106 results about "Extranet" patented technology

According to the internal network and external network synchronous transmission method and system based on the TCP provided by the invention, file type detection and file title detection are realized at a server side, compliance screening is carried out on file contents before a transmission link, and sensitive files are prevented from entering a transmission link; after the detection is passed, segmented transmission is carried out by adopting a preset fragmentation rule, and breakpoint resume is executed by utilizing a fragmentation index when the transmission is interrupted, so that the stability and the efficiency of large file transmission are remarkably improved; furthermore, the server pushes the downloading notice to the extranet client through the TCP after receiving the auditing result of the intranet client with the auditing authority, so that the file is ensured to be subjected to the auditing link before being transmitted to the extranet, and the unification of high safety, controllability and high efficiency is realized.

The invention discloses an intranet data anti-leakage method based on zero trust and a related device, and belongs to the technical field of information technology and data security. The method comprises the following steps: identifying mainboard information of terminal equipment through a desk management module, limiting all unauthorized data external transmission paths, and only allowing internal white list software to be installed; an isolation wall of an intranet and an extranet is established through a network isolation module, only one network is allowed to exist at the same time, a client is deployed at a credit granting terminal and is bound with a credit granting account, and a gateway end verifies a user identity through a security center and gives a corresponding access right; the flow management and control module is used for limiting the intranet flow to only access the white list website; through an outgoing approval module, mail outgoing is allowed and file outgoing parameters are set only after approval is passed; and single management and control of an external transmission path of intranet data and blocking of a secret divulging behavior are realized. Through real-time control and safety supervision, file protection and leakage prevention of intranet data can be achieved, operation is convenient and fast, and applicability is achieved.

The invention discloses a one-way off-line security intelligent decision center system with local deployment as a main and external network service as an auxiliary and a control method, and belongs to the technical field of artificial intelligence security and edge intelligent decision. A three-level security domain physical and logic dual isolation architecture is adopted, extranet multi-model intelligent security enablement is performed on a local core decision domain through a physical one-way import channel, the local core decision domain completes reasoning calculation in combination with an enablement result in a non-extranet interaction state, a top-layer task scheme is generated, and a top-layer task scheme is generated. Through a multi-mode man-machine interaction mode, after human rigid authorization, issuing to an intranet equipment scheduling domain for execution, and feeding back a state in real time to form a full-link closed loop; the method realizes external network multi-model intelligent security enabling, local agent professional decision and rigid closed loop dominated by human beings in the whole process, aims to solve the problems of cloud dependence, data leakage, out-of-control AI, high cost, poor adaptability and the like, and is suitable for families, industries, confidential scenes, field non-support operation and other scenes.

The invention is suitable for the technical field of data governance, and particularly relates to a data governance processing method and system, and the method comprises the steps: receiving an access request uploaded to an intranet by a user, recognizing a risk level, accessing a buffer region into the intranet, and configuring a plurality of virtual containers in the buffer region, obtaining at least a first container, a second container and a root container; and when the risk level of the access request is greater than a threshold value, importing the access request into a first container, analyzing and positioning a target address corresponding to the access request, and carrying out random disturbance processing to obtain a plurality of pseudo addresses. According to the invention, by identifying the risk features, defense can be carried out in advance, potential attack behaviors can be found and blocked in time, the probability of occurrence of security events is reduced, the processing efficiency and security of data management are greatly improved, and safe, reliable and smooth connection of data exchange between the internal network and the external network is ensured.

The invention provides a communication system with isolated internal and external networks. The system comprises an intranet subsystem, an extranet subsystem and a combining system, wherein the intranet subsystem is connected with the combining system and is used for outputting an intranet network signal; the extranet subsystem is connected with the combining system and is used for outputting extranet network signals; and the combining system is used for carrying out signal combining processing on the intranet network signal output by the intranet subsystem and the extranet network signal output by the extranet subsystem so as to output a combined signal, so that the isolation of the intranet and the extranet under the condition of one AP is realized, the security of the intranet and the extranet is improved, and the service life of the intranet and the extranet is prolonged. And the cost is reduced on the basis of ensuring the communication quality.

The invention discloses an extranet-driven intranet and extranet security isolation compiling system, and belongs to the technical field of software development. Comprising an SFTP server, and the SFTP server is connected with an intranet and an extranet. The SFTP server is used for internal and external network upload management and control, internal and external network physical isolation and file synchronization. The intranet comprises an automatic script, a configuration file detection module, an automatic compiling module and an intranet log module; the external network comprises a front end and a rear end, the front end is used for providing a unified operation entrance for a user, and the rear end is used for driving the front end to work through a data processing algorithm; when a user initiates a request through a webpage, a system creates task groups, and each task group comprises a plurality of sub-tasks; at the moment, the extranet executes an extranet process to perform extranet legality verification, and performs task release; and meanwhile, the intranet executes an intranet process and periodically performs intranet legality detection. The method can ensure that each link masters the edition issuing key information consistently, and effectively improves the information transmission efficiency and accuracy.

Systems and methods for Out-of-Band (OOB) networking for heterogeneous computing platforms in low-power states. In some embodiments, an Information Handling System (IHS) may include a heterogeneous computing platform and a network device integrated into or coupled to the heterogeneous computing platform, and the network device may be configured to: wake up from a low-power state while a host processor of the heterogeneous computing platform remains in the low-power state, and access a cloud service through an OOB channel to check a status of an OOB command buffer while the host processor remains in the low-power state.

The invention relates to an MCX group call service penetration packet implementation method. The MCX server comprises a call control module, a speaking right control module and a media distribution module; a plurality of MCX clients, wherein each MCX client comprises a call processing module, a speaking right processing module and a media processing module; the speaking right control module and the media distribution module are configured to receive and process a UDP penetration packet and update address mapping; the speaking right processing module and the media processing module are configured to send UDP penetration packets and process speaking right and voice streams. According to the invention, the MCX client is enabled to acquire the extranet address and the port of the MCX server for processing the speaking right and the voice stream by using the call signaling established by MCX group call, the speaking right SSRC and the voice SSRC are respectively used for identifying the speaking right of the MCX client and the voice stream of the MCX client according to the MCX protocol, the MCX client is enabled to send the fixed format UDP penetration packet with the SSRC identification to the MCX server, and the UDP penetration packet is enabled to be transmitted to the MCX server. And an intranet penetration function of speaking right and voice between the MCX client and the MCX server is realized.

The invention relates to the technical field of communication, in particular to a communication method based on double one-way channels, which comprises the following steps executed by an intranet communication module: receiving a first one-way optical signal through a first one-way channel, the first one-way optical signal corresponding to a network request sent by an extranet communication module; determining to-be-audited data according to the first one-way optical signal; verifying the to-be-audited data to obtain target data; generating a target instruction according to the target data; through the technical scheme of the application, the problems that the internal network and the external network under physical isolation are low in external request processing efficiency and difficult to realize secure interaction are solved, and the problems that the external request processing efficiency of the internal network under physical isolation is low and the security interaction is difficult to realize are improved. And safe interaction between the intranet and the extranet under physical isolation is realized.

This invention provides a method, apparatus, platform, device, and medium for accessing internal and external network terminals. The internal and external network access platform is deployed with a software-defined boundary architecture, which includes a zero-trust system. The method includes: receiving communication connection requests from internal and external network terminals through the zero-trust system; responding to the communication connection requests by granting access permissions to the internet ports of the internal and external network terminals based on a door-knocking packet; establishing a communication connection with the internal and external network terminals based on the access permissions and receiving office business access requests from the internal and external network terminals; responding to the office business access requests, acquiring office data, and returning the office data to the workspace domain of the internal and external network terminals. The zero-trust strategy is implemented through the software-defined boundary architecture, utilizing internet port hiding technology to reduce internet exposure; and a zero-trust sandbox is used to provide security assurance by isolating internal and external network terminals in personal and workspaces, achieving internal and external network isolation during office work and maintenance.

The invention aims to provide an address conversion method for realizing server access and a firewall, and external network access is realized according to the existing bidirectional conversion. And for intranet access, the source address of the access request is rewritten into the server extranet address, the destination address of the access request is rewritten into the server intranet address, and the responded server source address is rewritten back to the server extranet address from the intranet address, so that the consistency of the request address and the response address of the intranet is ensured. Meanwhile, a DNS response packet of the intranet is obtained, and if the DNS request source address is the intranet address, the public network address corresponding to the server domain name is rewritten into the server intranet address, so that the communication of accessing the server by the intranet is performed in the intranet instead of a firewall, the burden of the firewall is effectively reduced, and the communication efficiency is improved.

1. Name of the product in this design: Data Encryptor. 2. Purpose of this design: It is intended to be used as a device for encrypting data when sending data from an intranet to an extranet. 3. The key design feature of this product is its shape. 4. The image or photograph that best illustrates the design's key points: 3D view 1.

The invention discloses a data access method. The method can be applied to an integration platform. When a user wants to access a first application program deployed in an intranet through an extranet, a proxy server deployed in the extranet obtains a data access request, and the data access request is used for requesting to access application data in the first application program. The proxy server packages the data access request to obtain a first message, and the first message is a transport layer message and comprises the data access request. And then, the proxy server sends the first message to a proxy client deployed in an intranet, so that the proxy client parses the first message and then sends the obtained data access request to the first application program. Visibly, through the scheme, the proxy server side and the proxy client side can interact through the transmission layer, the proxy client side does not need to pay attention to an application layer protocol, the communication complexity between the extranet and the intranet is simplified, and therefore the convenience that the extranet accesses the intranet is improved.

The embodiment of the invention provides a cross-forward isolation data comparison system, method and device, a medium and a product, and relates to the field of data synchronization and verification. The system comprises a first agent which is deployed in an intranet and accesses a source end database through a database connection protocol; the second agent is deployed in an external network and establishes one-way communication connection with the first agent; the first agent is also used for transmitting the source end data of the source end database to the second agent through the forward isolation device through the one-way communication connection; and the comparison service is deployed in an external network, pulls the source end data from the interface of the second agent, and performs comparison operation on the source end data and the target end data. According to the method provided by the invention, the technical problem of data comparison in a cross-forward isolation scene is solved through the design of a double-agent architecture and a user-defined protocol, the security and reliability of data comparison are realized, and efficient and secure data comparison in a strict network isolation environment is realized.

The present application relates to a satellite switching method, communication method, system, device, equipment and medium. The method includes: receiving a private network address sent by a terminal; the private network address is the network address of the terminal in the intranet of a high-altitude platform device; the terminal is located in the area served by the high-altitude platform device; converting the private network address corresponding to the terminal into a public network address in the extranet of the high-altitude platform device; sending the public network address to a first satellite device to establish a communication link between the high-altitude platform device and the first satellite device; when it is detected that a preset satellite switching condition is met, obtaining the network address of the second satellite device, sending a satellite switching signaling to the first satellite device to disconnect the communication link between the high-altitude platform device and the first satellite device, and sending a satellite switching signaling to the second satellite device according to the network address of the second satellite device to establish a communication link between the high-altitude platform device and the second satellite device. The use of this method can improve communication quality.

The application belongs to the technical field of network data transmission, and discloses a data internal and external network transmission method and equipment. The method comprises the following steps: in response to a transmission request of to-be-transmitted data, dividing the to-be-transmitted data according to fields; determining an encryption level according to the sensitivity level of the to-be-transmitted data; generating a plurality of key-value pairs by taking each field name as a key and taking field content as a value, to obtain structured data; mapping each field name into a field code according to a field mapping dictionary, and encrypting the field content according to the corresponding encryption level; and generating a message header comprising a field mapping dictionary identifier, an encryption level identifier and a data type identifier of the to-be-transmitted data; and packaging and transmitting the message header and the structured data. The application realizes the safe transmission of data between internal and external networks.

The invention belongs to the technical field of data interaction, and particularly relates to a cross-domain multi-mode flow safety interaction method based on an intranet AI engine. The method comprises the following steps: after receiving an extranet service request, an AI engine middle station analyzes the power service attribute of the service request, predicts the core demand characteristic of the service request for data transmission, and preloads and initializes an optimal transmission strategy template according to the core demand characteristic; continuously monitoring the real-time state of the whole transmission process, and dynamically deciding and commanding transmission link adjustment according to the real-time state; and active safety protection is realized through dynamic key management and intelligent flow analysis. According to the method, the real-time performance, reliability and efficiency of key monitoring data transmission are remarkably improved in a complex power network environment.

This application provides a virtual system operation method and an electronic device. The method includes: the electronic device receiving a first DNS data packet sent by a first application through a first bridge, the first DNS data packet including a source address and a destination address, the destination address being a preset DNS address; the electronic device modifying the destination address in the first DNS data packet from the preset DNS address to the IP address of the first DNS through the first bridge to obtain a second DNS data packet, the second DNS data packet being sent to the first DNS; the electronic device receiving a first response data packet sent by the first DNS through a first physical network card, and sending a second response data packet to the first application through the first bridge, the first response data packet and the second response data packet including a first Internet IP address; the electronic device sending a first data packet through the first application, the destination address of the first data packet being the first Internet IP address, achieving network consistency between inside and outside the container.

