JP2006331005A - Method for protecting document for application software - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a document protection method for application software for a plurality of related specific document formats. <P>SOLUTION: The document protection method is executed by a real time monitor program and is for the plurality of related specific document formats. A document related to the application software is encoded. When the application software is to be executed, the real time monitor program is called. Then, an interface collects specific information on the application software. After the designated specific information has been collected, dynamic registration is performed. Accordingly, registration of the status of a real time monitor is started. When an open document is decoded and then the document is closed, the document is again encoded. Furthermore, for surely protecting the document, operations such as copying, pasting and printing are prohibited. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates generally to document protection methods for application software, and in particular, application software developed for specific purposes that can restrict multiple input / output operations to ensure protection of related documents. Relates to a built-in real-time monitor and control mechanism.

As is well known, modern computers provide optimal management tools and data storage media. All kinds of application software for various purposes have been developed and are available on the market, such as personnel management system, financial management system, accounting information system, invention management system, etc. that provide convenient and functional management tools It is. All of these user interfaces and application software have been developed to achieve ease of use. However, such a humanistic design provides a means for business espionage or computer hackers to steal or destroy data. Therefore, encryption is an indispensable method for ensuring document protection.
Conventional cryptographic tools for computer documents primarily use passwords for data encryption, but the disadvantages of the encryption method are clear. Usually, the amount of documents to be encrypted is large, and similarly, the time required for encryption is long. In addition, password management causes other problems as the number of encrypted documents increases.

  Furthermore, password locks are generally available, but the object to be locked is the computer itself, password locks are inconvenient, and have low practical value. In other words, computer locking is not sensible because application programs, system software, and documents stored in the computer need not be locked at the same time. Furthermore, it is not efficient to encrypt a large number of documents one by one by the conventional method. On the other hand, controlling and locking documents of a plurality of specific document formats such as personnel management, financial management, accounting, etc. can be an effective means. The present invention thus relates to the encryption of objects in a document format associated with an application program or system software and provides an effective means for document protection.

  Accordingly, it is an object of the present invention to provide a document protection method for the application software for a plurality of specific document formats associated with the application software. The application software can monitor the document in real time, restricting the execution of multiple functions on the document, thereby providing effective protection to the document.

  In order to achieve the above object, the main technique used in the present invention is embedding a real-time monitor program in application software and encrypting a plurality of documents in a plurality of document formats related to the application software. It is. The real-time monitor program executes the steps as follows.

  First, the real-time monitor program receives a call message generated after execution of the application software. Specific information of the application software is collected. The specific information obtained is used for real-time registration and subsequent input of the status of the real-time monitor. When the application software opens a document, the opened document in a format associated with the application software is decrypted.

  Execution of a number of specific operations on the document, such as copy, paste, repost, and print, is restricted. The document is then encrypted when the document is closed. Finally, the registration data is deleted when the application software is terminated.

  Therefore, according to the present invention, by embedding the real-time monitor program in the application software, it is possible to reliably protect documents of a plurality of document formats related to the application software.

  Preferred embodiments of the present invention are described below. Application software is subject to monitoring. The range of monitoring and control covers a plurality of new and old documents generated in connection with the application software. All newly generated documents of the application software are encrypted when the document is closed under monitor and control conditions, so the application software runs to reopen the associated document When done, the document is decrypted. In this method, all documents of a plurality of specific document formats are encrypted. Furthermore, it is not necessary to encrypt these documents one by one. Therefore, the present invention provides a number of conveniences and can eliminate the problem of password management by using automatic decryption when the application software that receives the monitor opens the document.

  Further, the main protection operation of the present invention is the limitation of various input / output operations such as copying, pasting, resending and printing. When the document associated with the application software requires a security measurement as described above to prevent the disclosure of unauthorized unauthorized data, the present invention performs the protection of the document. . An implementation technique of the present invention will be described below.

  The present invention is achieved by embedding a real-time monitor program in the application software, and a plurality of newly generated documents are encrypted when the application software is executed. The document is encrypted when it is closed and decrypted when it is opened. The real-time monitor program limits operations such as copying, pasting, resending, and printing of the document after the execution of the application software is started. Thereby, the above described action prevents unauthorized access to the document.

  Referring to FIGS. 1A to 1B, the real-time monitor program executes the following steps.

Receiving a call message 101 generated after the application software is executed 101
Since the real-time monitor program is incorporated in the application software, an association is set between the real-time monitor program and the application software. Thereby, when the application software starts execution, the real-time program is called and starts executing.

Collection of specific information of the application software 102
After the real-time program is started, the specific information of the application software is an interface incorporated in a computer Windows system such as Windows (registered trademark) 32-bit Application Programming Interface (trademark, hereinafter referred to as API). After that, it is collected. Therefore, the API can store the specific information of the application software including the document size, data format, file name of the document specified by the real-time program or the generation time stamp of the document later. ) To be provided.

Performing real-time registration 103 of the information using the obtained information and subsequent input 104 of the real monitor state
The real-time program collects the specified information of the application software using the API for the registration. When the API finishes collecting the specific information, the dynamic registration is completed. The specific information for the registration is temporarily stored, and then the real-time monitor status 104 is input.

  When the application software opens a document of the associated document type, the document is decrypted under the real-time monitor situation, as shown in steps 105 and 106. The encryption / decryption technology that can be used is DES III. Also, other encryption / decryption devices connected in the form of peripheral devices such as pc-guard (TM) or key-pro (TM) can be used, and an algorithm developed by the user is used. be able to.

  When the application software is opened and the document is in use, the real-time monitor program performs a copy, paste, re-send or print operation under the real-time monitor situation, as shown in step 107. Limit. This restricting operation is performed by the action of the built-in Installable File System (trademark) of the Windows (registered trademark) basic software. This Installable File System (trademark) controls the generation, release, reading and writing of the document by the basic software. As a result, the real-time program of the present invention captures an Installable File System (trademark) signal and monitors and controls the creation, release, reading, writing, etc. of the specific document so as to limit the operation described above. . Eventually, as shown in step 108, once the document that has been used is closed, the document is encrypted as shown in step 109.

  The registration data is then deleted as indicated at step 111 when the application program or application software is terminated, as indicated at step 110. When the application software is executed next time, the registration is performed again.

  The present invention will be more fully understood from the foregoing description of the preferred embodiment. Thus, the data protection method of the present invention can be used by providing the real-time program to a number of application software developers in order to incorporate the real-time program into the application software for a specific purpose. . In this way, the developed application software is provided with a data protection function. As a result, the functional value of the application software is increased and the added value thereof is increased.

FIG. 1A shows a flowchart of the invention. FIG. 1B shows a flowchart of the invention.

Claims (8)

A document protection method for application software, wherein the application software includes a real-time monitor program for encrypting a related document of the application software, the monitor program being executed after the application software is executed. Receiving the generated call message,
Collecting specific information of the application software;
Performing real-time registration of the information using the specific information obtained, and inputting a real-time monitor status;
When the application software opens one of a plurality of documents in a document format associated with the application software, decrypting the opened document, and a plurality of specific actions on the document A method for protecting a document, wherein the steps of prohibiting execution and encrypting the document when the document is closed are executed.   After the real-time monitor program collects the specific information of the application software and finishes the registration, it temporarily holds registration data, and the registration data is deleted when the application software ends. The protection method according to claim 1.   The protection method according to claim 2, wherein the specific information includes a document size, a data format, a file name, or a generation timestamp of the document.   The real-time monitor program is related to an encryption / decryption mechanism for encryption and decryption of the document, and the encryption / decryption mechanism is DES III or other algorithm. the method of.   The protection method according to claim 1, wherein the real-time monitor program is connected to an encryption / decryption device installed as a peripheral device.   4. The method according to claim 3, wherein the real-time monitor program collects the specific information using a Windows (registered trademark) 32-bit Application Programming Interface (trademark) embedded in a Windows (registered trademark) basic software.   The protection method according to claim 1, wherein the real-time monitor program prohibits execution of a copy, paste, retransmission, or print operation under the state of the real-time monitor. The method according to claim 1 or 7, wherein the real-time monitor program prohibits the specific operation of the document by using Installable File System (trademark) incorporated in Windows Windows (registered trademark) basic software.

Images