CN101101621A - Method for monitoring windows system clipboard through windows system service - Google Patents

Method for monitoring windows system clipboard through windows system service Download PDF

Info

Publication number
CN101101621A
CN101101621A CNA2007101185842A CN200710118584A CN101101621A CN 101101621 A CN101101621 A CN 101101621A CN A2007101185842 A CNA2007101185842 A CN A2007101185842A CN 200710118584 A CN200710118584 A CN 200710118584A CN 101101621 A CN101101621 A CN 101101621A
Authority
CN
China
Prior art keywords
clipboard
service
windows
monitoring
hook
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CNA2007101185842A
Other languages
Chinese (zh)
Other versions
CN100458818C (en
Inventor
姜斌斌
文中领
吕俊
陈华平
张磊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Topsense Info Tech Co ltd
Original Assignee
Beijing Topsense High-Tech Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Topsense High-Tech Information Technology Co Ltd filed Critical Beijing Topsense High-Tech Information Technology Co Ltd
Priority to CNB2007101185842A priority Critical patent/CN100458818C/en
Publication of CN101101621A publication Critical patent/CN101101621A/en
Application granted granted Critical
Publication of CN100458818C publication Critical patent/CN100458818C/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Storage Device Security (AREA)

Abstract

The method includes steps: (1) initializing system service information related to cut, copy and paste operations; looking up descriptor table of system, and service name ID for Nt, User, Get, Clipboard, Data and Nt, User, Set, Clipboard, Data; (2) in Windows, calculating address offset of system service of Nt, User, Get, Clipboard, Data and Nt, User, Set, Clipboard, Data; (3) HOOK services Nt, User, Get, Clipboard, Data and Nt, User, Set, Clipboard, Data in kernel mode in two systems; (4) when there is operation request, clipboard operation information sent from user enters into two corresponding functions of HOOK: New, Nt, User, Get, Clipboard, Data and New, Nt, User, Set, Clipboard, Data so as to monitor all operation of clipboard, and then using logic judgment does relevant treatment. Through Windows system service to monitor clipboard, the method is suitable to various software without influence on normal operation of valid user, and is not dependent on application.

