Summary of the invention
The object of the present invention is to provide a kind of method of writing in files data, the method for file reading data and device, by carrying out burst process to file data, slicing files data scatter is stored on local and server, thus make file data be difficult to intactly be stolen, the safety of safeguard file data to a great extent.
According to an aspect of the present invention, a kind of method of writing in files data is provided, comprises, perform following steps in computer systems, which: obtain the file write request comprising file identification and memory buffer regional address; According to the file data that described core buffer address acquisition will write; Described file data is partitioned into two or more data fragmentation; Predetermined partition in first fragment data write local disk of a part for the two or more data fragmentations be divided into will be comprised; Second fragment data of the remainder comprising the two or more data fragmentations be divided into is sent to server; The event memory of described second fragment data is received from described server; In the file that described file identification indicates, write the file storage data of data-bias value, burst size and the memory address comprising each data fragmentation, wherein, in described second fragment data, the memory location of each data fragmentation is the precalculated position on server.
According to a further aspect in the invention, a kind of method of file reading data is provided, comprises, perform following steps in computer systems, which: obtain the file read request comprising file identification; The file file reading indicated from described file identification stores data, described file storage data comprises the data-bias value of at least two data fragmentations, burst size and memory address, wherein, to the data fragmentation of memory address in the predetermined partition of local disk be comprised as the first fragment data, will the data fragmentation in memory address precalculated position on the server be comprised as the second fragment data; Corresponding first data fragmentation described first fragment data is read from described memory address respectively according to the data-bias value of each data fragmentation in described first fragment data, burst size and memory address; According to the data-bias value of each data fragmentation in described second fragment data, burst size and memory address to server request second fragment data; Described second fragment data is received from described server; Described file data is built in core buffer according to the file storage data read, the first fragment data of reading and the second fragment data of reception.
According to a further aspect in the invention, a kind of method of store file data is provided, comprises, perform following steps at server end: receive the fragment data comprising data fragmentation from client; Store the fragment data received; Event memory about described fragment data is sent to described client.
According to a further aspect in the invention, a kind of method providing file data is provided, comprises, perform following steps at server end: receive memory address and burst size from client; The fragment data of described burst size is read from described memory address; The fragment data of reading is sent to described client.
According to a further aspect in the invention, a kind of device for writing in files data is provided, comprises: write request receiving element, for obtaining the file write request comprising file identification and memory buffer regional address; File data acquiring unit, for the file data that will write according to described core buffer address acquisition; Data partitioning unit, for being partitioned into two or more data fragmentation by described file data; First fragment data storage unit, for the predetermined partition in the first fragment data write local disk of the part by comprising the two or more data fragmentations be divided into; Second fragment data storage unit, for the second fragment data of the remainder comprising the two or more data fragmentations be divided into is sent to server, and receives the event memory of described second fragment data from described server; File write unit, the file storage data of the data-bias value of each data fragmentation, burst size and memory address is comprised for write in the file that indicates at described file identification, wherein, in described second fragment data, the memory location of each data fragmentation is the precalculated position on server.
According to a further aspect in the invention, a kind of device of store file data is provided, comprises: fragment data receiving element, for receiving the fragment data comprising data fragmentation from client; Fragment data storage unit, for storing the fragment data of reception; Event memory transmitting element, for sending to described client by the event memory about described fragment data.
According to a further aspect in the invention, a kind of device of file reading data is provided, comprises: read requests receiving element, for obtaining the file read request comprising file identification; Document reading unit, file file reading for indicating from described file identification stores data, described file storage data comprises the data-bias value of at least two data fragmentations, burst size and memory address, wherein, to the data fragmentation of memory address in the predetermined partition of local disk be comprised as the first fragment data, will the data fragmentation in memory address precalculated position on the server be comprised as the second fragment data; First fragment data reading unit, reads corresponding first data fragmentation described first fragment data from described memory address respectively for the data-bias value according to each data fragmentation in described first fragment data, burst size and memory address; Second fragment data reading unit, for the data-bias value according to each data fragmentation in described second fragment data, burst size and memory address to server request second fragment data, and receives described second fragment data from described server; File data construction unit, for building described file data according to the file storage data read, the first fragment data of reading and the second fragment data of reception in core buffer.
According to a further aspect in the invention, a kind of device providing file data is provided, comprises: fragment data request reception unit, for receiving memory address and burst size from client; Fragment data reading unit, for reading the fragment data of described burst size from described memory address; Fragment data transmitting element, for sending to described client by the fragment data of reading.
Beneficial effect
The device comprising the file management methods such as file write, file reading and implement described method according to the present invention carries out burst process by file user write, a part is wherein stored in the predetermined partition of local disk, and another part is wherein stored on the server, all files data can be reduced by the possibility revealed; And the fragment data being stored in this locality is stored in the hidden partition of local disk, invisible to user, the security of file data can be improved.According to file management method of the present invention, by file is divided into two parts, and two parts dispersion is stored in the mode in local disk and another system, even if the situation of divulging a secret appears in certain computer, also cannot obtains complete file.
In addition, before burst process is performed to file data, can to described file data executive software or hardware encipher process, to guarantee the security of file data further.
Embodiment
Present general inventive concept of the present invention is, in computer systems, which, there is provided a kind of file management method: the file that user writes is carried out burst process, be divided into two parts, a part is wherein stored in the predetermined partition of local disk, and another part is wherein stored on the server, and the described two-part storage information of file is stored in the file that user will write; When user view reads the file data previously write in the foregoing manner, from the storage information being written to the file file reading that user indicates, read the partial document data in the predetermined partition of local disk according to described storage information and from server request storage another part file data on the server, then carry out the file data of the actual write of reconstructing user according to the partial document data of reading and another part file data of request.The predetermined partition of the described local disk for storing fragment data can be the hidden partition of pre-configured local disk, invisible to user, to improve the security of file data.According to file management method of the present invention, by file is divided into two parts, and two parts dispersion is stored in the mode in local disk and another system, even if the situation of divulging a secret appears in certain computer, also cannot obtains complete file.
In order to keep compatible with existing file management system, can at the inner nuclear layer of computer system using the form of driver component as the process entrance of file management method of the present invention, to catch the file write that upper strata drives and the request of reading at inner nuclear layer, after this can in process such as the reading of systematic difference layer execute file data, write, storage and reconstruct.In addition, before burst process is performed to file data, can to described file data executive software or hardware encipher process, to guarantee the security of file data further.Store and encryption by performing burst to file data, the generation of the event that can prevent file from divulging a secret to a great extent.
On this basis, also difference management can be performed to the file of user.Such as, the file operation blacklist of the information allowing the file operation white list of the information of the file carrying out burst storage or comprise the file not allowing burst to store can pre-configuredly be comprised.In this article, described file operation white list and file operation blacklist are referred to as file operation permissions data.When processing file write request, the file write request of reception is mated with the file operation permissions data prestored, to determine whether to allow burst store file data.For the file write allowing burst store file data, can continue to perform burst stores processor; And for not allowing the file of burst store file data to write, can according to the needs of file management, write described file data according to general document management mode at the Disk Locality of the file write request instruction received, or drive the information returning write error to prevent file copy directly to upper strata.Like this, can such as to being construed to the file of important information or forcing to carry out burst storage to the file of regulation write disk particular zones, or forbid carrying out burst store and management etc. to the file data of Application-Specific Processing operation.
Fig. 1 is the integrated stand composition of the file management method according to exemplary embodiment of the present invention.
With reference to Fig. 1, when the write of user's input requirements F: the instruction of 1.txt file time, the driver component 10 being positioned at system kernel layer catches the file write request bag driven from upper strata, described file write request bag can comprise file identification and memory buffer regional address, still can comprise initial write off-set value and write size of data.Operation 1 in FIG, described memory buffer regional address is passed to the documentor 20 of application layer by described driver component 10, and documentor 20 obtains the file data that will write according to described memory buffer regional address (and initial write off-set value and write size of data) and described file data is partitioned into two or more data fragmentation.In operation 3, documentor 20 by comprise a part for the two or more data fragmentations be divided into first fragment data write local disk in predetermined partition G:; In operation 4, the second fragment data of the remainder comprising the two or more data fragmentations be divided into is sent to server by documentor 20, and receives the event memory of described second fragment data from described server.After this, the file that documentor 20 indicates at described file identification F: in 1.txt write comprise the file storage data of the data-bias value of each data fragmentation, burst size and memory address, wherein, in described second fragment data, the memory location of each data fragmentation is the precalculated position on server.
On the other hand, when user's input requirements read F: the instruction of 1.txt file time, the driver component 10 being positioned at system kernel layer catches the file read request bag driven from upper strata, described file read request bag can comprise file identification, also can comprise start read offset value further and read size of data.Operation 1 in FIG, described file identification (and start read offset value and read size of data) is passed to the documentor 20 of application layer by described driver component 10.In operation 2, the file that documentor 20 indicates from described file identification F: 1.txt file reading store data, described file storage data comprises the data-bias value of at least two data fragmentations, burst size and memory address, wherein, to the data fragmentation of memory address in the predetermined partition of local disk be comprised as the first fragment data, will the data fragmentation in memory address precalculated position on the server be comprised as the second fragment data.In operation 3, documentor 20 reads corresponding first data fragmentation described first fragment data from described memory address respectively according to the data-bias value of each data fragmentation in described first fragment data, burst size and memory address; In operation 4, documentor 20 to server request second fragment data, and receives described second fragment data from described server according to the data-bias value of each data fragmentation in described second fragment data, burst size and memory address.After this, documentor 20 according to the file storage data read in operation 2, operation 3 read the first fragment data and operation 4 receive the second fragment data build described file data in core buffer.
Fig. 2 is the schematic diagram stored according to the file fragmentation of exemplary embodiment of the present invention.
With reference to Fig. 2, user use word.exe editing files data and the file data of editor is stored as F: 1.txt.Through aforesaid file write process, the first fragment data is stored as G: on file a, and the second fragment data is stored as file b by precalculated position on the server.According to the size of file data, can be also two or more files by the first fragment data and the second fragment data distributed store.
Fig. 3 is the process flow diagram of the method for writing in files data according to exemplary embodiment of the present invention.
With reference to Fig. 3, in step S310, obtain the file write request comprising file identification and memory buffer regional address.Described file identification comprises file path and file name.According to an alternative embodiment of the invention, described file write request also can comprise the initial write off-set value in file data further and write size of data, divides the write of file data with enforcement division.
In step S320, according to the file data that described core buffer address acquisition will write.According to an alternative embodiment of the invention, in step S320, the initial write off-set value that can be obtained from memory buffer regional address according to described memory buffer regional address, initial write off-set value and write size of data plays the data of said write size of data as the described file data that will write, to read the partial document data of specifying and will write.
In step S330, described file data is partitioned into two or more data fragmentation.Here, simply described file data can be divided into two, also as required described file data can be divided into two or more equal and opposite in direction or data fragmentation not etc.
In step S340, the predetermined partition in the first fragment data write local disk of a part for the two or more data fragmentations be divided into will be comprised.According to a preferred embodiment of the invention, the predetermined partition of described local disk is the hidden partition separated in local disk, thus user directly cannot obtain described first fragment data, to improve data security.
In step S350, the second fragment data of the remainder comprising the two or more data fragmentations be divided into is sent to server.
In step S360, receive the event memory of described second fragment data from described server.The event memory of described second fragment data can comprise the memory location of the file storing described second fragment data.
In step S370, in the file that described file identification indicates, write the file storage data of data-bias value, burst size and the memory address comprising each data fragmentation.Wherein, in described second fragment data, the memory location of each data fragmentation can be the precalculated position on server, also can be the memory location that the server obtained from the event memory of described second fragment data received stores the file of described second fragment data.Memory location mentioned here can be the logical place of the file for storing described fragment data, as the file path in file system and file name.
In order to keep and the compatibility of existing file way to manage and the leakage-preventing management supporting the different levels to file, the pre-configured file operation permissions data comprising the information of the file allowing the information of the file carrying out burst storage or do not allow burst to store.Described allow the information of the file carrying out burst storage to comprise to allow the information of the file type of carrying out burst storage and allow to carry out burst storage the disk partition of file place information at least one; The information of the described file not allowing burst to store can comprise the information of the file type not allowing burst to store and not allow at least one in the information of the process of burst storage file to it.
Before execution step S320 or S330, the file write request of reception is mated with the file operation permissions data prestored, to determine whether to allow burst store file data.If determine to allow burst store file data according to mating of described file operation permissions data, then continue to perform step S330 ~ 370.
If determine not allow burst store file data according to mating of described file operation permissions data, the information returning write error is then driven to upper strata, to prevent unwarranted file copy, or according to common file writing mode, write described file data at the Disk Locality of the file write request instruction received.
According to a preferred embodiment of the invention, in order to improve the security of file data further, before execution step S330, the file data obtained in step S320 is encrypted, and in step S370, also write for the information by described file data encrypt/decrypt in the file that described file identification indicates.
According to a preferred embodiment of the invention, in step S310, catch the described file write request driven from upper strata at system kernel layer, perform step S320 ~ S370 at systematic difference layer, and the pointer of file that described file identification also indicates by system kernel layer returns to upper strata drives.Fig. 4 is the process flow diagram of the method for store file data according to exemplary embodiment of the present invention.
