Data processing method, apparatus, device, storage medium, and program product

Abstract

The present disclosure provides a data processing method, an apparatus, a device, a storage medium, and a program product, which are applied to a computing device. The method comprises: receiving a data processing request sent by a terminal device by means of a first network connection, wherein the data processing request is used for requesting a target server to perform data processing, and the computing device and the target server are located in the same local area network; determining a second network connection corresponding to the first network connection; sending a data processing request to the target server by means of the second network connection, thereby improving data processing security.

Description

[0001] Data Processing Method, Apparatus, Device, Storage Medium, and Program Product This disclosure claims priority to Chinese patent application No. 202410315478.7, filed with the China Patent Office on March 19, 2024, entitled "Data Processing Method, Apparatus, Device, Storage Medium, and Program Product," the entire contents of which are incorporated herein by reference. Technical Field This disclosure relates to the field of communications technology, and more particularly to a data processing method, apparatus, device, storage medium, and program product. Background In a cloud scenario, the cloud may have multiple servers running services. Users can access a target server in the cloud through a terminal device. In related art, the terminal device is typically located on a public network, and the target server is typically located on an intranet. The terminal device can establish a Transmission Control Protocol (TCP) connection with the target server based on the target server's public Internet Protocol (IP) address and send a message to the target server via the TCP connection. The data processing response is sent to the terminal device via the first network connection. In one possible embodiment, the method further includes: receiving, via a first TCP connection with the terminal device, a network connection establishment request sent by the terminal device, the network connection establishment request including the network address of the target server; performing security verification on the terminal device to obtain a verification result; and when the verification result is determined to be passed, creating the first network connection and the second network connection according to the network connection establishment request, and generating a target network connection pair, the target network connection pair including the first network connection and the second network connection. In one possible embodiment, creating the first network connection according to the network connection establishment request includes: sending the network address of the computing device to the terminal device; receiving a first connection establishment request sent by the terminal device, the first connection establishment request including the network address of the computing device; and sending a first connection establishment response to the terminal device to establish the first network connection. In one possible embodiment, establishing the second network connection based on the network connection establishment request includes: generating a second connection establishment request based on the network connection establishment request, the second connection establishment request including the network address of the computing device; determining whether a TCP connection exists between the computing device and the target server; if so, sending the second connection establishment request to the target server and receiving a second connection establishment response from the target server to establish the second network connection; if not, sending the second connection establishment request to a proxy server corresponding to the target server and receiving a second connection establishment response from the proxy server to establish the second network connection, the proxy server and the target server being connected via a TCP connection. In one possible embodiment, performing security verification on the terminal device to obtain a verification result includes: determining security device information corresponding to the target server, the security device information including a device identifier of at least one device permitted to access the target server; determining the verification result as passed if the security device information includes the device identifier of the terminal device; and determining the verification result as failed if the security device information does not include the device identifier of the terminal device. In a possible implementation, the first network connection and / or the second network connection is a secure Web Sockets Protocol (WSS) connection.In a second aspect, embodiments of the present disclosure provide a data processing method, applied to a computing device. The method includes: receiving a data processing request sent by a terminal device via a first network connection, the data processing request being for requesting a target server to perform cloud computing processing, the target server being a cloud server, and the computing device and the target server being located on the same local area network; determining a second network connection corresponding to the first network connection; and sending the data processing request to the target server via the second network connection. In one possible implementation, determining the second network connection corresponding to the first network connection includes: obtaining at least one network connection pair, the network connection pair including two corresponding network connections; determining a target network connection pair from the at least one network connection pair based on the first network connection, the target network connection pair including the first network connection; and determining the other network connection in the target network connection pair, excluding the first network connection, as the second network connection. In one possible implementation, sending the data processing request to the target server via the second network connection includes: if the second network connection is a network connection between the computing device and the target server, sending the data processing request to the target server via the second network connection; and if the second network connection is a network connection between the computing device and a proxy server, sending the data processing request to the proxy server via the second network connection, wherein the proxy server is configured to forward the data processing request to the target server via a Transmission Control Protocol (TCP) connection between the proxy server and the target server. In one possible implementation, the method further includes: receiving a data processing response sent by the target server via the second network connection; and sending the data processing response to the terminal device via the first network connection. In a possible implementation, the method further includes: receiving, through a first TCP connection between the terminal device and the terminal device, a network connection establishment request sent by the terminal device, the network connection establishment request including the network address of the target server; performing security verification processing on the terminal device to obtain a verification result; and when it is determined that the verification result is verification passed, creating the first network connection and the second network connection according to the network connection establishment request, and generating a target network connection pair, the target network connection pair including the first network connection and the second network connection.In one possible implementation, establishing the first network connection based on the network connection establishment request includes: sending the network address of the computing device to the terminal device; receiving the first connection establishment request sent by the terminal device, the first connection establishment request including the network address of the computing device; and sending a first connection establishment response to the terminal device to establish the first network connection. In another possible implementation, establishing the second network connection based on the network connection establishment request includes: generating a second connection establishment request based on the network connection establishment request, the second connection establishment request including the network address of the computing device; determining whether a TCP connection exists between the computing device and the target server; if so, sending the second connection establishment request to the target server and receiving a second connection establishment response from the target server to establish the second network connection; if not, sending the second connection establishment request to a proxy server corresponding to the target server and receiving a second connection establishment response from the proxy server to establish the second network connection, wherein the proxy server and the target server are connected via TCP. In one possible implementation, performing security verification on the terminal device to obtain a verification result includes: determining security device information corresponding to the target server, the security device information including a device identifier of at least one device permitted to access the target server; if the security device information includes the device identifier of the terminal device, determining the verification result as passed; if the security device information does not include the device identifier of the terminal device, determining the verification result as failed. In one possible implementation, the first network connection and / or the second network connection is a secure Web Sockets Protocol (WSS) connection. In a third aspect, embodiments of the present disclosure provide a data processing device for use in a computing device. The device includes: a receiving module, a determining module, and a sending module. The receiving module is configured to receive a data processing request sent by a terminal device via a first network connection, the data processing request being for requesting a target server to perform data processing, the computing device and the target server being located in the same local area network; the determining module is configured to determine a second network connection corresponding to the first network connection; and the sending module is configured to send the data processing request to the target server via the second network connection.In one possible implementation, the determining module is specifically configured to: obtain at least one network connection pair, the network connection pair including two corresponding network connections; determine a target network connection pair from the at least one network connection pair based on the first network connection, the target network connection pair including the first network connection; and determine the other network connection in the target network connection pair, other than the first network connection, as the second network connection. In one possible implementation, the sending module is specifically configured to: if the second network connection is a network connection between the computing device and the target server, send the data processing request to the target server via the second network connection; if the second network connection is a network connection between the computing device and a proxy server, send the data processing request to the proxy server via the second network connection, the proxy server being configured to forward the data processing request to the target server via a Transmission Control Protocol (TCP) connection between the proxy server and the target server. In one possible implementation, the receiving module is further configured to receive a data processing response sent by the target server via the second network connection; and the sending module is further configured to send the data processing response to the terminal device via the first network connection. In one possible embodiment, the apparatus further includes a verification module and a creation module, wherein the receiving module is further configured to receive, via a first TCP connection between the receiving module and the terminal device, a network connection establishment request sent by the terminal device, the network connection establishment request including the network address of the target server; the verification module is configured to perform security verification on the terminal device to obtain a verification result; and the creation module is configured to, when the verification result is determined to be passed, create the first and second network connections based on the network connection establishment request and generate a target network connection pair, the target network connection pair including the first and second network connections. In one possible embodiment, the creation module is specifically configured to: send the network address of the computing device to the terminal device; receive a first connection establishment request sent by the terminal device, the first connection establishment request including the network address of the computing device; and send a first connection establishment response to the terminal device to