TWI569154B - Cloud storage control system and operating method thereof - Google Patents

Description

Cloud hard disk control system and its operation method

The present invention relates to an information security technology, and more particularly to a cloud hard disk control system and an operation method thereof.

Due to advances in technology, electronic devices such as computers, notebook computers, and tablet computers all have powerful data processing capabilities, so the amount of information that needs to be stored increases accordingly, and the demand for storage space is inevitably increased. However, in order to enable the electronic device to have more storage space, it is necessary to increase the number of hard disks, but this obviously causes an increase in the cost and volume of the electronic device. In addition, the hard disk does not facilitate the exchange of data. Therefore, in recent years, various manufacturers have actively developed the technology of cloud hard disk. With the cloud hard disk technology, anyone can upload various types of data to the cloud hard disk in an environment that can be connected to the Internet. And in other Internet-connected environments, the data stored in the cloud hard disk is downloaded for use, so the electronic device no longer needs to have a large storage space, and the exchange of information becomes very easy. However, for enterprises, the cloud hard disk has caused difficulties in the management of confidential data. Employees can easily use the electronic device to upload confidential information to the cloud hard disk, and the confidential information may be exposed, resulting in loss of the enterprise.

In order to avoid the loss of confidential data to the cloud hard disk, causing the loss of the enterprise, the present invention provides a cloud hard disk control system embodiment, which includes a webpage control module, a network unit and a processing unit, and a webpage control module. The group is used to retrieve a webpage address of the web address field displayed on the screen, and convert the webpage address into a corresponding network protocol address, the webpage control module and compare the webpage address or the network protocol address. Whether it exists in a disabled list stored in a storage unit, and the webpage control module outputs a comparison result to the processing unit, and the processing unit is electrically coupled to the webpage control module and the network unit, and the processing unit Based on a received signal, it is determined whether the network unit is connected to a cloud hard disk webpage address through the Internet. The receiving signal of the processing unit is the comparison result, and the cloud hard disk webpage address is the above webpage address.

In a preferred embodiment of the present invention, the cloud hard disk control system embodiment further includes a synchronous control module. The synchronous control module is electrically coupled to the processing unit, and the synchronous control module is used for synchronization. Whether the cloud hard disk name exists in the disabled list and transmits the comparison result to the processing unit. The receiving signal of the processing unit may be a synchronous cloud hard disk name comparison result, and the cloud hard disk web address may be a synchronous cloud hard disk name. Corresponding web address.

In a preferred embodiment of the present invention, the cloud hard disk control system embodiment further includes a file editing control module, the file editing control module is electrically coupled to the processing unit, and the file editing control module is used for editing. A file upload setting file stored in one of the above storage units.

The present invention further provides an embodiment of an operating method of the cloud hard disk control system, the steps of which include: determining whether to restrict access to a cloud hard disk; and when determining to be, restricting access to the cloud hard disk.

In a preferred embodiment of the present invention, the cloud hard disk control system includes a webpage control module, a network unit, and a processing unit. The operating method of the cloud hard disk control system further includes: The control module captures a webpage address of a display screen and converts the webpage address into a corresponding network protocol address to compare whether the webpage address or the network protocol address exists in a disabled list; The web page address or network protocol address exists in the disabled list, causing the processing unit to disable the network unit from connecting to the web page address.

In a preferred embodiment of the present invention, the cloud hard disk control system includes a synchronous control module, and the operating method of the cloud hard disk control system includes: synchronizing the synchronous control module with a synchronous cloud. Whether the disc name exists in a disabled list; and when the synchronous cloud hard disk name exists in the disabled list, the processing unit prohibits the network unit from connecting to the web address corresponding to the synchronous cloud hard disk name.

In a preferred embodiment of the present invention, the cloud hard disk control system includes a file editing control module, and the file editing module is electrically coupled to the processing unit. The steps of the operating method of the cloud hard disk control system further include: The file editing control module edits a file upload setting file, and closes the upload function corresponding to the file upload setting file.

According to the foregoing, the cloud hard disk control system and the method for operating the same according to the present invention can determine whether the electronic device wants to connect to a cloud hard disk through a webpage, or directly prohibits the connection to the cloud hard disk by other means. It can effectively prevent data from being uploaded to the cloud hard disk at will, effectively protecting important confidential information of the enterprise.

The above and other objects, features, and advantages of the present invention will become more apparent and understood. as follows.

10‧‧‧Control terminal

11‧‧‧User terminal

12‧‧‧Regional Network

13‧‧‧Internet

14‧‧‧storage unit

15‧‧‧Display unit

16‧‧‧ Display screen

17‧‧‧Network Unit

20‧‧‧Cloud Hard Disk Control System

21‧‧‧ Receiving unit

22‧‧‧Processing unit

23‧‧‧Web Control Module

231‧‧‧Capture unit

232‧‧‧Web Address/Network Protocol Address Conversion Unit

233‧‧‧ Alignment unit 233

24‧‧‧Synchronous Control Module

25‧‧‧File editing control module

301, 302, 303, 304, 305, 401, 402, 501 ‧ ‧ steps

Figure 1 is a schematic diagram of the organizational structure.

2 is a schematic diagram of an embodiment of a cloud hard disk control system according to the present invention.

FIG. 3A is a schematic diagram of Embodiment 1 of a method for operating a cloud hard disk control system according to the present invention.

FIG. 3B is a schematic diagram of a first embodiment of a display screen.

FIG. 3C is a schematic diagram of the second embodiment of the display screen.

4 is a schematic diagram of Embodiment 2 of a method for operating a cloud hard disk control system according to the present invention.

FIG. 5 is a schematic diagram of Embodiment 3 of a method for operating a cloud hard disk control system according to the present invention.

1 is a schematic diagram of an existing organizational structure in a large organization such as a company or a company, including at least one control terminal 10 and a plurality of user terminals 11, and the control terminal 10 may be an electronic device such as a desktop computer or a notebook computer, and The user of the information management staff is used to manage a plurality of user terminals 11, and the user terminal 11 can be an electronic device such as a desktop computer, a notebook computer or a tablet computer, and the user is a company or a company. Each of the control terminal 10 and the user terminal 11 is electrically coupled to the internal area network 12, and each of the control terminal 10 and the user terminal 11 transmits the external network 12 and the external one. Internet 13 is connected.

2 is an embodiment of the cloud hard disk control system 20 of the present invention, which can be applied to the control terminal 10 and the user terminal 11 described above, and the user of the information management personnel can access the control terminal 10 and the regional network 12 of FIG. The cloud hard disk control system 20 of the user terminal 11 performs setting or control to prohibit the user terminal 11 from connecting to the cloud hard disk such as Google Drive, Dropbox or OneDrive through the Internet 13. Referring to FIG. 2, the cloud hard disk control system 20 includes a receiving unit 21, a processing unit 22, a webpage control module 23, a synchronization control module 24, and a file editing control module 25, and a processing unit 22, The webpage control module 23, the synchronization control module 24, and the file editing control module 25 are electrically coupled to a storage unit 14. The storage unit 14 can be a storage device or a storage space of the control terminal 10 and the user terminal 11. For example, a hard drive.

The storage unit 14 is configured to store a disabled list, a file upload setting file, a disabled file setting file, and an encrypted web address connection information. The disabled list further includes a list of disabled cloud hard disk names, corresponding to the disabled cloud. a list of disabled network protocol address information for the hard disk name, a list of disabled sync program names corresponding to the name of the disabled cloud hard disk, and a list of disabled keywords corresponding to the name of the disabled cloud hard disk, wherein the list of cloud hard disk names is disabled The content is the name of the cloud drive that is forbidden, such as Dropbox, Google Drive, and Evernote. The content of the disabled network address information list is the multiple network protocols corresponding to each of the above mentioned cloud hard disks. Address, disable the name of the synchronization program name list is the name of the synchronization program corresponding to each of the above mentioned cloud hard disks. For example, the name of the synchronization program of Dropbox is dropbox.exe, and the name of the synchronization program corresponding to Google Drive is googledrivesync. .exe, etc., disabling the content of the keyword list is to connect to a specific cloud You can use the keyword, for example: If you want to connect to Google Drive, the drive.google string will appear on the web address, and drive.google will be the disabled keyword for Google Drive. The cloud hard disk control system 20 will continue to update the disabled list and disable the contents of the file configuration file, such as disabling the network protocol address information list, since each cloud hard disk corresponds to multiple network protocol addresses, and these networks The road protocol address will change according to a fixed period, so the cloud hard disk control system 20 needs to continuously update the disabled network protocol address information list to avoid judgment errors. The processing unit 22 is electrically coupled to a display unit 15 for outputting a display screen data to a display screen 16, so that the display screen 16 can display a corresponding display screen according to the display screen data, and the processing unit 22 further The network unit 17 is electrically coupled to enable the cloud hard disk control system 20 to connect to the Internet 13 through the network unit 17.

The receiving unit 21 is configured to receive an operation signal input by a user such as an information management personnel or other employees by using an input device such as a keyboard or a mouse, and transmit the received operation signal to the processing unit 22, so that the processing unit 22 can be different according to the processing unit 22 The operation signal content performs the corresponding action. The webpage control module 23 is electrically coupled to the processing unit 22. The webpage control module 23 further includes a capture unit 231, a webpage address/network protocol address translation unit 232, and a comparison unit 233. The capture unit 231 The web address/network protocol address conversion unit 232 is used to capture a webpage address displayed on the display screen 16 and displayed in the current webpage of the current display screen. The webpage address retrieved by the capturing unit 231 is converted into a corresponding network protocol address, that is, an IP address, and the comparing unit 233 is configured to compare the webpage address with the disabled keyword list. It is confirmed whether the webpage address retrieved by the capturing unit 231 includes a disabled keyword, and in addition, in order to avoid occurrence of a webpage address that does not include a disabled keyword, but the webpage address corresponding to the webpage address In the case of a disabled network protocol address, the comparison unit 233 is further configured to compare the network protocol address with the above-mentioned list of disabled network protocol address information, and confirm whether the network protocol address exists in the disabled network. In the agreement address information list, the comparison unit 233 transmits the compared comparison result to the processing unit 22, so that the processing unit 22 determines whether to allow the webpage address retrieved by the capture unit 231 to be connected according to the comparison result. .

The synchronization control module 24 is electrically coupled to the processing unit 22, and the synchronization control module 24 is configured to compare whether a synchronous cloud hard disk name included in the operation signal exists in the disabled synchronization program name list, and The comparison result is transmitted to the processing unit 22, so that the processing unit 22 determines whether to allow the synchronization operation corresponding to the synchronous cloud hard disk name to be performed according to the comparison result.

The file editing control module 25 is electrically coupled to the processing unit 22, and the processing unit 22 causes the file editing control module 25 to read the file upload setting file and the file setting file, and the file upload setting file, according to the received operation signal. The upload setting file built in the document editing program corresponds to the upload function built in the document editing program, such as the WORD file upload setting file, the PDF file upload setting file, etc., and the file editing control module 25 receives the file. After uploading the configuration file and disabling the file setting file, the original file uploading configuration file is disabled to disable the file setting file for editing, and the built-in upload function of the document editing program is closed, so that employees and other users can upload the data to the corresponding function by using this function. In the cloud hard drive.

FIG. 3A is a first embodiment of a method for operating a cloud hard disk control system according to the present invention, which will be described below with reference to FIG. 2 and FIG. 3A.

First, when the operation signal received by the receiving unit 21 is a webpage operation signal, that is, when the user wants to connect to the Internet 13 through the webpage, the processor 22 first determines whether the cloud hard disk control system 20 allows. Using the encrypted connection (step 301), the processor 22 reads the encrypted web address connection information stored in the storage unit 14, and encrypts the web address connection information including whether to allow the encrypted connection information, and the user of the information management personnel The encrypted web page address connection information can be edited, so the processor 22 determines whether to allow the use of the encrypted connection according to the content of the encrypted web address connection information. If the encrypted connection is not allowed, the processor 22 disables the network unit 17. When the webpage is connected, the processor 22 causes the display unit 15 to output the display data of the forbidden connection to the display screen 16. Therefore, the user can obtain the information of the connection prohibition by displaying the screen 16, as shown in FIG. 3B. This is an example of a display screen in which connection is prohibited. Conversely, if an encrypted connection is allowed, proceed to the next step 302. In step 302, the capturing unit 231 extracts the webpage address in a webpage field from the current display screen of the display screen 16, as shown in FIG. 3C, and the range enclosed by the dotted line is the webpage field. The text https://drive.google.com in the URL field is the address of the webpage, that is, the webpage address of the user who wants to connect to the Internet, and then the webpage address/network protocol address conversion unit 232 will Converting the webpage address to the corresponding network protocol address (step 303), the comparing unit 233 receives the webpage address and the network protocol address, and compares the webpage address with the disabled keyword list, and sets the network protocol bit. The address is compared with the above-mentioned list of disabled network protocol address information, the comparison unit 233 transmits the comparison result to the processing unit 22 (step 304), if the webpage address exists in the keyword or network protocol in the disabled keyword list The address exists in the list of disabled network protocol address information, and the user is prohibited from accessing the webpage address (step 305), and the display screen of the forbidden connection shown in FIG. 3B is displayed on the display screen 16. Conversely, if the webpage address does not have a keyword in the disabled keyword list, and the network protocol address does not exist in the disabled network protocol address information list, the user is allowed to connect to the retrieved webpage address. And can access the web address corresponding to Cloud hard drive.

Please refer to FIG. 4. FIG. 4 is a second embodiment of the operation method of the cloud hard disk control system according to the present invention. In addition to connecting to the cloud hard disk through the webpage, the user can save the data through the synchronization folder corresponding to the cloud hard disk. The cloud hard disk is captured, and the synchronization folder corresponds to a synchronization program, so that the data of the synchronization folder can be uploaded to the cloud hard disk by the execution of the synchronization program. Therefore, when the operation signal received by the receiving unit 21 is a synchronous folder operation signal, the processing unit 22 causes the synchronization control module 24 to compare the name of a synchronous cloud hard disk included in the synchronization folder operation signal (step 401). ), the synchronous cloud hard disk name corresponds to the name of the synchronization program, such as the above googledrivesync.exe, the synchronization control module 24 compares the synchronous cloud hard disk name with the disabled synchronization program name list, and confirms whether the synchronous cloud hard disk name is Exist in the list of disabled sync programs. If the sync cloud hard drive name does not exist in the list of disabled sync programs, the sync program is allowed to execute (step 402), and the user can access the cloud hard drive by synchronizing the folder. Data, on the other hand, if the synchronous cloud hard disk name exists in the disabled sync program name list, the execution of the sync program is prohibited (step 403), so the user cannot access the data of the cloud hard disk through the sync folder.

In addition, part of the document editing program such as OFFICE has built-in function of uploading the file directly to the cloud hard disk. In order to limit the access mode, the present invention further proposes the third embodiment of the operation method of the cloud hard disk control system. Referring to FIG. 5, when the operation signal received by the receiving unit 21 is a file editing operation signal, the processing unit 22 causes the file editing control module 25 to determine whether to close the built-in upload function of the document editing program according to the file editing operation signal (step 501), if the file editing operation signal is to close the upload function built in the document editing program, the file editing control module 25 reads the above file uploading After setting the file and disabling the file setting file, after receiving the file upload setting file and disabling the file setting file, the file editing control module 25 causes the original file to be uploaded to the setting file to disable the file setting file for editing, and the document editing program is deleted. The cloud hard disk and the built-in upload function are turned off, so that the user can upload the data to the corresponding cloud hard disk by using the function in the process of editing the file, and only the user of the information management staff can edit the file. File settings file.

In summary, the cloud hard disk control system of the present invention and the operation method thereof can effectively prohibit users from connecting to the cloud hard disk through different pipes such as a webpage, a synchronization folder, or an upload function built in a file editing program, and The above connection method can be controlled at the same time to effectively reduce the occurrence of unauthorized uploading of data to the cloud hard disk, and greatly reduce the risk of confidential information being arbitrarily disclosed.

Although the present invention has been disclosed in the above embodiments, it is not intended to limit the present invention. Any one skilled in the art can make some modifications and retouchings without departing from the spirit and scope of the present invention. The scope is subject to the definition of the patent application scope.

14‧‧‧storage unit

15‧‧‧Display unit

16‧‧‧ Display screen

17‧‧‧Network Unit

20‧‧‧Cloud Hard Disk Control System

21‧‧‧ Receiving unit

22‧‧‧Processing unit

23‧‧‧Web Control Module

231‧‧‧Capture unit

232‧‧‧Web Address/Network Protocol Address Conversion Unit

233‧‧‧ Alignment unit 233

24‧‧‧Synchronous Control Module

25‧‧‧File editing control module

Claims (10)

A cloud hard disk control system includes: a webpage control module, wherein the webpage control module is configured to capture a webpage address displayed by a webpage field displayed on a display screen, and convert the webpage address into Corresponding to one of the network protocol addresses, the webpage control module compares the webpage address or the network protocol address in a disabled list of a storage unit, and the webpage control module outputs a comparison Resulting in the processing unit; a network unit is electrically coupled to an internet network; and a processing unit is electrically coupled to the webpage control module and the network unit, the processing unit is A receiving signal determines whether the network unit is connected to a cloud hard disk webpage address, wherein the receiving signal is the comparison result, and the cloud hard disk webpage address is the webpage address. The cloud hard disk control system of claim 1, wherein the webpage control module comprises: a capture unit for extracting the webpage address displayed by the webpage field; a webpage address/network protocol address a conversion unit electrically coupled to the retrieval unit for converting the webpage address to the corresponding network protocol address; and a comparison unit, the retrieval unit, and the webpage address/network agreement The address translation unit is electrically coupled to determine whether the web page address or the network protocol address exists in the disabled list of the storage unit. The cloud hard disk control system of claim 1, further comprising: a synchronous control module electrically coupled to the processing unit, wherein the synchronous control module is configured to compare whether a synchronous cloud hard disk name exists Disabling the list, and transmitting the comparison result to the processing unit, the receiving signal of the processing unit is the synchronization cloud hard disk name comparison result, and the cloud hard disk webpage address is a webpage corresponding to the synchronous cloud hard disk name. address. The cloud hard disk control system of claim 1, further comprising: a file editing control module electrically coupled to the processing unit, the file editing control module being used for editing and storing in the storage unit File upload settings file. The cloud hard disk control system of claim 4, wherein the file editing control module is configured to edit the file upload setting file stored in the storage unit according to a disabled file setting file. The cloud hard disk control system of claim 1, wherein the storage unit further stores an encrypted web address connection information. The operating method of the cloud hard disk control system, wherein the cloud hard disk control system comprises a webpage control module, a synchronous control module, a network unit and a processing unit, and the synchronous control module and the processing unit are electrically The operating method of the cloud hard disk control system includes the following steps: The processing unit determines whether to restrict access to a cloud hard disk; and when it is determined to be, restrict access to the cloud hard disk, capture a webpage address of a display screen, and convert the webpage address into a corresponding one of the network addresses a protocol address to compare whether the web page address, the network protocol address, or a synchronous cloud hard disk name exists in a disabled list; and when the web page address, the network protocol address, or the synchronous cloud hard disk The name exists in the disabled list, so that the processing unit prohibits the network unit from connecting to the webpage address or the webpage address corresponding to the synchronous cloud hard disk name. The operating method of the cloud hard disk control system according to claim 7, the method further comprising: causing the processing unit to determine whether the network unit can be connected to an encrypted webpage address. The operating method of the cloud hard disk control system of claim 7, wherein the cloud hard disk control system further comprises a file editing control module, the file editing module is electrically coupled to the processing unit, and the cloud is hard The step of operating the disc control system further includes: causing the file editing control module to edit a file upload setting file, and closing the upload function corresponding to the file upload setting file. The operating method of the cloud hard disk control system of claim 9, wherein the file editing control module editing a file upload setting file further comprises: The file editing control module is caused to edit a file upload setting file according to a disabled file setting file.