Description

A kind of method by Windows system service monitoring Windows system clipboard
Technical field
The present invention relates to a kind of method, belong to field of computer technology by Windows system service monitoring Windows system clipboard.
Background technology
At present, a lot of websites and application software to user's shearing, duplicate, paste operation carried out some controls, but there are some defectives in these controls.Some website just forbids the single control of duplicating can't stoping the user to pass through the content of text that other modes copy the website; The operation control function of application software has individual limitation, does not possess general applicability.In addition, Microsoft provides a cover API to the Windows clipbook, being used for the user carries out developing the second time and calling, some manufacturer is in order to monitor clipbook, taked the mechanism of these API of HOOK or WINDOWS message to realize this function, but this implementation also can only be at the specific application software of part, can't be effective to all application software, more can not accomplish and use irrelevant.
Summary of the invention
For overcoming the above-mentioned defective of prior art, the invention provides a kind of method by Windows system service monitoring Windows system clipboard, this method can be to user's shearing, duplicate, paste operation is controlled fully, and various softwares are had general applicability, and with use irrelevant.
The present invention realizes that the technical scheme of above-mentioned purpose is: a kind of method by Windows system service monitoring Windows system clipboard, it is characterized in that adopting WINDOWS kernel HOOK technology to clipbook relevant system service carry out HOOK, thereby reach the purpose to the monitoring of WINDOWS system clipboard, this method may further comprise the steps:
A, to the system service information initializing of cliping and pasting, copy and paste operation is relevant, find two system description symbol table ServiceDescriptorTable and ServiceDescriptorTableShadow, obtain the service ID of two system service NtUserGetClipboardData and NtUserSetClipboardData;
B, computing system service NtUserGetClipboardData and the address offset of NtUserSetClipboardData in Windows;
Two system core attitude service NtUserGetClipboardData of C, HOOK and NtUserSetClipboardData;
D, when operation requests is arranged, the former clipbook operation information that enters system service NtUserSetClipboardData and NtUserGetClipboardData that the user sends will enter two respective function: NewNtUserGetClipboardData and the NewNtUserSetClipboardData of HOOK, in these two functions, realize all logical process of monitoring clipbook;
E, withdraw from monitoring and drive, HOOK are removed in two system services.
Wherein, described steps A comprises the following steps:
A1, find the system description symbol table ServiceDescriptorTable that openly derived by Ntoskrnl.exe (to be called for short: SDT);
A2, find the base address of ServiceDescriptorTableShadow in win32k.sys by way of search in the Installed System Memory space;
A3, obtain the service ID of the corresponding current system version of two system service NtUserGetClipboardData and NtUserSetClipboardData by process auxiliary drive program LocalSystem.sys.
Logical process among the described step D may further comprise the steps:
(1) obtains the process number (PID) that request was sheared, duplicated, pastes in current initiation;
(2) obtain the process process name (ProcessName) that request was sheared, duplicated, pastes in current initiation;
(3) judge whether current process number is that perhaps whether the current process name is csrss.exe in being subjected to the monitoring process tabulation, request is done reservation, abandoned or processing such as encryption.
This method is IRP of branch of definition in clipbook HOOK drives also, to realize the interrupt control of operation.
The present invention adopts above step to pass through in Windows system core level by the method for Windows system service monitoring Windows system clipboard, HOOK is carried out in the system service that utilization Windows kernel HOOK technology is correlated with to clipbook, thereby reaches the comprehensive monitoring purposes of Windows system clipboard; Because two most important system core attitude service NtUserGetClipboardData and NtUserSetClipboardDatas relevant with the clipbook monitoring of the direct HOOK of this method make the control to user's clipbook operation requests have ubiquity; The processing procedure of this method does not need other extra operations, because the bottom ruuning situation of imperceptible computing machine does not influence user's legal normal running at all, and accomplishes and uses irrelevant.
Description of drawings
Fig. 1 is a logical flow chart of the present invention.
Embodiment
As shown in drawings, in clipbook HOOK driving entrance function, the system service information that needs HOOK is carried out initialization, through analysing in depth research windows kernel, find the inlet of WINDOWS system service, (be called for short: SDT), this is the structure of openly being derived by Ntoskrnl.exe to system description symbol table by name; In system description symbol table (SDT), search the relevant system service ID of clipbook monitoring; Calculate the address offset of system service in Windows of HOOK; HOOK is carried out in the relevant system service of clipbook monitoring, when the user initiates the clipbook associative operation, in the function after kernel mode can enter HOOK, in relevant HOOK function, carry out the relevant monitoring request logical process of clipbook.
1, in clipbook HOOK driving entrance function DriverEntry (), the system service information that needs HOOK is carried out initialization, for example the global variable information that the HOOK that in a function InitializeGlobalVariables () needs is used is relevant is carried out initialization, and concrete steps are as follows:
(1) through analysing in depth research Windows kernel, find the inlet of WINDOWS system service, (be called for short: SDT), this is the structure of openly being derived by Ntoskrnl.exe to system description symbol table by name.In WINDOWS, defined a following data structure for SDT:
typedef?struct?ServiceDescriptorEntry
{
unsigned?int*ServiceTableBase;
unsigned?int*ServiceCounterTableBase;
unsigned?int?NumberOfServices;
unsigned?char*ParamTableBase;
}ServiceDescriptorTableEntry_t,*PServiceDescriptorTableEntry_t;
The variable KeServiceDescriptorTable of an overall situation of definition is as follows:
_declspec(dllimport)ServiceDescriptorTableEntry_t?KeServiceDescriptorTable。
(2) in WinNT, also has such structure, ServiceDescriptorTableShadow by name, this structure is not derived, it is the descriptor of a undocumented difficult visit, only use in inside modules, this is second SDT of Windows system maintenance, and it defines in win32k.sys.By in the Installed System Memory space, adopting the mode of search, find the base address pointer of ServiceDescriptorTableShadow in win32k.sys.
