CN103036903B - Data processing method and Web Service assembly - Google Patents

Abstract

The invention discloses a data processing method and Web? Service component. The data processing method is applicable to the first Web associated with the first information system? Service component, the first information system is logically isolated from the second information system through an isolation device associated with the second information system; the method includes: acquiring the first data from the first information system to the second information system A transmission request; converting the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device; writing the second data into a database corresponding to the second information system. It can be seen that in this solution, by converting the first data into the second data conforming to the communication protocol corresponding to the isolation device, the data sent by the first information system can reach the second information system, so as to realize the guarantee of information network security. Under the premise of security, the convenience of internal and external network communication is improved.

Description

Data Processing Method and Web Service Component

technical field

The invention relates to the technical field of data processing, in particular to a data processing method and a WebService component.

Background technique

With the development of communication technology and network technology, enterprise information systems rely more and more on enterprise information networks to ensure safe, reliable and efficient operation, that is, the security of enterprise information networks is directly related to the safe and stable operation of enterprise information systems.

In the prior art, in order to improve the security of the enterprise information system, the logic isolation technology has been widely used in the security of the enterprise information network. The so-called logical isolation technology is: there are still physical data channel connections at the two ends of the isolation, but technical means are used to ensure that there is no data channel at the two ends of the isolation, that is, the two ends of the isolation are in a state of data logic isolation. Among them, the most typical logical isolation technologies include firewalls and virtual subnets.

Among them, when accessing information system A as an external network information system to access information system B as an internal network information system, if the information system B is equipped with an isolation device using logical isolation technology, only the communication protocol corresponding to the isolation device Only data can enter the intranet, and then the information system A can access the information system B, which undoubtedly improves the security of the intranet information system.

However, while the logical isolation technology ensures the security of the enterprise information network, it also reduces the convenience of data communication between the internal and external networks to some extent.

Contents of the invention

In order to solve the above technical problems, the embodiment of the present invention provides a data processing method and a WebService component, so as to improve the convenience of internal and external network communication under the premise of ensuring the security of the information network. The technical solution is as follows:

In the first aspect, the embodiment of the present invention provides a data processing method, which is applicable to the first WebService component associated with the first information system, and the first information system is connected to the second information system through an isolation device associated with the second information system The second information system performs data logic isolation; the method includes:

obtaining a first data transmission request from the first information system to the second information system;

converting the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device;

Writing the second data into a database corresponding to the second information system.

Correspondingly, an embodiment of the present invention provides a WebService component associated with a first information system, and the first information system is logically isolated from the second information system through an isolation device associated with the second information system; The WebService component includes:

A first data request obtaining module, configured to obtain a first data transmission request from the first information system to the second information system;

A second data determination module, configured to convert the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device;

A second data writing module, configured to write the second data into a database corresponding to the second information system.

In the second aspect, the embodiment of the present invention provides a data processing method, which is suitable for the second WebService component associated with the second information system, and the second information system performs data logic with the first information system through the associated isolation device Isolation; said methods include:

monitoring whether there is second data written into the database corresponding to the second information system, wherein the second data is the first data transmission request corresponding to the first data transmission request from the first information system to the second information system A data converted into data conforming to the communication protocol corresponding to the isolation device;

When it is detected that the second data is written into the database, the second data is restored to the corresponding first data according to the communication protocol corresponding to the isolation device.

Correspondingly, an embodiment of the present invention provides a WebService component associated with a second information system, and the second information system is logically isolated from the first information system through an associated isolation device; the WebService component includes:

The second monitoring module is used to monitor whether there is second data written into the database corresponding to the second information system, wherein the second data is the first information from the first information system to the second information system The first data corresponding to a data transmission request is converted into data conforming to the communication protocol corresponding to the isolation device;

The data restoration module is configured to restore the second data to the corresponding first data according to the communication protocol of the isolation device when detecting that the second data is written into the database.

In the third aspect, the embodiment of the present invention provides a data processing method, which is applicable to the first WebService component associated with the first information system, and the first information system is connected to the first information system through the isolation device associated with the second information system The second information system performs data logic isolation; the method includes:

monitoring whether there is fourth data written into the database, wherein the fourth data is the corresponding third data converted from the second data transmission request from the second information system to the first information system data of the data type of said database;

When it is detected that the fourth data is written into the database, carrying the fourth data to call a corresponding service provided by the first information system;

Writing the processing result corresponding to the fourth data into the database.

Correspondingly, an embodiment of the present invention provides a WebService component associated with a first information system, and the first information system is logically isolated from the second information system through an isolation device associated with the second information system; The WebService component includes:

A third monitoring module, configured to monitor whether fourth data is written into the database, wherein the fourth data corresponds to a second data transmission request from the second information system to the first information system The third data is converted into data conforming to the data type of the database;

The second service calling module is configured to carry the fourth data and call the corresponding service provided by the first information system when it is detected that the fourth data is written into the database;

The second result writing module is configured to write the processing result corresponding to the fourth data into the database.

In the fourth aspect, the embodiment of the present invention provides a data processing method, which is applicable to the second WebService component associated with the second information system, and the second information system performs data logic with the first information system through the associated isolation device. Isolation; said methods include:

obtaining a second data transmission request from the second information system to the first information system;

converting the third data corresponding to the second data transmission request into fourth data conforming to the data type of the database;

Write the fourth data into the database.

Correspondingly, the embodiment of the present invention also provides a WebService component, which is associated with the second information system, and the second information system is logically isolated from the first information system through an associated isolation device; the WebService component includes:

A second data request obtaining module, configured to obtain a second data transmission request from the second information system to the first information system;

A fourth data determination module, configured to convert the third data corresponding to the second data transmission request into fourth data conforming to the data type of the database;

A fourth data writing module, configured to write the fourth data into the database.

In the fifth aspect, an embodiment of the present invention provides a WebService component associated with a first information system, and the first information system performs data logic isolation from the second information system through an isolation device associated with the second information system ; The WebService component includes:

A first data request obtaining module, configured to obtain a first data transmission request from the first information system to the second information system;

A second data determination module, configured to convert the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device;

a second data writing module, configured to write the second data into a database corresponding to the second information system;

A first monitoring module, configured to monitor whether a processing result corresponding to the first data is written into the database;

The first result processing module is configured to obtain the processing result and feed it back to the first information system when it is detected that the processing result corresponding to the first data is written into the database;

A third monitoring module, configured to monitor whether fourth data is written into the database, wherein the fourth data corresponds to a second data transmission request from the second information system to the first information system The third data is converted into data conforming to the data type of the database;

The second service calling module is configured to carry the fourth data and call the corresponding service provided by the first information system when it is detected that the fourth data is written into the database;

The second result writing module is configured to write the processing result corresponding to the fourth data into the database.

In a sixth aspect, an embodiment of the present invention provides a WebService component associated with a second information system, and the second information system is logically isolated from the first information system through an associated isolation device; the WebService component includes:

The second monitoring module is configured to monitor whether there is second data written into the database corresponding to the second information system, wherein the second data is the first information from the first information system to the second information system The first data corresponding to the data transmission request is converted into data conforming to the communication protocol corresponding to the isolation device;

A data restoration module, configured to restore the second data to the corresponding first data according to the communication protocol corresponding to the isolation device when monitoring that the second data is written into the database;

a first service calling module, configured to carry the first data and call corresponding services provided by the second information system;

a first result writing module, configured to write the processing result corresponding to the first data into the database;

A second data request obtaining module, configured to obtain a second data transmission request from the second information system to the first information system;

A fourth data determination module, configured to convert the third data corresponding to the second data transmission request into fourth data conforming to the data type of the database;

a fourth data writing module, configured to write the fourth data into the database;

A fourth monitoring module, configured to monitor whether the processing result corresponding to the fourth data is written into the database;

The second result processing module is configured to obtain the processing result corresponding to the fourth data and feed it back to the second information system when it is detected that the processing result corresponding to the fourth data is written into the database.

In the technical solution provided by the embodiment of the present invention, the first information system performs data logic isolation from the second information system through an isolation device associated with the second information system, and when the first information system accesses the second information system, the The WebService component associated with the first information system obtains the first data transmission request from the first information system to the second information system, and converts the first data corresponding to the first data transmission request into a communication corresponding to the isolation device The second data of the protocol, and then write the second data into the database corresponding to the second information system. It can be seen that in this solution, by converting the first data into the second data conforming to the communication protocol corresponding to the isolation device, the data sent by the first information system can reach the second information system, so as to realize the guarantee of information network security. Under the premise of security, the convenience of internal and external network communication is improved.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained according to these drawings without any creative effort.

FIG. 1 is a first flow chart of a data processing method provided by an embodiment of the present invention;

FIG. 2 is a second flowchart of a data processing method provided by an embodiment of the present invention;

FIG. 3 is a first structural schematic diagram of a WebService component provided by an embodiment of the present invention;

FIG. 4 is a second structural schematic diagram of a WebService component provided by an embodiment of the present invention;

FIG. 5 is a third flowchart of a data processing method provided by an embodiment of the present invention;

FIG. 6 is a fourth flowchart of a data processing method provided by an embodiment of the present invention;

FIG. 7 is a schematic diagram of a third structure of a WebService component provided by an embodiment of the present invention;

FIG. 8 is a schematic diagram of a fourth structure of a WebService component provided by an embodiment of the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

In order to improve the convenience of internal and external network communication under the premise of ensuring the security of the information network, based on the perspective that the external network information system actively accesses the internal network information system, the embodiment of the present invention provides a data processing method and a WebService component.

A data processing method provided by an embodiment of the present invention is introduced below.

In order to clearly describe this solution, firstly, the data processing method provided by the embodiment of the present invention is introduced from the perspective of the first WebService component associated with the first information system as an external network information system.

It should be noted that the data processing method provided by the embodiment of the present invention is applicable to the first WebService component associated with the first information system, and the first information system communicates with the second information system through an isolation device associated with the second information system. The system implements data logic isolation, that is, the second information system, as an internal network information system, performs data logic isolation from the first information system as an external network information system through the isolation device, so that only the information that conforms to the communication protocol of the isolation device Data can be transmitted from the first information system to the second information system, thereby ensuring the access security of the information network. In practical applications, the logical isolation technology used by the isolation device can be a firewall, a virtual subnet, etc., and each isolation device has a corresponding communication protocol, and only data that conforms to the communication protocol can be accessed through the isolation device. Information system.

