cross-network sending server, a second cross-network receiving server, and a second message middleware. The method includes the following steps:

[0006] The first cross-network sending server sends a task message to the second cross-network receiving server through the first cross-network isolation device; the first cross-network sending server generates a corresponding sending task record, which contains the data elements of the task message.

[0007] The first cross-network receiving server receives a feedback document returned by the second cross-network sending server through the second cross-network isolation device; the feedback document is generated by the second cross-network sending server listening to the statistical message marked with the first topic updated and written in the second message middleware; the statistical message is obtained by the second cross-network receiving server performing statistics on the received task message and marking data elements, and then converting it into a readable format of the second message middleware.

[0008] The first cross-network receiving server parses the feedback document, converts it into a verification message in a format readable by the first message middleware, and pushes it to the first message middleware marked with the second topic;

[0009] The first cross-network sending server listens to the verification messages related to the second topic in the first message middleware, parses the task messages consumed by the second side network, and generates a received task completion record; the received task completion record is compared with the task messages in the sent task record to obtain the data transmission integrity verification result.

[0010] In some embodiments of the present invention, the sending task record includes: task ID, task name, file name, file MD5 value, client ID, creation time, and task status; the receiving completion task record includes: task ID, task name, file name, file MD5 value, client ID, creation time, receiving success time, and task status.

[0011] In some embodiments of the present invention, the data elements of the task messages in the received task completion record and the sent task record are compared to obtain the data transmission integrity verification result, specifically including:

[0012] Iterate through the sent task records and find the record with the same task ID as the verification message;

[0013] If a record with the same task ID is found, the data elements in the corresponding task information of the received completed task record and the sent task record are compared to verify data integrity; the data elements to be compared include task name, file name, file MD5 value, and client ID;

[0014] If the data integrity verification is successful, the task status in the sent task record is replaced with the task status in the received completed task record to indicate whether the task has been processed.

[0015] In some embodiments of the present invention, the method further includes:

[0016] If, after the task information is sent, a preset time threshold is exceeded and no record with the same task ID as the task sent is found in the task completion record, the task is marked as abnormal.

[0017] In some embodiments of the present invention, the method further includes:

[0018] If the proportion of task records marked as abnormal in the total task records exceeds a preset ratio, an alarm message will be generated.

[0019] In some embodiments of the present invention, the method further includes:

[0020] Before the cross-network sending server sends the task information or the feedback document, it encrypts the task information or the feedback document.

[0021] After receiving the task information or the feedback document, the cross-network receiving server decrypts the task message or the feedback document.

[0022] In some embodiments of the present invention, the first message middleware and the second message middleware adopt a distributed architecture, and each uses multiple mutually backed-up nodes as the first message middleware and the second message middleware.

[0023] Another aspect of the present invention provides a data transmission integrity verification device for a heterogeneous dual unidirectional isolation network, including a processor, a memory, and a computer program stored in the memory. The processor is used to execute the computer program, and when the computer program is executed, the device implements the steps of the method described in any of the preceding claims.

[0024] Another aspect of the present invention provides a computer-readable storage medium having a computer program stored thereon that, when executed by a processor, implements the steps of the method as described in any of the preceding claims.

[0025] Another aspect of the present invention provides a computer program product comprising a computer program that, when executed by a processor, implements the steps of the method as described in any of the preceding claims.

[0026] The beneficial effects of the present invention are at least as follows:

[0027] This invention provides a method and apparatus for verifying data transmission integrity in a heterogeneous dual-unidirectional isolated network. The method is executed on a first side network in the heterogeneous dual-unidirectional isolated network. The first side network and its corresponding second side network are deployed in two independent network domains and communicate unidirectionally through a first cross-network isolation device and a second cross-network isolation device. The method includes: a first cross-network sending server sending a task message to a second cross-network receiving server through the isolation device and generating a sending task record containing task data elements. The first cross-network receiving server receives a feedback document returned by the second side through the isolation device and parses it into verification information. The first cross-network sending server listens for the verification message, parses it to generate a receiving completed task record, and compares the task data elements in the sending task record and the receiving completed task record to verify the integrity of the data transmission. This method, by separating the roles of the cross-network sending server and the receiving server, makes the system more flexible and scalable, ensures the secure transmission of task messages between heterogeneous networks, and provides an effective means of data integrity verification.

