JP2007074701A - Method for encrypting and decrypting information security and recording media readable by personal computer - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method for encrypting and decrypting information security. <P>SOLUTION: Regarding a method for encrypting information security, cipher protection is performed upon a file in a prescribed operation process by security measures. Regarding a method for decrypting information security, a user authority is read to protect the encrypted file and if the encrypted file can be decrypted by the user authority, the encrypted file for which decrypting operation is completed, is further encrypted to protect the file. At the same time, decrypting and re-encrypting processes are prevented by a conceal mode from being displayed on a user operation screen, user operational inconvenience is reduced, and the encrypted process is effectively prevented from being destroyed by other person. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

The present invention relates to a secret method, and in particular, operates a secret measure suitable for a file of an arbitrary type within a predetermined operation process, performs encryption protection, and a method for secreting a file encrypted using read authority. Perform the operation.

  In the modern age of information digitization, a lot of personal secret information and important organization information are processed and stored by computers, where the importance of computer information security is increasing day by day. The existing methods of computer information system safety include visit control tables, group controls, and user identification, each with its own characteristics. US Patent No. 599151 “Method and apparatus for multi-level security evaluation” is a combination of single methods, such as visit control table, group control, etc. This method uses the merit of the speed of system processing to increase the safe processing speed, and the system divides users into classes with different authorities. At the same time, system resources are divided according to the type of user, and then an appropriate method is selected to determine whether an application for system visit is permitted according to certain rules. In addition, Taiwan Patent Nos. 486629, 494344, and 583559 are all related to several authority safety management systems and methods. FIG. 1 is a process diagram of the existing technology, and the structure of the existing technology is outlined below. . First, an authority rule (S10) is set. Of these, the authority rule restricts the user's operation, then reads the user's authority and authority rule (S11), and when the user starts the operation (S12), First, the computer determines whether the user authority matches the operation action (S13). If the user authority is satisfied, the computer executes the operation action (S14). If the user authority is insufficient, The operation operation (S15) is stopped, a user authority shortage is notified, and the process is terminated.

  However, if a privileged user leaks confidential information, it cannot protect all the leaked information, and many highly sensitive corporate organizations and organizations are all in order to prevent the leakage of information. Although it is forbidden to connect an attached storage, this method is inconvenient for users to transmit information, and when it is necessary to download or transmit information to the outside, a predetermined method is used on a predetermined computer. If information must be downloaded and externally transmitted, and a large number of users have to download and externally transmit information using this method, it will affect work efficiency and burden the information operations of the corporate group and the entire organization. Will increase.

Regarding the information safety management method in the existing technology, an authority control method is adopted, and it is impossible to provide a complete and complete solution for information download and external transmission. Therefore, the provision of a complete information security management method is extremely necessary.
U.S. Pat.No. 5,991,551 Taiwan Patent No. 486629 Taiwan Patent No.494344 Taiwan Patent No. 583559

  The main object of the present invention is to provide an encryption method for information safety, to protect a file in a predetermined operation process by a security measure, and to re-encrypt and protect a file in a hidden mode on a user operation screen. Therefore, it is possible to reduce inconvenience in operation of the user and to effectively prevent the destruction of the protection process encrypted by others.

Another object of the present invention is to provide an information-safe decryption method, read the user's authority, protect the encrypted file, and decrypt the encrypted file when the user's authority is encrypted. Can be further protected by encrypting the file, and the process of decrypting and re-encrypting in hidden mode is not displayed on the user's operation screen, reducing the inconvenience of the user's operation and protecting encrypted by others The destruction of the process can be effectively prevented.

  The present invention provides an encryption method for information security. First, a secret countermeasure is preset by a system administrator, and a plurality of encryption rules are included in the secret countermeasure, and the encryption rule is controlled by a file operation process. Subsequently, when the computer in the secret system has a secret countermeasure by the connection method, and the user operates the unencrypted file, the operation process conforms to the encryption rule of the secret countermeasure. If the operation does not match the encryption rule, the encryption process is completed, and the user can freely perform the operation, and if the operation matches the encryption rule, the user performs the operation. After completion, encryption protection is performed on the unencrypted file, the unencrypted file is converted into an encrypted file, and finally the encrypted file is stored.

  The present invention provides an encryption method for information security. First, a user enters a computer in the secret system through an authentication process, and simultaneously reads a user authority through a previous authentication process. When the user starts operating the encrypted file, Is decrypted by determining whether or not the right of the file matches the encrypted file. If the user's authority does not match the encrypted file and the decryption is not performed, the user is notified that the encrypted file cannot be read due to insufficient authority, and the decryption process is terminated. If the user's authority is satisfied to decrypt the encrypted file, the decryption operation of the encrypted file is executed, the encrypted file is converted into a decrypted file, and then the user can freely manipulate the decrypted file. After the user completes the file operation, the decryption file is encrypted, the decryption file is changed to a new encryption file, and finally the new encryption file is stored.

  In order that those skilled in the art can understand the objects, features, and effects of the present invention, specific examples, accompanying diagrams, and detailed descriptions of the present invention are given below.

  FIG. 2 is a flow chart of a relatively preferred embodiment of the present invention. The present invention provides an information safety encryption method, wherein a secret measure (S20) is preset by a system administrator, and a plurality of encryption rules are included in the secret measure. Encrypts a file of a predetermined type and encrypts all files transmitted to an external storage or encrypts a file with a predetermined name, etc. When the computer has a secret measure (S21) and the user performs an operation on an unencrypted file (S22), the operation includes operations such as reading, editing, and correction, and the operation is the secret (S23), if the operation does not match the encryption rule, the process of the information secure encryption method of the present invention is completed, The user can perform the operation freely, and if the operation conforms to the encryption rule, after the user completes the operation, the user performs encryption protection on the unencrypted file (S24) and is encrypted. The file that has not been processed is converted into an encrypted file, and finally the encrypted file is stored (S25).

  In addition, the present invention provides a PC-readable recording medium, records an information safety encryption method, and first a secret measure is preset by a system administrator, and a plurality of encryption rules are set in the secret measure. The encryption rule is controlled by a file operation process, and then the computer in the secret system has a secret measure by a connection method, and when the user operates on an unencrypted file, The operation includes operations such as reading, editing, and correcting. If the operation process matches the encryption rule of the secret measure, and if the operation does not match the encryption rule, the encryption process is performed. And the user is free to perform the operation, and if the operation conforms to the encryption rules, after the user completes the operation, the operation is encrypted. It performs a cryptographic protection to the stomach file, a file that has not been encrypted to encrypted files, to save the last in the cryptographic file.

  FIG. 3 is a process diagram 2 of a relatively preferred embodiment of the present invention. The present invention provides an encryption method for information security. First, a user enters a computer in the secret system through an authentication process, and at the same time reads a user authority through a previous authentication process (S30), and the user starts to operate the encrypted file. At this time (S31), the operation includes operations such as reading, editing, and correction, and it is determined whether or not the authority of the user matches the encrypted file (S32). If the user's authority does not match the encrypted file and the decryption is not performed, the user is notified that the encrypted file cannot be read due to insufficient authority, and the decryption process is terminated. If the user authority is satisfied to decrypt the encrypted file, the decryption operation of the encrypted file is executed (S33), the encrypted file is converted into a decrypted file, and then the user freely operates the decrypted file as a file. (S34), after the user completes the file operation, the decrypted file is encrypted (S35). If the decrypted file does not change or cannot be written when performing the file operation, the decryption file is decrypted. The process is terminated, and if the decrypted file changes or can be written when performing file operations, the decrypted file is changed to a new encrypted file, and finally the new encrypted file is stored (S36).

  In addition, the present invention provides a readable recording medium for a personal computer, records an information safety encryption method, and a user first enters the computer in the secret system through an authentication process and simultaneously reads the user authority through the previous authentication process. When the user starts to operate the encrypted file, the operation includes operations such as reading, editing, and correction, and it is determined whether the user's authority matches the encrypted file. If the user authority does not match the encrypted file and the decryption is not performed, the user is notified that the encrypted file cannot be read due to insufficient authority, and the decryption process is terminated. If the user's authority is satisfied to decrypt the encrypted file, the decryption operation of the encrypted file is executed, the encrypted file is converted into a decrypted file, and then the user can freely manipulate the decrypted file. The decryption file is encrypted after the user completes the file operation, and if the decryption file does not change or cannot be written when performing the file operation, the decryption process is terminated. If the file is changed or writable when performing file operations, the decrypted file is made a new encrypted file, and finally the new encrypted file is saved.

  It should be noted that the process chart of the above-described information security encryption method and information safety decryption method can set the hidden mode, and the file is not protected by encryption protection so that there is no inconvenience to the user. It is possible to effectively prevent destruction of the protected protection process.

  The information-safety encryption method of the present invention uses a secret measure to protect a file in a predetermined operation process, and therefore the predetermined operation process can be performed by executing a sensitive file such as an information leak or secret. Even in the process of duplicating files, everything is protected. And any type of file is cryptographically protected. Compared with the authority management method, the information security encryption method of the present invention protects against the outflow of information and does not use a passive method of prohibiting connection to an external storage. However, the encryption method used by the information security encryption method of the present invention is all automatic encryption, which not only eliminates the inconvenience of encrypting files by the user. It is possible to prevent others from leaking the file, and at the same time, it is possible to prevent the destruction of the encryption process by installing a hidden mode. In addition, when the information-safe encryption method of the present invention operates on an encrypted file, it is encrypted again after the operation is completed, preventing the file from being destroyed after the decryption operation and information leakage, and thus completely protecting the file. Therefore, the present invention is knitted and highly inventive and satisfies the requirements for patent application. I would like to have a patent granted as soon as possible.

  Although the present invention has been described in detail above, what has been described above is only a relatively preferred embodiment of the present invention and does not limit the scope of the present invention. All changes and modifications made within the application scope of the present invention belong to the patent application scope of the present invention.

It is process drawing of the existing technique. FIG. 2 is a flow chart of a relatively preferred embodiment of the present invention. FIG. 2 is a process diagram 2 of a relatively preferred embodiment of the present invention.

Explanation of symbols

S10 Setting of authority rule S11 Reading of user authority and authority rule S12 Start of operation S13 Determination of operation S14 Execution of operation S15 Stop of operation S20 Setting of encryption countermeasure S21 Reading of encryption countermeasure S22 Start of operation S23 Whether encryption rule is met S24 Encryption S25 Storage S30 User authority reading S31 Encryption file start instruction S32 Judgment whether authority is decrypted S33 Decryption S34 File operation execution S35 Encryption S36 File storage

Claims (20)

Reading a secret measure, wherein the secret measure includes at least one cryptographic rule, wherein the cryptographic rule controls the process of file manipulation;
An execution process that performs the file manipulation process;
A cryptographic process for encrypting a file that conforms to the cryptographic rule and executes the operation process is further included. The cryptographic rule further includes a step of encrypting a predetermined type of file, and all files transmitted to an external storage. An information-safety encryption method comprising a step of encrypting or a step of encrypting a file having a predetermined name. 2. The information security encryption method according to claim 1, further comprising a setting step of setting the secret measure before the reading step. 2. The information security encryption method according to claim 1, wherein the reading step includes a hidden mode operation. The information encryption method according to claim 1, wherein the encryption step includes a hidden mode operation. The encryption step determines whether the operation process matches the encryption rule of the secret measure, and the determination of the operation step of the determination step matches the encryption rule of the secret measure. The information security encryption method according to claim 1, further comprising a determination step of encrypting the file. The encryption step determines whether the operation process matches the encryption rule of the secret measure, and the determination of the operation process of the determination step matches the encryption rule of the secret measure. 2. The information secure encryption method according to claim 1, wherein if not, the flowchart is completed and the user can freely operate the file. A readable recording medium of a personal computer for recording an information safety encryption method, reading a secret measure, wherein the secret measure includes at least one encryption rule, and the encryption rule controls a file operation process. Reading process;
An execution process that performs the file manipulation process;
An encryption process is performed for encrypting a file that conforms to the encryption rule and executes the operation process. The encryption rule further encrypts a predetermined type of file, encrypts all files transmitted to an external storage. The computer-readable recording medium according to claim 1, further comprising a step of encrypting or encrypting a file having a predetermined name. 8. The personal computer readable recording medium according to claim 7, further comprising a setting step of setting the secret measure before the reading step. 8. The computer-readable recording medium according to claim 7, wherein the reading step includes a hidden mode operation. 8. The computer-readable recording medium according to claim 7, wherein the encryption step includes a hidden mode operation. The encryption step determines whether the operation process matches the encryption rule of the secret measure, and the determination of the operation step of the determination step matches the encryption rule of the secret measure. 8. The computer-readable recording medium according to claim 7, further comprising a determination step of encrypting the file. The encryption step determines whether the operation process matches the encryption rule of the secret measure, and the determination of the operation process of the determination step matches the encryption rule of the secret measure. 8. The computer-readable recording medium according to claim 7, wherein if there is not, the flowchart is completed and the user can freely operate the file. Read process of authority to read user authority,
A preparation step for instructing the process of executing the encrypted file;
A determination step of determining whether a user's authority can decrypt the encrypted file;
A decryption step of decrypting the encrypted file and converting the encrypted file into a decrypted file when a user authority can decrypt the encrypted file;
An execution step of executing the decryption file,
The information safety decryption method according to claim 1, wherein when the user authority cannot decrypt the encryption file in the determination step, the flowchart is completed. 14. The information safety decoding method according to claim 13, wherein the determination step includes a hidden mode operation. 14. The information security decoding method according to claim 13, wherein the decoding step includes a hidden mode operation. When the decryption file completes execution of the operation process, the execution step encrypts the decryption file that has performed the operation process, and converts the decryption file that performs the operation process into a new encryption file. 14. The information security decoding method according to claim 13, further comprising a step. A computer-readable recording medium for recording an information safety encryption method, the reading process of the authority to read the authority of the user,
A preparation step for instructing the process of executing the encrypted file;
A determination step of determining whether a user's authority can decrypt the encrypted file;
A decryption step of decrypting the encrypted file and converting the encrypted file into a decrypted file when a user authority can decrypt the encrypted file;
An execution step of executing the decryption file,
The personal computer readable recording medium according to claim 1, wherein when the user authority cannot decrypt the encrypted file in the determination step, the flowchart is completed. The computer-readable recording medium according to claim 17, wherein the determination step includes a hidden mode operation. The computer-readable recording medium according to claim 17, wherein the decoding step includes a hidden mode operation. When the decryption file completes the execution of the operation process, the execution step encrypts the decryption file that has performed the operation process, and converts the decryption file that performs the operation process into a new encryption file. The computer-readable recording medium according to claim 17, comprising: