Dynamic channel configuration and switching method for multi-channel one-way data exchange

Abstract

The present application relates to the technical field of data security transmission between multiple terminals, and particularly relates to a dynamic channel configuration and switching method for multi-channel one-way data exchange, which comprises: generating a configuration file of a source API one-way gateway according to specified information and offline importing a source business system, generating a configuration file of a target API one-way gateway and online sending to a target business system; approving a business data transmission request; if the approval is passed, selectively opening or disconnecting a switch in an asymmetric matrix unit based on channel states and the data transmission request; after the channel is opened, the source API one-way gateway acquires business data and transmits to the target API one-way gateway via a one-way transmission link and the channel, and the target API one-way gateway receives and forwards to the target business system. The present application realizes complete isolation of data channels and management channels, breaks the traditional point-to-point fixed mode based on multi-factor dynamic scheduling, and realizes flexible, safe and efficient one-way data exchange between multiple business systems.

Description

Technical Field

[0001] This invention relates to the field of information transmission technology between multiple terminals, and in particular to a dynamic channel configuration and switching method for multi-channel unidirectional data exchange in a multi-security environment, and a data transmission system based on a multi-channel unidirectional secure exchange matrix. Background Technology

[0002] In existing technologies, unidirectional transmission devices (such as optical shutters and unidirectional isolation gateways) have become the infrastructure for ensuring that high-density network data is not leaked. However, in actual large-scale applications and multi-service concurrent scenarios, existing unidirectional transmission devices suffer from fixed channels and the inability to dynamically schedule them. For example, after configuration, existing unidirectional transmission devices typically exhibit a long-term static connection mode, lacking the flexibility to start and stop dynamically as needed. This rigid connection mode directly prevents individual channels from functioning as a whole and achieving their maximum scheduling and resource allocation capabilities. Summary of the Invention

[0003] To address the problems in the prior art, this application proposes a data transmission system based on a multi-channel unidirectional secure switching matrix. The system includes a multi-channel unidirectional secure switching matrix, multiple source-side API unidirectional gateways, and multiple target-side API unidirectional gateways. The multi-channel unidirectional secure switching matrix includes a management terminal and an asymmetric matrix unit. The management terminal includes a management terminal interface, a configuration service unit, a monitoring service unit, and a scheduling and control unit. The management terminal is connected to each target-side API one-way gateway; each source-side business system is connected to each input interface of the asymmetric matrix unit through each source-side API one-way gateway; each target business system is connected to each output interface of the asymmetric matrix unit through each target-side API one-way gateway. The configuration service unit is configured to: generate configuration files for the source API one-way gateway and the target API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway, and business data transmission requirements; and approve the business data transmission request initiated by the user according to the approval rules, and if the approval is successful, send the data transmission request to the scheduling and control unit. The monitoring service unit is connected to the target-side API one-way gateway and is configured to: monitor the status of each channel in the asymmetric matrix unit in real time; the status of each channel includes one or more of the following: connected, disconnected, abnormal, transmission bandwidth, and channel utilization. The scheduling control unit is configured to: obtain the status of each channel in the asymmetric matrix unit from the monitoring service unit, and selectively open or close the corresponding channel in the asymmetric matrix unit according to the status of each channel and the data transmission request. The asymmetric matrix unit is constructed such that an openable data channel exists only between the low-density business system on the source side and the high-density business system on the target side.

[0004] This application also provides a dynamic channel configuration and switching method for multi-channel unidirectional data exchange, wherein the method includes: S1. Generate the configuration file of the source API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and business data transmission requirements, and import it offline into the source API one-way gateway corresponding to the specified source business system; S2. Generate a configuration file for the target API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and the business data transmission request, and send it online to the target API one-way gateway corresponding to the target business system; S3. Approve the business data transmission request initiated by the user according to the approval rules; S4. If the approval is granted, obtain the status of each channel in the asymmetric matrix unit, and selectively open or close the corresponding channel in the asymmetric matrix unit according to the status of each channel and the data transmission request. S5. The source API one-way gateways corresponding to the opened channels obtain service data based on the configuration file of the source API one-way gateway, and transmit the service data to the target API one-way gateway through the one-way transmission link in the source API one-way gateway and the corresponding channel opened in the asymmetric matrix unit. S6. The target API one-way gateway receives business data based on the target API one-way gateway's configuration file and forwards it to the target business system.

[0005] This application also provides a dynamic channel configuration and switching method for multi-channel unidirectional data exchange in the above-mentioned data transmission system, the method comprising the following steps: S1. The configuration service unit generates the configuration file of the source API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and business data transmission requirements, and imports it offline into the source API one-way gateway corresponding to the specified source business system. S2. The configuration service unit generates a configuration file for the target API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and the business data transmission request, and sends it online to the target API one-way gateway corresponding to the target business system. S3. The configuration service unit approves the business data transmission requests initiated by users according to the approval rules; S4. If the approval is approved, the scheduling control unit obtains the status of each channel in the asymmetric matrix unit from the service monitoring unit, and selectively opens or disconnects the corresponding channel in the asymmetric matrix unit according to the status of each channel and the data transmission request. S5. The source API one-way gateways corresponding to the opened channels obtain service data based on the configuration file of the source API one-way gateway, and transmit the service data to the target API one-way gateway through the one-way transmission link in the source API one-way gateway and the corresponding channel opened in the asymmetric matrix unit. S6. The target API one-way gateway receives business data based on the target API one-way gateway's configuration file and forwards it to the target business system.

[0006] This application also provides a multi-channel unidirectional secure transmission device, the device including a processor, a memory and a bus, the processor executing the above-described dynamic channel configuration and switching method for multi-channel unidirectional data exchange based on a computer program stored in the memory.

[0007] This application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described dynamic channel configuration and switching method for multi-channel unidirectional data exchange.

[0008] The technical solutions provided by the embodiments of the present invention have the following technical effects: High security and out-of-band management: By using an offline import method for source configuration files and an online distribution method for target configuration files through the management terminal, complete isolation between the data channel and the management channel is achieved. Even if the management terminal is attacked, the source-side capture logic cannot be tampered with online, ensuring the security boundary of the source-side business system.

[0009] Physical unidirectional guarantee: By using the physical switch control of asymmetric matrix units, the absolute unidirectionality of the data transmission link is guaranteed, preventing information leakage in the opposite direction.

[0010] Architectural flexibility and multi-service support: It breaks away from the fixed "point-to-point" mode of traditional unidirectional gateways. Through dynamic scheduling of the switching matrix, a single system can support cross-directional transmission between multiple business systems, realizing flexible "many-to-many" mapping.

[0011] Dynamic load and resource optimization: Supports dynamic channel switching based on multiple factors such as priority, channel concurrency, bandwidth limit and time window, and can respond to changes in business load in real time to optimize resource configuration. Attached Figure Description

[0012] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used are briefly described below: Figure 1 A flowchart illustrating the information transmission process of a data transmission system based on a multi-channel unidirectional secure switching matrix according to some embodiments of the present invention is shown.

