TWI715011B - Data protection device and method - Google Patents

Abstract

A data protection method applied in a data protection device is provided. The data protection is communicated with a number of electronic devices. The electronic device at least includes an external storage device. The method includes: loading a data protection system in the data protection device; installing a program programming interface of the data protection system in the electronic devices; controlling the program programming interface to run in a background of each electronic device through the data protection system; controlling the program programming interface in each electronic device to monitor activity status of the storage device, and determining whether there are data being transferred to the storage device; and when determining that there are data being transferred from the electronic device to the storage device, outputting a prompt information. A data protection device is also provided.

Description

Data protection device and method

The invention relates to the field of data security, in particular to a data protection device and method.

With the development of science and technology, the circulation of information has become more and more convenient. In order to prevent the leakage of commercial confidential information, data security must be guaranteed by every enterprise. In the conventional technology, many companies set up firewalls to prevent external access to the company’s confidential information, but they lack the monitoring of internal to external data transfer. For example, internal employees intentionally or unintentionally copy data to the outside, resulting in the leakage of confidential information. Cause losses to the enterprise.

In view of this, it is necessary to provide a data protection device and method to solve the above technical problems.

A data protection device includes a processor, the data protection device is communicatively connected with a plurality of electronic devices, the electronic device includes at least an external storage device, and the processor includes: a loading module for loading the data A data protection system is loaded into the protection device; an installation module is used to install the program programming interface of the data protection system in the plurality of electronic devices; an operation module is used to control the data protection system by the data protection system The program programming interface runs in the background of each electronic device; The monitoring module is used for monitoring the activity state of the storage device through the program programming interface in each electronic device controlled by the data protection system to determine whether there is data transferred to the storage device; and the prompt module is used for When the monitoring module determines that the electronic device has data transferred to the storage device, it outputs a prompt message to notify the management personnel.

A data protection method is applied to a data protection device. The data protection device is in communication connection with a plurality of electronic devices. The electronic device includes at least an external storage device. The method includes the following steps: Load a data protection system; install the program programming interface of the data protection system in the plurality of electronic devices; use the data protection system to control the program programming interface to run in the background of each electronic device; The program programming interface in each electronic device is controlled by the data protection system to monitor the activity state of the storage device to determine whether data is transferred to the storage device; and when it is determined that the electronic device has data transferred to the storage device When the device is in, a prompt message is output to notify the manager.

The above-mentioned data protection device and method can send prompt information when detecting the existence of data transfer on the server, thereby interrupting the data transfer in time, avoiding data leakage, and providing data security for the enterprise.

1: Data protection device

10: processor

100: Data Protection System

101: Load module

102: Install the module

103: Judgment Module

104: Run module

105: Monitoring module

106: record module

107: Prompt Module

108: Camera control module

20: memory

30: Communication unit

2: electronic device

200: storage device

201: Programming interface

FIG. 1 is a schematic diagram of the application structure of a data protection device in a preferred embodiment of the present invention.

Fig. 2 is a schematic flowchart of a data protection method in a preferred embodiment of the present invention.

Please refer to FIG. 1, which is an application structure diagram of a data protection device 1 provided by a preferred embodiment of the present invention. The data protection device 1 is in communication connection with a plurality of electronic devices 2, and is used to detect the activity state of the data stored in the electronic device 2, and prompt management personnel when there is a data transfer in one or more electronic devices 2, To avoid leakage of important information. In this embodiment, the data protection device 1 has a server with a monitoring function, and the electronic device 2 is a file server, a workstation, or a thin client.

The data protection device 1 includes, but is not limited to, a processor 10, a memory 20, and a communication unit 30. In this embodiment, the processor 10 is preferably a single-chip microcomputer or a System On Chip (SOC). The memory 20 is a read-only memory or a random access memory. The communication unit 30 is a routing device for communicating with a plurality of electronic devices 2 in a wired or wireless manner. The electronic device 2 at least includes a storage device 200. In this embodiment, the storage device 200 is an external storage device externally connected to the electronic device 2, such as a USB flash drive, a portable hard disk, and a portable floppy disk.

As shown in Figure 1, the data protection device 1 at least includes a loading module 101, an installation module 102, a judgment module 103, an operation module 104, a monitoring module 105, a recording module 106, a prompt module 107, and Camera control module 108. In this embodiment, the aforementioned modules are programmable software instructions that are stored in the memory 20 and can be invoked and executed by the processor 10. It can be understood that, in other implementation manners, the above-mentioned modules may also be program instructions or firmware solidified in the processor 10.

The loading module 101 is used to load a data protection system 100 into the data protection device 1.

In this embodiment, the data protection system 100 runs in a monitoring program, and the loading module 101 responds to the user's operation of installing the monitoring program to the data protection device 1. The operation of the monitoring program is controlled to load the data protection system 100 into the data protection device 1.

The installation module 102 is used to install the application programming interface (API) 201 of the data protection system 100 in the plurality of electronic devices 2.

In this embodiment, the installation module 102 transmits the programming interface file of the monitoring program to the plurality of electronic devices 2 through the communication unit 30, and each electronic device 2 receives the When monitoring the programming interface file of the program, the programming interface 201 of the data protection system 100 can be automatically installed. Wherein, the programming interface 201 is used for the data protection system 100 to call to monitor the electronic device 2.

In other embodiments, when the electronic device 2 receives the programming interface file of the monitoring program, the user can manually install the programming interface 201 of the data protection system 100.

In another embodiment, an application scenario includes a plurality of groups of data protection devices 1, and the loading module 101 loads the data protection system 100 into each data protection device 1 in each group. . The judgment module 103 judges whether the data protection system 100 is detected by the data protection device 1 in each group. When the installation module 102 determines that the data protection device 1 in each group has detected the data protection system 100, when the judgment module 103 determines that the data protection system 100 is detected, the plurality of electronic devices that are in communication with each data protection device 1 The program programming interface 201 of the data protection system 100 is installed in 2. When the determining module 103 determines that one or more data protection devices 1 have not detected the data protection system 100, that is, the monitoring program is not installed, it outputs a prompt message to notify the management personnel. Wherein, the prompt information is used to indicate to the administrator that the data protection device 1 of the data protection system 100 is not loaded.

The operating module 104 is used for controlling the program programming interface 201 to run in the background of each electronic device 2 through the data protection system 100.

In this embodiment, when the data protection device 1 needs to monitor the plurality of electronic devices 2, the operation module 104 sends a control command to the data protection system 100, and the data protection system 100 In response to the control command, the programming interface 201 is controlled to run in the background of each electronic device 2.

The monitoring module 105 is used for monitoring the activity state of the storage device 200 through the data protection system 100 to control the programming interface 201 in each electronic device 2 to determine whether there is data transferred to the storage device 200 in.

In this embodiment, when the programming interface is running in the background of each electronic device 2, the monitoring module 105 sends a monitoring command to the data protection system 100, and the data protection system 100 responds to the The monitoring instruction controls each electronic device 2 to monitor the activity state of the data stored in the storage device 200 in real time, and further determine whether there is data to be transferred to the storage device 200. In this embodiment, data transfer includes, but is not limited to, data copying and data cutting, that is, the monitoring module 105 is used to determine whether data is copied or cut to the storage device 200.

The recording module 106 is used for recording the information related to the data transfer when the monitoring module 105 determines that the electronic device 2 has data transferred to the storage device 200.

In this embodiment, the relevant information includes the positioning information of the electronic device 2, screenshots during data transfer, and the system log of the electronic device 2. Specifically, the recording module 106 can identify the location information of the electronic device 2 through the IP address of the electronic device 2. When data in the electronic device 2 is transferred to the storage device 200, the programming interface of the data protection system 100 automatically controls the electronic device 2 to take a screenshot to obtain a screenshot of the data transfer. The system log of the electronic device 2 is automatically obtained by the programming interface.

The prompt module 107 is used for outputting a prompt message to notify the administrator when the monitoring module 105 determines that the electronic device 2 has data transferred to the storage device 200.

In this embodiment, when the monitoring module 105 determines that the electronic device 2 has data transferred to the storage device 200, the prompt module 107 sends a prompt email to the administrator’s email address, In order to notify the management personnel that the electronic device 2 is currently stealing data. Wherein, the content of the reminder email includes information related to the data transfer, that is, the reminder module 107 uses the location information of the electronic device 2, the screenshot of the data transfer, and the system log of the electronic device 2 as The prompt information is sent to the e-mail address of the manager.

In other embodiments, when the monitoring module 105 determines that the electronic device 2 has data transferred to the storage device 200, the determining module 103 further determines whether the electronic device 2 is in a connected state . The recording module 106 also records the positioning information of the electronic device 2, the screenshots of the data transfer and the system log of the electronic device 2 when the electronic device 2 is connected to the network. The recording module 106 also only records the screenshot of the data transfer and the system log of the electronic device 1 when the electronic device 2 is not in a networked state, that is, an offline state.

Further, the determination module 103 also determines whether the electronic device 2 is equipped with a camera when the monitoring module 105 determines that the electronic device 2 has data transferred to the storage device 200. When the determining module 103 determines that the electronic device 2 is equipped with a camera, the camera control module 108 is used to control the camera to capture an image of the current user of the electronic device 2. The recording module 106 also stores the image of the current user of the electronic device 2 captured by the camera in the memory 20. In this embodiment, when the camera captures an image of the current user of the electronic device 2, the electronic device 2 returns the captured image to the data protection device 1, and the recording module 106 stores the image in the memory 20, and the manager can identify the user who stole the data by the stored image.

Please refer to FIG. 2, which is a schematic flowchart of a data protection method according to a preferred embodiment of the present invention. According to different needs, the order of the steps in the flowchart can be changed, and some steps can be omitted or combined.

Step S101, loading a data protection system 100 into the data protection device 1.

In step S102, the program programming interface of the data protection system 100 is installed in the plurality of electronic devices 2.

In another embodiment, an application scenario includes a plurality of groups of data protection devices 1, and the step S101 includes loading the data protection system 100 into each data protection device 1 in each group, and It is determined whether the data protection system 100 is detected by the data protection device 1 in each group. The step S102 includes when it is determined that the data protection system 100 is detected by the data protection device 1 in each group, The programming interface of the data protection system 100 is installed in a plurality of electronic devices 2 that are in communication with each data protection device 1.

In step S103, the data protection system 100 controls the programming interface to run in the background of each electronic device 2.

In step S104, the data protection system 100 controls the programming interface 201 in each electronic device 2 to monitor the activity status of the storage device 200 to determine whether there is data transferred to the storage device 200. When the judgment result is yes, the process proceeds to step S105; when the judgment result is no, the process continues to step S104.

Step S105: Record the relevant information of the data transfer.

In this embodiment, the relevant information includes at least the location information of the electronic device 2, screenshots during data transfer, and the system log of the electronic device 2.

Step S106, output a prompt message to notify the manager.

In this embodiment, the step S106 includes sending a reminder mail to the e-mail address of the manager to notify the manager that the electronic device 2 is currently stealing data. Wherein, the content of the reminder email includes information related to the data transfer, that is, in step S106, the location information of the electronic device 2, the screenshot during the data transfer, and the system log of the electronic device 2 are sent as reminder information to The e-mail address of the manager.

Further, the method further includes the following steps: when it is determined that the electronic device 2 has data transferred to the storage device 200, determining whether the electronic device 2 is in a connected state; when the electronic device 2 is connected When the electronic device 2 is connected to the Internet, it records the location information of the electronic device 2, screenshots during data transfer, and the system log of the electronic device 2; and when the electronic device 2 is not connected to the Internet, records the screen during data transfer Screenshot and the system log of the electronic device 2.

Further, the method further includes the following steps: when it is determined that the electronic device 2 has data transferred to the storage device 200, determining whether the electronic device 2 is equipped with a camera; when it is determined that the electronic device 2 is installed When using a camera, control the camera to capture an image of the current user of the electronic device 2; and store the image of the current user of the electronic device 2 captured by the camera in the memory 20.

In summary, the present invention meets the requirements of a patent for invention, and Yan filed a patent application in accordance with the law. However, the above are only the preferred embodiments of the present invention. For those who are familiar with the technique of the present invention, equivalent modifications or changes made in accordance with the spirit of the present invention should be covered by the following patent applications.

1: Data protection device

10: processor

100: Data Protection System

101: Load module

102: Install the module

103: Judgment Module

104: Run module

105: Monitoring module

106: record module

107: Prompt Module

108: Camera control module

20: memory

30: Communication unit

2: electronic device

200: storage device

201: Programming interface

Claims (8)

A data protection device includes a processor. The improvement is that the data protection device is communicatively connected with a plurality of electronic devices, the electronic device includes at least an external storage device, and the processor includes: a loading module for A data protection system is loaded into the data protection device; an installation module is used to install the program programming interface of the data protection system in the plurality of electronic devices; an operation module is used to use the data The protection system controls the programming interface to run in the background of each electronic device; the monitoring module is used to monitor the activity status of the storage device through the data protection system controlling the programming interface in each electronic device to determine whether There is data transferred to the storage device; the prompt module is used to output a prompt message when the monitoring module determines that the electronic device has data transferred to the storage device; the judgment module is used to determine Whether the electronic device is equipped with a camera; a camera control module for controlling the camera to take an image of the current user of the electronic device when the judgment module determines that the electronic device is equipped with a camera; and a recording module Group, storing the image of the current user of the electronic device captured by the camera in the memory of the data protection device. The data protection device according to claim 1, wherein the loading module loads the data protection system into each data protection device in a plurality of groups, and the processor further includes: the judgment The module is also used to determine whether the data protection device in each group has detected the data protection system; and The installation module also installs the data protection system in a plurality of electronic devices that are in communication with each data protection device when the judgment module determines that the data protection device in each group has detected the data protection system. Program programming interface of data protection system. The data protection device according to claim 1, wherein the processor further includes: the recording module is further configured to record when the monitoring module determines that the electronic device has data transferred to the storage device The information related to the data transfer, the prompt information output by the prompt module includes the information related to the data transfer, wherein the related information includes the positioning information of the electronic device, the screenshot during the data transfer, and the System log of the electronic device. The data protection device according to claim 3, wherein the processor further includes: the judgment module is further configured to: when the monitoring module judges that the electronic device has data transferred to the storage device, Determine whether the electronic device is in a networked state; the recording module also records the positioning information of the electronic device, a screenshot during data transfer, and the system of the electronic device when the electronic device is in a networked state Log; and the recording module also records a screenshot of the data transfer and the system log of the electronic device when the electronic device is not in a networked state. A data protection method is applied to a data protection device. The data protection device is in communication connection with a plurality of electronic devices. The electronic device includes at least an external storage device. The improvement is that the method includes the following steps: The data protection device is loaded with a data protection system; the program programming interface of the data protection system is installed in the plurality of electronic devices; the program programming interface is controlled by the data protection system in each electronic device Run in the background; monitor the activity status of the storage device by controlling the program programming interface in each electronic device by the data protection system to determine whether there is data transferred to the storage device; When it is determined that the electronic device has data transferred to the storage device, output a prompt message; determine whether the electronic device is equipped with a camera; when it is determined that the electronic device is equipped with a camera, control the camera to shoot the An image of the current user of the electronic device; and storing the image of the current user of the electronic device captured by the camera in the memory of the data protection device. The data protection method according to claim 5, wherein the method further includes the steps of: loading the data protection system into each data protection device in a plurality of groups; determining whether the data in each group is All protection devices detect the data protection system; and when it is determined that the data protection devices in each group have detected the data protection system, install in a plurality of electronic devices that are in communication with each data protection device The programming interface of the data protection system. The data protection method according to claim 5, wherein the method further comprises the following steps: recording the relevant information of the data transfer, wherein the relevant information includes the positioning information of the electronic device and the screen during the data transfer Screenshots and system logs of the electronic device. The data protection method according to claim 7, wherein the method further includes the following steps: when it is determined that the electronic device has data transferred to the storage device, determining whether the electronic device is in a connected state; When it is determined that the electronic device is in a networked state, record the location information of the electronic device, the screenshot of the data transfer and the system log of the electronic device; and When it is determined that the electronic device is not connected to the network, a screenshot of the data transfer and the system log of the electronic device are recorded.

Images