CN104850407A - Desktop screen capture system and method - Google Patents
Desktop screen capture system and method Download PDFInfo
- Publication number
- CN104850407A CN104850407A CN201510282502.2A CN201510282502A CN104850407A CN 104850407 A CN104850407 A CN 104850407A CN 201510282502 A CN201510282502 A CN 201510282502A CN 104850407 A CN104850407 A CN 104850407A
- Authority
- CN
- China
- Prior art keywords
- module
- record screen
- record
- desktop
- event
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Abstract
The invention relates to a desktop screen capture system and method. The system comprises a screen capture processing module, a screen capture collecting module, a hook capture module and a data storage module, wherein the screen capture module defines event triggering points, the screen capture collecting module captures a to-be-monitored computer, generates video codes and transmits the video codes to the data storage module, and the hook capture module triggers hook capture triggering points and generates event triggering logs. The desktop screen capture system and method has the advantages that operations triggered by a user can be inquired conveniently, the specific operations of the user can be seen, the operations of the user on a turned-on program can be captured, user management is facilitated, and safety detection is increased.
Description
Technical field
The present invention relates to computer systems technology field, particularly relate to a kind of can the record screen system of the logger computer system desktop course of work and method thereof in detail.
Background technology
Along with the development of network technology, the demand of network security is also being increased gradually, for the ease of audit and evidence obtaining, needing recording user in the information of the enterprising line operate of operating system desktop.
No matter existing record screen system is use client or adopt RDP, and it when there being customer incident to occur, can only triggering and starting, and triggers and stops, and preserve logout to database at the end of event.It is not enough mainly to there is following aspect in this pattern: capturing information amount very little, can only rely on word, program process name, event time, user name that recording user mouse triggers.By these information stored in the Database field planned, although this mode can inquire user easily and trigger what operation, but cannot see what user specifically done, also cannot catch user and what do in the program opened, the management of user is made troubles.Simultaneously not comprehensive to the detection of security yet, the operations such as user's whether amendment data cannot be detected.
Summary of the invention
The object of the present invention is to provide a kind of desktop record screen system and record screen method, which solving few technical matters video file retrieved with inconvenience of record screen system obtaining information amount at present.
For achieving the above object, technical scheme proposed by the invention is:
A kind of desktop record screen system, it comprises: record screen processing module, record screen collection module, hook capture module and data memory module; Wherein, first shield processing module by described record and define event trigger point, by record screen collection module, screen is grabbed to monitoring computer, and generating video coding sends to described data memory module, finally, trigger hook by described hook capture module and catch trigger point, and the event that generates triggers daily record.
Wherein, also comprise client, described client comprises communication management module, and communication management module makes the trigger event of client send record screen collection module to by internet, realizes long-range record screen.
Wherein, described record screen processing module comprises intelligent management hook capture module, according to user's request customized event trigger point.
Wherein, described record screen processing module can carry out systematic searching to the data in data storage module.
A kind of record screen method of desktop record screen system, it comprises the following steps:
The first step, when user on computers Action Events time, event trigger;
Second step, triggers hook and catches trigger point, and the event that generates triggers daily record;
3rd step, grabbing screen by record screen collection module to monitoring computer, then carrying out Video coding, generating video file to grabbing screen image.
Wherein, also comprise after the 3rd described step, video file is sent to the step that data memory module carries out storing.
Wherein, also comprise between the described first step and second step, event trigger information user operated on computers sends to the step of record screen collection module by internet.
Compared with prior art, a kind of desktop record screen system of the present invention and record screen method thereof, not only can inquire user easily and trigger what operation, and can see what user specifically done, both caught user and what had done in the program opened, facilitate user management, improve the detection of security.
Accompanying drawing explanation
Fig. 1 is the comprising modules block diagram of a kind of desktop record of the present invention screen system first embodiment.
Fig. 2 is the comprising modules block diagram of a kind of desktop record of the present invention screen system second embodiment.
Fig. 3 is the process flow diagram of a kind of desktop record of the present invention screen system record screen method.
Embodiment
Below with reference to accompanying drawing, elaboration is further given to the present invention.
Refer to Fig. 1, it is a kind of desktop record screen system first example structure block diagram of the present invention, and this record screen system comprises: record screen processing module 101, record screen collection module 102, hook capture module 103 and data memory module 104.
Record screen processing module 101, can according to retrieval require inquiry record screen video in concrete event trigger point, as certain consumer process open, shut-in time point, operational motion point.Further, this record screen processing module 101 comprises intelligent management hook capture module, and this intelligent management hook capture module according to self-defined standard, can freely arrange event trigger point, namely from the content of main separation monitoring.As only defined, certain user's associated process of monitoring is opened, shut-in time point, and operational motion dot information, then this record screen system only need monitor above-mentioned event, and ignores other operations.This intelligent management hook capture module avoids all events of monitoring, and delays efficiency, waste resource, improves user experience.
Record screen collection module 102, timing screen is grabbed to monitoring computer, and will grab shield data issue data memory module 104.Further, this record screen collection module 102, adopts the timing of windows API (windowsApplication Programming Interface, application programming interface) application programming interface to grab screen to monitoring computer; Further, this record screen collection module 102 carries out Video coding to grabbing screen image, timing generating video file.
Hook capture module 103, when event occurs, triggers hook and catch trigger point, thus the event of generation triggers daily record.User profile is recorded in this daily record, and the concrete event action information that user carries out at certain time point.
Data memory module 104, this data memory module 104 can store the video file that record screen collection module 102 generates.
This desktop record screen system course of work is such: first shield processing module 101 by described record and define event trigger point, screen is grabbed by record screen collection module 102 pairs of monitoring computers, and generating video coding sends to described data memory module 104, finally, trigger hook by described hook capture module 103 and catch trigger point, and the event that generates triggers daily record.Above-mentioned triggering daily record also sends to data memory module 104 to store.Wherein, described record screen processing module can carry out systematic searching to the data in data storage module.
Refer to Fig. 2, it is a kind of desktop record screen system second example structure block diagram of the present invention, and this record screen system comprises: record screen processing module 101, record screen collection module 102, hook capture module 103 and data memory module 104, and by client 200 that internet communication connects.Wherein, above-mentioned record screen processing module 101, record screen collection module 102, hook capture module 103 and data memory module 104 be composition one service end 100 jointly.
Wherein, record screen processing module 101, record screen collection module 102, hook capture module 103 is implemented identical with the function possessed and first of data memory module 104.Do not repeated at this.
The difference of this second embodiment and the first embodiment is, this event action spot, or completes by internet is long-range between event triggering ground and record screen system.
This desktop record screen system course of work is such: first shield processing module 101 by described record and define event trigger point, by record screen collection module 102, screen is grabbed to the client control computing machine connected by internet, and long-range screen image of grabbing is back to record screen collection module 102, generating video coding sends to described data memory module 104, finally, trigger by described hook capture module 103 trigger point that hook catches client computer, and the event that generates triggers daily record.Triggering daily record also sends to data memory module 104 to store.Wherein, described record screen processing module can carry out systematic searching to the data in data storage module.
Refer to accompanying drawing 3, a kind of record screen method of desktop record screen system, it comprises the following steps:
First step S1, when user's Action Events on computers, then event triggers.
Second step S2, when event occurs, trigger hook and catch trigger point, the event that generates triggers daily record.This daily record is clear records so-and-so user, in so-and-so event of so-and-so time operation.
3rd step S3, record screen collection module adopts the timing of windows API (Application Programming Interface, application programming interface) application programming interface to grab screen to monitoring computer; Then, this module carries out Video coding, generating video file to grabbing screen image.
Wherein, also comprise after the 3rd described step, video file is sent to the step that data memory module carries out storing.
Wherein, the hook capture module 103 of record screen processing module 101 pairs of step 2 triggers diary and carries out retrieval process as required, and as result for retrieval is, party A-subscriber the XX when 20XX XX month XX day XX divide XX second, opens WORD document and carried out word deletion action to it.
Wherein, record screen processing module 101 is by described triggering diary result for retrieval, according to user name, running time, Action Events, the data memory module of step 4 is retrieved, pass through video file, clearly can know so-and-so user so-and-so event action concrete in so-and-so time, as result for retrieval divides XX second for party A-subscriber XX when 20XX XX month XX day XX, open the XX of WORD document to its 3rd section of word and carried out word deletion action.
When the method is used for Long-range links Network Communication, also comprise between described first step S1 and second step S2, event trigger information user operated on computers sends to the step of record screen collection module by Internet of Things.
Foregoing; be only preferred embodiment of the present invention; not for limiting embodiment of the present invention; those of ordinary skill in the art are according to central scope of the present invention and spirit; can carry out corresponding flexible or amendment very easily, therefore protection scope of the present invention should be as the criterion with the protection domain required by claims.
Claims (7)
1. a desktop record screen system, is characterized in that, comprising: record screen processing module, record screen collection module, hook capture module and data memory module; Wherein, first shield processing module by described record and define event trigger point, by record screen collection module, screen is grabbed to monitoring computer, and generating video coding sends to described data memory module, finally, trigger hook by described hook capture module and catch trigger point, and the event that generates triggers daily record.
2. desktop record screen system as claimed in claim 1, it is characterized in that, also comprise client, described client comprises communication management module, and communication management module makes the trigger event of client send record screen collection module to by internet, realizes long-range record screen.
3. desktop record screen system as claimed in claim 1, is characterized in that, described record screen processing module comprises intelligent management hook capture module, according to user's request customized event trigger point.