The invention discloses a protocol isolation device, an access control method, equipment and a medium, and relates to the technical field of industrial network boundary security, the device comprises an extranet host system, an isolation switching unit and an intranet host system which are all physical modules; wherein each of the extranet host system and the intranet host system comprises a message analysis module, a protocol state module, an access strategy module and an intelligent scheduling module; and strategies such as time-sharing double ferrying, protocol state tracking, a dynamic strategy and intelligent scheduling are designed, and through coordination work of the strategies, a protocol isolation and control scheme which can meet the high-speed data interaction requirement of the industrial Internet of Things and is stable and safe in performance is provided.

An embodiment of the present invention provides a method, device, system and computer-readable storage medium for sharing intranet and extranet data. The method is applied to a data communication room node corresponding one-to-one to an intranet. The data communication room node uploads relevant information of an intranet user to a blockchain to form a directory chain. The directory chain includes at least directory information corresponding to the intranet original data of the intranet user and an intranet mapping relationship between the address information of the intranet original data and the directory information. The method includes: performing identity authentication and access permission judgment on an extranet user who is to access the intranet data; when the identity authentication result of the extranet user is a legitimate user and has access permission, the data communication room node displays the address information of the intranet original data in text form through the intranet mapping relationship.

The invention discloses a market intelligence management method based on a large language model, and the method comprises the steps: pre-configuring an intelligence source list at a collection side, and collecting intelligence information from an Internet side according to the configured intelligence source list; the collected intelligence information is stored in an enterprise intelligence knowledge base; on the retrieval side, the model performs semantic analysis according to an input retrieval instruction, obtains intelligence information stored in the enterprise intelligence knowledge base through the private domain intranet according to the retrieval instruction subjected to semantic analysis, and obtains intelligence information from the internet side through the public domain extranet; according to the method, the information with repeated content is filtered from the intelligence information obtained by the private domain intranet and the intelligence information of the public domain extranet, and the filtered information is fused to obtain the corresponding intelligence result, so that the public domain information and the private domain information can be fused, the intelligence information is more comprehensive, and an enterprise can insight user requirements and pre-judge the market trend in time.

The invention provides a synchronization system, a sending method and a receiving method of internal and external network unstructured files, and relates to the technical field of computer network data transmission, and the system comprises a sending end and a receiving end which communicate with each other through an internal and external network isolation device; the sending end is used for acquiring a to-be-synchronized unstructured file of the synchronization task; the to-be-synchronized unstructured file is partitioned and cut through a dynamic rule to generate a plurality of initial data blocks; adding corresponding metadata information to the initial data blocks, and generating a plurality of target metadata blocks based on the plurality of initial data blocks and the plurality of pieces of metadata information; the receiving end is used for acquiring a plurality of target metadata blocks based on the penetration transmission technology of the internal and external network isolation device; and sorting and recombining the plurality of target metadata blocks to obtain a recombined and synchronized unstructured file of the synchronization task. According to the method, the transmission efficiency is improved through block transmission, the security of transmission data is guaranteed through the internal and external network isolation device by means of the target metadata block, and the transmission risk is reduced.

The invention provides a vehicle administration office business active handling method and system based on AI capability, and a storage medium. The method comprises the following steps: dynamically scanning a traffic management business database to identify a business expiration record; generating a personalized reminding verbal skill and starting an AI voice outbound call; extracting key information of the material by using an OCR technology; verifying the format and logic of the key information through a rule engine; encrypting the key information by using an SM4 algorithm, and securely transmitting the encrypted material to the internal network all-in-one machine; calling an API (Application Program Interface) to complete automatic business handling; and closed-loop management is realized through multi-channel feedback of handling results. According to the invention, the problems of untimely service handling, tedious process, unsmooth information transmission and poor interactivity in the prior art can be effectively solved, and active reminding of service expiration, full-process automatic handling, data security encryption transmission, efficient interaction of internal and external networks and user experience optimization are realized.

The invention discloses an intranet data acquisition method and device, electronic equipment and a computer program product. The method comprises the steps that an intranet data query instruction is obtained through a preset tool deployed in an extranet environment, and the intranet data query instruction is at least used for indicating to access at least one preset database deployed in the intranet environment; querying target data indicated by the intranet data query instruction from at least one preset database according to an intranet access permission configured for a preset tool in advance; and uploading the target data to the cloud. The technical problem of contradiction between data security and collection efficiency in an existing industrial scene is solved.