[0013] Figure 2 A flowchart illustrating a dynamic channel configuration and switching method for multi-channel unidirectional data exchange in a data transmission system according to some embodiments of the present invention is shown.

[0014] Figure 3 A flowchart illustrating a dynamic channel configuration and switching method for multi-channel unidirectional data exchange in a data transmission system according to some embodiments of the present invention is shown.

[0015] Figure 4 A schematic diagram of channel state switching in a data transmission system based on a multi-channel unidirectional secure switching matrix according to some embodiments of the present invention is shown.

[0016] Figure 5 A schematic structural diagram of a multi-channel unidirectional secure transmission device according to some embodiments of the present invention is shown. Detailed Implementation

[0017] Exemplary embodiments of the present invention will now be described in more detail with reference to the accompanying drawings. The embodiments provided in this application are intended to provide a more thorough understanding of the present invention. It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined and referenced to each other. Furthermore, although the structure of the apparatus of the present invention and its operation method are described in a specific order in the specification or drawings, this does not require or imply that these operations must be performed in that specific order, and multiple steps may be combined into one step, or one step may be further divided into multiple steps.

[0018] Additionally, unless the context explicitly indicates otherwise, the singular forms “a,” “an,” and “described” used herein may also include the plural forms. Any component, data, or structure mentioned in the embodiments of this application is generally understood to mean one or more unless explicitly defined or shown otherwise in the context. “A plurality” can refer to two or more. The terms “comprising,” “including,” “containing,” and “having” are inclusive and therefore indicate the presence of the stated features, steps, operations, elements, and / or components, but do not exclude the presence or addition of one or more other features, steps, operations, elements, components, and / or combinations thereof.

[0019] Furthermore, the term "and / or" in this application is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, or B existing alone. Additionally, the character " / " in this application generally indicates that the preceding and following related objects have an "or" relationship.

[0020] In this application, the source business system refers to the data provider in the user-specified data exchange process. The source-side business system refers to all data providers that may be specified by the user in the data exchange process. The source API one-way gateway refers to the API one-way gateway on the data provider side of the user-specified data exchange process. The source-side API one-way gateway refers to all API one-way gateways on the data provider side of the user-specified data exchange process. The target business system refers to the data receiver in the user-specified data exchange process. The target-side business system refers to all data receivers that may be specified by the user in the data exchange process. The target API one-way gateway refers to the API one-way gateway on the data receiver side of the user-specified data exchange process. The target-side API one-way gateway refers to all API one-way gateways on the data receiver side of all possible data exchange processes.

[0021] The present invention will now be described by way of example with reference to the accompanying drawings and embodiments. It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. Furthermore, the described embodiments are only some, not all, of the embodiments of the present invention.

[0022] Figure 1 This diagram illustrates an information transmission flowchart of a data transmission system based on a multi-channel unidirectional secure exchange matrix (hereinafter referred to as a secure exchange matrix) according to some embodiments of the present invention. Each API unidirectional gateway and business system in the diagram is numbered i_j, where i represents a management domain (security level: business system i_1>business system i_2>...>business system i_N, i range: 1<=i<=M, assuming there are M management domains). Only one management domain is shown in the diagram; the following description uses the information transmission process within one management domain as an example.

[0023] As shown in the figure, the data transmission system includes a multi-channel unidirectional secure switching matrix 10, a unidirectional input device group 301, and a unidirectional output device group 302. The multi-channel unidirectional secure switching matrix 10 includes a management terminal 14 and an asymmetric matrix unit. The management terminal 14 includes a management terminal interface 11, a configuration service unit 12, a monitoring service unit 13, and a scheduling and control unit 19. The unidirectional input device group 301 includes multiple source-side API unidirectional gateways 22-24. The unidirectional output device group 302 includes multiple target-side API unidirectional gateways 25-27. The asymmetric matrix unit includes an input matrix panel 16 for providing input interfaces and a unidirectional output matrix panel 17 for providing output interfaces.

[0024] Management terminal 14 connects to each target-side API one-way gateway. Each one-way gateway in one-way input device group 301 connects to each input interface of input matrix panel 16. Each one-way gateway in one-way output device group 302 connects to each output interface of one-way output matrix panel 17. Each business system 32-34 connects to source-side API one-way gateways 22-24 respectively. Each business system 35-37 connects to target-side API one-way gateways 25-27 respectively.

[0025] The management terminal 14 includes a management terminal interface 11, a configuration service unit 12, a monitoring service unit 13, and a key service unit 18.

[0026] The management terminal interface 11 serves as the control entry point, capable of receiving user input and displaying channel status in real time.

[0027] The configuration service unit 12 is used to generate a configuration file for the source API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway, and business data transmission requirements. This configuration file is then imported offline by the user into the source API one-way gateway corresponding to the specified source business system (e.g., API one-way gateway 33). The source API one-way gateway accesses the specified source business system based on the configuration file and retrieves the business data to be sent. The configuration file generated based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway, and business data transmission requirements includes configuring the data request format, the target business system (e.g., the interface address of the business system), and a timed triggering strategy (e.g., configuring the gateway capture frequency, specifying how often the API one-way gateway captures data from the source business system, or the opening time of the corresponding channel in the asymmetric matrix unit), etc.

[0028] The configuration service unit 12 is also used to generate a configuration file for the target API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and the business data transmission request, and send it online to the target API one-way gateway (such as API one-way gateway 25) corresponding to the target business system, so that the target API one-way gateway can receive the business data sent by the specified source business system based on the configuration file and forward it to the target business system.

[0029] To generate the above configuration file, the service configuration unit collects the following or some of the following information from the source-side business system, the target-side business system, the source-side API one-way gateway, and the target-side API one-way gateway: Network addressing and location information: including the IP address, subnet mask, service port number, and MAC address of the business system (used to prevent IP spoofing and implement strict IP / MAC binding).

[0030] Security Level Label: The security level label of the business system within the entire data center (such as low security, medium security, high security).

