WO2020238971A1

WO2020238971A1 - File sharing method, apparatus and system, server, terminal, and storage medium

Info

Publication number: WO2020238971A1
Application number: PCT/CN2020/092665
Authority: WO
Inventors: 朱建庭
Original assignee: 北京金山云网络技术有限公司; 北京金山云科技有限公司
Priority date: 2019-05-31
Filing date: 2020-05-27
Publication date: 2020-12-03

Abstract

Provided are a file sharing method, apparatus and system, a server, a terminal, and a storage medium. The method comprises: receiving an access request sent by a first terminal and used for accessing a target file, wherein the access request carries a user identifier of a first user logging into the first terminal and a file identifier of the target file, the target file is a file that needs to be shared in a target session group by a second user logging into a second terminal, and the second user belongs to a member of the target session group; determining, according to a pre-stored correlation between a file identifier and a session group identifier, the file identifier of the target file and the user identifier of the first user, whether the first user belongs to a member of the target session group; and if the first user does not belong to the member of the target session group, refusing to send the target file to the first terminal. On the basis of the processing mentioned above, the security of file sharing can be improved.

Description

File sharing method, device, system, server, terminal and storage medium

This application requires that it be submitted to the Chinese Patent Office on May 31, 2019, with an application number of 201910473086.2 and a Chinese patent application entitled "A file sharing method, device, system, server and storage medium", and in May 2019 Submitted to the Chinese Patent Office on the 31st, the application number is 201910472070.X, the title of the invention is "file sharing method, device, system, server, terminal and storage medium" priority, the entire content of which is incorporated into this application by reference.

Technical field

This application relates to the field of Internet technology, and in particular to a file sharing method, device, system, server, terminal and storage medium.

Background technique

With the rapid development of Internet technology, users can communicate with their friends and colleagues through terminals, and can share files with their friends and colleagues. For example, the user can send office documents to his colleagues through the terminal to share the office documents.

In the related art, when a user needs to share a file with multiple colleagues, the user can use a terminal to create a conversation group, and the members of the conversation group can include the user and colleagues who need to share the file. The user can upload the file in the conversation group to the storage space allocated by the server for the conversation group, and the server can send the file identifier of the file to other users in the conversation group. Furthermore, other users in the conversation group can use the terminal to send an access request to the server through the file identifier of the file. The server can then send the file to the terminal used by other users in the conversation group.

However, users other than members of the conversation group may obtain the access entry of the file or the file identifier of the file through some means, for example, a malicious attacker may capture packets through the network and other means. Furthermore, the file can be obtained from the server through the access entry or the file identifier of the file, resulting in low file sharing security.

Summary of the invention

The purpose of the embodiments of the present application is to provide a file sharing method, device, system, server, terminal, and storage medium, which can improve the security of file sharing. The specific technical solutions are as follows:

In the first aspect, an embodiment of the present application discloses a file sharing method, which is applied to a server, and the method includes: receiving an access request sent by a first terminal for accessing a target file, wherein the access request carries the first login The user ID of the first user of the terminal and the file ID of the target file; the target file is the file that the second user who logs in to the second terminal needs to share in the target conversation group, and the second user belongs to the target conversation group; according to the pre-stored The correspondence relationship between the file identifier and the whitelist information determines the target whitelist information corresponding to the file identifier of the target file, where the target whitelist information is used to identify members in the target conversation group who have the right to share the target file; according to the target whitelist Information and the user identification of the first user to determine whether the first user has the permission to share the target file; if the first user does not have the permission to share the target file, refuse to send the target file to the first terminal.

In a second aspect, an embodiment of the present application also discloses a file sharing method, which is applied to a second terminal, and the method includes: obtaining a target file that a second user logging in to the second terminal needs to share in a target conversation group, and The target whitelist information corresponding to the target file, where the target whitelist information is used to identify members in the target conversation group who have the permission to share the target file; the target file and target whitelist information are sent to the server, so that the server receives the first When the terminal sends an access request for accessing the target file, it determines the target whitelist information corresponding to the file identifier of the target file according to the pre-stored correspondence between the file identifier and the whitelist information, and determines the target whitelist information corresponding to the file identifier of the target file according to the target whitelist information and the first The user ID of the user determines whether the first user has the permission to share the target file, and if the first user does not have the permission to share the target file, refuse to send the target file to the first terminal.

In the third aspect, the embodiment of the present application also discloses a file sharing method, which is applied to a server, and the method includes: receiving an access request for accessing a target file sent by a first terminal, wherein the access request carries a login first The user ID of the first user of a terminal and the file ID of the target file; the target file is a file that the second user who logs in to the second terminal needs to share in the target conversation group, and the second user is a member of the target conversation group; The corresponding relationship between the file ID and the conversation group ID, the file ID of the target file and the user ID of the first user, determine whether the first user is a member of the target conversation group; if the first user is not a member of the target conversation group, reject Send the target file to the first terminal.

In a fourth aspect, the embodiment of the present application also discloses a file sharing device, which is applied to a server, and the device includes: a receiving module configured to receive an access request for accessing a target file sent by a first terminal, wherein the access The request carries the user ID of the first user who logs in to the first terminal and the file ID of the target file; the target file is a file that the second user who logs in to the second terminal needs to share in the target conversation group, and the second user belongs to the target conversation group Member; determination module, set to determine the target whitelist information corresponding to the file identifier of the target file according to the correspondence between the pre-stored file identifier and the whitelist information, where the target whitelist information is used to identify the target session group with sharing Member of the permission of the target file; the judgment module is set to judge whether the first user has the permission to share the target file based on the target whitelist information and the user ID of the first user; the first processing module is set to if the first user does not have If the permission of the target file is shared, the target file is refused to be sent to the first terminal.

In a fifth aspect, an embodiment of the present application also provides a file sharing device, which is applied to a second terminal, and the device includes: an acquisition module configured to acquire information that the second user who logs in to the second terminal needs to share in the target conversation group The target file, and target whitelist information corresponding to the target file, where the target whitelist information is used to identify members in the target conversation group who have the permission to share the target file; the sending module is set to send the target file and target whitelist information to the server , So that when the server receives the access request for accessing the target file sent by the first terminal, it determines the target whitelist information corresponding to the file identifier of the target file according to the pre-stored correspondence between the file identifier and the whitelist information, And according to the target whitelist information and the user identification of the first user, it is determined whether the first user has the permission to share the target file, and if the first user does not have the permission to share the target file, the target file is refused to be sent to the first terminal.

