WO2017000638A1

WO2017000638A1 - Network file access control method and device

Info

Publication number: WO2017000638A1
Application number: PCT/CN2016/079924
Authority: WO
Inventors: 陈湘宁; 范超; 谭小兵
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-06-29
Filing date: 2016-04-21
Publication date: 2017-01-05
Also published as: CN106331010A

Abstract

A network file access control method and device. The method comprises: when a privacy file access request of a terminal is received, acquiring the IP address of the terminal; comparing the IP address of the terminal to a saved IP address; and if the IP address of the terminal is the same as the saved IP address, sending a privacy directory corresponding to the IP address of the terminal to the terminal.

Description

Network file access control method and device

Technical field

The present application relates to, but is not limited to, the field of network file storage, and in particular, to a network file access control method and apparatus.

Background technique

At present, with the continuous development of communication technology and terminal technology, terminals such as smart phones, notebook computers, PDAs (personal digital assistants), PADs (tablets), PMPs (portable multimedia players), digital cameras, etc. are becoming more and more widely used. . With the advent of Blu-ray video, lossless music, high-pixel photos, etc., the amount of household data has grown on a large scale. At the same time, the need for privacy in home storage data is increasing. For example, most common data can be shared by all family members' electronic devices (smartphones, PCs, tablets, smart TVs, etc.); a small amount of special data (such as privacy photos, privacy videos, important documents and materials), etc. It can only be accessed by special means by electronic devices of a small number of family members.

In the related network file system, all the files in the network file system are displayed to the authenticated terminal, so that after the terminal is authenticated, all the files in the network file system can be viewed. As a result, the privacy file in the related network file system cannot be secretly protected.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

A network file access control method, the network file access control method includes:

Obtaining an IP address of the terminal when receiving a privacy file access request of the terminal;

Comparing the IP address of the terminal with the IP address saved by the server;

If the IP address of the terminal is the same as the IP address saved by the server, the privacy directory corresponding to the IP address of the terminal is sent to the terminal.

Preferably, the method further includes:

Receiving the privacy document of the terminal before the step of acquiring the IP address of the terminal When the request is made, the terminal is authenticated by the password;

Obtaining a privacy directory corresponding to the privacy password input by the terminal when the password verification of the terminal is passed;

The obtained privacy directory is used as a privacy directory corresponding to the IP address of the terminal, and the IP address corresponding to the terminal and the privacy directory corresponding to the IP address of the terminal are saved to the server.

Preferably, when receiving the privacy file verification request of the terminal, performing privacy password verification on the terminal includes:

Receiving a privacy password input by the terminal when receiving the privacy file verification request of the terminal;

Matching the privacy password entered by the terminal with the privacy password saved by the server;

If the privacy password entered by the terminal is the same as the privacy password saved by the server, it is determined that the terminal's private password verification is passed.

Preferably, the method further includes:

Before receiving the privacy file verification request of the terminal, before performing the step of performing the privacy password verification on the terminal, when receiving the privacy file creation request of the terminal, creating a privacy directory and a corresponding privacy file;

Receiving a privacy password input by the terminal;

The received privacy password is used as the privacy password corresponding to the created privacy directory and saved in the created privacy file.

Preferably, the method further includes:

If the IP address of the terminal is the same as the IP address saved by the server, before receiving the privacy file deletion request corresponding to the terminal's IP address, the terminal receives the private file deletion request. The password entered by the terminal;

If the privacy password input by the terminal is the same as the privacy password saved by the server, the privacy directory and the privacy file corresponding to the privacy password saved by the server are deleted.

A network file access control device, the network file access control device comprising:

Obtaining a module, configured to acquire an IP address of the terminal when receiving a privacy file access request of the terminal;

The comparison module is configured to compare the IP address of the terminal with an IP address saved by the server;

The sending module is configured to send the privacy directory corresponding to the IP address of the terminal to the terminal if the IP address of the terminal is the same as the IP address saved by the server.

Preferably, the network file access control device further includes a verification module and a storage module;

The verification module is configured to perform a privacy password verification on the terminal when receiving the privacy file verification request of the terminal before acquiring the IP address of the terminal;

The obtaining module is further configured to: when the password verification of the terminal passes, obtain a privacy directory corresponding to the privacy password input by the terminal;

The storage module is configured to use the acquired privacy directory as a privacy directory corresponding to the IP address of the terminal, and save the IP address of the terminal and the privacy directory corresponding to the IP address of the terminal to the server.

Preferably, the verification module includes a receiving unit, a matching unit, and a determining unit;

The receiving unit is configured to receive a privacy password input by the terminal when receiving the privacy file verification request of the terminal;

The matching unit is configured to match a privacy password input by the terminal with a privacy password saved by the server;

The determining unit is configured to determine that the privacy password verification of the terminal passes if the privacy password input by the terminal is the same as the privacy password saved by the server.

Preferably, the network file access control device further includes a creation module;

The creating module is configured to: before receiving the privacy file verification request of the terminal, before performing the privacy password verification on the terminal, create a privacy directory and a corresponding privacy file when receiving the privacy file creation request of the terminal ;

The obtaining module is further configured to receive a privacy password input by the terminal;

The storage module is further configured to use the received privacy password as a privacy password corresponding to the created privacy directory and save the created privacy file.

Preferably, the network file access control device further includes a deletion module;

The obtaining module is further configured to: if the IP address of the terminal is the same as the IP address saved by the server, before receiving the privacy directory corresponding to the IP address of the terminal to the terminal, receiving the privacy of the terminal Receiving a privacy password entered by the terminal when the file is deleted;

The comparison module is further configured to match a privacy password input by the terminal with a privacy password saved by the server;

The deleting module is configured to delete the privacy directory and the privacy file corresponding to the privacy password saved by the server if the password entered by the terminal is the same as the privacy password saved by the server.

A computer readable storage medium storing computer executable instructions that, when executed by a processor, implement the network file access control method described above.

In the solution of the embodiment of the present invention, the IP address of the terminal is verified, and the IP address is associated with the privacy directory and the privacy file, so that only the terminal with the same IP address saved by the server can view the privacy directory corresponding to the IP address of the terminal. And the privacy file corresponding to the privacy directory access, the terminal different from the IP address saved by the server cannot view the privacy directory and access the privacy file, and the terminal cannot view the privacy directory and the privacy file that do not correspond to the terminal IP address. , greatly improving the privacy of the privacy file in the network file system and improving the security of the privacy file.

BRIEF abstract

1 is a schematic flowchart of a first embodiment of a network file access control method according to the present invention;

2 is a schematic flowchart of a second embodiment of a network file access control method according to the present invention;

3 is a schematic flowchart of a preferred embodiment of performing a privacy password verification step on a terminal when receiving a privacy file verification request of a terminal according to the present invention;

4 is a schematic flowchart of a third embodiment of a network file access control method according to the present invention;

FIG. 5 is a schematic flowchart diagram of a fourth embodiment of a network file access control method according to the present invention; FIG.

6 is a schematic diagram of functional modules of a first embodiment of a network file access control apparatus according to the present invention;

FIG. 7 is a schematic diagram of functional modules of a second embodiment of a network file access control apparatus according to the present invention; FIG.

8 is a schematic diagram of functional modules of a preferred embodiment of the verification module of the present invention;

9 is a schematic diagram of functional modules of a third embodiment of a network file access control apparatus according to the present invention;

FIG. 10 is a schematic diagram of functional modules of a fourth embodiment of a network file access control apparatus according to the present invention.

Embodiments of the invention

Embodiments of the present invention will be described below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

The main purpose of the embodiment of the present invention is to solve the problem that a privacy file in a related network file system cannot be secretly protected.

The main solution of the embodiment of the present invention is: when receiving the privacy file access request of the terminal, acquiring the IP address of the terminal; comparing the IP address of the terminal with the IP address saved by the server; if the terminal The IP address is the same as the IP address saved by the server, and the privacy directory corresponding to the IP address of the terminal is sent to the terminal, so that the terminal accesses the corresponding privacy file through the privacy directory.

The embodiment of the invention provides a network file access control method.

Referring to FIG. 1, FIG. 1 is a schematic flowchart diagram of a first embodiment of a network file access control method according to the present invention.

The network file access control method includes steps S101 to S103:

S101. Acquire an IP address of the terminal when receiving a privacy file access request of the terminal.

The server receives the privacy file access request from the terminal, and obtains the IP address of the terminal when receiving the privacy file access request of the terminal. The terminal may include a mobile terminal such as a mobile phone, a smart phone, a notebook computer, a digital broadcast receiver, a PDA (Personal Digital Assistant), a PAD (Tablet), a PMP (Portable Multimedia Player), a digital camera, etc., and the like Fixed terminal for digital TV, desktop computer, etc.

The privacy file access request may provide a shortcut icon of the privacy file access by the terminal, so that the user triggers the privacy file access request based on the shortcut icon, and sends the privacy file access request to the server; or The physical button accessed by the privacy file may also be provided by the terminal for the user to trigger a privacy file access request based on the physical button, and send the privacy file access request to the server.

The server may obtain the IP address of the terminal when receiving the terminal privacy file access request; or, when the terminal logs in, obtain the IP address of the terminal, and save the IP address of the terminal. At the server, when the server receives the privacy file access request of the terminal, the IP address of the terminal is locally read from the server.

Preferably, when receiving the session request of the terminal, the server may perform legality verification on the request to determine whether the request is legal. When the validity of the request is verified, the request is further executed. The operation to improve the security of the privacy file. For example, when the server receives the privacy file access request of the terminal, the server performs legality verification on the access request, and when the validity of the access request is verified, the step of acquiring the IP address of the terminal and subsequent steps are performed. .

The process of verifying the validity of the received session request by the server may be implemented by: when the terminal logs in to the server, acquiring an IP address of the terminal and a session ID when the terminal logs in, and The IP address of the terminal and the corresponding session ID are stored in the server. When the server receives the session request from the terminal, the IP address and the session ID of the terminal are acquired again, and the obtained IP address and The session ID is compared with the IP address saved by the server and the corresponding session ID, and the obtained IP address is matched with the session ID. If the obtained IP address matches the session ID, the validity of the session request is determined. Passing; if the obtained IP address does not match the session ID, it is determined that the validity verification of the request fails.

The process of verifying the validity of the received session request by the server may also be implemented by: obtaining a sending timestamp and a receiving timestamp of the request, and determining a sending timestamp and receiving of the request. Whether the timestamps match, if the sending timestamp of the request matches the receiving timestamp, determining that the validity of the request is verified; if the sending timestamp of the request does not match the receiving timestamp, determining the request The legality verification failed. In the embodiment of the present invention, matching means that two objects that are compared with each other are identical or the difference value is less than or equal to a preset difference threshold.

S102. Compare the IP address of the terminal with an IP address saved by the server.

The server compares the IP address of the terminal with an IP address saved by the server. The IP address saved by the server may be a preset IP address that is allowed to access the privacy file stored in the server configuration file; or may be saved by the server when the terminal authenticates through the privacy password of the privacy file. The IP address of the authenticated terminal within the configuration file.

S103. If the IP address of the terminal is the same as the IP address saved by the server, send a privacy directory corresponding to the IP address of the terminal to the terminal, so that the terminal accesses the corresponding content through the privacy directory. Privacy document.

If the IP address of the terminal is the same as the IP address saved by the server, that is, the service The device matches the saved IP address to the same IP address as the terminal's IP address. The server sends a privacy directory corresponding to the IP address of the terminal to the terminal by querying the correspondence between the IP address and the privacy directory saved by the server, so that the terminal accesses the corresponding privacy through the privacy directory. file. The IP address may correspond to a privacy directory or multiple privacy directories. The privacy directory and the corresponding privacy file are stored on the server, and the privacy directory is configured to access the corresponding privacy file saved by the server through the privacy directory when the terminal accesses the server.

The terminal may write the privacy data into the privacy file through the privacy directory; or, the data in the privacy file may also be read through the privacy directory. Preferably, the terminal writes the private data to the privacy file through the privacy directory, and the server encrypts the written private data and saves the data in the privacy file; the terminal reads the location through the privacy directory. When the data in the privacy file is described, the server first decrypts the data in the privacy file, and sends the decrypted data to the terminal. By encrypting the data in the privacy file, the security of the privacy file data can be effectively improved.

The embodiment of the present invention verifies the IP address of the terminal, and associates the IP address with the privacy directory and the privacy file, so that only the terminal with the same IP address saved by the server can view the privacy directory corresponding to the terminal IP address, and pass the The privacy directory accesses the corresponding privacy file, and the terminal different from the IP address saved by the server cannot view the privacy directory and access the privacy file, and the terminal cannot view the privacy directory and the privacy file that do not correspond to the IP address of the terminal, thereby greatly improving The privacy of private files in the network file system improves the security of private files.

Referring to FIG. 2, FIG. 2 is a schematic flowchart diagram of a second embodiment of a network file access control method according to the present invention. Based on the first embodiment of the foregoing network file access control method, before step S101, steps S201 to S203 are further included:

S201: Before obtaining the IP address of the terminal, perform a privacy password verification on the terminal when receiving the privacy file verification request of the terminal.

When receiving the privacy file verification request of the terminal, the server performs privacy password verification on the terminal. The privacy password corresponds to a privacy directory and a privacy file, and is configured to verify a terminal that accesses the privacy directory and the privacy file, and only the verified terminal IP can access the corresponding privacy directory and the privacy file, and the privacy password is preferably a number and a password. The key composed of letters.

Referring to FIG. 3, FIG. 3 is a schematic diagram of the present invention when receiving a privacy file verification request of the terminal. A schematic flowchart of a preferred embodiment of the step of performing a privacy password verification process by the terminal, when receiving the privacy file verification request of the terminal, performing privacy password verification on the terminal includes steps S301-S303:

S301. Receive a privacy password input by the terminal when receiving the privacy file verification request of the terminal.

S302. Match a privacy password input by the terminal with a privacy password saved by the server.

S303. If the privacy password input by the terminal is the same as the privacy password saved by the server, determine that the password verification of the terminal passes.

Receiving, by the server, a privacy password input by the terminal when receiving the privacy file verification request of the terminal; the server matching the privacy password input by the terminal with the privacy password saved by the server; if the terminal inputs the privacy The password is the same as the privacy password saved by the server, and the server determines that the terminal's privacy password verification is passed.

Preferably, if the privacy password saved by the server is subjected to irreversible encryption processing, the user may perform privacy password verification on the terminal: the server receives the terminal's privacy file verification request, and receives the terminal. Entering a privacy password and encrypting the privacy password entered by the terminal; the server matching the encrypted privacy password with the encrypted private password saved by the server; if matching the same encrypted private password The server determines that the terminal's privacy password verification is passed. When the privacy password saved by the server is subjected to irreversible encryption processing, the privacy password cannot be decrypted, and the security of the privacy password is improved.

Preferably, when receiving the privacy file verification request of the terminal, the server may perform legality verification on the request to determine whether the request is legal, and when the legality verification of the request passes, perform the Request the corresponding operation. The method is the same as the process of verifying the validity of the received session request by the server in the first embodiment, and details are not described herein again.

S202. Acquire a privacy directory corresponding to the privacy password input by the terminal when the password verification of the terminal is passed.

When the server passes the password verification of the terminal, the server obtains a privacy directory corresponding to the privacy password input by the terminal by querying the correspondence between the privacy password and the privacy directory saved by the server. Alternatively, in the process of performing the privacy password verification on the terminal, The privacy password entered by the terminal is matched with the privacy password saved by the server. Since the privacy password of the server is stored in the corresponding privacy file when the privacy file is created, when the server matches the same privacy password, according to the description The save path of the privacy password determines the privacy file and the privacy directory corresponding to the privacy password.

S203. The obtained privacy directory is used as a privacy directory corresponding to the IP address of the terminal, and the IP address corresponding to the terminal and the privacy directory corresponding to the IP address of the terminal are saved to the server.

The server uses the acquired privacy directory as a privacy directory corresponding to the IP address of the terminal, and saves the IP address of the terminal and the privacy directory corresponding to the IP address of the terminal in the server. The terminal IP address verified by the privacy password and the privacy directory corresponding to the privacy password are stored in the server, and the IP address of the terminal can be verified when the terminal accesses the privacy file, and the privacy password verified by the terminal IP address is verified. A file is displayed to the terminal for viewing access by the terminal.

The server performs a privacy password verification on the terminal when receiving the privacy file close request of the terminal; when the password verification of the terminal passes, the server deletes the terminal input in the configuration file The privacy password corresponds to the privacy directory. By deleting the privacy directory in the server configuration file, the terminal cannot view the privacy directory when accessing the privacy file next time, and thus cannot access the privacy file through the privacy directory, if the user wants to access the privacy again. For the file, the privacy password verification is performed again, and the privacy file can be accessed again after the private password verification is passed.

In this embodiment, by performing privacy password verification on the terminal, the IP address of the terminal through which the privacy password is verified and the privacy directory corresponding to the privacy password are stored in the server, and the IP address of the terminal is performed according to the IP address saved by the server and the corresponding privacy directory. Verification, and the IP address is associated with the privacy directory and the privacy file, so that only the terminal IP address verified by the privacy password can view the privacy directory corresponding to the terminal IP address, and access the corresponding privacy file through the privacy directory, and save with the server. The terminal with different IP addresses cannot view the privacy directory and access the privacy file, and the terminal cannot view the privacy directory and the privacy file that do not correspond to the IP address of the terminal, thereby greatly improving the privacy of the privacy file in the network file system. Improve the security of private files.

Referring to FIG. 4, FIG. 4 is a schematic flowchart diagram of a third embodiment of a network file access control method according to the present invention. Based on the second embodiment of the foregoing network file access control method, before the step S201, the method further includes steps S401 to S403:

S401. Before receiving the privacy file verification request of the terminal, before performing the privacy password verification on the terminal, when receiving the privacy file creation request of the terminal, create a privacy directory and a corresponding privacy file.

When receiving the privacy file creation request of the terminal, the server creates a privacy directory in a preset directory, and creates a privacy file with the same name as the privacy directory under the preset directory. The privacy file includes the user's privacy data.

Preferably, when receiving the privacy file creation request of the terminal, the server may perform legality verification on the request to determine whether the request is legal, and when the legality verification of the request passes, perform the The operation method corresponding to the request is the same as the process of verifying the validity of the received session request by the server in the first embodiment, and details are not described herein again.

S402. Receive a privacy password input by the terminal.

S403. The received privacy password is used as a privacy password corresponding to the created privacy directory and saved in the created privacy file.

The server receives the privacy password input by the terminal; the server uses the received privacy password as a privacy password corresponding to the created privacy directory and saves the created privacy file. Preferably, the terminal may provide a privacy password input interface for the user to input a privacy password based on the input interface, and send the input privacy password to the server when detecting the input completion command triggered by the user based on the input interface. . Preferably, the privacy password may be encrypted and saved in a corresponding privacy file, and the encryption process is preferably an irreversible encryption process to improve the security of the privacy password.

In this embodiment, when the server creates the privacy file, the privacy password corresponding to the privacy file is saved in the privacy file, so that the server performs the privacy password verification on the terminal according to the saved privacy password and the corresponding privacy directory, and the privacy password is verified. The IP address of the passed terminal and the privacy directory corresponding to the privacy password are stored in the server, and the IP address of the terminal is verified according to the IP address saved by the server and the corresponding privacy directory, and the IP address is associated with the privacy directory and the privacy file. The terminal that is the same as the IP address saved by the server can view the privacy directory corresponding to the IP address of the terminal, and access the corresponding privacy file through the privacy directory. The terminal different from the IP address saved by the server cannot view the privacy directory and access the private directory. The privacy file and the terminal cannot view the privacy directory and the privacy file that do not correspond to the IP address of the terminal, which greatly improves the privacy of the privacy file in the network file system and improves the security of the privacy file.

Referring to FIG. 5, FIG. 5 is a schematic flowchart diagram of a fourth embodiment of a network file access control method according to the present invention. Based on the first embodiment of the foregoing network file access control method, after the step S103, the method further includes steps S501 to S503:

S501. If the IP address of the terminal is the same as the IP address saved by the server, before receiving the privacy file deletion request of the terminal, receiving the privacy directory corresponding to the IP address of the terminal, The privacy password entered by the terminal.

S502. Match a privacy password input by the terminal with a privacy password saved by the server.

S503. If the privacy password input by the terminal is the same as the privacy password saved by the server, deleting the privacy directory and the privacy file corresponding to the privacy password saved by the server.

Receiving, by the server, a privacy password input by the terminal when receiving the privacy file deletion request of the terminal; the server matching the privacy password input by the terminal with the privacy password saved by the server; if the terminal inputs The privacy password is the same as the privacy password saved by the server, and the server deletes the privacy directory and the privacy file corresponding to the privacy password saved by the server.

Preferably, when receiving the privacy file deletion request of the terminal, the server may perform legality verification on the request to determine whether the request is legal, and when the legality verification of the request passes, perform the Request the corresponding operation. The method is the same as the process of verifying the validity of the received session request by the server in the first embodiment, and details are not described herein again.

In this embodiment, the IP address of the terminal is verified, and the IP address is associated with the privacy directory and the privacy file, so that only the terminal with the same IP address saved by the server can view the privacy directory corresponding to the terminal IP address, and pass the The privacy directory accesses the corresponding privacy file, and the terminal different from the IP address saved by the server cannot view the privacy directory and access the privacy file, and the terminal cannot view the privacy directory and the privacy file that do not correspond to the terminal IP address, which greatly improves the access. The privacy of private files in the network file system improves the security of private files.

The execution bodies of the network file access control methods of the above first to fourth embodiments may each be a network file storage device or a network file system server. And the network file access control method can be implemented by a network file storage program installed on a network file storage device or a network file system server.

The embodiment of the invention further provides a network file access control device.

Referring to FIG. 6, FIG. 6 is a schematic diagram of functional modules of a first embodiment of a network file access control apparatus according to the present invention.

In this embodiment, the network file access control apparatus includes: an obtaining module 10, a comparison module 20, and a sending module 30.

The obtaining module 10 is configured to acquire an IP address of the terminal when receiving a privacy file access request of the terminal.

The process of verifying the validity of the received session request by the server may be implemented by: when the terminal logs in to the server, acquiring the IP address of the terminal and the terminal End session login ID, and save the IP address of the terminal and the corresponding session ID in the server, and when the server receives the session request from the terminal, acquire the IP address and session ID of the terminal again. And comparing the obtained IP address and the session ID with the IP address saved by the server and the corresponding session ID, and determining whether the obtained IP address matches the session ID. If the obtained IP address matches the session ID, then Determining that the validity of the session request is verified; if the acquired IP address does not match the session ID, it is determined that the validity verification of the request fails.

The comparison module 20 is configured to compare the IP address of the terminal with an IP address saved by the server;

The sending module 30 is configured to: if the IP address of the terminal is the same as the IP address saved by the server, send a privacy directory corresponding to the IP address of the terminal to the terminal, so that the terminal passes the The privacy directory accesses the corresponding privacy file.

If the IP address of the terminal is the same as the IP address saved by the server, that is, the server matches the same IP address as the IP address of the terminal in the saved IP address. The server sends a privacy directory corresponding to the IP address of the terminal to the terminal by querying the correspondence between the IP address and the privacy directory saved by the server, so that the terminal accesses the corresponding privacy through the privacy directory. file. The IP address may correspond to a privacy directory or multiple privacy directories. The privacy directory and the corresponding privacy file are stored on the server, and the privacy directory is configured to access the corresponding privacy file saved by the server through the privacy directory when the terminal accesses the server.

Referring to FIG. 7, FIG. 7 is a schematic diagram of functional modules of a second embodiment of a network file access control apparatus according to the present invention. The network file access control device further includes a verification module 40 and a storage module 50, based on the first embodiment of the network file access control device;

The verification module 40 is configured to perform privacy password verification on the terminal when receiving the privacy file verification request of the terminal.

8 is a schematic diagram of a functional module of a preferred embodiment of the verification module 40 of the present invention, the verification module 40 includes a receiving unit 41, a matching unit 42 and a determining unit 43;

The receiving unit 41 is configured to receive a privacy password input by the terminal when receiving the privacy file verification request of the terminal.

The matching unit 42 is configured to match the privacy password input by the terminal with the privacy password saved by the server.

The determining unit 43 is configured to save the password entered by the terminal and the server If the privacy password is the same, it is determined that the terminal's privacy password verification is passed.

The obtaining module 10 is further configured to acquire a privacy directory corresponding to the privacy password input by the terminal when the password verification of the terminal is passed.

When the server passes the password verification of the terminal, the server obtains a privacy directory corresponding to the privacy password input by the terminal by querying the correspondence between the privacy password and the privacy directory saved by the server. Alternatively, during the process of performing the privacy password verification by the terminal, the privacy password input by the terminal may be matched with the privacy password saved by the server. When the privacy file is created, the privacy password of the server is saved in the corresponding privacy file. Therefore, when the server matches the same privacy password, the privacy file and the privacy directory corresponding to the privacy password are determined according to the save path of the privacy password.

The storage module 50 is configured to use the acquired privacy directory as a privacy directory corresponding to the IP address of the terminal, and save the IP address of the terminal and the privacy directory corresponding to the IP address of the terminal to the server.

The server uses the acquired privacy directory as a privacy target corresponding to the IP address of the terminal Recording, and storing the IP address of the terminal and the privacy directory corresponding to the IP address of the terminal in the server. The terminal IP address verified by the privacy password and the privacy directory corresponding to the privacy password are stored in the server, and the IP address of the terminal can be verified when the terminal accesses the privacy file, and the privacy password verified by the terminal IP address is verified. A file is displayed to the terminal for viewing access by the terminal.

Referring to FIG. 9, FIG. 9 is a schematic diagram of functional modules of a third embodiment of a network file access control apparatus according to the present invention. Based on the second embodiment of the network file access control device, the network file access control device further includes a creation module 60;

The creating module 60 is configured to: before receiving the privacy file verification request of the terminal, before performing the privacy password verification on the terminal, create a privacy directory and corresponding privacy when receiving the privacy file creation request of the terminal file.

Preferably, when receiving the privacy file creation request of the terminal, the server may perform legality verification on the request to determine whether the request is legal, and when the legality verification of the request passes, perform the Request the corresponding operation. The method is the same as the process of verifying the validity of the received session request by the server in the first embodiment, and details are not described herein again.

The obtaining module 10 is further configured to receive a privacy password input by the terminal.

The storage module 50 is further configured to store the received privacy password as a privacy password corresponding to the created privacy directory and save the created privacy file.

Referring to FIG. 10, FIG. 10 is a schematic diagram of functional modules of a fourth embodiment of a network file access control apparatus according to the present invention. The network file access control device further includes a deletion module 70, based on the third embodiment of the network file access control device;

The obtaining module 10 is further configured to: if the IP address of the terminal is the same as the IP address saved by the server, before sending the privacy directory corresponding to the IP address of the terminal to the terminal, Upon receiving the privacy file deletion request of the terminal, the privacy password input by the terminal is received.

The comparison module 20 is further configured to match the privacy password input by the terminal with the privacy password saved by the server.

The deleting module 70 is configured to delete the privacy directory and the privacy file corresponding to the privacy password saved by the server if the privacy password input by the terminal is the same as the privacy password saved by the server.

It is to be understood that the term "comprises", "comprising", or any other variants thereof, is intended to encompass a non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes those elements. It also includes other elements that are not explicitly listed, or elements that are inherent to such a process, method, article, or device. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, method, item, or device that comprises the element.

The serial numbers of the embodiments of the present invention are merely for the description, and do not represent the advantages and disadvantages of the embodiments.

Those skilled in the art can clearly understand the above by the description of the above embodiments. The embodiment method can be implemented by means of software plus a necessary general hardware platform, of course, also through hardware, but in many cases the former is a better implementation. Based on such understanding, the technical solution of the present invention in essence or the contribution to the related art can be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, CD-ROM). The instructions include a number of instructions for causing a terminal device (which may be a cell phone, computer, server, air conditioner, or network device, etc.) to perform the methods described in various embodiments of the present invention.

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

When the device/function module/functional unit in the above embodiment is implemented in the form of a software function module and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Industrial applicability

Claims

A network file access control method, the network file access control method includes:

Obtaining an IP address of the terminal when receiving a privacy file access request of the terminal;

Comparing the IP address of the terminal with the IP address saved by the server;

If the IP address of the terminal is the same as the IP address saved by the server, the privacy directory corresponding to the IP address of the terminal is sent to the terminal.
The network file access control method according to claim 1, wherein the method further comprises:

Before obtaining the IP address of the terminal, when receiving the privacy file verification request of the terminal, performing privacy password verification on the terminal;

Obtaining a privacy directory corresponding to the privacy password input by the terminal when the password verification of the terminal is passed;

The obtained privacy directory is used as a privacy directory corresponding to the IP address of the terminal, and the IP address corresponding to the terminal and the privacy directory corresponding to the IP address of the terminal are saved to the server.
The network file access control method according to claim 2, wherein the performing the privacy password verification on the terminal when receiving the privacy file verification request of the terminal comprises:

Receiving a privacy password input by the terminal when receiving the privacy file verification request of the terminal;

Matching the privacy password entered by the terminal with the privacy password saved by the server;

If the privacy password entered by the terminal is the same as the privacy password saved by the server, it is determined that the terminal's private password verification is passed.
The network file access control method of claim 2, the method further comprising:

Before receiving the privacy file verification request of the terminal, before performing the privacy password verification on the terminal, when receiving the privacy file creation request of the terminal, creating a privacy directory and a corresponding privacy file;

Receiving a privacy password input by the terminal;

The received privacy password is used as the privacy password corresponding to the created privacy directory and saved in the created privacy file.
The network file access control method according to any one of claims 1 to 4, further comprising:

If the IP address of the terminal is the same as the IP address saved by the server, Before receiving the privacy file deletion request of the terminal, the privacy directory corresponding to the IP address of the terminal is received by the terminal, and receiving the privacy password input by the terminal;

Matching the privacy password entered by the terminal with the privacy password saved by the server;

If the privacy password input by the terminal is the same as the privacy password saved by the server, the privacy directory and the privacy file corresponding to the privacy password saved by the server are deleted.
A network file access control device, the network file access control device comprising:

Obtaining a module, configured to acquire an IP address of the terminal when receiving a privacy file access request of the terminal;

The comparison module is configured to compare the IP address of the terminal with an IP address saved by the server;

The sending module is configured to send the privacy directory corresponding to the IP address of the terminal to the terminal if the IP address of the terminal is the same as the IP address saved by the server.
The network file access control device according to claim 1, wherein the network file access control device further comprises a verification module and a storage module;

The verification module is configured to perform a privacy password verification on the terminal when receiving the privacy file verification request of the terminal before acquiring the IP address of the terminal;

The obtaining module is further configured to: when the password verification of the terminal passes, obtain a privacy directory corresponding to the privacy password input by the terminal;

The storage module is configured to use the acquired privacy directory as a privacy directory corresponding to the IP address of the terminal, and save the IP address of the terminal and the privacy directory corresponding to the IP address of the terminal to the server.
The network file access control device according to claim 7, wherein the verification module comprises a receiving unit, a matching unit, and a determining unit;

The receiving unit is configured to receive a privacy password input by the terminal when receiving the privacy file verification request of the terminal;

The matching unit is configured to match a privacy password input by the terminal with a privacy password saved by the server;

The determining unit is configured to determine that the privacy password verification of the terminal passes if the privacy password input by the terminal is the same as the privacy password saved by the server.
The network file access control device according to claim 7, wherein said network file access control The device also includes a creation module;

The creating module is configured to: before receiving the privacy file verification request of the terminal, before performing the privacy password verification on the terminal, create a privacy directory and a corresponding privacy file when receiving the privacy file creation request of the terminal ;

The obtaining module is further configured to receive a privacy password input by the terminal;

The storage module is further configured to use the received privacy password as a privacy password corresponding to the created privacy directory and save the created privacy file.
The network file access control device according to any one of claims 6 to 9, wherein the network file access control device further comprises a deletion module;

The obtaining module is further configured to: if the IP address of the terminal is the same as the IP address saved by the server, before receiving the privacy directory corresponding to the IP address of the terminal to the terminal, receiving the privacy of the terminal Receiving a privacy password entered by the terminal when the file is deleted;

The comparison module is further configured to match a privacy password input by the terminal with a privacy password saved by the server;

The deleting module is configured to delete the privacy directory and the privacy file corresponding to the privacy password saved by the server if the password entered by the terminal is the same as the privacy password saved by the server.
A computer readable storage medium storing computer executable instructions that, when executed by a processor, implement the network file access control method of any one of claims 1 to 5.