CN104298930B - Move media and its e-file guiding circulation track tracking and system in LAN - Google Patents
Move media and its e-file guiding circulation track tracking and system in LAN Download PDFInfo
- Publication number
- CN104298930B CN104298930B CN201410471666.5A CN201410471666A CN104298930B CN 104298930 B CN104298930 B CN 104298930B CN 201410471666 A CN201410471666 A CN 201410471666A CN 104298930 B CN104298930 B CN 104298930B
- Authority
- CN
- China
- Prior art keywords
- file
- move media
- security level
- lan
- circulation track
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 claims abstract description 21
- 238000005516 engineering process Methods 0.000 claims description 15
- 238000001914 filtration Methods 0.000 claims description 5
- 238000004364 calculation method Methods 0.000 claims description 2
- 230000000007 visual effect Effects 0.000 abstract description 3
- 238000012800 visualization Methods 0.000 description 6
- 230000006870 function Effects 0.000 description 4
- 230000008859 change Effects 0.000 description 3
- 238000010586 diagram Methods 0.000 description 3
- 239000002585 base Substances 0.000 description 2
- 230000008901 benefit Effects 0.000 description 2
- 230000000694 effects Effects 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- GOLXNESZZPUPJE-UHFFFAOYSA-N spiromesifen Chemical compound CC1=CC(C)=CC(C)=C1C(C(O1)=O)=C(OC(=O)CC(C)(C)C)C11CCCC1 GOLXNESZZPUPJE-UHFFFAOYSA-N 0.000 description 2
- 238000004458 analytical method Methods 0.000 description 1
- 238000012550 audit Methods 0.000 description 1
- 239000003637 basic solution Substances 0.000 description 1
- 230000006399 behavior Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000007613 environmental effect Effects 0.000 description 1
- 238000011835 investigation Methods 0.000 description 1
- 239000000463 material Substances 0.000 description 1
- 230000015654 memory Effects 0.000 description 1
- 230000003362 replicative effect Effects 0.000 description 1
- 238000012163 sequencing technique Methods 0.000 description 1
- 238000010008 shearing Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000007704 transition Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/16—Program or content traceability, e.g. by watermarking
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- General Health & Medical Sciences (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- Multimedia (AREA)
- Technology Law (AREA)
- Storage Device Security (AREA)
Abstract
The invention provides move media in a kind of LAN and its e-file guiding circulation track tracking and system, this method to include：S1：The move media of identification access computer, obtains the device identification of move media and the information of current computer；S2：User thread is captured to the operation requests of e-file in the move media, effective operation requests according to corresponding to the security level identification of e-file in move media is chosen at the security level identification in extent of competence；S3：Corresponding operating is carried out to e-file in move media according to effective operation requests, and records the specifying information of the operation in real time；S4：Combining geographic information system GIS establishes dynamic electronic document guiding circulation track trace model in LAN, medium and its tracking of e-file guiding circulation track are moved in the dynamic electronic document guiding circulation track trace model according to the device identification of move media, realizes the visual control of e-file guiding circulation track in LAN.
Description
Technical field
The present invention relates to electronic information technical field, more particularly to a kind of LAN based on visualization tool GIS technology
Interior move media and its e-file guiding circulation track tracking and system.
Background technology
In recent years, information security issue turns into focus of concern, and the investigation result of authoritative institution is shown：More than 85%
Security threat come from enterprises, and as movable storage device (such as USB flash disk, mobile hard disk, the mobile CD ROM of substitution floppy disk
Deng), because using flexible, the features such as facilitating, popularized rapidly during IT application in enterprises, while be also that concerning security matters calculate
A kind of important move media that machine information exchanges.Increasing sensitive information, secret data and archives material are stored in
In move media, sizable potential safety hazard is brought to Enterprise Information Resources.
For above- mentioned information potential safety hazard, in the prior art there is also many safeguard procedures, such as encrypt or utilize existing
Technology is controlled to the access rights of important e-file, and these can effectively prevent unrestricted using the risk brought.