Among them, WebService is a network-based, distributed modular component, which performs specific tasks and complies with specific technical specifications, and these specific technical specifications enable WebService to interoperate with other compatible components, and WebService can use Standard Internet protocols (such as Hypertext Transfer Protocol HTTP and XML, etc.), embody functions on the Internet and intranets.

It can be understood that the "first" in the "first WebService component" and the "second" in the subsequent "second WebService component" are only for distinguishing different WebService components set in the internal and external networks. Wherein, the first WebService component is associated with the first information system specifically refers to: the first WebService component is an independently deployed external component connected to the first information system, or the first WebService component is embedded in the first information system internal components.

As shown in Figure 1, a data processing method may include:

S101. The first WebService component acquires a first data transmission request from the first information system to the second information system;

When the first information system needs to actively transmit data to the second information system, that is, when accessing the second information system, it can directly call the associated first WebService component, and the first WebService component will obtain the first The first data transmission request from the information system to the second information system, and then use the first data transmission request for subsequent processing.

Wherein, the first data transmission request may carry the corresponding first data, or the first data transmission request may carry the acquisition address information of the corresponding first data, which is reasonable.

S102. Convert the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device;

After obtaining the first data transmission request, the first WebService component can obtain the first data corresponding to the first data transmission request, and convert the first data into second data conforming to the communication protocol corresponding to the isolation device .

It can be understood that when the first data transmission request carries the first data, the first WebService component can directly obtain the first data from the first data transmission request; and when the first data transmission request carries the first data When acquiring the address information of the first data, the first WebService component needs to acquire the first data according to the acquired address information.

It can be understood that the communication protocol of the isolated device between the first information system and the second information system is in a transparent state with respect to the first WebService component, that is, the first WebService component understands the communication protocol corresponding to the isolated device. communication protocol; and converting the first data corresponding to the first data transmission request into the second data conforming to the communication protocol corresponding to the isolation device is usually: converting the data format of the first data into the communication corresponding to the isolation device In the data format of the protocol, the converted data is used as the second data corresponding to the first data.

S103. Write the second data into a database corresponding to the second information system.

After converting the first data into second data conforming to the communication protocol corresponding to the isolation device, since the transmitted second data conforms to the communication protocol of the isolation device, the second data can be successfully written into the second In the database corresponding to the information system, when the isolation device performs data logic isolation, the second data corresponding to the first data that does not conform to the communication protocol corresponding to the isolation device is transmitted from the external network to the internal network.

It can be understood that the first data and the second data include the network identifier of the first information system and the network identifier of the second information system, so as to clarify the source address and destination address of this data transmission.

It should be noted that the first WebService component is physically connected to the database through wired or wireless means, so that the first WebService component can perform read/write operations on the database in compliance with the communication protocol of the isolation device; While the database and the second information system are in a state independent of each other, the second WebService component in the second information system is also in a state of physical connection with the database through wired or wireless means, so that in the case of conforming to the communication protocol of the isolation device , the second WebService component can perform read/write operations on the database.

In the technical solution provided by the embodiment of the present invention, the first information system performs data logic isolation from the second information system through an isolation device associated with the second information system, and when the first information system accesses the second information system, the The WebService component associated with the first information system obtains the first data transmission request from the first information system to the second information system, and converts the first data corresponding to the first data transmission request into a communication corresponding to the isolation device The second data of the protocol, and then write the second data into the database corresponding to the second information system. It can be seen that in this solution, by converting the first data into the second data conforming to the communication protocol corresponding to the isolation device, the data sent by the first information system can reach the second information system, so as to realize the guarantee of information network security. Under the premise of security, the convenience of internal and external network communication is improved.

Furthermore, after writing the second data into the database, the first WebService component will monitor whether the processing result corresponding to the second data is written into the database; When the processing result is written into the database, the processing result is obtained and fed back to the first information system, thus completing the visit from the first information system to the second information system based on the first data transmission request. Wherein, the processing result corresponding to the second data includes the network identifier of the second information system and the network identifier of the first information system, so as to clarify the source address and destination address of this data transmission.

The following describes the data processing method provided by the embodiment of the present invention from the perspective of the second WebService component associated with the second information system as the intranet information system.

It should be noted that the data processing method provided by the embodiment of the present invention is applicable to the second WebService component associated with the second information system, and the second information system is logically isolated from the first information system through an associated isolation device, That is, the second information system, as an internal network information system, performs data logic isolation from the first information system, which is an external network information system, through an isolation device, so that only data that conforms to the communication protocol of the isolation device can be transmitted from the first information system. The system is transmitted to the second information system, thereby ensuring the access security of the information network. In practical applications, the logical isolation technology used by the isolation device can be a firewall, a virtual subnet, etc., and each isolation device has a corresponding communication protocol, and only data that conforms to the communication protocol can be accessed through the isolation device. Information system.

Wherein, the second WebService component is associated with the second information system specifically refers to: the second WebService component is an independently deployed external component connected to the second information system, or the second WebService component is embedded in the second information system internal components.

As shown in Figure 2, a data processing method may include:

S201, monitor whether there is second data written into the database corresponding to the second information system, if so, perform step S202; otherwise, do not process;

Wherein, the second data is: the first data corresponding to the first data transmission request from the first information system to the second information system is converted into data conforming to the communication protocol corresponding to the isolation device.

S202. According to the communication protocol corresponding to the isolated device, restore the second data to corresponding first data.

The second WebService component monitors whether there is second data written into the database in real time or regularly, and when it detects that there is second data written into the database, it indicates that the first information system wishes to access the second information system. At this time, according to the communication protocol of the isolated device, the second data is restored to the corresponding first data, thereby realizing the transmission of the first data from the external network to the internal network.

It can be understood that the communication protocol of the isolated device between the first information system and the second information system is in a transparent state with respect to the second WebService component, that is, the second WebService component understands the communication protocol corresponding to the isolated device letter of agreement.

In the data processing method provided in this embodiment, when the second WebService component detects that the second data is written into the corresponding database, it can restore the second data to the corresponding first data according to the communication protocol of the isolated device. In this way, the first data is transmitted from the external network to the internal network, and the convenience of internal and external network communication is improved under the premise of ensuring the security of the information network.

Furthermore, after the second WebService component restores the second data to the first data, it can carry the first data to call the corresponding service provided by the second information system; write the processing result corresponding to the first data into In the database, after the first WebService component detects that the processing result corresponding to the first data is written into the database, it obtains the processing result and feeds it back to the first information system, thereby completing the request based on the first data transmission. This visit from the first information system to the second information system.

Corresponding to the above-mentioned method embodiment, the embodiment of the present invention provides a WebService component, which is a first WebService component and is associated with a first information system, and the first information system is connected to the second information system through an isolation device associated with the second information system. The second information system performs data logic isolation; as shown in Figure 3, the WebService component may include:

A first data request obtaining module 310, configured to obtain a first data transmission request from the first information system to the second information system;

The second data determination module 320 is configured to convert the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device;

The second data writing module 330 is configured to write the second data into a database corresponding to the second information system.

In the technical solution provided by the embodiment of the present invention, the first information system performs data logic isolation from the second information system through an isolation device associated with the second information system, and when the first information system accesses the second information system, the The WebService component associated with the first information system obtains the first data transmission request from the first information system to the second information system, and converts the first data corresponding to the first data transmission request into a communication corresponding to the isolation device The second data of the protocol, and then write the second data into the database corresponding to the second information system. It can be seen that in this solution, by converting the first data into the second data conforming to the communication protocol corresponding to the isolation device, the data sent by the first information system can reach the second information system, so as to realize the guarantee of information network security. Under the premise of security, the convenience of internal and external network communication is improved.

Furthermore, the WebService component can also include:

A first monitoring module, configured to monitor whether a processing result corresponding to the first data is written into the database;

The first result processing module is configured to obtain the processing result and feed it back to the first information system when it is detected that the processing result corresponding to the first data is written into the database.

The embodiment of the present invention also provides a WebService component, which is a second WebService component, associated with the second information system, and the second information system is logically isolated from the first information system through an associated isolation device; as shown in Figure 4 As shown, the WebService component can include:

The second monitoring module 410 is configured to monitor whether there is second data written into the database corresponding to the second information system, wherein the second data is the information from the first information system to the second information system The first data corresponding to the first data transmission request is converted into data conforming to the communication protocol corresponding to the isolation device;

The data restoration module 420 is configured to restore the second data to the corresponding first data according to the communication protocol of the isolation device when detecting that the second data is written into the database.

In this embodiment, when the second WebService component detects that the second data is written into the corresponding database, it can restore the second data to the corresponding first data according to the communication protocol of the isolation device, so as to realize The first data is transmitted from the external network to the internal network, and the convenience of internal and external network communication is improved under the premise of ensuring the security of the information network.

Furthermore, the WebService component provided in this embodiment may also include:

a first service calling module, configured to carry the first data and call corresponding services provided by the second information system;

The first result writing module is configured to write the processing result corresponding to the first data into the database.

In order to improve the convenience of internal and external network communication on the premise of ensuring the security of the information network, based on the perspective that the internal network information system actively transmits data to the external network information system, the embodiment of the present invention provides a data processing method and a WebService component.

A data processing method provided by an embodiment of the present invention is introduced below.

In order to clearly describe this solution, firstly, from the perspective of the second WebService component associated with the second information system as the intranet information system, the data processing method provided by the embodiment of the present invention is introduced.

It should be noted that the data processing method provided by the embodiment of the present invention is applicable to the second WebService component associated with the second information system, and the second information system is logically isolated from the first information system through an associated isolation device, That is, the second information system, as an internal network information system, performs data logic isolation from the first information system, which is an external network information system, through an isolation device, so that only data that conforms to the communication protocol of the isolation device can be transmitted from the first information system. The system is transmitted to the second information system, thereby ensuring the access security of the information network. In practical applications, the logical isolation technology used by the isolation device can be a firewall, a virtual subnet, etc., and each isolation device has a corresponding communication protocol, and only data that conforms to the communication protocol can be accessed through the isolation device. Information system.

Among them, WebService is a network-based, distributed modular component, which performs specific tasks and complies with specific technical specifications, and these specific technical specifications enable WebService to interoperate with other compatible components, and WebService can use Standard Internet protocols (such as Hypertext Transfer Protocol HTTP and XML, etc.), embody functions on the Internet and intranets.

It can be understood that the "second" in the "second WebService component" and the "first" in the subsequent "first WebService component" are only used to distinguish different WebService components set in the internal and external networks. Wherein, the second WebService component is associated with the second information system specifically refers to: the second WebService component is an independently deployed external component connected to the second information system, or the second WebService component is embedded in the second information system internal components.

As shown in Figure 5, a data processing method may include:

S501. The second WebService component acquires a second data transmission request from the second information system to the first information system;

When the second information system needs to actively transmit data to the first information system, it can directly call the associated second WebService component, and the second WebService component will obtain the first information link from the second information system to the first information system. second data transmission request, and then use the second data transmission request to perform subsequent processing.

Wherein, the second data transmission request may carry the corresponding third data, or the second data transmission request may carry the acquisition address information of the corresponding third data, which is reasonable.

S502. Convert the third data corresponding to the second data transmission request into fourth data conforming to the data type of the database;

After obtaining the second data transmission request, the second WebService component can obtain the third data corresponding to the second data transmission request, and convert the third data corresponding to the second data transmission request into a data type conforming to the database The fourth data. Since the isolation device is one-way isolation, when the second information system sends data to the first information system, there is no need to convert the data to be sent into data conforming to the communication protocol of the isolation device; at the same time, since the database corresponds to its own data type, therefore, it is necessary to convert the three data into the fourth data conforming to the type of the database.

It can be understood that when the second data transmission request carries the third data, the second WebService component can directly obtain the third data from the second data transmission request, and when the second data transmission request carries the third data When acquiring the address information of the third data, the first WebService component needs to acquire the third data according to the acquired address information.

It should be noted that the database and the second information system are independent of each other, and the second WebService component in the second information system is also in a physical connection with the database through wired or wireless means. In the case of the protocol, the second WebService component can perform read/write operations on the database; while the first WebService component is physically connected to the database by wired or wireless means, so that in the case of conforming to the communication protocol of the isolation device , the first WebService component can perform read/write operations on the database.

S503. Write the fourth data into the database.

After obtaining the fourth data corresponding to the third data, the fourth data can be written into the database, so that after the first WebService component associated with the first information system monitors the fourth data, Ability to read data from this database.

It can be understood that the third data and the fourth data include the network identifier of the second information system and the network identifier of the first information system, so as to clarify the source address and destination address of this data transmission.

In this embodiment, when the second information system actively sends data to the first information system, the second WebService component obtains the second data transmission request from the second information system to the first information system; the second data transmission request The corresponding third data is converted into fourth data conforming to the data type of the database; the fourth data is written into the database, so that the first WebService component associated with the first information system listens to the fourth data After that, the data can be read from the database, so as to improve the convenience of internal and external network communication under the premise of ensuring the security of the information network.

Furthermore, after the fourth data is written into the database, the second WebService monitors whether the processing result corresponding to the fourth data is written into the database; When writing into the database, obtain the processing result corresponding to the fourth data and feed it back to the second information system, thus completing the process of the second information system actively sending data to the first information system based on the second data transmission request . Wherein, the processing result corresponding to the fourth data includes the network identifier of the first information system and the network identifier of the second information system, so as to clarify the source address and destination address of this data transmission.

The following describes the data processing method provided by the embodiment of the present invention from the perspective of the first WebService component associated with the second information system as the extranet information system.

It should be noted that the data processing method provided by the embodiment of the present invention is applicable to the first WebService component associated with the first information system, and the first information system communicates with the second information system through an isolation device associated with the second information system. The system implements data logic isolation, that is, the second information system, as an internal network information system, performs data logic isolation from the first information system as an external network information system through the isolation device, so that only the information that conforms to the communication protocol of the isolation device Data can be transmitted from the first information system to the second information system, thereby ensuring the access security of the information network. In practical applications, the logical isolation technology used by the isolation device can be a firewall, a virtual subnet, etc., and each isolation device has a corresponding communication protocol, and only data that conforms to the communication protocol can be accessed through the isolation device. Information system.

Wherein, the first WebService component is associated with the first information system specifically refers to: the first WebService component is an independently deployed external component connected to the first information system, or the first WebService component is embedded in the first information system internal components.

As shown in Figure 6, a data processing method may include:

S601, monitor whether there is fourth data written into the database, if so, perform step S602; otherwise, do not process;

Wherein, the fourth data is converted from the third data corresponding to the second data transmission request from the second information system to the first information system and conforms to the data type of the database.

S602, carrying the fourth data and invoking a corresponding service provided by the first information system;

S603. Write the processing result corresponding to the fourth data into the database.

