Intranet and extranet interlocking switching and data security publishing method

Abstract

The application discloses an internal and external network interlocking switching and data security publishing method, and belongs to the technical field of network security. The method is characterized in that: firstly, link interlocking rules, state indicating lamp mapping rules and data security processing rules are configured; then, the connection states of internal network physical links and external network physical links are collected according to a set period and interlocking verification is performed; the link on-off state is adjusted according to the verification result, and the corresponding indicating lamp is driven to display the corresponding color; under the internal network connection and external network disconnection state, the to-be-published original data is subjected to security screening processing, the processed data is generated and the original data is deleted; and after the internal network is disconnected and the external network is connected, the processed data is pushed to an external network display platform for publishing. The method can realize internal and external network link interlocking switching, avoid double-network simultaneous connection, intuitively display the link running state, improve the security of internal network data transmission, and stably support the business requirement of internal network data public display to the external network.

Description

Technical Field

[0001] This invention relates to the field of network security technology, and in particular to a method for interlocking and switching between internal and external networks and for secure data publishing. Background Technology

[0002] Internal and external network isolation is a common protection measure in the field of network security, widely used by organizations with high internal information security requirements. It separates internal business networks from external public networks, reducing the possibility of internal systems and data being penetrated by external risks. With the increasing demand for external information display and business disclosure, some data generated in the internal network environment needs to be transmitted to the external network environment for publication and display. Therefore, internal and external network link switching and secure data interaction technologies have become an important research direction in this field. Currently, there are various implementation methods for internal and external network switching and data transmission, including software-configured network switching solutions, hardware-isolated link switching solutions, and related technologies such as status monitoring and data transfer processing. Different solutions are adapted to application scenarios with different security levels and business complexities to support orderly data flow between internal and external networks and meet the data interaction needs of different scenarios.

[0003] Existing intranet / extranet switching solutions still have several shortcomings in practical applications. At the link control level, most solutions rely on single software logic or hardware switches to control connectivity, lacking a closed-loop mutual exclusion verification mechanism. During switching, program anomalies or hardware malfunctions can easily lead to two network links simultaneously establishing connections with the terminal, resulting in insufficient reliability of intranet network boundary isolation. At the status display level, existing solutions mostly display connection status through parameter lists on the system interface, lacking intuitive visual indicators. Relevant personnel cannot quickly identify the real-time connection status of the links, resulting in low efficiency in status identification. At the data processing level, there is a lack of standardized security screening and raw data cleanup processes before intranet data is published to the extranet. Some solutions only perform simple data format conversion without thoroughly cleaning the raw data on the terminal, posing a risk of sensitive intranet information being leaked during data publication. At the process coordination level, the link switching and data publication processes lack unified mutual exclusion constraints and control. Switching nodes are prone to overlapping link status time windows, making it difficult to complete the orderly publication of data while ensuring isolation security. Summary of the Invention

[0004] The purpose of this invention is to overcome the shortcomings of the prior art and provide a method for interlocking and switching between internal and external networks and for secure data publishing.

[0005] The objective of this invention is achieved through the following technical solution: A method for interlocking and switching between internal and external networks and for secure data publishing is provided, which includes the following steps: S1. Configure link interlock rules, status indicator mapping rules, and data security processing rules. The link interlock rules set the mutual exclusion connection constraints between internal network physical links and external network physical links. The status indicator mapping rules set the color correspondence between internal network indicator lights and external network indicator lights. The data security processing rules set the filtering and processing requirements for raw data to be published and the deletion requirements for raw data to be published. S2. Collect the connection status of the internal network physical links and the external network physical links according to the set period, perform mutual exclusion verification on the connection status of the internal network physical links and the external network physical links according to the link interlock rules, maintain or adjust the on / off status of the internal network physical links and the external network physical links according to the verification results, and drive the internal network indicator lights and the external network indicator lights to display the corresponding colors according to the status indicator light mapping rules. S3. Confirm that the internal network physical link is connected and the external network physical link is disconnected. Extract the original data to be published, perform security screening on the original data to be published according to the data security processing rules, generate the processed data, delete the original data to be published, and store the processed data in the transitional storage area. S4. Disconnect the internal network physical link. After confirming that the internal network physical link is disconnected, connect the external network physical link, read the processed data from the transition storage area, and push the processed data to the external network display platform for publication and display.

[0006] Furthermore, step S1 includes the following sub-steps: S1.1. Configure link interlock rules, set constraints that allow only one network link to establish a connection with the terminal at the same time, and set the disconnection priority of external network physical links to be higher than that of internal network physical links; S1.2. Configure status indicator mapping rules, set green light to correspond to the internal network physical link being connectable or connected, set red light to correspond to the internal network physical link being disconnectable or not connected, set green light to correspond to the external network physical link being connectable or connected, set red light to correspond to the external network physical link being disconnectable or not connected, set an illegal state where both the internal network indicator light and the external network indicator light are green, and set a legal state where both the internal network indicator light and the external network indicator light are red. S1.3. Configure data security processing rules, set the filtering and verification dimensions of the original data to be published, set the execution timing and execution method for deleting the original data to be published, and configure the access parameters of the external network display platform.