But the situation of information leakage, Er Qieyi are encrypted or its access rights are controlled or occurred to important e-file
Denier is revealed, and the e-file at what time, has carried out such as replicating, change and pasting operation in which platform computer, these letters
Breath can not all obtain, and can not also see whether that unauthorized person or program have carried out unauthorized operation to vital document, it is clear that
File encryption does not make problem obtain basic solution.How the guiding circulation track of move media and its e-file is realized
Tracking, the specifying information that record operates to vital document in move media in real time, such as：The information of important e-file, accessed
The information of computer, the time of move media access etc., turns into the important safeguard procedures for solving information security hidden danger.
The content of the invention
In order to solve the above technical problems, the present invention provides move media and its e-file guiding circulation track in a kind of LAN
Tracking and system, the specifying information that record operates to e-file in move media in real time, realize to move media and its
The visualization tracking of e-file guiding circulation track.
Move media and its e-file guiding circulation track tracking and system in a kind of LAN provided by the invention, bag
Include：
S1：The move media of identification access computer, obtains the device identification of move media and the information of current computer；
S2：Utilize operation of the file system filter driver technology capture user thread to e-file in the move media
Request, it is effective in extent of competence according to corresponding to the security level identification of e-file in move media is chosen at the security level identification
Operation requests；
S3：Corresponding operating is carried out to e-file in the move media according to the effectively operation requests, and remembered in real time
Record the specifying information of the operation；
S4：Combining geographic information system GIS establishes dynamic electronic document guiding circulation track trace model in LAN, according to
The device identification of move media moves medium and its electronics text in the dynamic electronic document guiding circulation track trace model
Part guiding circulation track tracks.
Wherein, this method also includes：
The operation according to corresponding to the grade of the security level identification sets different grades of security level identification according to default rule
Authority.
Wherein, the step S1 is specifically included：
Detect whether that move media accesses current computer in real time；
The move media for accessing current computer is identified；
Obtain access current computer move media device identification and current computer in LAN physically
Location, user name and system time.
Wherein, the device identification of the move media includes：
Usb protocol version number used in equipment, device type, the most large packet size of end points 0, vendor id, product IDs and
Device version number.
Wherein, also include before the step S2：
When user thread sends operation requests, call corresponding service request to represent the person of sending of the operation requests and enter
Row I/O is asked；
It is configured to describe the input/output request bag IRP of the I/O requests；
Send the input/output request bag to file system filter driver.
Wherein, the step S2 is specifically included：
The input/output request bag is parsed, obtaining operation of the user thread to e-file in the move media please
Ask；
Judge the operation requests whether in the security level identification pair according to the security level identification of e-file in move media
In the extent of competence answered；
If the input/output request bag is effective operation requests；
The effectively input/output request bag corresponding to operation requests is sent to file system driver.
Wherein, when the operation requests are not when corresponding to the security level identification in extent of competence, in addition to：
To not recorded in the operation requests corresponding to the security level identification in extent of competence.
Wherein, the step S4 is specifically included：
Obtain the spatial information of the LAN and corresponding attribute information；
Dynamic is established in LAN using Distribution GIS according to the spatial information and corresponding attribute information
E-file guiding circulation track trace model；
The move media and its e-file are obtained in the dynamic electron according to the device identification of move media in real time
Physical location in restoring files track following model is simultaneously marked, realize move media and its e-file guiding circulation track with
Track.
Present invention also offers move media in a kind of LAN and its e-file guiding circulation track tracking system, the system
Including：
Identifier acquisition module, for identifying the move media of access computer, obtain the device identification of move media and work as
The information of preceding computer；
Filtering module, for capturing user thread to electronics in the move media using file system filter driver technology
The operation requests of file, the authority model according to corresponding to the security level identification of e-file in move media is chosen at the security level identification
Enclose interior effective operation requests；
Operation record module is corresponding for being carried out according to the effectively operation requests to e-file in the move media
Operation, and the specifying information of the operation is recorded in real time；
Guiding circulation track tracking module, dynamic electronic document stream is established in LAN for combining geographic information system GIS
Transition mark trace model, is carried out according to the device identification of move media in the dynamic electronic document guiding circulation track trace model
Move media and its tracking of e-file guiding circulation track.
Wherein, the system also includes：
Authority setting module, it is different grades of close for being set according to default rule according to the grade of the security level identification
Operating right corresponding to level mark.
