CN106156617A - Document printing processing method and device and terminal equipment - Google Patents
Document printing processing method and device and terminal equipment Download PDFInfo
- Publication number
- CN106156617A CN106156617A CN201610520241.8A CN201610520241A CN106156617A CN 106156617 A CN106156617 A CN 106156617A CN 201610520241 A CN201610520241 A CN 201610520241A CN 106156617 A CN106156617 A CN 106156617A
- Authority
- CN
- China
- Prior art keywords
- function
- document print
- current process
- document
- cancel
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
Abstract
The invention provides a document printing processing method, a document printing processing device and terminal equipment, wherein the method comprises the following steps: monitoring whether a document printing canceling function provided by an operating system kernel is called or not; if the current process calls a document printing cancellation function to cancel the document being printed, a preset hook function corresponding to the document printing cancellation function is operated; detecting the legality of the current process; and if the current process is detected to be legal, allowing the current process to call a document printing cancellation function. The method avoids the document printing from being maliciously cancelled, and protects the safety of the operating system.
Description
Technical field
The present invention relates to field of information security technology, particularly relate to a kind of document print processing method, device and terminal and set
Standby.
Background technology
Generally, operating system can provide the user document print cancellation function, for cancelling the printing of a document.
But, some rogue programs can utilize the document to print cancellation function, cancels ongoing document print so that
Document is terminated printing after only printing a part.
Content of the invention
The purpose of the present invention is intended to solve at least to a certain extent one of above-mentioned technical problem.
To this end, the first of the present invention purpose is to propose a kind of document print processing method, this method avoid document
Print and maliciously cancelled, protect the safety of operating system.
Second object of the present invention is to propose a kind of document print processing means.
Third object of the present invention is to propose a kind of terminal device.
Fourth object of the present invention is to propose another kind of terminal device.
To achieve these goals, first aspect present invention embodiment proposes a kind of document print processing method, comprising:
The document print that monitor operating system kernel provides cancels whether function is called；If monitoring current process to call described literary composition
Shelves print cancels the document that function cancellation is printing, and what operation was preset cancels function corresponding hook letter with described document print
Number；The legitimacy of detection current process；If detection knows that current process is legal, then allow current process to call described document and beat
Print cancels function.
The document print that the document print processing method of the embodiment of the present invention, first monitor operating system kernel provide is cancelled
Whether function is called, then monitor current process call document print cancel function when, run preset beat with document
Print cancel the corresponding Hook Function of function, with the legitimacy capturing current process and detect current process, and detection know work as
When front process is legal, it is allowed to current process is called document print and cancelled function.Thus, it is to avoid document print is maliciously cancelled,
Protect the safety of operating system.
In addition, the document print processing method of the embodiment of the present invention also has a following additional technical characteristic:
In one embodiment of the invention, also include: if detection knows that current process is illegal, then refuse current process
Call described document print and cancel function.
In one embodiment of the invention, the document print providing at described monitor operating system kernel cancels function
No called before, also include: arrange in the defence with network security application drives and cancel function with described document print
Corresponding Hook Function.
In one embodiment of the invention, the legitimacy of described detection current process, comprising: according to default feature database
The legitimacy of detection current process.
In one embodiment of the invention, described feature database includes: the white list of legitimate processes, and/or, illegal process
Blacklist.
To achieve these goals, second aspect present invention embodiment proposes a kind of document print processing means, comprising:
For the document print that monitor operating system kernel provides, monitoring modular, cancels whether function is called；Run module, be used for
Monitor current process to call described document print and cancel function and cancel the document that printing, run that preset with described document
Print and cancel the corresponding Hook Function of function；Detection module, for detecting the legitimacy of current process；Processing module, is used for
When detection knows that current process is legal, it is allowed to current process is called described document print and cancelled function.
The document that the document print processing means of the embodiment of the present invention, first monitoring module monitors operating system nucleus provide
Print cancel function whether be called, then run module monitor current process call document print cancel function when, fortune
What row was preset cancels the corresponding Hook Function of function with document print, to capture current process and to be detected by detection module current
The legitimacy of process, and processing module is when detection knows that current process is legal, it is allowed to current process is called document print and is taken
Disappear function.Thus, it is to avoid document print is maliciously cancelled, and protects the safety of operating system.
In addition, the document print processing means of the embodiment of the present invention also has a following additional technical characteristic:
In one embodiment of the invention, described processing module is additionally operable to: when detection knows that current process is illegal, refuse
Exhausted current process is called described document print and is cancelled function.
In one embodiment of the invention, also include: module is set, for driving in the defence with network security application
Arrange in dynamic and cancel the corresponding Hook Function of function with described document print.
In one embodiment of the invention, described detection module is used for: according to default feature database detection current process
Legitimacy.
In one embodiment of the invention, described feature database includes: the white list of legitimate processes, and/or, illegal process
Blacklist.
To achieve these goals, third aspect present invention embodiment proposes a kind of terminal device, including the present invention the
Document print processing means described in two aspect embodiments.
Whether the document print that the terminal device of the embodiment of the present invention, first monitor operating system kernel provide cancels function
Called, then monitor current process call document print cancel function when, run preset cancel letter with document print
In detection, the corresponding Hook Function of number, with the legitimacy capturing current process and detect current process, and knows that current process is closed
During method, it is allowed to current process is called document print and cancelled function.Thus, it is to avoid document print is maliciously cancelled, and protects behaviour
Make the safety of system.
To achieve these goals, fourth aspect present invention embodiment proposes another kind of terminal device, including with next
Individual or multiple assemblies: processor, memory, power circuit, multimedia groupware, audio-frequency assembly, the interface of input/output (I/O),
Sensor cluster, and communications component；Wherein, circuit board is placed in the interior volume that housing surrounds, described processor and described
Memory is arranged on described circuit board；Described power circuit, powers for each circuit or the device for terminal device；Described
Memory is used for storing executable program code；Described processor is by reading the executable program generation of storage in described memory
Code runs the corresponding program with described executable program code, for performing following steps:
The document print that monitor operating system kernel provides cancels whether function is called；
If monitoring current process to call the document that the cancellation function cancellation of described document print is printing, running and presetting
With described document print cancel the corresponding Hook Function of function；
The legitimacy of detection current process；
If detection knows that current process is legal, then allow current process to call described document print and cancel function.
Whether the document print that the terminal device of the embodiment of the present invention, first monitor operating system kernel provide cancels function
Called, then monitor current process call document print cancel function when, run preset cancel letter with document print
In detection, the corresponding Hook Function of number, with the legitimacy capturing current process and detect current process, and knows that current process is closed
During method, it is allowed to current process is called document print and cancelled function.Thus, it is to avoid document print is maliciously cancelled, and protects behaviour
Make the safety of system.
Aspect and advantage that the present invention adds will part be given in the following description, and part will become from the following description
Obtain substantially, or recognized by the practice of the present invention.
Brief description
The present invention above-mentioned and/or that add aspect and advantage will become from the following description of the accompanying drawings of embodiments
Obvious and easy to understand, wherein:
Fig. 1 is the flow chart of document print processing method according to an embodiment of the invention；
Fig. 2 is the flow chart of document print processing method in accordance with another embodiment of the present invention；
Fig. 3 is the structural representation of document print processing means according to an embodiment of the invention；
Fig. 4 is the structural representation of document print processing means in accordance with another embodiment of the present invention；
Fig. 5 is the structural representation of terminal device according to an embodiment of the invention；And
Fig. 6 is the structural representation of terminal device in accordance with another embodiment of the present invention.
Detailed description of the invention
Embodiments of the invention are described below in detail, and the example of described embodiment is shown in the drawings, wherein from start to finish
Same or similar label represents same or similar element or has the element of same or like function.Below with reference to attached
The embodiment that figure describes is exemplary, it is intended to is used for explaining the present invention, and is not considered as limiting the invention.
Below with reference to the accompanying drawings document print processing method, device and the terminal device of the embodiment of the present invention are described.
Fig. 1 is the flow chart of document print processing method according to an embodiment of the invention.
As it is shown in figure 1, the document print processing method mays include:
S101, the document print that monitor operating system kernel provides cancels whether function is called.
S102, if monitoring current process to call the document that document print cancellation function cancellation is printing, runs pre-
If with document print cancel the corresponding Hook Function of function.
Generally, operating system nucleus can provide the user document print cancellation function, is printed by the document and cancels function
The printing of a document can be cancelled.Wherein, the difference according to concrete application scenarios, the document print that operating system nucleus provides
Cancel function different.
For example, when the document print cancellation function that operating system provides is AbortDoc, the portion printing
Word document, by calling this corresponding kernel function NtUserAbortDoc of AbortDoc function, cancels ongoing Word
Document print.
But, some perform the malicious process of malice task, such as virus, worm and Trojan Horse process etc., available
Cross and call the document print cancellation function that operating system nucleus provides, cancel ongoing Word document and print so that document
Illegal termination prints, and causes the destruction to operating system.
Therefore, in order to prevent malicious process from illegally being cancelled document print by calling document print cancellation function,
Before allowing calling process to use document print to cancel function, need first to judge to call the conjunction that document print cancels function process
Method, thus determine whether that calling process uses the document to print cancellation function and carries out cancelling beating according to judged result
The document of print.
Wherein, it should be appreciated that Hook Function can use various ways to determine that calling document print cancels working as of function
Front process, than such as by obtain call document print cancel function operation process path determine current process.
In order to realize before allowing calling process to use document print to cancel function, it is judged that the legitimacy of calling process,
The embodiment of the present invention is arranged in system in advance cancels the corresponding Hook Function of function with document print.
And then, the document print that monitor operating system kernel provides cancels whether function is called, whenever monitoring document
When printing cancellation function is called, then what operation was preset prints the cancellation corresponding Hook Function of function with the document.
I.e. operating system respond the document print cancel function call event before, by with the document print cancel
To judge to call the document, the corresponding Hook Function of function prints whether cancel function process legal.
S103, the legitimacy of detection current process.
S104, if detection knows that current process is legal, then allows current process to call document print and cancels function.
Specifically, after the process that document print cancels function is called in Hook Function capture, the legitimacy of this process is detected,
If detection knows that current process is legal, then allow current process to call document print and cancel the literary composition that function cancellation is printing
Shelves, to meet the properly functioning of related application.
Wherein it is desired to explanation, according to the difference of concrete application scenarios, various ways detection can be taked to call document and to beat
Print cancels the legitimacy of function process.
The first example, can arrange the feature database comprising related legitimate or illegal process correlated characteristic, and by spy
Levy storehouse detection and call the legitimacy that document print cancels the current process of function.
The second example, can arrange the spy comprising related legitimate or illegal process correlated characteristic on the remote server
Levy storehouse, and arrange and carry out the mutual correlation function of information with this remote server, thus correlation function, document print will be called and take
The relevant information of current process of function of disappearing sends to remote server, detects according to feature database for remote server and calls literary composition
Shelves print the legitimacy of the current process cancelling function.
The third example, prestores process reliable, believable binding secure ID, thus literary composition is called in Hook Function capture
After shelves print the current process cancelling function, whether detection current process has above-mentioned secure ID to detect the conjunction of current process
Method.
In sum, the literary composition that the document print processing method of the embodiment of the present invention, first monitor operating system kernel provide
Shelves print cancel function whether be called, then monitor current process call document print cancel function when, run preset
With document print cancel the corresponding Hook Function of function, with the legitimacy capturing current process and detect current process, and
When detection knows that current process is legal, it is allowed to current process is called document print and cancelled function.Thus, it is to avoid document print quilt
Malice is cancelled, and protects the safety of operating system.
It in order to more clearly describe the legitimacy how detecting current process, 2 is illustrated below in conjunction with the accompanying drawings,
In this example, comprised the feature database of associated process feature by setting, and call document print cancellation by feature database detection
The legitimacy of the current process of function, is described as follows:
Fig. 2 is the flow chart of document print processing method in accordance with another embodiment of the present invention, as in figure 2 it is shown, this article
Shelves print processing method includes:
S201, arranges in the defence with network security application drives and cancels function corresponding hook letter with document print
Number.
It should be appreciated that according to the difference of application scenarios, permissible with the document print cancellation corresponding Hook Function of function
It is arranged at multiple positions of operating system.In the document print processing method of the embodiment of the present invention, in order to by operating system
The integration of resource of associated safety defence, will cancel the corresponding Hook Function of function with document print and be arranged at and have network security
During the defence of application drives.
S202, the document print that monitor operating system kernel provides cancels whether function is called.
S203, if monitoring current process to call the document that document print cancellation function cancellation is printing, runs pre-
If with document print cancel the corresponding Hook Function of function.
It should be noted that the description of step S202-S203 is corresponding with above-mentioned steps S101-S102, therefore to step
Rapid S202-S203 describes the description with reference to above-mentioned steps S101-S102, does not repeats them here.
S204, according to the legitimacy of default feature database detection current process.
S205, if detection knows that current process is legal, then allows current process to call document print and cancels function.
S206, if detection knows that current process is illegal, then refuses current process and calls document print cancellation function.
Specifically, the present embodiment calls the legal of the process of document print cancellation function according to the feature database detection preset
Property.If document print is called in detection cancels the process of function illegally, then show that calling the document prints the process cancelling function
It is probably malicious process, thus refuse this process and call document print cancellation function.If document print is called in detection cancels letter
The process of number is legal, then allow current process to call document print and cancel function.
It should be noted that the particular content in feature database can be configured according to application needs, it is legal for example to include
The white list of process, and/or, including the blacklist of illegal process.It is illustrated below:
The first example, can include white list in feature database, the corresponding process of the progress information comprising in white list is to close
Method process, it is allowed to this process is called document print cancellation function and is not result in that document print is maliciously cancelled.
In this example, the current process that document print cancels function is called in determination, looks into according to the progress information of this process
Ask feature database, if inquiry obtain this progress information, mate with the progress information in white list, then it is assumed that this process be legal enter
Journey, therefore allows this process to call document print and cancels function.If inquiry obtains the process in this progress information, with white list
Information is not mated, then it is assumed that this process is illegal process, therefore refuses this process and calls document print cancellation function.
The second example, comprises blacklist in feature database, the corresponding process of the progress information that blacklist comprises is illegally to enter
Journey, for instance it can be possible that the corresponding process of rogue program, can cause to literary composition if allowing this process to call document print cancellation function
The malice that shelves print is cancelled, and brings destruction to the safety of operating system.
In this example, the current process that document print cancels function is called in determination, the process letter according to this current process
Breath query characteristics storehouse, if the progress information of this process mates with the progress information that blacklist comprises, then it is assumed that this process right and wrong
Method process, therefore refuses this process and calls document print cancellation function.If the progress information of this process and blacklist comprise
Progress information does not mates, then it is assumed that this process is legitimate processes, therefore allows this process to call document print and cancels function.
The third example, can comprise blacklist and white list in feature database, the progress information comprising in white list is corresponding
Process is legitimate processes, and the corresponding process of the progress information comprising in blacklist is illegal process.
In this example, the current process that document print cancels function is called in determination, looks into according to the progress information of this process
Ask feature database, if inquiry obtain this progress information, mate with the progress information of white list, then it is assumed that this process be legal enter
Journey, therefore allows this process to call document print and cancels function；If the process that the progress information of this process and blacklist comprise
Information matches, then it is assumed that this process is illegal process, therefore refuses this process and calls document print cancellation function.
In sum, the document print processing method of the embodiment of the present invention, will cancel the corresponding hook of function with document print
Subfunction is arranged in the defence driving with network security application, and judges that calling document print cancels function by feature database
The legitimacy of process, only when this process is legal, just allows this process to cancel function to document print and calls, thus, keep away
Exempt from document print maliciously to be cancelled, protect the safety of operating system.
In order to realize above-described embodiment, the invention allows for a kind of document print processing means, Fig. 3 is according to the present invention
The structural representation of the document print processing means of one embodiment, as it is shown on figure 3, the document print processing device includes:
For the document print that monitor operating system kernel provides, monitoring modular 10, cancels whether function is called.
Run module 20, for calling document print and cancelling function and cancel the literary composition that printing monitoring current process
Shelves, what operation was preset cancels the corresponding Hook Function of function with document print.
Detection module 30, for detecting the legitimacy of current process.
Processing module 40, for when detection knows that current process is legal, it is allowed to current process is called document print and cancelled
Function.
Specifically, in order to realize before allowing calling process to use document print to cancel function, it is judged that calling process
Legitimacy, the embodiment of the present invention is arranged in system in advance cancels the corresponding Hook Function of function with document print.
And then, the document print that monitoring modular 10 monitor operating system kernel provides cancels whether function is called, whenever
Monitoring modular 10 monitors document print and cancels function when being called, and runs module 20 and then runs taking with the document printing of presetting
The corresponding Hook Function of the function that disappears.
I.e. operating system respond the document print cancel function call event before, by with the document print cancel
To judge to call the document, the corresponding Hook Function of function prints whether cancel function process legal.
Further, after the process that document print cancels function is called in Hook Function capture, detection module 30 detection should
The legitimacy of process, if detection module 30 detection knows that current process is legal, processing module 40 then allows current process to call
Document print is cancelled function and is cancelled the document printing, to meet the properly functioning of related application.
In sum, the document print processing means of the embodiment of the present invention, first monitoring module monitors operating system nucleus
There is provided document print cancel function whether be called, then run module monitor current process call document print cancel
During function, run preset with document print cancel the corresponding Hook Function of function, with capture current process and by detection mould
The legitimacy of block detection current process, and processing module is when detection knows that current process is legal, it is allowed to current process is called
Document print cancels function.Thus, it is to avoid document print is maliciously cancelled, and protects the safety of operating system.
It in order to more clearly describe the legitimacy how detecting current process, 4 is illustrated below in conjunction with the accompanying drawings,
In this example, the feature database comprising associated process feature is set by arranging module, and calls document by feature database detection
Print the legitimacy of the current process cancelling function, be described as follows:
Fig. 4 is the structural representation of document print processing means in accordance with another embodiment of the present invention, as shown in Figure 4,
On the basis of as shown in Figure 3, the document print processing device also includes:
Module 50 is set, cancels function pair for arranging in the defence driving have network security application with document print
The Hook Function answered.
It should be appreciated that according to the difference of application scenarios, permissible with the document print cancellation corresponding Hook Function of function
It is arranged at multiple positions of operating system.In the document print processing means of the embodiment of the present invention, in order to by operating system
The integration of resource of associated safety defence, arranges module 50 and will cancel the corresponding Hook Function of function with document print and be arranged at tool
During the defence having network security to apply drives.
Further, monitoring modular 10 monitor operating system nucleus provide document print cancel function be called
When, run module 20 and run default currently carrying out with document print cancellation function corresponding Hook Function acquisition.
And then detection module 30 calls, according to default feature database detection, the legitimacy that document print cancels the process of function.
If detection module 30 detection is called document print and cancelled the process of function illegally, then show that calling the document prints cancellation function
Process be probably malicious process, thus processing module 40 is refused this process and is called document print and cancel function.If detection mould
Document print is called in block 30 detection, and to cancel the process of function legal, then processing module 40 allows current process to call document print to take
Disappear function.
It should be noted that the particular content in feature database can be configured according to application needs, it is legal for example to include
The white list of process, and/or, including the blacklist of illegal process.
It should be appreciated that what the document print processing means of we's embodiment description and above-mentioned combination Fig. 1-Fig. 2 described
Document print processing method is corresponding, the details not disclosed in the embodiment of the document print processing means of the present invention, at this no longer
Repeat.
In sum, the document print processing means of the embodiment of the present invention, will cancel the corresponding hook of function with document print
Subfunction is arranged in the defence driving with network security application, and judges that calling document print cancels function by feature database
The legitimacy of process, only when this process is legal, just allows this process to cancel function to document print and calls, thus, keep away
Exempt from document print maliciously to be cancelled, protect the safety of operating system.
In order to realize above-described embodiment, the invention allows for a kind of terminal device, Fig. 5 is according to the present invention one enforcement
The structural representation of the terminal device of example.
As it is shown in figure 5, the terminal device of the embodiment of the present invention includes document print processing means 1000.
Wherein it is desired to explanation, in the document print processing means 1000 in the embodiment of the present invention and above-described embodiment
The cursor control device describing with reference to Fig. 3-Fig. 4 is corresponding, does not repeats them here.
In sum, the document print that the terminal device of the embodiment of the present invention, first monitor operating system kernel provide takes
Whether the function that disappears is called, then monitor current process call document print cancel function when, run preset and document
Print and cancel the corresponding Hook Function of function, with the legitimacy capturing current process and detect current process, and know in detection
When current process is legal, it is allowed to current process is called document print and cancelled function.Thus, it is to avoid document print is maliciously taken
Disappear, protect the safety of operating system.
In order to realize above-described embodiment, the invention allows for another kind of terminal device.
Fig. 6 is the structural representation of terminal device in accordance with another embodiment of the present invention.
Seeing Fig. 6, terminal device 2000 can include following one or more assembly: processor 2001, memory 2002,
Power circuit 2003, multimedia groupware 2004, audio-frequency assembly 2005, the interface 2006 of input/output (I/O), sensor cluster
2007, and communications component 2008.
Power circuit 2003, powers for each circuit or the device for terminal device；Memory 2002 can for storage
Perform program code；Processor 2001 is run by reading the executable program code of storage in memory 2002 and can perform
The corresponding program of program code, for performing following steps:
The document print that monitor operating system kernel provides cancels whether function is called；
Call document print and cancel function if monitoring current process and cancel the document that printing, run preset with
Document print cancels the corresponding Hook Function of function；
The legitimacy of detection current process；
If detection knows that current process is legal, then allow current process to call document print and cancel function.
It should be noted that the above-mentioned description to terminal device 2000 refers to above-mentioned combination Fig. 1 and Fig. 2 to cursor control
The description of method, does not repeats them here.
In sum, the document print that the terminal device of the embodiment of the present invention, first monitor operating system kernel provide takes
Whether the function that disappears is called, then monitor current process call document print cancel function when, run preset and document
Print and cancel the corresponding Hook Function of function, with the legitimacy capturing current process and detect current process, and know in detection
When current process is legal, it is allowed to current process is called document print and cancelled function.Thus, it is to avoid document print is maliciously taken
Disappear, protect the safety of operating system.
In the description of this specification, reference term " embodiment ", " some embodiments ", " example ", " specifically show
Specific features, structure, material or the spy that the description of example " or " some examples " etc. means to combine this embodiment or example describes
Point is contained at least one embodiment or the example of the present invention.In this manual, to the schematic representation of above-mentioned term not
Identical embodiment or example must be directed to.And, the specific features of description, structure, material or feature can be in office
One or more embodiments or example combine in an appropriate manner.Additionally, in the case of not conflicting, the skill of this area
The feature of the different embodiment described in this specification or example and different embodiment or example can be tied by art personnel
Close and combination.
Although above it has been shown and described that embodiments of the invention, it is to be understood that above-described embodiment is example
Property, it is impossible to be interpreted as limitation of the present invention, those of ordinary skill in the art within the scope of the invention can be to above-mentioned
Embodiment is changed, changes, replaces and modification.
Claims (12)
1. a document print processing method, it is characterised in that comprise the following steps:
The document print that monitor operating system kernel provides cancels whether function is called；
Call described document print and cancel function if monitoring current process and cancel the document that printing, run preset with
Described document print cancels the corresponding Hook Function of function；
The legitimacy of detection current process；
If detection knows that current process is legal, then allow current process to call described document print and cancel function.
2. the method for claim 1, it is characterised in that also include:
If detection knows that current process is illegal, then refuse current process and call described document print cancellation function.
3. the method for claim 1, it is characterised in that the document print providing at described monitor operating system kernel takes
Before whether the function that disappears is called, also include:
Arrange in the defence with network security application drives and cancel the corresponding Hook Function of function with described document print.
4. method as claimed in claim 3, it is characterised in that the legitimacy of described detection current process, comprising:
Legitimacy according to default feature database detection current process.
5. method as claimed in claim 4, it is characterised in that described feature database includes:
The white list of legitimate processes, and/or, the blacklist of illegal process.
6. a document print processing means, it is characterised in that include:
For the document print that monitor operating system kernel provides, monitoring modular, cancels whether function is called；
Run module, for calling described document print and cancelling function and cancel the document that printing monitoring current process,
What operation was preset cancels the corresponding Hook Function of function with described document print；
Detection module, for detecting the legitimacy of current process；
Processing module, for when detection knows that current process is legal, it is allowed to current process is called described document print and cancelled letter
Number.
7. device as claimed in claim 6, it is characterised in that described processing module is additionally operable to:
When detection knows that current process is illegal, refusal current process is called described document print and is cancelled function.
8. device as claimed in claim 6, it is characterised in that also include:
Module is set, corresponding with described document print cancellation function for arranging in the defence driving have network security application
Hook Function.
9. device as claimed in claim 8, it is characterised in that described detection module is used for: according to default feature database detection
The legitimacy of current process.
10. device as claimed in claim 9, it is characterised in that described feature database includes:
The white list of legitimate processes, and/or, the blacklist of illegal process.
11. 1 kinds of terminal devices, it is characterised in that include:
Document print processing means as described in any one of claim 6-10.
12. 1 kinds of terminal devices, it is characterised in that include: following one or more assemblies: processor, memory, power supply electricity
Road, multimedia groupware, audio-frequency assembly, the interface of input/output (I/O), sensor cluster, and communications component；Wherein, circuit
Plate is placed in the interior volume that housing surrounds, and described processor and described memory are arranged on described circuit board；Described power supply
Circuit, powers for each circuit or the device for terminal device；Described memory is used for storing executable program code；Described
Processor runs corresponding with described executable program code by reading the executable program code of storage in described memory
Program, for perform following steps:
The document print that monitor operating system kernel provides cancels whether function is called；
Call described document print and cancel function if monitoring current process and cancel the document that printing, run preset with
Described document print cancels the corresponding Hook Function of function；
The legitimacy of detection current process；
If detection knows that current process is legal, then allow current process to call described document print and cancel function.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610520241.8A CN106156617A (en) | 2016-07-04 | 2016-07-04 | Document printing processing method and device and terminal equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610520241.8A CN106156617A (en) | 2016-07-04 | 2016-07-04 | Document printing processing method and device and terminal equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106156617A true CN106156617A (en) | 2016-11-23 |
Family
ID=58061513
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610520241.8A Pending CN106156617A (en) | 2016-07-04 | 2016-07-04 | Document printing processing method and device and terminal equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106156617A (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101587429A (en) * | 2008-05-23 | 2009-11-25 | 佳能株式会社 | Information processing apparatus and information processing method |
| CN102902919A (en) * | 2012-08-30 | 2013-01-30 | 北京奇虎科技有限公司 | Method, device and system for identifying and processing suspicious practices |
| US9171157B2 (en) * | 2006-03-28 | 2015-10-27 | Blue Coat Systems, Inc. | Method and system for tracking access to application data and preventing data exploitation by malicious programs |
| CN105376440A (en) * | 2014-08-08 | 2016-03-02 | 佳能株式会社 | Communication apparatus and control method therefor |
-
2016
- 2016-07-04 CN CN201610520241.8A patent/CN106156617A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US9171157B2 (en) * | 2006-03-28 | 2015-10-27 | Blue Coat Systems, Inc. | Method and system for tracking access to application data and preventing data exploitation by malicious programs |
| CN101587429A (en) * | 2008-05-23 | 2009-11-25 | 佳能株式会社 | Information processing apparatus and information processing method |
| CN102902919A (en) * | 2012-08-30 | 2013-01-30 | 北京奇虎科技有限公司 | Method, device and system for identifying and processing suspicious practices |
| CN105376440A (en) * | 2014-08-08 | 2016-03-02 | 佳能株式会社 | Communication apparatus and control method therefor |
Non-Patent Citations (4)
| Title |
|---|
| 梁亚雄等: "打印监控中的关键技术研究", 《计算机应用与软件》 * |
| 马贵安等: "《PowerBuilder Win32 API程序设计（高级卷）》", 31 August 2004 * |
| 马贵安等: "《PowerBuilder Win32 API程序设计》", 31 December 2004 * |
| 黎伶锋等: "打印监控审计技术研究", 《计算机工程与设计》 * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109753806B (en) | Server protection method and device | |
| CN102413221B (en) | Method for protecting privacy information and mobile terminal | |
| CN101754213B (en) | Smart card, terminal equipment, and authentication server for guaranteeing application safety and methods thereof | |
| CN101414997B (en) | Method and apparatus for preventing malevolence program from accessing network | |
| CN104468611A (en) | Data security processing method and device based on dual-system switching | |
| CN104427089B (en) | Mobile terminal and mobile terminal authority management method | |
| WO2003096726A3 (en) | Method and apparatus for use in securing an electronic device such as a cell phone | |
| CN102081709A (en) | Method and device for disabling browser plug-in and terminal | |
| CN105429943B (en) | Information processing method and terminal thereof | |
| CN103906045B (en) | A kind of monitoring method and system of mobile terminal privacy taking and carring away | |
| CN103096278A (en) | Message sending method, device and mobile terminal | |
| CN107992745A (en) | Kidnap countermeasure in a kind of interface based on Android platform | |
| CN106203111A (en) | Method and device for preventing clipboard data from being modified and terminal equipment | |
| CN106778132A (en) | The control method of file process, device and mobile terminal | |
| CN106127041A (en) | Method and device for preventing clipboard data from being monitored and terminal equipment | |
| CN113553599A (en) | Industrial control host software reinforcement method and system | |
| CN106203079A (en) | Cursor processing method and device and terminal equipment | |
| CN106127034B (en) | A kind of method, apparatus that anti-locking system is maliciously closed and electronic equipment | |
| CN106156617A (en) | Document printing processing method and device and terminal equipment | |
| CN106203119A (en) | Processing method and device for hiding cursor and electronic equipment | |
| CN106203094A (en) | Window content processing method and device and terminal equipment | |
| CN106169046A (en) | Method and device for preventing message hook injection and terminal equipment | |
| CN106203078A (en) | Desktop switching processing method and device and terminal equipment | |
| CN105335673A (en) | Information safety processing method and device | |
| CN106203189A (en) | Equipment data acquisition method and device and terminal equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20181205 Address after: 519030 Room 105-53811, No. 6 Baohua Road, Hengqin New District, Zhuhai City, Guangdong Province Applicant after: Zhuhai Leopard Technology Co.,Ltd. Address before: 100085 East District, Second Floor, 33 Xiaoying West Road, Haidian District, Beijing Applicant before: BEIJING KINGSOFT INTERNET SECURITY SOFTWARE Co.,Ltd. |
|
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20161123 |