TW529282B - Anti-theft method for digital data and anti-theft digital data processing system - Google Patents

Abstract

The present invention is an anti-theft method for digital data and an anti-theft digital data processing system. The system comprises the first digital data processing device, and the second digital data processing device. The method includes the following steps: proceeding a registration procedure on the first digital data processing device with respect to the second digital data processing device; the first digital data processing device generates a pair of keys and a client identity, and the pair of keys includes a private key and a public key, and the client identity code and the private code are stored in the second digital data processing device; in response to a data storage operation executed by the second digital data processing device to a digital data file, the second digital data processing device automatically employs the private key to apply a data storage operation with encryption process on the digital data file, and further forming an encrypted digital data file; in response to a data reading operation executed by the second digital data processing device on the encrypted digital data file, the first digital data processing device will automatically transmit the public key to the second digital data processing device after the identification confirmation of the client identity code; and, the second digital data processing device employs the public code to conduct a data reading operation with decryption step on the encrypted digital data file.

Description

529282 V. Description of invention α) Field of invention This case is a method for preventing theft of digital data and a digital data processing system for preventing theft, especially a method for preventing theft of digital data and a system for preventing theft of digital data used in a company's internal network. Background of the Invention With the rapid development of the information industry, many intangible knowledge and information have been digitized and existed as digital data, such as various types of digital data files that employees within the enterprise have come into contact with or even produced during work. 4 etc. should belong to the private assets of the enterprise and be subject to restrictions on use. Therefore, companies try to prevent such digital data files belonging to company assets from being misappropriated by employees themselves or outsiders. Therefore, how to protect digital data files is an increasingly important issue in the era of the knowledge economy. Subject. The current measures to prevent the theft of digital data files usually encounter the following difficulties: 1. The general file encryption function is manually encrypted by the employees themselves, but this method cannot prevent the employees' misappropriation. 2. When the security guards inspect the items brought out of the company, due to the storage of digital data files | the variety of media makes it impossible for general security guards to perform the inspections. 3. Digital data files can be easily emailed to the company to allow

Page 5 529282

Therefore, how can we improve the purpose of digital data files not being arbitrarily misappropriated? . The lack of customary means for the fans is to develop the case :: Summary of the Invention This case is a first device connected to the first digital data, a password and a public password, two digital data to one digital data Handle an encrypted step file; read the public password pair of the user's digital data in response to the case. A digital-to-digital data method includes the following digital data processing device relative to a user identification code, and automatically uses the data stored in the material file of the user processing device to store the second digital-data reading code to confirm the physical device; The encrypted digital data anti-theft processing device has the following steps: according to the device, it should be the second number, the pair of password identification codes and medium; according to one of the rows, the private password is stored, and the data processing is installed. The method of automatically transmitting the second data file after copying, the application and the processing of a second data line and the registration process of the second data line include a private operation of the private password and the storage of the second data to form the second data. A plus set sends the encrypted digital data to the public confidential data processing line. A decryption is performed on the signal. The data processing data processing sequence is the J-number generated by the device and the password is stored in the data processing device. — Digital material file for dense digital data Owned bit shift processing means material permeable to the second code means for utilizing the resource materials of step

Page 6 529282 V. Description of the invention (3) According to the previous step, a person with confidential information, a step of claiming rights, includes the steps of reading and processing of digital materials, processing of data, processing, identification, packing, and transmission: the storage code of the material, Upper: Based on the material storage limit table and according to the following, the following shall be taken: Upper the device, one of the code pairing and the time setting on the file of the data filer, the requesting device, and the public shall do it according to the second instruction above. The structured second instruction automatically describes the structured information; the structured second case automatically signals the user ’s attached signal, and the general password description concept. The digital data anti-theft method may further include the following digital data, which the processing device receives and uses. When issued by the author, 'the second digital data processing device captures the private action to perform the encryption step on the digital data file. When the digital data is used, it should be added to the digital data: available for editing , The digital data information department, the second one of the additional data, and one of the additional information issued by the digital data department issued an information code containing the identification code plus the signal network position and the first request, the digital request Access to the address should store two digital data anti-theft management device digital confidential digital material anti-theft area project to the anti-theft management device to read the signal to the user, the network permission table verification, in line with the pre-fetch authority bit data anti-theft The user shall receive the data from the material source; the user may receive instructions for the road position of the account; in the processing method set in the table When the file method for reading and reading in the file method is used, one of the more available ones will be placed in hand. The account number of the access is more available. The second asset includes the following access list. Time; can include the following encrypted data when the digital data is encrypted, the following encrypted data management data installed digital data user data automatically, the address, and the first user account the first number of special provisions Device. The environment in which the law applies

$ 7 pages 529282 5. Description of the invention (4) A third digital data processing device may be included, which is connected to the first digital data processing device, and the method further includes the following steps. The processing device performs a registration procedure on the first digital data processing device. The first digital data processing device generates the pair of passwords and a second user identification code corresponding to the second digital data processing device. The pair of passwords includes the private password. And the public password, and the second user identification code and the private password are stored in the third digital data processing device; one of the data reading performed by the third digital data processing device on the encrypted digital data file is performed Action, the first digital data processing device automatically transmits the common password to the third digital data processing device after confirming the identity through the user identification code; and the third digital data processing device performs the encrypted digital data file using the public password A data reading operation with a decryption step. According to the above concept, the method for preventing theft of digital data may further include the following steps: when the third digital data processing device receives a data reading instruction issued by the user to the encrypted digital data file, the third digital data processing device processes the third digital data The device automatically sends a second request signal to the first digital data processing device. The request signal includes the user account number, the user identification code of the third digital data processing device, time, network address, and the encrypted digital number. The access permission table attached to the data file; and the first digital data processing device verifies the second request signal. When the user account, user identification code, time, and network address all conform to the preset in When the general requirements of the first digital data processing device and the special requirements of the access authority table, the common password is automatically transmitted to the third digital data processing device.

Page 8 529282 V. Description of the invention (5) According to the above idea, the first digital data processing device, the second digital data processing device, and the third digital data processing device applied to the digital data anti-theft method can be connected to On the Internet. According to the above idea, the network to which the digital data anti-theft method is applied may be a company intranet. According to the above idea, the first digital data processing device to which the digital data anti-theft method is applied is a server. According to the above-mentioned concept, the second digital data processing device and the third digital data processing device to which the digital data anti-theft method is applied can be a first client and a second client. According to the above idea, the value of the private password and 4 the public password in the digital data anti-theft method are the same. According to the above-mentioned concept, in the method of digital data anti-theft method, the values of the private password and the public password may be different in pairs. Another aspect of this case is an anti-theft digital data processing system. The system includes: a first digital data processing device in which a common password is stored; and a second digital data processing device, the signal is connected to the first digital A data processing device. The first digital data processing device corresponds to a registration procedure performed on the second digital data processing device to generate a pair of passwords and a user identification code. The pair of passwords includes a private password and the A public password, and the user identification code and the private password are stored in the second digital data processing device. When the second digital data processing stomach> device performs a data storage operation on a digital data file, the first The digital data processing device automatically uses the private password to enter the digital data file.

Page 9 529282 V. Description of the invention (6) A data storage tank case with an encryption step is performed. When the second digital data case performs a data reading operation, the user automatically recognizes the identity of the data processing device, and The second digital performs a 0 action on the encrypted digital data file to form an encrypted digital data processing device. The first digital data processing device transmits the common password to the second digital data processing device through the encrypted digital data file. When using the data of the public secret bank with a decryption step to read the digital data, the first one will do the same automatically. In the case of digital data, the first action is attached to the available space according to the limit table. One of the available data can be issued according to the above. The number one contains the digital data used by the processing device to prevent profit according to the above concept. The above-mentioned concept of the file, the processing device accesses * six ί | less-seven fp, Syij Γ λ7 ^ After receiving one of the data storage instructions issued by the user, the processing device can capture the private password, and then proceed with the data with the encryption step Store move

I A digit of the encrypted structure includes the above structure to be read below. T The data read request letter has the data to be considered digitally, the number of times of funding is to be set, and the access instruction is set to the user. Information: Yes; it is available for anti-theft use. When the order is received, the first account number and digital information user can issue the case and provide it in the case. The user of the digital data department edits the items in the area for reading. The user of the digital data processor adds an access permission table to the second data storage instruction in the second Zhao Wenli system and adds the second digital data. The access domain in the system; when it is available for reading and the user account. In the processing system, the data processing device in the second dense digital data file processing device automatically manages the device, and the request letter

529282

V. Description of the invention (7) The user identification code, time, network address and the access permission table attached to the encrypted digital data file 'and the first digital data processing device verifies the request signal, and when the When the user account, user ID, time, and network address comply with the general requirements preset on the first digital data processing device and the special requirements of the access permission table, the public password is automatically transmitted to the second digital Data processing device.

According to the above idea, the anti-theft digital data processing system may further include a third digital data processing device, which is connected to the first digital data processing device. The first digital data processing device also responds to the third digital data. The processing device performs a registration procedure on it. The first digital negative material processing device generates the pair of loose codes and a second user identification code corresponding to the second digital data processing device. The pair of passwords includes the private password. And how to use the postcode 'to store the first user identification code and the private password in the third digital data processing device, and when the third digital data processing device performs a data read on the encrypted digital data file When the action is taken, the first digital data processing device automatically transmits the common password to the third digital data processing device after confirming the identity through the user identification code, and the third digital data processing device facilitates the encrypted digital data using the public password. The file reads data with a decryption step.

According to the above idea, in the anti-theft digital data processing system, when the third digital data processing device receives a data reading instruction given by the user to the encrypted digital data file, the third digital data processing device may automatically issue a A second request signal to the first digital data processing device, the request signal including the user account and the third digital data processing device

529282 V. Description of the invention (8) The user identification code, time, network address and the access permission table attached to the encrypted digital data file, and the first digital data processing device performs the second request signal Verify that when the user account, user ID, time, and network address meet the general requirements preset in the first digital data processing device and the special requirements of the access permission table, automatically send the public password to The third digital data processing device. According to the above idea, the first digital data processing device, the second digital data processing device, and the third digital data processing device applied to the anti-theft digital data processing system can be connected to a network. According to the above idea, the network to which the anti-theft digital data processing system is applied is a company intranet. According to the above concept, the first digital data processing device applied to the anti-theft digital data processing system can be a server. According to the above concept, the second digital data processing device and the third digital data processing device applied to the anti-theft digital data processing system can be a first client and a second client. According to the above idea, the value of the private password and the public password in the anti-theft digital data processing system may be the same. According to the above-mentioned concept, the values of the private password and the public password in the anti-theft digital data processing system may exist in different pairs. Simple Schematic Explanation This case has to be deepened with the following diagrams and detailed descriptions.

Page 12 529282 V. Description of the invention (9) Solution: The first picture: it is a schematic diagram of the hardware architecture of the preferred embodiment of the present case. The second figure (a) (b) (c): it is a flowchart of the steps in the method of the preferred embodiment of the present case. The components included in the diagram of this case are listed as follows: Server 1 0 First client 1 1 Second client 1 2 Description of the preferred embodiment f Please refer to the first figure, which is the hardware of the preferred embodiment of this case Schematic diagram of the physical structure. Generally, the company's internal network has a server 10 and multiple clients (only the first client 11 and the second client 12 are shown in the figure). Circuit structure) for signal connection and transmission, and the method in this case is to install a server-side program on server 10, and then install a client-side program on the personal computers of all clients, and When the terminal program is installed, the registration process performed through the network and the server terminal program on the server 10 is used to generate a pair of passwords and corresponding user identification codes. The pair of passwords includes a private password and a public password. And _ store the corresponding user identification code and the private password in these _ clients, respectively. After the client and server programs are installed,

Page 13 529282 V. Description of the Invention The server 10, the first client 11 and the second client 12 are used as examples to explain the method in this case. When the first client 11 receives a data storage instruction given by a user to a digital data file, the client program conveniently uses the private password obtained by the registration process to perform data with an encryption step on the digital data file. The storage operation further forms an encrypted digital data file. At the same time, the client program of the first client 11 also provides an access permission table and is automatically attached to the encrypted digital data file. The access permission table includes Information such as the area available for reading, the time available for reading, the number of times available for reading, the items that can be edited, and the user account are included in it, and their contents can be set by the system administrator for subsequent use. The time limit for the client to read the file. Therefore, when the first client 11 receives a data reading instruction issued by the user to the digital data file, the client program causes the first client 1 1 also automatically sends a request signal to the server 10, and the request signal contains the user account, a user identification code unique to the first client 11 and time The network address and the access permission table and other information attached to the encrypted digital data file, the server 10 verifies the information in the request signal, and when the user account, user ID, time When the network address meets the general requirements preset on the server 10 and the special requirements of the access permission table, the server automatically sends the public password and the access permission table to the second digital data The processing device further enables the first client 11 to use the common password to complete the decryption and read operation of the encrypted digital data file.

Page 14 529282 V. Description of the invention (11) When the encrypted digital data file is taken to the second client 12 for opening and reading, similarly, the client program on the second client 12 will Upon receiving a data reading instruction given by the user to the digital data file, a second request signal is automatically sent to the server 10, and the second request signal includes the user account, The user identification code, time, network address of the second digital data processing device, and the access permission table attached to the encrypted digital data file, etc., the server 10 performs the information in the request signal Authentication, and when the user account, user ID, time, and network address all meet the general requirements preset in the server 10 and the special requirements of the access permission table, the server 1 0 The public password and the access permission table are automatically transmitted to the second digital data processing device, so that the second client 11 can also use the public password to complete the decryption and read operation of the encrypted digital data file. Generally, the general requirements preset on the server 10 are the user identification code of all the clients who completed the registration process, the user account assigned to the employee, and the accessible time (for example, 8:00 am to 10:00 pm) And legal network address ranges, etc., and the access permission table attached to the encrypted digital data file contains special rules that belong to the file, such as a user ID for a specific client, a specific user account, A small range of access time (for example, 10:00 am to 5:00 pm) and a specific number of legal network addresses. In this way, the system administrator can more clearly define the reader's qualifications and permissions for special needs. The flowchart of the above steps is shown in the second figure (a) (b). In this way, the client program of this case is installed and the registration process is completed.

Page 15 529282 V. Description of the invention (12) :: end computer to a digital data file, cancel this-encryption;! ^ End of encryption; the encryption action stores the 'computer shell f project execution of a data read' action on the two-end computer For the encrypted client computer registration procedure, use the client program of this case], so that when the user opens the computer on any computer that reads this book, the encrypted file is sent to the computer. Not ;: Unable to decrypt due to lawsuit code: Therefore, it is possible to have identity verification to obtain ^ The practice of stealing files is missing. Employees or even employees = when functioning, it can also be used μ & can not open and read the file arbitrarily, which can greatly reduce the whole;: = ^ K Mi Tan case ^, into the electrical system of Mu, +, u J To the chance of destruction. The value can be the same as the private password used in the technical means described above. It is the same as the daughter of the public password and it, but in this case, because the private password stored in the client has the possibility of ^ _ solution, when the private password After being known, the common password was also known. Therefore, we can use the asymmetric encryption technique (Asymmetric Encryption A1§0Γι thms) as described in RFC 1 4 2 3-4 · 2 to set the private password and the public password to a different value to form a pair Existence. In this way, even if the private secret stored in the client is cracked, it is still unable to effectively decrypt the encrypted file. The method of asymmetric encryption technology is already a common technical means, so this case will not be repeated here. However, this case was invented by those skilled in the art

