CN106682499A - Disaster prevention system data secure-storage method - Google Patents
Disaster prevention system data secure-storage method Download PDFInfo
- Publication number
- CN106682499A CN106682499A CN201611030611.6A CN201611030611A CN106682499A CN 106682499 A CN106682499 A CN 106682499A CN 201611030611 A CN201611030611 A CN 201611030611A CN 106682499 A CN106682499 A CN 106682499A
- Authority
- CN
- China
- Prior art keywords
- disaster prevention
- prevention system
- data
- storage
- system data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
- G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2113—Multi-level security, e.g. mandatory access control
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Alarm Systems (AREA)
Abstract
The invention discloses a disaster prevention system data secure-storage method. The disaster prevention system data secure-storage method comprises the steps that disaster prevention system data is virtualized, and a s secure-storage command is set for a security procedure having storage permission; during storage operation, a program requesting for storage operation sends a data storage instruction and the secure-storage command; when a disaster prevention system receives the data storage instruction, storage operation is conducted on the virtualized disaster prevention system data, the secure-storage command is confirmed, the virtualized disaster prevention system data is modified and is synchronized to disaster prevention system real data when the secure-storage command is correct, and the virtualized disaster prevention system data is eliminated when the secure-storage command is wrong or does not exist. The relation between the storage operation and the real data is isolated by adopting the method, and it is ensured that secure data is not illegally destroyed.
Description
Technical field
The present invention relates to a kind of date storage method, more particularly, it relates to disaster prevention system secure storage method of data.
Background technology
The safety of data is particularly significant, and during more particularly, to privacy, public interest etc., Information Security is system design
Important content.With the fast development of smart machine, disaster prevention system is also gradually introducing intelligent terminal as information publication channel.
At present main intelligent terminal operation system includes Android operation system, Apple Macintosh operating system and Windows operating system, and nothing
By being which kind of operating system has a data safety sex chromosome mosaicism, wherein Android operation system because be open operating system, therefore
More easy infection wooden horse etc. is viral and composition data safety is threatened.
The content of the invention
In order to overcome the shortcomings of existing product technology, the task of the present invention is to provide a kind of disaster prevention system data safety to deposit
Method for storing, to avoid the destruction of secure data.
A kind of such, disaster prevention system secure storage method of data is the technical scheme is that, including virtualization is taken precautions against natural calamities
System data, the security procedure to there is storage authority arranges safety storage password；During storage operation, the program of request storage operation
Send instruction data storage and safety storage password；When disaster prevention system receives instruction data storage, the virtualization is taken precautions against natural calamities
System data carries out storage and operates and confirm safety storage password, and when safety storage password is correct, modification virtualization is taken precautions against natural calamities and is
System data simultaneously synchronously virtualize disaster prevention system data to disaster prevention system truthful data, when safety stores password mistake or does not exist
When, remove virtualization disaster prevention system data.
Further, it is during the virtualization disaster prevention system data, the disaster prevention system data of different level of securitys are empty respectively
Planization, is the safety storage password of different security procedures setting different stages, when disaster prevention system receives instruction data storage,
The virtualization disaster prevention system data are carried out with storage and operates and confirm safety storage password, when safety storage password is correct,
The virtualization disaster prevention system data identical and following with safety storage password security rank are changed, void more than level of security is deleted
Intend chemoprevention calamity system data, and synchronously virtualize disaster prevention system data to disaster prevention system truthful data.
The present invention differentiates the legitimacy of instruction data storage by the password authority for pre-setting, and virtualization system data are simultaneously
Operated for virtualization data, isolated contacting between storage operation and truthful data, it is ensured that secure data does not meet with
To unauthorised broken.
Specific embodiment
With reference to embodiment, the invention will be further described.