[0028] Additional advantages, objects, and features of the invention will be set forth in part in the description which follows, and will also become apparent in part to those skilled in the art upon studying the description, or may be learned by practice of the invention. The objects and other advantages of the invention can be realized and obtained by means of the structures specifically pointed out in the description and drawings.

[0029] Those skilled in the art will understand that the objectives and advantages achievable with the present invention are not limited to those specifically described above, and that the above and other objectives achievable with the present invention will become clearer from the following detailed description. Attached Figure Description

[0030] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this application, are not intended to limit the scope of the invention. In the drawings:

[0031] Figure 1 This is a flowchart of a data transmission integrity verification method for a heterogeneous dual unidirectional isolation network according to an embodiment of the present invention.

[0032] Figure 2 This is a diagram showing the composition of each module in another embodiment of the present invention.

[0033] Figure 3 This is a diagram illustrating the data flow and deployment in another embodiment of the present invention.

[0034] Figure 4 This is a flowchart of a method for generating feedback messages in another embodiment of the present invention.

[0035] Figure 5 This is a flowchart of a message-to-file sending module method in another embodiment of the present invention.

[0036] Figure 6 This is a flowchart of the file parsing synchronization message module method in another embodiment of the present invention.

[0037] Figure 7 This is a flowchart of the message parsing, comparison, and database entry module method in another embodiment of the present invention. Detailed Implementation

[0038] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the embodiments and accompanying drawings. Here, the illustrative embodiments and descriptions of this invention are used to explain the invention, but are not intended to limit the invention.

[0039] It should also be noted that, in order to avoid obscuring the invention with unnecessary details, only the structures and / or processing steps closely related to the solution according to the invention are shown in the accompanying drawings, while other details that are not closely related to the invention are omitted.

[0040] It should be emphasized that the term "including / comprises" as used herein refers to the presence of a feature, element, step, or component, but does not exclude the presence or addition of one or more other features, elements, steps, or components.

[0041] It should also be noted that, unless otherwise specified, the term "connection" in this article can refer not only to a direct connection, but also to an indirect connection involving an intermediary.

[0042] In the following description, embodiments of the invention will be illustrated with reference to the accompanying drawings. In the drawings, the same reference numerals represent the same or similar parts, or the same or similar steps.

[0043] A heterogeneous dual-unidirectional isolation network consists of physically isolated network domains with different architectures, protocols, or security requirements, such as the internal and external networks of a government agency with different security levels. A dual-unidirectional isolation network has two unidirectional data flow channels between the two network domains. Using unidirectional network isolation technology, it ensures that data can only flow from one network domain to another, and not in the opposite direction. This mechanism is typically implemented using hardware devices such as unidirectional optical gates to prevent potential data leaks or network attacks, enhancing data security and isolation. Therefore, data verification in a heterogeneous dual-unidirectional isolation network is more difficult than in typical network data transmission.

[0044] One embodiment of the present invention provides a data transmission integrity verification method for a heterogeneous dual-unidirectional isolation network. This method is executed on a first side network terminal in the heterogeneous dual-unidirectional isolation network. The first side network terminal and a corresponding second side network terminal are deployed in two independent network domains, respectively. The first side network terminal and the second side network terminal communicate unidirectionally through a first cross-network isolation device and a second cross-network isolation device. The first side network terminal includes a first cross-network sending server, a first cross-network receiving server, and a first message middleware. The second side network terminal includes a second cross-network sending server, a second cross-network receiving server, and a second message middleware. Figure 1 As shown, the method includes the following steps S101 to S104:

[0045] Step S101: The first cross-network sending server sends a task message to the second cross-network receiving server through the first cross-network isolation device. The first cross-network sending server generates a corresponding sending task record, which contains the data elements of the task message.

