System, method, and apparatus for data sharing and storage medium

By introducing independent control subsystems and networks into the data sharing system, the problem that traditional data backup and disaster recovery mechanisms cannot resist logical tampering and malicious deletion is solved, and high security and stable transmission of data sharing is achieved.

WO2025092995A1PCT designated stage expired Publication Date: 2025-05-08BEIJING ZITIAO NETWORK TECH CO LTD
View PDF 6 Cites 0 Cited by

Patent Information

Application Number
PCT/CN2024/129454
Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Priority Date
2023-11-03
Filing Date
2024-11-01
Publication Date
2025-05-08

AI Technical Summary

Technical Problem

The existing data backup and disaster recovery mechanisms are powerless when facing human logical tampering and deletion, and the traditional data backup mechanism cannot completely isolate the physical storage location and backup permissions of data, and cannot resist the extreme risks of external encryption ransomware and malicious data deletion.

Method used

By introducing independent first and second control subsystems in the data sharing system, it is respectively responsible for reading data from the first data area and writing it to the first storage node, and sending data from the first storage node to the second data area. This isolation design can prevent the security issues of one data area from affecting another data area and further enhance the security of data through independent network and operating system configurations.

Benefits of technology

It realizes the security performance of data sharing while maintaining stable data transmission, preventing external intrusion and internal tampering, and ensuring secure transmission and backup of data between different data areas.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN2024129454_08052025_PF_FP_ABST
    Figure CN2024129454_08052025_PF_FP_ABST
Patent Text Reader

Abstract

Embodiments of the present disclosure provide a system, method, and apparatus for data sharing, a device, and a storage medium. The system comprises: a first control subsystem comprising a first storage node and configured to write first data from a first data area into the first storage node; and a second control subsystem different from the first control subsystem and configured to send the first data from the first storage node to a second data area different from the first data area. Therefore, data reading and data writing during data sharing can be isolated from each other, thereby facilitating implementation of safe data sharing.
Need to check novelty before this filing date? Find Prior Art

Description

System, method, device and storage medium for data sharing

[0001] This application claims priority to the Chinese invention patent application entitled “Systems, methods, devices and storage media for data sharing” and application number 202311460088.0, filed on November 3, 2023. The entire contents of that application are incorporated by reference into this application. Technical Field

[0002] Example embodiments of the present disclosure relate generally to the field of computers, and more particularly to systems, methods, apparatuses, devices, and computer-readable storage media for data sharing. Background Art

[0003] In today's digital age, digital data has become widely used in various fields of production and life. To enhance reliability, many existing data products provide data backup and disaster recovery mechanisms. To this end, data needs to be shared between different locations (such as different data centers or different computer rooms). For example, data generated by one machine can be backed up on another machine and restored to the original machine when needed. In this data sharing process, data security is particularly important.

[0004] Summary of the Invention

[0005] In a first aspect of the present disclosure, a system for data sharing is provided, comprising: a first control subsystem, comprising a first storage node, and configured to write first data from a first data area to the first storage node; and a second control subsystem, different from the first control subsystem, and configured to send the first data from the first storage node to a second data area different from the first data area.

[0006] In a second aspect of the present disclosure, a method for data sharing is provided, including: a first control subsystem in a system for data sharing receives first data from a first data area; the first control subsystem writes the first data to a first storage node of the first control subsystem; and a second control subsystem in the system sends the first data from the first storage node to a second data area different from the first data area, the second control subsystem being different from the first control subsystem.

[0007] In a third aspect of the present disclosure, a device for data sharing is provided, comprising: a first data receiving module, configured to enable a first control subsystem in a system for data sharing to receive first data from a first data area; a first data storage module, configured to enable the first control subsystem to write the first data to a first storage node of the first control subsystem; and a first data sending module, configured to enable a second control subsystem in the system to send the first data from the first storage node to a second data area different from the first data area, the second control subsystem being different from the first control subsystem.

[0008] In a fourth aspect of the present disclosure, an electronic system is provided. The system includes: a first control subsystem; a second control subsystem; at least one processing unit; and at least one memory coupled to the at least one processing unit and storing instructions for execution by the at least one processing unit. When executed by the at least one processing unit, the instructions cause the device to perform the method of the second aspect.

[0009] In a fifth aspect of the present disclosure, a computer-readable storage medium is provided, wherein a computer program is stored on the computer-readable storage medium, and the computer program can be executed by a processor to implement the method of the second aspect.