(3) six relevant global variables of define system:
ULONG?g_ServiceDescriptorTableShadowPtr;
ULONG?g_oW32KServiceBasePtr;
ULONG?g_CurrentW32KServiceTable;
UINT g_W32KServiceCount;
UINT g_GetClipboardDataServiceId;
UINT g_SetClipboardDataServiceId。
On behalf of meaning, each variable be described below:
G_ServiceDescriptorTableShadowPtr: the base address of SDT in win32k.sys;
G_oW32KServiceBasePtr: original in win32k.sys the base address of SDT;
G_CurrentW32KServiceTable: current in win32k.sys the base address of SDT;
G_W32KServiceCount: the number of system service in win32k.sys;
G_GetClipboardDataServiceId: the service of NtUserGetClipboardData number in win32k.sys;
G_SetClipboardDataServiceId: the service of NtUserSetClipboardData number in win32k.sys.
(4) base address of ServiceDescriptorTableShadow in WIN32K.SYS of finding among the b is kept among the global variable ServiceDescriptorTableShadowPtr;
The value of (ULONG) (* (PULONG) (g_ServiceDescriptorTableShadowPtr+0x10)) is kept among the global variable g_oW32KServiceBasePtr;
The value of (ULONG) (* (PULONG) (g_ServiceDescriptorTableShadowPtr+0x18)) is kept among the global variable g_W32KServiceCount;
Carry out following assignment: g_CurrentW32KServiceTable=g_oW32KserviceBasePtr;
(5) because the base address of system service in SDT of each version (eg:windows 2000/xp/2003) is inconsistent in the operating system of windows series, so in order to obtain NtUserGetClipboardData and the NtUserSetClipboardData service in WIN32K.SYS number, we come to obtain corresponding service number according to the different editions of operating system by an auxiliary little driver (LocalSystem.sys).
(6) following data structure of definition and variable in the header file in LocalSystem.sys:
typedef?struct_LOCAL_SYSTEM
{
ULONG?Version;//os?version,such?as?0x0501
ULONG?NtUserSetClipboardDataServiceId;
ULONG?NtUserGetClipboardDataServiceId;
}LOCAL_SYSTEM,*PLOCAL_SYSTEM;
extern?LOCAL_SYSTEM?g_LocalSystem;
And, call for clipbook HOOK driving with the g_LocalSystem derivation.
(7) g_LocalSystem.NtUserGetClipboardDataServiceId is kept among the global variable g_GetClipboardDataServiceId of definition in (3);
G_LocalSystem.NtUserSetClipboardDataServiceId is kept among the global variable g_SetClipboardDataServiceId that defines among the c.
2, IOCTL_HOOK_CLIPBORAD_SERVICE of branch of definition among this IRP of IRP_MJ_DEVICE_CONTROL in clipbook HOOK drives is achieved as follows operation in the IRP of this branch:
// disabled interrupt
(*(PULONG)(g_ServiceDescriptorTableShadowPtr+0x10)) =
(ULONG)g_nW32KServiceTable;
// allow to interrupt
g_CurrentW32KServiceTable=(ULONG)g_nW32KServiceTable;
3, NtUserGetClipboardData and two system services of NtUserSetClipboardData are carried out HOOK: define the function HookServices () of these two system services of HOOK, in this function, carry out following realization:
False code:
ULONG?ptrW32p=g_CurrentW32KServiceTable;
OldNtUserGetClipboardData =
(NTUSERGETCLIPBOARDDATA)(*(PULONG)(ptrW32p+g_GetClipboardDataServiceId*4)
);
OldNtUserSetClipboardData =
(NTUSERSETCLIPBOARDDATA)(*(PULONG)(ptrW32p+g_SetClipboardDataServiceId*4)
);
_asm
{
cli
mov?eax,CRO
and?eax,not?0x10000
mov?CRO,eax
}?//dissable?interrupt
(*(PULONG)(PVOID)(ptrW32p+g_GetClipboardDataServiceId*4)) =
(DWORD)NewNtUserGetClipboardData;
(*(PULONG)(PVOID)(ptrW32p+g_SetClipboardDataServiceId*4)) =
(DWORD)NewNtUserSetClipboardData;
_asm
{
MOV?EAX,CRO //move?CRO?register?into?EAX
OR EAX,10000H //enable?WP?bit
MOV?CRO,EAX //write?register?back
STI //enable?interrupt
}
When there is shearing in system, duplicates, during the paste operation request, fetch data from clipbook and can enter system service NtUserGetClipboardData, can enter system service NtUserSetClipboardData to the clipbook write data, our monitoring drives has carried out HOOK to these two system services, so the operation clipbook information that the user sends will enter two function: NewNtUserGetClipboardData of HOOK, NewNtUserSetClipboardData, in this function, all logical process of monitoring clipbook have been realized;
When 4, withdrawing from clipbook operation requests monitoring driving, in Unload (), NtUserGetClipboardData and two system services of NtUserSetClipboardData are removed HOOK, define a function U nHookServices () who removes these two system services of HOOK, in this function, carry out following realization:
False code:
// disabled interrupt
_asm
{
cli
mov?eax,CRO
and?eax,not?0x10000
mov?CRO,eax
}
(*(PULONG)(g_ServiceDescriptorTableShadowPtr+0x10)) =
g_oW32KServiceBasePtr;
// releasing disabled interrupt
_asm
{
MOV?EAX,CRO //move?CRO?register?into?EAX
OR EAX,10000H //enable?WP?bit
MOV?CRO,EAX //write?register?back
STI //enable?interrupt
}
g_CurrentW32KServiceTable=g_oW32KServiceBasePtr;
5, the system service inter-process logic of two HOOK is as follows:
(1) from clipbook fetch data (corresponding service routine: logic is as follows NewNtUserGetClipboardData):
A, obtain the process number (PID) that request was sheared, duplicated, pastes in current initiation;
B, obtain the process process name (ProcessName) that request was sheared, duplicated, pastes in current initiation;
C, judge whether current PID is that perhaps whether the current process name is csrss.exe in being subjected to the monitoring process tabulation.
If a) current PID in being subjected to monitoring process tabulation or the current process name be csrss.exe, then carry out following processing:
If (flag==FALSE) //flag is a global variable
Return FALSE; // return herein, abandon user's operation requests, or carry out encryption
else?if(flag==TRUE&&strcmp(ProcessName,″csrss.exe″)==0)
Return FALSE//herein return abandons user's operation requests, or carries out encryption
else
//donothing;
B) if condition a) does not satisfy, then carry out following logical process:
If (flag==TRUE) //flag is a global variable
Return FALSE; // return herein, abandon user's operation requests, or carry out encryption
(2) to clipbook put data (the corresponding with service routine: processing logic is as follows NewNtUserSetClipboardData):
A, obtain the process number (PID) that request was sheared, duplicated, pastes in current initiation;
B, obtain the process process name (ProcessName) that request was sheared, duplicated, pastes in current initiation;
C, judge whether current PID is that perhaps whether the current process name is csrss.exe in being subjected to the monitoring process tabulation.
If a) current PID in being subjected to monitoring process tabulation or the current process name be csrss.exe, then carry out following processing:
Begin
If (g_flag==FALSE) then//g_flag is a global variable
Return FALSE; // return herein, abandon user's operation requests, or carry out encryption
else?if(g_flag==TRUE&&strcmp(ProcessName,″csrss.exe″)==0)then
Return FALSE; // return herein, abandon user's operation requests, or carry out encryption
else?then
//donothing;
Endif
End
B) if condition a) does not satisfy, then carry out following logical process:
begin
If (g_flag==TRUE) then//g_flag is a global variable
Return FALSE; // return herein, abandon user's operation requests, or carry out encryption
Endif
End