In a sixth aspect, the embodiment of the present application also discloses a file sharing device, which is applied to a server, and the device includes: a receiving module for receiving an access request for accessing a target file sent by a first terminal, wherein The access request carries the user ID of the first user who logs in to the first terminal and the file ID of the target file; the target file is a file that the second user who logs in to the second terminal needs to share in the target conversation group, The second user belongs to a member of the target conversation group; a judgment module is used to determine the correspondence between the file ID and the conversation group ID stored in advance, the file ID of the target file, and the user ID of the first user, Determine whether the first user is a member of the target conversation group; a first processing module, configured to refuse to send the first terminal to the first terminal if the first user is not a member of the target conversation group Target file.

In a seventh aspect, an embodiment of the present application also provides a file sharing system, which includes a server and a plurality of terminals; the second terminal of the plurality of terminals is set to obtain that the second user logging in to the second terminal needs to be in the target conversation group The target file shared in, and the target whitelist information corresponding to the target file, where the target whitelist information is used to identify members of the target conversation group who have the permission to share the target file; send the target file and target whitelist information to the server; , Set to receive an access request for accessing the target file sent by the first terminal of the plurality of terminals; determine the target whitelist information corresponding to the file identifier of the target file according to the pre-stored correspondence between the file identifier and the whitelist information ; According to the target whitelist information and the user identification of the first user, determine whether the first user has the permission to share the target file; if the first user does not have the permission to share the target file, refuse to send the target file to the first terminal.

In an eighth aspect, an embodiment of the present application provides a server, including: a processor, a communication interface, a memory, and a communication bus. The processor, the communication interface, and the memory communicate with each other through the communication bus; the memory is set to store A computer program; a processor configured to implement the steps of the file sharing method executed by the server provided in the embodiment of the present application when executing the program stored in the memory.

In a ninth aspect, an embodiment of the present application provides a terminal, including: a processor, a communication interface, a memory, and a communication bus. The processor, the communication interface, and the memory communicate with each other through the communication bus; the memory is set to store A computer program; a processor configured to implement the steps of the file sharing method executed by the second terminal provided in the embodiment of the present application when executing the program stored on the memory.

In a tenth aspect, an embodiment of the present application provides a computer-readable storage medium with a computer program stored in the computer-readable storage medium. When the computer program is executed by a processor, the file sharing performed by the server provided by the embodiment of the present application is realized. Method steps.

In an eleventh aspect, an embodiment of the present application provides a computer-readable storage medium with a computer program stored in the computer-readable storage medium. When the computer program is executed by a processor, the second terminal provided by the embodiment of the present application can be executed. The steps of the file sharing method.

In a twelfth aspect, an embodiment of the application provides a computer program product containing instructions. When the computer program product containing instructions runs on a computer, the computer executes the steps of the file sharing method performed by the server provided in the embodiments of the application. .

In a thirteenth aspect, an embodiment of the present application provides a computer program product containing instructions. When the computer program product containing instructions runs on a computer, the computer executes the file sharing method performed by the second terminal provided by the embodiments of the present application. A step of.

In a fourteenth aspect, an embodiment of the present application provides a computer program that, when the computer program runs on a computer, causes the computer to execute the steps of the file sharing method executed by the server provided in the embodiment of the present application.

In a fifteenth aspect, an embodiment of the present application provides a computer program that, when running on a computer, causes the computer to execute the steps of the file sharing method executed by the second terminal provided in the embodiment of the present application.

The embodiments of this application have the following beneficial effects:

With the above technical solution, when the server receives the access request, it determines the corresponding white list information through the correspondence between the file identifier and the white list information, and then can determine whether the first user has the white list information and the user identifier of the first user. The permissions of the shared target file. That is, for a certain file, the whitelist information is preset, and only the members with the permission to share the file identified by the whitelist information can access the file, so users other than the members identified by the whitelist have no access permissions. Therefore, even if users other than the members identified in the target whitelist obtain the file identifier of the target file, they cannot obtain the target file, thereby improving the security of file sharing.

Of course, implementing any product or method of the present application does not necessarily need to achieve all the advantages described above at the same time.

Description of the drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present application and related technologies, the following briefly introduces the drawings that need to be used in the embodiments and related technologies. Obviously, the drawings in the following description are only of the present application. For some embodiments, those of ordinary skill in the art can obtain other drawings based on these drawings without creative work.

FIG. 1 is a structural diagram of a file sharing system provided by an embodiment of this application;

FIG. 2 is a flowchart of a file sharing method provided by an embodiment of the application;

FIG. 3 is a flowchart of another file sharing method provided by an embodiment of the application;

FIG. 4 is a flowchart of another file sharing method provided by an embodiment of the application;

FIG. 5 is a flowchart of an example of a file sharing method provided by an embodiment of the application;

6 is a flowchart of another example of a file sharing method provided by an embodiment of the application;

FIG. 7 is a flowchart of another example of a file sharing method provided by an embodiment of the application;

FIG. 8 is a structural diagram of a file sharing device provided by an embodiment of the application;

FIG. 9 is a structural diagram of another file sharing device provided by an embodiment of the application;

FIG. 10 is a structural diagram of a server provided by an embodiment of this application;

FIG. 11 is a structural diagram of a terminal provided by an embodiment of the application.

Detailed ways

In order to make the purpose, technical solutions, and advantages of the present application clearer, the following further describes the present application in detail with reference to the drawings and embodiments. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in this application, all other embodiments obtained by a person of ordinary skill in the art without creative work shall fall within the protection scope of this application.

In related technologies, when a user shares a file in a conversation group, users other than the members of the conversation group may also obtain the access entry of the file or the file identifier of the file through some means, and further, can use the access entry or The file identifier of the file obtains the file from the server, resulting in low file sharing security.

For example, referring to Fig. 1, Fig. 1 is a structural diagram of a file sharing system provided by an embodiment of the application, which may include a server, a first terminal, a second terminal, a third terminal, and a fourth terminal.

In the related art, if user 2 who logs in to the second terminal needs to share a file (ie target file) with user 1 who logs in to the first terminal and user 3 who logs in to the third terminal, user 2 can create a conversation group through the second terminal. , And invite user 1 and user 3 to join the conversation group (that is, the target conversation group). Then, the user 2 can send the target file in the target conversation group to the server through the second terminal, and the server can store the target file in the storage space allocated for the target conversation group. And send the file identifier of the target file to the terminals (that is, the first terminal and the third terminal) where other users in the target conversation group log in. After the first terminal and the third terminal obtain the file identifier of the target file, they can send an access request for the target file to the server according to the file identifier of the target file. When the server receives the access request, the server can send the target file to the first terminal and the third terminal, so that users 1, user 2, and user 3 can share the target file. Even if the user 4 who logs in to the fourth terminal is not a member of the target conversation group, if the user 4 obtains the file identifier of the target file through the fourth terminal, the fourth terminal may also send an access request for the target file to the server. When the server receives the access request, the server can send the target file to the fourth terminal, which results in low file sharing security.