[0007] Furthermore, step S2 includes the following sub-steps: S2.1. Collect the connection status parameters of the internal network physical links and the external network physical links according to the set period; S2.2. Transmit the connection status parameters of the internal network physical link and the external network physical link to the internal network indicator light driver unit and the external network indicator light driver unit, and drive the internal network indicator light and the external network indicator light to display the corresponding colors according to the status indicator light mapping rules; S2.3. Based on the link interlocking rules, perform mutual exclusion verification on the connection status parameters of the internal network physical links and the external network physical links to determine whether there is a state where the internal network physical links and the external network physical links are connected at the same time. S2.4. If the internal network physical link and the external network physical link are not connected at the same time, maintain the current connection status of the internal network physical link and the external network physical link, and return to the execution steps of collecting the connection status parameters of the internal network physical link and the connection status parameters of the external network physical link. S2.5. If both the internal network physical link and the external network physical link are connected at the same time, perform an external network physical link disconnection operation until the external network physical link is disconnected, and output an abnormal alarm message.

[0008] Furthermore, step S3 includes the following sub-steps: S3.1. Detect the connection status of the internal network physical link and the external network physical link, and confirm that the internal network physical link is connected and the external network physical link is disconnected. S3.2. Retrieve the original data to be published from the terminal's local storage area; S3.3. Based on the data security processing rules, perform security verification and compliance processing on the original data to be published in a set dimension to generate processed data that meets the requirements for publication on the external network; S3.4. Delete the original data to be published in the local storage area of ​​the terminal, and store the processed data in the local transition storage area of ​​the terminal.

[0009] Furthermore, step S4 includes the following sub-steps: S4.1. Generate a link switching command, execute the internal network physical link disconnection operation, and detect and confirm that the internal network physical link is in a disconnected state; S4.2. After confirming that the internal network physical link is disconnected, perform the external network physical link connection operation to establish a connection between the terminal and the external network, and read the processed data from the transition storage area; S4.3. Push the processed data to the external network display platform to complete the data release and display operation.

[0010] Furthermore, in step S1.2, the combination state rules of the intranet indicator light and the extranet indicator light are set. The intranet indicator light is set to green and the extranet indicator light is set to red when the intranet is working. The extranet indicator light is set to red and the extranet indicator light is set to green when the extranet is working. The intranet indicator light is set to red and the extranet indicator light is set to red when the extranet is idle. The intranet indicator light is set to green and the extranet indicator light is set to green when the extranet is abnormal.

[0011] Furthermore, in step S2.3, the connection and disconnection operations of the internal network physical link and the external network physical link are performed by combining software logic verification with hardware physical switch control. After the software logic outputs the connection and disconnection command, the hardware physical switch executes the physical connection and disconnection actions of the internal network physical link and the external network physical link. The actual connection and disconnection status of the internal network physical link and the actual connection and disconnection status of the external network physical link are collected and sent back to the verification stage, forming a closed-loop verification process of control execution feedback.

[0012] Furthermore, in step S3.3, the original data to be published undergoes a set level of verification processing, which includes sensitive information identification and desensitization processing, data format compliance verification, malicious code detection and removal processing, and data publishing permission verification.

[0013] Furthermore, in step S3.4, a set number of random data overwrite operations are performed on the storage area where the original data to be published is located, the corresponding data index entries in the file system are deleted, and the traces of the original data to be published stored on the terminal are cleared.

[0014] Furthermore, in step S4, after the data publishing operation is completed, the external physical link is disconnected, so that both the internal and external physical links are disconnected. The display state of the internal network indicator light showing red and the external network indicator light showing red is maintained. The connection status collection and mutual exclusion verification process of the internal and external physical links are continuously executed, waiting for the next connection command or data processing command.

[0015] The beneficial effects of this invention are: (1) By using link interlocking rules and continuous status verification mechanisms, the connection and disconnection status of internal network physical links and external network physical links are controlled to prevent two links from establishing connections with terminals at the same time, thus strengthening the isolation and protection foundation of the internal network boundary. (2) Perform security screening on the original data to be published on the intranet and delete the original data. While completing the data compliance transformation, clear the traces of the original local data storage and reduce the possibility of sensitive information on the intranet being leaked to the outside as the data is published. (3) The link switching process maintains mutual exclusion constraints and is accompanied by indicator light status display to achieve the dual functions of intuitive identification of network conditions and safe switching, and stably supports the business needs of publishing and displaying internal network data to the external network. Attached Figure Description

[0016] Figure 1 A flowchart illustrating the steps of a method for interlocking and switching between internal and external networks and for secure data publishing. Figure 2 The flowchart illustrates the specific steps of a method for interlocking and switching between internal and external networks and for secure data publishing, as provided in this embodiment. Detailed Implementation

[0017] The technical solution of the present invention will be clearly and completely described below with reference to the embodiments. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0018] Example 1 A method for interlocking and switching between internal and external networks and for secure data publishing is provided, which includes the following steps: S1. Configure link interlock rules, status indicator mapping rules, and data security processing rules. The link interlock rules set the mutual exclusion connection constraints between internal network physical links and external network physical links. The status indicator mapping rules set the color correspondence between internal network indicator lights and external network indicator lights. The data security processing rules set the filtering and processing requirements for raw data to be published and the deletion requirements for raw data to be published. S2. Collect the connection status of the internal network physical links and the external network physical links according to the set period, perform mutual exclusion verification on the connection status of the internal network physical links and the external network physical links according to the link interlock rules, maintain or adjust the on / off status of the internal network physical links and the external network physical links according to the verification results, and drive the internal network indicator lights and the external network indicator lights to display the corresponding colors according to the status indicator light mapping rules. S3. Confirm that the internal network physical link is connected and the external network physical link is disconnected. Extract the original data to be published, perform security screening on the original data to be published according to the data security processing rules, generate the processed data, delete the original data to be published, and store the processed data in the transitional storage area. S4. Disconnect the internal network physical link. After confirming that the internal network physical link is disconnected, connect the external network physical link, read the processed data from the transition storage area, and push the processed data to the external network display platform for publication and display.