[0010] It should be understood that the content described in this summary section is not intended to limit the key features or important features of the embodiments of the present disclosure, nor is it intended to limit the scope of the present disclosure. Other features of the present disclosure will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] The above and other features, advantages and aspects of the embodiments of the present disclosure will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. In the accompanying drawings, the same or similar reference numerals represent the same or similar elements, wherein:

[0012] FIG1 shows a schematic diagram of an example environment in which embodiments of the present disclosure can be implemented;

[0013] FIG2 shows a schematic diagram of an example of a system for data sharing according to some embodiments of the present disclosure;

[0014] FIG3 shows a schematic diagram of the architecture of a system for data sharing according to some embodiments of the present disclosure;

[0015] FIG4 shows a schematic diagram of a data production and backup environment according to some embodiments of the present disclosure;

[0016] FIG5 shows a flowchart of a data sharing process according to some embodiments of the present disclosure;

[0017] FIG6 shows a schematic structural block diagram of an apparatus for data sharing according to some embodiments of the present disclosure; and

[0018] FIG7 illustrates a block diagram showing an electronic device in which one or more embodiments of the present disclosure may be implemented. DETAILED DESCRIPTION

[0019] It is understandable that before using the technical solutions disclosed in the various embodiments of this disclosure, the type, scope of use, usage scenarios, etc. of the personal information involved in this disclosure should be informed to the user and the user's authorization should be obtained in an appropriate manner in accordance with relevant laws and regulations.

[0020] For example, in response to a user's active request, a prompt message is sent to the user to clearly inform the user that the operation requested will require the acquisition and use of the user's personal information. This allows the user to independently choose whether to provide personal information to the electronic device, application, server, storage medium, or other software or hardware that performs the operations of the disclosed technical solution based on the prompt message.

[0021] As an optional but non-limiting implementation, in response to receiving a user's active request, the prompt information may be sent to the user in the form of a pop-up window, in which the prompt information may be presented in text form. Furthermore, the pop-up window may also contain a selection control for the user to select "agree" or "disagree" to provide personal information to the electronic device.

[0022] It is understandable that the above notification and user authorization process are merely illustrative and do not limit the implementation of the present disclosure. Other methods that comply with relevant laws and regulations may also be applied to the implementation of the present disclosure.

[0023] It is understandable that the data involved in this technical solution (including but not limited to the data itself, the acquisition or use of the data) must comply with the requirements of relevant laws, regulations and relevant provisions.

[0024] The following describes embodiments of the present disclosure in more detail with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as limited to the embodiments described herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are for illustrative purposes only and are not intended to limit the scope of protection of the present disclosure.

[0025] It should be noted that the titles of any section / subsection provided herein are not limiting. Various embodiments are described throughout this document, and any type of embodiment may be included under any section / subsection. Furthermore, the embodiments described in any section / subsection may be combined in any manner with any other embodiments described in the same section / subsection and / or in different sections / subsections.

[0026] Herein, unless explicitly stated otherwise, executing a step “in response to A” does not mean executing the step immediately after “A” but may include one or more intermediate steps.

[0027] In the description of the embodiments of the present disclosure, the term "including" and similar terms should be understood as open inclusion, that is, "including but not limited to". The term "based on" should be understood as "based at least in part on". The term "one embodiment" or "the embodiment" should be understood as "at least one embodiment". The term "some embodiments" should be understood as "at least some embodiments". Other explicit and implicit definitions may be included below. The terms "first", "second", etc. may refer to different or the same objects. Other explicit and implicit definitions may be included below.

[0028] As briefly mentioned above, measures must be taken to ensure data security during data sharing. Some data protection solutions utilize data products with disaster recovery mechanisms. Disaster recovery mechanisms, such as those involving multiple data centers and remote locations, address the risk of physical data damage, such as damage to physical storage caused by aging equipment, natural disasters, or physical intrusion. However, all disaster recovery replicas are logically unified, making them vulnerable to human tampering and deletion.

[0029] In other data protection solutions, the data products used include data backup mechanisms. Data backup mechanisms such as data recycle bins are primarily designed to recover data from accidental deletions. However, these mechanisms lack complete isolation in terms of physical storage location and backup data permissions, making them unable to protect against extreme risks such as external encryption ransomware and malicious data deletion by attackers.

[0030] Generally speaking, while traditional data backup can recover data accidentally deleted by users, the physical storage location and control of data backup permissions lack complete isolation, making it vulnerable to malicious attacks from hackers or insiders. Disaster recovery mechanisms can effectively reduce the risk of physical data damage, but their copies are logically unified and vulnerable to human tampering and malicious deletion.

[0031] To at least partially address one or more of the above issues, embodiments of the present disclosure provide a data sharing solution. According to various embodiments of the present disclosure, a first control subsystem including a first storage node is used to write first data from a first data area to the first storage node, and then a second control subsystem different from the first control subsystem is used to send the first data from the first storage node to a second data area different from the first data area.

[0032] In the embodiments of the present disclosure, data is read from one data zone and written to another data zone by different (e.g., independent) subsystems. This allows data reading and writing to be isolated during data sharing, thereby preventing security issues in one data zone from affecting another. This advantageously enables secure data sharing.

[0033] In some embodiments, the first control subsystem and the second control subsystem may be independent of each other in at least one of an operating system and a permission configuration, which can effectively prevent data from being invaded by the outside and tampered with by the inside.

[0034] In some embodiments, the first control subsystem is connected to the first data area through a first network, and the second control subsystem is connected to the second data area through a second network isolated from the first network. For example, one of the first data area and the second data area can be a data production area, and the other data area is a data backup area. The connection with the data production area uses the Internet, while the connection with the data backup area uses a local area network that is not connected to the external network. Using a local area network that is not connected to the external network to transmit and back up data can completely cut off the possibility of external intrusion, while also effectively transferring data between different data areas. Therefore, using the embodiments of the present disclosure can greatly improve the security performance of data sharing while maintaining stable data transmission.

[0035] Example embodiments of the present disclosure are described below with reference to the accompanying drawings.

[0036] Example systems and operations

[0037] FIG1 illustrates a schematic diagram of an example environment 100 in which embodiments of the present disclosure can be implemented. Environment 100 includes a first data area 110, a staging area 120, and a second data area 130. Data in first data area 110 and second data area 130 is transferred between the two data areas via staging area 120. Staging area 120 includes a system 125 for data sharing, hereinafter referred to as system 125. System 125 can be implemented, for example, by an electronic system.

[0038] As briefly mentioned above, when data is shared directly between different data areas over a network, the data cannot be fully protected and is susceptible to hacking or tampering by insiders. To enable relatively secure data sharing between the first data area 110 and the second data area 130, a staging area 120 is provided in the environment 100 in the embodiment of the present disclosure. At least a portion of the system 125 in the staging area 120 is capable of transmitting data offline without connecting to the internet, thereby preventing external intrusion during the data sharing process.

[0039] As shown in FIG1 , the first data area 110 may illustratively include multiple hosts 111 and front-end processors 112. Similarly, the second data area 130 may include multiple hosts 131 and front-end processors 132. The front-end processors 121 and 132 may be similar machines to the hosts 111 and 131, and are used to aggregate and / or distribute data during the data sharing process. Taking the transfer of data from the first data area 110 to the second data area 130 as an example, the front-end processor 112 may aggregate data or data information (e.g., addresses) that needs to be shared (e.g., backed up) from each host 111 and send the aggregated data or information to the staging area. Accordingly, the front-end processor 132 may distribute data from the staging area 120 to the corresponding hosts 131. It should be understood that FIG1 shows only one front-end processor 112 and one front-end processor 132, but this is merely illustrative and not intended to be limiting. In embodiments of the present disclosure, a data area may include any number of front-end processors, or may not include any front-end processors.

[0040] In the environment 100, the host, front-end, and system 125 shown may include any type of device with computing capabilities, including terminal devices or server devices. The terminal device may be any type of mobile terminal, fixed terminal, or portable terminal, including a mobile phone, a desktop computer, a laptop computer, a notebook computer, a netbook computer, a tablet computer, a media computer, a multimedia tablet, a personal communication system (PCS) device, a personal navigation device, a personal digital assistant (PDA), an audio / video player, a digital camera / camcorder, a positioning device, a television receiver, a radio broadcast receiver, an e-book device, a gaming device, or any combination thereof, including accessories and peripherals of these devices or any combination thereof. The server device may include, for example, a computing system / server, such as a mainframe, an edge computing node, an electronic device in a cloud environment, and the like.

[0041] FIG2 shows a schematic diagram of an example of a data sharing system 125 according to some embodiments of the present disclosure. In the embodiment of FIG2 , the data sharing system 125 includes a first control subsystem 210 and a second control subsystem 220 that are different from each other. The first control subsystem 210 is connected to the first data area 110 for data exchange, and the second control subsystem 220 is connected to the second data area 130 for data exchange.

[0042] The first control subsystem 210 includes a first storage node 212 and a first computing node 211. The first control subsystem 210 manages the first storage node 212 stored therein. For example, the first computing node 211 can manage the first storage node 212. The first computing node 211 and the first storage node 212 can be powered on and off independently. The first control subsystem 210 is configured to write the first data from the first data area 110 to the first storage node 212, as indicated by arrow 201.