[0046] Step S102: The first cross-network receiving server receives the feedback document returned by the second cross-network sending server through the second cross-network isolation device. The feedback document is generated by the statistical message marked with the first topic, which is updated and written in the second message middleware by the second cross-network sending server. The statistical message is obtained by the second cross-network receiving server after performing statistics on the received task message, marking data elements, and converting it into a readable format of the second message middleware.

[0047] Step S103: The first cross-network receiving server parses the feedback document, converts it into a verification message in a format readable by the first message middleware, and pushes it to the first message middleware marked as the second topic.

[0048] Step S104: The first cross-network sending server listens for verification messages related to the second topic in the first message middleware, parses the task messages consumed by the second side network, and generates a received task completion record. The received task completion record is compared with the task messages in the sent task record to obtain the data transmission integrity verification result.

[0049] Among them, the first cross-network isolation device and the second cross-network isolation device can adopt network isolation devices such as one-way optical gates.

[0050] In this embodiment, both the first topic and the second topic are component types of the message middleware. A topic is a basic component in a message queue or publish-subscribe pattern. In this pattern, message producers can publish messages to specific topics, and message consumers can subscribe to these topics to receive targeted messages. This pattern allows multiple consumers to receive messages from the same topic simultaneously, and message consumers can also quickly retrieve messages from target topics, improving the system's flexibility and scalability.

[0051] In some embodiments, the task sending record includes: task ID, task name, file name, file MD5 value, client ID, creation time, and task status. The task receiving record includes: task ID, task name, file name, file MD5 value, client ID, creation time, successful reception time, and task status.

[0052] The task ID is used to uniquely identify each task, facilitating task information tracking and management; the task name describes the purpose or content of the task, making it easy to identify and understand; the file name indicates the file involved in the task; the file MD5 value is used to verify file integrity, ensuring that the file has not been tampered with during transmission; the MD5 value is a hash function value; the client ID identifies the client that initiated the task, facilitating access control; the creation time is the time the task was generated, facilitating subsequent task management and tracking; the task status displays the current processing status of the task, such as pending, sent, unprocessed, processed, etc., facilitating monitoring and management; and the successful reception time records the time the task was received and marks whether the task was successfully received.

[0053] In some embodiments, the task messages in the received task completion record and the sent task record are compared by data elements to obtain the data transmission integrity verification result, specifically including:

[0054] Iterate through the task sending records and find the record with the same task ID as the verification message.

[0055] If a record with the same task ID is found, the data elements in the corresponding task information of the received completed task record and the sent task record are compared to verify data integrity. The data elements to be compared include the task name, file name, file MD5 value, and client ID.

[0056] If the data integrity verification is successful, the task status in the sent task record will be replaced with the task status in the received completed task record to indicate whether the task has been processed.

[0057] In some embodiments, the method further includes:

[0058] If, after a preset time threshold is exceeded after the task information is sent, the task is not received and completed, and a record with the same task ID as the task sent is found in the task record, the task will be marked as abnormal.

[0059] In some embodiments, the method further includes:

[0060] If the proportion of task records marked as abnormal in the total task records exceeds a preset ratio, an alarm message will be generated.

[0061] The alarm information can include the task ID, task information, and the percentage of tasks in abnormal condition. An alarm management module can be established to monitor task records and periodically summarize and analyze alarm information.

[0062] In some embodiments, the method further includes:

[0063] Before sending task information or feedback documents across networks, the task information or feedback documents are encrypted.

[0064] After receiving task information or feedback documents from the cross-network receiving server, the task message or feedback document is decrypted.

[0065] Specifically, symmetric encryption algorithms can be used, such as AES (Advanced Encryption Standard) or DES (Data Encryption Standard). Alternatively, symmetric encryption algorithms such as RSA (Rivest Shamir Adleman) or ECC (Elliptic Curve Cryptography) can be used.

[0066] In some embodiments, the first message middleware and the second message middleware adopt a distributed architecture, using multiple mutually backed-up nodes as the first message middleware and the second message middleware, respectively.

[0067] Specifically, since the first and second message middleware have multiple nodes, it can ensure that even if some nodes fail, other nodes can still function normally as message middleware, thus guaranteeing the availability of the message middleware. Furthermore, the distributed architecture of the message middleware is scalable and can cope with traffic changes.

[0068] Another aspect of this embodiment provides a data transmission integrity verification device for a heterogeneous dual unidirectional isolation network, including a processor, a memory, and a computer program stored in the memory. The processor is used to execute the computer program, and when the computer program is executed, the device implements the steps of any of the methods described above.

[0069] Other aspects of this embodiment also provide a computer-readable storage medium having a computer program stored thereon that, when executed by a processor, implements the steps of any of the methods described above.

[0070] Other aspects of this embodiment also provide a computer program product, including a computer program that, when executed by a processor, implements the steps of any of the methods described above.

[0071] Another embodiment of the present invention provides a method and system for verifying data transmission integrity based on heterogeneous dual unidirectional network isolation. For example... Figure 2 As shown, the system consists of: a feedback message generation module, a message-to-file sending module, a file parsing and message synchronization module, and a message parsing, comparison, and database entry module. The specific functions of each component are as follows:

[0072] Feedback message generation module: Periodically collects and synchronizes received task information to the message middleware.

[0073] Message to File Sending Module: Converts acquired messages into a feed.txt document and sends it across networks.

[0074] The file parsing and message synchronization module parses the obtained feed.txt document into messages and synchronizes them to the message middleware.

[0075] Message parsing, comparison, and storage module: Compares the retrieved messages with its own sent list and updates the task status.

[0076] The specific steps of this method include:

[0077] Step 1: Server a on network A sends a file to server b on network B via cross-network isolation device I. Server a generates a sending task record, which includes task ID, task name, file name, file MD5 value, client ID, creation time, task status, etc. After receiving the data, server b on network B generates a receiving task record, which includes task ID, task name, file name, file MD5 value, client ID, creation time, successful reception time, task status, etc.

[0078] Step 2: The receiving server b on network B periodically compiles statistics on the received task list information, mainly including task ID, successful reception time, task status, etc., and converts it into a message that the message middleware can receive and pushes it to the "toBeSend" topic of the message middleware x on network B.

[0079] Step 3: The receiving server d on network B listens to the "toBeSend" topic of message middleware x. When a message is detected, it writes the message content to a new .feed.txt document and sends it to the receiving server c on network A through the cross-network isolation device II.

[0080] Step 4: After receiving the .feed.txt document, the receiving server c on network A parses its content into messages that the message middleware can receive and pushes them to the "toBeDeal" topic of the message middleware y on network A.

[0081] Step 5: The sending server a on network A listens to the "toBeDeal" topic of message middleware x. When a message is listened to, it parses the consumed message and compares the task ID with the task ID in its own sending list. If the task IDs match, the obtained task status is synchronously updated to the task status in the sending list, thereby achieving the purpose of data transmission integrity verification.

[0082] like Figure 3 As shown, all steps of this method are implemented in the cross-network sending / receiving server. In order to verify whether the data transmitted across the network in step 1 has been successfully received by the other end, it is necessary to return to the cross-network sending server a again through steps two, three, four, and five to parse and update the status.

[0083] Corresponding to the steps described above, the functions of each module in the system are as follows:

[0084] like Figure 4 As shown, the feedback message generation module is responsible for periodically collecting the received task information from the database within a configurable time range. It mainly extracts information such as task ID, successful reception time, and task status, converts the extracted task information into messages for the message middleware, and acts as a producer to synchronize the messages to the message middleware. To avoid conflicts, the messages are produced to the "toBeSend" topic of the message middleware.

[0085] like Figure 5 As shown, the message to file sending module is responsible for listening to the "toBeSend" topic of the message middleware. When a message is consumed, the message content is written to a new .feed.txt document and transmitted to the receiving server on the other network end through a cross-network isolated unidirectional device.

[0086] like Figure 6 As shown, the file parsing and message synchronization module is responsible for reading the content of the received .feed.txt document, parsing it into messages that the message middleware can receive, and synchronizing the messages to the "toBeDeal" topic of the message middleware;

[0087] like Figure 7As shown, the message parsing, comparison, and database entry module is responsible for listening to the "toBeDeal" topic of the message middleware. When a message is consumed, it parses the consumed message and compares the task ID contained in the message with the task ID in its own sending task list. When a matching task ID is found, the task status corresponding to that task ID is synchronized to the task status in the sending list, so that the sending server knows whether the data transmission is complete.

[0088] In summary, this invention provides a method and apparatus for verifying data transmission integrity in a heterogeneous dual-unidirectional isolated network. The method is executed on a first side network in the heterogeneous dual-unidirectional isolated network. The first side network and its corresponding second side network are deployed in two independent network domains and communicate unidirectionally through a first cross-network isolation device and a second cross-network isolation device. The method includes: a first cross-network sending server sending a task message to a second cross-network receiving server through the isolation device and generating a sending task record containing task data elements. The first cross-network receiving server receives a feedback document returned by the second side through the isolation device and parses it into verification information. The first cross-network sending server listens for the verification message, parses it to generate a receiving completed task record, and compares the task data elements in the sending task record and the receiving completed task record to verify the integrity of the data transmission. This method, by separating the roles of the cross-network sending server and the receiving server, enables the system to have better flexibility and scalability, ensures the secure transmission of task messages between heterogeneous networks, and provides an effective means of data integrity verification.

[0089] Corresponding to the above method, the present invention also provides an apparatus / system including a computer device, the computer device including a processor and a memory, the memory storing computer instructions, the processor executing the computer instructions stored in the memory, and when the computer instructions are executed by the processor, the apparatus / system performs the steps of the method as described above.

[0090] This invention also provides a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements the steps of the aforementioned edge computing server deployment method. The computer-readable storage medium can be a tangible storage medium, such as random access memory (RAM), main memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, floppy disks, hard disks, removable storage disks, CD-ROMs, or any other form of storage medium known in the art.

[0091] Those skilled in the art will understand that the exemplary components, systems, and methods described in conjunction with the embodiments disclosed herein can be implemented in hardware, software, or a combination of both. Whether implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this invention. When implemented in hardware, it can be, for example, electronic circuits, application-specific integrated circuits (ASICs), appropriate firmware, plug-ins, function cards, etc. When implemented in software, the elements of this invention are programs or code segments used to perform the desired tasks. The programs or code segments can be stored in a machine-readable medium or transmitted over a transmission medium or communication link via data signals carried in a carrier wave.

[0092] It should be clarified that the present invention is not limited to the specific configurations and processes described above and shown in the figures. For the sake of brevity, detailed descriptions of known methods are omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present invention is not limited to the specific steps described and shown. Those skilled in the art can make various changes, modifications, and additions, or change the order of steps, after understanding the spirit of the present invention.

[0093] In this invention, features described and / or illustrated for one embodiment may be used in the same or similar manner in one or more other embodiments, and / or combined with or in place of features of other embodiments.

