TW201828146A - Method and system for managing computer sequences - Google Patents

Abstract

The disclosure is related to a method and a system for managing a series of computer sequences. The method is essentially applied to a terminal device under control of a security device. A monitoring program is executed in the terminal device and uses a sequence safe data to monitor the computer sequences running in the terminal device. When any operation of at least one computer sequence is found not complying with the sequence safe data, an abnormal signal is generated. The abnormal signal is transmitted to the security device which will notify a control center. Further, the terminal device can block the abnormal computer sequence in response to the abnormal signal.

Description

 Computer program management method and system  

The invention relates to a computer technology management technology, in particular to a computer energy management method and system for detecting an abnormal computer program.

In a security-critical security system, any hazard can have serious consequences. In addition to traditional personal safety, home security, and security at various facilities, the security system needs to guard against any information security threats.

However, the security system based on the computer system may still face information security vulnerabilities, such as the leakage of security data caused by improper human operation, or virus infection, making the information security protection measures of the security system more important.

In order to prevent the system from being abnormal due to the security problem, and if the security system is threatened by the security security, the invention discloses a computer program management method, and the method mainly operates on the terminal device subject to security control. The terminal device is connected to a security device, and the security device executes a main monitoring program. The terminal device executes a slave monitoring program, and the monitoring program monitors a plurality of computer programs executed in the terminal device according to a program security data.

In an embodiment, when it is determined that a computer program in the terminal device does not conform to the program security data, an abnormal message is generated, and then the abnormal message is transmitted to the main monitoring program executed by the security device to perform a notification. For example, notify a control center.

According to an embodiment, the security device can be a digital video recorder (DVR), and when receiving the abnormal message, a camera can be activated to record a live video. For the terminal device, the internal program can block the computer program that is determined to be abnormal based on the abnormal message. The program security data is a computer program security list that records the corresponding terminal device, and the program security data can further describe a safe operating condition of each computer program.

In one embodiment, the method operates on a computer program management system, the system is mainly a client security device, connected to a control center, wherein a main monitoring program is executed, and a terminal device is connected to the security device by a communication connection, wherein the system performs A slave monitoring program. After the monitoring program is executed by the processor of one of the terminal devices, the computer program management method described above is executed.

In order to further understand the technology, method and effect of the present invention in order to achieve the intended purpose, reference should be made to the detailed description and drawings of the present invention. The drawings are to be considered in all respects as illustrative and not restrictive

10‧‧‧Network

101,103‧‧‧Security device

102,104‧‧‧ Terminal devices

105‧‧‧ Terminal Management Platform

12‧‧‧Control Center

20‧‧‧Network

22‧‧‧Digital surveillance video recorder

221‧‧‧Main monitoring program

222‧‧‧Control unit

223‧‧‧Network Unit

224‧‧‧Links

225‧‧‧Output unit

226‧‧‧ camera

24‧‧‧ Terminal devices

241‧‧‧From the monitoring program

Step S301~S311‧‧‧ computer program management process

Step S401~S413‧‧‧ computer program management process

1 is a block diagram showing an embodiment of a computer program management system of the present invention; FIG. 2 is a view showing an embodiment of a computer program management system client device of the present invention; and FIG. 3 is a view showing a flow chart of a computer program management method according to the present invention; 4 shows a second embodiment of the flow of the computer program management method of the present invention.

The design of the security system usually has a control center, which is mainly to manage the security devices of each client. When receiving abnormal notifications, it can perform different security measures according to the security level of the event, including indicating the operation of the client device, and dispatching personnel to go. On-site processing. The client generally includes various security devices, such as a security host and various sensors connected to it, a Digital Video Recorder (DVR) and a camera, or a security device connected to other terminal devices of the client to perform regulation, such as Access control equipment, computer equipment, Point of Sale/Service (POS) in stores, Kiosk, and even ATMs provided by banks. In the computer program management system proposed by the present invention, the main monitoring program executed in the security device and the slave monitoring program executed in the terminal device are further included.

1 shows an architectural diagram of an embodiment of a computer program management system of the present invention.

