A host real-time data exchange method under a network isolation environment

Abstract

This application relates to a method for real-time data exchange between hosts in a network-isolated environment. The method includes: the sending host encrypting the service data to be exchanged, generating encrypted verification data, pushing it into a pending confirmation queue, and encoding it to generate a data image for display; the receiving host acquiring the data image and verifying it, generating an confirmation receipt after obtaining the verified service data, and encoding it as a receipt image for display; and the sending host acquiring the receipt image, parsing the confirmation information, and removing the service data to be exchanged from the pending confirmation queue based on the confirmation information. This method improves the real-time performance, automation, and data security and integrity of host data exchange in a network-isolated environment through image encoding transmission, encryption verification, and receipt confirmation.

Description

Technical Field

[0001] This invention belongs to the field of computer technology, and in particular relates to a method for real-time data exchange between hosts in a network isolation environment. Background Technology

[0002] In network isolation scenarios, data exchange between two hosts cannot be achieved through traditional network communication methods if there is no physical network connection between them. Currently, for host data exchange in this scenario, removable storage media such as USB flash drives and external hard drives are commonly used as relay carriers, with data transfer between different hosts completed through manual plugging, unplugging, and copying. However, this traditional data exchange method has several drawbacks: First, the entire exchange process relies on manual operation, making automated data transmission impossible and resulting in low operational efficiency; second, for business scenarios with high timeliness requirements, such as the need to complete multiple data exchanges within one second, the manual interaction method using removable storage media cannot meet real-time requirements; third, data loss, tampering, or leakage is prone to occur during data storage on removable storage media, compromising the integrity and security of data transmission. Therefore, to address the needs for automation, real-time performance, and security in host data exchange under network isolation environments, a technical solution is urgently needed that enables real-time data exchange between hosts without manual intervention while ensuring data security and integrity. Summary of the Invention

[0003] Therefore, it is necessary to provide a method for real-time data exchange between hosts in a network isolation environment to address the aforementioned technical problems, aiming to improve the real-time performance and automation of data exchange, and enhance the security and integrity of data transmission.

[0004] Firstly, this application provides a method for real-time data exchange between hosts in a network-isolated environment, including:

[0005] S1: The sending host encrypts the business data to be exchanged, generates encrypted verification data, and pushes the business data to be exchanged into the confirmation queue of the sending host.

[0006] S2: The sending host encodes the encrypted verification data to generate a data image, which is then displayed on the first display device of the sending host.

[0007] S3: Collect data images through the image acquisition device of the receiving host, perform data verification on the data images, and obtain the verified business data;

[0008] S4: The receiving host generates confirmation receipt data based on the verified business data, encodes the confirmation receipt data, generates a receipt image, and displays the receipt image through the second display device.

[0009] S5: Acquire receipt images through the image acquisition device of the sending host, parse the data of the receipt images, generate confirmation information, and remove the business data to be exchanged from the confirmation queue based on the confirmation information.

[0010] In one embodiment, method S1 encrypts the service data to be exchanged by the sending host to generate encrypted verification data, including:

[0011] The business data to be exchanged is encrypted to generate encrypted business data.

[0012] Perform hash operations on the business data to be exchanged to generate a preset hash value;

[0013] Encapsulate encrypted business data and preset hash values ​​to generate encrypted verification data.

[0014] In one embodiment, method S3 performs data verification on the data image to obtain verified business data, including:

[0015] Preprocessing operations are performed on the data images to generate standard image data; these preprocessing operations include grayscale conversion and perspective correction.

[0016] Standard image data is decoded using QR codes to generate data to be verified;

[0017] The data to be verified is decrypted to generate the original business data.

[0018] Perform hash operations on the original business data to generate hash values;

[0019] The calculated hash value is compared with the preset hash value in the data to be verified to obtain the comparison result. If the comparison result is consistent, the original business data is used as the business data that has passed the verification.

[0020] In one embodiment, method S5 involves parsing the receipt image to generate confirmation information, and removing the business data to be exchanged from the confirmation queue based on the confirmation information, including:

[0021] Perform preprocessing operations on the receipt image to generate a standard receipt image; the preprocessing operations include grayscale conversion and perspective correction.

[0022] The standard image of the receipt is parsed and processed to generate confirmation information;

[0023] If the confirmation message is a successful verification result, the confirmation message is taken as valid confirmation information, and the business data to be exchanged is removed from the pending confirmation queue.

[0024] In one embodiment, the method further includes:

[0025] If no valid confirmation is received within the preset first time period, a retransmission instruction is generated. The retransmission instruction is used to instruct the business data to be exchanged to be retransmitted.