(3) beneficial effect
Move media and its e-file guiding circulation track tracking and system, base in a kind of LAN provided by the invention
In move media Access Control Policy, with reference to file system filter driver technology, inside move media and its move media
The concrete operations of important e-file and flow trace are recorded in real time, and establish dynamic electronic document stream with reference to GIS map
Turn Trajectory Tracking System model, realize the visual control of e-file guiding circulation track in LAN.
Brief description of the drawings
The features and advantages of the present invention can be more clearly understood by reference to accompanying drawing, accompanying drawing is schematically without that should manage
Solve to carry out any restrictions to the present invention, in the accompanying drawings：
Fig. 1 is move media and its tracking of e-file guiding circulation track in a kind of LAN of the offer of the embodiment of the present invention one
The flow chart of method；
Fig. 2 is move media and its tracking of e-file guiding circulation track in a kind of LAN of the offer of the embodiment of the present invention one
The operational effect schematic diagram of method practical application；
Fig. 3 is move media and its tracking of e-file guiding circulation track in a kind of LAN of the offer of the embodiment of the present invention two
The module map of system.
Embodiment
To make the purpose, technical scheme and advantage of the embodiment of the present invention clearer, below in conjunction with the embodiment of the present invention
In accompanying drawing, the technical scheme in the embodiment of the present invention is clearly and completely described, it is clear that described embodiment is
Part of the embodiment of the present invention, rather than whole embodiments.Based on the embodiment in the present invention, those of ordinary skill in the art
The every other embodiment obtained under the premise of creative work is not made, belongs to the scope of protection of the invention.
The present invention utilizes move media Access Control, file system filter driver technology and the audit of e-file physical location
And track following technology, with reference to visualization tool Distribution GIS (Geographic Information System or
Geo-Informationsystem).On the one hand, can be to move media and its internal weight using circulation technology from secure context
The concrete operations and flow trace for wanting electronic security level identification file are recorded, if it find that the important e-file of certain security level identification
Go wrong, we can be checked according to the data of record.On the other hand visualization is realized, by the data and note of acquisition
Record, such as move media and its internal important e-file have all accessed which computer, and time, all pass through GIS map
Display.It is implemented in combination with by both sides above to move media and its visualization tracking of e-file guiding circulation track.
Distribution GIS is a kind of specific highly important space information system.It is in computer hardware and software
Under system is supported, the relevant geographic distribution data in space is acquired, stored, is managed, computing, analyzes, be shown and described
Technological system.GIS has powerful space computing capability and very intuitively graphical representations form, is widely used to
Military affairs, public security, environmental protection, urban planning, great convenience is brought to our live and work.
Fig. 1 is move media and its tracking of e-file guiding circulation track in a kind of LAN of the offer of the embodiment of the present invention one
The flow chart of method, as shown in figure 1, this method comprises the following steps：
S1：The move media of identification access computer, obtains the device identification of move media and the information of current computer；
S2：Utilize operation of the file system filter driver technology capture user thread to e-file in the move media
Request, it is effective in extent of competence according to corresponding to the security level identification of e-file in move media is chosen at the security level identification
Operation requests；
S3：Corresponding operating is carried out to e-file in the move media according to the effectively operation requests, and remembered in real time
Record the specifying information of the operation；
S4：Combining geographic information system GIS establishes dynamic electronic document guiding circulation track trace model in LAN, according to
The device identification of move media moves medium and its electronics text in the dynamic electronic document guiding circulation track trace model
Part guiding circulation track tracks.
Further, this method also includes：It is different etc. according to the setting of the grade of the security level identification according to default rule
Operating right corresponding to the security level identification of level.
Below by taking USB flash disk as an example, to move media in a kind of LAN for being proposed in the present embodiment of the present invention and its electronics text
Part guiding circulation track tracking carries out detailed explanation, and described embodiment is only part of the embodiment of the present invention, and
The embodiment being not all of, the present disclosure applies equally to the mobile device that other have store function.
In embodiments of the present invention, according to practical application request, several computers is randomly selected and form a LAN,
The e-file of different privacy levels is stored in USB flash disk, including：Without level of confidentiality, secret, secret and top secret etc., in important e-file
On do security level identification, security level identification must not separate with e-file, the computer that the random access of USB flash disk is chosen.
Further, step S1 is specifically included：
Detect whether that move media accesses current computer in real time；The move media for accessing current computer is known
Not；Obtain the physical address in LAN of device identification and current computer of the move media of access current computer, use
Name in an account book and system time.Wherein, the device identification of the move media includes：Usb protocol version number used in equipment, set
Standby type, vendor id, product IDs and device version number.
Each USB device only has unique device descriptor, and the information of device descriptor essential record has equipment to be made
Usb protocol version number, device type, vendor id (VID), product IDs (PID), device version number etc..Computer is detecting
After being inserted to USB flash disk, equipment is enumerated, detailed process is that first equipment is resetted, device address 0, and computer obtains
The device descriptor of one packet, then resets again to equipment, resets address again, obtains equipment description again
Symbol, this time obtain the device descriptor of 18 whole bytes.
In the embodiment of the present invention, the move media for accessing computer is known using move media Access Control Policy
Not, concrete operations principle is that the application program on backstage detects the move media different from common hard disc in computer, and obtains shifting
The device identification of dynamic medium, usb protocol version number, device type, vendor id, product IDs and device version as used in equipment
Number, also by the information of access computer, such as physical address, computer user, time.
Further, also include before step S2：When user thread sends operation requests, call corresponding service please
The person of sending for representing the operation requests is asked to carry out I/O requests；It is configured to describe the input/output request of the I/O requests
Wrap IRP；Send the input/output request bag to file system filter driver.
In the embodiment of the present invention, important e-file is stored in the USB flash disk of selection, if it is modified or other behaviour
Make, when sending this request, system calls corresponding service request to go to represent this request person of sending to ask to operate, at this moment,
CPU is converted into core schema level of privilege, I/O managers construct an input/output request bag (I/O request package,
IRP) asked to describe this I/O, and send input/output request bag IRP to file system filter drivers.
Further, the step S2 is specifically included：The input/output request bag is parsed, obtains user thread to institute
State the operation requests of e-file in move media；Judge that the operation please according to the security level identification of e-file in move media
Seeking Truth is no corresponding to the security level identification in extent of competence；If please for effectively operation in, the input/output request bag
Ask；The effectively input/output request bag corresponding to operation requests is sent to file system driver.
In the embodiment of the present invention, after file system filter driver receives input/output request bag IRP, it is solved
Analysis obtains operation requests of the user thread to e-file in the move media, for being added with security level identification in move media
E-file, using file system filter driver technology, according to judging the security level identification of e-file in move media
Whether operation requests are corresponding to the security level identification in extent of competence, if will input corresponding to the operation requests/defeated
Go out under request bag to pass to file system driver, subsequent treatment is done in storage device driving, low layer driving be disposed after result
Return to the application process for sending request.
Wherein, filtration drive is a kind of kernel mode driver, and it intercepts the request to bottom layer driving device object, and it is can
Extension, it is often more important that, no matter whether current New function can use, and it can allow to increase New function, and filtration drive being capable of profit
It can also be provided with the initial target driving offer service of I/O requests using other users service or core schema software new
Increased function.File system filter driver is it can be seen that all requests of file system, to specified file, file or whole
Individual logical volume is protected, and file system filter driver is handled accordingly after receiving IRP, such as whether allow to open, read,
Copy, paste, shearing, save as, capture the operation to file, and it is filtered, it is allowed to or forbid, then will
IRP is transmitted to file system driver, is returned again to after being disposed to application program, thus to the access rights of important e-file
Control is made that, it is very clear to the mobile content for accessing storage medium, its dynamic is apparent from, so as to accomplish to supervise safely
Control.In addition, system can assign different authorities according to the different brackets of vital document security level identification, if exceeding authority, can forbid
Operation, is such as sheared, the operation can be prohibited to topsecret papers.
Further, when the operation requests are not when corresponding to the security level identification in extent of competence, in addition to：To not
Recorded in the operation requests corresponding to the security level identification in extent of competence.