[0031] Interface protocol and data specification information, including the API types provided by the business system (such as RESTful API, SOAP, or direct database middleware interfaces), supported data carrier formats (such as JSON, XML, or specific binary streams), and authentication credentials (such as tokens, API keys, or whitelist credentials). Crucially, in one-way, handshake-free transmission scenarios, a self-contained message contract needs to be further defined so that each independently issued data request carries complete parsing, verification, and business context without relying on bidirectional negotiation. Specifically, this includes: (i) Message Protocol and Serialization Basis: The transport layer protocol used in the request and its invocation semantics—if it is HTTP / HTTPS, it includes the request method (POST / PUT / GET, etc.) and the URL endpoint path and interface version identifier; if it is gRPC, it includes the service name, method name, and interaction mode (Unary, Server Streaming, Client Streaming, or Bidirectional Streaming); if it is a message queue protocol (such as AMQP, MQTT, Kafka, etc.), it includes the Topic / Queue name, Exchange type, and message routing key; and the serialization format used by each of the above protocols (such as JSON, Protobuf, MessagePack, etc.). (ii) Self-contained request header fields: Content-Type, Character set encoding, credential delivery method (Authorization header or custom authentication header), unique request identifier (X-Request-ID), and data compression identifier (Content-Encoding). (iii) Request body structure specifications: mapping relationship between fields of data to be transmitted and parameters of target interface, field naming conventions, data type constraints, rules for required and optional fields, hierarchical relationship of nested objects, and array encapsulation method and maximum number of records per packet when transmitting in batches; (iv) Dynamic parameters and business context injection: Metadata items that need to be dynamically populated in the message and their generation rules, including source system identifier, globally unique business serial number (GUID), timestamp, data version number, batch sequence number (Sequence ID), page cursor (Offset / Cursor), business type identifier, trigger reason code and data validity period declaration; (v) Data integrity and tamper protection verification: Request body hash digest algorithm (such as SHA-256), cyclic redundancy check (CRC) rules, message authentication code (MAC) or digital signature header field based on asymmetric key to ensure that the target side can independently verify message integrity without reverse interaction; (vi) Timing, version and idempotency control: Field definitions used to ensure data timing consistency, deduplication and out-of-order reordering, including precise timestamps, batch serial numbers and idempotency keys. (vii) Application layer security encapsulation: Field-level encryption identifiers, encryption algorithm declarations, and key indexes (Key IDs) for sensitive data, enabling the target side to independently call the corresponding key to complete decryption based on the Key ID.

[0032] Business cycle parameters include the data update frequency of the source business system, the maximum number of concurrent crawling requests allowed, and the transmission window strategy to avoid peak business periods. These parameters will be written into the configuration file to form a "timed triggering strategy" (e.g., gateway crawling frequency).

[0033] API one-way gateway hardware unique identifier: such as the gateway host serial number (SN) or motherboard UUID. Configuration files and key pairs can be cryptographically bound to this hardware identifier during generation to ensure "one key per device" and prevent the configuration file from being copied to unauthorized gateways for use.

[0034] Physical matrix port mapping relationship: This specifies which specific input interface of the "Input Matrix Panel" the source-side API unidirectional gateway is physically connected to, and which specific output interface of the "Unidirectional Output Matrix Panel" the target-side API unidirectional gateway is connected to. This serves as the coordinate basis for the "Channel Control Unit" to execute physical switching actions. This mapping relationship adheres to confidentiality transmission rules and cross-domain legality rules, including the following requirements: 1. Low density → Medium density: Permitted. 2. Low density → High density: Permitted. 3. Medium density → High density: Permitted. 4. High density → Low density: Prohibited. 5. Same level → Same level: Permitted.

[0035] Gateway hardware and software status: current system version number, encryption algorithm support library version, and memory / load status, ensuring that the gateway has the ability to perform this encryption / decryption task.

[0036] In addition to collecting information related to the source-side business system, the target-side business system, the source-side API one-way gateway, and the target-side API one-way gateway, the service configuration unit also collects task-level configuration information directly related to this data transmission request. This ensures that the generated configuration file and key pair (mentioned below) can fully define the business semantics, security policies, reliability guarantees, and lifecycle governance of a one-way data transmission. This information includes, but is not limited to: 1. Data content definition and transformation rules information Clearly define the logical scope of the data to be transmitted, including the source data table or view identifier, field-level mapping relationships, primary key or unique business key definitions, data extraction conditions (such as the timestamp field or auto-incrementing identifier field used for incremental synchronization), data type conversion rules, character set conversion rules, and desensitization algorithms and parameters for sensitive fields (such as masking rules, hash salt values, and encrypted field lists). In one-way, feedback-free scenarios, this information ensures that the source gateway can independently and accurately construct a data payload that meets the expectations of the target system.

[0037] 2. Transmission strategy and flow control parameter information Define the data transmission mode and rhythm, including synchronization mode (full, incremental, or changed data capture), triggering mechanism (timed polling, event triggering, or threshold triggering), batch size of a single transmission (maximum number of records or bytes), concurrent connection limit, transmission bandwidth limit, timeout threshold, retry strategy (fixed interval backoff or exponential backoff, maximum number of retries), and the criteria for determining whether a failed message enters the dead letter queue. These parameters are directly written into the "Timed Triggering Policy" and "Flow Control Policy" fields of the configuration file.

[0038] 3. Reliability assurance and consistency parameter information Under one-way, no-handshake conditions, a pre-agreed baseline configuration for data reliability mechanisms is established. This includes the generation rules and checksum algorithm for globally unique business serial numbers, the components of idempotent keys and the duration of the idempotent window, the continuity check strategy for batch serial numbers, data integrity verification algorithms (such as hash algorithms and cyclic redundancy check standards), reconciliation trigger cycles and reconciliation fields (for post-event offline verification), and the handling strategy for data conflicts on the target side (source-side overwrite, ignore, or append version). This information enables the target gateway to achieve deduplication filtering, out-of-order reordering, and eventual consistency even without real-time reverse interaction.

[0039] 4. Security Enhancement and Key Management Policy Information In addition to basic authentication credentials, further security policies bound to this transmission task are agreed upon, including transport layer and application layer encryption algorithms and key indexes, digital signature algorithms and distribution identifiers for private and public key pairs, constituent elements of the signature header field (signature content range, timestamp precision, random number length), key rotation cycle and historical key compatibility period, and random number buffer duration and effective time window to prevent replay attacks. This information is used to generate key pairs and encryption policy configurations strongly bound to the task.

[0040] 5. Compliance Authorization and Lifecycle Governance Information This includes the approval work order number for this data transfer request, the electronic authorization identifier of the data owner, the data security classification and applicable regulatory provisions (such as personal information identifiers and cross-border transfer assessment numbers), the retention period for the target data and the automatic cleanup or archiving policy upon expiration, the start and end dates of the transmission channel's validity (supporting automatic expiration of temporary channels), and the retention duration and non-repudiation requirements for audit logs. This information ensures that the transmission task is executed within a compliant framework and supports automatic start / stop and lifecycle management of the channel.

[0041] 6. Operation and maintenance monitoring and emergency response parameter information Define the observability baseline of the transmission link, including monitoring metrics (end-to-end latency, throughput, error code distribution), alarm trigger thresholds (number of consecutive failures, latency limit, percentage of abnormal data volume fluctuations), log levels and desensitization rules, circuit breaker conditions (error rate or response latency thresholds) and degradation schemes (such as switching to a backup channel or suspending transmission), as well as authentication tokens or physical switch coordinate verification information for issuing channel cut-off commands through the management plane in emergency situations.

[0042] The configuration service unit 12 is also used to configure rules and approve data transmission requests according to the rules, blocking any operations that violate the rules. If the approval is successful, the data transmission request is sent to the scheduling control unit.

[0043] The rule-based approval process includes, but is not limited to, comprehensively evaluating the transmission request from dimensions such as data security compliance, business necessity, technical architecture feasibility, access control, or operation and maintenance management. The approval process may include manual approval, automated machine approval (e.g., approval based on a decision model), or a combination of manual and automated machine approval.

[0044] The data security compliance dimensions may include, for example, determining whether the data to be transmitted involves personal information, financial data, medical and health data, or data of regulated critical information infrastructure; verifying whether the transmission behavior complies with the Data Security Law, the Personal Information Protection Law, and the requirements for cross-border transmission security assessment; and confirming whether the transmission link meets the requirements for encrypted transmission and full-link audit traceability.

[0045] The business necessity dimension may include, for example, assessing the business rationality of the target business system receiving the data, determining whether the data range is the minimum data set necessary to complete a specific business function, confirming whether there is a possibility of replacing the original detailed data with anonymized or aggregated data, and verifying whether the data owner has authorized it.

[0046] The feasibility dimensions of the technical architecture may include, for example, assessing the technical security and performance impact of the proposed transmission method, which may include API interface, direct database connection, file exchange or message queue; analyzing the load impact of the transmission on the production environment of the source business system to determine whether the transmission window avoids business peaks; verifying whether the data consistency verification mechanism and the compensation mechanism when transmission fails are complete; and confirming whether circuit breaking, rate limiting and retry mechanisms are available.

[0047] The access control dimension may include, for example, verifying whether the data access permissions obtained by the target business system follow the principle of least privilege, assessing the key management strategy, permission rotation mechanism, and dedicated service account usage of the transmission account, and confirming the classification and hierarchical management measures, access control strategies, and data destruction period after the data is implemented in the target business system; the operation and maintenance management dimension includes: assessing the monitoring and alarm mechanism, emergency response plan, data leakage emergency handling process, and lifecycle management strategy of the transmission link, and confirming whether the transmission request is a temporary or long-term transmission and its corresponding expiration review mechanism.

[0048] According to some embodiments of the present invention, an approval decision can be generated based on the evaluation results of the above dimensions according to preset weight rules or hierarchical approval rules. When the evaluation results of all dimensions meet the corresponding threshold conditions, the transmission request is approved; otherwise, the request is rejected or supplementary evaluation materials are required before re-entering the approval process.

[0049] In addition, the configuration service unit 12 may also include a key service unit, which is responsible for the generation, distribution, and full lifecycle management of encryption and decryption keys. The keys can also be processed as part of a configuration file. The encryption key is imported offline to the source API unidirectional gateway, which uses it to encrypt business data before pushing it to the unidirectional transmission link. The decryption key is imported online to the target API unidirectional gateway, which uses it to decrypt and restore the encrypted business data upon receipt. Furthermore, the decryption key is imported when the channel is enabled and destroyed when the channel is closed; that is, the decryption operation is only performed during the period when the management terminal confirms the validity of the secure channel connection.

[0050] To address the issues of one-way transmission and offline import in this invention, and to further ensure the accuracy and security of data transmission, some embodiments of this invention ensure that the configuration files of the source API one-way gateway, the configuration files of the target API one-way gateway, and the key pair all share the same globally unique task identifier, Task_ID, thereby effectively connecting each stage of offline and one-way transmission.

[0051] When the source API one-way gateway retrieves data based on the configuration file, it encapsulates the Task_ID in the packet header. When this data is forwarded to the target API one-way gateway, the target API one-way gateway extracts the Task_ID and retrieves the configuration file and decryption key with the same identifier from its memory. Only when the Task_ID matches exactly will the target API one-way gateway invoke the corresponding business logic to decrypt and forward the data.

[0052] To further ensure the security of data transmission, the present invention also includes ensuring that the configuration files of the source API one-way gateway, the configuration files of the target API one-way gateway, and the key pair contain valid timestamps. Once a preset valid time has elapsed, the encryption key and decryption key in the configuration files of the source API one-way gateway, the configuration files of the target API one-way gateway, and the key pair will be considered invalid by the source API one-way gateway and the target API one-way gateway, thereby preventing expired instructions from being maliciously exploited.

[0053] The monitoring service unit 13 is used to monitor the status of each channel in the asymmetric matrix unit in real time. The status of each channel includes connected, disconnected, abnormal, transmission bandwidth, and channel utilization. The monitoring service unit 13 connects to each target-side API unidirectional gateway and determines the status of each channel by reading and analyzing the data transmission information.

[0054] The scheduling control unit 19 is used to obtain the status of each channel in the asymmetric matrix unit from the monitoring service unit 13, and selectively open or close the corresponding channel in the asymmetric matrix unit according to the status of each channel and the data transmission request.

[0055] Based on the status of each channel and the data transmission request, selectively open or close the corresponding channel in the asymmetric matrix unit, including: selectively close (including keep closed) or open the corresponding channel in the asymmetric matrix unit based on the relative priority of the data transmission request.

[0056] According to some embodiments of the present invention, the priority of the data transmission request can be determined based on the channels involved in the data transmission request. For example, the priority of the channel between a high-weight input and a high-weight output can be set to be greater than the priority of the channel between a low-weight input and a low-weight output. When a contention is detected between channels, the first-come, first-served principle is no longer followed; instead, some low-weight transmission channels are closed, while high-weight transmission channels remain open, and the corresponding channel is opened in response to the current data transmission request.

[0057] According to some embodiments of the present invention, assuming the channel between input terminal a and output terminal b is open and routine data backup is in progress, an urgent instruction is suddenly received requesting data transmission between input terminal a (or the source service system corresponding to input terminal a) and output terminal c (or the target service system corresponding to output terminal c). This instruction is deemed reasonable after approval. Since the channel task from a to c is set to the highest priority, the scheduling control unit will immediately issue an instruction to first forcibly disconnect the channel switch between a and b, ensuring that the transmission capacity of a is released, and then immediately open the channel between a and c. This control method ensures that core services can obtain the fastest and most direct path support at all times.

[0058] According to some embodiments of the present invention, the scheduling control unit may pre-store the weights of the input and output terminals of each matrix unit, or may obtain the aforementioned information from other storage locations. Alternatively, the weights of each input and output terminal may be pre-configured by the configuration service unit, and the scheduling control unit can determine the weights of the input and output terminals of each channel by reading the configuration results from the configuration service unit.

[0059] According to some embodiments of the present invention, selectively opening or closing corresponding channels in the asymmetric matrix unit based on the status of each channel and data transmission request may further include: selectively closing (including keeping closed) or opening corresponding channels in the asymmetric matrix unit based on the number of concurrent channels in the asymmetric matrix unit.

[0060] According to some embodiments of the present invention, the scheduling control unit can, for example, count the number of currently open channels in real time from the monitoring service unit. When it is found that the preset maximum concurrency threshold has been reached, it controls the asymmetric matrix unit to prevent the opening of new transmission channels. According to some embodiments of the present invention, when a new data transmission request corresponds to a higher priority, the scheduling control unit can first close some of the lower-weight transmission channels, and then open the higher-weight transmission channel corresponding to the new data transmission request.

[0061] For example, suppose the rule is that a maximum of 10 channels can be opened simultaneously, and there are already 10 people transmitting data. If a higher-priority task comes in, the scheduling control unit will, according to the priority instruction, actively cut off (disconnect) the old channel with the lowest priority, free up a space, and then close (open) the switch for the new task.

[0062] According to some embodiments of the present invention, selectively opening or closing corresponding channels in the asymmetric matrix unit based on the status of each channel and data transmission request may further include: selectively closing (including keeping closed) or opening corresponding channels in the asymmetric matrix unit based on the channel bandwidth limit.

[0063] Due to the limited capacity of physical links, the monitoring service unit can continuously calculate the total bandwidth already used by each output port. When a new data transmission request involves connecting to a certain output port, the scheduling and control unit will calculate whether the total bandwidth after summing will exceed the limit.

[0064] For example, an output port has a total bandwidth of 10G, and two input sources are currently using 9G. If a third input source tries to connect and use 2G of bandwidth, the scheduling control unit will calculate that this exceeds the limit and keep the channel switch open. The corresponding matrix switch will only close when other channels release enough bandwidth, or when a high-priority task needs to forcefully "squeeze out" a low-bandwidth task.

[0065] According to some embodiments of the present invention, selectively opening or closing corresponding channels in an asymmetric matrix unit based on the status of each channel and data transmission request may further include: selectively closing (including keeping closed) or opening corresponding channels of the asymmetric matrix unit based on the load dynamics of each channel in the asymmetric matrix unit.

[0066] When multiple output terminals can receive the same data, the monitoring service unit can report the busy level of each channel, and the scheduling and control unit can then select the transmission channel with the least pressure to open.

[0067] For example, data from source business system A can be sent to either B or C. If monitoring detects that B is under high load while C is idle, the scheduling and control unit will automatically bypass the path to B and instead open the channel between A and C. This flexible switching ensures that resources are used most efficiently, preventing situations where one channel is congested while another is idle.

[0068] According to some embodiments of the present invention, selectively opening or closing corresponding channels in the asymmetric matrix unit based on the status of each channel and data transmission request may further include: selectively closing (including keeping closed) or opening corresponding channels in the asymmetric matrix unit based on a time window.

[0069] The scheduling and control unit can not only act according to the real-time status, but also refer to a set of "timetables" to pre-configure the switching status so that the matrix connection relationship (and the corresponding bandwidth allocation) can automatically switch as the time period changes.

[0070] For example, during peak daytime business hours, the scheduling and control unit allocates most bandwidth resources to production service channels; while during specific windows in the early morning, the system automatically adjusts the matrix switching to allocate bandwidth to data backup or system maintenance channels. This on-demand allocation strategy maximizes the utilization of the idle value of the asymmetric matrix at different times.

[0071] According to some embodiments of the present invention, the configuration file of the source API unidirectional gateway generated by the configuration service unit may further include data transmission parameters such as data request time, data request frequency, data transmission quantity, transmission bandwidth, and channel utilization. The configuration file is then imported offline into the source unidirectional gateway to implement corresponding actions. The scheduling control unit can further combine the aforementioned data transmission parameters such as data request time, data request frequency, data transmission quantity, transmission bandwidth, and channel utilization to adjust the scheduling actions in real time under the aforementioned circumstances. For example, when it is determined that source business system A is about to transmit data to target business system B at a predetermined time, the scheduling control unit can preemptively shut down the transmission from source business system A to target business system C, so that all bandwidth is allocated to B.

[0072] Asymmetric matrix unit 15 is used to open a data channel between a designated low-density source business system and a high-density target business system under the control of the scheduling and control unit. The channel status is unconnected by default. An asymmetric matrix unit refers to a matrix that is not a conventional matrix capable of connecting any two points, but rather a matrix with controlled connection possibilities only between two preset points. Asymmetric matrix unit 15 can be used as follows: Figure 1The configuration is as follows: a data channel exists between the low-density service system on the source side and the high-density service system on the target side (including service systems on the target side with the same security level), which can be opened and closed by a switch; however, there is no connectable channel between the high-density service system on the source side and the low-density service system on the target side. The switch is open in the default initial state.

[0073] The API one-way gateway includes a gateway host and a one-way transmission link.

[0074] A unidirectional transmission link (or channel) refers to a physical channel that supports only unidirectional data flow. According to some embodiments of the present invention, this unidirectional transmission link may include: an electro-optical conversion unidirectional optical transmitter for converting electrical signals into optical signals; a unidirectional optical fiber; and an opto-optical conversion unidirectional optical receiver for converting optical signals back into electrical signals. This structure ensures unidirectionality at the physical layer. In this application, the electro-optical conversion unidirectional optical transmitter can convert electrical signals into optical signals, but cannot convert optical signals back into electrical signals. The opto-optical conversion unidirectional optical receiver can convert optical signals into electrical signals, but cannot convert electrical signals back into optical signals. Depending on the actual situation, there may be a video cable (such as an HDMI cable) or other connection line before the electro-optical conversion unidirectional optical transmitter to connect the electro-optical conversion unidirectional optical transmitter and the preceding component (such as a video transmission unit) that transmits electrical signals to it. Therefore, the unidirectional transmission link of the present invention also includes some necessary connection lines. The unidirectional transmission link can also be any link that can realize physically unidirectional signal transmission, including but not limited to unidirectional serial cables.

[0075] According to some embodiments of the present invention, the source-side API unidirectional gateway further includes a video transmission unit, which is used to map the file to be sent into a video signal and to send the video signal to a unidirectional transmission link. The unidirectional transmission link may include an HDMI cable, an electro-optical conversion unidirectional optical transmitter, a unidirectional optical fiber, and an opto-optical conversion unidirectional optical receiver. According to some embodiments of the present invention, this unit directly carries the service data to be sent using the pixel channel values ​​of the video frame and outputs it to the unidirectional transmission link. The target API unidirectional gateway further includes: a decoding and re-timing unit, which is used to decode and re-timing the received signal and restore the signal to a byte stream; and a data reassembler, which is used to reassemble the byte stream into service data.

[0076] The business data may include real-time event notifications, log synchronization, alarm push notifications, and files.

[0077] Figure 2 This diagram illustrates a dynamic channel configuration and switching method for multi-channel unidirectional data exchange according to some embodiments of the present invention. The method includes the following steps: S1. Generate the configuration file for the source API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway, and business data transmission requirements, and import it offline into the source API one-way gateway corresponding to the specified source business system.

[0078] The business data transmission requirements cover the business data transmission requirements corresponding to subsequent data transmission requests.

[0079] The source API one-way gateway can access a specified source business system and retrieve business data to be sent from it based on a configuration file. The configuration file for generating the source API one-way gateway, based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway, and the business data transmission requirements, includes configuring the data request format, the target business system (such as the interface address of the business system), and the timed triggering strategy (such as configuring the gateway's fetching frequency, specifying how often the API one-way gateway fetches data from the source business system, or the opening time of the corresponding channel in the asymmetric matrix unit), etc.

[0080] S2. Generate a configuration file for the target API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway, and the business data transmission request, and send it online to the target API one-way gateway corresponding to the target business system.

[0081] Based on this configuration file, the target API one-way gateway can receive business data sent by the specified source business system and forward it to the target business system.

[0082] S3. Approve the business data transmission request initiated by the user according to the approval rules.

[0083] The rule-based approval process includes, but is not limited to: the configuration service unit comprehensively evaluating the transmission request from dimensions such as data security compliance, business necessity, technical architecture feasibility, access control, or operation and maintenance management. The approval process may include manual approval, automated machine approval (e.g., approval based on a decision model), or a combination of manual and automated machine approval.

[0084] S4. If the approval is granted, obtain the status of each channel in the asymmetric matrix unit, and selectively open or close the corresponding channel in the asymmetric matrix unit according to the status of each channel and the data transmission request.

[0085] The method of selectively opening or closing corresponding channels in the asymmetric matrix unit according to the status of each channel and the data transmission request includes: selectively closing (including keeping closed) or opening corresponding channels in the asymmetric matrix unit based on the relative priority of the data transmission request.

[0086] According to some embodiments of the present invention, selectively opening or closing corresponding channels in the asymmetric matrix unit based on the status of each channel and data transmission request may further include: selectively closing (including keeping closed) or opening corresponding channels in the asymmetric matrix unit based on the number of concurrent channels in the asymmetric matrix unit.

[0087] According to some embodiments of the present invention, selectively opening or closing corresponding channels in the asymmetric matrix unit based on the status of each channel and data transmission request may further include: selectively closing (including keeping closed) or opening corresponding channels in the asymmetric matrix unit based on the channel bandwidth limit.

[0088] According to some embodiments of the present invention, selectively opening or closing corresponding channels in the asymmetric matrix unit based on the status of each channel and data transmission request may further include: selectively closing (including keeping closed) or opening corresponding channels in the asymmetric matrix unit based on the load dynamics of each channel in the asymmetric matrix unit.

[0089] According to some embodiments of the present invention, selectively opening or closing corresponding channels in the asymmetric matrix unit based on the status of each channel and data transmission request may further include: selectively closing (including keeping closed) or opening corresponding channels in the asymmetric matrix unit based on a time window.

[0090] According to some embodiments of the present invention, the corresponding channel can also be opened based on a comprehensive consideration of priority, channel concurrency, channel bandwidth limit, time window, etc.

[0091] According to some embodiments of the present invention, the process of selectively opening or closing corresponding channels in an asymmetric matrix unit can be achieved through the following steps: S41. Send a control signal to the asymmetric matrix unit to create a new channel.

[0092] S42. The asymmetric matrix unit establishes a new channel based on the control signal.

[0093] This ensures that the new transmission path is ready before the data migration.

[0094] To ensure the continuity and security of transmission, the scheduling and control unit marks the old channels in the asymmetric matrix unit as "to be switched over". At this time, the old channels can stop receiving data, but continue to process the remaining transmission tasks.

[0095] S43. Perform a core switching action in the asymmetric matrix unit to migrate the data stream to the new channel.

[0096] In this step, the source API unidirectional gateway begins transmitting business data to the target API unidirectional gateway through the newly established asymmetric matrix channel. After the data flow is successfully migrated, it ensures that the memory data associated with the old channel (such as sensitive information like decryption keys) is promptly cleared, and that the channels in the asymmetric matrix unit are restored to an unconnected state, thus releasing resources.

[0097] This invention ensures high availability and data security for unidirectional data transmission during dynamic channel adjustments (such as switching based on bandwidth, load, or time window) by using a "build first, then dismantle" logic.

[0098] S5. The source API one-way gateways corresponding to the opened channels obtain service data based on the configuration file of the source API one-way gateway, and transmit the service data to the target API one-way gateway through the one-way transmission link in the source API one-way gateway and the corresponding opened channel in the asymmetric matrix unit.

[0099] As described above, the source API one-way gateway sends API requests to the source business system to obtain business data in an active pull mode, while the target API one-way gateway obtains data in an active push mode.

[0100] S6. The target API one-way gateway receives business data based on the target API one-way gateway's configuration file and forwards it to the target business system.

[0101] According to some embodiments of the present invention, the method may further include encrypting the service data obtained by each source API one-way gateway with an encryption key, and transmitting the encrypted service data to the target API one-way gateway via the one-way transmission link in the source API one-way gateway and the corresponding channel opened in the asymmetric matrix unit. The encryption key is, for example, the encryption key in the key pair generated by the configuration service unit.

[0102] The target API one-way gateway receives encrypted business data, decrypts it using a decryption key to obtain the business data, and forwards it to the target business system. The decryption key is, for example, the decryption key in a key pair generated by the configuration service unit.

[0103] When data transmission ends, the target API one-way gateway promptly clears the decryption key from its memory.

[0104] The end of data transmission includes either the completion of data transmission or the receipt of a message indicating that the channel has been closed.

[0105] According to some embodiments of the present invention, the method further includes restoring the channels in the asymmetric matrix unit to an unconnected state.

[0106] Figure 3 This diagram illustrates a dynamic channel configuration and switching method for multi-channel unidirectional data exchange according to some embodiments of the present invention. The dynamic channel configuration and switching method can be used for... Figure 1 In the data transmission system shown, the method includes the following steps: S1. The configuration service unit generates the configuration file of the source API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and business data transmission requirements, and imports it offline into the source API one-way gateway corresponding to the specified source business system. S2. The configuration service unit generates a configuration file for the target API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and the business data transmission request, and sends it online to the target API one-way gateway corresponding to the target business system. S3. The configuration service unit approves the business data transmission requests initiated by users according to the approval rules; S4. If the approval is approved, the scheduling control unit obtains the status of each channel in the asymmetric matrix unit from the service monitoring unit, and selectively opens or disconnects the corresponding channel in the asymmetric matrix unit according to the status of each channel and the data transmission request. S5. The source API one-way gateways corresponding to the opened channels obtain service data based on the configuration file of the source API one-way gateway, and transmit the service data to the target API one-way gateway through the one-way transmission link in the source API one-way gateway and the corresponding channel opened in the asymmetric matrix unit. S6. The target API one-way gateway receives business data based on the target API one-way gateway's configuration file and forwards it to the target business system.

[0107] The above steps can be performed by Figure 1 The corresponding units in the data transmission system execute the steps. For example, steps S1-S3 are mainly executed by the configuration service unit, step S4 is mainly executed by the scheduling control unit, and steps S5 and S6 are executed by the units mentioned therein.

[0108] Surrounded in front Figure 1 The examples and explanations of the above steps also apply here, and will not be repeated here.

[0109] Furthermore, the order of the above steps can be adjusted. For example, the order of establishing the channel connection and distributing the configuration file can be reversed, or they can be performed simultaneously. For instance, after step S4, the corresponding configuration file can be generated and imported offline into the source API unidirectional gateway and online into the target API unidirectional gateway, respectively.

[0110] Figure 4 A flowchart illustrating the channel state switching process in a one-way secure data transmission system according to some embodiments of the present invention is shown.

[0111] 1. Configuration and Application Stage Unconfigured (Initial State): The system generates configuration files for the source API one-way gateway (offline import) and the target API one-way gateway (online sending) based on the source / target business system and data transmission request.

[0112] Pending Approval: This status is entered after the user submits the policy. The system will review the request manually or automatically based on factors such as data security, business necessity, and technical feasibility.

[0113] 2. Establishment and Transmission Phase Established: After approval, the system obtains the status of each channel in the asymmetric matrix unit. Based on factors such as priority, concurrency, bandwidth limit, load dynamics, or time window, the system selectively activates the corresponding channels.

[0114] During transmission: After the channel is opened, the source API one-way gateway obtains the business data in the "active pull" mode, and transmits it to the target API one-way gateway through the one-way link and matrix channel after encryption.

[0115] 3. Operation monitoring and adjustment Rate-limited operation: If bandwidth over-limit or other control strategies are triggered during transmission, the control channel enters a rate-limited state (e.g., disconnecting some connections) to ensure system stability.

[0116] Abnormal state: When an abnormality is detected in the channel, the system will record the state and attempt to "automatically recover" to the transmission state when the conditions are met.

[0117] 4. Task completion and destruction Destroyed: The task ends after data transmission is complete or a channel closure message is received. The target API unidirectional gateway must promptly clear the decryption key from memory and restore the channels in the asymmetric matrix unit to an unconnected state.

[0118] Return to Unconfigured: After the channel is destroyed, the state machine returns to the initial point and waits for the next transmission request.

[0119] Figure 5A schematic structural diagram of a multi-channel unidirectional secure transmission device 4000 according to some embodiments of the present invention is shown. The device includes a processor 4051, a memory 4052, and a bus 4053.

[0120] In some instances, the device may further include an input device 4001, an input port 4002, an output port 4003, and an output device 4004. The input port 4002, processor 4051, memory 4052, and output port 4003 are connected via a bus 4053. The input device 4001 and output device 4004 are connected to the bus 4053 via input port 4002 and output port 4003, respectively, and thus connected to other components of the device. It should be noted that the output interface and input interface here can also be represented by I / O interfaces. Specifically, the input device 4001 receives input information from the outside and transmits the input information to the processor 4051 via the input port 4002. The processor 4051 processes the input information based on computer-executable instructions stored in the memory 4052 to generate output information, temporarily or permanently stores the output information in the memory 4052, and then transmits the output information to the output device 4004 via the output port 4003.

[0121] The aforementioned memory 4052 includes a large-capacity memory for data or instructions. For example, and not limitingly, memory 4052 may include an HDD, floppy disk drive, flash memory, optical disk, magneto-optical disk, magnetic tape, or Universal Serial Bus (USB) drive, or a combination of two or more of these. Where suitable, memory 4052 may include removable or non-removable (or fixed) media. Where suitable, memory 4052 may be internal or external to a device. In a particular embodiment, memory 4052 is a non-volatile solid-state memory. In a particular embodiment, memory 4052 includes read-only memory (ROM). Where suitable, the ROM may be a mask-programmed ROM, a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (EEPROM), an electrically rewritable ROM (EAROM), or flash memory, or a combination of two or more of these.

[0122] A bus, including hardware, software, or both, couples components together. For example, and not limitingly, bus 4053 may include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), HyperTransport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an Infinite Bandwidth Interconnect, a Low Pin Count (LPC) bus, a memory bus, a Microchannel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local (VLB) bus, or other suitable buses, or combinations of two or more of these. While specific buses are described and illustrated in embodiments of the invention, the invention contemplates any suitable bus or interconnect.

[0123] The processor executes the dynamic channel configuration and switching method for multi-channel unidirectional data exchange based on the computer program stored in the memory.

[0124] Further details can be obtained by proceeding from the preceding discussions. Figures 1 to 4 The descriptions will not be repeated here.

[0125] According to further embodiments of the present invention, the computer program can be divided into multiple units in various ways and stored in the memory, and executed by the processor to complete the present invention. The multiple units can be a series of computer program instruction segments capable of performing a specific function, which describe the execution process of the computer program in the device. The computer program can be based on the foregoing reference... Figures 1 to 3 The functions of each unit in the various embodiments described are used to divide the system into multiple units, or include those referenced above. Figure 1 and 2 The various units in the described embodiments are not repeated here for the sake of simplicity.

[0126] The processor referred to may be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc. The processor is the control center of the device, connecting various parts of the device via various interfaces and lines. The device may be a desktop computer, laptop, handheld computer, cloud server, or other computing devices or a part thereof. The device may include, but is not limited to, a processor and memory. Those skilled in the art will understand that the schematic diagrams are merely examples of the device and do not constitute a limitation on the device.

[0127] The detailed descriptions of the figures mentioned above are included here by reference and will not be repeated here.

[0128] This application also proposes a computer-readable storage medium storing a computer program, wherein the computer program, when executed by a processor, implements the dynamic channel configuration and switching method for multi-channel unidirectional data exchange.

[0129] The technical solutions provided by the embodiments of the present invention have the following technical effects: High security and out-of-band management: By using an offline import method for source configuration files and an online distribution method for target configuration files through the management terminal, complete isolation between the data channel and the management channel is achieved. Even if the management terminal is attacked, the source-side capture logic cannot be tampered with online, ensuring the security boundary of the source-side business system.

[0130] Physical unidirectional guarantee: By using the physical switch control of asymmetric matrix units, the absolute unidirectionality of the data transmission link is guaranteed, preventing information leakage in the opposite direction.

[0131] Architectural flexibility and multi-service support: It breaks away from the fixed "point-to-point" mode of traditional unidirectional gateways. Through dynamic scheduling of the switching matrix, a single system can support cross-directional transmission between multiple business systems, realizing flexible "many-to-many" mapping.

[0132] Dynamic load and resource optimization: Supports dynamic channel switching based on multiple factors such as priority, channel concurrency, bandwidth limit and time window, and can respond to changes in business load in real time to optimize resource configuration.

Claims

1. A data transmission system based on a multi-channel unidirectional secure switching matrix, wherein, The system includes a multi-channel unidirectional secure exchange matrix, multiple source-side API unidirectional gateways, and multiple target-side API unidirectional gateways; The multi-channel unidirectional secure exchange matrix includes: a management terminal and an asymmetric matrix unit; the management terminal includes a management terminal interface, a configuration service unit, a monitoring service unit, and a scheduling and control unit; The management terminal is connected to each target-side API one-way gateway; each source-side business system is connected to each input interface of the asymmetric matrix unit through each source-side API one-way gateway; each target business system is connected to each output interface of the asymmetric matrix unit through each target-side API one-way gateway. The configuration service unit is configured to: generate configuration files for the source API one-way gateway and the target API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway, and business data transmission requirements; and approve the business data transmission request initiated by the user according to the approval rules, and if the approval is successful, send the data transmission request to the scheduling and control unit. The monitoring service unit is connected to the target-side API one-way gateway and is configured to: monitor the status of each channel in the asymmetric matrix unit in real time; the status of each channel includes one or more of the following: connected, disconnected, abnormal, transmission bandwidth, and channel utilization. The scheduling control unit is configured to: obtain the status of each channel in the asymmetric matrix unit from the monitoring service unit, and selectively open or close the corresponding channel in the asymmetric matrix unit according to the status of each channel and the data transmission request. The asymmetric matrix unit is constructed such that an openable data channel exists only between the low-density business system on the source side and the high-density business system on the target side.

2. The data transmission system according to claim 1, wherein, The configuration service unit also includes a key service unit, which is configured to be responsible for the generation, distribution and full lifecycle management of the encryption key and decryption key in the key pair; the encryption key is provided to the offline import source API one-way gateway, and is used by the source API one-way gateway to encrypt the business data before pushing it to the one-way transmission link; The decryption key is imported online into the target API one-way gateway, so that the target API one-way gateway can decrypt and restore the encrypted business data after receiving it; the decryption key is imported when the channel is enabled and destroyed when the channel is closed.

3. The data transmission system according to claim 1, wherein, The source API one-way gateway's configuration file, the target API one-way gateway's configuration file, and the key pair all share the same globally unique task identifier, Task_ID; and / or, The configuration file and key pair contain a valid timestamp. Once the preset valid time is exceeded, the configuration file and key pair will be considered invalid by the source API one-way gateway and the target API one-way gateway. And / or, The source-side API unidirectional gateway and / or the target-side API unidirectional gateway include a unidirectional transmission link, which includes: an electro-optical conversion unidirectional optical transmitter for converting electrical signals into optical signals; and a unidirectional optical fiber. And a photoelectric conversion unidirectional optical receiver, used to convert optical signals back into electrical signals.

4. A dynamic channel configuration and switching method for multi-channel unidirectional data exchange, wherein, The method includes: S1. Generate the configuration file of the source API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and business data transmission requirements, and import it offline into the source API one-way gateway corresponding to the specified source business system; S2. Generate a configuration file for the target API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and the business data transmission request, and send it online to the target API one-way gateway corresponding to the target business system; S3. Approve the business data transmission request initiated by the user according to the approval rules; S4. If the approval is granted, obtain the status of each channel in the asymmetric matrix unit, and selectively open or close the corresponding channel in the asymmetric matrix unit according to the status of each channel and the data transmission request. S5. The source API one-way gateways corresponding to the opened channels obtain service data based on the configuration file of the source API one-way gateway, and transmit the service data to the target API one-way gateway through the one-way transmission link in the source API one-way gateway and the corresponding channel opened in the asymmetric matrix unit. S6. The target API one-way gateway receives business data based on the target API one-way gateway's configuration file and forwards it to the target business system.

5. A dynamic channel configuration and switching method for multi-channel unidirectional data exchange in the data transmission system according to any one of claims 1-3, the method comprising the following steps: S1. The configuration service unit generates the configuration file of the source API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and business data transmission requirements, and imports it offline into the source API one-way gateway corresponding to the specified source business system. S2. The configuration service unit generates a configuration file for the target API one-way gateway based on the specified source business system, target business system, source API one-way gateway, target API one-way gateway and the business data transmission request, and sends it online to the target API one-way gateway corresponding to the target business system. S3. The configuration service unit approves the business data transmission requests initiated by users according to the approval rules; S4. If the approval is approved, the scheduling control unit obtains the status of each channel in the asymmetric matrix unit from the service monitoring unit, and selectively opens or disconnects the corresponding channel in the asymmetric matrix unit according to the status of each channel and the data transmission request. S5. The source API one-way gateways corresponding to the opened channels obtain service data based on the configuration file of the source API one-way gateway, and transmit the service data to the target API one-way gateway through the one-way transmission link in the source API one-way gateway and the corresponding channel opened in the asymmetric matrix unit. S6. The target API one-way gateway receives business data based on the target API one-way gateway's configuration file and forwards it to the target business system.

6. The method according to claim 4 or 5, wherein, The configuration file generated in step S1 contains a key pair, which includes an encryption key and a decryption key. The method further includes encrypting the service data obtained from each source API one-way gateway using the encryption key, and transmitting the encrypted service data to the target API one-way gateway via the one-way transmission link in the source API one-way gateway and the corresponding opened channels in the asymmetric matrix unit; target The API one-way gateway receives encrypted business data, decrypts it using a decryption key to obtain the business data, and forwards it to the target business system. The method further includes: when the data transmission ends, the target API one-way gateway promptly clears the decryption key from its memory; And restore the channels in the asymmetric matrix unit to an unconnected state.

7. The method according to claim 4, 5 or 6, wherein, Based on the status of each channel and the data transmission request, the corresponding channel in the asymmetric matrix unit is selectively opened or closed, including: based on one or more factors such as the relative priority of the data transmission request, the number of concurrent channels, the upper limit of channel bandwidth, load dynamics, and time window, the corresponding channel in the asymmetric matrix unit is selectively opened or closed.

8. The method according to claim 7, wherein, Selectively opening or closing corresponding channels in an asymmetric matrix unit based on the relative priority of data transmission requests includes: determining the relative priority of the data transmission request according to the priority of the channel or task involved in the data transmission request; the channel priority includes a priority determined based on the weights of the input and output ends of the asymmetric matrix unit; Selectively opening or closing corresponding channels in an asymmetric matrix unit based on the channel concurrency, including: when the channel concurrency reaches a preset maximum concurrency threshold, controlling the asymmetric matrix unit to no longer open new channels, or when the data transmission request corresponds to a higher priority, first closing some low-weight channels, and then opening the channel corresponding to the data transmission request. Selectively opening or closing corresponding channels in the asymmetric matrix unit based on the channel bandwidth limit includes: calculating the total bandwidth already occupied by each output port; when a new data transmission request involves connecting to an output port, calculating whether the total bandwidth after summing at that output port exceeds the limit; if so, controlling the asymmetric matrix unit to no longer open the channel corresponding to the data transmission request, or opening the channel corresponding to the data transmission request after other channels have released sufficient bandwidth. Based on load dynamics, selectively open or close corresponding channels in the asymmetric matrix unit, including: when multiple outputs can receive the same data, select the channel with the least load based on the busy level of each channel. Selectively turning on or off corresponding channels in an asymmetric matrix unit based on a time window includes: pre-configuring the switching state according to a time schedule so that the opening or closing of the corresponding channels in the asymmetric matrix unit automatically switches as the time period changes.

9. A multi-channel unidirectional secure transmission device, the device comprising a processor, a memory, and a bus, wherein the processor executes the dynamic channel configuration and switching method for multi-channel unidirectional data exchange as described in any one of claims 4-8 based on a computer program stored in the memory.

10. A computer-readable storage medium storing a computer program, wherein, When the computer program is executed by the processor, it implements the dynamic channel configuration and switching method for multi-channel unidirectional data exchange as described in any one of claims 4-8.

Images