[0026] When the number of retransmissions of the business data to be exchanged reaches the preset retransmission threshold, the business data to be exchanged is discarded, a discard notification is generated, and a discard notification is sent to the upstream business system.

[0027] In one embodiment, the method further includes:

[0028] After acquiring data images through the image acquisition device of the receiving host, if the receiving host cannot verify the data images within a consecutive preset second time period, the data images are saved, a first confirmation instruction is generated, and the first confirmation instruction is sent to the upstream business system.

[0029] After the image acquisition device of the sending host acquires the receipt image, if the sending host cannot parse the data of the receipt image within a consecutive preset second time period, the receipt image is saved, a second confirmation instruction is generated, and the second confirmation instruction is sent to the upstream business system.

[0030] In one embodiment, the data image is obtained by encoding the encrypted verification data using UTF-8 encoding on the sending host.

[0031] In one embodiment, preprocessing operations are performed on the data image to generate standard image data, including:

[0032] Perform 8-bit single-channel grayscale conversion on the data image to generate grayscale image data;

[0033] Identify the QR code positioning pattern in grayscale image data and calculate the perspective transformation matrix based on the QR code positioning pattern;

[0034] The grayscale image data is subjected to deformation correction processing based on the perspective transformation matrix to generate standard image data.

[0035] In one embodiment, the data image includes a receiver identifier and encrypted verification data;

[0036] After acquiring data images through the image acquisition device of the receiving host, the method also includes:

[0037] The receiving host detects the receiving end identifier in the data image to obtain the detection result;

[0038] When the detection result indicates that the receiver identifier matches the identifier of the receiver host, data verification is performed on the data image.

[0039] Secondly, this application also provides a real-time data exchange system for hosts in a network-isolated environment, comprising:

[0040] The data encryption queuing module is used to encrypt the business data to be exchanged through the sending host, generate encrypted verification data, and push the business data to be exchanged into the confirmation queue of the sending host.

[0041] The image encoding and display module is used to encode data images based on encrypted verification data through the sending host, and then display the data images through the first display device of the sending host.

[0042] The image acquisition and verification module is used to acquire data images through the image acquisition device of the receiving host, perform data verification on the data images, and obtain business data that has passed the verification.

[0043] The receipt encoding and display module is used to generate confirmation receipt data based on the verified business data through the receiving host, encode the confirmation receipt data, generate a receipt image, and display the receipt image through a second display device.

[0044] The receipt parsing and confirmation module is used to collect receipt images through the image acquisition device of the sending host, parse the data of the receipt images, generate confirmation information, and remove the business data to be exchanged from the confirmation queue based on the confirmation information.

[0045] The aforementioned method for real-time data exchange between hosts in a network isolation environment first achieves secure encapsulation and transmission status tracking of business data through data encryption and queue caching mechanisms. Second, by encoding and generating data images for display on a display device, it establishes an optical signal transmission channel in a physically isolated environment, overcoming the dependence on traditional network connections. Furthermore, image acquisition and data verification ensure the integrity and correctness of data transmitted across media. Receipt confirmation and queue removal mechanisms achieve closed-loop control and automated decoupling of transmission. Finally, real-time data exchange based on bidirectional image interaction ensures automated collaboration and transmission reliability between isolated hosts, enhancing the real-time performance, security, and integrity of data exchange. Attached Figure Description

[0046] To more clearly illustrate the technical solutions in the embodiments or related technologies of this application, the accompanying drawings used in the description of the embodiments or related technologies will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0047] Figure 1A flowchart of a real-time data exchange method for hosts in a network isolation environment is provided as an exemplary embodiment of the present invention;

[0048] Figure 2 A flowchart illustrating a bidirectional data transfer process between a sending host and a receiving host, provided as an exemplary embodiment of the present invention;

[0049] Figure 3 This is a schematic diagram of a host real-time data exchange system structure in a network isolation environment, provided as an exemplary embodiment of the present invention. Detailed Implementation

[0050] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0051] In one embodiment, such as Figure 1 As shown, a method for real-time data exchange between hosts in a network-isolated environment is provided. This embodiment illustrates the method by applying it to both the sending and receiving ends. Indicatively, in this embodiment, the method includes the following steps:

[0052] S1: The sending host encrypts the business data to be exchanged, generates encrypted verification data, and pushes the business data to be exchanged into the confirmation queue of the sending host.