establish the first network connection.In one possible embodiment, the creation module is specifically configured to: generate a second connection establishment request based on the network connection establishment request, wherein the second connection establishment request includes the network address of the computing device; determine whether a TCP connection exists between the computing device and the target server; if so, send the second connection establishment request to the target server and receive a second connection establishment response from the target server to establish the second network connection; if not, send the second connection establishment request to a proxy server corresponding to the target server and receive a second connection establishment response from the proxy server to establish the second network connection, wherein the proxy server and the target server are connected via TCP. In one possible embodiment, the verification module is specifically configured to: determine security device information corresponding to the target server, wherein the security device information includes a device identifier of at least one device allowed to access the target server; if the security device information includes the device identifier of the terminal device, determine the verification result as verification passed; if the security device information does not include the device identifier of the terminal device, determine the verification result as verification failed. In one possible embodiment, the first network connection and / or the second network connection are secure Web Sockets Protocol (WSS) connections. In a fourth aspect, embodiments of the present disclosure provide a data processing apparatus for use in a computing device. The apparatus includes: a receiving module, a determining module, and a sending module. The receiving module is configured to receive a data processing request sent by a terminal device via a first network connection, the data processing request being for requesting a target server to perform cloud computing processing, the target server being a cloud server, and the computing device and the target server being located on the same local area network; the determining module is configured to determine a second network connection corresponding to the first network connection; and the sending module is configured to send the data processing request to the target server via the second network connection. In one possible implementation, the determining module is specifically configured to: obtain at least one network connection pair, the network connection pair including two corresponding network connections; determine, based on the first network connection, a target network connection pair in the at least one network connection pair, the target network connection pair including the first network connection; and determine the other network connection in the target network connection pair, excluding the first network connection, as the second network connection.In one possible implementation, the sending module is specifically configured to: if the second network connection is a network connection between the computing device and the target server, send the data processing request to the target server via the second network connection; if the second network connection is a network connection between the computing device and a proxy server, send the data processing request to the proxy server via the second network connection, and the proxy server is configured to forward the data processing request to the target server via a Transmission Control Protocol (TCP) connection between the proxy server and the target server. In one possible implementation, the receiving module is further configured to receive a data processing response sent by the target server via the second network connection; and the sending module is further configured to send the data processing response to the terminal device via the first network connection. In one possible embodiment, the apparatus further includes a verification module and a creation module, wherein the receiving module is further configured to receive, via a first TCP connection between the receiving module and the terminal device, a network connection establishment request sent by the terminal device, the network connection establishment request including the network address of the target server; the verification module is configured to perform security verification on the terminal device to obtain a verification result; and the creation module is configured to, when the verification result is determined to be passed, create the first and second network connections based on the network connection establishment request and generate a target network connection pair, the target network connection pair including the first and second network connections. In one possible embodiment, the creation module is specifically configured to: send the network address of the computing device to the terminal device; receive a first connection establishment request sent by the terminal device, the first connection establishment request including the network address of the computing device; and send a first connection establishment response to the terminal device to establish the first network connection. In one possible implementation, the creation module is specifically used to: generate a second connection establishment request based on the network connection establishment request, where the second connection establishment request includes the network address of the computing device; determine whether a TCP connection exists between the computing device and the target server; if so, send the second connection establishment request to the target server, and receive a second connection establishment response sent by the target server to create the second network connection; if not, send the second connection establishment request to the proxy server corresponding to the target server, and receive a second connection establishment response sent by the proxy server to create the second network connection, where the proxy server and the target server are connected via TCP.In one possible implementation, the verification module is specifically configured to: determine security device information corresponding to the target server, the security device information including a device identifier of at least one device allowed to access the target server; if the security device information includes the device identifier of the terminal device, determine the verification result as passed; if the security device information does not include the device identifier of the terminal device, determine the verification result as failed. In one possible implementation, the first network connection and / or the second network connection is a secure Web Sockets Protocol (WSS) connection. In a fifth aspect, embodiments of the present disclosure provide a computing device comprising: a memory and a processor; the memory storing computer-executable instructions; the processor executing the computer-executable instructions stored in the memory, causing the computing device to perform the method described in either the first or second aspect. In a sixth aspect, embodiments of the present disclosure provide a computer-readable storage medium storing computer-executable instructions, which, when executed by the processor, implement the method described in either the first or second aspect. In a seventh aspect, embodiments of the present disclosure provide a computer program product comprising a computer program, which, when executed by the processor, implements the method described in either the first or second aspect. Embodiments of the present disclosure provide a data processing method, apparatus, device, storage medium, and program product. A computing device can receive a data processing request sent by a terminal device via a first network connection, determine a second network connection corresponding to the first network connection, and then send the data processing request to a target server via the second network connection. Because a computing device is provided between the terminal device and the target server, and the computing device and the target server are located in the same local area network (i.e., intranet), the terminal device can send the data processing request to the target server via the computing device, avoiding exposing the target server's public IP address to the public network, thereby improving data processing security. BRIEF DESCRIPTION OF THE DRAWINGS The drawings described herein are provided to provide a further understanding of the present disclosure and constitute a part of the present disclosure. The illustrative embodiments of the present disclosure and their description are intended to explain the present disclosure and are not intended to unduly limit the present disclosure.In the accompanying drawings: Figure 1 is a schematic diagram of a scenario provided by an exemplary embodiment of the present disclosure; Figure 2 is a flowchart of a data processing method provided by an exemplary embodiment of the present disclosure; Figure 3 is a flowchart of another data processing method provided by an exemplary embodiment of the present disclosure; Figure 4 is a process diagram of yet another data processing method provided by an exemplary embodiment of the present disclosure; Figure 5 is a process diagram of a data processing method provided by an exemplary embodiment of the present disclosure; Figure 6 is a structural diagram of a data processing device provided by an exemplary embodiment of the present disclosure; Figure 7 is a structural diagram of another data processing device provided by an exemplary embodiment of the present disclosure; and Figure 8 is a structural diagram of a computing device provided by an exemplary embodiment of the present disclosure. DETAILED DESCRIPTION OF THE EMBODIMENTS: It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, and displayed data, etc.) involved in this disclosure are all information and data authorized by the user or fully authorized by all parties. The collection, use, and processing of the relevant data must comply with relevant laws, regulations, and standards, and corresponding operation portals are provided for users to choose to authorize or reject. To make the objectives, technical solutions, and advantages of this disclosure more clear, the technical solutions of this disclosure will be clearly and completely described below in conjunction with the specific embodiments of this disclosure and the corresponding drawings. Obviously, the described embodiments are only some of the embodiments of this disclosure, and not all of them. All other embodiments derived by persons of ordinary skill in the art based on the embodiments of this disclosure without inventive effort are within the scope of protection of this disclosure. Figure 1 is a schematic diagram of a scenario provided by an exemplary embodiment of this disclosure. Referring to Figure 1 , it includes a terminal device, a computing device, and a target server. The terminal device is located on a public network, while the computing device and the target server are located on an intranet. The terminal device and the computing device can be connected via a first network connection, while the computing device and the target server can be connected via a second network connection. The terminal device can send a request to the computing device via the first network connection. After receiving the request, the computing device can send a request to the target server via the second network connection. In related art, the terminal device is typically located on a public network, and the target server is typically located on an intranet. The terminal device can establish a Transmission Control Protocol (TCP) connection with the target server based on the public Internet Protocol (IP) address of the target server, and send a service request to the target server through the TCP connection to access the target server.However, in the above approach, the target server located in the intranet needs to expose its public IP address to the public network, making the target server vulnerable to attacks and, in turn, reducing data processing security. In an embodiment of the present disclosure, a computing device is provided between the terminal device and the target server. The computing device, the terminal device, and the target server are connected via a network. The computing device can receive a data processing request sent by the terminal device via a first network connection, determine a second network connection corresponding to the first network connection, and then send the data processing request to the target server via the second network connection. Because the computing device is provided between the terminal device and the target server, and the computing device and the target server are located in the same local area network (i.e., intranet), the terminal device can send the data processing request to the target server via the computing device, avoiding exposing the target server's public IP address to the public network, thereby improving data processing security. The technical solutions presented in this disclosure are described in detail below through specific embodiments. It should be noted that the following embodiments may exist independently or in combination with each other, and identical or similar content will not be repeated in different embodiments. Figure 2 is a flow chart of a data processing method provided by an exemplary embodiment of the present disclosure. Referring to FIG. 2 , the method may include:

[0002] S201. Receive a data processing request sent by a terminal device via a first network connection. The execution subject of the embodiments of the present disclosure may be a computing device or a data processing device within the computing device. The data processing device may be implemented via software or a combination of software and hardware. The data processing device may be a processor within the computing device. For ease of understanding, the following description uses the computing device as an example. The terminal device may be a user device located on a public network, running an application and a client program. The terminal device may detect a TCP port and establish a network connection with the computing device via the client program. The computing device may be a server located within an intranet or within a cloud service system. The cloud service system may be provided by a cloud vendor. The terminal device and the computing device may be connected via a first network connection. The first network connection may be a communication connection that provides greater confidentiality and security than a TCP connection. Optionally, the first network connection may be a secure WebSocket Secure (WSS) connection.

[0003] A WSS connection is a communication connection established based on the WSS protocol. It uses Transport Layer Security (TLS) and Secure Sockets Layer (SSL) encryption technologies to ensure data security and confidentiality during transmission, offering higher security than TCP connections. A data processing request can be used to request data processing from the target server. For example, a data processing request might be to retrieve data corresponding to key 1 from the target server. The computing device may obtain a connection mapping table to obtain at least one network connection pair. The computing device may determine a target network connection pair from the at least one network connection pair based on the first network connection, and further determine the second network connection from the target network connection pair. The target network connection pair includes the first network connection. For example, if the first network connection is WSS connection 1-1, the target network connection pair may be determined to be network connection pair 1, and network connection pair 1 may include WSS connection 1-1. For example, if the computing device can obtain at least one network connection pair, as shown in Table 1, if the first network connection is WSS connection 1-1, network connection pair 1 may be determined based on WSS connection 1-1, and WSS connection 1-2 may be determined as the second network connection in network connection pair 1. In another optional embodiment, the computing device may be provided with a preset storage space, which may store correspondences between multiple network connections. The computing device may determine the correspondences between the multiple network connections in the preset storage space based on the first network connection, and determine the second network connection corresponding to the first network connection based on the correspondences between the multiple network connections. For example, if the first network connection is network connection 1-1, and if the preset storage space stores correspondence 1 between WSS connection 1-1 and WSS connection 1-2, the computing device may obtain correspondence 1 in the preset storage space and determine WSS connection 1-2 as the second network connection in correspondence 1.