[0094] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, various modifications and variations of the embodiments of the present invention are possible. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A method for verifying the integrity of data transmission in a heterogeneous dual-unidirectional isolated network, characterized in that, This method is executed on a first side network in a heterogeneous dual-unidirectional isolated network. The first side network and its corresponding second side network are deployed in two independent network domains, and the first side network and the second side network communicate unidirectionally through a first cross-network isolation device and a second cross-network isolation device. The first side network includes a first cross-network sending server, a first cross-network receiving server, and a first message middleware. The second side network includes a second cross-network sending server, a second cross-network receiving server, and a second message middleware. The method includes the following steps: The first cross-network sending server sends a task message to the second cross-network receiving server through the first cross-network isolation device; the first cross-network sending server generates a corresponding sending task record, which contains the data elements of the task message. The first cross-network receiving server receives a feedback document returned by the second cross-network sending server through the second cross-network isolation device; the feedback document is generated by the second cross-network sending server listening to the statistical message marked with the first topic updated and written in the second message middleware; the statistical message is obtained by the second cross-network receiving server performing statistics on the received task message and marking data elements, and then converting it into a readable format of the second message middleware. The first cross-network receiving server parses the feedback document, converts it into a verification message in a format readable by the first message middleware, and pushes it to the first message middleware marked with the second topic; The first cross-network sending server listens to the verification messages related to the second topic in the first message middleware, parses the task messages consumed by the second side network, and generates a received task completion record; the received task completion record is compared with the task messages in the sent task record to obtain the data transmission integrity verification result.

2. The data transmission integrity verification method for heterogeneous dual unidirectional isolated networks according to claim 1, characterized in that, The task sending record includes: task ID, task name, file name, file MD5 value, client ID, creation time, and task status; the task receiving record includes: task ID, task name, file name, file MD5 value, client ID, creation time, successful reception time, and task status.

3. The data transmission integrity verification method for heterogeneous dual unidirectional isolated networks according to claim 2, characterized in that, The data elements of the received task completion record and the sent task record are compared to obtain the data transmission integrity verification result, specifically including: Iterate through the sent task records and find the record with the same task ID as the verification message; If a record with the same task ID is found, the data elements in the corresponding task information of the received completed task record and the sent task record are compared to verify data integrity; the data elements to be compared include task name, file name, file MD5 value, and client ID; If the data integrity verification is successful, the task status in the sent task record is replaced with the task status in the received completed task record to indicate whether the task has been processed.

4. The data transmission integrity verification method for heterogeneous dual unidirectional isolated networks according to claim 3, characterized in that, The method also includes: If, after the task information is sent, a preset time threshold is exceeded and no record with the same task ID as the task sent is found in the task completion record, the task is marked as abnormal.

5. The data transmission integrity verification method for heterogeneous dual unidirectional isolation networks according to claim 4, characterized in that, The method also includes: If the proportion of task records marked as abnormal in the total task records exceeds a preset ratio, an alarm message will be generated.

6. The data transmission integrity verification method for heterogeneous dual unidirectional isolated networks according to claim 1, characterized in that, The method also includes: Before the cross-network sending server sends the task information or the feedback document, it encrypts the task information or the feedback document. After receiving the task information or the feedback document, the cross-network receiving server decrypts the task message or the feedback document.

7. The data transmission integrity verification method for heterogeneous dual unidirectional isolated networks according to claim 1, characterized in that, The first message middleware and the second message middleware adopt a distributed architecture, using multiple mutually backed-up nodes as the first message middleware and the second message middleware, respectively.

8. A data transmission integrity verification device for a heterogeneous dual unidirectional isolation network, comprising a processor, a memory, and a computer program stored in the memory, characterized in that, The processor is configured to execute the computer program, and when the computer program is executed, the device implements the steps of the method as described in any one of claims 1 to 7.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When executed by a processor, the computer program implements the steps of the method as described in any one of claims 1 to 7.

10. A computer program product, comprising a computer program, characterized in that, When executed by a processor, the computer program implements the steps of the method according to any one of claims 1 to 7.

Images