[0053] Specifically, by encrypting the business data to be exchanged, the risk of direct exposure of the original data can be blocked, ensuring transmission security from the source of data generation. The pending confirmation queue can be used for unified storage and status management of business data that has not yet been confirmed for transmission, providing a carrier for full-process traceability and status control of data transmission, avoiding problems such as data loss and duplicate transmission, and providing basic support for subsequent transmission confirmation mechanisms.

[0054] S2: The sending host encodes the encrypted verification data to generate a data image, which is then displayed on the first display device of the sending host.

[0055] Specifically, after data encryption and queue management are completed, given the network isolation environment's lack of network communication, the sending host can first encode the encrypted verification data, converting the digitized encrypted verification data into a visual data image, thus constructing a non-network data transmission carrier. Because UTF-8 encoding has excellent multi-character compatibility, it can fully adapt to various business data character types such as Chinese characters, numbers, and symbols, and effectively avoids problems such as garbled characters and missing information in Chinese characters and special characters during data encoding. Therefore, UTF-8 encoding can be used to encode and convert the encrypted verification data, ensuring the integrity and accuracy of the conversion from encrypted verification data to image format, and ensuring that the information carried by the data image is completely consistent with the original encrypted verification data. Subsequently, the image output function of the display device can be used to achieve optical transmission of the data, overcoming the physical limitations of network isolation on data interaction.

[0056] S3: Collect data images through the image acquisition device of the receiving host, perform data verification on the data images, and obtain the verified business data.

[0057] Specifically, when displaying data images at the sending end, the image acquisition device on the receiving end host can acquire the data images output by the first display device in real time to achieve data reception in an isolated environment. Subsequently, data verification can be performed on the data images to verify the integrity and validity of the acquired data, filter out abnormal data caused by image acquisition interference and data loss during transmission, and ensure that the data obtained by the receiving end is consistent with the data output by the sending end, thus obtaining the verified business data.

[0058] S4: The receiving host generates confirmation receipt data based on the verified business data, encodes the confirmation receipt data, generates a receipt image, and displays the receipt image through a second display device.

[0059] Specifically, after the receiving end completes data verification, it can generate confirmation receipt data based on the verified business data through the receiving host. This data is used to send a status signal that the business data has been successfully received to the sending end, establishing a two-way transmission feedback mechanism. Furthermore, based on the transmission logic of image encoding and display, a receipt image can be generated according to this data to adapt to network isolation environment conditions. The clear reception result is then transmitted to the sending end through optical transmission, forming a complete transmission feedback link.

[0060] S5: Acquire receipt images through the image acquisition device of the sending host, parse the data of the receipt images, generate confirmation information, and remove the business data to be exchanged from the confirmation queue based on the confirmation information.

[0061] Specifically, after the sending host obtains the receipt image, it can parse the data to reconstruct the status information in the receipt image and obtain confirmation information. Based on this confirmation information, it can confirm whether the receiving end has completed data reception. If reception is complete, the corresponding business data can be removed from the pending confirmation queue, the data transmission status can be updated, and queue management resources can be released. Through the above closed-loop process, not only is traditional manual operation and media relay replaced, achieving fully automated verification, but the real-time performance and efficiency of data exchange in isolated environments are also significantly improved.

[0062] The above method first ensures data transmission security and lays a solid foundation for reliable transmission control by encrypting service data and generating encrypted verification data on the sending host, and then pushing the data into a pending confirmation queue. Secondly, it generates and displays a data image based on the encrypted verification data, constructing a data transmission channel without a network in a network-isolated environment. Furthermore, by collecting the data image and verifying the data on the receiving host, data integrity is guaranteed, addressing the issue of data tampering. A confirmation image is generated and displayed based on the verified service data, establishing a data reception confirmation feedback mechanism. Finally, by collecting the confirmation image, parsing the confirmation information, and removing the data from the queue on the sending host, the entire process of automated exchange is achieved without manual operation, meeting the requirements for high real-time data interaction.

[0063] Specifically, based on the real-time data exchange method for hosts in a network isolation environment provided in this application, it can be as follows: Figure 2 As shown, data flow can be achieved through bidirectional collaborative interaction between the sending host and the receiving host. The overall data flow process consists of encryption, display, and receipt processing on the sending host side, and acquisition, decryption, and receipt generation on the receiving host side. Each step establishes a data exchange link in an isolated environment based on optical image transmission.