This figure shows that a control center 12 is connected to each end of the security device via the network 10, or can be connected by a dedicated line, such as the security device 101 and the terminal device 102 controlled by the security device 101, and the other end including the security device 103 and the regulated device. The terminal device 104, and the terminal device 104 may belong to a terminal management platform 105. For example, an endpoint information server (POS) commonly found in a store may be owned by its owner through another dedicated connection, or may have another POS management platform. management.

The security devices 101, 103 are connected between the control center 12 and the terminal devices 102, 104, such as a security host, the aforementioned digital video recorder, and a network gateway. The control center 12 is like a security center, which can connect and manage multi-end security equipment.

The computer program management method proposed by the present invention operates in the control center 12, the security devices 101, 103 and the terminal devices 102, 104, and can be followed by reference to the embodiment of the computer program management system client device of the present invention shown in FIG.

This illustration shows a client device. The embodiment shows a digital video recorder 22 and a terminal device 24. The digital video recorder 22 mainly records the image of the monitored scene by using the camera 226. In addition to recording and storing, the network can be transmitted through the network. 20 is transferred to the other end of the control center.

According to an embodiment, the main circuit block in the digital video recorder 22 has a control unit 222 that processes the internal signals of the device, and a network unit 223, a port 224, and an input/output unit 225 that are electrically connected to the control unit 222. The network unit 223 in the digital video recorder 22 processes the data packets transmitted with the external network 20. In the embodiment of the digital video recorder 22, the video signals are primarily transmitted. The port 224 of the digital video recorder 22 is often connected to the controlled terminal device 24 by a serial communication port, such as an industrial connection communication technology such as RS-232. The advantage of this kind of communication connection technology is that it is not the specification of the data network, it is not easy to be destroyed, and the data cannot be extracted from the outside, but the actual implementation is not limited to this type of communication connection. The input/output unit 225 of the digital video recorder 22 is used to connect one or more cameras 226 to perform signal control transmission and image reception.

According to the embodiment of the computer program management method of the present invention, the memory in the digital video recorder 22 carries a main monitoring program 221, and after the main monitoring program 221 is executed by the processor, the slave monitoring device 241 performs a security with the terminal device 24. Message channel communication. During operation, the main monitoring program 221 can periodically obtain the monitoring result from the monitoring program 241, or the monitoring program 241 can actively transmit the monitoring result to the main monitoring program 221 via the secure message channel.

In the embodiment of the present invention, the terminal device 24 is connected to the security device by a communication connection. After the digital monitoring video recorder 22 of the example is executed by the monitoring program 241 via the processor of the terminal device 24, it is executed as shown in FIG. An example flow of a computer program management method.

Step S301 shows that before the general operation of the computer program management is performed, the system defines a program security data, such as a computer program security list (or white list), which defines a computer program when the terminal device is in normal operation, such as a resident resident sensor program. The program of the security device is regularly reported, the program for timing system repair, the device sleep and startup program, and the like. The safe operating conditions of each computer program can be further defined. The safe operating conditions described herein can define a safe operation range according to the attributes of each computer program, and can avoid abnormal operating conditions caused by virus infection of the computer program, for example, A computer program generally only takes up 10% of the computing power of the processor, and suddenly rises to 60%; or a computer program that has an abnormally occupied data bandwidth, and can be judged as an abnormal condition under the condition of safe operation. The program safety data can be managed by the control center, and the respective program safety data can be formulated according to the form and needs of the terminal devices of each client, and the program safety data can be distributed to the security devices and can be transferred to each terminal device, which is not necessarily a unified setting.

Step S303 describes that the main monitoring program is executed by the security device, and the slave device executes the slave monitoring program. Then, in step S305, the monitoring program executes the program monitoring, and the monitoring device monitors the terminal device according to the program security data of the corresponding terminal device. A plurality of computer programs are executed, as in step S307, to determine whether there is an abnormal computer program. After comparing the program safety data, including comparing the safety list of the computer program or a safe operating condition of each computer program, if there is no abnormality (No), step S305 is repeated.

When it is found that there is a computer program in the computer program executed in the terminal device that does not list the computer program safety list, or if it is determined that the computer program is listed in the computer program safety list, but does not conform to the safe operating conditions recorded in the program safety data, it is determined as Abnormal (Yes), that is, step S309 is executed, and an abnormality message is generated from the monitoring program, including driving the control program in the terminal device to block the computer program determined to be abnormal, or the control program in the terminal device may suspend the service corresponding to the program. Further, in step S311, the embodiment may include generating a notification control center message when the abnormality message is received by the main monitoring program of the security device.

4 depicts an embodiment of a computer program management method using a digital video recorder as a security device.

In this process, after the terminal device executes the slave monitoring program, in step S401, the program monitoring is performed in a resident manner. In step S403, the monitoring mode mainly performs the comparison program security data. In step S405, it is determined whether there is any Unknown computer programs listed in the computer program safety list in the program safety data, or computer programs in the list do not meet the set safe operating conditions.

When it is determined that there is no abnormal program that does not conform to the program safety data (No), step S401 is repeated; otherwise, it is determined that there is an abnormal program (Yes), that is, step S407 is executed, an abnormality message is generated, and the main monitoring program running on the digital video recorder is from the terminal device. The internal slave program acquires an abnormal message. In step S409, the video recording program of the digital video recorder is started, and a camera is started to record the image.

Thereafter, the video recording may be archived as described in step S411, or the control center may be notified according to the abnormality message as in step S413. In another embodiment, if the terminal device itself is also connected to the associated terminal management platform, the related abnormality message may also be notified to the terminal management platform.

According to the computer program management method and system disclosed in the disclosure, the method mainly operates on a terminal device that is subject to security control. The system includes a terminal device set on the client end and a connected security device, and the security device executes a main monitoring program. The device executes a slave monitoring program, and the slave program monitors a plurality of computer programs executed in the terminal device in accordance with a program security data. It should be noted that the program safety information may be provided with a separate list of computer program safety for various terminal devices, or with the safe operating conditions of each program.

However, the above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Therefore, equivalent structural changes in the description and the drawings of the present invention are equally included in the present invention. Within the scope of the agreement, Chen Ming.

Claims (10)

 A computer program management method includes: monitoring, according to a program security data, a slave program of a terminal device to monitor a plurality of computer programs executed in the terminal device; and determining that a computer program in the terminal device does not meet the operation The program security information generates an abnormal message; and transmits the abnormal message to a main monitoring program executed by the security device to perform a notification.    The computer program management method according to claim 1, wherein the terminal device is a device controlled by the security device, and the terminal device is connected to the security device by a communication connection.    The computer program management method according to claim 2, wherein the security device is a digital video recorder, and when the abnormal message is received, a camera is started to record an image.    The computer program management method according to claim 3, wherein the security device notifies a control center.    The computer program management method according to claim 4, wherein the program security data is formulated by the control center, and the program security data is distributed to the security device and/or the terminal device.    The computer program management method according to claim 1, wherein the terminal device blocks the computer program determined to be abnormal according to the abnormality message.    The computer program management method according to any one of claims 1 to 6, wherein the program security data records a computer program security list corresponding to the terminal device.    The computer program management method according to claim 7, wherein the program security data further records a safe operating condition of each computer program.    A computer program management system comprising: a security device connected to a control center, wherein a main monitoring program is executed; a terminal device is connected to the security device by a communication connection, wherein a slave monitoring program is executed, and the slave monitoring program The main monitoring program establishes a secure message channel via the communication connection. After the monitoring program is executed by the processor of the terminal device, the following steps are performed: a. according to a program security data, the slave monitoring program monitors the a plurality of computer programs executed in the terminal device; b. generating an abnormal message when determining that a computer program in the terminal device does not comply with the program security data; c. transmitting the abnormal message to the security device The main monitoring program executes a notification; and d. the terminal device blocks the computer program determined to be abnormal according to the abnormal message.    The computer program management system according to claim 9, wherein the security device is a digital video recorder, and when the abnormal message is received, a camera is started to record an image.