[0043] The second control subsystem 220 is configured to send the first data from the first storage node 212 to the second data area 130, as shown by arrows 202 and 203. Similarly, the second control subsystem 220 may include a second storage node 222 and a second computing node 221. The second control subsystem 220 manages the second storage node 222 stored therein. For example, the second computing node 221 may manage the second storage node 222. The second computing node 221 and the second storage node 222 may be independently powered on and off. In some embodiments, the second control subsystem 220 may periodically send the first data from the first storage node 212 to the second data area 130 during a first time period.

[0044] In some embodiments, in response to a first preset condition being met, the second control subsystem 220 (e.g., the second computing node 221) may take over the first storage node 212 to send the first data from the first storage node 212 to the second data area 130. Further, in response to a second preset condition being met, the second control subsystem 220 (e.g., the second computing node 221) may release the first storage node 212. The first preset condition may include the beginning of a first time period and / or receiving an indication that the first data is available. Correspondingly, the second preset condition may include the end of the first time period and / or completion of sending the first data.

[0045] For example, if the second control subsystem 220 periodically sends first data from the first storage node 212 to the second data area 130 during a first time period, then at the beginning of the first time period, the second control subsystem 220 may take over the first storage node 212 and send the first data stored therein to the second data area 130. At the end of the first time period, the second control subsystem 220 may release the first storage node 212 to return its management to the first control subsystem 210. As another example, if an indication is received that the first data is ready, the second control subsystem 220 may take over the first storage node 212. When the sending of the first data is complete, the second control subsystem 220 may release the first storage node 212.

[0046] The above describes the transfer of data from the first data area 110 to the second data area 130. In some embodiments, data in the second data area 130 may also be transferred to the first data area 110. In such embodiments, the second control subsystem 220 may be configured to write the second data from the second data area 130 to the second storage node 222, as indicated by arrow 204. The first control subsystem 210 may be further configured to send the second data from the second storage node 222 to the first data area 110, as indicated by arrows 205 and 206.

[0047] In some embodiments, in response to a third preset condition being met, the first control subsystem 210 (e.g., the first computing node 211) may take over the second storage node 222 to send the second data from the second storage node 222 to the first data area 110. Further, in response to a fourth condition being met, the first control subsystem 210 (e.g., the first computing node 211) may release the second storage node 222. The third preset condition may include the start of the second time period and / or the receipt of an indication that the second data is available. Accordingly, the fourth preset condition may include the end of the second time period and / or the completion of sending the second data.

[0048] In some embodiments, the first time period may correspond to a time period during which the first data stored in the first storage node 212 needs to be transferred to the second data area 130 and the second data stored in the second data area 130 needs to be written to the second storage node 222. Correspondingly, the second time period may correspond to a time period during which the first data stored in the first data area 110 needs to be written to the first storage node 212 and the second data stored in the second storage node 222 needs to be transferred to the first data area 110. For example, the first time period may be a non-working period at night, and the second time period may be a working period during the day.

[0049] In this way, time-divided data transmission can be advantageously achieved between the first data area 110 and the second data area 130. In this way, even if the first control subsystem 210 is attacked, the data in the second storage node 222 and the second data area 130 will not be affected because the first control subsystem 210 has released the control right of the second storage node 222.

[0050] In some embodiments, in order to further enhance the isolation and data security between different data areas, network isolation between the first data area 110 and the second data area 130 can be achieved. Specifically, the first control subsystem 210 and the first data area 110 can be connected via a first network. The second control subsystem 220 and the second data area 130 can be connected via a second network. The first network is isolated from the second network. For example, when the first data area 110 is a data production area and the second data area 130 is a data backup area, the first network uses the Internet and the second network uses a local area network. The local area network is not connected to the external network, so that the second control subsystem 220 and the second data area 130 can transmit and back up data, which can completely cut off the possibility of external intrusion.

[0051] In some embodiments, the first control subsystem 210 and the second control subsystem 220 may have independent operating systems. Alternatively or additionally, the first control subsystem 210 and the second control subsystem 220 may have independent permission configurations. Using independent operating systems and / or permission configurations can further enhance the isolation between different data areas.

[0052] The first computing node 211 and the first storage node 212 in the first control subsystem 210 can be powered on and off independently, and the second computing node 221 and the second storage node 222 in the second control subsystem 220 can be powered on and off independently. Therefore, even if the first control subsystem 210 is compromised or fails, the second control subsystem 220 can still share data with the second data area 130 via the second network.

[0053] The above describes the configuration and operation of system 125. It should be understood that this is merely exemplary. The first control subsystem 210 and the second control subsystem 220 may be implemented using any suitable number and type of devices. Furthermore, the first storage node 212 and the second storage node 222 may include any suitable number and type of storage devices. For example, the first control subsystem 210 and the second control subsystem 220 may each include multiple servers, and each server may include one or more storage devices to form a storage node.