In order to solve the above problem, the embodiment of the present application provides a file sharing method, which can be applied to a server.

In Figure 1, when the server receives the access request for the target file sent by the fourth terminal, the server can determine the target whitelist information corresponding to the file identifier of the target file according to the correspondence between the file identifier and the whitelist information stored in advance . And based on the target whitelist information and the user ID of the user 4, it is determined whether the user 4 has the permission to share the target file.

When the server determines that the user 4 does not have the right to share the target file, the server refuses to send the target file to the fourth terminal, thereby improving the security of file sharing.

Referring to FIG. 2, FIG. 2 is a flowchart of a file sharing method provided by an embodiment of the application. The method may be applied to a server, and the method may include the following steps:

S201: Receive an access request for accessing a target file sent by the first terminal.

Wherein, the access request carries the user identifier of the first user who logs in to the first terminal and the file identifier of the target file.

The user identification can be the user's UID (User Identification) or other identifications. In related technologies, the access request sent by the terminal may carry the Session (session) information of the user logging in to the terminal, and the session information may include the user's UID, UserName (user name), and the user's login IP (Internet Protocol, Internet Protocol). Address and other information.

The target file may be a file that the second user who logs in to the second terminal needs to share in the target conversation group. The second user is a member of the target conversation group, and the target file may be an office document, a picture, or other files. The second user can share the target file with some members of the target conversation group, or can share the target file with all members of the target conversation group. The file identifier of the target file may be a unique identifier assigned by the server to the target file. For example, the file identifier of the target file may be the URL (Uniform Resource Locator, uniform resource locator) of the target file.

The first terminal may be a terminal logged in by a member of the target conversation group, or a terminal (may be called a third terminal) logged in by a user other than a member of the target conversation group (may be referred to as a third user). For example, a member of the target conversation group may send the file identifier of the target file to the third terminal through the terminal.

In the embodiment of the present application, when the first user needs to obtain the target file, the first user may obtain the file identification of the target file through the first terminal, and send an access request for the target file to the server according to the file identification of the target file. Correspondingly, the server can receive the access request sent by the first terminal.

S202: Determine the target whitelist information corresponding to the file identifier of the target file according to the pre-stored correspondence between the file identifier and the whitelist information.

Wherein, the target whitelist information is used to identify members in the target conversation group who have the permission to share the target file.

In the embodiment of the present application, after the server receives the access request sent by the first terminal, the server may obtain the file identifier of the target file carried in the access request. Furthermore, the server can query the correspondence between the file identifier and the whitelist information stored in advance to determine the whitelist information corresponding to the file identifier of the target file (ie, target whitelist information). Subsequently, the server may determine whether the first user has the permission to share the target file according to the target whitelist information.

S203: Determine whether the first user has the right to share the target file according to the target whitelist information and the user identification of the first user.

In the embodiment of the present application, after the server receives the access request sent by the first terminal, the server may obtain the user identifier of the first user carried in the access request.

Then, the server can determine whether the first user has the right to share the target file according to the target whitelist information and the user identification of the first user.

S204: If the first user does not have the right to share the target file, refuse to send the target file to the first terminal.

In the embodiment of the present application, when the server determines that the first user does not have the right to share the target file, the server may refuse to send the target file to the first terminal.

In an implementation manner, the server may not perform any processing, or the server may discard the access request of the first terminal.

If the first user has the right to share the target file, the target file is sent to the first terminal.

In the file sharing method provided by the embodiments of the present application, when the server receives the access request, the corresponding whitelist information is determined by the correspondence between the file identifier and the whitelist information, and then the whitelist information and the user identifier of the first user can be used to determine Whether the first user has the permission to share the target file. That is, for a file, the whitelist information is preset, and only the members with the permission to share the file identified by the whitelist information can access the file, so users other than the members identified by the whitelist have no access permissions. Therefore, even if users other than the members identified in the target whitelist obtain the file identifier of the target file, they cannot obtain the target file, thereby improving the security of file sharing.

In an embodiment, before S201, the method may further include the following steps:

Receive the target file and the target whitelist information corresponding to the target file sent by the second terminal, save the correspondence between the file identifier of the target file and the target whitelist information, and send the file identifier of the target file to the target conversation group except for the second user The terminal that other users log in.

In the embodiment of the present application, when the second user needs to share a file (ie the target file) with other members of the target conversation group, the second user can select upload in the dialog window of the target conversation group through the second terminal Target file and select the members who are allowed to share the target file. The second terminal may generate the target whitelist information corresponding to the target file according to the selection of the second user, and send the target file and the target whitelist information to the server.

Correspondingly, the server can receive the target file and target whitelist information sent by the second terminal, and save the correspondence between the file identifier of the target file and the target whitelist information for subsequent processing.

In addition, after the server receives the target file, the server may store the target file in the storage space allocated locally for the target conversation group. Alternatively, the server may also store the target file in a storage space allocated for the target conversation group in a preset file storage system. The preset file storage system may be a distributed object storage system or another type of storage system. The method for the server to store the target file is not limited to the above method.

In an implementation manner, the server may record the correspondence between the file identifier and the whitelist information in the preset service storage system. The preset business storage system may be a key (key frame)-value (value) distributed storage system, for example, a relational database such as mysql, or it may be a storage system such as redis and mongodb. The server can record the file identifier as the key and the whitelist information as the corresponding value. It should be noted that the foregoing preset service storage system may also store the correspondence between the file identifier and the combined content, where the combined content is a combination of the user identifier of the user sharing the target file and the content of the corresponding whitelist information.

After the server obtains the target file, the server may also send the file identifier of the target file to the terminal (may be called the fourth terminal) logged in by other users (may be called the fourth user) in the target conversation group except the second user.

Correspondingly, the fourth terminal may display the file identifier of the target file in the dialog window of the target conversation group. When the fourth user needs to obtain the target file, the fourth user may input an instruction to obtain the target file to the fourth terminal, and the fourth terminal may send an access request for the target file to the server to obtain the target file.

In the embodiments of the present application, the target whitelist information may include different types of data, which are described separately in combination with the following three implementation manners.