Further, step S4 is specifically included：Obtain the spatial information of the LAN and corresponding attribute information；According to
The spatial information and corresponding attribute information establish dynamic electronic document circulation using Distribution GIS in LAN
Track following model；The move media and its e-file are obtained in the dynamic according to the device identification of move media in real time
Physical location in e-file guiding circulation track trace model is simultaneously marked, and realizes move media and its e-file circulation rail
Mark tracks.
The device identifier of move media is all unique, by the tracking to the device identifier, obtains move media
And its physical location and guiding circulation track of internal important e-file.So if vital document is asked in certain move media
Topic, the guiding circulation track of move media, records which computer the move media accessed where we can inquire about this document, this
Sample can reduce the scope solved the problems, such as.
In the embodiment of the present invention, using Distribution GIS map, it is established that dynamic electronic document guiding circulation track tracks
System model, the visualization of e-file circulation in local area network is completed, more intuitively shows e-file in move media
Flow trace.
In order to realize the combination of system and Distribution GIS module, this research is completed using ArcGIS series of products
The issue showed with map datum of geographic information environment.Background application is run, for each meter for having access with USB flash disk
Calculation machine can be all shown in GIS map in the form of colored circle, map can arbitrarily show the quantity that receives data and
The details that move media accesses with computer every time, operational effect schematic diagram is formed, as shown in Fig. 2 for being shown in figure
USB flash disk information, listed according to time sequencing, and then will be seen that the flow trace of USB flash disk and its interior important e-file.
Fig. 3 is move media and its tracking of e-file guiding circulation track in a kind of LAN of the offer of the embodiment of the present invention two
The module map of system, as shown in figure 3, the system includes：
Identifier acquisition module 101, for identify access computer move media, obtain move media device identification and
The information of current computer；
Filtering module 102, for capturing user thread in the move media using file system filter driver technology
The operation requests of e-file, the power according to corresponding to the security level identification of e-file in move media is chosen at the security level identification
Effective operation requests in the range of limit；
Operation record module 103, for being carried out according to the effectively operation requests to e-file in the move media
Corresponding operating, and the specifying information of the operation is recorded in real time；
Guiding circulation track tracking module 104, dynamic electronic document is established in LAN for combining geographic information system GIS
Guiding circulation track trace model, entered according to the device identification of move media in the dynamic electronic document guiding circulation track trace model
Row move media and its tracking of e-file guiding circulation track.
Wherein, the system also includes：
Authority setting module, it is different grades of close for being set according to default rule according to the grade of the security level identification
Operating right corresponding to level mark.
Utilize move media in LAN proposed by the present invention and its e-file guiding circulation track tracking and system, base
In move media Access Control Policy, with reference to file system filter driver technology, to the weight inside move media and move media
The concrete operations and flow trace for wanting e-file are recorded in real time, and establish dynamic electronic document circulation with reference to GIS map
Trajectory Tracking System model, realize the visual control of e-file guiding circulation track in LAN.
Through the above description of the embodiments, those skilled in the art can be understood that the present invention can lead to
Hardware realization is crossed, the mode of necessary general hardware platform can also be added by software to realize.Based on such understanding, this hair
Bright technical scheme can be embodied in the form of software product, and the software product can be stored in a non-volatile memories
In medium (can be CD-ROM, USB flash disk, mobile hard disk etc.), including some instructions are causing a computer equipment (can be
Personal computer, server, or network equipment etc.) perform method described in each embodiment of the present invention.
It will be appreciated by those skilled in the art that accompanying drawing is the schematic diagram of a preferred embodiment, module or stream in accompanying drawing
Journey is not necessarily implemented necessary to the present invention.
It will be appreciated by those skilled in the art that the module in device in embodiment can describe be divided according to embodiment
It is distributed in the device of embodiment, respective change can also be carried out and be disposed other than in one or more devices of the present embodiment.On
The module for stating embodiment can be merged into a module, can also be further split into multiple submodule.
Disclosed above is only several specific embodiments of the present invention, and still, the present invention is not limited to this, any ability
What the technical staff in domain can think change should all fall into protection scope of the present invention.