With reference to Fig. 4, in step S410, receive the fragment data comprising data fragmentation from client.
In step S420, store the fragment data received.In precalculated position, the fragment data of described reception can be stored as file.
In step S430, the event memory about described fragment data is sent to described client.According to an alternative embodiment of the invention, the described event memory about described fragment data comprises the memory location of the file storing described fragment data.
Fig. 5 be according to the file reading data of exemplary embodiment of the present invention the process flow diagram of method.
With reference to Fig. 5, in step S510, obtain the file read request comprising file identification.Described file identification can comprise file path and file name.According to an alternative embodiment of the invention, described file read request also can comprise the start read offset value in described file data and read size of data.
In step S520, the file file reading indicated from described file identification stores data, described file storage data comprises the data-bias value of at least two data fragmentations, burst size and memory address, wherein, to the data fragmentation of memory address in the predetermined partition of local disk be comprised as the first fragment data, will the data fragmentation in memory address precalculated position on the server be comprised as the second fragment data.According to a preferred embodiment of the invention, the predetermined partition of described local disk is the hidden partition separated in local disk.
In step S530, read corresponding first data fragmentation described first fragment data from described memory address respectively according to the data-bias value of each data fragmentation in described first fragment data, burst size and memory address.
In step S540, according to the data-bias value of each data fragmentation in described second fragment data, burst size and memory address to server request second fragment data, be specially, the size of the memory address of the second fragment data and the second fragment data is sent to server, the size of described second fragment data be the burst size of each data fragmentation in the second fragment data and.
In step S550, receive described second fragment data from described server.
In step S560, build described file data according to the file storage data read, the first fragment data of reading and the second fragment data of reception in core buffer.If the described file read request obtained in step S510 also can comprise the start read offset value in described file data and read size of data, then in step S560, build the file data of described reading size of data from start read offset value in core buffer according to the file storage data read, the first fragment data of reading and the second fragment data of reception.
According to an alternative embodiment of the invention, before execution step S520, the file read request of reception is mated with the file operation permissions data prestored, to determine whether to need burst to assemble file data.Described file operation permissions data comprises the information allowing the information of the file carrying out burst storage or do not allow the file carrying out burst storage.Described allow the information of the file carrying out burst storage to comprise to allow the information of the file type of carrying out burst storage and allow to carry out burst storage the disk partition of file place information at least one, the information of the described file not allowing burst to store comprises the information of the file type not allowing burst to store and does not allow at least one in the information of the process of burst storage file to it.If determine to need burst to assemble file data, then continue to perform the operation that the file file reading indicated from described file identification stores data; If determine not need burst to assemble file data, then read described file data at the Disk Locality of the file identification instruction received.
According to a preferred embodiment of the invention, also with for the information by described file data encrypt/decrypt in the file of described file identification instruction, and structure described file data after, use described by the information of described file data encrypt/decrypt by described decrypt file data.
According to a preferred embodiment of the invention, step S510, the file read request driven from upper strata is caught at system kernel layer, perform step S520 ~ S560 at systematic difference layer, and described file data is also returned to upper strata driving by system kernel layer in the address of core buffer and the size of described file data.
Fig. 6 is the process flow diagram providing the method for file data according to exemplary embodiment of the present invention.
With reference to Fig. 6, in step S610, receive memory address and burst size from client.
In step S620, read the fragment data of described burst size from described memory address.Such as, the fragment data of described burst size is read from the file being stored in described memory address.
In step S630, the fragment data of reading is sent to described client.
Fig. 7 is the logic diagram of the device of writing in files data according to exemplary embodiment of the present invention.
With reference to Fig. 7, comprise write request receiving element 710, file data acquiring unit 720, data partitioning unit 730, first fragment data storage unit 740, second fragment data storage unit 750 and File write unit 760 according to the device of the writing in files data of exemplary embodiment of the present invention.
Write request receiving element 710 comprises the file write request of file identification and memory buffer regional address for obtaining.Described file identification comprises file path and file name.According to an alternative embodiment of the invention, described file write request also can comprise the initial write off-set value in file data further and write size of data, divides the write of file data with enforcement division.
The file data of file data acquiring unit 720 for writing according to described core buffer address acquisition.According to an alternative embodiment of the invention, the initial write off-set value that file data acquiring unit 720 can be obtained from memory buffer regional address according to described memory buffer regional address, initial write off-set value and write size of data plays the data of said write size of data as the described file data that will write, to read the partial document data of specifying and will write.
Data partitioning unit 730 is for being partitioned into two or more data fragmentation by described file data.
First fragment data storage unit 740 is for the predetermined partition in the first fragment data write local disk of the part by comprising two or more data fragmentations that data partitioning unit 730 is divided into.Predetermined partition in described local disk is the hidden partition separated in local disk.
Second fragment data storage unit 750 for the second fragment data of the remainder comprising the two or more data fragmentations be divided into is sent to server, and receives the event memory of described second fragment data from described server.The event memory of described second fragment data can comprise the memory location of the file storing described second fragment data.
File write unit 760 comprises the file storage data of the data-bias value of each data fragmentation, burst size and memory address for write in the file that indicates at described file identification, wherein, in described second fragment data, the memory location of each data fragmentation is the precalculated position on server.Also can be the memory location that the server obtained from the event memory of described second fragment data received stores the file of described second fragment data.
According to a preferred embodiment of the invention, described data partitioning unit 730 is before being partitioned into two or more data fragmentation by described file data, the file write request of reception is mated with the file operation permissions data prestored, to determine whether to allow burst store file data, described file operation permissions data comprises the information of the file allowing the information of the file carrying out burst storage or do not allow burst to store.Described allow the information of the file carrying out burst storage to comprise to allow the information of the file type of carrying out burst storage and allow to carry out burst storage the disk partition of file place information at least one, the information of the described file not allowing burst to store can comprise the information of the file type not allowing burst to store and not allow at least one in the information of the process of burst storage file to it.
If described data partitioning unit 730 is determined to allow burst store file data according to mating of described file operation permissions data, then described data partitioning unit continuation performs and described file data is partitioned into two or more data fragmentation, and the first fragment data storage unit 740, second fragment data storage unit 750 and File write unit 760 can continue the write process performing data storage and file storage data; If described data partitioning unit 730 is determined not allow burst store file data according to mating of described file operation permissions data, then described data partitioning unit 730 drives the information returning write error to upper strata, or File write unit 760 writes described file data at the Disk Locality of the file write request instruction received.
According to a preferred embodiment of the invention, the device of said write file data also comprises DEU data encryption unit (not shown), described DEU data encryption unit is used for before described file data is partitioned into two or more data fragmentation by described data partitioning unit, is encrypted by described file data.According to another preferred embodiment of the invention, also write for the information by described file data encrypt/decrypt in the file that File write unit 760 indicates at described file identification, wherein, described DEU data encryption unit uses the described information by described file data encrypt/decrypt to be encrypted by described file data by during described file data encryption.
According to a preferred embodiment of the invention, write request receiving element 710 catches the described file write request driven from upper strata at system kernel layer; File data acquiring unit 720, DEU data encryption unit (if any), data partitioning unit 730, first fragment data storage unit 740, second fragment data storage unit 750 and File write unit 760 perform at systematic difference layer.
According to a preferred embodiment of the invention, described device is also included in the write request response unit of system kernel layer, and the pointer that said write request-response unit is used for the file indicated by described file identification after described File write unit 760 is complete returns to upper strata driving.
Fig. 8 is the logic diagram of the device of store file data according to exemplary embodiment of the present invention.
With reference to Fig. 8, comprise fragment data receiving element 810, fragment data storage unit 820 and event memory transmitting element 830 according to the device of the store file data of exemplary embodiment of the present invention.
Fragment data receiving element 810 is for receiving the fragment data comprising data fragmentation from client.
Fragment data storage unit 820 is for storing the fragment data of reception.According to the specified embodiment of the present invention, the fragment data of described reception is stored as file in precalculated position by fragment data storage unit 820.
Event memory transmitting element 830 is for sending to described client by the event memory about described fragment data.The described event memory about described fragment data can comprise the memory location of the file storing described fragment data.
Fig. 9 is the logic diagram of the device of file reading data according to exemplary embodiment of the present invention.
With reference to Fig. 9, comprise read requests receiving element 910, document reading unit 920, first fragment data reading unit 930, second fragment data reading unit 940 and file data construction unit 950 according to the device of the file reading data of exemplary embodiment of the present invention.
Read requests receiving element 910 comprises the file read request of file identification for obtaining.Described file identification can comprise file path and file name.
Document reading unit 920 stores data for the file file reading indicated from described file identification, described file storage data comprises the data-bias value of at least two data fragmentations, burst size and memory address, wherein, to the data fragmentation of memory address in the predetermined partition of local disk be comprised as the first fragment data, will the data fragmentation in memory address precalculated position on the server be comprised as the second fragment data.According to a preferred embodiment of the invention, the predetermined partition of described local disk is the hidden partition separated in local disk.
First fragment data reading unit 930 reads corresponding first data fragmentation described first fragment data from described memory address respectively for the data-bias value according to each data fragmentation in described first fragment data, burst size and memory address.
Second fragment data reading unit 940 to server request second fragment data, and receives described second fragment data from described server for the data-bias value according to each data fragmentation in described second fragment data, burst size and memory address.
File data construction unit 950 is for building described file data according to the file storage data read, the first fragment data of reading and the second fragment data of reception in core buffer.
According to an alternative embodiment of the invention, the described file read request received also comprises the start read offset value in described file data and reads size of data, and described file data construction unit 950 is for building the file data of described reading size of data from start read offset value in core buffer according to the file storage data read, the first fragment data of reading and the second fragment data of reception.
According to a preferred embodiment of the invention, after read requests receiving element 910 acquisition comprises the file read request of file identification, the file read request of reception also mates with the file operation permissions data prestored by document reading unit 920, to determine whether to need burst to assemble file data, described file operation permissions data comprises the information allowing the information of the file carrying out burst storage or do not allow the file carrying out burst storage.Described allow the information of the file carrying out burst storage to comprise to allow the information of the file type of carrying out burst storage and allow to carry out burst storage the disk partition of file place information at least one, the information of the described file not allowing burst to store can comprise the information of the file type not allowing burst to store and not allow at least one in the information of the process of burst storage file to it.
If document reading unit 920 is determined to need burst to assemble file data, then the file file reading that document reading unit 920 indicates from described file identification stores data; If document reading unit 920 is determined not need burst to assemble file data, then document reading unit 920 reads described file data at the Disk Locality of the file identification instruction received.
According to a preferred embodiment of the invention, described device also comprises data decryption unit (not shown), and described data decryption unit is used for the described decrypt file data built file data construction unit.According to another preferred embodiment of the invention, also read for the information by described file data encrypt/decrypt in the file that document reading unit 920 indicates at described file identification, wherein, described data decryption unit use described by the information of described file data encrypt/decrypt by described decrypt file data.
According to a preferred embodiment of the invention, read requests receiving element 910 catches the file read request driven from upper strata at system kernel layer, document reading unit 920, first fragment data reading unit 930, second fragment data reading unit 940 and file data construction unit 950 perform at systematic difference layer; Described device also comprises: at the read requests response unit of system kernel layer, and described read requests response unit is used for described file data being returned to upper strata in the address of core buffer and the size of described file data and drives.
Figure 10 is the logic diagram providing the device of file data according to exemplary embodiment of the present invention.
With reference to Figure 10, described in provide the device of file data to comprise: fragment data request reception unit 1010, fragment data reading unit 1020 and fragment data transmitting element 1030.
Fragment data request reception unit 1010 is for receiving memory address and burst size from client.
Fragment data reading unit 1020 is for reading the fragment data of described burst size from described memory address.Such as, fragment data reading unit 1020 can read the fragment data of described burst size from the file being stored in described memory address.
Fragment data transmitting element 1030 is for sending to described client by the fragment data of reading.
The device comprising the file management methods such as file write, file reading and implement described method according to the present invention carries out burst process by file user write, a part is wherein stored in the predetermined partition of local disk, and another part is wherein stored on the server, all files data can be reduced by the possibility revealed; And the fragment data being stored in this locality is stored in the hidden partition of local disk, invisible to user, the security of file data can be improved.According to file management method of the present invention, by file is divided into two parts, and two parts dispersion is stored in the mode in local disk and another system, even if the situation of divulging a secret appears in certain computer, also cannot obtains complete file.
In addition, before burst process is performed to file data, can to described file data executive software or hardware encipher process, to guarantee the security of file data further.
On this basis, mated with file operation permissions data by the fileinfo that will write/read, also can perform difference management to the file of user, can such as to being construed to the file of important information or forcing to carry out burst storage to the file of regulation write disk particular zones, or forbid carrying out burst store and management etc. to the file data of Application-Specific Processing operation.
The above; be only the specific embodiment of the present invention, but protection scope of the present invention is not limited thereto, is anyly familiar with those skilled in the art in the technical scope that the present invention discloses; change can be expected easily or replace, all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection domain of described claim.