In the first implementation manner, the target whitelist information is the conversation group identifier of the target conversation group. That is, the members of the target conversation group have the permission to share the target file. In the foregoing preset service storage system, the corresponding relationship between the file identifier and the session group identifier can be recorded, and the server can record the file identifier as the key and the session group identifier as the value.

In this embodiment, as shown in FIG. 3, an embodiment of the present application provides a file sharing method, which can be applied to a server, and the method can include the following steps:

S301: Receive an access request for accessing the target file sent by the first terminal.

S301 is the same as the above S201, and reference may be made to the related description in the above S201, which will not be repeated here.

S302: Determine whether the first user is a member of the target conversation group according to the pre-stored correspondence between the file identifier and the conversation group identifier, the file identifier of the target file, and the user identifier of the first user.

In the embodiment of the present application, after the server receives the access request sent by the first terminal, the server may obtain the user identification of the first user and the file identification of the target file carried in the access request. In combination with the pre-stored correspondence between the file identifier and the conversation group identifier, it is determined whether the first user is a member of the target conversation group.

The judging method is: determining the target whitelist information corresponding to the identifier of the target file according to the correspondence between the file identifier and the session group identifier stored in advance. Then it is determined whether the first user is a member of the target conversation group.

If the first user is a member of the target conversation group, it is determined that the first user has the right to share the target file, and then the target file is sent to the first terminal; if the first user is not a member of the target conversation group, it is determined that the first user does not Have the permission to share the target file, and then execute S303.

S303: If the first user is not a member of the target conversation group, refuse to send the target file to the first terminal.

In the embodiment of the present application, when the server determines that the first user is not a member of the target conversation group, that is, determines that the first user does not have the right to share the target file, the server may refuse to send the target file to the first terminal.

In the embodiment of the present application, when the server determines that the first user is not a member of the target conversation group, the server may not perform any processing, or the server may discard the access request of the first terminal.

With this method, when the server receives the access request, it can determine whether the first user is a member of the target conversation group through the correspondence between the file ID and the conversation group ID, the file ID of the target file, and the user ID of the first user. Determine whether the first user can access the target file. Since users other than the members of the target conversation group are not members of the target conversation group, they have no access rights, so that users other than the members of the target conversation group cannot obtain the target file even if they obtain the file identifier of the target file. In turn, the security of file sharing can be improved.

Based on the first implementation manner, before S201, the server may receive the target file and the session identifier of the target conversation group sent by the second terminal, save the correspondence between the file identifier of the target file and the conversation group identifier of the target conversation group, and convert the target file The file identifier of is sent to the terminal logged in by users other than the second user in the target conversation group.

Wherein, when the second user needs to share a file (ie target file) with other users, the second user can create a conversation group (ie target conversation group) through the second terminal, and the members of the target conversation group may include the second Users and other users who need to share target files.

Then, the second user can select to upload the target file in the dialog window of the target conversation group through the second terminal, and the second terminal can send the target file and the conversation group identifier of the target conversation group to the server.

Correspondingly, the server may receive the target file and the conversation group identifier of the target conversation group sent by the second terminal, and save the correspondence between the file identifier of the target file and the conversation group identifier of the target conversation group for subsequent processing.

In this embodiment of the application, S302 may include the following steps:

Step S1, in the pre-stored correspondence between the file identifier and the session group identifier, determine the session group identifier corresponding to the file identifier of the target file to obtain the target session group identifier.

Wherein, the conversation group identified by the target conversation group identifier is the target conversation group.

Step S2: Determine whether the user ID of the first user exists among the user IDs of the members in the conversation group identified by the target conversation group ID. If so, determine that the first user is a member of the target conversation group; if not, determine the first user ID. The user is not a member of the target conversation group.

In the embodiment of the present application, when a certain user joins a certain conversation group, the server may determine that the user corresponds to the conversation group, and record the correspondence between the user ID of the user and the conversation ID of the conversation group.

After the server receives the access request for the target file sent by the first terminal, the server may extract the file identifier of the target file from the access request. Then, the server can determine whether the first user is a member of the target conversation group through the foregoing steps S1 and S2.

In the embodiment of the present application, if the first user is not a member of the target conversation group, the server sends a reminder message to the first terminal to notify the first terminal that the first user has no right to share the target file.

It can be seen that, in the first implementation manner, when the second user sends the target file in the dialog window of the target conversation group, all members of the target conversation group will automatically obtain the permission to access the target file. And the server can record the corresponding relationship between a certain user and the target conversation group when the user joins the target conversation group. Therefore, a new user who joins the target conversation group after the second user sends the target file will also automatically obtain the permission to access the target file. In addition, after the new user sends the access request, the target file can be obtained from the server, thereby reducing the operation of the second user to send the target file to the new user again. The users who exit the target conversation group will automatically lose the permission to access the target file. In addition, even if users other than the members of the target conversation group obtain the file identifier of the target file, they cannot obtain the target file, thereby ensuring the security of the target file.

In the second implementation manner, the target whitelist information may include the conversation group identifier and preset parameters of the target conversation group. The preset parameter is used to indicate whether all members in the target conversation group have the permission to share the target file. Based on this, S203 may include the following steps:

Step 1: In the case where the value of the preset parameter is used to indicate that all members in the target conversation group have the right to share the target file, query the user IDs of all members in the target conversation group.

For example, the server can query the correspondence between the conversation group ID of the conversation group and the user ID of the members in the conversation group to determine the user ID of the member corresponding to the conversation group ID of the target conversation group (that is, the user ID of all members in the target conversation group). User ID).

Step 2: Determine whether there is a user ID of the first user among the user IDs of all members in the target conversation group. If the user ID of the first user exists among the user IDs of all members in the target conversation group, determine that the first user has the right to share the target file; if the user ID of all members in the target conversation group does not exist in the user ID of the first user Identifies that the first user does not have the right to share the target file.

The preset parameters can be set by technicians based on experience. For example, the preset parameter is A. If A is the first value, it means that all members of the target conversation group have the permission to share the target file; if A is the second value, it means that all members of the target conversation group are not Have permission to share target files.

When a certain user joins a certain conversation group, the server can determine that the user is a member of the conversation group, and record the correspondence between the user ID of the user and the conversation group ID of the conversation group.

After the server receives the target file and target whitelist information, if the target whitelist information includes preset parameters, and the server determines that the current value of the preset parameter indicates that all members in the target conversation group have the right to share the target file, the server It can be determined that the second user can share the target file with all members in the target conversation group.