[0054] In the above description, the first control subsystem 210 and the second control subsystem 220 can take over the storage nodes of the other system. Such takeover can be achieved in any manner, and the embodiments of the present disclosure are not limited in this respect. For illustrative purposes only and without any limitation, an example will now be described with reference to FIG3 .

[0055] FIG3 shows an architectural diagram of a system 125 for data sharing according to some embodiments of the present disclosure. The first control subsystem 210 and the second control subsystem 220 each include a plurality of storage devices and a plurality of ports connected to the storage devices. In the example of FIG3 , the first control subsystem 210 can take over the storage device 321 connected to port 333 through port 303 and port 333 connected to port 303, and can take over the storage device 322 connected to port 334 through port 304 and port 334 connected to port 304. Similarly, the second control subsystem 220 can take over the storage device 311 connected to port 301 through port 331 and port 301 connected to port 331, and can take over the storage device 312 connected to port 302 through port 332 and port 302 connected to port 332.

[0056] It should be understood that the number and connection relationship of the ports and storage devices shown in Figure 3 are merely exemplary and not intended to be limiting. Each control subsystem may include any suitable number of ports and storage devices, and each port may be connected to any suitable number of storage devices.

[0057] Example Implementation

[0058] The above describes a system for data sharing. The following describes an example implementation of such a system in a data production and backup environment. FIG4 shows a schematic diagram of a data production and backup environment 400 according to some embodiments of the present disclosure. In this example, data production and backup environment 400 includes a data production area 410, a transit area 420, and a data backup area 430. Transit area 420 is connected between data production area 410 and data backup area 430 to enable data sharing between the two. Data production area 410 includes a backup service 411 for data transmission and backup. Transit area 420 includes a transit switch 421, a control subsystem 422, and a control subsystem 423. Transit switch 421 is connected to backup service 411. Control subsystem 422 is connected between transit switch 421 and control subsystem 423. Control subsystem 422 includes computing nodes 4221 and storage nodes 4222, and control subsystem 423 includes computing nodes 4231 and storage nodes 4232. The data backup area includes an off-line switch 432 and a plurality of backup hosts 431. The off-line switch 432 is connected to the control subsystem 423 for data exchange.

[0059] Each working cycle (e.g., a day) of the data production and backup environment 400 includes a working period (e.g., daytime) of the data production area 410 and a working period (e.g., nighttime) of the data backup area 430. The working period of the data production area 410 and the working period of the data backup area 430 are different. When the data production and backup environment 400 is in the working period of the data production area 410, the backup service 411 in the data production area 410 will store the data to be backed up in the storage node 4222 of the control subsystem 422 in the transit area 420 via the transit switch 421. The capacity and network bandwidth of the transit area 420 can be configured according to the actual application scenario.

[0060] When data production and backup environment 400 enters the working period of data production area 410, control subsystem 423 takes over storage node 4222 of control subsystem 422, and computing node 4231 transmits data to offline switch 432. Offline switch 432 can back up the received data to multiple backup hosts 431. At the same time, control subsystem 423 can also write data in data backup area 430 that needs to be transferred to data production area 410 to storage node 4232.

[0061] After the control subsystem 423 has completely transmitted all data that needs to be transferred from the data production area 410 to the data backup area 430 to the offline switch 432 or in response to the end of the working period of the data backup area 430, the control subsystem 423 can release control of the storage node 4222.

[0062] When entering the next work cycle, backup service 411 in data production area 410 stores the data to be backed up via transit switch 421 into storage node 4222 of control subsystem 422 in transit area 420. Simultaneously, control subsystem 422 takes over storage node 4232 of control subsystem 423 and transmits the data from data backup area 430 to data production area 410 via computing node 4221 to transit switch 421 for import into data production area 410, thus completing a work cycle. The entire data sharing and backup process in data production and backup environment 400 is a reciprocating cycle.

[0063] The control subsystem 423 and the data backup area 430 are connected using an independent local area network, thus effectively preventing external network intrusion. In addition, there is no network channel between the control subsystem 422 and the control subsystem 423, only data sharing. Therefore, even if a hacker conquers the control subsystem 422 connected to the Internet, he cannot affect the data in the control subsystem 423 and the data backup area 430. At the same time, the data production area 410 and the data backup area 430 use independent operating systems and operating permissions, thereby preventing internal personnel from tampering with and deleting data. The computing nodes 4221, storage nodes 4222, computing nodes 4231 and storage nodes 4232 in the control subsystem 422 and the control subsystem 423 are all powered on and off independently, and hackers cannot affect offline operations.

[0064] Example Process

[0065] 5 shows a flowchart of a process for data sharing according to some embodiments of the present disclosure. For example, the process 500 may be implemented at the system 125 for data sharing.

[0066] At block 510, a first control subsystem in a system for data sharing receives first data from a first data area. At block 520, the first control subsystem writes the first data to a first storage node of the first control subsystem. At block 530, a second control subsystem in the system transmits the first data from the first storage node to a second data area different from the first data area, the second control subsystem being different from the first control subsystem.

[0067] In some embodiments, the second control subsystem includes a second storage node, and the method further includes: the second control subsystem receives second data from the second data area; the second control subsystem writes the second data to the second storage node; and the first control subsystem sends the second data from the second storage node to the first data area.

[0068] In some embodiments, sending the first data from the first storage node to the second data area includes: the second control subsystem periodically sending the first data from the first storage node to the second data area in a first time period, and sending the second data from the second storage node to the first data area includes: the first control subsystem periodically sending the second data from the second storage node to the first data area in a second time period, and wherein the second time period is different from the first time period.

[0069] In some embodiments, process 500 also includes: the second control subsystem takes over the first storage node to send the first data to the second data area in response to the first preset condition being met; and the second control subsystem releases the first storage node in response to the second preset condition being met.

[0070] In some embodiments, the first preset condition includes at least one of the following: the beginning of the first time period, or receiving an indication that the first data is available, and the second preset condition includes at least one of the following: the end of the first time period, or completing sending the first data.

[0071] In some embodiments, the first control subsystem is connected to the first data area via a first network, the second control subsystem is connected to the second data area via a second network, and the first network is isolated from the second network.

[0072] In some embodiments, the first control subsystem and the second control subsystem are independent of each other in at least one of the following aspects: operating system, or permission configuration.

[0073] In some embodiments, the first data area is a data production area and the second data area is a data backup area, or the first data area is a data backup area and the second data area is a data production area.

[0074] Example devices and equipment

[0075] 6 shows a schematic structural block diagram of an apparatus 600 for data sharing according to some embodiments of the present disclosure. Apparatus 600 may be implemented as or included in a system for data sharing 125. Each module / component in apparatus 600 may be implemented by hardware, software, firmware, or any combination thereof.

[0076] As shown in the figure, the device 600 includes a first data receiving module 610, which is configured to enable a first control subsystem in a system for data sharing to receive first data from a first data area; a first data storage module 620, which is configured to enable the first control subsystem to write the first data to a first storage node of the first control subsystem; and a first data sending module 630, which is configured to enable a second control subsystem in the system to send the first data from the first storage node to a second data area different from the first data area, and the second control subsystem is different from the first control subsystem.

[0077] In some embodiments, the second control subsystem includes a second storage node, and the device 600 also includes: a second data module, configured to enable the second control subsystem to receive second data from the second data area; a second data storage module, configured to enable the second control subsystem to write the second data to the second storage node; and a second data sending module, configured to enable the first control subsystem to send the second data from the second storage node to the first data area.

[0078] In some embodiments, the first data sending module 630 is further configured to: enable the second control subsystem to periodically send the first data from the first storage node to the second data area in a first time period, and the second data sending module is further configured to: enable the first control subsystem to periodically send the second data from the second storage node to the first data area in a second time period, and wherein the second time period is different from the first time period.

[0079] In some embodiments, the second data sending module is further configured to enable the second control subsystem to take over the first storage node to send the first data to the second data area in response to the first preset condition being met; and the second data storage module is further configured to enable the second control subsystem to release the first storage node in response to the second preset condition being met.

[0080] In some embodiments, the first preset condition includes at least one of the following: the beginning of the first time period, or receiving an indication that the first data is available, and the second preset condition includes at least one of the following: the end of the first time period, or completing sending the first data.

[0081] In some embodiments, the first control subsystem is connected to the first data area via a first network, the second control subsystem is connected to the second data area via a second network, and the first network is isolated from the second network.

[0082] In some embodiments, the first control subsystem and the second control subsystem are independent of each other in at least one of the following aspects: operating system, or permission configuration.

[0083] In some embodiments, the first data area is a data production area and the second data area is a data backup area, or the first data area is a data backup area and the second data area is a data production area.

[0084] FIG7 shows a block diagram of an electronic device 700 in which one or more embodiments of the present disclosure may be implemented. It should be understood that the electronic device 700 shown in FIG7 is merely exemplary and should not constitute any limitation on the functionality and scope of the embodiments described herein. A plurality of electronic devices 700 such as that shown in FIG7 can be used to implement the system 125 for data sharing of FIG1 . For example, some of these electronic devices can be used to implement the first control subsystem 210, and other of these electronic devices can be used to implement the second control subsystem 220.