The first WebService component monitors whether the fourth data is written into the database in real time or regularly, and when it detects that the fourth data is written into the database, it indicates that the second information system wishes to actively send the information to the first information system. data, at this time, read the fourth data from the database, carry the fourth data to call the corresponding service provided by the first information system, and write the processing result corresponding to the fourth data into the database to This completes the process of the second information system actively sending data to the first information system based on the second data transmission request.

In this embodiment, when the first WebService component detects that the fourth data is written into the database, it carries the fourth data and invokes the corresponding service provided by the first information system, and the processing result corresponding to the fourth data Write it into the database, so as to improve the convenience of communication between the internal and external networks under the premise of ensuring the security of the information network.

Corresponding to the above-mentioned method embodiment, the embodiment of the present invention also provides a WebService component, which is a second WebService component and is associated with the second information system, and the second information system communicates with the first information system through an associated isolation device. Data logic isolation; as shown in Figure 7, WebService components can include:

A second data request obtaining module 710, configured to obtain a second data transmission request from the second information system to the first information system;

A fourth data determination module 720, configured to convert the third data corresponding to the second data transmission request into fourth data conforming to the data type of the database;

A fourth data writing module 730, configured to write the fourth data into the database.

In this embodiment, when the second information system actively sends data to the first information system, the second WebService component obtains the second data transmission request from the second information system to the first information system; the second data transmission request The corresponding third data is converted into fourth data conforming to the data type of the database; the fourth data is written into the database, so that the first WebService component associated with the first information system listens to the fourth data After that, the data can be read from the database, so as to improve the convenience of internal and external network communication under the premise of ensuring the security of the information network.

Furthermore, the WebService component can also include:

A fourth monitoring module, configured to monitor whether the processing result corresponding to the fourth data is written into the database;

The second result processing module is configured to obtain the processing result corresponding to the fourth data and feed it back to the second information system when it is detected that the processing result corresponding to the fourth data is written into the database.

An embodiment of the present invention also provides a WebService component, which is a first WebService component and is associated with a first information system. The first information system communicates with the second information system through an isolation device associated with the second information system. Data logic isolation; as shown in Figure 8, the WebService component may include:

The third monitoring module 810 is configured to monitor whether fourth data is written into the database, wherein the fourth data is obtained by a second data transmission request from the second information system to the first information system corresponding to the third data converted into data conforming to the data type of the database;

The second service calling module 820 is configured to carry the fourth data and call the corresponding service provided by the first information system when it is detected that the fourth data is written into the database;

The second result writing module 830 is configured to write the processing result corresponding to the fourth data into the database.

In this embodiment, when the first WebService component detects that the fourth data is written into the database, it carries the fourth data and invokes the corresponding service provided by the first information system, and the processing result corresponding to the fourth data Write it into the database, so as to improve the convenience of communication between the internal and external networks under the premise of ensuring the security of the information network.

Furthermore, based on the WebService components provided in the above embodiments, from the perspective of the external network information system, the embodiment of the present invention also provides a WebService component associated with the first information system, and the first information system communicates with the second The isolation device associated with the information system is logically isolated from the second information system; the WebService component may include:

A first data request obtaining module, configured to obtain a first data transmission request from the first information system to the second information system;

A second data determination module, configured to convert the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device;

a second data writing module, configured to write the second data into a database corresponding to the second information system;

A first monitoring module, configured to monitor whether a processing result corresponding to the first data is written into the database;

The first result processing module is configured to obtain the processing result and feed it back to the first information system when it is detected that the processing result corresponding to the first data is written into the database;

A third monitoring module, configured to monitor whether fourth data is written into the database, wherein the fourth data corresponds to a second data transmission request from the second information system to the first information system The third data is converted into data conforming to the data type of the database;

The second service calling module is configured to carry the fourth data and call the corresponding service provided by the first information system when it is detected that the fourth data is written into the database;

The second result writing module is configured to write the processing result corresponding to the fourth data into the database.

Correspondingly, based on the WebService components provided in the above embodiments, from the perspective of the intranet information system, the embodiments of the present invention also provide a WebService component associated with the second information system, and the second information system is isolated through the associated The device is logically isolated from the first information system; the WebService component may include:

The second monitoring module is configured to monitor whether there is second data written into the database corresponding to the second information system, wherein the second data is the first information from the first information system to the second information system The first data corresponding to the data transmission request is converted into data conforming to the communication protocol corresponding to the isolation device;

A data restoration module, configured to restore the second data to the corresponding first data according to the communication protocol corresponding to the isolation device when monitoring that the second data is written into the database;

a first service calling module, configured to carry the first data and call corresponding services provided by the second information system;

a first result writing module, configured to write the processing result corresponding to the first data into the database;

A second data request obtaining module, configured to obtain a second data transmission request from the second information system to the first information system;

A fourth data determination module, configured to convert the third data corresponding to the second data transmission request into fourth data conforming to the data type of the database;

a fourth data writing module, configured to write the fourth data into the database;

A fourth monitoring module, configured to monitor whether the processing result corresponding to the fourth data is written into the database;

The second result processing module is configured to obtain the processing result corresponding to the fourth data and feed it back to the second information system when it is detected that the processing result corresponding to the fourth data is written into the database.

It can be understood that in practical applications, the above-mentioned WebService components provided from the perspective of the external network information system and the WebService components provided from the perspective of the intranet information system can also be functionally combined, so that the functionally combined components can be As a component associated with the external network information system, it can also be used as a component associated with the internal network information system, which is reasonable.

Through the description of the above method embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general-purpose hardware platform, and of course also by hardware, but in many cases the former is better implementation. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions to make a A computer device (which may be a personal computer, a server, or a network device, etc.) executes all or part of the steps of the methods described in the various embodiments of the present invention. The foregoing storage medium includes various media capable of storing program codes such as read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk.

As for the device or system embodiment, since it basically corresponds to the method embodiment, for related parts, please refer to the part of the description of the method embodiment. The device or system embodiments described above are only illustrative, and the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, It can be located in one place, or it can be distributed to multiple network elements. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. It can be understood and implemented by those skilled in the art without creative effort.

In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways without exceeding the spirit and scope of the present application. The present embodiment is only an exemplary example and should not be taken as a limitation, and the specific content given should not limit the purpose of the present application. For example, the division of the units or subunits is only a division of logical functions. In actual implementation, there may be other division methods, such as combining multiple units or multiple subunits. Also, multiple units or components may be combined or integrated into another system, or some features may be omitted, or not implemented.

In addition, the described systems, devices and methods and schematic diagrams of different embodiments may be combined or integrated with other systems, modules, techniques or methods within the scope of the present application. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The foregoing is only a specific embodiment of the present invention. It should be pointed out that for those of ordinary skill in the art, some improvements and modifications can also be made without departing from the principle of the present invention. It should be regarded as the protection scope of the present invention.

Claims (16)