[0019] In some embodiments, step S1 includes the following sub-steps: S1.1. Configure link interlock rules, set constraints that allow only one network link to establish a connection with the terminal at the same time, and set the disconnection priority of external network physical links to be higher than that of internal network physical links; S1.2. Configure status indicator mapping rules, set green light to correspond to the internal network physical link being connectable or connected, set red light to correspond to the internal network physical link being disconnectable or not connected, set green light to correspond to the external network physical link being connectable or connected, set red light to correspond to the external network physical link being disconnectable or not connected, set an illegal state where both the internal network indicator light and the external network indicator light are green, and set a legal state where both the internal network indicator light and the external network indicator light are red. S1.3. Configure data security processing rules, set the filtering and verification dimensions of the original data to be published, set the execution timing and execution method for deleting the original data to be published, and configure the access parameters of the external network display platform.

[0020] In some embodiments, step S2 includes the following sub-steps: S2.1. Collect the connection status parameters of the internal network physical links and the external network physical links according to the set period; S2.2. Transmit the connection status parameters of the internal network physical link and the external network physical link to the internal network indicator light driver unit and the external network indicator light driver unit, and drive the internal network indicator light and the external network indicator light to display the corresponding colors according to the status indicator light mapping rules; S2.3. Based on the link interlocking rules, perform mutual exclusion verification on the connection status parameters of the internal network physical links and the external network physical links to determine whether there is a state where the internal network physical links and the external network physical links are connected at the same time. S2.4. If the internal network physical link and the external network physical link are not connected at the same time, maintain the current connection status of the internal network physical link and the external network physical link, and return to the execution steps of collecting the connection status parameters of the internal network physical link and the connection status parameters of the external network physical link. S2.5. If both the internal network physical link and the external network physical link are connected at the same time, perform an external network physical link disconnection operation until the external network physical link is disconnected, and output an abnormal alarm message.

[0021] In some embodiments, step S3 includes the following sub-steps: S3.1. Detect the connection status of the internal network physical link and the external network physical link, and confirm that the internal network physical link is connected and the external network physical link is disconnected. S3.2. Retrieve the original data to be published from the terminal's local storage area; S3.3. Based on the data security processing rules, perform security verification and compliance processing on the original data to be published in a set dimension to generate processed data that meets the requirements for publication on the external network; S3.4. Delete the original data to be published in the local storage area of ​​the terminal, and store the processed data in the local transition storage area of ​​the terminal.

[0022] In some embodiments, step S4 includes the following sub-steps: S4.1. Generate a link switching command, execute the internal network physical link disconnection operation, and detect and confirm that the internal network physical link is in a disconnected state; S4.2. After confirming that the internal network physical link is disconnected, perform the external network physical link connection operation to establish a connection between the terminal and the external network, and read the processed data from the transition storage area; S4.3. Push the processed data to the external network display platform to complete the data release and display operation.

[0023] In some embodiments, in step S1.2, the combination state rules of the intranet indicator light and the extranet indicator light are set. The intranet indicator light is set to show a green light and the extranet indicator light is set to show a red light, which corresponds to the intranet working state. The intranet indicator light is set to show a red light and the extranet indicator light is set to show a green light, which corresponds to the extranet working state. The intranet indicator light is set to show a red light and the extranet indicator light is set to show a red light, which corresponds to the idle state. The intranet indicator light is set to show a green light and the extranet indicator light is set to show a green light, which corresponds to the abnormal state.

[0024] In some embodiments, in step S2.3, the connection and disconnection operations of the internal network physical link and the external network physical link are performed by combining software logic verification and hardware physical switch control. After the software logic outputs the connection and disconnection command, the hardware physical switch performs the physical connection and disconnection actions of the internal network physical link and the external network physical link. The actual connection and disconnection status of the internal network physical link and the actual connection and disconnection status of the external network physical link are collected and sent back to the verification stage, forming a closed-loop verification process of control execution feedback.

[0025] In some embodiments, in step S3.3, a set level of verification processing is performed on the original data to be published. The verification processing includes sensitive information identification and desensitization processing, data format compliance verification, malicious code detection and removal processing, and data publishing permission verification.

[0026] In some embodiments, in step S3.4, a set number of random data overwrite operations are performed on the storage area where the original data to be published is located, the corresponding data index entries in the file system are deleted, and the traces of the original data to be published stored on the terminal are cleared.

[0027] In some embodiments, in step S4, after the data publishing operation is completed, the external physical link is disconnected, so that both the internal physical link and the external physical link are in a disconnected state. The display state of the internal network indicator light showing red and the external network indicator light showing red is maintained. The connection status collection and mutual exclusion verification process of the internal physical link and the external physical link is continuously executed, and the system waits for the next connection instruction or data processing instruction.

[0028] Example 2 This embodiment provides a specific implementation process for a method of interlocking switching between internal and external networks and secure data publishing. It is used to achieve a complete execution flow of mutual exclusion switching control between internal and external physical links, visual indication of connection status, and secure publishing of internal network data to the external network. This enables the public display of internal network data to an external platform while ensuring the security of the internal network boundary and data. Figure 2 As shown, the specific implementation process is as follows: Step 1. System rule configuration: Step 1.1. Configure link interlock rules: First, the link identification information of the internal network physical links and the external network physical links is entered to complete the identity mapping of the two links. Link interlocking rules are logical rules used to constrain the on / off status of multiple network links. The core constraint of the link interlocking rules is mutual exclusion, meaning that only a specified number of links are allowed to be in a connected state at the same time. In this embodiment, the on / off status of internal and external network physical links is controlled through link interlocking rules to prevent two links from establishing connections with the terminal simultaneously. During configuration, firstly, a mutual exclusion constraint is set, allowing only one network link to establish a connection with the terminal at any given time, clearly stating that two links cannot be in a valid connected state simultaneously. Secondly, the disconnection priority of the external network physical link is set higher than that of the internal network physical link. When two links are detected to be in a connected state simultaneously, the disconnection operation of the external network physical link is executed first, while the connection state of the internal network physical link is preserved. Finally, the configured link interlocking rules are stored in the rule storage area on the terminal for subsequent verification.

[0029] Step 1.2. Configure status indicator mapping rules: The status indicator mapping rule is a logical rule that establishes a correspondence between the connection status of network links and the display color of indicator lights. In this embodiment, the status indicator mapping rule is used to visualize the network connection status, making it easier for relevant personnel to intuitively identify the operating status of the links. During the configuration process, firstly, the status mapping is set for the intranet indicator lights corresponding to the intranet physical links, setting green lights to correspond to the intranet physical links being connectable or connected, and red lights to correspond to the intranet physical links being disconnectable or not connected. Secondly, the status mapping is set for the extranet indicator lights corresponding to the extranet physical links, setting green lights to correspond to the extranet physical links being connectable or connected, and red lights to correspond to the extranet physical links being disconnectable or not connected. Then, the combined status judgment rule of the two indicator lights is set, setting an illegal state when both the intranet indicator light and the extranet indicator light are green, and a legal state when both the intranet indicator light and the extranet indicator light are red. Finally, the configured status indicator mapping rule is stored in the rule storage area of ​​the terminal for subsequent indicator light driving steps to call. Status indicator lights are light-emitting indicators installed on the surface of terminals or network isolation devices. They are common electronic devices that can intuitively display the connection status of corresponding links through different light colors.

[0030] In some specific implementations, after the status indicator mapping rules are configured, the hardware verification logic for the indicator status is configured synchronously. Two independent status acquisition channels are set up, corresponding to the actual display status of the intranet indicator and the extranet indicator, respectively. The two sets of status acquisition channels are an indicator level acquisition channel and an image recognition acquisition channel. The indicator level acquisition channel determines the actual light color and on / off state of the indicator by acquiring the output level of the indicator driver circuit; the image recognition acquisition channel identifies the actual display effect of the indicator by acquiring the optical image of the indicator area, verifying whether the display status is consistent with the command status. The indicator status data acquired by the two channels are synchronously transmitted back to the status verification unit. The status verification unit compares the transmitted actual display status with the preset status indicator mapping rules. If the actual display status is inconsistent with the rule requirements, an indicator driver abnormality alarm is triggered, and the indicator driver command is re-output until the actual display status matches the rule requirements. This mechanism can solve the problem of discrepancies between the display status and the actual link status caused by indicator hardware failure or driver circuit abnormalities, avoid misjudging the network connection status by personnel, ensure the accuracy of status visualization, and provide reliable visual feedback for link status management.

[0031] Step 1.3. Configure data security processing rules: Data security processing rules are rules used to constrain the processing flow and standards of data before it is published from the internal network to the external network. In this embodiment, data security processing rules ensure that the data to be published meets the security requirements for external network publication, while also standardizing the deletion operation of the original data. During configuration, firstly, the screening and verification dimensions of the original data to be published are set, clarifying the verification items and processing standards to be executed during data processing; secondly, the execution timing and method for deleting the original data to be published are set, clarifying the triggering conditions and specific operation methods for deleting the original data after data processing is completed; finally, the access parameters of the external network display platform are configured, including the data access interface information and identity authentication information of the external network display platform, ensuring that a valid connection can be established in the subsequent data publication process. The external network display platform is an information system deployed in the external network environment for externally displaying various types of data, and belongs to the existing common information publishing carriers.

[0032] In some embodiments, after the rule configuration is completed, a rule validity check can be performed. By simulating link status and data processing scenarios, the execution logic of the link interlock rule, status indicator mapping rule and data security processing rule can be verified to meet the preset requirements. After the check is passed, the rule can be officially put into use to avoid subsequent process abnormalities caused by rule configuration errors.

[0033] Step 2. Link Status Monitoring and Interlock Control: Step 2.1. Acquisition of connection status parameters: Connection status parameters of the internal network physical links and the external network physical links are collected according to a set period. Connection status parameters are various detection data used to characterize whether the network links are in a valid connection state. These parameters include link level status, port negotiation status, and data transmission / reception status. In this embodiment, the real-time operating status of the two links is obtained by collecting connection status parameters, providing data for subsequent status display and mutual exclusion verification. During the collection process, status detection is performed on the access ports of the internal and external network physical links respectively, acquiring information such as the corresponding link's level signal, port negotiation result, and data transmission / reception identifier. This information is integrated into the corresponding link's connection status parameters, and the collected connection status parameters of the internal and external network physical links are synchronously transmitted to the subsequent indicator light driving and mutual exclusion verification stages.

[0034] In some specific implementations, the collection period for connection status parameters is set to 100 milliseconds. During a single collection, six connection status parameters are acquired for each link: port physical level parameter, link negotiation rate parameter, data transmission / reception count parameter, link packet loss count parameter, port enable status parameter, and gateway reachability parameter. The port physical level parameter characterizes the physical layer power-on status of the link interface, determining whether a physical connection exists. The link negotiation rate parameter characterizes the negotiation results between the devices at both ends of the link, determining whether the link has completed communication adaptation. The data transmission / reception count parameter characterizes the data transmission activity status of the link, determining whether the link is in a valid communication state. The link packet loss count parameter characterizes the communication quality of the link, assisting in determining the validity of the link connection. The port enable status parameter characterizes the software enable status of the terminal-side interface, determining whether the interface is active. The gateway reachability parameter characterizes the connectivity status between the link and the corresponding network gateway, determining whether the network path is complete. By collecting parameters from multiple dimensions, the true connection status of the link can be determined from multiple levels, including the physical layer, data link layer, and network layer. This reduces the misjudgment problem caused by single parameter detection, improves the accuracy of connection status determination, and provides a reliable status basis for subsequent mutual exclusion verification and indicator light driving.

[0035] Step 2.2. Indicator light status display: The connection status parameters of the internal network physical link and the external network physical link are transmitted to the internal network indicator light driver unit and the external network indicator light driver unit, respectively. Based on the status indicator light mapping rules, the internal network indicator lights and external network indicator lights are driven to display the corresponding colors. The indicator light driver unit is a circuit unit used to control the on / off state and display color of the indicator lights. It belongs to existing general electronic control units and can receive status parameters and output corresponding drive signals. In this embodiment, the conversion from connection status to indicator light display is achieved through the indicator light driver unit. During the driving process, the internal network indicator light driver unit receives the connection status parameters of the internal network physical link, calls the status indicator light mapping rules to match the corresponding display color, and outputs a drive signal to control the internal network indicator light to display the corresponding color; the external network indicator light driver unit receives the connection status parameters of the external network physical link, calls the status indicator light mapping rules to match the corresponding display color, and outputs a drive signal to control the external network indicator light to display the corresponding color.

[0036] Step 2.3. Link mutual exclusion verification processing: Based on link interlocking rules, mutual exclusion checks are performed on the connection status parameters of internal and external physical links to determine whether both links are simultaneously connected. During the check, the connection status parameters of both links are first parsed to obtain the connection status determination results for each link. Then, the connection status determination results are compared to determine if both links simultaneously meet the conditions for a valid connection. Finally, a mutual exclusion check result is generated and transmitted to the link status processing stage.

[0037] In some specific implementations, the closed-loop feedback process for link mutual exclusion verification sets a five-times status feedback verification mechanism, with a timeout threshold of 300 milliseconds for each status feedback. The five status feedback verifications are: initial status verification after command transmission, mid-term status verification during switching action, status verification upon completion of switching action, status review after stabilization delay, and secondary confirmation status verification. The initial status verification after command transmission confirms whether the on / off command was correctly sent to the hardware switching unit; the mid-term status verification detects the execution progress of the hardware switch action and determines whether the action is progressing normally; the status verification upon completion of switching action confirms whether the hardware switch has completed the target on / off action; the status review after stabilization delay reconfirms the on / off result after the link status has stabilized, avoiding misjudgments caused by instantaneous status fluctuations; and the secondary confirmation status verification finally locks the on / off status of the link and synchronizes the final status to the status monitoring and indicator light driving stages. If a single status feedback exceeds the timeout threshold, it is determined to be an abnormal status feedback, triggering an abnormal alarm and re-executing the status acquisition and verification operation. By employing multiple feedback verification and timeout determination mechanisms, the verification failure caused by abnormal hardware switching actions and status feedback delays can be reduced, thereby improving the reliability of interlock control and ensuring the stable execution of link mutual exclusion constraints.

[0038] Step 2.4. Link State Maintenance and Anomaly Handling: If neither the internal nor external physical link is simultaneously connected, maintain the current connectivity status of the internal and external physical links, and return to the steps of collecting connection status parameters for both the internal and external physical links, continuously monitoring and verifying the status. If both the internal and external physical links are simultaneously connected, perform an external physical link disconnection operation, sending a disconnection command to the corresponding control unit. After the control unit executes the disconnection action, it continuously monitors the connection status of the external physical link until it is disconnected; simultaneously, it outputs an abnormal alarm message, records the abnormal event of simultaneous dual-network connection to the operation log, and issues an alarm notification through indicator light flashing or prompt messages.

[0039] In some embodiments, state debouncing processing can be added to the link mutual exclusion verification process. For instantaneous dual-connection states with a duration of less than a set threshold, the external physical link disconnection operation is not triggered, and only abnormal state records are made. This avoids the accidental triggering of disconnection operations due to instantaneous level fluctuations during link switching, thereby improving the stability of state verification.

[0040] Step 3. Internal Network Data Security Processing: Step 3.1. Link Status Confirmation: The system detects the connection status of both the internal and external physical links, confirming that the internal physical link is connected and the external physical link is disconnected. During this confirmation process, real-time connection status parameters obtained from the link status monitoring stage are used to determine the connection status of both the internal and external physical links. Subsequent data processing is only triggered when both the internal and external physical links are validly connected. If these conditions are not met, data processing is not initiated, and subsequent steps are executed only after the link status conditions are met. This confirmation process ensures that data processing remains entirely within the internal network connection environment, avoiding the security risks associated with accessing raw internal network data while connected to the external network.