[0004] S203: Send a data processing request to the target server via the second network connection. The target server may be a server located in an intranet and running a business program. The target server may process the data processing request. The computing device and the target server may be located in the same local area network (i.e., intranet). Since the computing device has received the data processing request sent by the terminal device via the first network connection, after determining the second network connection, the computing device may send the data processing request to the target server via the second network connection, so that the target server can process the data processing request. For example, if the computing device has received data processing request 1 via WSS connection 1-1, and if the second WSS connection is WSS connection 1-2, the computing device may send data processing request 1 to the target server via WSS connection 1-2, so that the target server can process data processing request 1. In the technical solution of the present disclosure, the computing device is disposed between the terminal device and the target server. This avoids exposing the public IP address of the target server, protects the target server from attacks, improves the security of the target server, and thereby improves the security of data processing. In an embodiment of the present disclosure, a computing device can receive a data processing request sent by a terminal device via a first network connection, determine a second network connection corresponding to the first network connection, and then send the data processing request to a target server via the second network connection. Because a computing device is provided between the terminal device and the target server, and the computing device and the target server are located in the same local area network (i.e., intranet), the terminal device can send the data processing request to the target server via the computing device, thereby avoiding exposing the target server's public IP address to the public network. Furthermore, the network connections between the terminal device and the computing device, and between the computing device and the target server, can be WSS connections. Data transmission via WSS connections is more secure than TCP connections, thereby comprehensively improving data processing security. In another optional embodiment, the present disclosure also provides a data processing method, applied to a computing device, comprising: receiving a data processing request sent by a terminal device via a first network connection; determining a second network connection corresponding to the first network connection; and sending the data processing request to the target server via the second network connection. The computing device and the target server can be located in the same local area network. The data processing request can be used to request cloud computing processing on the target server, which can be a cloud server. The terminal device and the computing device may be connected via a first network, and the computing device and the target server may be connected via a second network. Optionally, the first network connection and / or the second network connection may be a WSS connection.For example, the terminal device can generate a data processing request 2, which can be used to request the target server to perform cloud computing processing on the data corresponding to key2. If the first network connection is a WSS connection 1-1, the terminal device can send the data processing request 2 to the computing device through the WSS connection 1-1, and the computing device can receive the data processing request 2 sent by the terminal device through the WSS connection 1-1. O The computing device may determine that the second network connection corresponding to WSS connection 1-1 is WSS connection 1-2 O If the target server is cloud server A, the computing device can send data processing request 2 to cloud server A via WSS connections 1-2. Cloud server A can perform cloud computing processing on the data corresponding to key2 based on data processing request 2. In an embodiment of the present disclosure, the computing device can receive the data processing request sent by the terminal device via a first WSS connection, determine a second WSS connection corresponding to the first WSS connection, and then send the data processing request to the target server via the second WSS connection. Because a computing device is provided between the terminal device and the target server, and the computing device and the target server are located in the same local area network (i.e., intranet), the terminal device can send the data processing request to the target server via the computing device, avoiding exposing the target server's public IP address to the public network. Furthermore, the network connections between the terminal device and the computing device, and between the computing device and the target server, can be WSS connections. Data transmission via WSS connections is more secure than TCP connections, thereby comprehensively improving data processing security. The following describes the above-described data processing method in detail, based on the embodiment shown in FIG2 and in conjunction with FIG3. FIG3 is a flow chart of another data processing method provided by an exemplary embodiment of the present disclosure. Referring to FIG3, the method may include:

[0005] S301: Receive a data processing request sent by a terminal device through a first network connection. It should be noted that the execution process of step S301 can refer to step S201 and will not be repeated here.

[0006] S302. Obtain at least one network connection pair. Optionally, the computing device may obtain a connection mapping table to obtain the at least one network connection pair. For example, the computing device may obtain the connection mapping table shown in Table 1 to obtain the at least one network connection pair. The at least one network connection pair may include network connection pair 1, network connection pair 2, ...

[0007] S303. Determine a target network connection pair from at least one network connection pair based on the first network connection. For example, if the first network connection is WSS connection 1-1, the target network connection pair may be determined to be network connection pair 1 from at least one network connection pair, where network connection pair 1 includes WSS connection 1-1.

[0008] S304. Determine the other network connection in the target network connection pair, other than the first network connection, as the second network connection. Since the target network connection pair includes the first network connection and the second network connection, the other network connection in the target network connection pair, other than the first network connection, may be determined as the second network connection. For example, if the target network connection pair is network connection pair 1, and network connection pair 1 includes WSS connection 1-1 and WSS connection 1-2, and if the first network connection is WSS connection 1-1, then the second network connection in the target network connection pair may be determined to be WSS connection 1-2.

[0009] S305. If the second network connection is a network connection between the computing device and the target server, send a data processing request to the target server via the second network connection. If the computing device and the target server communicate directly, an agent program and a service program may be running on the target server. The target server may establish a second network connection with the computing device via the agent program. The second network connection is a network connection between the computing device and the target server. For example, if the computing device receives data processing request 1 via WSS connection 1-1, and the second network connection is WSS connection 1-2, which is also a network connection between the computing device and the target server, the computing device may send data processing request 1 to the target server via WSS connection 1-2.

[0010] S306. If the second network connection is a network connection between the computing device and the proxy server, then the data processing request is sent to the proxy server via the second network connection. If a proxy server exists between the computing device and the target server, then the second network connection may be a network connection between the computing device and the proxy server. The proxy server may run an agent program. The proxy server may establish a TCP connection with the target server and a network connection with the computing device through the agent program. It should be noted that, when a proxy server exists, since the agent program is running on the proxy server, the target server does not need to run an agent program; the target server may instead run a business program. The agent program may be a cloud-native, plug-and-play program that comes with the target server or the proxy server, eliminating the need for users to install and configure additional tools. The proxy server may be used to forward the data processing request to the target server via the TCP connection between the proxy server and the target server. For example, if the computing device receives data processing request 1 through WSS connection 1-1, and the second network connection is WSS connection 1-2, which is a network connection between the computing device and the proxy server, the computing device can send data processing request 1 to the proxy server through WSS connection 1-2. After receiving data processing request 1, the proxy server can send data processing request 1 to the target server.

[0011] S307. Receive a data processing response sent by the target server via the second network connection. After receiving the data processing request, the target server may process the data processing request and obtain a data processing response corresponding to the data processing request. For example, if data processing request 1 is to obtain data corresponding to key 1, the target server may determine the data corresponding to key 1 and generate data processing response 1. Assuming that the data corresponding to key 1 is data 1, data processing response 1 may include data 1. Optionally, receiving the data processing response sent by the target server via the second network connection may include the following two scenarios: Scenario 1: If the second network connection is a network connection between the computing device and the target server. In this scenario, the target server may send the data processing response to the computing device via the second network connection. The computing device may receive the data processing response sent by the target server via the second network connection. For example, if the second network connection is WSS connection 1-2, which is a network connection between the computing device and the target server, the target server may send data processing response 1 to the computing device via WSS connection 1-2, and the computing device may receive data processing response 1 via WSS connection 1-2. Case 2: If the second network connection is a network connection between the computing device and the proxy server. In this case, the target server can send a data processing response to the proxy server through a TCP connection. After the proxy server receives the data processing response, it can send the data processing response to the computing device through the second network connection. The computing device can receive the data processing response sent by the proxy server through the second network connection to receive the data processing response sent by the target server. For example, if the second network connection is a WSS connection 1-2, and is a network connection between the computing device and the proxy server, the target server can send a data processing response 1 to the proxy server through a TCP connection. After the proxy server receives the data processing response 1, it can send the data processing response 1 to the computing device through the WSS connection 1-2, and the computing device can receive the data processing response through the WSS connection 1-2.