Claims (6)

1, a kind of method by Windows system service monitoring Windows system clipboard, it is characterized in that adopting WINDOWS kernel HOOK technology to clipbook relevant system service carry out HOOK, thereby reach the purpose to the monitoring of WINDOWS system clipboard, this method may further comprise the steps:
A, to the system service information initializing of cliping and pasting, copy and paste operation is relevant, find two system description symbol table ServiceDescriptorTable and ServiceDescriptorTableShadow, obtain the service ID of two system service NtUserGetClipboardData and NtUserSetClipboardData;
B, computing system service NtUserGetClipboardData and the address offset of NtUserSetClipboardData in Windows;
Two system core attitude service NtUserGetClipboardData of C, HOOK and NtUserSetClipboardData;
D, when operation requests is arranged, the former clipbook operation information that enters system service NtUserSetClipboardData and NtUserGetClipboardData that the user sends will enter two respective function: NewNtUserGetClipboardData and the NewNtUserSetClipboardData of HOOK, in these two functions, realize all logical process of monitoring clipbook;
E, withdraw from monitoring and drive, HOOK are removed in two system services.
2, the method by Windows system service monitoring Windows system clipboard as claimed in claim 1 is characterized in that described steps A comprises the following steps:
A1, find the system description symbol table ServiceDescriptorTable that openly derived by Ntoskrnl.exe (to be called for short: SDT);
A2, find the base address of ServiceDescriptorTableShadow in win32k.sys;
A3, obtain the service ID of the corresponding current system version of two system service NtUserGetClipboardData and NtUserSetClipboardData.
3, the method by Windows system service monitoring Windows system clipboard as claimed in claim 2, it is characterized in that described steps A 2 is by the way of search in the Installed System Memory space, find the base address of ServiceDescriptorTableShadow in win32k.sys.
4, the method by Windows system service monitoring Windows system clipboard as claimed in claim 2 is characterized in that described steps A 3 is to obtain the service ID of two system service NtUserGetClipboardData and the corresponding current system version of NtUserSetClipboardData by process auxiliary drive program LocalSystem.sys.
5, the method by Windows system service monitoring Windows system clipboard as claimed in claim 1, it is characterized in that: the logical process among the described step D may further comprise the steps:
(1) obtains the process number (PID) that request was sheared, duplicated, pastes in current initiation;
(2) obtain the process process name (ProcessName) that request was sheared, duplicated, pastes in current initiation;
(3) judge whether current process number is that perhaps whether the current process name is csrss.exe in being subjected to the monitoring process tabulation, request is done reservation, abandoned or processing such as encryption.
6, the method by Windows system service monitoring Windows system clipboard as claimed in claim 1 is characterized in that IRP of branch of definition in clipbook HOOK drives, to realize the interrupt control of operation.
CNB2007101185842A 2007-07-10 2007-07-10 Method for monitoring windows system clipboard through windows system service Expired - Fee Related CN100458818C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB2007101185842A CN100458818C (en) 2007-07-10 2007-07-10 Method for monitoring windows system clipboard through windows system service

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB2007101185842A CN100458818C (en) 2007-07-10 2007-07-10 Method for monitoring windows system clipboard through windows system service

Publications (2)

Publication Number Publication Date
CN101101621A true CN101101621A (en) 2008-01-09
CN100458818C CN100458818C (en) 2009-02-04

Family

ID=39035893

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB2007101185842A Expired - Fee Related CN100458818C (en) 2007-07-10 2007-07-10 Method for monitoring windows system clipboard through windows system service

Country Status (1)

Country Link
CN (1) CN100458818C (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101571901B (en) * 2009-06-04 2011-03-16 北京东方微点信息技术有限责任公司 Method and device for locating a service operator
CN102081721A (en) * 2009-11-30 2011-06-01 株式会社Ntt都科摩 Data control device and data control method
CN101620660B (en) * 2009-07-31 2012-03-21 北京大学 Method for defending hooks in Windows operating system
CN106096410A (en) * 2016-06-02 2016-11-09 北京金山安全软件有限公司 Process control method and user terminal
CN106127041A (en) * 2016-07-04 2016-11-16 北京金山安全软件有限公司 Method and device for preventing clipboard data from being monitored and terminal equipment
CN106203111A (en) * 2016-07-04 2016-12-07 北京金山安全软件有限公司 Method and device for preventing clipboard data from being modified and terminal equipment
CN109409098A (en) * 2017-10-24 2019-03-01 浙江华途信息安全技术股份有限公司 The method and apparatus for preventing shear plate leaking data
CN112463402A (en) * 2020-11-03 2021-03-09 浙江华途信息安全技术股份有限公司 Clipboard control method and system based on macOS operating system

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4299249B2 (en) * 2003-01-20 2009-07-22 富士通株式会社 Copy prevention apparatus, copy prevention method, and program for causing computer to execute the method
CN100385852C (en) * 2004-06-22 2008-04-30 腾讯科技(深圳)有限公司 Realization and realizing device for selective download from webpage inserted piece
CN100399280C (en) * 2006-02-07 2008-07-02 无锡永中科技有限公司 Method for processing cut and pasted data

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101571901B (en) * 2009-06-04 2011-03-16 北京东方微点信息技术有限责任公司 Method and device for locating a service operator
CN101620660B (en) * 2009-07-31 2012-03-21 北京大学 Method for defending hooks in Windows operating system
CN102081721A (en) * 2009-11-30 2011-06-01 株式会社Ntt都科摩 Data control device and data control method
CN106096410A (en) * 2016-06-02 2016-11-09 北京金山安全软件有限公司 Process control method and user terminal
CN106096410B (en) * 2016-06-02 2019-04-05 珠海豹趣科技有限公司 A kind of course control method and user terminal
CN106127041A (en) * 2016-07-04 2016-11-16 北京金山安全软件有限公司 Method and device for preventing clipboard data from being monitored and terminal equipment
CN106203111A (en) * 2016-07-04 2016-12-07 北京金山安全软件有限公司 Method and device for preventing clipboard data from being modified and terminal equipment
CN109409098A (en) * 2017-10-24 2019-03-01 浙江华途信息安全技术股份有限公司 The method and apparatus for preventing shear plate leaking data
CN112463402A (en) * 2020-11-03 2021-03-09 浙江华途信息安全技术股份有限公司 Clipboard control method and system based on macOS operating system

Also Published As

Publication number Publication date
CN100458818C (en) 2009-02-04

Similar Documents

Publication Publication Date Title
CN100458818C (en) Method for monitoring windows system clipboard through windows system service
EP1080407B1 (en) Computer system with an emulation coprocessor and method for executing an emulated application program
US6763518B2 (en) Automatic client/server translation and execution of non-native applications
EP1594052B1 (en) VEX - Virtual extension framework
RU2263343C2 (en) Mechanism for controlling external interruptions in virtual machines system
US6269409B1 (en) Method and apparatus for concurrent execution of operating systems
US6321279B1 (en) System for implementing intelligent I/O processing in a multi-processor system by redirecting I/O messages to a target central processor selected from the multi-processor system
US8495262B2 (en) Using a table to determine if user buffer is marked copy-on-write
US10346148B2 (en) Per request computer system instances
US20010009020A1 (en) Method and apparatus for providing seamless hooking and intercepting of selected kernel and hal exported entry points
US8166349B2 (en) Communicating with USB devices after a computer system crash
US9792136B2 (en) Hardware assisted inter hypervisor partition data transfers
US20080162764A1 (en) Processing method and processing device for a hardware interrupt
US8886862B2 (en) Virtualization of interrupts
US7581037B2 (en) Effecting a processor operating mode change to execute device code
WO2023179388A1 (en) Hot migration method for virtual machine instance
US20090307680A1 (en) Side-by-side driver installation
CN111209080A (en) Transparent transmission method for graphic processor
TW201027349A (en) Input-output virtualization technique
US20070033371A1 (en) Method and apparatus for establishing a cache footprint for shared processor logical partitions
US7934063B2 (en) Invoking externally assisted calls from an isolated environment
US20120136858A1 (en) Method to Coordinate Data Collection Among Multiple System Components
US7334233B2 (en) Method and apparatus for multiple slaves to receive data from multiple masters in a data processing system
US5797039A (en) Method of efficiently sending packets onto a network by eliminating an interrupt
US7664943B2 (en) Managing access to computer components

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
ASS Succession or assignment of patent right

Owner name: SUZHOU HIERSTAR LTD.

Free format text: FORMER OWNER: BEIJING TOPSENSE HIGH-TECH INFORMATION TECHNOLOGY CO., LTD.

Effective date: 20130607

C41 Transfer of patent application or patent right or utility model
COR Change of bibliographic data

Free format text: CORRECT: ADDRESS; FROM: 100085 HAIDIAN, BEIJING TO: 215200 SUZHOU, JIANGSU PROVINCE

TR01 Transfer of patent right

Effective date of registration: 20130607

Address after: 215200, Jiangsu, Wujiang, Wujiang Economic Development Zone, south of Yang Lian Road, east of Changan Road (Science and Technology Pioneer Park), Suzhou

Patentee after: HIERSTAR (SUZHOU)., Ltd.

Address before: 100085, room 306, North building, rainbow building, No. 11 information road, Beijing, Haidian District

Patentee before: Beijing Topsense Info-Tech Co.,Ltd.

PP01 Preservation of patent right

Effective date of registration: 20160711

Granted publication date: 20090204

RINS Preservation of patent right or utility model and its discharge
PD01 Discharge of preservation of patent

Date of cancellation: 20170711

Granted publication date: 20090204

PD01 Discharge of preservation of patent
TR01 Transfer of patent right

Effective date of registration: 20170926

Address after: 100085, Beijing, Haidian District on the road No. 11 Rainbow Building on the third floor

Patentee after: Beijing Topsense Info-Tech Co.,Ltd.

Address before: 215200, Jiangsu, Wujiang, Wujiang Economic Development Zone, south of Yang Lian Road, east of Changan Road (Science and Technology Pioneer Park), Suzhou

Patentee before: HIERSTAR (SUZHOU)., Ltd.

TR01 Transfer of patent right
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20090204

Termination date: 20210710