4. desktop record screen system as claimed in claim 1, is characterized in that, described record screen processing module can carry out systematic searching to the data in data storage module.
5. the record screen method of a desktop record screen system, is characterized in that, comprise the following steps:
The first step, when user on computers Action Events time, event trigger;
Second step, triggers hook and catches trigger point, and the event that generates triggers daily record;
3rd step, grabbing screen by record screen collection module to monitoring computer, then carrying out Video coding, generating video file to grabbing screen image.
6. the record screen method of desktop record screen system as claimed in claim 5, is characterized in that, also comprise, video file is sent to the step that data memory module carries out storing after the 3rd described step.
7. the record screen method of desktop record screen system as claimed in claim 5, it is characterized in that, also comprise between the described first step and second step, event trigger information user operated on computers sends to the step of record screen collection module by internet.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510282502.2A CN104850407A (en) | 2015-05-28 | 2015-05-28 | Desktop screen capture system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510282502.2A CN104850407A (en) | 2015-05-28 | 2015-05-28 | Desktop screen capture system and method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN104850407A true CN104850407A (en) | 2015-08-19 |
Family
ID=53850070
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510282502.2A Pending CN104850407A (en) | 2015-05-28 | 2015-05-28 | Desktop screen capture system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104850407A (en) |
Cited By (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105718170A (en) * | 2016-03-09 | 2016-06-29 | 广东欧珀移动通信有限公司 | Video recording method, device and mobile terminal |
| CN106101526A (en) * | 2016-06-01 | 2016-11-09 | 北京金山安全软件有限公司 | Screen recording method and device |
| CN106126401A (en) * | 2016-05-19 | 2016-11-16 | 北京朋创天地科技有限公司 | A kind of video retrieval method based on secure virtual desktop |
| CN107657180A (en) * | 2016-07-26 | 2018-02-02 | 阿里巴巴集团控股有限公司 | A kind of information processing client, server and method |
| CN107861712A (en) * | 2016-09-26 | 2018-03-30 | 平安科技（深圳）有限公司 | Develop the generation method and system of daily record |
| CN108256071A (en) * | 2018-01-17 | 2018-07-06 | 广东欧珀移动通信有限公司 | Generation method, device, terminal and the storage medium of record screen file |
| CN108536507A (en) * | 2018-03-22 | 2018-09-14 | 上海艺赛旗软件股份有限公司 | A kind of figure applicating text recognition methods and system |
| CN108920690A (en) * | 2018-07-13 | 2018-11-30 | 北京朋创天地科技有限公司 | Visual network method for auditing safely and system |
| CN109324911A (en) * | 2018-09-21 | 2019-02-12 | 广州长鹏光电科技有限公司 | User behavior detects smart screen automatically and grabs screen system |
| CN109862418A (en) * | 2018-11-21 | 2019-06-07 | 视联动力信息技术股份有限公司 | Document transmission method and terminal device |
| CN110536143A (en) * | 2019-07-11 | 2019-12-03 | 网宿科技股份有限公司 | Plug-flow method and electronic equipment |
| CN110971602A (en) * | 2019-12-04 | 2020-04-07 | 江苏创宇盾安全技术有限公司 | Intrusion detection method and system based on video stream windows remote login protocol |
| CN111367753A (en) * | 2018-12-26 | 2020-07-03 | 中兴通讯股份有限公司 | Cloud desktop screen recording method and device based on network communication engine ICE architecture |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1416095A (en) * | 2002-12-06 | 2003-05-07 | 中国科学院上海技术物理研究所 | System for automatic monitoring image management and communication |
| CN102360362A (en) * | 2011-09-28 | 2012-02-22 | 华为技术有限公司 | Seating screen recording method, quality inspection method and related equipment |
| CN103970533A (en) * | 2014-04-14 | 2014-08-06 | 深圳市深信服电子科技有限公司 | Method and device for recording captured information on screen |
| CN104636435A (en) * | 2014-12-26 | 2015-05-20 | 中电科华云信息技术有限公司 | Cloud terminal screen recording method |
-
2015
- 2015-05-28 CN CN201510282502.2A patent/CN104850407A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1416095A (en) * | 2002-12-06 | 2003-05-07 | 中国科学院上海技术物理研究所 | System for automatic monitoring image management and communication |
| CN102360362A (en) * | 2011-09-28 | 2012-02-22 | 华为技术有限公司 | Seating screen recording method, quality inspection method and related equipment |
| CN103970533A (en) * | 2014-04-14 | 2014-08-06 | 深圳市深信服电子科技有限公司 | Method and device for recording captured information on screen |
| CN104636435A (en) * | 2014-12-26 | 2015-05-20 | 中电科华云信息技术有限公司 | Cloud terminal screen recording method |