[0012] S308. Send a data processing response to the terminal device via the first network connection. After receiving the data processing response from the target server, the computing device sends the data processing response to the terminal device via the first network connection. For example, if the first network connection is WSS connection 1-1, the computing device can send the data processing response to the terminal device via WSS connection 1-1. In the technical solution of this disclosure, the computing device can forward and process data processing requests between the terminal device and the target server. The computing device can be a server in a cloud service system provided by a cloud vendor. Users do not need to configure additional public IP resources or deploy their own server nodes, reducing user costs. The computing device can communicate with the target server via an intranet, isolating the target server from the public network, thereby improving the security of the target server. It should be noted that the processing steps (S301-S308) shown in the embodiment of FIG3 do not constitute a specific limitation on the data processing process. In other embodiments of the present disclosure, the data processing process may include more or fewer steps than the embodiment of FIG3. For example, the data processing process may include some of the steps in the embodiment of FIG. 3 , or some steps in the embodiment of FIG. 3 may be replaced by steps with the same functionality, or some steps in the embodiment of FIG. 3 may be split into multiple steps. In an embodiment of the present disclosure, a computing device may receive a data processing request sent by a terminal device via a first network connection. The computing device may obtain at least one network connection pair and, based on the first network connection, determine a target network connection pair from the at least one network connection pair, and then determine the other network connection in the target network connection pair, other than the first network connection, as a second network connection. If the second network connection is a network connection between the computing device and a target server, the computing device may send the data processing request to the target server via the second network connection. If the second network connection is a network connection between the computing device and a proxy server, the computing device may send the data processing request to the proxy server via the second network connection. The computing device may receive a data processing response sent by the target server via the second network connection, determine the first network connection corresponding to the second network connection, and then send the data processing response to the terminal device via the first network connection. Since a computing device is provided between the terminal device and the target server, the terminal device can send data processing requests to the target server through the computing device, thus avoiding exposure of the public IP address of the target server; and the terminal device and the computing device, as well as the computing device and the target server, can be WSS connections. Transmitting data through a network connection is more secure than a TCP connection, thereby comprehensively improving the security of data processing.4, the process of establishing a network connection between a computing device, a terminal device, and a target server will be described. FIG4 is a schematic diagram of another data processing method provided by an exemplary embodiment of the present disclosure.

[0013] S401. Receive a network connection establishment request sent by the terminal device via a first TCP connection with the terminal device. A first TCP connection may exist between the computing device and the terminal device. The network connection establishment request may be a request based on the Hypertext Transfer Protocol (HTTP). The network connection establishment request includes the network address of the target server and may also include the target server's port number, the computing device's domain name, and the ID of the server where the proxy program resides. If the server where the proxy program resides is a proxy server, the ID of the proxy server is the proxy server's ID; if the server where the proxy program resides is the target server, the ID of the proxy server is the target server's ID. Since the terminal device is running a client program, the terminal device may run the client program and, based on the computing device's domain name, send a network connection establishment request to the computing device via the first TCP connection. The computing device may receive the network connection establishment request via the first TCP connection. For example, if network connection establishment request 1 may include network address 1 of server 1, port number 1, domain name 1 of the computing device, and ID 001 of server 1 or ID 002 of the proxy server, the terminal device may run a client program and send network connection establishment request 1 to the computing device through a first TCP connection based on domain name 1. The computing device may receive network connection establishment request 1 through the first TCP connection.

[0014] S402. Perform security verification on the terminal device to obtain a verification result. In an optional embodiment, security verification can be performed on the terminal device to obtain a verification result in the following manner: Determine the security device information corresponding to the target server; if the security device information includes the terminal device's device identifier, determine the verification result as passed; if the security device information does not include the terminal device's device identifier, determine the verification result as failed. The security device information includes the device identifier of at least one device permitted to access the target server. Optionally, the device identifier can be a device account number, a device network address, or the like. The computing device can determine the terminal device's device identifier and perform security verification based on the security device information. For example, if the device identifier is a network address, if the terminal device's device identifier is "address 1," and if the security device information includes "IP address 1," the verification result for the terminal device can be determined as passed; if the security device information does not include "IP address 1," the verification result for the terminal device can be determined as failed. In the technical solution of the present disclosure, the computing device can be equipped with a reliable authentication mechanism that integrates cloud resource permission access control.

[0015] 5403. When the verification result is determined to be passed, a first network connection is established according to the network connection establishment request. In an optional embodiment, the first network connection can be established according to the network connection establishment request in the following manner: sending the WSS address of the computing device to the terminal device; receiving the first connection establishment request sent by the terminal device; and sending a first connection establishment request response to the terminal device to establish the first network connection. The first connection establishment request may include the WSS address of the computing device. For example, the first connection establishment request may include the WSS address of the computing device as "wss: / / example.com / socket". oThe first connection establishment response may include a confirmation identifier. Optionally, the confirmation identifier may be an HTTP 101 Switching Protocol status code, indicating that the computing device agrees to establish a network connection. The computing device may determine a WSS address and send the WSS address to the terminal device. After receiving the WSS address of the computing device, the terminal device may generate a first connection request based on the WSS address through a client program. The first connection request may include the WSS address of the computing device. The terminal device may send the first connection establishment request to the computing device. After receiving the first connection establishment request, the computing device may send a first connection establishment response to the terminal device to establish the first network connection. For example, if the computing device determines that WSS address 1 is "wss: / / example.com / socket", the computing device may send WSS address 1 to the terminal device. After receiving WSS address 1, the terminal device may send the first connection establishment request to the computing device based on WSS address 1. After receiving the first connection establishment request, the computing device may send a first connection establishment response to the terminal device to create the WSS connection 1-1. The WSS connection 1-1 is the first network connection.