1. A data processing method, characterized in that it is applicable to a first WebService component associated with a first information system, and the first information system is connected to the second information system through an isolation device associated with the second information system Perform data logic isolation; the two isolated systems still have physical data channel connections during the data logic isolation, and the method includes: obtaining a first data transmission request from the first information system to the second information system; converting the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device; The second data is written into a database corresponding to the second information system, and the first WebService component is physically connected to the database through wireless or wired means. 2. The data processing method according to claim 1, further comprising: monitoring whether the processing result corresponding to the second data is written into the database; When it is detected that the processing result corresponding to the second data is written into the database, the processing result is acquired and fed back to the first information system. 3. A WebService component, characterized in that it is associated with a first information system, and the first information system is logically isolated from the second information system through an isolation device associated with the second information system; the data During logical isolation, the two isolated systems still have physical data channel connections, and the WebService components include: A first data request obtaining module, configured to obtain a first data transmission request from the first information system to the second information system; A second data determination module, configured to convert the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device; The second data writing module is configured to write the second data into the database corresponding to the second information system, and the WebService component is physically connected to the database through wireless or wired means. 4. The WebService component according to claim 3, further comprising: A first monitoring module, configured to monitor whether a processing result corresponding to the first data is written into the database; The first result processing module is configured to obtain the processing result and feed it back to the first information system when it is detected that the processing result corresponding to the first data is written into the database. 5. A data processing method, characterized in that it is applicable to a second WebService component associated with a second information system, and the second information system exchanges data with the first information system through an isolation device associated with the second information system Logical isolation; when the data is logically isolated, the two isolated systems still have physical data channel connections, and the method includes: monitoring whether there is second data written into the database corresponding to the second information system, wherein the second data is the first data transmission request corresponding to the first data transmission request from the first information system to the second information system A data converted into data conforming to the communication protocol corresponding to the isolation device; When it is detected that the second data is written into the database, the second data is restored to the corresponding first data according to the communication protocol corresponding to the isolation device, and the second WebService component communicates with the database through Physically connected wirelessly or wiredly. 6. The method according to claim 5, further comprising: carrying the first data and invoking corresponding services provided by the second information system; Writing the processing result corresponding to the first data into the database. 7. A WebService component, characterized in that it is associated with a second information system, and the second information system performs data logic isolation from the first information system through an isolation device associated with the second information system; the data logic isolation When the two systems are isolated, there is still a physical data channel connection, and the WebService components include: The second monitoring module is used to monitor whether there is second data written into the database corresponding to the second information system, wherein the second data is the first information from the first information system to the second information system The first data corresponding to a data transmission request is converted into data conforming to the communication protocol corresponding to the isolation device; A data restoration module, configured to restore the second data to the corresponding first data according to the communication protocol of the isolation device when monitoring that the second data is written into the database, the WebService component and The database is physically connected either wirelessly or by wire. 8. The WebService component according to claim 7, further comprising: a first service calling module, configured to carry the first data and call corresponding services provided by the second information system; The first result writing module is configured to write the processing result corresponding to the first data into the database. 9. A data processing method, characterized in that it is applicable to a first WebService component associated with a first information system, and the first information system is connected to the second information system through an isolation device associated with the second information system Perform data logic isolation; the two isolated systems still have physical data channel connections during the data logic isolation, and the method includes: monitoring whether there is fourth data written into the database, wherein the fourth data is converted from the third data corresponding to the second data transmission request from the second information system to the first information system and conforms to the data of the database data type; When it is detected that the fourth data is written into the database, carrying the fourth data to call a corresponding service provided by the first information system; The processing result corresponding to the fourth data is written into the database, and the first WebService component is physically connected to the database in a wireless or wired manner. 10. A WebService component, characterized in that it is associated with a first information system, and the first information system is logically isolated from the second information system through an isolation device associated with the second information system; the data During logical isolation, the two isolated systems still have physical data channel connections, and the WebService components include: The third monitoring module is configured to monitor whether there is fourth data written into the database, wherein the fourth data is the third data corresponding to the second data transmission request from the second information system to the first information system. data converted into data conforming to the data type of said database; The second service calling module is configured to carry the fourth data and call the corresponding service provided by the first information system when it is detected that the fourth data is written into the database; The second result writing module is configured to write the processing result corresponding to the fourth data into the database, and the WebService component is physically connected to the database in a wireless or wired manner. 11. A data processing method, characterized in that it is applicable to a second WebService component associated with a second information system, and the second information system exchanges data with the first information system through an isolation device associated with the second information system Logical isolation; when the data is logically isolated, the two isolated systems still have physical data channel connections, and the method includes: obtaining a second data transmission request from the second information system to the first information system; converting the third data corresponding to the second data transmission request into fourth data conforming to the data type of the database; The fourth data is written into the database, and the second WebService component is physically connected to the database in a wireless or wired manner. 12. The method of claim 11, further comprising: monitoring whether the processing result corresponding to the fourth data is written into the database; When it is detected that the processing result corresponding to the fourth data is written into the database, the processing result corresponding to the fourth data is acquired and fed back to the second information system. 13. A WebService component, characterized in that it is associated with a second information system, and the second information system performs data logic isolation from the first information system through an isolation device associated with the second information system; the data logic isolation When the two systems are isolated, there is still a physical data channel connection, and the WebService components include: A second data request obtaining module, configured to obtain a second data transmission request from the second information system to the first information system; A fourth data determination module, configured to convert the third data corresponding to the second data transmission request into fourth data conforming to the data type of the database; The fourth data writing module is configured to write the fourth data into the database, and the WebService component is physically connected to the database through wireless or wired means. 14. The WebService component according to claim 13, further comprising: A fourth monitoring module, configured to monitor whether the processing result corresponding to the fourth data is written into the database; The second result processing module is configured to obtain the processing result corresponding to the fourth data and feed it back to the second information system when it is detected that the processing result corresponding to the fourth data is written into the database. 15. A WebService component, characterized in that it is associated with a first information system, and the first information system is logically isolated from the second information system through an isolation device associated with the second information system; the data During logical isolation, the two isolated systems still have physical data channel connections, and the WebService components include: A first data request obtaining module, configured to obtain a first data transmission request from the first information system to the second information system; A second data determination module, configured to convert the first data corresponding to the first data transmission request into second data conforming to the communication protocol corresponding to the isolation device; a second data writing module, configured to write the second data into a database corresponding to the second information system; A first monitoring module, configured to monitor whether a processing result corresponding to the first data is written into the database; The first result processing module is configured to obtain the processing result and feed it back to the first information system when it is detected that the processing result corresponding to the first data is written into the database; A third monitoring module, configured to monitor whether fourth data is written into the database, wherein the fourth data corresponds to a second data transmission request from the second information system to the first information system The third data is converted into data conforming to the data type of the database; The second service calling module is configured to carry the fourth data and call the corresponding service provided by the first information system when it is detected that the fourth data is written into the database; The second result writing module is configured to write the processing result corresponding to the fourth data into the database; the WebService component is physically connected to the database through wireless or wired means. 16. A WebService component, characterized in that it is associated with a second information system, and the second information system performs data logic isolation from the first information system through an isolation device associated with the second information system; the data logic isolation When the two systems are isolated, there is still a physical data channel connection, and the WebService components include: The second monitoring module is configured to monitor whether there is second data written into the database corresponding to the second information system, wherein the second data is the first information from the first information system to the second information system The first data corresponding to the data transmission request is converted into data conforming to the communication protocol corresponding to the isolation device; A data restoration module, configured to restore the second data to the corresponding first data according to the communication protocol corresponding to the isolation device when monitoring that the second data is written into the database; a first service calling module, configured to carry the first data and call corresponding services provided by the second information system; a first result writing module, configured to write the processing result corresponding to the first data into the database; A second data request obtaining module, configured to obtain a second data transmission request from the second information system to the first information system; A fourth data determination module, configured to convert the third data corresponding to the second data transmission request into fourth data conforming to the data type of the database; a fourth data writing module, configured to write the fourth data into the database; A fourth monitoring module, configured to monitor whether the processing result corresponding to the fourth data is written into the database; The second result processing module is configured to obtain the processing result corresponding to the fourth data and feed it back to the second information system when it is heard that the processing result corresponding to the fourth data is written into the database; The WebService component is physically connected to the database through wireless or wired means.