[0041] Step 3.2. Raw Data Extraction: The system retrieves the raw data to be published from the terminal's local storage area. The terminal's local storage area is the built-in storage medium used to store various types of data, including disk storage units and flash storage units. The raw data to be published is the initial data originating from the internal network environment that needs to be published to the external network. This raw data includes business content to be displayed externally and some internal network-related information. During the retrieval process, according to the preset data retrieval path, the corresponding data file is read from the terminal's local storage area, and the retrieved raw data to be published is transferred to the data processing stage.

[0042] In some specific implementations, after extracting the raw data to be published, a data structuring and parsing process is first performed, breaking down the raw data into five data units: text content segments, table content segments, attachment content segments, image content segments, and metadata content segments. Text content segments contain the main text and explanatory content presented in character form; table content segments contain structured data presented in a row-column format; attachment content segments contain embedded independent files; image content segments contain image-based content; and metadata content segments contain attributes, permissions, and source descriptions associated with the data. After parsing, corresponding security filtering logic is matched to each data unit type. For different types of data units, corresponding dimension verification and processing operations are invoked to avoid overlooking security risks of some data types under a unified processing model. This processing method can adapt to different formats and types of raw data to be published, improving the targeting of security filtering, covering risk points in different data formats, ensuring that all types of content can complete compliance processing, and meeting the security requirements for external network publication.

[0043] Step 3.3. Data security screening process: According to data security processing rules, the raw data to be published undergoes security verification and compliance processing across defined dimensions to generate processed data that meets the requirements for external network publication. During processing, multiple verification and processing operations are executed sequentially. The first step is sensitive information identification and de-identification, identifying sensitive content such as internal identifiers, classified information, and non-public business information in the raw data to be published, and removing sensitive information through content replacement and information masking. The second step is data format compliance verification, checking whether the file format, data structure, and field settings of the raw data to be published meet the format requirements for external network publication, and adjusting the format of any non-compliant data. The third step is malicious code detection and removal, scanning the raw data to be published for malicious programs, embedded scripts, abnormal links, and other risky content, and removing any detected risky content. The fourth step is data publication permission verification, verifying the publication approval identifier corresponding to the raw data to be published to confirm that the data has the permission to be published to the external network. After all verification and processing are completed, processed data that meets the requirements for external network publication is generated and transmitted to the subsequent data storage stage. Data anonymization is a common data security processing technology used to reduce the sensitivity of data and ensure information security during data transmission.

[0044] In some specific implementations, the data security screening and processing sets up eight verification dimensions: sensitive field identification verification, internal identifier desensitization processing, file format compliance verification, attachment content security scanning, data permission tag verification, external link content risk detection, data content classification verification, and publication format standardization processing. Sensitive field identification verification identifies sensitive fields such as internal numbers and classified information in the data; internal identifier desensitization processing replaces or masks identified internal identifier information; file format compliance verification checks whether the format type and structure of the data file meet the requirements for external network publication; attachment content security scanning detects whether embedded attachments contain risky programs; data permission tag verification verifies whether the publication approval tags attached to the data meet the requirements for external network publication permissions; external link content risk detection checks whether external links contained in the data pose security risks; data content classification verification matches the corresponding processing intensity according to the sensitivity level of the data content; and publication format standardization processing adjusts the data to a unified format compatible with external network display platforms. Through multi-dimensional verification processes, data security screening can be completed from multiple levels, including content, format, permissions, and risks. This reduces the possibility of sensitive information from the internal network being leaked to the outside world during data release, and ensures the compliance and security of data released on the external network.

[0045] Step 3.4. Deletion and storage of original data: The original data to be published is deleted from the local storage area of ​​the terminal, and the processed data is stored in the local transitional storage area of ​​the terminal. During the deletion operation, a set number of random data overwrite operations are performed on the storage area where the original data to be published is located, rewriting the storage content corresponding to the original data; at the same time, the corresponding data index entries in the file system are deleted, clearing the traces of the original data to be published stored on the terminal. The transitional storage area is a storage partition on the terminal used to temporarily store the processed data. The transitional storage area is only used for data transfer and does not retain the original data for a long time; in this embodiment, the transitional storage area is used to temporarily store the processed data on the intranet, providing a data source for the subsequent external network publishing process. During the storage process, the generated processed data is written to the specified path in the transitional storage area to complete the temporary storage operation.

[0046] In some specific implementations, the deletion operation of the original data to be published performs seven random data overwrite processes. These seven overwrites employ different processing methods: all-zero data overwrite, all-one data overwrite, random character overwrite, complementary data overwrite, pseudo-random sequence overwrite, blank data overwrite, and parity bit rewriting overwrite. All-zero data overwrite rewrites all data bits in the storage area to 0 values, clearing the basic level traces of the original data; all-one data overwrite rewrites all data bits in the storage area to 1 values, further disrupting the storage characteristics of the original data; random character overwrite writes irregular random character data, scrambling the storage structure of the original data; complementary data overwrite writes complementary data with opposite bits to the original data, canceling out any residual magnetic or electrical traces; pseudo-random sequence overwrite writes pseudo-random data according to a set sequence, increasing the difficulty of data recovery; blank data overwrite writes blank placeholder data, clearing residual data mappings in the file system; and parity bit rewriting overwrite rewrites the parity bit information in the storage area, disrupting the parity matching relationship of the original data. By overlaying data in multiple layers using different methods, the residual traces of original data on the storage medium can be destroyed, reducing the possibility of the original data being restored by recovery tools, improving the reliability of deleting original data on the intranet, and ensuring the storage security of intranet data.