Claims (10)
1. move media and its e-file guiding circulation track tracking in a kind of LAN, it is characterised in that methods described bag
Include：
S1：The move media of identification access computer, obtains the device identification of move media and the information of current computer；
S2：Please using operation of the file system filter driver technology capture user thread to e-file in the move media
Ask, effective behaviour according to corresponding to the security level identification of e-file in move media is chosen at the security level identification in extent of competence
Ask；
S3：Corresponding operating is carried out to e-file in the move media according to the effectively operation requests, and records institute in real time
State the specifying information of operation；
S4：Combining geographic information system GIS establishes dynamic electronic document guiding circulation track trace model in LAN, according to movement
The device identification of medium moves medium and its e-file stream in the dynamic electronic document guiding circulation track trace model
Turn track following.
2. according to the method for claim 1, it is characterised in that methods described also includes：
According to default rule according to corresponding to the grade of the security level identification sets different grades of security level identification operating right.
3. according to the method for claim 1, it is characterised in that the step S1 is specifically included：
Detect whether that move media accesses current computer in real time；
The move media for accessing current computer is identified；
Obtain the physical address in LAN of device identification and current computer of the move media of access current computer, use
Name in an account book and system time.
4. according to the method for claim 1, it is characterised in that the device identification of the move media includes：
Usb protocol version number, device type, vendor id, product IDs and device version number used in equipment.
5. according to the method for claim 1, it is characterised in that also include before the step S2：
When user thread sends operation requests, call corresponding service request to represent the person of sending of the operation requests and carry out I/
O request；
It is configured to describe the input/output request bag IRP of the I/O requests；
Send the input/output request bag IRP to file system filter drivers.
6. according to the method for claim 5, it is characterised in that the step S2 is specifically included：
The input/output request bag is parsed, obtains operation requests of the user thread to e-file in the move media；
According to corresponding to whether the security level identification of e-file in move media judges the operation requests in the security level identification
In extent of competence；
If the input/output request bag is effective operation requests；
The effectively input/output request bag corresponding to operation requests is sent to file system driver.
7. according to the method for claim 6, it is characterised in that when the operation requests are not corresponding to the security level identification
When in extent of competence, in addition to：
To not recorded in the operation requests corresponding to the security level identification in extent of competence.
8. according to the method for claim 1, it is characterised in that the step S4 is specifically included：
Obtain the spatial information of the LAN and corresponding attribute information；
Dynamic electron is established in LAN using Distribution GIS according to the spatial information and corresponding attribute information
Restoring files track following model；
The move media and its e-file are obtained in the dynamic electronic document according to the device identification of move media in real time
Physical location in guiding circulation track trace model is simultaneously marked, and realizes move media and its tracking of e-file guiding circulation track.
9. move media and its e-file guiding circulation track tracking system in a kind of LAN, it is characterised in that the system bag
Include：
Identifier acquisition module, for identifying the move media of access computer, obtain the device identification of move media and current meter
The information of calculation machine；
Filtering module, for capturing user thread to e-file in the move media using file system filter driver technology
Operation requests, according to corresponding to the security level identification of e-file in move media is chosen at the security level identification in extent of competence
Effective operation requests；
Operation record module, for accordingly being grasped to e-file in the move media according to the effectively operation requests
Make, and record the specifying information of the operation in real time；
Guiding circulation track tracking module, dynamic electronic document circulation rail is established in LAN for combining geographic information system GIS
Mark trace model, moved according to the device identification of move media in the dynamic electronic document guiding circulation track trace model
Medium and its tracking of e-file guiding circulation track.