The application provides a kind of screening method and terminal based on WPS macro repeated work ticket, by collecting the original data of work ticket; based on regular expression template, the parameter values of original data of safety measures are segmented and subdivided, and the parameter values of hanging place, hanging screen cabinet and hanging sign type are extracted and formatted as data processing table; the safety measure data of different ticket surfaces in the data processing table are compared by WPS macro program elements, and the safety measure data with the same hanging place, hanging screen cabinet and hanging sign type are highlighted; when the data selection button is triggered, the non-highlighted safety measure data in the work table is obtained by screening the WPS macro program written. The application is programmed by the WPS macro program of intranet, without introducing related systems from extranet, and realizes the identification of repeated safety measures of work ticket directly through existing software, which ensures the information security of intranet, and realizes the accurate recovery of work ticket safety measures on the premise of avoiding network security risks.

The invention discloses a webpage tamper-proofing system and method. The system comprises a source file storage server and a central storage server of an intranet and an external server of an extranet, the source file is synchronized to the central storage server by the source file storage server and is synchronized to the external server by the central storage server; under the condition that the file stored in the central storage server is inconsistent with the source file, covering the file stored in the central storage server with the source file; and under the condition that the files stored in the external server are inconsistent with the files stored in the central storage server, covering the files stored in the external server with the files stored in the central storage server. Two-stage synchronous storage is carried out by utilizing a source file storage server and a central storage server in an intranet, files are synchronously stored by utilizing an external server in an external network, and file coverage is carried out when the files stored in the two-stage servers or the files stored in the intranet and the external network are inconsistent so as to ensure the consistency of the files stored in the servers, so that a webpage is prevented from being tampered; and the webpage security is improved.

The utility model relates to a multi-channel multi-board card all-in-one machine capable of cooperatively communicating. The all-in-one machine comprises a management center area, a data service area and a gatekeeper area which are sequentially arranged from bottom to top, the management center area is provided with a management center mainboard; the data service area is provided with a rear server and a front server; an internal network main board and an external network main board are arranged in the gatekeeper area; and the management center mainboard is in communication connection with the rear server, the front server, the intranet mainboard and the extranet mainboard through the backboard, and is used for carrying out network management on the rear server, the front server, the intranet mainboard and the extranet mainboard. According to the utility model, the management center mainboard is integrated with the rear server, the front server, the internal network mainboard and the external network mainboard through the backboard, so that data can be quickly shared between different functional mainboards and the management center mainboard, multi-channel cooperation is realized, and the data processing speed is greatly improved.

The embodiment of the invention discloses a cross-domain information notification method, a cross-domain information notification device and a cross-domain information notification system, relates to the technical field of computers, and is convenient for realizing cross-domain efficient notification of a business object state. The method comprises the following steps: acquiring current state information of a business object from a database from a first external network; wherein the current state information of the business object of the first external network slave database is synchronized by the internal network master database; the historical state information of the business object is obtained from a second extranet slave database, and the first extranet slave database and the second extranet slave database are databases deployed in an extranet; calculating an intersection of the current state information and the historical state information of the business object; and determining whether to generate a state change notification message or not according to a calculation result of the intersection. The cross-domain information notification method and device are suitable for cross-domain information notification scenes.

The invention discloses a method for realizing interaction between an internal network and an external network through an SQL (Structured Query Language) proxy, which comprises the following steps of: receiving request data of an external requester by a front-end processor, judging whether the request data needs to be fragmented, and if the request data needs to be fragmented, determining the fragmentation size according to a fragmentation algorithm and then fragmenting a request body; compressing the fragments, and forwarding metadata of the request data and a request body after fragment compression to a database through an SQL security isolation device; the method comprises the following steps of: reading request data from a database in batches at fixed time by a rear computer, decompressing and recombining the read fragmented request body, sending the recombined request body and the read metadata to a business system service, waiting for response information of the business system service, and writing the response information into the database; and the front-end processor polls the database to read the response information and returns the response information to the external requester. The technical problem that large file transmission cannot be carried out in existing internal and external network interaction is solved.

The application provides an intelligent cloud box access method and device, equipment and a storage medium. The method is that, in response to an access operation of a user terminal, an Internet server queries an intranet access address and an extranet access address corresponding to a device identifier in the access operation according to a mapping relationship between the device identifier of the intelligent cloud box and an intranet Internet protocol address and a mapping relationship between the device identifier of the intelligent cloud box and a source Internet protocol address. The access operation is initiated by the user terminal by scanning a two-dimensional code on the intelligent cloud box, and the two-dimensional code includes the device identifier of the intelligent cloud box and the website information of the Internet server. The intranet access address and the extranet access address are sent to the user terminal, so that the user terminal accesses the intelligent cloud box according to the intranet access address and the extranet access address, and a connection is established with the intelligent cloud box.