[0016] 5404. When it is determined that the verification result is verification passed, a second network connection is created according to the network connection establishment request. In an optional embodiment, the second network connection can be created according to the network connection establishment request in the following manner: generating a second connection establishment request according to the network connection establishment request; determining whether a TCP connection exists between the computing device and the target server; if so, sending a second connection establishment request to the target server, and receiving a second connection establishment response sent by the target server to create a second network connection. If not, sending a second connection establishment request to the proxy server corresponding to the target server, and receiving a second connection establishment response sent by the proxy server to create a second network connection. The second connection establishment request may include the WSS address of the computing device. For example, the second connection establishment request may include the WSS address 1 of the computing device as "wss: / / example.com / socket". oThe second connection establishment response may include a confirmation identifier. Optionally, the confirmation identifier may be an HTTP 101 Switching Protocol status code, indicating that the network connection is agreed to be established. The computing device may generate a second connection establishment request based on the network connection establishment request. Optionally, the computing device may determine whether a TCP connection exists between the computing device and the target server, and then establishing the second connection request may include the following two situations: Situation 1: A TCP connection exists between the computing device and the target server. In this case, it means that the computing device and the target server are communicating directly. The computing device may send a second connection establishment request to the target server through a proxy program based on the network address, port number, and ID of the target server in the network connection establishment request, and receive a second connection establishment response sent by the target server. For example, if the target server is Server 1, the computing device may send a second connection establishment request 1 to Server 1, and the second connection establishment request 1 may include the computing device's WSS address 1 as "wss: / / example.com / socket". o After receiving the second connection establishment request 1, the target server may send a second connection establishment response 1 to the computing device. The computing device may receive the second connection establishment response 1 to establish WSS connections 1-2, and WSS connections 1-2 are the second network connections. Case 2: There is no TCP connection between the computing device and the target server. In this case, it means that the computing device and the target server are not communicating directly, and there is a proxy server between the computing device and the target server. The computing device may send a second connection establishment request to the proxy server through a proxy program according to the identifier of the proxy server in the network connection establishment request. After receiving the second connection establishment request, the proxy server may send a second connection establishment response to the computing device. The computing device may receive the second connection establishment response to create a second network connection. For example, the computing device may send a second connection establishment request 2 to the proxy server 1, and the second connection establishment request 2 may include the computing device's WSS address 1 as "wss: / / example.com / socket". oAfter receiving the second connection establishment request 2, the proxy server 1 may send a second connection establishment response 2 to the computing device. The computing device may receive the second connection establishment response 2 to establish the WSS connection 1-2, which then becomes the second network connection. The proxy server may obtain the network address and port number of the target server in the computing device through a proxy program, and send a TCP connection request to the target server based on the target server's network address and port number to establish a TCP connection. The proxy server and the target server may establish a TCP connection. For example, if the target server is Server 1 and Network Connection Establishment Request 1 includes Server 1's network address 1 and port number 1, the proxy server may obtain Server 1's network address 1 and port number 1, and send a TCP connection request to Server 1 based on the network address 1 and port number 1 to establish TCP connection 1 with Server 1. It should be noted that steps S403 and S404 may be performed in any order and may be performed simultaneously.