10. system according to claim 9, it is characterised in that the system also includes：
Authority setting module, for setting different grades of level of confidentiality mark according to the grade of the security level identification according to default rule
Operating right corresponding to knowledge.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410471666.5A CN104298930B (en) | 2014-09-16 | 2014-09-16 | Move media and its e-file guiding circulation track tracking and system in LAN |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410471666.5A CN104298930B (en) | 2014-09-16 | 2014-09-16 | Move media and its e-file guiding circulation track tracking and system in LAN |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104298930A CN104298930A (en) | 2015-01-21 |
| CN104298930B true CN104298930B (en) | 2018-01-02 |
Family
ID=52318652
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410471666.5A Active CN104298930B (en) | 2014-09-16 | 2014-09-16 | Move media and its e-file guiding circulation track tracking and system in LAN |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104298930B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107609408B (en) * | 2017-08-18 | 2020-07-28 | 成都索贝数码科技股份有限公司 | Method for controlling file operation behavior based on filter driver |
| CN108076064A (en) * | 2017-12-25 | 2018-05-25 | 北京航空航天大学 | A kind of virtualization desktop file leakage prevention method based on secret mark |
| CN110543763A (en) * | 2019-08-27 | 2019-12-06 | 北京指掌易科技有限公司 | Method, device and system for processing file based on virtual security domain |
| CN111539665B (en) * | 2020-03-26 | 2023-09-19 | 平安科技（深圳）有限公司 | Mail monitoring method, device, equipment and storage medium |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7337327B1 (en) * | 2004-03-30 | 2008-02-26 | Symantec Corporation | Using mobility tokens to observe malicious mobile code |
| CN102004883A (en) * | 2010-12-03 | 2011-04-06 | 中国软件与技术服务股份有限公司 | Trace tracking method for electronic files |
| CN102235938A (en) * | 2010-04-20 | 2011-11-09 | 镇江市亿华系统集成有限公司 | Method for tracking and monitoring dredging track of suction dredger |
| CN102930892A (en) * | 2012-09-19 | 2013-02-13 | 无锡华御信息技术有限公司 | Multifunctional safe U disk |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103596165B (en) * | 2013-12-03 | 2017-04-05 | 曹龙泽 | A kind of method for following the trail of mobile terminal |
-
2014
- 2014-09-16 CN CN201410471666.5A patent/CN104298930B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7337327B1 (en) * | 2004-03-30 | 2008-02-26 | Symantec Corporation | Using mobility tokens to observe malicious mobile code |
| CN102235938A (en) * | 2010-04-20 | 2011-11-09 | 镇江市亿华系统集成有限公司 | Method for tracking and monitoring dredging track of suction dredger |
| CN102004883A (en) * | 2010-12-03 | 2011-04-06 | 中国软件与技术服务股份有限公司 | Trace tracking method for electronic files |
| CN102930892A (en) * | 2012-09-19 | 2013-02-13 | 无锡华御信息技术有限公司 | Multifunctional safe U disk |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104298930A (en) | 2015-01-21 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102999732B (en) | Multi-stage domain protection method and system based on information security level identifiers | |
| US9348984B2 (en) | Method and system for protecting confidential information | |
| EP1946238B1 (en) | Operating system independent data management | |
| CN103763313B (en) | File protection method and system | |
| KR101382222B1 (en) | System and method for mobile data loss prevention which uses file system virtualization | |
| CN104298930B (en) | Move media and its e-file guiding circulation track tracking and system in LAN | |
| US20150026823A1 (en) | Method and system for entitlement setting, mapping, and monitoring in big data stores | |
| CN103218575A (en) | Host file security monitoring method | |
| CN104268484A (en) | Cloud environment data leakage prevention method based on virtual isolation mechanism | |
| CN107370604A (en) | A kind of more granularity access control methods under big data environment | |
| CN107633184A (en) | A kind of database and method and apparatus for being used to manage user right | |
| CN102930216A (en) | Encrypt file management method based on wireless USB (Universal Serial Bus) flash disc | |
| CN106686104A (en) | Method and device used for operation and maintenance of target server | |
| CN111046405B (en) | Data processing method, device, equipment and storage medium | |
| CN105659247B (en) | The proactive Threat Management system of context-aware | |
| CN105279453A (en) | Separate storage management-supporting file partition hiding system and method thereof | |
| CN103488755B (en) | A kind of file system access method and apparatus | |
| CN107808676A (en) | The auditing system and method for CD burning | |
| JP6729013B2 (en) | Information processing system, information processing apparatus, and program | |
| CN107562514A (en) | A kind of physical memory access control and partition method | |
| CN109033882A (en) | A kind of safe dissemination method of retrospective big data and system | |
| CN106709361B (en) | File content hidden storage access method based on capacity hiding and multi-file system and storage device thereof | |
| CN108494797A (en) | Data monitoring and managing method, system, equipment and storage medium based on virtualization technology | |
| JP6690453B2 (en) | Information processing device and program | |
| Rakers | Managing professional and personal sensitive information |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |