WO2017101865A1

WO2017101865A1 - Data processing method and device

Info

Publication number: WO2017101865A1
Application number: PCT/CN2016/110447
Authority: WO
Inventors: 赵小宁
Original assignee: 北京奇虎科技有限公司; 北京奇安信科技有限公司
Priority date: 2015-12-18
Filing date: 2016-12-16
Publication date: 2017-06-22
Also published as: CN105631355A; CN105631355B

Abstract

A data method and device are provided, wherein the method specifically comprises: determining whether a current web page conforms to a preset protection rule (101) before displaying the current web page; when it conforms to the preset protection rule, displaying the current web page and displaying a watermark content at the same time on the current web page (102). This method can not only improve protection for the content of the page, but also have a deterrent effect on a leaker; thereby effectively preventing the current web page related sensitive data being leaked through a browser and improving security of the current web page and browser.

Description

Data processing method and device

Technical field

The present invention relates to the field of computer security technologies, and in particular, to a data processing method and a data processing device.

Background technique

A browser is a piece of software that can display the contents of an HTML (HyperText Mark-up Language) file of a web server or file system and allow users to interact with these files. The web browser mainly interacts with the web server through HTTP (HyperText Transfer Protocol) and acquires web pages. These web pages are specified by a URL (Uniform Resource Locator), and the file format is usually HTML.

With the rapid spread of the Internet, LAN has become an indispensable part of enterprise development. However, while bringing convenience to enterprises, LANs also face a variety of attacks and threats, such as confidential leakage, data loss, network abuse, identity fraud, illegal intrusion and so on. For example, for a local area network such as a bank or a military, the internal user terminal inevitably has some confidential data in the web page browsed by the browser. If the confidential data is leaked through the browser, it will bring great security risks. .

However, traditional browsers rarely monitor and process their own security. They need to use third-party anti-virus software to protect the browser. Because they need to interact with other software, they need to open many browser interfaces. For third-party programs, many unsafe programs can also use these interfaces, which can cause the browser's information and operations to be easily hijacked, resulting in potential insecurities in the use of the browser by user terminals in the LAN.

Summary of the invention

In view of the above problems, the present invention has been made in order to provide a data processing method and a data processing apparatus that overcome the above problems or at least partially solve the above problems.

According to an aspect of the present invention, a data processing method is provided, comprising:

Before displaying the current webpage, determining whether the current webpage meets a preset protection rule;

When the current webpage meets the preset protection rule, the current webpage is displayed, and the watermark content is displayed on the current webpage.

Optionally, before the step of determining whether the current webpage meets a preset protection rule, the method further includes:

Drawing a first window and a second window located above the first window during startup of the browser;

The step of displaying the current webpage while displaying the watermark content on the current webpage includes:

Displaying the current webpage through the first window;

The transparency of the second window is controlled to a value less than 100%, and the watermark content is displayed through the second window.

Optionally, the step of displaying the current webpage and simultaneously displaying the watermark content on the current webpage includes:

After the watermark content is embedded in the current webpage, the current webpage is displayed.

Optionally, the step of determining whether the current webpage meets a preset protection rule comprises:

Matching the page content of the current webpage with the first preset protection rule, and if the matching result is that the matching is successful, determining that the current webpage meets the preset protection rule; or

Searching in the URL collection according to the page address of the current webpage, and if the search hits, determining that the current webpage meets the preset protection rule; or

Extracting a protection identifier from the header information corresponding to the current webpage, and determining, according to the protection identifier, whether the current webpage meets the preset protection rule.

Optionally, the method is applied to the local area network, and the preset protection rule is that the administrator of the local area network sends the preset protection rule to the browser client by using the rule preset by the server.

Optionally, the watermark content is generated by the following steps:

The watermark content is generated according to at least one of an account of the current user, a login time of the current user, a current time, and a current enterprise corresponding enterprise identity.

Optionally, the method further includes:

Displaying the current webpage when the current webpage does not meet the preset protection rule;

The transparency of the second window is controlled to be 100%.

Optionally, the method further includes:

Receiving, by the second window, an operation event of the user for the current webpage;

Passing the operational event to the first window through the second window to cause the first window to respond to the operational event.

According to another aspect of the present invention, a data processing apparatus is provided, comprising:

The determining module is configured to determine whether the current webpage meets a preset protection rule before displaying the current webpage; and

The first display module is configured to display the current webpage when the current webpage meets the preset protection rule, and display the watermark content on the current webpage.

Optionally, the device further includes:

The drawing module is configured to: before the determining module determines whether the current webpage meets the preset protection rule, in the process of starting the browser, drawing the first window and the second window located above the first window;

The first display module includes:

a first display submodule configured to display the current webpage through the first window; and

The second display submodule is configured to control the transparency of the second window to a value less than 100%, and display the watermark content through the second window.

A data processing method and apparatus according to an embodiment of the present invention, when the current webpage meets a preset protection rule, displaying the current webpage, and displaying the watermark content on the current webpage; The rule may indicate that there is sensitive data in the current webpage that needs to be protected. The sensitive data may involve user privacy, and may also involve core technology or confidential technology of the local area network. In this case, the watermark content is displayed on the current webpage, and can be currently When the page content of the webpage is leaked, the corresponding watermark content is traced to the corresponding leaker, so that not only the protection of the page content can be increased, but also the deterrent can be deterred; thus, the embodiment of the present invention can Effectively prevent sensitive data from current web pages from being leaked through the browser, thus improving the security of current web pages and browsers.

The above description is only an overview of the technical solutions of the present invention, and the above-described and other objects, features and advantages of the present invention can be more clearly understood. Specific embodiments of the invention are set forth below.

DRAWINGS

Various other advantages and benefits will become apparent to those skilled in the art from a The drawings are only for the purpose of illustrating alternative embodiments and are not to be considered as limiting. Throughout the drawings, the same reference numerals are used to refer to the same parts. In the drawing:

1 is a flow chart showing the steps of a data processing method according to an embodiment of the present invention;

2 is a flow chart showing the steps of a data processing method according to an embodiment of the present invention;

FIG. 3 is a flow chart showing the steps of a data processing method according to an embodiment of the present invention; FIG.

4 is a flow chart showing the steps of a data processing method according to an embodiment of the present invention;

FIG. 5 is a block diagram showing the structure of a data processing apparatus according to an embodiment of the present invention; FIG.

6 is a block diagram of a computing device configured to perform a data processing method in accordance with the present invention;

7 is a storage unit configured to hold or carry program code that implements a data processing method in accordance with the present invention.

detailed description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While the embodiments of the present invention have been shown in the drawings, the embodiments Rather, these embodiments are provided so that this disclosure will be more fully understood and the scope of the disclosure will be fully disclosed.

One of the core concepts of the embodiment of the present invention is that, according to whether the current webpage meets the preset protection rule Then, the watermark content is selectively displayed on the current webpage, specifically, when the current webpage meets the preset protection rule, the current webpage is displayed, and the watermark content is displayed on the current webpage; Compliance with the preset protection rules may indicate that there is sensitive data in the current webpage that needs to be protected. The sensitive data may involve user privacy, and may also involve core technologies or confidential technologies of the local area network. In this case, the watermark content is displayed on the current webpage. It is possible to track the corresponding leaker by the corresponding watermark content when the page content of the current webpage is leaked, thereby not only increasing the protection for the page content, but also deterring the leaker; thus, the present invention The embodiment can effectively prevent the sensitive data involved in the current webpage from being leaked through the browser, thereby improving the security of the current webpage and the browser.

Referring to FIG. 1, a flow chart of steps of a data processing method according to an embodiment of the present invention is shown, which may specifically include the following steps:

Step 101: Before displaying the current webpage, determining whether the current webpage meets a preset protection rule;

The embodiments of the present invention can be applied to various page access scenarios, where the pages can be abbreviated pages, WAP (Wireless Application Protocol, Wireless Application Protocol), and WWW (World Wide Web) and other formats. The embodiment of the present invention does not limit the specific format of a specific page and a page.

The embodiments of the present invention can be applied to a network environment such as a wide area network or a local area network, and can improve the security of a single user terminal in the wide area network, or can improve the security of multiple user terminals and a local area network in the local area network. The user terminal may specifically include various terminals having page access capabilities, such as a mobile phone, a PC (personal computer), a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, and a fitness device. Personal digital assistants, etc.

In particular, the embodiment of the present invention can be applied to a local area network such as an enterprise network, a government network, or a campus network; in the foregoing local area network, a user terminal refers to a terminal device with an operating system installed, and the user terminal can be connected to a local area network by wire, or Connect to the LAN wirelessly. In this way, according to whether the current webpage meets the preset protection rule, the watermark content can be selectively displayed on the current webpage of the user terminal in the local area network as the webpage operation of the user terminal in the local area network, so as to increase the protection of the page content. Sex.

The data processing procedure in the embodiment of the present invention may be performed by a browser. Specifically, the data processing process may be performed by a data processing device or a data processing plug-in in the browser, thereby effectively preventing the webpage data to be protected from being leaked through the browser. , which can improve the security of the browser.

The embodiment of the present invention may provide the following determination scheme for determining whether the current webpage meets the preset protection rule:

Judgment plan 1

The determining scheme 1 may match the page content of the current webpage with the first preset protection rule. If the matching result is that the matching is successful, it is determined that the current webpage meets the preset protection rule.

In an optional embodiment of the present invention, the first preset protection rule may specifically include: a rule corresponding to the at least one preset keyword, where the first preset protection rule may specifically include: between preset keywords The (or) relationship may also be an AND relationship between the preset keywords, and the first preset protection rule may be described by using a regular expression. The specific content and specific description of the protection rules are not limited.

In another optional embodiment of the present invention, the preset keywords may be located in a keyword set. The keyword set may be a server of a local area network or a set of control terminals maintained according to security requirements of the local area network. The keyword set may specifically include: at least one preset keyword, and the preset keyword may be related to a core technology or a secret of a local area network. Technology related. The control terminal can receive the preset keyword specified by the user, and can also automatically determine the corresponding preset keyword according to the security requirement of the local area network. It can be understood that the specific preset keyword in the keyword set is not in the embodiment of the present invention. Limit it.

Judgment plan 2

The determining scheme 2 can search for the webpage address according to the current webpage address, and if the search hits, determine that the current webpage meets the preset protection rule.

The foregoing set of the URLs may be a set of the local area network or the control set of the local area network, or the control set of the local area network may further include: at least one preset website address, where the corresponding website address may carry the core technology of the local area network or Confidential technology related Sensitive data. The control terminal can receive the preset web address specified by the user, and can also automatically determine the corresponding preset web address according to the security requirements of the local area network. It can be understood that the specific preset web address in the foregoing web address set is not limited in the embodiment of the present invention.

In an actual application, the page address and the preset URL may be described in the form of a URL (Uniform Resource Locator), etc., and the embodiment of the present invention does not limit the specific description of the page address and the preset URL. .

Judgment plan 3

The determining scheme 3 may extract the protection identifier from the header information corresponding to the current webpage, and determine, according to the protection identifier, whether the current webpage meets the preset protection rule.

In an actual application, the server may add a protection identifier of the webpage in the header information of the webpage, and the protection identifier may be used to identify whether the webpage is a webpage to be protected. For example, the value of the protection identifier may be 0 or 1, 0 indicates that the web page is not a web page to be protected, and 1 identifies the web page as a web page to be protected. In this way, after obtaining the HTML code from the server, the client may extract the protection identifier from the header information of the HTML code, and determine whether the current webpage conforms to the preset protection rule according to the protection identifier. It can be understood that the foregoing process of adding the protection identifier and extracting the protection identifier is only an example, and the specific process of adding the protection identifier and extracting the protection identifier is not limited in the embodiment of the present invention.

In an optional embodiment of the present invention, when the method of the embodiment of the present invention is applied to a local area network, the preset protection rule may be a rule preset by a server of a local area network, and the server may The preset protection rules are sent to the browser client.

The above is a detailed description of the determination scheme of determining whether the current webpage meets the preset protection rule. It can be understood that one skilled in the art may adopt one or a combination of the foregoing determination schemes according to actual application requirements, or may also adopt other The judging scheme, for example, the preset protection rule may also involve user rights, some users may have the right to not watermark the content, and some users do not have the permission to not watermark the content.

Step 102: When the current webpage meets a preset protection rule, display the current webpage, and display the watermark content on the current webpage.

The embodiment of the present invention displays the watermark on the current webpage while displaying the current webpage. The content can prevent the user from leaking the page content of the current webpage by means of screen capture, photographing, printing, etc. without displaying the watermark content.

In an optional embodiment of the present invention, the watermark content may be generated by generating, according to at least one of an account of a current user, a login time of a current user, a current time, and a current enterprise corresponding enterprise identifier. Watermark content. It is assumed that the watermark content includes the current user's account, and the user's account can be a unique user corresponding to the local area network, so that the corresponding leaker can be tracked by the corresponding watermark content when the page content of the current webpage is leaked. Alternatively, if the watermark content includes the enterprise identifier, the corresponding leaked enterprise is tracked by the corresponding watermark content when the page content of the current webpage is leaked.

In another optional embodiment of the present invention, at least one of the current user's account, the current user's login time, the current time, and the current user's corresponding enterprise identity may be used as the original content, and the original content is encoded or Encryption processing to obtain the corresponding watermark content. The watermark content may be expressed in the form of a character, a two-dimensional code, a barcode, or the like. When the watermark content is tracked, the watermark content may be decoded or decrypted to obtain a corresponding original content. It can be understood that the specific original content, the encoding or encryption algorithm and the representation form corresponding to the watermark content are not limited in the embodiment of the present invention.

In addition, a person skilled in the art may control the distribution of the watermark content in the current webpage according to actual application requirements. For example, the watermark content may be distributed only in the vicinity of the sensitive data of the current webpage, or the watermark content may be distributed throughout the current webpage. The embodiment of the present invention does not limit the specific distribution of the above watermark content.

The embodiment of the present invention may provide the following display scheme for displaying the current webpage and displaying the watermark content on the current webpage:

Display scheme 1

In the display scheme 1, before the step of determining whether the current webpage meets the preset protection rule, the method may further include: in the process of starting the browser, drawing the first window and located in the first window The second window on;

And the step of displaying the watermark content on the current webpage, and the step of displaying the watermark content on the current webpage, the method may include:

Displaying the current webpage through the first window;

In the display scheme 1, the current webpage may be displayed through the first window, and the watermark content may be displayed through the second window; wherein the second window may be located above the first window, and the second window may be displayed when the watermark content needs to be displayed The transparency is controlled to a value less than 100%. For example, the transparency of the second window can be controlled to a value of 95%, 90%, etc., and the transparency of the second window is not limited in the embodiment of the present invention.

The display scheme 1 displays the watermark content through the second window located above the first window. Since the modification of the HTML code of the webpage may not be involved, the complexity of displaying the watermark content can be alleviated, and the amount of calculation required for displaying the watermark content can be reduced. And computing resources.

Display scheme 2

In the display scheme 2, the step 102 of displaying the current webpage and simultaneously displaying the watermark content on the current webpage may specifically include: displaying the current webpage after embedding the watermark content in the current webpage.

Display scheme 2 can embed the watermark content in the current webpage by modifying the form of the webpage code. Specifically, the content can be embedded in the current webpage by using the DIV (Division) technology in the CSS (Cascading Style Sheets). It can be understood that the specific process of embedding the watermark content into the current webpage is not limited in the embodiment of the present invention.

The technical solution for displaying the current webpage and displaying the watermark content on the current webpage is described in detail by using the display scheme 1 - display scheme 2, and it can be understood that those skilled in the art can adopt the display according to actual application requirements. Other technical solutions for displaying the watermark content on the current webpage at the same time, the embodiment of the present invention does not limit the specific display scheme.

In summary, since the current webpage conforms to the preset protection rule in the embodiment of the present invention, the sensitive data that needs to be protected exists in the current webpage, and the sensitive data may involve user privacy, and may also involve core technologies or confidential technologies of the local area network. In the case that the watermark content is displayed on the current webpage, and the corresponding watermark content can be tracked to the corresponding content when the page content of the current webpage is leaked. The leaker can not only increase the protection of the content of the page, but also can act as a deterrent to the leaker; thus, the embodiment of the present invention can effectively prevent sensitive data related to the current webpage from being leaked through the browser, thereby improving Current web and browser security.

Referring to FIG. 2, a flow chart of steps of a data processing method according to an embodiment of the present invention is shown, which may specifically include the following steps:

Step 201: In the process of starting the browser, drawing a first window and a second window located above the first window;

Step 202: Before displaying the current webpage, determining whether the current webpage meets a preset protection rule;

Step 203: When the current webpage meets a preset protection rule, display the current webpage by using the first window.

Step 204: Control the transparency of the second window to a value less than 100% while displaying the current webpage through the first window, and display the watermark content through the second window.

With respect to the embodiment shown in FIG. 1, the embodiment describes a process from launching a browser to displaying a current webpage, wherein an initial transparency of the second window may be a first preset value, and, in the current webpage The first window and the second preset value may be the same or different values. For example, the first preset value may be 100%, and the second preset value may be 90%. The specific value of the first preset value and the second preset value is not limited in the embodiment of the present invention.

In an optional embodiment of the present invention, the method may further include: displaying the current webpage when the current webpage does not meet the preset protection rule; and controlling the transparency of the second window to 100% . Since the transparency of the second window is 100%, it can exhibit a completely transparent effect, so the normal display of the current web page can be not affected.

Referring to FIG. 3, a flow chart of steps of a data processing method according to an embodiment of the present invention is shown, which may specifically include the following steps:

Step 301: In the process of starting the browser, drawing a first window and a second window located above the first window;

Step 302: Before displaying the current webpage, determining whether the current webpage meets a preset protection rule;

Step 303: When the current webpage meets a preset protection rule, display the current webpage by using the first window.

Step 304: Control the transparency of the second window to a value less than 100% while displaying the current webpage through the first window, and display the watermark content through the second window;

With respect to the embodiment shown in FIG. 2, the method in this embodiment may further include:

Step 305: Receive, by using the second window, an operation event of the user for the current webpage.

Step 306: Pass the operation event to the first window through the second window, so that the first window responds to the operation event.

For an operating system such as Windows, there is usually only one top window capable of capturing an operation event, and in the embodiment of the present invention, the second window is located above the first window, so in the embodiment of the present invention, the second window can capture the operation. Event, and the first window cannot directly capture the action event. In an actual application, the foregoing operation events may specifically include: a keyboard event and/or a mouse event.

In view of the above situation, the embodiment may pass the operation event to the first window through a second window, so that the first window can normally respond to the operation event.

In an application example of the present invention, an operation event may be delivered to the first window by an LRESULT SendMessage (HWND hWnd, UINT Msg, WPARAM wParam, LPARAM IParam) function; wherein hWnd is used to represent the handle of the first window, Msg Used to indicate the transmitted operational event message, wParam is used to specify additional message specific information, and IParam is used to specify additional message specific information. It can be understood that the embodiment of the present invention does not limit the specific process of transmitting the operation event to the first window through the second window.

Referring to FIG. 4, a flow chart of steps of a data processing method according to an embodiment of the present invention is shown, which may specifically include the following steps:

Step 401: Before displaying the current webpage, determine whether the current webpage meets a preset protection rule;

Step 402: When the current webpage meets a preset protection rule, display the current webpage, and display the watermark content on the current webpage;

Step 403: Reject the preset operation request when the current webpage meets a preset protection rule and monitors a preset operation request for the current webpage.

Compared with the embodiment shown in FIG. 1 , the embodiment may further reject the preset operation request for the current webpage when the current webpage meets the preset protection rule; and the current webpage conforms to the preset protection rule, indicating that the current webpage needs to be protected. Sensitive data, which may involve the user's privacy, may also involve the core technology or the secret technology of the local area network. Therefore, the embodiment of the present invention can effectively prevent the sensitive data involved in the current webpage from being leaked through the browser, thereby improving the current webpage and Browser security.

In an optional embodiment of the present invention, the preset operation request may specifically include at least one of the following requests: a request for copying and/or pasting; a request for screen capture; a request for printing Requests for uploading and/or downloading; and requests for right-click menu operations.

Among them, the request for copying and/or pasting, the request for screen capture, the request for printing, the request for right-click menu operation, and the request for download can effectively prevent the webpage data to be protected from leaking through the browser. The request for uploading can effectively prevent the data of the user terminal in the local area network from being leaked through the browser.

Embodiments of the present invention may provide the following monitoring scheme for monitoring a preset operation request for a current web page:

Monitoring programme 1

The monitoring scheme 1 can be applied to the monitoring of preset operations performed by the browser, and the operation control device or the operation control plug-in for performing the control flow of the webpage operation can take over the operation of the browser.

Specifically, the operation control device or the operation control plug-in may register a callback function corresponding to the preset operation request event in the browser, and receive the notification of the occurrence of the registered preset operation request event through the callback function. After obtaining the above-mentioned registered preset operation request event, the browser may call back the registrant (operation control device or operation control plug-in) through the interface provided by the callback function, so that the registrant knows the registered preset operation request event. happened.

Monitoring programme 2

Monitoring scheme 2 can be applied to the monitoring of preset operations performed by the browser, and can also be applied to monitoring of preset operations performed by non-browser operations, such as printing operations performed by the operating system.

Monitoring scenario 2 can establish a hook to monitor a preset operational request for the current web page. In an actual application, a hook processing routine hooked to a preset operation request may be created to intercept an API (Application Program Interface) corresponding to the preset operation request.

In an application example of the present invention, the hook processing routine may specifically include two modules: one is a hook server (Hook Server), generally in the form of an EXE; and the other is a hook driver (Hook Driver), generally a DLL ( The form of the Dynamic Link Library. The hook server is used to inject the hook driver into the target process so that the hook driver works in the address space of the target process, and the hook driver is used for the actual API interception work. In the embodiment of the present invention, the hook driver injected into the security detection process is used to redirect the API corresponding to the preset operation request of the operating system (such as the API corresponding to the request for printing) to the hook function (usually by modifying the function entry address) ), such a hook function can obtain the information that the API is executed, so that the monitoring of the preset operation request for the current web page can be completed.

It can be understood that the preset operation request for the current webpage is monitored by the above two methods only as an application example of the present invention. In an actual application, the specific process of monitoring the preset operation request for the current webpage is not in the actual application. Limit it.

In an optional embodiment of the present invention, the method of the embodiment may further include: determining, when the current webpage meets the preset protection rule, whether the current user has the operation authority corresponding to the preset operation request; When the current user does not have the operation authority corresponding to the preset operation request, the preset operation request is rejected. The optional embodiment can give a user with different identities a webpage operation corresponding to the identity by using the privilege control, and block the operation call that cannot be performed, which not only can realize the division of labor, but also can reduce the complexity of the control of the webpage operation.

In an actual application, the browser can obtain the current user's webpage operation authority from the server or the control terminal in the local area network; and the server can maintain the mapping relationship between the user identity and the webpage operation authority to provide the browser with the current user's webpage operation. Permissions. For example, in an application example of the present invention, the user identity may be set according to the organizational structure of the enterprise, and the user identity may include: a first-level employee, a second-level employee, a third-level employee, a fourth-level employee, and a fifth-level employee. Among them, the first-level staff is the board member, the second-level staff is the general manager, the third-level staff is the department head, the fourth-level staff is the grass-roots management staff, and the fifth-level staff is the ordinary staff. The webpage operation authority, the second-level staff, the third-level staff, and the fourth-level staff can have some webpage operation rights, and the five-level staff can not have any webpage operation authority. It can be understood that the user identity and the corresponding webpage operation authority are only examples. In the embodiment of the present invention, the specific mapping relationship between the user identity and the webpage operation authority is not limited.

For the method embodiments, for the sake of simple description, they are all expressed as a series of action combinations, but those skilled in the art should understand that the embodiments of the present invention are not limited by the described action sequence, because the embodiment according to the present invention Some steps can be performed in other orders or at the same time. In the following, those skilled in the art should also understand that the embodiments described in the specification are optional embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

Referring to FIG. 5, a block diagram of a data processing apparatus according to an embodiment of the present invention is shown, which may specifically include the following modules:

The determining module 501 is configured to determine whether the current webpage meets a preset protection rule before displaying the current webpage; and

The first display module 502 is configured to display the current webpage when the current webpage meets the preset protection rule, and display the watermark content on the current webpage.

In an optional embodiment of the present invention, the device may further include:

The first display module 502 may specifically include:

The second display sub-module controls the transparency of the second window to a value less than 100%, and displays the watermark content through the second window.

In another optional embodiment of the present invention, the first display module 502 may specifically include:

The third display submodule is configured to display the current webpage after embedding the watermark content in the current webpage.

In a further optional embodiment of the present invention, the determining module 501 may specifically include:

The first determining sub-module is configured to match the page content of the current webpage with the first preset protection rule, and if the matching result is that the matching is successful, determining that the current webpage meets the preset protection rule; or

The second determining sub-module is configured to perform a search in the web address set according to the page address of the current webpage, and if the search hits, determine that the current webpage meets the preset protection rule; or

The third determining sub-module is configured to extract a protection identifier from the header information corresponding to the current webpage, and determine, according to the protection identifier, whether the current webpage meets the preset protection rule.

In still another optional embodiment of the present invention, the device may be configured as a local area network, and the preset protection rule may be a rule preset by a server of a local area network through a server, and the pre-prepared by the server The protection rule is sent to the device located at the browser client.

In an optional embodiment of the present invention, the apparatus may further include: a generating module configured to generate the watermark content;

The generating module may specifically include:

And generating a submodule, configured to generate the watermark content according to at least one of an account of the current user, a login time of the current user, a current time, and a current enterprise identity.

In another optional embodiment of the present invention, the device may further include:

The second display module is configured to display the current webpage when the current webpage does not meet the preset protection rule;

And a control module configured to control the transparency of the second window to be 100%.

In still another optional embodiment of the present invention, the apparatus may further include:

a receiving module, configured to receive, by using the second window, an operation event of the user for the current webpage;

a delivery module configured to pass the operational event to the first window through the second window to cause the first window to respond to the operational event.

For the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiment.

The algorithms and displays provided here are not tied to any particular computer, virtual system, or other device. Related. Various general purpose systems can also be used with the teaching based on the teachings herein. The structure required to construct such a system is apparent from the above description. Moreover, the invention is not directed to any particular programming language. It is to be understood that the invention may be embodied in a variety of programming language, and the description of the specific language has been described above in order to disclose the preferred embodiments of the invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that the embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures, and techniques are not shown in detail so as not to obscure the understanding of the description.

Similarly, the various features of the invention are sometimes grouped together into a single embodiment, in the above description of the exemplary embodiments of the invention, Figure, or a description of it. However, the method disclosed is not to be interpreted as reflecting the intention that the claimed invention requires more features than those recited in the claims. Rather, as the following claims reflect, inventive aspects reside in less than all features of the single embodiments disclosed herein. Therefore, the claims following the specific embodiments are hereby explicitly incorporated into the embodiments, and each of the claims as a separate embodiment of the invention.

Those skilled in the art will appreciate that the modules in the devices of the embodiments can be adaptively changed and placed in one or more devices different from the embodiment. The modules or units or components of the embodiments may be combined into one module or unit or component, and further they may be divided into a plurality of sub-modules or sub-units or sub-components. In addition to such features and/or at least some of the processes or units being mutually exclusive, any combination of the features disclosed in the specification, including the accompanying claims, the abstract and the drawings, and any methods so disclosed, or All processes or units of the device are combined. Each feature disclosed in this specification (including the accompanying claims, the abstract and the drawings) may be replaced by alternative features that provide the same, equivalent or similar purpose.

In addition, those skilled in the art will appreciate that, although some embodiments described herein include certain features that are included in other embodiments and not in other features, combinations of features of different embodiments are intended to be within the scope of the present invention. Different embodiments are formed and formed. For example, in the following claims, any one of the claimed embodiments may be use.

The various component embodiments of the present invention may be implemented in hardware, or in a software module running on one or more processors, or in a combination thereof. Those skilled in the art will appreciate that a microprocessor or digital signal processor (DSP) may be used in practice to implement some or all of the functionality of some or all of the components of the data processing method and apparatus in accordance with embodiments of the present invention. The invention can also be implemented as a device or device program (e.g., a computer program and a computer program product) for performing some or all of the methods described herein. Such a program implementing the invention may be stored on a computer readable medium or may be in the form of one or more signals. Such signals may be downloaded from an internet platform, provided on a carrier signal, or provided in any other form.

For example, Figure 6 illustrates a computing device for performing a data processing method in accordance with the present invention. The computing device conventionally includes a processor 1510 and a program product or readable medium in the form of a memory 1520. The memory 1520 may be an electronic memory such as a flash memory, an EEPROM (Electrically Erasable Programmable Read Only Memory), an EPROM, or a ROM. Memory 1520 has a storage space 1530 for program code 1531 for performing any of the method steps described above. For example, storage space 1530 for program code may include various program code 1531 for implementing various steps in the above methods, respectively. These program codes can be read from or written to one or more program products. These program products include program code carriers such as memory cards. Such a program product is typically a portable or fixed storage unit as described with reference to FIG. The storage unit may have storage segments, storage spaces, and the like that are similarly arranged to memory 1520 in the computing device of FIG. The program code can be compressed, for example, in an appropriate form. Typically, the storage unit includes readable code 1531', ie, code that can be read by a processor, such as, for example, 1510, which when executed by a computing device causes the computing device to perform various steps in the methods described above .

It is to be noted that the above-described embodiments are illustrative of the invention and are not intended to be limiting, and that the invention may be devised without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as a limitation. The word 'comprising' does not exclude the presence of the elements or steps that are not recited in the claims. Bit The word "a" or "an" The invention can be implemented by means of hardware comprising several distinct elements and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means can be embodied by the same hardware item. The use of the words first, second, and third does not indicate any order. These words can be interpreted as names.

Claims

A data processing method comprising:

Before displaying the current webpage, determining whether the current webpage meets a preset protection rule;

When the current webpage meets the preset protection rule, the current webpage is displayed, and the watermark content is displayed on the current webpage.
The method of claim 1, wherein before the step of determining whether the current webpage meets a preset protection rule, the method further comprises:

Drawing a first window and a second window located above the first window during startup of the browser;

The step of displaying the current webpage while displaying the watermark content on the current webpage includes:

Displaying the current webpage through the first window;

The transparency of the second window is controlled to a value less than 100%, and the watermark content is displayed through the second window.
The method of claim 1, wherein the displaying the current webpage while displaying the watermark content on the current webpage comprises:

After the watermark content is embedded in the current webpage, the current webpage is displayed.
The method according to any one of claims 1 to 3, wherein the step of determining whether the current webpage meets a preset protection rule comprises:

Matching the page content of the current webpage with the first preset protection rule, and if the matching result is that the matching is successful, determining that the current webpage meets the preset protection rule; or

Searching in the URL collection according to the page address of the current webpage, and if the search hits, determining that the current webpage meets the preset protection rule; or

Extracting a protection identifier from the header information corresponding to the current webpage, and determining, according to the protection identifier, whether the current webpage meets the preset protection rule.
The method according to any one of claims 1 to 3, wherein the method is applied to a local area network, and the preset protection rule is that the administrator of the local area network adopts a rule preset by the server, and the server The preset protection rules are sent to the browser client.
A method according to any one of claims 1 to 3, characterized by the following steps Generating the watermark content:

The watermark content is generated according to at least one of an account of the current user, a login time of the current user, a current time, and a current enterprise corresponding enterprise identity.
The method of claim 2, wherein the method further comprises:

Displaying the current webpage when the current webpage does not meet the preset protection rule;

The transparency of the second window is controlled to be 100%.
The method of claim 2 or 7, wherein the method further comprises:

Receiving, by the second window, an operation event of the user for the current webpage;

Passing the operational event to the first window through the second window to cause the first window to respond to the operational event.
A data processing device comprising:

The determining module is configured to determine whether the current webpage meets a preset protection rule before displaying the current webpage; and

The first display module is configured to display the current webpage when the current webpage meets the preset protection rule, and display the watermark content on the current webpage.
The device of claim 9 wherein said device further comprises:

The drawing module is configured to: before the determining module determines whether the current webpage meets the preset protection rule, in the process of starting the browser, drawing the first window and the second window located above the first window;

The first display module includes:

a first display submodule configured to display the current webpage through the first window; and

The second display submodule is configured to control the transparency of the second window to a value less than 100%, and display the watermark content through the second window.
The device of claim 9, wherein the first display module comprises:

The third display submodule is configured to display the current webpage after embedding the watermark content in the current webpage.
The device according to any one of claims 9 to 11, wherein the determining module comprises:

The first determining sub-module is configured to match the page content of the current webpage with the first preset protection rule, and if the matching result is that the matching is successful, determining that the current webpage meets the preset protection rule; or

The second determining sub-module is configured to perform a search in the web address set according to the page address of the current webpage, and if the search hits, determine that the current webpage meets the preset protection rule; or

The third determining sub-module is configured to extract a protection identifier from the header information corresponding to the current webpage, and determine, according to the protection identifier, whether the current webpage meets the preset protection rule.
The device according to any one of claims 9 to 11, wherein the device is configured as a local area network, and the preset protection rule is a rule preset by a server of a local area network through a server, and the server will The preset protection rule is sent to the device located at the browser client.
The apparatus according to any one of claims 9 to 11, wherein the apparatus further comprises: a generating module configured to generate the watermark content;

The generating module includes:

And generating a submodule, configured to generate the watermark content according to at least one of an account of the current user, a login time of the current user, a current time, and a current enterprise identity.
The device of claim 10, wherein the device further comprises:

The second display module is configured to display the current webpage when the current webpage does not meet the preset protection rule;

And a control module configured to control the transparency of the second window to be 100%.
The device of claim 10 or 15, wherein the device further comprises:

a receiving module, configured to receive, by using the second window, an operation event of the user for the current webpage;

a delivery module configured to pass the operational event to the first window through the second window to cause the first window to respond to the operational event.
A program comprising readable code, causing the computing device to perform a data processing device according to any one of claims 1 to 8 when the readable code is run on a computing device law.
A readable medium storing the program of claim 17.