Disaster prevention system secure storage method of data, including virtualization disaster prevention system data, isolate disaster prevention system data, use
Family program cannot directly access disaster prevention system data place memory area.By different level of securitys during virtualization disaster prevention system data
Carry out, the first level of security, the second level of security, the 3rd level of security etc. can be respectively set to, the primary drop of its security permission
Low, i.e., the first level of security has highest authority, may have access to all disaster prevention system data, and the second level of security may have access to and be set
All disaster prevention system data outside for the data of the first level of security, by that analogy.
Security procedure to there is storage authority arranges safety storage password, and now different security procedures arrange different stage
Safety storage password, and corresponding to different level of securitys；During storage operation, the program of request storage operation sends data
Store instruction and safety storage password, non-predetermined arranges the program of safety storage password and will not send safety storage password and be recognized
It is illegal for the storage operation；When disaster prevention system receives instruction data storage, what the store instruction was related to is all
The virtualization disaster prevention system data of level of security carry out storage and operate and confirm safety storage password；When safety is storing password just
Really, i.e., when secure password accurately can be divided safe class, change identical and following with safety storage password security rank
Virtualization disaster prevention system data, delete virtualization disaster prevention system data more than level of security, and synchronously virtualize disaster prevention system
Data are to disaster prevention system truthful data.When safety stores password mistake or do not exist, virtualization disaster prevention system data are removed.Tool
Body, when the program for requiring to carry out to store operation sends instruction data storage, while send safety storage password, the no matter journey
Whether sequence has corresponding level of security, all carries out storage operation to virtualizing disaster prevention system data according to instruction data storage.Than
Such as safety storage password the second level of security of correspondence, instruction data storage needs to operate the first level of security and the second safe level
Other data, then operate to virtualized first level of security and the second security level data；And for example safety stores mouth
Make mistake, and instruction data storage needs to operate the data of the second level of security and the 3rd level of security, then to virtualized the
Two level of securitys and the 3rd security level data are operated.Safety is judged after the completion of to virtualizing disaster prevention system data manipulation
Storage password, same to above-described embodiment, such as safety storage password the second level of security of correspondence, and to virtualized first safe level
Do not operated with the second security level data, then the second security level data of synchronous virtualization is truly counted to disaster prevention system
According to, and delete virtualized first security level data.And when storing password mistake safely, directly delete virtualized second peace
The data of full rank and the 3rd level of security, disaster prevention system truthful data makes no modifications.
Claims (2)
1. a kind of disaster prevention system secure storage method of data, it is characterised in that：Including virtualization disaster prevention system data, to there is storage
The security procedure of authority arranges safety storage password；During storage operation, the program of request storage operation sends instruction data storage
Password is stored with safety；When disaster prevention system receives instruction data storage, the virtualization disaster prevention system data are stored
Safety storage password is operated and confirms, when safety storage password is correct, modification virtualization disaster prevention system data are simultaneously synchronous virtual
Chemoprevention calamity system data, when safety stores password mistake or do not exist, is removed virtualization and is taken precautions against natural calamities to disaster prevention system truthful data
System data.
2. disaster prevention system secure storage method of data according to claim 1, it is characterised in that：The virtualization is taken precautions against natural calamities and is
During system data, the disaster prevention system data of different level of securitys are virtualized respectively, be that different security procedures arrange different stage
Safety storage password, when disaster prevention system receives instruction data storage, to it is described virtualization disaster prevention system data store
Operate and confirm safety storage password, when safety storage password it is correct when, modification with safety store password security rank it is identical and
Following virtualization disaster prevention system data, delete virtualization disaster prevention system data more than level of security, and synchronous virtual chemoprevention
Calamity system data is to disaster prevention system truthful data.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611030611.6A CN106682499A (en) | 2016-11-16 | 2016-11-16 | Disaster prevention system data secure-storage method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611030611.6A CN106682499A (en) | 2016-11-16 | 2016-11-16 | Disaster prevention system data secure-storage method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106682499A true CN106682499A (en) | 2017-05-17 |
Family
ID=58865917
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201611030611.6A Pending CN106682499A (en) | 2016-11-16 | 2016-11-16 | Disaster prevention system data secure-storage method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106682499A (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101101575A (en) * | 2006-07-04 | 2008-01-09 | 联想(北京)有限公司 | Data safe memory method and device |
| CN103106372A (en) * | 2013-01-17 | 2013-05-15 | 上海交通大学 | Lightweight class privacy data encryption method and system for Android system |
| CN103279431A (en) * | 2013-05-23 | 2013-09-04 | 青岛海信宽带多媒体技术有限公司 | Access method for kinds of permissions of memorizer |
| CN104281947A (en) * | 2010-05-26 | 2015-01-14 | 谷歌公司 | Systems and methods for using a domain-specific security sandbox to facilitate secure transactions |
| CN104331408A (en) * | 2012-01-26 | 2015-02-04 | 阿普赛尔有限公司 | Chunk-level client side encryption in hierarchical content addressable storage systems |
| CN104660578A (en) * | 2014-04-22 | 2015-05-27 | 董唯元 | System and method for realizing security storage and access control of data |
-
2016
- 2016-11-16 CN CN201611030611.6A patent/CN106682499A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101101575A (en) * | 2006-07-04 | 2008-01-09 | 联想(北京)有限公司 | Data safe memory method and device |
| CN104281947A (en) * | 2010-05-26 | 2015-01-14 | 谷歌公司 | Systems and methods for using a domain-specific security sandbox to facilitate secure transactions |
| CN104331408A (en) * | 2012-01-26 | 2015-02-04 | 阿普赛尔有限公司 | Chunk-level client side encryption in hierarchical content addressable storage systems |
| CN103106372A (en) * | 2013-01-17 | 2013-05-15 | 上海交通大学 | Lightweight class privacy data encryption method and system for Android system |
| CN103279431A (en) * | 2013-05-23 | 2013-09-04 | 青岛海信宽带多媒体技术有限公司 | Access method for kinds of permissions of memorizer |
| CN104660578A (en) * | 2014-04-22 | 2015-05-27 | 董唯元 | System and method for realizing security storage and access control of data |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109844751B (en) | Method and processor for providing information isolation | |
| CN102171704B (en) | External encryption and recovery management with hardware encrypted storage devices | |
| CN105389265B (en) | The method and apparatus of zero content are generated on junk data when encryption parameter changes | |
| CN109840430A (en) | The secure processing units and its bus arbitration method of PLC | |
| CN104636444B (en) | A kind of encryption and decryption method and device of database | |
| CN103065102A (en) | Data encryption mobile storage management method based on virtual disk | |
| CN101256609B (en) | Storing card and safety method thereof | |
| CN104517061B (en) | The method of the method and carry encrypted file system of encrypted file system | |
| CN104268458B (en) | A kind of vehicle program encryption verification method and encryption, checking device | |
| WO2014052852A1 (en) | Secure data containers and data access control | |
| CN103198037A (en) | Reliable pipe control method and system for IO (input output) equipment | |
| EP3001341A1 (en) | NFC device, software installation method, software uninstallation method, computer program and article of manufacture | |
| CN105653980B (en) | A kind of guard method and its system of virtual memory data | |
| CN101349980B (en) | Hard disk data backup and protection method | |
| CN104281415A (en) | Data processing method and device for air conditioner | |
| CN106682499A (en) | Disaster prevention system data secure-storage method | |
| CN104361280B (en) | A kind of method realizing carrying out authentic authentication to USB storage device by SMI interrupt | |
| US20110145596A1 (en) | Secure Data Handling In A Computer System | |
| EP3193262A1 (en) | Database operation method and device | |
| CN106156632B (en) | Safety device and method of the security service to host, safety equipment are provided in it | |
| CN108139906A (en) | Exception treatment | |
| JP5865878B2 (en) | Programmable display | |
| CN103440465A (en) | Mobile storage medium safety control method | |
| CN114153396B (en) | Data processing method and device, data storage device and terminal device | |
| CN114237817A (en) | Virtual machine data reading and writing method and related device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170517 |
|
| RJ01 | Rejection of invention patent application after publication |