[0085] As shown in FIG7 , electronic device 700 is a general-purpose electronic device. Components of electronic device 700 may include, but are not limited to, one or more processors or processing units 710, memory 720, storage device 730, one or more communication units 740, one or more input devices 750, and one or more output devices 760. Processing unit 710 may be a real or virtual processor and is capable of performing various processes according to programs stored in memory 720. In a multi-processor system, multiple processing units execute computer-executable instructions in parallel to enhance the parallel processing capabilities of electronic device 700.

[0086] The electronic device 700 typically includes a plurality of computer storage media. Such media can be any accessible media that can be obtained by the electronic device 700, including but not limited to volatile and non-volatile media, removable and non-removable media. The memory 720 can be a volatile memory (e.g., registers, cache, random access memory (RAM)), a non-volatile memory (e.g., read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory), or some combination thereof. The storage device 730 can be a removable or non-removable medium and can include a machine-readable medium, such as a flash drive, a disk, or any other medium that can be used to store information and / or data and can be accessed within the electronic device 700.

[0087] The electronic device 700 may further include additional removable / non-removable, volatile / non-volatile storage media. Although not shown in FIG. 7 , a disk drive for reading from or writing to a removable, non-volatile disk (e.g., a “floppy disk”) and an optical drive for reading from or writing to a removable, non-volatile optical disk may be provided. In these cases, each drive may be connected to a bus (not shown) by one or more data media interfaces. The memory 720 may include a computer program product 725 having one or more program modules configured to perform various methods or actions of various embodiments of the present disclosure.

[0088] The communication unit 740 enables communication with other electronic devices via a communication medium. Additionally, the functions of the components of the electronic device 700 can be implemented as a single computing cluster or multiple computing machines that can communicate via a communication connection. Thus, the electronic device 700 can operate in a networked environment using a logical connection with one or more other servers, a network personal computer (PC), or another network node.

[0089] Input device 750 may be one or more input devices, such as a mouse, keyboard, or trackball. Output device 760 may be one or more output devices, such as a display, a speaker, or a printer. Electronic device 700 may also communicate with one or more external devices (not shown) via communication unit 740 as needed, such as storage devices, display devices, or the like, with one or more devices that allow a user to interact with electronic device 700, or with any device that allows electronic device 700 to communicate with one or more other electronic devices (e.g., a network card, a modem, etc.). Such communication may be performed via an input / output (I / O) interface (not shown).

[0090] According to an exemplary implementation of the present disclosure, a computer-readable storage medium is provided, on which computer-executable instructions are stored, wherein the computer-executable instructions are executed by a processor to implement the method described above. According to an exemplary implementation of the present disclosure, a computer program product is also provided, which is tangibly stored on a non-transitory computer-readable medium and includes computer-executable instructions, and the computer-executable instructions are executed by a processor to implement the method described above.

[0091] Various aspects of the present disclosure are described herein with reference to flowcharts and / or block diagrams of methods, apparatuses, devices, and computer program products implemented according to the present disclosure. It should be understood that each block of the flowcharts and / or block diagrams, and combinations of blocks in the flowcharts and / or block diagrams, can be implemented by computer-readable program instructions.

[0092] These computer-readable program instructions can be provided to a processing unit of a general-purpose computer, a special-purpose computer, or other programmable data processing device, thereby producing a machine, such that when these instructions are executed by the processing unit of the computer or other programmable data processing device, a device is generated that implements the functions / actions specified in one or more blocks in the flowchart and / or block diagram. These computer-readable program instructions can also be stored in a computer-readable storage medium, where these instructions cause the computer, programmable data processing device, and / or other device to operate in a specific manner. Thus, the computer-readable medium storing the instructions comprises an article of manufacture that includes instructions for implementing various aspects of the functions / actions specified in one or more blocks in the flowchart and / or block diagram.

[0093] Computer-readable program instructions can be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operational steps are performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to implement the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0094] The flow charts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the systems, methods and computer program products according to multiple implementations of the present disclosure. In this regard, each box in the flow chart or block diagram can represent a part for a module, program segment or instruction, and a part for a module, program segment or instruction comprises one or more executable instructions for realizing the logical function of the specification. In some alternative implementations, the functions marked in the box can also occur in a sequence different from that marked in the accompanying drawings. For example, two continuous boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of the boxes in the block diagram and / or flow chart can be realized by a special hardware-based system that performs the function or action of the specification, or can be realized by a combination of special hardware and computer instructions.

[0095] While various implementations of the present disclosure have been described above, the foregoing description is intended to be illustrative, not exhaustive, and not limited to the disclosed implementations. Many modifications and variations will be apparent to those skilled in the art without departing from the scope and spirit of the described implementations. The terminology used herein is selected to best explain the principles of the implementations, their practical applications, or improvements to existing technologies, or to enable others skilled in the art to understand the various implementations disclosed herein.

