CN1157660C - Multiple-user safety operation document system and method - Google Patents

Multiple-user safety operation document system and method Download PDF

Info

Publication number
CN1157660C
CN1157660C CNB001116568A CN00111656A CN1157660C CN 1157660 C CN1157660 C CN 1157660C CN B001116568 A CNB001116568 A CN B001116568A CN 00111656 A CN00111656 A CN 00111656A CN 1157660 C CN1157660 C CN 1157660C
Authority
CN
China
Prior art keywords
user
file
privately owned
file system
path
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CNB001116568A
Other languages
Chinese (zh)
Other versions
CN1307283A (en
Inventor
邱全成
陈乃东
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Inventec Appliances Shanghai Corp
Original Assignee
Inventec Group Shanghai Electronic Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Inventec Group Shanghai Electronic Technology Co Ltd filed Critical Inventec Group Shanghai Electronic Technology Co Ltd
Priority to CNB001116568A priority Critical patent/CN1157660C/en
Publication of CN1307283A publication Critical patent/CN1307283A/en
Application granted granted Critical
Publication of CN1157660C publication Critical patent/CN1157660C/en
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Landscapes

  • Storage Device Security (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

The present invention provides a multi-user security operation file system and a method. The multi-user security operation file system comprises a file system manager and a security operation module, wherein the file system manager is used for managing inner files in the multi-user security operation file system; the security operation module makes the multi-user security operation file system have the capability of executing a system initialization module, a user entering module and a file access control module; according to a user name entered by a user, the security operation module generates a private file directory path or accesses private files stored in a private file directory. In this way, each entered user can have own private files, and the private files are non-existent for other users so as to ensure the security of the private files.

Description

Multi-user's safety operation document method
The present invention relates to a kind of multi-user's safety operation document system and method.
Because the single user of Windows operating system design, files all in the system are all shared, and different users signs in in the system, the All Files on can the access local hard drive.See also Fig. 1, but because the whole file system manager 10 of application program 20 direct accesses, so any user passes through application program, the All Files in the equal accessible file system administration manager 10.Yet, to use many people under the situation of a computer, the file system of Gong Xianging fully is because All Files all can be made troubles to the user on the contrary by each user's free access.At present, a plurality of users use the device of a computer ripe gradually simultaneously, and are quite high to the requirement of file security operation in such system, also can't address this problem but depend merely on Windows system itself.
The present invention is directed to the above-mentioned shortcoming of Windows system, propose a kind of multi-user's safety operation document system and method,, provide basic file security operating function by enhancing to the Windows file system.Different users can utilize the login mechanism of Windows to set up information such as user's name.The user of each login can have the privately owned file of oneself, and these files are non-existent In the view of other users, and nationality is to provide privately owned safety of files.
A kind of multi-user's provided by the invention safety operation document method comprises the following step:
Carry out a file system manager, this document system administration manager is to be arranged in the operating system of computer, in order to the file of management system inside; And
Carry out a safe operation module, this safe operation module is to be embedded in the above-mentioned file system manager, make that executive system initialization module, user login module and file access control module in regular turn for above-mentioned multi-user's safety operation document system, use the user name of logining according to the user, produce privately owned file directory path, or make the privately owned file of this user in can its privately owned file directory of access;
The execution of said system initialization module comprises the following steps:
At first obtain user configured privately owned directory path;
Whether the catalogue that privately owned file is deposited in inspection exists, if exist, then sets up in order to deposit the catalogue of privately owned file; If there is no, then the file access control module is connected to file system manager;
The execution that above-mentioned user logins module comprises the following steps:
When the user logined, system can obtain and the access request of Study document;
Then judge whether the path of importing into is positioned at privately owned catalogue, if then system obtains current user name, in the path, increase user name after, as the path of system file system view; If not, the path that then direct use is imported into is as the path of system file system view; And
Use the file request after changing to call the subsequent treatment module;
The execution of above-mentioned file access control module comprises the following steps:
At first, when the user logins, the user name that obtains logining;
Whether the privately owned catalogue of then judging user's correspondence exists, and if there is no, for the user sets up a privately owned catalogue, and directory name is identical with user name, finishes then; If exist, then directly finish.
In order to further specify structure of the present invention, method and characteristics, embodiment is as follows in conjunction with figs. explanation now, wherein:
Fig. 1 shows the structural drawing of the file system among the known Windows;
Fig. 2 shows the file system structure figure with multi-user's safety operation document system;
Fig. 3 shows the initialization flowchart of multi-user's safety operation document system of the present invention and manner of execution;
Fig. 4 shows the file access control flow chart of multi-user's safety operation document system of the present invention and manner of execution;
Fig. 5 shows user's login process figure of multi-user's safety operation document system of the present invention and manner of execution;
Fig. 6 shows the conversion synoptic diagram that system file system view of the present invention and user file system view are asked.
See also Fig. 2, different with the file system of aforementioned known Windows, the present invention mainly is the file system manager safe operation module 35 that embeds the safety operation document system that has the multi-user in original structure, when the user desires file in the accessing file system administration managers 30 by application program 40, must be earlier via above-mentioned file system manager safe operation module 35, determine its accessible path, system is shown to the user with this path more then.As for the inaccessible path of this user, system can't be shown to this user.
Core of the present invention is present in the virtual unit, virtual unit is the system module of a kind of Windows, the developer can utilize 32 the C language or the program compiler of compositional language, directly finish required virtual unit, can certainly utilize the combination of hardware or hardware and software to realize this virtual unit.In the process of Windows system start-up, VMM (virtual machine manager) understands all virtual unit graftabls of using, and calls its initialization procedure.Before all virtual unit initialization were finished, the Any user program can not called by system, so the time before the user can not utilize native system to pack into is carried out illegal access.After this virtual unit is loaded into system, will be present in the system, up to system finishing always.In the initialization procedure of the virtual unit of native system, can be by file system manager (IFSMGR, Installable File System Manager) a interface, multi-user's secure file system is embedded in the whole file system, thereby forms a new file system that has security function.This interface is specifically provided by file system manager (IFSMGR), and the title of interface is " IFSMgr_InstalI File System Api Hook ".This interface itself is to supply with concrete file system device, makes concrete file system the module's address of oneself can be offered file manager.Utilize this interface that the file system manager safe operation module of multi-user's file system is offered file manager in the present invention, thereby reach the purpose that is embedded in the file system manager and realizes monitoring all file operations.Multi-user's safety operation document system is exactly to utilize this safe operation module that the file operation in the system is monitored, and realizes the file operation in the system is managed, and makes each user access arrive one's own file and catalogue.
Above-mentioned interface " IFSMgr_Install File System API Hook " is defined as follows:
IFSMgr_Install?File?System?Api?Hook(pIFS?File?Hook?Func?Hook?Func);
Wherein, HookFunc is the function callback function, and it is defined as:
tyPedef?int(*plFS?File?Hook?Func)(pIFSFunc?pfn,int,fn,int?Drive,int?ResType,int?CodePage,pioreq?pir);
Above-mentioned pfn is that the next one of readjustment chain connects, and fn is a function number, and Driver is a logical DOS drives, and ResType is operated resource type, and CodePage is a code page, and pir is a functional parameter.
In native system, make amendment to the path in the functional parameter, call the next function of adjusting back in the chain with amended pir functional parameter then.
Embodiment 1
Multi-user's safety operation document system of the present invention includes system initialization, the user logins and three modules such as file access.
The virtual unit initialization module of above-mentioned multi-user's safety operation document system at first is described, this part is to operate when Windows 9x system bootstrap, whether it mainly is complete in order to judge the privately owned directory context of system, if finding has incomplete place, will carry out corresponding resuming work.Only installing first or user when reinstalling, the privately owned directory context of system can be complete.When system detects privately owned catalogue non-existent the time, just must be rebulid.Rebulid the security that privately owned catalogue can not have influence on system, because this situation just can take place when only installing in system, and all users also do not set up privately owned file when installing in system, so be unlikely to have influence on privately owned safety of files yet.
See also Fig. 3, the virtual unit initialization flow process system of multi-user's of the present invention safety operation document system comprises the following steps: (i) step 100, at first obtains user configured privately owned directory path; (ii) step 102 checks then whether the catalogue of depositing privately owned file exists, and does not then carry out next step if do not exist, otherwise proceeds to step 106; (iii) step 104 is set up in order to deposit the catalogue of privately owned file, carries out next step then; (iv) step 106 is connected to file system manager with the file access control module.
In above-mentioned flow process, deposit the title of catalogue of privately owned file and position and be when installing in system, by the setter appointment, after system start-up, this catalogue can become invisible, that is to say, the user of non-this catalogue will can't see the existence of this catalogue fully.
Behind the accessing operation of file, when the file in all systems is carried out access, all to pass through this module in the method surveillance of stating before use.This module checks at first whether the file of user access is present in the privately owned catalogue.Because all users' privately owned file all leaves appointed positions in, so as long as judge by the path of the file of access, whether the file that just can detect the access of user institute privately owned file.If what the user used is not privately owned file, then native system only need directly carry out file operation.If user's operation is privately owned file, then must be transformed into actual file to the file path of user's appointment and operate needed path, its method is that user name is added on the path of user's appointment, just user name is joined between privately owned file directory and other sub-directories.For example, privately owned file directory is " C: Personal ", the file path that user John imports into for " C: Personal Sub1 P101.bmp ", user name " John " will be added to during conversion between " C: Personal " and " Sub1 Pic1.bmp ", and form " C: Personal John Sub1 Pic.bmp ".
See also Fig. 4, the file access control flow of multi-user's of the present invention safety operation document system comprises the following steps: (i) at first, step 200, and when the user logined, system can obtain and the access request of Study document; (ii) follow, in step 202, judge that whether the path of importing into is positioned at privately owned catalogue, if then carry out next step, otherwise carry out step 208; (iii) step 204, system obtains current user name, carries out next step; (iv) step 206 after the increase user name, as the path of system file system view, proceeds to step 210 then in the path; (v) step 208 is directly used the path as the system file system view, the path imported into; (vi) step 210 uses the file request after changing to call the subsequent treatment module, finishes then.
The user of multi-user's safety operation document system logins part, mainly realizes the foundation of the file system environment when new user logined first.Judge whether newly user of a user, only need this user's of inquiry a privately owned catalogue whether to set up.If also do not set up, just represent that this user is for logining first.Be necessary for this user set up privately owned file directory this moment, and to be exactly privately owned directory path add user name in the path of this privately owned file directory.If through inquiry, privately owned file directory exists, then this part just can not done any operation, directly withdraws from.
See also Fig. 5, user's login process system of multi-user's of the present invention safety operation document system comprises the following steps: (i) at first, in step 300, and when the user logins, the user name that obtains logining; (ii) step 302 judges whether the privately owned catalogue of user's correspondence exists, if then finish, otherwise carries out next step; (iii) step 304, for the user sets up a privately owned catalogue, and directory name is identical with user name, finishes then.
Multi-user's file system has utilized the characteristic of user's login of Windows to determine user name.All use the people of Windows system all will carry out system login, to determine user name.Because user name does not have any special meaning in common Windows system, so generally speaking, the user of each using system uses same user name accessing system.But in multi-user's safe operation file system, user name relates to the file that the user can access, and this makes user name become a key, so when using multi-user's safe operation file system, different user must be with different user name accessing systems.
Native system provides the security of local access for each user, as long as the user with different user name accessing systems, just can deposit the privately owned file of oneself safely, and needn't worry that other users can check or damage privately owned file in system.The user will do be exactly privately owned document storage in the privately owned file directory of appointment.Be to use " C: Personal " to represent privately owned file directory in the above-described embodiments, the user not only can deposit file in this catalogue, can also be at its md down.Native system is by the method for file system mapping, makes each user can only see in the privately owned file directory file of oneself.Through planting method thus, the privately owned safety of files of user can be protected, and is different with the method for traditional enactment document access right, the direct mapped file system view of this kind method.For general user, the operation of enactment document access right, not only complicated and make mistakes easily.And use file system view method described in the invention, not only easy to use, and security is better.The user need only know the position of privately owned file directory, just can be stored in the file that needs protection wherein.
Multi-user's file system is to discern different users according to current (current) user name.Current user name can directly obtain from system.All users' privately owned file all is kept in the public privately owned catalogue, default catalogue be C: PERSONAL.Each user can operate this catalogue.But the content in the different catalogues that the user saw is different.Each login user can only see in the PERSONAL catalogue that all one's own file has used the notion of file system view in multi-user's safety operation document system, the called file system view is exactly the file system structure of seeing from certain angle, comprises user's the file system view and the file system view of system.User's file system view is exactly file system of this locality of seeing of this user and the file system that the networking mapping is come, just all file and catalogues (file) that can access arrive of this user.In common Windows system, use the user of different user name accessing system that different file system view is arranged.File system view is exactly to go to see file system from the angle of operating system itself, and this has comprised that all are from the appreciable file of user perspective and sightless file, user's file and all files such as file of system.
In Windows, the file system of file system manager IFSMGR management system level, promptly IFSMGR operates the system file system view.In common Windows, all users' file system view is identical with the file system view of system.In the Windows of the safety operation document system that has the multi-user, because the effect of multi-user's safety operation document system, user's the file system view no longer file system view with system is identical, and the file system view of different user is also inequality.So, user's privately owned file just can be protected.The function of multi-user's safety operation document system of the present invention is exactly the file system view that the file system view of system is changed into the user.
See also Fig. 6, it shows the synoptic diagram that changes between multi-user's the system file system view of safety operation document system and user file system view.Synoptic diagram with Fig. 6 is an example, can find user Jack and user John C: among the PERSONAL see that file is different, and in system file system view 50, comprised all users' file, the file system view 70 of the file system view 60 of user Jack and user John for example, each user's document storage is in different catalogues.Therefore, even different users has the privately owned file of same file name, its content also can be different.In user's file system view, has only the corresponding file that belongs to this user.
Between privately owned directory name and other paths, add user name exactly in the process that the user file system view is transformed into the system file system view.For example, user Jack want access C: PERSONAL text1.User name " Jack " is inserted between privately owned file directory name " C: PERSONAL " and other paths " text1 ".After multi-user's safety operation document system is handled, the path of passing to system become " C: PERSONAL Jack text1 ".So, the user to C: PERSONAL the operation of text1, in fact be transferred to the system file system view C: PERSONAL Jack the enterprising line operate of text1.The privately owned catalogue file operation that it should be noted that user John all is to add John after privately owned file directory, form C: PERSONAL John ... and can't form at all C: PERSONAL Jack ... the path, thereby privately owned file that can't access Jack.For the file under the non-privately owned catalogue, multi-user's safety operation document system directly is delivered to file system manager to the path, so all users can arrive in access.This shows that in multi-user's safety operation document system all catalogue and files that are arranged in privately owned catalogue all can't be arrived by other user access.Even two users have the file or the sub-directory of same names, its file or sub-directory content also can be different along with active user's difference.
The present invention can be applicable in the Windows multi-user system at present, the multi-user system of Windows allows two or more users to use a computer simultaneously, so when two users use different user names to sign in in the system, its all only can access oneself privately owned file, but can not see the other side's privately owned file each other.System of the present invention also can use in the Windows of unit operation system, so that the space of the privately owned file of user access to be provided.
Embodiment 2
Multi-user's safety operation document method of the present invention includes the executive system initialization, carry out that the user logins and three modules such as execute file access.
The execution virtual unit initialization module of above-mentioned multi-user's safety operation document method at first is described, this part is to operate when Windows 9x system bootstrap, whether it mainly is complete in order to judge the privately owned directory context of system, if finding has incomplete place, will carry out corresponding resuming work.Only installing first or user when reinstalling, the privately owned directory context of system can be complete.When system detects privately owned catalogue non-existent the time, just must be rebulid.Rebulid the security that privately owned catalogue can not have influence on system, because this situation just can take place when only installing in system, and all users also do not set up privately owned file when installing in system, so be unlikely to have influence on privately owned safety of files yet.
See also Fig. 3, the execution virtual unit initialization flow process of multi-user's of the present invention safety operation document method comprises the following steps: (i) step 100, at first obtains user configured privately owned directory path; (ii) step 102 checks then whether the catalogue of depositing privately owned file exists, and does not then carry out next step if do not exist, otherwise proceeds to step 106; (iii) step 104 is set up in order to deposit the catalogue of privately owned file, carries out next step then; (iv) step 106 is connected to file system manager with the file access control module.
In above-mentioned flow process, deposit the title of catalogue of privately owned file and position and be when installing in system, by the setter appointment, after system start-up, this catalogue can become invisible, that is to say, the user of non-this catalogue will can't see the existence of this catalogue fully.
Behind the accessing operation of file, when the file in all systems is carried out access, all to pass through this module in the method surveillance of stating before use.This module checks at first whether the file of user access is present in the privately owned catalogue.Because all users' privately owned file all leaves appointed positions in, so as long as judge whether the file that just can detect the access of user institute is privately owned file by the path of the file of access.If what the user used is not privately owned file, then native system only need directly carry out file operation.If user's operation is privately owned file, then must be transformed into actual file to the file path of user's appointment and operate needed path, its method is that user name is added on the path of user's appointment, just user name is joined between privately owned file directory and other sub-directories.For example, privately owned file directory is " C: Personal ", the file path that user John imports into for " C: Personal Sub1 Pic1.bmp ", user name " John " will be added to during conversion between " C: Personal " and " Sub1 Pic1.bmp ", and form " C: Personal John Sub1 Pic1.bmp ".
See also Fig. 4, the file access control flow of multi-user's of the present invention safety operation document method comprises the following steps: (i) at first, step 200, and when the user logined, system can obtain and the access request of Study document; (ii) follow, in step 202, judge that whether the path of importing into is positioned at privately owned catalogue, if then carry out next step, otherwise carry out step 208; (iii) step 204, system obtains current user name, carries out next step; (iv) step 206 after the increase user name, as the path of system file system view, proceeds to step 210 then in the path; (v) step 208 is directly used the path as the system file system view, the path imported into; (vi) step 210 uses the file request after changing to call the subsequent treatment module, finishes then.
The execution user of multi-user's safety operation document method logins part, mainly realizes the foundation of the file system environment when new user logined first.Judge whether newly user of a user, only need this user's of inquiry a privately owned catalogue whether to set up.If also do not set up, just represent that this user is for logining first.
Be necessary for this user set up privately owned file directory this moment, and to be exactly privately owned directory path add user name in the path of this privately owned file directory.If through inquiring about and having file directory to exist, then this part just can not done any operation, directly withdraws from.
See also Fig. 5, the execution user login process system of multi-user's of the present invention safety operation document method comprises the following steps: (i) at first, in step 300, and when the user logins, the user name that obtains logining; (ii) step 302 judges whether the privately owned catalogue of user's correspondence exists, if then finish, otherwise carries out next step; (iii) step 304, for the user sets up a privately owned catalogue, and directory name is identical with user name, finishes then.
Multi-user's file system has utilized the characteristic of user's login of Windows to determine user name.All use the people of Windows system all will carry out system login, to determine user name.Because user name does not have any special meaning in common Windows system, so generally speaking, the user of each using system uses same user name accessing system.But in multi-user's safe operation file system, user name relates to the file that the user can access, and this makes user name become a key, so when using multi-user's safe operation file system, different user must be with different user name accessing systems.
This method provides the security of local access for each user, as long as the user with different user name accessing systems, just can deposit the privately owned file of oneself safely, and needn't worry the file that other users can check or damage and have in system.The user will do be exactly privately owned document storage in the privately owned file directory of appointment.Be to use " C: Personal " to represent privately owned file directory in the above-described embodiments, the user not only can deposit file in this catalogue, can also be at its md down.This method is by the method for file system mapping, makes each user can only see in the privately owned file directory file of oneself.Through planting method thus, the privately owned safety of files of user can be protected, and is different with the method for traditional enactment document access right, the direct mapped file system view of this kind method.For general user, the operation of enactment document access right, not only complicated and make mistakes easily.And use file system view method described in the invention, not only easy to use, and security is better.The user need only know the position of privately owned file directory, just can be stored in the file that needs protection wherein.
Multi-user's file system is discerned different users according to current (current) user name.Current user name can directly obtain from system.All users' privately owned file all is kept in the public privately owned catalogue, default catalogue be C: PERSONAL.Each user can operate this catalogue, but the content in the different catalogues that the user saw is different.Each login user can only see in the PERSONAL catalogue that all one's own file has used the notion of file system view in multi-user's safety operation document method, the called file system view is exactly the file system structure of seeing from certain angle, comprises user's the file system view and the file system view of system.User's file system view is exactly file system of this locality of seeing of this user and the file system that the networking mapping is come, just all file and catalogues (file) that can access arrive of this user.In common Windows system, use the user of different user name accessing system that different file system view is arranged.File system view is exactly to go to see file system from the angle of operating system itself, and this has comprised that all are from the appreciable file of user perspective and sightless file, user's file and all files such as file of system.
In Windows, the file system of file system manager IFSMGR management system level, promptly IFSMGR operates the system file system view.In common Windows, all users' file system view is identical with the file system view of system.In the Windows of the safety operation document system that has the multi-user, because the effect of multi-user's safety operation document method, user's the file system view no longer file system view with system is identical, and the file system view of different user is also inequality.So, user's privately owned file just can be protected.The function of multi-user's safety operation document system of the present invention is exactly the file system view that the file system view of system is changed into the user.
See also Fig. 6, it shows the synoptic diagram that changes between multi-user's the system file system view of safety operation document method and user file system view.Synoptic diagram with Fig. 6 is an example, can find user Jack and user John C: among the PERSONAL see that file is different, and in system file system view 50, comprised all users' file, the file system view 70 of the file system view 60 of user Jack and user John for example, each user's document storage is in different catalogues.Therefore, even different users has the privately owned file of same file name, its content also can be different.Having only the corresponding file that belongs to this user in user's file system view is exactly to ask in privately owned directory name and other paths to add user name in the process that the user file system view is transformed into the system file system view.For example, user Jack want access C: PERSONAL text1.User name " Jack " is inserted between privately owned file directory name " C: PERSONAL " and other paths " text1 ".After multi-user's safety operation document method is handled, the path of passing to system become " C: PERSONAL Jack text1 ".So, the user to C: PERSONAL the operation of text1, in fact be transferred to the system file system view C: PERSONAL Jack the enterprising line operate of text1.The privately owned catalogue file operation that it should be noted that user John all is to add John after privately owned file directory, form C: PERSONAL John ... and can't form at all C: PERSONAL Jack ... the path, thereby privately owned file that can't access Jack.For the file under the non-privately owned catalogue, multi-user's safety operation document system directly is delivered to file system manager to the path, so all users can arrive in access.This shows that in multi-user's safety operation document method all catalogue and files that are arranged in privately owned catalogue all can't be arrived by other user access.Even two users have the file or the sub-directory of same names, its file or sub-directory content also can be different along with active user's difference.
The present invention can be applicable in the Windows multi-user system at present, the multi-user system of Windows allows two or more users to use a computer simultaneously, like this privately owned file that it all only can access oneself when two users use different user names to sign in in the system, but can not see the other side's privately owned file each other.System of the present invention also can use in the Windows of unit operation system, so that the space of the privately owned file of user access to be provided.

Claims (5)

1, a kind of multi-user's safety operation document method comprises the following step:
Carry out a file system manager, this document system administration manager is to be arranged in the operating system of computer, in order to the file of management system inside; And
Carry out a safe operation module, this safe operation module is to be embedded in the above-mentioned file system manager, make that executive system initialization module, user login module and file access control module in regular turn for above-mentioned multi-user's safety operation document system, use the user name of logining according to the user, produce privately owned file directory path, or make the privately owned file of this user in can its privately owned file directory of access;
The execution of said system initialization module comprises the following steps:
At first obtain user configured privately owned directory path;
Whether the catalogue that privately owned file is deposited in inspection exists, if exist, then sets up in order to deposit the catalogue of privately owned file; If there is no, then the file access control module is connected to file system manager;
The execution that above-mentioned user logins module comprises the following steps:
When the user logined, system can obtain and the access request of Study document;
Then judge whether the path of importing into is positioned at privately owned catalogue, if then system obtains current user name, in the path, increase user name after, as the path of system file system view; If not, the path that then direct use is imported into is as the path of system file system view; And
Use the file request after changing to call the subsequent treatment module;
The execution of above-mentioned file access control module comprises the following steps:
At first, when the user logins, the user name that obtains logining;
Whether the privately owned catalogue of then judging user's correspondence exists, and if there is no, for the user sets up a privately owned catalogue, and directory name is identical with user name, finishes then; If exist, then directly finish.
2. safety operation document method as claimed in claim 1 is characterized in that, above-mentioned safe operation module is present in the virtual unit of computer.
3. safety operation document method as claimed in claim 1 is characterized in that, above-mentioned safe operation module is that the interface via above-mentioned file system manager is embedded in the above-mentioned file system manager, to monitor all file operations.
4. safety operation document method as claimed in claim 1 is characterized in that, above-mentioned is to be merged by privately owned directory path and user name to form with the path that file directory is arranged.
5. safety operation document method as claimed in claim 4 is characterized in that, above-mentioned interface is used so that concrete file system can offer above-mentioned file system manager with the module's address of itself.
CNB001116568A 2000-02-03 2000-02-03 Multiple-user safety operation document system and method Expired - Fee Related CN1157660C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB001116568A CN1157660C (en) 2000-02-03 2000-02-03 Multiple-user safety operation document system and method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB001116568A CN1157660C (en) 2000-02-03 2000-02-03 Multiple-user safety operation document system and method

Publications (2)

Publication Number Publication Date
CN1307283A CN1307283A (en) 2001-08-08
CN1157660C true CN1157660C (en) 2004-07-14

Family

ID=4581563

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB001116568A Expired - Fee Related CN1157660C (en) 2000-02-03 2000-02-03 Multiple-user safety operation document system and method

Country Status (1)

Country Link
CN (1) CN1157660C (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100464276C (en) * 2005-12-30 2009-02-25 联想(北京)有限公司 Method and system for allocating and protecting subscriber software-hardware configuration information

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7069442B2 (en) 2002-03-29 2006-06-27 Intel Corporation System and method for execution of a secured environment initialization instruction
WO2007045257A1 (en) * 2005-10-18 2007-04-26 Telecom Italia S.P.A. A method for controlling access to file systems, related system, sim card and computer program product for use therein
CN100466783C (en) * 2006-04-06 2009-03-04 华为技术有限公司 Method and device for managing multi-users of mobile terminal
CN101398767B (en) * 2007-09-29 2012-05-09 联想(北京)有限公司 User login device and user login method of virtual machine system
US8489708B2 (en) * 2010-04-06 2013-07-16 Microsoft Corporation Virtual application extension points
CN102043920A (en) * 2010-12-29 2011-05-04 北京深思洛克软件技术股份有限公司 Access quarantine method of public file in data divulgence protection system
JP6000639B2 (en) * 2012-05-21 2016-10-05 キヤノン株式会社 Image processing apparatus, image processing apparatus control method, and program
CN103886270A (en) * 2014-03-31 2014-06-25 宇龙计算机通信科技(深圳)有限公司 Terminal and method for improving system safety
CN106874731A (en) * 2017-04-14 2017-06-20 深信服科技股份有限公司 A kind of application layer multi-user method and device based on terminal

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100464276C (en) * 2005-12-30 2009-02-25 联想(北京)有限公司 Method and system for allocating and protecting subscriber software-hardware configuration information

Also Published As

Publication number Publication date
CN1307283A (en) 2001-08-08

Similar Documents

Publication Publication Date Title
US7823186B2 (en) System and method for applying security policies on multiple assembly caches
CN101408899B (en) Method and apparatus for switching website multiple data sources
US7757291B2 (en) Malware containment by application encapsulation
US7069594B1 (en) File system level integrity verification and validation
CN1132109C (en) System and method for efficient caching in a distributed file system
CN1266590C (en) Progress pole/linear procedure pole management method of construction member oriented backbone system internal core
CN1157660C (en) Multiple-user safety operation document system and method
US20040210585A1 (en) Interface definition language compiler
US20110016467A1 (en) System And Method For Managing Virtual Machines
CN1732452A (en) System and method for automatically launching and accessing netwrok addresses and applications
CN1265489A (en) Management program of JAVA application program for embedded system
CN1961307A (en) System, method, and API for progressively installing software application
CN100351828C (en) File access method based on a distributed file storage system
CN101034990A (en) Right management method and device
CN1659547A (en) Key-value repository with a pluggable architecture
CN1787000A (en) System and method for centralized managing and dispatching of batch work
CN1842073A (en) Method for realizing external device mapping of network computer
CN1845119A (en) Storage and management of authentication information and method and system for proxy authentication
CN1534938A (en) Netowrk tape
CN1940929A (en) LDAP to SQL database proxy system and method
CN101079881A (en) A quick login system and method
CN1858732A (en) File searching system and method for digital household network
CN1277204C (en) Facility centralizing management method based by plugging technology
CN1314229C (en) Automatic distributing and acquiring method based on network computer configurating parameter
CN1591329A (en) Intelligent identifying and protecting method for software and hardware

Legal Events

Date Code Title Description
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C06 Publication
PB01 Publication
C14 Grant of patent or utility model
GR01 Patent grant
C56 Change in the name or address of the patentee

Owner name: INVENTEC APPLIANCES (SHANGHAI) ELECTRONICS CO., LT

Free format text: FORMER NAME OR ADDRESS: SHANGHAI ELECTRONIC TECHNOLOGY CO., LTD., YINGYEDA GROUP

CP03 Change of name, title or address

Address after: 200233 Shanghai City Guiqin Road No. 7

Patentee after: Inventec (Shanghai) Electronics Co., Ltd.

Address before: 200233 Shanghai City Guiqin Road No. 7

Patentee before: Yingyeda Group (Shanghai) Electronic Technology Co., Ltd.

CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20040714

Termination date: 20150203

EXPY Termination of patent right or utility model