[0047] In some embodiments, data security screening can incorporate data content hierarchical verification. The processing intensity is matched according to the sensitivity level of the original data to be published. Basic verification is performed on low-sensitivity data, while multi-level verification and deep desensitization are performed on high-sensitivity data, balancing processing efficiency and data security.

[0048] Step 4. Link Switching and External Network Data Publishing: Step 4.1. Confirm intranet link disconnection: A link switching command is generated to execute the internal network physical link disconnection operation, and the internal network physical link is detected and confirmed to be in a disconnected state. After generating the link switching command, the command is sent to the link control unit, which executes the internal network physical link disconnection operation. After the disconnection operation is completed, the connection status parameters of the internal network physical link are collected again, the parameters are parsed to obtain the connection status of the internal network physical link, and after confirming that the internal network physical link is in a disconnected state, the subsequent external network connection operation is executed. If it is detected that the internal network physical link is not completely disconnected, the disconnection operation is repeated until the internal network physical link is in a disconnected state. This confirmation step ensures that the internal network link is completely disconnected before the external network link is connected, avoiding the situation of simultaneous connection of two networks during the switching process.

[0049] Step 4.2. External network link connection and data reading: After confirming the internal network physical link is disconnected, an external network physical link connection is established to connect the terminal to the external network and read the processed data from the transitional storage area. During the connection operation, the link control unit outputs an external network physical link connection command to control the corresponding path to be open. After the link negotiation is completed, a valid connection between the terminal and the external network is established. After the connection is established, the pre-stored processed data is read from the designated path in the transitional storage area and transmitted to the data publishing stage.

[0050] In some specific implementations, after establishing a connection between the terminal and the external network, an external network channel security verification process is first performed. This verification includes security verification of the external network access environment, identity verification of the external network display platform, and encryption verification of the transmission channel. The external network access environment security verification detects any abnormal risks in the current external network access port and network, confirming that the access environment meets security requirements. The external network display platform identity verification verifies the platform's identity certificate and access identification information to confirm that the connected external network display platform is the pre-defined legitimate publishing target, preventing data from being pushed to incorrect external nodes. The transmission channel encryption verification confirms that the data transmission channel between the terminal and the external network display platform uses an encrypted transmission protocol, ensuring that data transmission is not intercepted or tampered with during transmission. Only after all three verifications pass can the processed data be read and pushed. If any verification fails, the external network physical link is disconnected, abnormal information is recorded, and an alarm is triggered. The external network connection and verification process is then re-executed after the abnormality is investigated and resolved. This mechanism can solve data transmission security problems caused by complex external network access environments and unreliable target platform identities, reducing the risk of leakage and tampering during data publishing and improving the security of the external network data publishing process.

[0051] Step 4.3. Public release and display of data: The processed data is pushed to an external network display platform to complete the data publication and display operation. During the publication process, the processed data is encapsulated according to a preset transmission format and transmitted to the data access interface of the external network display platform via an external network physical link. After receiving and parsing the data, the external network display platform displays the data content on the corresponding display page, realizing the public display of the data.

[0052] In some embodiments, after data publication is completed, publication result verification can be performed, and publication status feedback information returned by the external network display platform can be received. After confirming that the data publication is successful, subsequent operations can be performed. If publication failure is detected, a set number of retries will be performed. If the retry is still unsuccessful, publication error information will be recorded and await further processing.

[0053] After the data publishing operation is completed, disconnect the external physical link, so that both the internal and external physical links are disconnected. Maintain the red indicator lights on both the internal and external networks, and continue to execute the connection status collection and mutual exclusion verification process for the internal and external physical links, waiting for the next connection command or data processing command.

[0054] This embodiment achieves the orderly execution of secure external network data publishing through a complete process design including interlocking switching of internal and external network links, visual indication of connection status, secure internal network data processing, and external network publishing. The link interlocking mechanism in this embodiment constrains the connectivity of physical links between the internal and external networks, reducing simultaneous connections and enhancing the security of the internal network boundary. The visual status indicator lights intuitively display the connection status of the two links, facilitating quick identification of network conditions and reducing the time cost of network status identification. The combined mechanism of data security filtering and original data deletion reduces the possibility of sensitive internal network information being leaked externally, providing multiple layers of protection for internal network data security while meeting external network data display requirements. The status confirmation mechanism during link switching ensures that there is no time window for simultaneous dual-network connections during switching, improving the security and reliability of the link switching process. The overall solution adopts a combination of physical link control and software logic verification, improving the stability of internal and external network isolation. It is suitable for internal and external network data interaction scenarios with high internal network security requirements, enabling data flow and external display between internal and external networks while ensuring security, providing a stable and controllable implementation path for internal and external network data interaction.

[0055] The above description is merely a preferred embodiment of the present invention. It should be understood that the present invention is not limited to the forms disclosed herein and should not be construed as excluding other embodiments. It can be used in various other combinations, modifications, and environments, and can be altered within the scope of the concept described herein through the above teachings or related technologies or knowledge. Modifications and variations made by those skilled in the art that do not depart from the spirit and scope of the present invention should be within the protection scope of the appended claims.

Claims

1. A method for interlocking and switching between internal and external networks and for secure data publishing, characterized in that, Includes the following steps: S1. Configure link interlock rules, status indicator mapping rules, and data security processing rules. The link interlock rules set the mutual exclusion connection constraints between internal network physical links and external network physical links. The status indicator mapping rules set the color correspondence between internal network indicator lights and external network indicator lights. The data security processing rules set the filtering and processing requirements for raw data to be published and the deletion requirements for raw data to be published. S2. Collect the connection status of the internal network physical links and the external network physical links according to the set period, perform mutual exclusion verification on the connection status of the internal network physical links and the external network physical links according to the link interlock rules, maintain or adjust the on / off status of the internal network physical links and the external network physical links according to the verification results, and drive the internal network indicator lights and the external network indicator lights to display the corresponding colors according to the status indicator light mapping rules. S3. Confirm that the internal network physical link is connected and the external network physical link is disconnected. Extract the original data to be published, perform security screening on the original data to be published according to the data security processing rules, generate the processed data, delete the original data to be published, and store the processed data in the transitional storage area. S4. Disconnect the internal network physical link. After confirming that the internal network physical link is disconnected, connect the external network physical link, read the processed data from the transition storage area, and push the processed data to the external network display platform for publication and display.

2. The method according to claim 1, characterized in that, Step S1 includes the following sub-steps: S1.

1. Configure link interlock rules, set constraints that allow only one network link to establish a connection with the terminal at the same time, and set the disconnection priority of external network physical links to be higher than that of internal network physical links; S1.

2. Configure status indicator mapping rules, set green light to correspond to the internal network physical link being connectable or connected, set red light to correspond to the internal network physical link being disconnectable or not connected, set green light to correspond to the external network physical link being connectable or connected, set red light to correspond to the external network physical link being disconnectable or not connected, set an illegal state where both the internal network indicator light and the external network indicator light are green, and set a legal state where both the internal network indicator light and the external network indicator light are red. S1.

3. Configure data security processing rules, set the filtering and verification dimensions of the original data to be published, set the execution timing and execution method for deleting the original data to be published, and configure the access parameters of the external network display platform.

3. The method according to claim 1, characterized in that, Step S2 includes the following sub-steps: S2.

1. Collect the connection status parameters of the internal network physical links and the external network physical links according to the set period; S2.

2. Transmit the connection status parameters of the internal network physical link and the external network physical link to the internal network indicator light driver unit and the external network indicator light driver unit, and drive the internal network indicator light and the external network indicator light to display the corresponding colors according to the status indicator light mapping rules; S2.

3. Based on the link interlocking rules, perform mutual exclusion verification on the connection status parameters of the internal network physical links and the external network physical links to determine whether there is a state where the internal network physical links and the external network physical links are connected at the same time. S2.

4. If the internal network physical link and the external network physical link are not connected at the same time, maintain the current connection status of the internal network physical link and the external network physical link, and return to the execution steps of collecting the connection status parameters of the internal network physical link and the connection status parameters of the external network physical link. S2.

5. If both the internal network physical link and the external network physical link are connected at the same time, perform an external network physical link disconnection operation until the external network physical link is disconnected, and output an abnormal alarm message.

4. The method according to claim 1, characterized in that, Step S3 includes the following sub-steps: S3.

1. Detect the connection status of the internal network physical link and the external network physical link, and confirm that the internal network physical link is connected and the external network physical link is disconnected. S3.

2. Retrieve the original data to be published from the terminal's local storage area; S3.

3. Based on the data security processing rules, perform security verification and compliance processing on the original data to be published in a set dimension to generate processed data that meets the requirements for publication on the external network; S3.

4. Delete the original data to be published in the local storage area of ​​the terminal, and store the processed data in the local transition storage area of ​​the terminal.

5. The method according to claim 1, characterized in that, Step S4 includes the following sub-steps: S4.

1. Generate a link switching command, execute the internal network physical link disconnection operation, and detect and confirm that the internal network physical link is in a disconnected state; S4.

2. After confirming that the internal network physical link is disconnected, perform the external network physical link connection operation to establish a connection between the terminal and the external network, and read the processed data from the transition storage area; S4.

3. Push the processed data to the external network display platform to complete the data release and display operation.

6. The method according to claim 2, characterized in that, In step S1.2, the combination state rules of the intranet indicator light and the extranet indicator light are set. The intranet indicator light is set to green and the extranet indicator light is set to red when the intranet is working. The extranet indicator light is set to red and the extranet indicator light is set to green when the extranet is working. The intranet indicator light is set to red and the extranet indicator light is set to red when the extranet is idle. The intranet indicator light is set to green and the extranet indicator light is set to green when the extranet is abnormal.

7. The method according to claim 3, characterized in that, In step S2.3, the connection and disconnection operations of the internal network physical link and the external network physical link are performed by combining software logic verification and hardware physical switch control. After the software logic outputs the connection and disconnection command, the hardware physical switch executes the physical connection and disconnection actions of the internal network physical link and the external network physical link. The actual connection and disconnection status of the internal network physical link and the actual connection and disconnection status of the external network physical link are collected and sent back to the verification stage, forming a closed-loop verification process of control execution feedback.

8. The method according to claim 4, characterized in that, In step S3.3, the original data to be published is subjected to a set level of verification processing, which includes sensitive information identification and de-identification processing, data format compliance verification, malicious code detection and removal processing, and data publishing permission verification.

9. The method according to claim 4, characterized in that, In step S3.4, a set number of random data overwrite operations are performed on the storage area where the original data to be published is located, the corresponding data index entries in the file system are deleted, and the traces of the original data to be published stored on the terminal are cleared.

10. The method according to claim 1, characterized in that, In step S4, after the data publishing operation is completed, the external physical link is disconnected, so that both the internal and external physical links are disconnected. The internal and external indicator lights are kept red. The connection status collection and mutual exclusion verification process of the internal and external physical links is continuously executed, and the system waits for the next connection command or data processing command.

Images