Claims

1. A system for data sharing, comprising: A first control subsystem includes a first storage node and is configured to write first data from a first data area to the first storage node; as well as The second control subsystem is different from the first control subsystem and is configured to send the first data from the first storage node to a second data area different from the first data area.

2. The system according to claim 1, wherein the second control subsystem comprises a second storage node, and The second control subsystem is further configured to write second data from the second data area into the second storage node, and The first control subsystem is further configured to send the second data from the second storage node to the first data area.

3. The system according to claim 2, wherein the second control subsystem is configured to periodically send the first data from the first storage node to the second data area in a first time period, and The first control subsystem is configured to periodically send the second data from the second storage node to the first data area at a second time period, and wherein the second time period is different from the first time period.

4. The system according to claim 1, wherein the second control subsystem is further configured to: In response to a first preset condition being met, taking over the first storage node to send the first data to the second data area; and In response to a second preset condition being met, releasing the first storage node.

5. The system according to claim 4, wherein the first preset condition comprises at least one of the following: the beginning of a first time period, or receiving an indication that the first data is available, and The second preset condition includes at least one of the following: the end of the first time period, or the completion of sending the first data. 6 . The system according to claim 1 , wherein the first control subsystem is connected to the first data area via a first network, the second control subsystem is connected to the second data area via a second network, and the first network is isolated from the second network.

7. The system of claim 1, wherein the first control subsystem and the second control subsystem are independent of each other in at least one of the following aspects: operating system, or Permission configuration.

8. The system according to claim 1, wherein the first data area is a data production area, and the second data area is a data backup area, or The first data area is a data backup area, and the second data area is a data production area.

9. A method for data sharing, comprising: receiving, by a first control subsystem in the system for data sharing, first data from a first data area; The first control subsystem writes the first data into a first storage node of the first control subsystem; as well as The first data is sent from the first storage node to a second data area different from the first data area by a second control subsystem in the system, the second control subsystem being different from the first control subsystem.

10. The method according to claim 9, wherein the second control subsystem comprises a second storage node, and the method further comprises: receiving, by the second control subsystem, second data from the second data area; The second control subsystem writes the second data into the second storage node; as well as The first control subsystem sends the second data from the second storage node to the first data area.

11. The method of claim 10, wherein sending the first data from the first storage node to the second data area comprises: The second control subsystem periodically sends the first data from the first storage node to the second data area in a first time period, and Sending the second data from the second storage node to the first data area includes: The first control subsystem periodically sends the second data from the second storage node to the first data area in a second time period, wherein the second time period is different from the first time period.

12. The method according to claim 9, further comprising: In response to a first preset condition being met, the second control subsystem takes over the first storage node to send the first data to the second data area; as well as The second control subsystem releases the first storage node in response to a second preset condition being met.

13. The method according to claim 12, wherein the first preset condition comprises at least one of the following: the beginning of a first time period, or receiving an indication that the first data is available, and The second preset condition includes at least one of the following: the end of the first time period, or the completion of sending the first data.

14. The method according to claim 9, wherein the first control subsystem is connected to the first data area via a first network, the second control subsystem is connected to the second data area via a second network, and the first network is isolated from the second network.

15. The method of claim 9, wherein the first control subsystem and the second control subsystem are independent of each other in at least one of the following aspects: operating system, or Permission configuration.

16. The method according to claim 9, wherein the first data area is a data production area, and the second data area is a data backup area, or The first data area is a data backup area, and the second data area is a data production area.

17. A device for data sharing, comprising: A first data receiving module is configured to enable a first control subsystem in the system for data sharing to receive first data from a first data area; A first data storage module, configured to enable the first control subsystem to write the first data into a first storage node of the first control subsystem; as well as The first data sending module is configured to enable a second control subsystem in the system to send the first data from the first storage node to a second data area different from the first data area, and the second control subsystem is different from the first control subsystem.

18. An electronic system comprising: A first control subsystem; A second control subsystem; at least one processing unit; as well as At least one memory, the at least one memory is coupled to the at least one processing unit and stores instructions for execution by the at least one processing unit, the instructions, when executed by the at least one processing unit, causing the electronic system to perform the method according to any one of claims 9 to 16.

19. A computer-readable storage medium having a computer program stored thereon, wherein the computer program can be executed by a processor to implement the method according to any one of claims 9 to 16.

Citation Information

Patent Citations

  • Method and system used for managing memories in storage system

    CN107515727A

  • Data backup method, device and system

    CN109614264A

  • Method, device and computer program product for backing up data

    CN111045855A

  • System, method and device for data sharing and storage medium

    CN117473568A

  • Remote copy system

    CN1581105A