[0017] S405: Generate a target network connection pair based on the first network connection and the second network connection. After the computing device establishes a first network connection with the terminal device and a second network connection with the target server (or proxy server), a target network connection pair may be generated based on the first network connection and the second network connection. The target network connection pair may include the first network connection and the second network connection. For example, if the first network connection established between the computing device and the terminal device is WSS connection 1-1, and the second network connection established with the target server (or proxy server) is WSS connection 1-2, then the target network connection pair may be generated as network connection pair 1, and network connection pair 1 may include WSS connection 1-1 and WSS connection 1-2. OIn an embodiment of the present disclosure, a computing device can receive a network connection establishment request sent by a terminal device through a first TCP connection with the terminal device, perform security verification on the terminal device, and obtain a verification result. Upon determining that the verification result is successful, the computing device can create a first network connection and a second network connection based on the network connection establishment request, and generate a target network connection pair based on the first and second network connections. Because a computing device is provided between the terminal device and the target server, and the computing device and the target server are located in the same local area network (i.e., intranet), the terminal device can send data processing requests to the target server through the computing device, avoiding exposure of the target server's public IP address. Furthermore, WSS connections can be established between the terminal device and the computing device, and between the computing device and the target server. Data transmission via WSS connections is more secure than TCP connections, thereby comprehensively improving data processing security. Figure 5 is a schematic diagram of a data processing method provided by an exemplary embodiment of the present disclosure. Referring to Figure 5, the system includes a terminal device, a cloud service system, and a target server. The terminal device is located in a public network, while the cloud service system and the target server are located in a local area network. The terminal device may run an application and a client program. The client program may detect TCP ports. A cloud service system may include multiple computing devices. For example, the cloud service system may include computing device 1, computing device 2, and so on. The cloud service system may provide services for multiple terminal devices of multiple users. For a target server, if a corresponding proxy server exists, the proxy server may run an agent program, and the target server may run a service program. If no corresponding proxy server exists, the target server may run both the agent program and the service program. In step 1, the terminal device may run a client program and, via a first TCP connection, send a network connection establishment request 1 to the computing device based on the computing device's domain name. The network connection establishment request 1 may include the network address 1 and port number 1 of the target server 1, the domain name 1 of the computing device 1, and the identifier of the server where the agent program resides. In step 2, after receiving the network connection establishment request 1 sent by the terminal device, the computing device may perform security verification on the terminal device and obtain a verification result. In step ③, when the verification result is verification passed, the computing device may establish a WSS connection 1-1 with the terminal device. Specifically, the computing device 1 may send a WSS address 1 to the terminal device.After receiving WSS address 1, the terminal device can, through the client program, send a first connection establishment request 1 to computing device 1 based on WSS address 1. The first connection establishment request 1 may include WSS address 1. After receiving the first connection establishment request 1, computing device 1 may send a first connection establishment response to the terminal device to establish WSS connection 1-1 as a first network connection. In step 4, if the verification result is "passed," the computing device may create WSS connection 1-2. Specifically, computing device 1 may generate a second connection establishment request 1 based on network connection establishment request 1. The second connection establishment request 1 may include WSS address 1. In scenario 1, the ID of the server where the proxy program is located is the ID of the target server. Computing device 1 may send a second connection establishment request 1 to target server 1 based on the network address 1 and port number 1 of target server 1, and the ID of the server where the proxy program is located (i.e., the ID of the target server) in network connection establishment request 1. The second connection establishment request 1 may include WSS address 1. After receiving the second connection establishment request 1, target server 1 may send a second connection establishment response 1 to computing device 1. The computing device may receive the second connection establishment response 1 and establish WSS connection 1-2 as a second network connection. In scenario 2, the ID of the server where the proxy program resides is the proxy server ID. Computing device 1 may send a second connection establishment request 2 to the proxy server based on the ID of the server where the proxy program resides, i.e., the proxy server ID, in the network connection establishment request 1. Second connection establishment request 2 may include WSS address 1. After receiving the second connection establishment request 2, the proxy server may send a second connection establishment response 2 to computing device 1. OComputing device 1 can receive second connection establishment response 2 to establish WSS connection 1-2, where WSS connection 1-2 is the second network connection. After receiving second connection establishment request 2, the proxy server can also obtain the network address 1 and port number 1 of target server 1 from computing device 1 through the proxy program, and send a TCP connection request to target server 1 based on the target server's network address 1 and port number 1 to establish a TCP connection. The proxy server and target server can be connected via TCP. After the computing device establishes WSS connection 1-1 with the terminal device and WSS connection 1-2 with the target server (or proxy server), network connection pair 1 can be generated based on WSS connection 1-1 and WSS connection 1-2. After WSS connection 1-1 and WSS connection 1-2 are successfully established, the terminal device can generate a data processing request when running an application and send the data processing request to the TCP port. After the terminal device detects a data processing request in a TCP port through a client program, it can send the data processing request to computing device 1 via WSS connection 1-1. Computing device 1 can determine the WSS connection 1-2 corresponding to WSS connection 1-1 and, depending on the circumstances, send the data processing request to target server 1 via WSS connection 1-2. Similarly, after processing the data processing request, target server 1 can generate a data processing response and, depending on the circumstances, send the data processing response to computing device 1 via WSS connection 1-2. Computing device 1 can then send the data processing response to the terminal device via WSS connection 1-1. In an embodiment of the present disclosure, the computing device can receive a network connection establishment request sent by the terminal device via a first TCP connection with the terminal device, perform security verification on the terminal device, and obtain a verification result. If the verification result is determined to be verification passed, the computing device can create a first network connection and a second network connection based on the network connection establishment request, and generate a target network connection pair based on the first network connection and the second network connection. Since a computing device is provided between the terminal device and the target server, and the computing device and the target server are located in the same local area network (i.e., intranet), the terminal device can send data processing requests to the target server through the computing device, thus avoiding exposing the public IP address of the target server; and WSS connections are used between the terminal device and the computing device, and between the computing device and the target server. Data transmission via WSS connections is more secure than TCP connections, thereby comprehensively improving the security of data processing.Figure 6 is a schematic diagram of the structure of a data processing device provided in an embodiment of the present disclosure. Referring to Figure 6, the data processing device 10, as applied to a computing device, includes a receiving module 11, a determining module 12, and a sending module 13. The receiving module 11 is configured to receive a data processing request sent by a terminal device via a first network connection, the data processing request being used to request a target server to perform data processing. The computing device and the target server are located in the same local area network. The determining module 12 is configured to determine a second network connection corresponding to the first network connection. The sending module 13 is configured to send the data processing request to the target server via the second network connection. The data processing device provided in an embodiment of the present disclosure can implement the technical solutions shown in the above-mentioned method embodiments. Its implementation principles and beneficial effects are similar and will not be further described here. In one possible embodiment, the determining module 12 is specifically configured to: obtain at least one network connection pair, the network connection pair including two corresponding network connections; determine a target network connection pair from the at least one network connection pair based on the first network connection, the target network connection pair including the first network connection; and determine the other network connection in the target network connection pair, excluding the first network connection, as the second network connection. In one possible embodiment, the sending module 13 is specifically configured to: if the second network connection is a network connection between the computing device and the target server, send the data processing request to the target server via the second network connection; if the second network connection is a network connection between the computing device and a proxy server, send the data processing request to the proxy server via the second network connection, the proxy server being configured to forward the data processing request to the target server via a Transmission Control Protocol (TCP) connection between the proxy server and the target server. In one possible embodiment, the receiving module 11 is further configured to receive a data processing response sent by the target server via the second network connection; and the sending module 13 is further configured to send the data processing response to the terminal device via the first network connection. The data processing device provided in the embodiment of the present disclosure can execute the technical solution shown in the above method embodiment. Its implementation principles and beneficial effects are similar and will not be described in detail here. FIG7 is a schematic diagram of the structure of another data processing device provided in the exemplary embodiment of the present disclosure.Referring to FIG. 7 , based on the data processing device shown in FIG. 6 , the data processing device 10 may further include a verification module 14 and a creation module 15. In one possible implementation, the device further includes the verification module 14 and the creation module 15. The receiving module 11 is further configured to receive, via a first TCP connection with the terminal device, a network connection establishment request sent by the terminal device, the network connection establishment request including the network address of the target server. The verification module 14 is configured to perform security verification on the terminal device to obtain a verification result. When the verification result is determined to be a passed verification, the creation module 15 is configured to create the first and second network connections according to the network connection establishment request and generate a target network connection pair, the target network connection pair including the first and second network connections. The data processing device provided in the embodiments of the present disclosure can implement the technical solutions shown in the above-described method embodiments. The implementation principles and beneficial effects thereof are similar and are not further described here. In one possible implementation, the creation module 15 is specifically configured to: send the network address of the computing device to the terminal device; receive a first connection establishment request sent by the terminal device, the first connection establishment request including the network address of the computing device; and send a first connection establishment response to the terminal device to establish the first network connection. In another possible implementation, the creation module 15 is specifically configured to: generate a second connection establishment request based on the network connection establishment request, the second connection establishment request including the network address of the computing device; determine whether a TCP connection exists between the computing device and the target server; if so, send the second connection establishment request to the target server and receive a second connection establishment response from the target server to establish the second network connection; if not, send the second connection establishment request to a proxy server corresponding to the target server and receive a second connection establishment response from the proxy server to establish the second network connection, wherein the proxy server and the target server are connected via TCP. In one possible implementation, the verification module 14 is specifically used to: determine the security device information corresponding to the target server, where the security device information includes the device identification of at least one device allowed to access the target server; if the security device information includes the device identification of the terminal device, determine that the verification result is verification passed; if the security device information does not include the device identification of the terminal device, determine that the verification result is verification failed.In one possible implementation, the first network connection and / or the second network connection is a secure Web Sockets Protocol (WSS) connection. The data processing device provided in the embodiments of the present disclosure can implement the technical solutions described in the above-mentioned method embodiments. The implementation principles and beneficial effects are similar and will not be further described here. Figure 8 is a schematic diagram of the structure of a computing device provided in an exemplary embodiment of the present disclosure. Referring to Figure 8 , the computing device 20 may include a processor 21 and a memory 22. Exemplarily, the processor 21 and the memory 22 are interconnected via a bus 23. The memory 22 stores computer-executable instructions; the processor 21 executes the computer-executable instructions stored in the memory 22, causing the processor 21 to perform the method described in the above-mentioned method embodiments. Accordingly, the embodiments of the present disclosure provide a computer-readable storage medium storing computer-executable instructions. When executed by a processor, the computer-executable instructions are used to implement the method described in the above-mentioned method embodiments. Accordingly, the embodiments of the present disclosure may also provide a computer program product comprising a computer program. When executed by a processor, the computer program can implement the method described in the above-mentioned method embodiments. Those skilled in the art will appreciate that the embodiments of the present disclosure may be provided as methods, systems, or computer program products. Therefore, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present disclosure may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROMs, optical storage, etc.) containing computer-usable program code. The present disclosure is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present disclosure. It should be understood that each process and / or block in the flowcharts and / or block diagrams, as well as combinations of processes and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, such that execution of the instructions by the processor of the computer or other programmable data processing device generates means for implementing the functions specified in one or more processes in the flowcharts and / or one or more blocks in the block diagrams.These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means that implement the functions specified in one or more flows in a flowchart and / or one or more blocks in a block diagram. These computer program instructions may also be loaded onto a computer or other programmable data processing device, causing the computer or other programmable device to execute a series of operational steps to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more flows in a flowchart and / or one or more blocks in a block diagram. In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory. The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM), and / or non-volatile memory, such as read-only memory (ROM) or flash memory. OMemory is an example of computer-readable media. Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can implement information storage using any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change RAM (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices, or any other non-transmitting medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transitory computer-readable media, such as modulated data signals and carrier waves. It should also be noted that the terms "comprise," "include," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, product, or apparatus comprising a list of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, product, or apparatus. Without further limitation, an element specified by the phrase "comprising a..." does not preclude the presence of additional identical elements in the process, method, product, or apparatus comprising the recited element. The foregoing description is merely an example of the present disclosure and is not intended to limit the present disclosure. Various modifications and variations of the present disclosure will be apparent to those skilled in the art. Any modifications, equivalent substitutions, improvements, and the like made within the spirit and principles of the present disclosure are intended to be encompassed by the claims of the present disclosure.

Claims

Claims 1. A data processing method, wherein: Applied to a computing device, the method includes: receiving a data processing request sent by a terminal device via a first network connection, the data processing request being used to request a target server to perform data processing, the computing device and the target server being located in the same local area network; determining a second network connection corresponding to the first network connection; and sending the data processing request to the target server via the second network connection.

2. A data processing method, wherein: Applied to a computing device, the method includes: receiving a data processing request sent by a terminal device via a first network connection, the data processing request being used to request a target server to perform cloud computing processing, the target server being a cloud server, and the computing device and the target server being located in the same local area network; determining a second network connection corresponding to the first network connection; and sending the data processing request to the target server via the second network connection.

3. The method according to claim 1 or 2, wherein: Determining a second network connection corresponding to the first network connection includes: obtaining at least one network connection pair, the network connection pair including two network connections having a corresponding relationship; determining a target network connection pair in the at least one network connection pair based on the first network connection, the target network connection pair including the first network connection; and determining another network connection in the target network connection pair other than the first network connection as the second network connection.

4. The method according to any one of claims 1 to 3, wherein: Sending the data processing request to the target server through the second network connection includes: if the second network connection is a network connection between the computing device and the target server, sending the data processing request to the target server through the second network connection; if the second network connection is a network connection between the computing device and a proxy server, sending the data processing request to the proxy server through the second network connection, and the proxy server is used to forward the data processing request to the target server through a Transmission Control Protocol TCP connection between the proxy server and the target server.

5. The method according to any one of claims 1 to 4, wherein: The method further includes: receiving a data processing response sent by the target server through the second network connection; and sending the data processing response to the terminal device through the first network connection.

6. The method according to any one of claims 1 to 5, wherein: The method also includes: receiving a network connection establishment request sent by the terminal device through a first TCP connection between the terminal device and the terminal device, wherein the network connection establishment request includes the network address of the target server; performing security verification processing on the terminal device to obtain a verification result; and when it is determined that the verification result is passed, creating the first network connection and the second network connection according to the network connection establishment request, and generating a target network connection pair, wherein the target network connection pair includes the first network connection and the second network connection.

7. The method according to claim 6, wherein: Creating the first network connection according to the network connection establishment request includes: sending the network address of the computing device to the terminal device; receiving a first connection establishment request sent by the terminal device, where the first connection establishment request includes the network address of the computing device; and sending a first connection establishment response to the terminal device to establish the first network connection.

8. The method according to claim 6 or 7, wherein: Creating the second network connection according to the network connection establishment request includes: generating a second connection establishment request according to the network connection establishment request, wherein the second connection establishment request includes the network address of the computing device; determining whether a TCP connection exists between the computing device and the target server; if so, sending the second connection establishment request to the target server and receiving a second connection establishment response sent by the target server to create the second network connection; if not, sending the second connection establishment request to a proxy server corresponding to the target server and receiving a second connection establishment response sent by the proxy server to create the second network connection, wherein the proxy server and the target server are connected via TCP.

9. The method according to any one of claims 6 to 8, wherein: Performing security verification on the terminal device to obtain a verification result, including: determining security device information corresponding to the target server, the security device information including a device identification of at least one device allowed to access the target server; if the security device information includes the device identification of the terminal device, determining that the verification result is verification passed; if the security device information does not include the device identification of the terminal device, determining that the verification result is verification failed.

10. The method according to any one of claims 1 to 9, wherein: The first network connection and / or the second network connection is a secure Web Sockets Protocol (WSS) connection.

11. A data processing device, wherein: Applied to a computing device, the apparatus includes: a receiving module, a determining module, and a sending module, wherein the receiving module is configured to receive a data processing request sent by a terminal device via a first network connection, the data processing request being used to request a target server to perform data processing, and the computing device and the target server are located in the same local area network; the determining module is configured to determine a second network connection corresponding to the first network connection; and the sending module is configured to send the data processing request to the target server via the second network connection.

12. A computing device, wherein: include: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the computing device to perform the method according to any one of claims 1 to 10.

13. A computer-readable storage medium, wherein: The computer-readable storage medium stores computer-executable instructions, and when the processor executes the computer-executable instructions, the method according to any one of claims 1 to 10 is implemented.

14. A computer program product, comprising a computer program, wherein: When the computer program is executed by a processor, the method according to any one of claims 1 to 10 is implemented.

Images