Page 16 529282

Page 529 282 Brief description of the diagram The first diagram: it is a schematic diagram of the hardware architecture of the preferred embodiment of the present case. The second figure (a) (b) (c): it is a flowchart of the steps of the method of the preferred embodiment of the present case. ί 1 ^ 1 p. 18

Claims (1)

529282 6. Scope of patent application1. A digital data anti-theft method, which is applied to a first digital data processing device and a second digital data processing device that are connected to each other. The method includes the following steps: Processing of the second digital data The device performs a registration procedure on the first digital data processing device. The first digital data processing device generates a pair of passwords and a user identification code corresponding to the second digital data processing device. The pair of passwords includes a private password and a public password. Password, and the user identification code and the private password are stored in the second digital data processing device; in response to a data storage operation performed on a digital data file by the second digital data processing device, the second digital data The processing device automatically uses the private password to perform a data storage operation with an encryption step on the digital data file, thereby forming an encrypted digital data file; corresponding to one of the data reading performed by the second digital data processing device on the encrypted digital data file Take action, the first digital data The processing device automatically transmits the public password to the second digital data processing device after confirming the identity through the user identification code; and the second digital data processing device uses the public password to perform a data reading of the encrypted digital data file with a decryption step. Take action. 2. The digital data anti-theft method described in item 1 of the scope of patent application, further comprising the following steps: when the second digital data processing device receives a data storage instruction issued by a user, the second digital data The processing device then captures the private password, and then automatically performs the data storage operation with the encryption step on the digital data file. Page 19, 529282 6. Patent application scope 3 · The digital data anti-theft method as described in item 1 of the patent application scope, which further includes the following steps: one of the data issued by the user is received by the second digital data processing device When the instruction is stored, the second digital data processing device provides an access permission table and is automatically appended to the encrypted digital data file. 4. The digital data anti-theft method described in item 3 of the scope of patent application, wherein the storage The access permission table contains the following information: areas that can be read; time that can be read; times that can be read; items that can be edited and user accounts. 5. The digital data anti-theft method described in item 4 of the scope of patent application, which further includes the following steps: A second data processing device receives a data reading instruction issued by the user to the encrypted digital data file When the second digital data processing device automatically sends a request signal to the first digital data processing device, the request signal includes the user account, the user identification code, time, and network of the second digital data processing device. Address and the access permission table attached to the encrypted digital data file; and the first digital data processing device verifies the request signal. When the user account, user ID, time, and network address are all When the general requirements preset on the first digital data processing device and the special requirements of the access authority table are met, the common password is automatically transmitted to the second digital data processing device. 6. The digital data anti-theft method described in item 4 of the scope of patent application, the environment in which it is applied further includes a third digital data processing device, which is related to the Page 20 529282 6. The first digital data processing device in the scope of patent application reaches a signal connection, and the method further includes the following steps: In response to the third digital data processing device, a registration procedure is performed on the first digital data processing device. The first digital data processing device corresponding to the second digital data processing device generates the pair of passwords and a second user identification code, the pair of passwords includes the private password and the public password, and the second user identification code and the private password Stored in the third digital data processing device; corresponding to a data reading operation performed by the third digital data processing device on the encrypted digital data file, the first digital data processing device confirms the identity through the user identification code Automatically transmitting the common password to the third digital data processing device; and the third digital data processing device using the common password to perform a data reading operation on the encrypted digital data file with a decryption step. 7. The method for preventing theft of digital data as described in item 6 of the scope of patent application, further comprising the following steps: A third data processing device receives a data reading instruction issued by the user to the encrypted digital data file When the third digital data processing device automatically sends a second request signal to the first digital data processing device, the request signal includes the user account number, the user identification code of the third digital data processing device, time, The network address and the access permission table attached to the encrypted digital data file; and the first digital data processing device verifies the second request signal when the user account, user ID, time, network Road addresses are all preset Page 21 529282 VI. In the patent application data processing device, when the second digital data processing device performs a data storage operation on a digital data file, the second digital data processing device automatically uses the private password to the digital The data file performs a data storage operation with an encryption step to form an encrypted digital data file. When the second digital data processing device performs a data reading operation on the encrypted digital data file, the first digital data processing device passes the data After the user identification code confirms the identity, the public password is automatically transmitted to the second digital data processing device, and the second digital data processing device uses the public password to perform a data reading operation on the encrypted digital data file with a decryption step. 1 5. The anti-theft digital data processing system according to item 14 of the scope of patent application, wherein when the second digital data processing device receives a data storage instruction issued by a user, the second digital data processing device It then grabs the private password, and then automatically performs the data storage operation with the encryption step on the digital data file. 16. The anti-theft digital data processing system according to item 15 of the scope of patent application, wherein when the second digital data processing device receives a data storage instruction issued by a user, the second digital data processing device An access permission table is also provided and automatically attached to the encrypted digital data file. 1 7. The anti-theft digital data processing system as described in item 16 of the scope of patent application, wherein the access permission table contains the following information: area available for reading; time available for reading; available for reading Number of times; editable items and user accounts. 1 8. The anti-theft digital data processing system as described in item 17 of the scope of patent application, wherein the second digital data processing device receives the user's Page 23 529282 VI. When one of the data reading instructions issued by the patented digital data file, the second digital data processing device automatically sends a request signal to the first digital data processing device. The request signal includes The user account, the user ID of the second digital data processing device, time, network address, and the access permission table attached to the encrypted digital data file, and the first digital data processing device responds to the request The signal is verified. When the user account, user ID, time, and network address meet the general requirements preset in the first digital data processing device and the special requirements of the access permission table, the public information is automatically transmitted. Password to the second digital data processing device. 19. The anti-theft digital data processing system as described in item 17 of the scope of patent application, further comprising a third digital data processing device that is in signal connection with the first digital data processing device, the first digital data The processing device also performs a registration procedure for the third digital data processing device. The first digital data processing device generates the pair of passwords and a second user identification code corresponding to the second digital data processing device. The pair of passwords includes The private password and the public password, and the second user identification code and the private password are stored in the third digital data processing device, and when the third digital data processing device executes one of the data on the encrypted digital data file When reading, the first digital data processing device automatically transmits the common password to the third digital data processing device after confirming the identity through the user identification code, and the third digital data processing device conveniently uses the public password to encrypt the digital digits. The data file performs a data reading operation with a decryption step. 20. The anti-theft digital data processing system described in item 19 of the scope of patent application, wherein when the third digital data processing device receives Page 24 529282 6. The third digital data processing device automatically sends a second request signal to the first digital data processing device when a data reading instruction is issued from the dense digital data file for patent application. Contains the user account, the user ID of the third digital data processing device, time, network address, and the access permission table attached to the encrypted digital data file, and the first digital data processing device pairs The second request signal is verified. When the user account, user ID, time, and network address all meet the general requirements preset in the first digital data processing device and the special requirements of the access permission table, The common password is automatically transmitted to the third digital data processing device. 2 1. The anti-theft digital data processing system described in item 19 of the scope of patent application, the first digital data processing device, the second digital data processing device, and the third digital data processing device to which it is applied are connected On a network. 2 2. The anti-theft digital data processing system described in item 21 of the scope of patent application, the network to which it is applied is a company intranet. 2 3. The anti-theft digital data processing system described in item 21 of the scope of patent application, the first digital data processing device to which it is applied is a server. 2 4. The anti-theft digital data processing system described in item 21 of the scope of patent application, the second digital data processing device and the third digital data processing device applied to it are a first client and a first client. Two clients. 2 5. The anti-theft digital data processing system described in item 14 of the scope of patent application, wherein the value of the private password and the public password are the same. 2 6. The anti-theft digital data processing system as described in item 14 of the scope of patent application, wherein the value of the private password and the public password are not the same Page 25 529282 6. The scope of patent application exists. 1 · ΙΙ1