Cited By (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105718170A (en) * | 2016-03-09 | 2016-06-29 | 广东欧珀移动通信有限公司 | Video recording method, device and mobile terminal |
| CN106126401A (en) * | 2016-05-19 | 2016-11-16 | 北京朋创天地科技有限公司 | A kind of video retrieval method based on secure virtual desktop |
| CN106101526A (en) * | 2016-06-01 | 2016-11-09 | 北京金山安全软件有限公司 | Screen recording method and device |
| CN106101526B (en) * | 2016-06-01 | 2019-11-26 | 北京金山安全软件有限公司 | screen recording method and device |
| CN107657180A (en) * | 2016-07-26 | 2018-02-02 | 阿里巴巴集团控股有限公司 | A kind of information processing client, server and method |
| CN107861712A (en) * | 2016-09-26 | 2018-03-30 | 平安科技（深圳）有限公司 | Develop the generation method and system of daily record |
| CN108256071A (en) * | 2018-01-17 | 2018-07-06 | 广东欧珀移动通信有限公司 | Generation method, device, terminal and the storage medium of record screen file |
| CN108256071B (en) * | 2018-01-17 | 2021-02-26 | Oppo广东移动通信有限公司 | Method and device for generating screen recording file, terminal and storage medium |
| CN108536507A (en) * | 2018-03-22 | 2018-09-14 | 上海艺赛旗软件股份有限公司 | A kind of figure applicating text recognition methods and system |
| CN108920690B (en) * | 2018-07-13 | 2020-06-19 | 北京朋创天地科技有限公司 | Visual network security audit method and system |
| CN108920690A (en) * | 2018-07-13 | 2018-11-30 | 北京朋创天地科技有限公司 | Visual network method for auditing safely and system |
| CN109324911A (en) * | 2018-09-21 | 2019-02-12 | 广州长鹏光电科技有限公司 | User behavior detects smart screen automatically and grabs screen system |
| CN109862418A (en) * | 2018-11-21 | 2019-06-07 | 视联动力信息技术股份有限公司 | Document transmission method and terminal device |
| CN111367753A (en) * | 2018-12-26 | 2020-07-03 | 中兴通讯股份有限公司 | Cloud desktop screen recording method and device based on network communication engine ICE architecture |
| CN111367753B (en) * | 2018-12-26 | 2023-03-14 | 中兴通讯股份有限公司 | Cloud desktop screen recording method and device based on network communication engine ICE architecture |
| CN110536143A (en) * | 2019-07-11 | 2019-12-03 | 网宿科技股份有限公司 | Plug-flow method and electronic equipment |
| CN110971602A (en) * | 2019-12-04 | 2020-04-07 | 江苏创宇盾安全技术有限公司 | Intrusion detection method and system based on video stream windows remote login protocol |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104850407A (en) | Desktop screen capture system and method | |
| CN103152352B (en) | A kind of perfect information security forensics monitor method based on cloud computing environment and system | |
| US9071637B2 (en) | Automated security analytics platform | |
| US8984633B2 (en) | Automated security analytics platform with visualization agnostic selection linked portlets | |
| US10200388B2 (en) | Automated security analytics platform with multi-level representation conversion for space efficiency and incremental persistence | |
| CN103226675B (en) | A kind of traceability system and method analyzing intrusion behavior | |
| TW201015371A (en) | Storing log data efficiently while supporting querying | |
| US20100088197A1 (en) | Systems and methods for generating remote system inventory capable of differential update reports | |
| CN103532754A (en) | System and method for high-speed memory and distributed type processing of massive logs | |
| CN104573611A (en) | Distributed face recognition trunking system | |
| WO2007059057A2 (en) | Log collection, structuring and processing | |
| US20080301471A1 (en) | Systems and methods in electronic evidence management for creating and maintaining a chain of custody | |
| CN104284162A (en) | Video retrieval method and system | |
| US8973132B2 (en) | Automated security analytics platform with pluggable data collection and analysis modules | |
| EP3479270B1 (en) | Incident response analytic maps | |
| CN103488793A (en) | User behavior monitoring method based on information retrieval | |
| CN105138709A (en) | Remote evidence taking system based on physical memory analysis | |
| CN103685233B (en) | A kind of wooden horse monitoring method based on Windows kernel-driven | |
| CN112084154A (en) | Cross-platform multi-host joint log compression method | |
| CN110377562B (en) | Big data safe storage method based on Hadoop open source platform | |
| US20130275385A1 (en) | Data storage and archiving spanning multiple data storage systems | |
| CN105159820A (en) | Transmission method and device of system log data | |
| CN103617099B (en) | A kind of real-time user file content auditing method and system | |
| CN107609158A (en) | A kind of Highly reliable data acquisition and storage method based on Flume | |
| CN111061593B (en) | Electronic evidence obtaining system and method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| EXSB | Decision made by sipo to initiate substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20150819 |