[0064] On the sending host side, the data flow process begins at the "start" node, first executing the "assemble encrypted data, push message into the confirmation queue" operation. The specific content of the assembled encrypted data corresponds to the process in the real-time data exchange method S1 for hosts in a network isolation environment provided in this application, where the sending host encrypts the service data to be exchanged to generate encrypted verification data. Illustratively, in one embodiment, encrypting the service data to be exchanged by the sending host to generate encrypted verification data may include the following steps:

[0065] The business data to be exchanged is encrypted to generate encrypted business data.

[0066] Perform hash operations on the business data to be exchanged to generate a preset hash value;

[0067] Encapsulate encrypted business data and preset hash values ​​to generate encrypted verification data.

[0068] Specifically, to mitigate security risks during optical data transmission in a network-isolated environment and prevent the unauthorized theft or tampering of plaintext business data, the sending host can perform encryption operations on the business data to be exchanged using a pre-configured encryption key and a preset encryption algorithm. This key is stored only in the local storage units of the sending and receiving hosts and does not participate in any form of external transmission. Through this encryption operation, the plaintext business data to be exchanged can be converted into ciphertext data without any actual semantic meaning, and the core information of the original business data is completely hidden. The resulting ciphertext data is the encrypted business data, which effectively ensures the confidentiality of business data during transmission.

[0069] Subsequently, to establish a data integrity verification benchmark, the sending host can perform a hash operation on the original business data to be exchanged based on a one-way hash function. This maps business data of arbitrary length to a fixed-length character sequence, and the operation is irreversible and unique, thus further ensuring data integrity. For example, this process can be expressed mathematically as H = Hash(M), where H represents the generated preset hash value, M represents the business data to be exchanged, and Hash represents the one-way hash function. The fixed-length character sequence obtained through the above operation is the preset hash value. This value serves as the core basis for subsequent data integrity verification, accurately identifying whether data has been lost, tampered with, or otherwise abnormal during transmission.

[0070] Furthermore, the sending host can sequentially concatenate and encapsulate encrypted business data with preset hash values ​​according to preset data combination rules, forming a complete data block with a unified data format. The encapsulated encrypted verification data set becomes the encrypted business data and integrity verification benchmark, preserving the security attributes of data transmission and providing a direct basis for data verification by the receiving host. This enables subsequent data encoding, image conversion, reception and parsing operations to be completed based on a single data unit, improving the stability and efficiency of data exchange.

[0071] Specifically, after data assembly and queue pushing are completed, such as Figure 2As shown, the sending host can perform the "display data image" operation, that is, output a visual data image converted from encrypted verification data through the first display device. This data image can be obtained by the "capture image" stage on the receiving host side and enter the receiving host's processing flow. After the receiving host performs the "decrypt data" operation on the captured data image, it can branch to execute two links: "process data" and "assemble confirmation data". In "process data", the receiving host can perform further processing based on the decrypted data. After "assemble confirmation data", it can generate receipt data and output the receipt image through the "display data image" stage. The receipt image is captured by the "capture image" stage on the sending host side. After the "decrypt data" operation, the sending host deletes the corresponding message in the confirmation queue, completing a single data exchange process.

[0072] In one embodiment, Figure 2 The "decrypt data" operation on the receiving host side corresponds to the process in S3 of the real-time data exchange method for hosts in a network isolation environment provided in this application, which verifies data images to obtain verified service data. This process may include the following steps:

[0073] Preprocessing operations are performed on the data images to generate standard image data; these preprocessing operations include grayscale conversion and perspective correction.

[0074] Standard image data is decoded using QR codes to generate data to be verified;

[0075] The data to be verified is decrypted to generate the original business data.

[0076] Perform hash operations on the original business data to generate hash values;

[0077] The calculated hash value is compared with the preset hash value in the data to be verified to obtain the comparison result. If the comparison result is consistent, the original business data is used as the business data that has passed the verification.

[0078] This includes performing preprocessing operations on the data images to generate standard image data, including:

[0079] Perform 8-bit single-channel grayscale conversion on the data image to generate grayscale image data;

[0080] Identify the QR code positioning pattern in grayscale image data and calculate the perspective transformation matrix based on the QR code positioning pattern;

[0081] The grayscale image data is subjected to deformation correction processing based on the perspective transformation matrix to generate standard image data.

[0082] Specifically, during the data acquisition process, images are easily affected by ambient lighting, shooting angle, and color deviations of display devices, resulting in problems such as uneven brightness and morphological distortion. Therefore, preprocessing can be performed to eliminate these interfering factors, providing a standardized image foundation for subsequent data decoding. Grayscale conversion is used to remove color dimension interference from the image, retaining only brightness features and reducing the computational complexity of image processing. Perspective correction is used to correct geometric distortions caused by the acquisition angle, restoring the image to a standard decoding form.

[0083] For example, the receiving host can first convert the acquired color data image into an 8-bit single-channel grayscale format, remove the red, green, and blue three-channel color information of the image, and retain only the brightness value of the pixel. This can effectively avoid image noise interference caused by uneven ambient lighting and color differences of display devices, making the outline features of the QR code positioning graphic and data encoding area clearer, and improving the stability of subsequent graphic recognition and decoding.

[0084] Because QR codes contain fixed-layout positioning graphics, these graphics possess unique morphological and positional characteristics within the image. Therefore, the receiving host can perform a full-domain traversal detection of the grayscale image data to determine the spatial coordinate information of the positioning graphics. Then, based on the coordinate parameters of the positioning graphics, it calculates a perspective transformation matrix. This matrix characterizes the geometric mapping relationship between the acquisition viewpoint and the standard frontal viewpoint, mathematically expressed as M=f(P), where M represents the perspective transformation matrix, P represents the set of spatial coordinates of the QR code positioning graphics, and f represents the coordinate mapping calculation function. Subsequently, a geometric transformation can be performed on the grayscale image data according to the perspective transformation matrix, correcting grayscale images distorted by rotation, tilt, or side shots into standard square images. This eliminates morphological deviations caused by the acquisition viewpoint, ensuring the image fully conforms to the format requirements for QR code decoding, ultimately generating standard image data.

[0085] Furthermore, the receiving host can extract the encrypted data information carried in the standard image data and generate data to be verified. This data to be verified forms the encrypted business data and integrity verification benchmark, providing a complete data carrier for subsequent decryption and data verification. The receiving host can call a decryption algorithm that matches the sending host, and in conjunction with the locally stored key parameters, perform decryption operations on the encrypted business data in the data to be verified, restoring the encrypted business data in ciphertext form to plaintext, obtaining the original business data, and completely recovering the original information content of the business data.

[0086] To illustrate, to verify data integrity, the receiving host can use the same one-way hash function as the sending host to perform a hash operation on the original business data, mapping the original business data of arbitrary length to a fixed-length character sequence, thus obtaining a computed hash value. This computed hash value can be used as a local integrity verification benchmark. The locally generated computed hash value is then compared bit-by-bit with a preset hash value pre-generated by the sending host carried in the data to be verified. If the two are completely identical, it indicates that the original business data has not been lost, tampered with, or otherwise abnormal during transmission and conversion, and the data integrity meets the transmission requirements. At this point, the original business data can be determined as verified business data and proceed to the subsequent business processing and receipt generation stages.

[0087] In one embodiment, Figure 2 The "decrypt data" and "delete message from the pending confirmation queue" steps on the sending host side correspond to the process in S5 of the real-time data exchange method for hosts in a network isolation environment provided in this application, which involves parsing the receipt image, generating confirmation information, and removing the business data to be exchanged from the pending confirmation queue based on the confirmation information. Specifically, this process may include:

[0088] Perform preprocessing operations on the receipt image to generate a standard receipt image; the preprocessing operations include grayscale conversion and perspective correction.

[0089] The standard image of the receipt is parsed and processed to generate confirmation information;

[0090] If the confirmation message is a successful verification result, the confirmation message is taken as valid confirmation information, and the business data to be exchanged is removed from the pending confirmation queue.

[0091] Specifically, the receipt image is acquired by the image acquisition device of the sending host. During the acquisition process, it is also susceptible to the influence of ambient light intensity, shooting angle deviation, and differences in color output of display devices, resulting in problems such as image color noise and geometric distortion. Therefore, preprocessing operations can be performed to eliminate the above-mentioned external interference factors. For example, the preprocessing operation in the above embodiment can be used, that is, converting the receipt image to an 8-bit single-channel grayscale format through grayscale conversion, removing the color channel information in the image, and retaining only the brightness characteristics of the pixels, avoiding recognition interference caused by lighting and color deviation, and enhancing the contour recognition of the QR code positioning graphic and data encoding area. Furthermore, perspective correction processing can be used to calculate the perspective transformation matrix based on the spatial coordinates of the QR code positioning graphic. According to this matrix, a geometric transformation is performed on the grayscale receipt image to correct the image distortion caused by rotation, tilt, and side shooting into a standard square image, so that the image meets the format requirements of QR code parsing, and finally generating a standard receipt image.

[0092] Furthermore, the sending host can perform QR code format recognition and decoding on the standard receipt image to extract the receipt data information carried in the image. This information, along with the service data reception status information fed back by the receiving host, is decoded and converted to generate confirmation information. This confirmation information represents the processing result of the service data at the receiving host and is the core basis for determining whether the data exchange process is complete. When this confirmation information indicates that the receiving host has completed the reception and integrity verification of the service data, it can be determined as valid confirmation information. Subsequently, the sending host can perform a data update operation on the pending confirmation queue based on this valid confirmation information, removing the service data to be exchanged corresponding to this confirmation information from the pending confirmation queue. The pending confirmation queue is used for unified storage and status tracking of service data that has not yet completed transmission confirmation. Removing the service data that has completed transmission enables the reasonable release of queue resources and completes the entire closed-loop data exchange process, ensuring that the data transmission status is traceable and controllable.

[0093] Furthermore, the sending host can set a duration monitoring mechanism for the business data in the pending confirmation queue. If no valid confirmation information for the corresponding business data is obtained within a preset first duration, a retransmission command can be automatically generated. This retransmission command, as a trigger signal for data retransmission, can directly call the sending host's data encoding and image display modules to re-execute the encryption, encoding, image generation, and display process of the business data, completing the retransmission of the business data to be exchanged. This compensates for transmission interruptions caused by unexpected situations such as image acquisition failure or data parsing anomalies. During the retransmission process, the sending host can also simultaneously count the number of retransmissions of the business data to be exchanged in real time. When the cumulative number of retransmissions reaches a preset retransmission threshold, it is determined that the business data cannot be transmitted normally, and the business data is automatically discarded from the pending confirmation queue, while a discard notification is generated. This discard notification contains key information such as the business data identifier and the reason for transmission failure. The sending host can proactively send this discard notification to the upstream business system, enabling the upstream business system to promptly perceive the data transmission status, providing a basis for subsequent processing of the business process, and ensuring the stable operation of the overall business system.

[0094] In one embodiment, the real-time data exchange method for hosts in a network isolation environment provided in this application can also be configured with a bidirectional anomaly monitoring and fault reporting mechanism. This mechanism implements continuous status monitoring for the data verification stage of the receiving host and the receipt image parsing stage of the sending host. When an anomaly of continuous processing failure occurs, it performs an abnormal image solidification and instruction reporting operation to provide a reliable basis for system operation and maintenance troubleshooting and business status synchronization.

[0095] Specifically, after the receiving host completes data image acquisition using its configured image acquisition device, it can continuously initiate data verification and anomaly duration monitoring processes. The data verification process covers all processing steps, including image preprocessing, format recognition, data decoding, decryption operations, and integrity comparison. If any of these steps fails to execute correctly or the result does not meet preset conditions, it can be determined that data verification cannot be completed. If the receiving host fails to successfully complete all data verification operations for the data image within a consecutive preset second duration, it can be determined that there are faults such as image acquisition defects, abnormal encoding formats, or data transmission corruption in the current data transmission process. At this time, the receiving host can store the currently acquired abnormal data image in a local dedicated storage area, providing real raw data support for subsequent fault location and problem investigation. After saving the abnormal image, the receiving host can generate a first confirmation instruction based on the anomaly occurrence information. This instruction includes core content such as the anomaly occurrence node, the unique identifier of the data image, and the verification failure type. The first confirmation instruction is actively sent to the upstream business system, enabling the upstream business system to obtain the abnormal status of the receiving end's data processing in real time, providing accurate information for maintenance personnel to quickly intervene and handle the situation.

[0096] Specifically, after the sending host successfully acquires the receipt image through its own image acquisition device, it can simultaneously initiate the receipt image data parsing process and the continuous duration monitoring process. The receipt image parsing process includes key steps such as image preprocessing, QR code format recognition, and data decoding. If the parsing process cannot be executed normally or the parsing result is invalid due to factors such as ambient light interference, shooting angle distortion, or receipt encoding errors, it can be recorded as a data parsing failure. If the sending host is unable to complete the data parsing operation of the receipt image within a continuously preset second duration, it can be determined that an unrecoverable anomaly has occurred in the receipt transmission and parsing process. At this time, the sending host can save the abnormal receipt image to a designated local storage unit to archive and retain the abnormal image for subsequent fault analysis and problem repair. After saving the image, the sending host generates a second confirmation command, which can integrate key information such as the time of the anomaly, the receipt image identifier, and the reason for the parsing failure. Subsequently, the sending host can send the second confirmation command to the upstream business system to realize real-time synchronous reporting of fault status, ensure the monitorability and maintainability of the entire data exchange process in the network isolation environment, and meet the operation and maintenance needs of unattended automated data exchange.

[0097] In one embodiment, in a multi-host data interaction scenario in a network-isolated environment, identity information can be added to the data carrying unit to extend communication from one-to-one communication between a single host to one-to-many communication between multiple hosts. This enables targeted and precise data distribution and reception when the sending end is connected to multiple receiving hosts simultaneously, avoiding data interference between multiple terminals.

[0098] Specifically, the data image in this embodiment can adopt a composite data carrying structure, meaning that the data image simultaneously contains two parts: a receiver identifier and encrypted verification data. The receiver identifier uniquely identifies the target receiver host, while the encrypted verification data is the core transmission data obtained after encrypting and encapsulating the business data for integrity. Both are integrated into the same data image after unified encoding. In a one-to-many communication extension scenario, the sending host can generate corresponding data images based on multiple different receiver identifiers and simultaneously display these multiple data images through corresponding display devices to meet the needs of sending data to multiple receiver hosts simultaneously. The receiving hosts can then use their configured image acquisition devices to acquire and recognize the corresponding data images.

[0099] Specifically, after the receiving host completes the data image acquisition operation through its own image acquisition device, it can prioritize the detection and extraction of the receiving end identifier in the data image based on preset identifier recognition rules. This allows it to locate and parse the receiving end identifier information from the encoded data of the data image, ultimately generating an identifier detection result. The receiving end identifier detection and matching mechanism is the core support for realizing one-to-many communication. It enables each receiving host to accurately filter out the target data pointing to itself from multiple data images displayed by the sending end, avoiding interference from non-target data to the local data processing flow.

[0100] As an illustration, when the identifier detection result shows that the receiver identifier in the data image is completely consistent with the identity identifier corresponding to the current receiver host, the receiver host can determine that the data image is the target data and then initiate a data verification process for the data image. This data verification process verifies the integrity and validity of the data, ensuring the security and reliability of the received data. If the identifier detection result shows that the receiver identifier does not match the identity identifier corresponding to the current receiver host, the receiver host can determine that the data image is not its own target data and directly perform a filtering operation on the data image, without proceeding to the subsequent data verification and parsing stages. This reduces the host's data processing load and improves the efficiency and stability of data exchange in one-to-many communication scenarios.

[0101] Based on the same inventive concept, this application also provides a real-time data exchange system for hosts in a network isolation environment for implementing the aforementioned method for real-time data exchange between hosts in a network isolation environment. The solution provided by this system is similar to the solution described in the above method. Therefore, the specific limitations of one or more embodiments of a real-time data exchange system for hosts in a network isolation environment provided below can be found in the limitations of the real-time data exchange method for hosts in a network isolation environment described above, and will not be repeated here.

[0102] In one exemplary embodiment, such as Figure 3 As shown, a real-time data exchange system 200 for hosts in a network-isolated environment is provided, comprising:

[0103] The data encryption queuing module 201 is used to encrypt the business data to be exchanged by the sending host, generate encrypted verification data, and push the business data to be exchanged into the confirmation queue of the sending host.

[0104] Image encoding and display module 202 is used to encode data image based on encrypted verification data through the sending host, and display the data image through the first display device of the sending host.

[0105] The image acquisition and verification module 203 is used to acquire data images through the image acquisition device of the receiving host, perform data verification on the data images, and obtain business data that has passed the verification.

[0106] The receipt encoding and display module 204 is used to generate confirmation receipt data based on the verified business data through the receiving host, encode the confirmation receipt data, generate a receipt image, and display the receipt image through a second display device.

[0107] The receipt parsing and confirmation module 205 is used to collect receipt images through the image acquisition device of the sending host, parse the data of the receipt images, generate confirmation information, and remove the business data to be exchanged from the confirmation queue based on the confirmation information.

[0108] The above-described embodiments are merely illustrative of several implementation methods of the embodiments of this application, and their descriptions are relatively specific and detailed. However, they should not be construed as limiting the patent scope of the embodiments of this application. It should be noted that those skilled in the art can make several modifications and improvements without departing from the concept of the embodiments of this application, and these all fall within the protection scope of the embodiments of this application.

Claims

1. A method for real-time data exchange between hosts in a network-isolated environment, characterized in that, The method includes: S1: The sending host encrypts the service data to be exchanged, generates encrypted verification data, and pushes the service data to be exchanged into the confirmation queue of the sending host. S2: The sending host encodes the encrypted verification data to generate a data image, and displays the data image through the first display device of the sending host. S3: Acquire the data image through the image acquisition device of the receiving host, perform data verification on the data image, and obtain the verified business data; S4: The receiving host generates confirmation receipt data based on the verified service data, encodes the confirmation receipt data, generates a receipt image, and displays the receipt image through the second display device. S5: The receipt image is acquired by the image acquisition device of the sending host, the data of the receipt image is parsed, confirmation information is generated, and the service data to be exchanged is removed from the confirmation queue based on the confirmation information.

2. The method according to claim 1, characterized in that, In step S1, the sending host encrypts the service data to be exchanged to generate encrypted verification data, including: The business data to be exchanged is encrypted to generate encrypted business data; The business data to be exchanged is subjected to a hash operation to generate a preset hash value; The encrypted business data and the preset hash value are encapsulated to generate the encrypted verification data.

3. The method according to claim 1, characterized in that, In step S3, the data image is validated to obtain validated business data, including: Preprocessing operations are performed on the data image to generate standard image data; wherein, the preprocessing operations include grayscale conversion and perspective correction; The standard image data is subjected to QR code decoding to generate data to be verified; The data to be verified is decrypted to generate the original business data; Perform a hash operation on the original business data to generate a hash value; The calculated hash value is compared with the preset hash value in the data to be verified to obtain a comparison result. If the comparison result is consistent, the original business data is used as the business data that has passed the verification.

4. The method according to claim 1, characterized in that, In step S5, the receipt image is parsed to generate confirmation information. Based on the confirmation information, the business data to be exchanged is removed from the confirmation queue, including: Perform preprocessing operations on the receipt image to generate a standard receipt image; wherein, the preprocessing operations include grayscale conversion and perspective correction; The confirmation information is generated by parsing the standard image of the receipt. If the confirmation information is a successful verification result, the confirmation information is taken as valid confirmation information, and the service data to be exchanged is removed from the confirmation queue.

5. The method according to claim 4, characterized in that, The method further includes: If the valid confirmation information is not received within the preset first time period, a retransmission instruction is generated. The retransmission instruction is used to instruct the service data to be exchanged to be retransmitted. When the number of retransmissions of the service data to be exchanged reaches a preset retransmission threshold, the service data to be exchanged is discarded, a discard notification is generated, and the discard notification is sent to the upstream service system.

6. The method according to claim 1, characterized in that, The method further includes: After the data image is acquired by the image acquisition device of the receiving host, if the receiving host cannot perform data verification on the data image within a consecutive preset second time period, the data image is saved, a first confirmation instruction is generated, and the first confirmation instruction is sent to the upstream business system. After the image acquisition device of the sending host acquires the receipt image, if the sending host cannot parse the data of the receipt image within the preset second time period, the receipt image is saved, a second confirmation instruction is generated, and the second confirmation instruction is sent to the upstream business system.

7. The method according to claim 1, characterized in that, The data image is obtained by encoding the encrypted verification data using UTF-8 encoding on the sending host.

8. The method according to claim 3, characterized in that, The preprocessing operation on the data image to generate standard image data includes: The data image is subjected to 8-bit single-channel grayscale conversion to generate grayscale image data; Identify the QR code positioning pattern in the grayscale image data, and calculate the perspective transformation matrix based on the QR code positioning pattern; The grayscale image data is subjected to deformation correction processing based on the perspective transformation matrix to generate the standard image data.

9. The method according to claim 1, characterized in that, The data image includes the receiver identifier and the encrypted verification data; After the image acquisition device of the receiving host acquires the data image, the method further includes: The receiving host detects the receiving end identifier in the data image to obtain the detection result; When the detection result indicates that the receiver identifier is the same as the identifier corresponding to the receiver host, the data image is then verified.

10. A real-time data exchange system for hosts in a network-isolated environment, characterized in that, The system includes: The data encryption queuing module is used to encrypt the business data to be exchanged through the sending host, generate encrypted verification data, and push the business data to be exchanged into the confirmation queue of the sending host. The image encoding and display module is used to encode the encrypted verification data based on the sending host to generate a data image, and to display the data image through the first display device of the sending host. The image acquisition and verification module is used to acquire the data image through the image acquisition device of the receiving host, perform data verification on the data image, and obtain the verified business data. The receipt encoding and display module is used to generate confirmation receipt data based on the verified business data through the receiving host, encode the confirmation receipt data, generate a receipt image, and display the receipt image through a second display device. The receipt parsing and confirmation module is used to acquire the receipt image through the image acquisition device of the sending host, parse the data of the receipt image, generate confirmation information, and remove the business data to be exchanged from the confirmation queue based on the confirmation information.

Images