Therefore, after the server receives the access request for the target file sent by the first terminal, it can determine whether the first user has the right to share the target file through the above steps 1 and 2. That is, if the first user belongs to the target conversation group, it is determined that the first user has the right to share the target file, and if the first user does not belong to the target conversation group, it is determined that the first user does not have the right to share the target file.

In addition, the target whitelist information may also include user identifications of members in the target conversation group who have the right to share the target file. After the server receives the target file and target whitelist information, if the target whitelist information includes preset parameters, and the server determines that the current value of the preset parameter indicates that all members in the target conversation group do not have the permission to share the target file, then The server may determine that the second user shares the target file with some members of the target conversation group.

Therefore, after the server receives the access request for the target file sent by the first terminal, the server can obtain the user identification included in the target whitelist information. Based on this, S203 can also be implemented as:

When the value of the preset parameter is used to indicate that all members in the target conversation group do not have the permission to share the target file, it is determined whether the user identity of the first user exists in the user identity included in the target whitelist information. If the user ID of the first user exists among the user IDs included in the whitelist information, determine that the first user has the right to share the target file; if the user ID included in the whitelist information does not include the user ID of the first user, determine the user ID of the first user. A user does not have permission to share the target file.

In the third implementation manner, the target whitelist information may also only include the user identifiers of members in the target conversation group who have the permission to share the target file, without including preset parameters. Based on this, the above S203 can be implemented as:

It is determined whether the user ID of the first user exists among the user IDs included in the target whitelist information. If the user ID contained in the target whitelist information contains the user ID of the first user, indicating that the second user allows the first user to share the target file, the server can determine that the first user has the permission to share the target file; if the target whitelist information Among the included user IDs, the user ID of the first user does not exist, indicating that the second user does not allow the first user to share the target file, and the server can determine that the first user does not have the right to share the target file.

On the basis of the foregoing embodiment, the server may also send the target file to the terminal logged in by the member who has the permission to share the target file, and the method may further include the following steps:

In the embodiment of the present application, when the server determines that the first user has the right to share the target file, the server may send the target file to the first terminal.

It can be seen that when the second user sends the target file in the dialog window of the target conversation group, he can select members in the target conversation group who have the permission to share the target file, that is, the second terminal can obtain the target whitelist information and send it to the server . Correspondingly, the server can determine whether the first user has the permission to share the target file according to the target whitelist information. When the server determines that the first user does not have the right to share the target file, the server may refuse to send the target file to the first terminal.

Based on the above processing, users other than the members identified in the target whitelist have no access rights, so that even if users other than the members identified in the target whitelist obtain the file identification of the target file, the server will not log in to the terminal of the user. Sending the corresponding target file can improve the security of file sharing.

In addition, the second user does not need to create a new conversation group, and can only share the target file with some members of the target conversation group, thereby facilitating user operations and improving the efficiency of file sharing.

In another embodiment of the present application, in order to further improve user experience, the server may also send a reminder message to the terminal, and the method may further include the following steps:

If the first user does not have the right to share the target file, a reminder message is sent to the first terminal to notify the first terminal that the first user has no right to share the target file.

In the embodiment of the present application, when the server determines that the first user does not have the right to share the target file, the server may not only refuse to send the target file to the first terminal, but also may send a reminder message to the first terminal. Correspondingly, the first terminal may receive the reminder message and determine that the first user currently logged in does not have the right to share the target file. For example, the first terminal may display a message "No right to share the target file" in the dialog window of the target conversation group.

Referring to FIG. 4, FIG. 4 is a flowchart of a file sharing method provided by an embodiment of this application. The method may be applied to a second terminal. The method may include the following steps:

S401: Acquire target files that need to be shared in the target conversation group by the second user who logs in to the second terminal, and target whitelist information corresponding to the target files.

Wherein, the target whitelist information is used to identify members in the target conversation group who have the permission to share the target file. The target file can be office documents, pictures, or other files. The member with the permission to share the target file in the target conversation group may be a member of the target conversation group, may also be a plurality of partial members in the target conversation group, or may be all members of the target conversation group.

In the embodiment of the present application, when the second user needs to share a file (ie, target file) with members of the target conversation group, the second user can select the need to share in the dialog window of the target conversation group through the second terminal Target file and determine other members of the target conversation group that are allowed to share the target file. Correspondingly, the second terminal can obtain the target file and the corresponding target whitelist information.

S402: Send the target file and target whitelist information to the server, so that when the server receives the access request for accessing the target file sent by the first terminal, it determines the corresponding relationship based on the pre-stored file identifier and the whitelist information. Target whitelist information corresponding to the file identifier of the target file. And based on the target whitelist information and the user identification of the first user, it is determined whether the first user has the permission to share the target file, and if the first user does not have the permission to share the target file, the target file is refused to be sent to the first terminal.

In the embodiment of the present application, the second terminal may send the target file and target whitelist information to the server.

Correspondingly, the server can receive the target file and target whitelist information sent by the second terminal, and save the correspondence between the target file identifier and the target whitelist information.

Subsequently, when the server receives an access request for the target file sent by another terminal (ie, the first terminal) according to the file identifier of the target file, the server can determine whether the first user who logs in to the first terminal has sharing based on the target whitelist information The permissions of the target file. When the server determines that the first user does not have the right to share the target file, the server may refuse to send the target file to the first terminal.

The processing steps of the server have been described in detail in the foregoing embodiment, and will not be repeated here.

It can be seen that, based on the file sharing method provided by the embodiment of the present application, when the second user shares the target file, the corresponding target whitelist information can be sent to the server through the second terminal. Correspondingly, when the server receives the access request sent by the first user through the first terminal, it can determine the first user through the correspondence between the file identifier and the whitelist information, the file identifier of the target file, and the user identifier of the first user. Whether the user has the right to share the target file to determine whether the first user can access the target file. That is, users other than the members identified by the target whitelist do not have access rights, so that even if users other than the members identified by the target whitelist obtain the file identifier of the target file, they cannot obtain the target file, thereby improving the file sharing performance. safety.

In addition, the second terminal may obtain target whitelist information according to the user's operation. In an implementation manner, obtaining target whitelist information may include the following steps:

Receive a signal triggered by an operation in a predetermined area.

The predetermined area is located in the file access permission setting interface displayed by the second terminal, and the signal includes target whitelist information corresponding to the target file.

When the second user selects to share the target file in the target conversation group, the second terminal may display a file access permission setting interface for the target file. Furthermore, the second user can perform operations in a predetermined area in the interface displayed by the second terminal to select members in the target conversation group that are allowed to share the target file. Accordingly, the second terminal can determine which members of the target conversation group can share the target file. Members, get target whitelist information.

For example, when the second user uploads the target file in the target conversation group, the second terminal may display a selection dialog box in the conversation window of the target conversation group. The selection dialog box can display the option of "Share the target file among all members in the current conversation group". The second user can check this option through the second terminal, and the second terminal can determine that all members in the target conversation group have the permission to share the target file, and obtain the target whitelist information.

Or, when the second user uploads the target file in the target conversation group, the second terminal may display a multi-selection dialog box in the conversation window of the target conversation group. The multiple selection dialog box can display the user names of all members in the target conversation group. The second user can check the user names of the members who are allowed to share the target file through the second terminal, and the second terminal can determine the members of the target conversation group who can share the target file according to the user names checked by the second user to obtain the target whitelist information.

In an embodiment, the target whitelist information is the session identifier of the target session group. When the second user uploads the target file in the target conversation group, there is no need to set permissions. By default, all members in the target conversation group will automatically obtain the permission to access the target file.

In an embodiment, the target whitelist information may include the session group identifier of the target session group and preset parameters, and the preset parameters are used to indicate whether all members of the target session group have the right to share the target file.

The preset parameters can be set by technicians based on experience. For example, the preset parameter is A, A is the first value, which can indicate that all members in the target conversation group have the permission to share the target file, and A is the second value, which can indicate that all members in the target conversation group do not have sharing The permissions of the target file.

As an example, when the second user uploads the target file in the target conversation group, the second terminal may display a selection dialog box in the conversation window of the target conversation group, and the selection dialog box may display "in the current conversation group "Share target files among members" option. The second user can check this option through the second terminal.

Correspondingly, the second terminal may determine that the preset parameter is the aforementioned first value, and further, the second terminal may send the target file and the target whitelist information including the preset parameter to the server.

Or, when the second user uploads the target file in the target conversation group, the second terminal may display a multi-selection dialog box in the conversation window of the target conversation group, and the multi-selection dialog box may display all members in the target conversation group User name. The second user can check the user names of the members who are allowed to share the target file through the second terminal.

Correspondingly, the second terminal may determine that the preset parameter is the aforementioned second value, and the second terminal may also obtain the user identification of the member selected by the second user who is allowed to share the target file. Furthermore, the second terminal may send the target file and the target whitelist information including the determined preset parameters and the acquired user identification to the server.

In an embodiment, the target whitelist information may include user identifications of members in the target conversation group who have the right to share the target file.

After the second user selects the user name of the member who is allowed to share the target file through the second terminal, the second terminal may obtain the user ID of the member who is allowed to share the target file selected by the second user, and further, the second terminal may transfer the target file , Send the target whitelist information containing the obtained user ID to the server.

Correspondingly, after the server receives the access request for the target file sent by the first terminal, the server can combine the user ID of the first user according to whether the target whitelist information contains preset parameters and the current value of the preset parameters, It is determined whether the first user has the authority to share the target file, and the access request is processed according to the determination result. For the processing method of the server, reference may be made to the detailed introduction in the foregoing embodiment, which is not repeated here.

Referring to FIG. 5, FIG. 5 is a flowchart of an example of a file sharing method provided by an embodiment of the application. The method may include the following steps:

S501: The second terminal obtains the target file that the second user who logs in to the second terminal needs to share in the target conversation group.

S502: The second terminal sends the target file and the conversation group identifier of the target conversation group to the server.

S503: The server saves the correspondence between the file identifier of the target file and the conversation group identifier of the target conversation group, and sends the file identifier of the target file to the terminal logged in by users other than the second user in the target conversation group.

S504: The first terminal sends a first access request for the target file to the server.

The first access request carries the user ID of the first user who logs in to the first terminal and the file ID of the target file.

S505: The third terminal sends a second access request for the target file to the server.

The second access request carries the user identification of the third user who logs in to the third terminal and the file identification of the target file.

S506: The server determines, according to the first access request, that the first user who logs in to the first terminal is not a member of the target conversation group.

S507: The server determines, according to the second access request, that the third user who logs in to the third terminal is a member of the target conversation group.

S508: The server sends a reminder message to the first terminal to notify the first terminal that the first user has no right to share the target file.

S509: The server sends the target file to the third terminal.

S510: The first terminal displays a message of "No right to share the target file".

It can be seen that based on the file sharing method of the embodiment of the present application, only members belonging to the target conversation group can obtain the target file, which can improve the security of file sharing.

Referring to FIG. 6, FIG. 6 is a flowchart of an example of a file sharing method provided by an embodiment of the application. The method may include the following steps:

S601: The second terminal obtains the target file that the second user who logs in to the second terminal needs to share in the target conversation group, and the corresponding target whitelist information.

The target whitelist information includes preset parameters, and the current value of the preset parameters indicates that all members in the target conversation group have the right to share the target file.

S602: The second terminal sends the target file and target whitelist information to the server.

S603: The server saves the correspondence between the file identifier of the target file and the target whitelist information, and sends the file identifier of the target file to the terminal logged in by users other than the second user in the target conversation group.

S604: The first terminal sends a first access request for the target file to the server.

S605: The third terminal sends a second access request for the target file to the server.

S606: According to the first access request, the server determines that among the user IDs of all members in the target conversation group, there is no user ID of the first user who logs in to the first terminal.

S607: According to the second access request, the server determines that among the user IDs of all members in the target conversation group, there is the user ID of the third user who logs in to the third terminal.

S608: The server sends a reminder message to the first terminal to notify the first terminal that the first user has no right to share the target file.

S609: The server sends the target file to the third terminal.

S610: The first terminal displays a message "No right to share the target file".

Referring to FIG. 7, FIG. 7 is a flowchart of an example of a file sharing method provided by an embodiment of the application. The method may include: S701 to S710.

Among them, S701-S705 are the same as S601-S605, and S708-S710 are the same as S608-S610.

In this embodiment of the present application, in S701, the target whitelist information acquired by the second terminal includes: user identifiers of members in the target conversation group who have the permission to share target files, and the target whitelist information does not include preset parameters.

In S705, after the third terminal sends the second access request for the target file to the server, S706 to S707 may be executed.

S706: The server determines, according to the first access request, that the user identifier of the first user who logs in to the first terminal does not exist among the user identifiers included in the target whitelist information.

S707: According to the second access request, the server determines that among the user identifiers included in the target whitelist information, there is the user identifier of the third user who logs in to the third terminal.

After S707, S708 can be continued, and the server sends a reminder message to the first terminal to notify the first terminal that the first user has no right to share the target file.

Based on the same technical concept, refer to FIG. 8. FIG. 8 is a structural diagram of a file sharing device provided by an embodiment of the application. The device is applied to a server, and the device may include:

The receiving module 801 is configured to receive an access request for accessing a target file sent by the first terminal, wherein the access request carries the user ID of the first user who logs in to the first terminal and the file ID of the target file; the target file is the login first 2. Files that the second user of the terminal needs to share in the target conversation group, and the second user is a member of the target conversation group;

The determining module 802 is configured to determine the target whitelist information corresponding to the file identifier of the target file according to the correspondence between the file identifier and the whitelist information stored in advance, wherein the target whitelist information is used to identify the shared target in the target conversation group Member of the authority of the file;

The judgment module 803 is configured to judge whether the first user has the right to share the target file according to the target whitelist information and the user identification of the first user;

The first processing module 804 is configured to refuse to send the target file to the first terminal if the first user does not have the permission to share the target file.

In an implementation manner, the target whitelist information is the session group identifier of the target session group.

The judging module 803 is configured to judge whether the first user is a member of the target conversation group based on the pre-stored correspondence between the file ID and the conversation group ID, the file ID of the target file, and the user ID of the first user;

The first processing module 804 is configured to refuse to send the target file to the first terminal if the first user is not a member of the target conversation group.

The judgment module 803 can be specifically set as:

Determine whether the first user is a member of the target conversation group;

If the first user is a member of the target conversation group, it is determined that the first user has the right to share the target file;

If the first user is not a member of the target conversation group, it is determined that the first user does not have the right to share the target file.

In an implementation manner, the judgment module 803 can be specifically set as:

In the pre-stored correspondence between the file identifier and the conversation group identifier, determine the conversation group identifier corresponding to the file identifier of the target file to obtain the target conversation group identifier;

Judging whether the user identifier of the first user exists among the user identifiers of the members in the conversation group identified by the target conversation group identifier;

If the user ID of the first user exists, it is determined that the first user is a member of the target conversation group;

If the user identity of the first user does not exist, it is determined that the first user does not belong to a member of the target conversation group.

In one embodiment, the target whitelist information includes the session group identifier of the target session group and preset parameters, and the preset parameters are used to indicate whether all members in the target session group have the right to share the target file;

The judging module 803 is specifically set to query the user IDs of all members in the target conversation group when the value of the preset parameter is used to indicate that all members in the target conversation group have the right to share the target file;

Determine whether the user ID of the first user exists among the user IDs of all members in the target conversation group;

If the user ID of the first user exists among the user IDs of all members in the target conversation group, it is determined that the first user has the right to share the target file;

If there is no user ID of the first user among the user IDs of all members in the target conversation group, it is determined that the first user does not have the right to share the target file.

In an implementation manner, the target whitelist information further includes user identifications of members in the target conversation group who have the right to share the target file;

The judging module 803 is also set to judge whether there is a first among the user identifiers contained in the target whitelist information when the value of the preset parameter is used to indicate that all members in the target conversation group do not have the permission to share the target file. User ID of the user;

If the user ID of the first user exists in the user ID included in the target whitelist information, it is determined that the first user has the right to share the target file;

If the user identification of the first user does not exist in the user identification included in the target whitelist information, it is determined that the first user does not have the right to share the target file.

In an implementation manner, the target whitelist information includes user identifications of members in the target conversation group who have the right to share the target file;

The determining module 803 is specifically configured to determine whether the user identifier of the first user exists among the user identifiers included in the target whitelist information;

In an embodiment, the device further includes:

The second processing module is set to:

Receiving the target file sent by the second terminal and the target whitelist information corresponding to the target file;

Save the correspondence between the file identifier of the target file and the target whitelist information;

The file identifier of the target file is sent to the terminal logged in by users other than the second user in the target conversation group.

In an implementation manner, if the target whitelist information is the session group identifier of the target session group, the second processing module is specifically set to:

Receiving the target file and the conversation group identifier of the target conversation group sent by the second terminal;

Save the correspondence between the file identifier of the target file and the conversation group identifier of the target conversation group;

In an embodiment, the device further includes:

The first sending module is configured to send a reminder message to the first terminal if the first user does not have the right to share the target file to notify the first terminal that the first user has no right to share the target file.

In one embodiment, the first sending module is specifically configured to send a reminder message to the first terminal if the first user is not a member of the target conversation group to notify the first terminal that the first user has no right to share the target file.

In an embodiment, the device further includes:

The second sending module is configured to send the target file to the first terminal if the first user has the permission to share the target file.

In an embodiment, the second sending module is specifically configured to send the target file to the first terminal if the first user is a member of the target conversation group.

Based on the same technical concept, refer to FIG. 9. FIG. 9 is a structural diagram of a file sharing device provided by an embodiment of the application. The device is applied to a second terminal, and the device includes:

The obtaining module 901 is configured to obtain the target file that the second user who logs in the second terminal needs to share in the target conversation group, and the target whitelist information corresponding to the target file, where the target whitelist information is used to identify the target conversation group with Members with permission to share target files;

The sending module 902 is configured to send the target file and target whitelist information to the server, so that when the server receives the access request for accessing the target file sent by the first terminal, it will be based on the correspondence between the pre-stored file identifier and the whitelist information Relationship, determine the target whitelist information corresponding to the file ID of the target file, and determine whether the first user has the permission to share the target file based on the target whitelist information and the user ID of the first user, if the first user does not have the shared target The permission of the file, the target file is refused to be sent to the first terminal.

In one embodiment, the acquiring module 901 is specifically configured to receive a signal triggered by an operation in a predetermined area, where the predetermined area is located in the file access permission setting interface displayed by the second terminal, and the signal includes the target corresponding to the target file. Whitelist information.

Among them, the target whitelist information is the session identifier of the target session group.

Alternatively, the target whitelist information includes the conversation group identifier of the target conversation group and preset parameters, and the preset parameters are used to indicate whether all members in the target conversation group have the right to share the target file.

In an implementation manner, the target whitelist information includes user identifications of members in the target conversation group who have the right to share the target file.

In addition, the embodiment of the present application also provides a file sharing system, which includes a server and multiple terminals;

The second terminal of the plurality of terminals is configured to obtain the target file that the second user who logs in to the second terminal needs to share in the target conversation group, and the target whitelist information corresponding to the target file, where the target whitelist information is used to identify Members of the target conversation group who have the right to share target files; send target files and target whitelist information to the server;

The server is configured to receive an access request for accessing the target file sent by the first terminal of the plurality of terminals; and determine the target whitelist corresponding to the file identifier of the target file according to the correspondence relationship between the pre-stored file identifier and the whitelist information Information; According to the target whitelist information and the user ID of the first user, determine whether the first user has the permission to share the target file; if the first user does not have the permission to share the target file, refuse to send the target file to the first terminal.

In an embodiment, the first terminal of the plurality of terminals is configured to send an access request for accessing the target file to the server, wherein the access request carries the user identification of the first user who logs in to the first terminal and the target file The target file is a file that needs to be shared in the target conversation group by the second user who logs in to the second terminal of the multiple terminals, and the second user belongs to a member of the target conversation group;

The server is configured to receive the access request, and determine whether the first user is a member of the target conversation group according to the pre-stored correspondence between the file ID and the conversation group ID, the file ID of the target file, and the user ID of the first user; If the user is not a member of the target conversation group, it refuses to send the target file to the first terminal.

The embodiment of the present application also provides a server, as shown in FIG. 10, including a processor 1001, a communication interface 1002, a memory 1003, and a communication bus 1004, where the processor 1001, the communication interface 1002, and the memory 1003 are implemented through the communication bus 1004 Mutual communication,

The memory 1003 is set to store computer programs;

The processor 1001 is configured to implement the file sharing method executed by the server provided in the embodiment of the present application when executing the program stored in the memory 1003.

In the embodiment of the present application, the above-mentioned file sharing method executed by the server is partly the same as the above-mentioned method embodiment, and will not be repeated here.

The communication bus mentioned by the above server may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The communication bus can be divided into address bus, data bus, control bus and so on. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between the aforementioned server and other devices.

The memory may include random access memory (Random Access Memory, RAM), and may also include non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk storage. In an embodiment, the memory may also be at least one storage device located far away from the foregoing processor.

The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (Network Processor, NP), etc.; it can also be a digital signal processor (Digital Signal Processing, DSP), a dedicated integrated Circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.

The embodiment of the present application also provides a terminal, as shown in FIG. 11, including a processor 1101, a communication interface 1102, a memory 1103, and a communication bus 1104, where the processor 1101, the communication interface 1102, and the memory 1103 are completed through the communication bus 1104 Mutual communication,

The memory 1103 is set to store computer programs;

The processor 1101 is configured to implement the file sharing method executed by the second terminal provided in the embodiment of the present application when executing the program stored in the memory 1103.

In the embodiment of the present application, the file sharing method executed by the second terminal is partially the same as that of the foregoing method embodiment, and will not be repeated here.

The communication bus mentioned by the above terminal may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The communication bus can be divided into address bus, data bus, control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between the aforementioned terminal and other devices.

In another embodiment provided in this application, a computer-readable storage medium is also provided. The computer-readable storage medium stores a computer program. When the computer program is executed by a processor, the The steps of the file sharing method executed by the server.

In another embodiment provided in this application, a computer-readable storage medium is also provided. The computer-readable storage medium stores a computer program. When the computer program is executed by a processor, the Steps of the file sharing method executed by the second terminal.

In another embodiment provided in this application, a computer program product containing instructions is also provided. When the computer program product containing instructions runs on a computer, the computer executes the steps of the file sharing method executed by the server.

In another embodiment provided in this application, a computer program product containing instructions is also provided. When the computer program product containing instructions runs on a computer, the computer can execute the execution provided by the second terminal provided in the embodiments of this application. The steps of the file sharing method.

In another embodiment provided in this application, a computer program is also provided, which when running on a computer, causes the computer to execute the steps of the file sharing method executed by the server provided in the embodiment of this application.

In another embodiment provided in this application, a computer program is also provided, which when running on a computer, causes the computer to execute the steps of the file sharing method performed by the second terminal provided in the embodiment of this application.

In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in the form of a computer program product in whole or in part. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions described in the embodiments of the present application are generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from a website, computer, server, or data center. Transmission to another website site, computer, server or data center via wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server or a data center integrated with one or more available media. The usable medium may be a magnetic medium (for example, a floppy disk, a hard disk, a magnetic tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid state disk (SSD)).

It should be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply one of these entities or operations. There is any such actual relationship or order between. Moreover, the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes those that are not explicitly listed Other elements of, or also include elements inherent to this process, method, article or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other same elements in the process, method, article, or equipment including the element.

The various embodiments in this specification are described in a related manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the embodiments of devices, systems, servers, terminals, computer-readable storage media, and computer program products, since they are basically similar to the method embodiments, the description is relatively simple. For related details, please refer to the description of the method embodiments. OK.

The above descriptions are only preferred embodiments of this application and are not intended to limit this application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included in the protection of this application. Within the range.

Industrial applicability

Based on the file sharing method, device, system, server, terminal, and storage medium provided by the embodiments of this application, the corresponding relationship between file identification and whitelist information can be stored in the server, so that users other than the members identified by the target whitelist cannot Obtaining the target file prevents the target file from being obtained by a malicious attacker and can improve the security of file sharing.

Claims

A file sharing method, the method is applied to a server, and the method includes:

Receiving an access request for accessing a target file sent by a first terminal, wherein the access request carries the user ID of the first user logging in the first terminal and the file ID of the target file; the target file is A file that a second user who logs in to the second terminal needs to share in a target conversation group, and the second user is a member of the target conversation group;

Determine the target whitelist information corresponding to the file identifier of the target file according to the pre-stored correspondence between the file identifier and the whitelist information, wherein the target whitelist information is used to identify the shared place in the target conversation group. The member who stated the authority of the target file;

Judging whether the first user has the permission to share the target file according to the target whitelist information and the user identifier of the first user;

If the first user does not have the right to share the target file, refuse to send the target file to the first terminal.
The method according to claim 1, wherein the target whitelist information is a conversation group identifier of the target conversation group;

The determining whether the first user has the permission to share the target file according to the target whitelist information and the user identifier of the first user includes:

Determining whether the first user is a member of the target conversation group;

If the first user is a member of the target conversation group, determining that the first user has the right to share the target file;

If the first user is not a member of the target conversation group, it is determined that the first user does not have the right to share the target file.
The method according to claim 1, wherein the target whitelist information includes a conversation group identifier of the target conversation group and preset parameters, and the preset parameters are used to indicate whether all members of the target conversation group All have the permission to share the target file;

The determining whether the first user has the permission to share the target file according to the target whitelist information and the user identifier of the first user includes:

In the case where the value of the preset parameter is used to indicate that all members in the target conversation group have the right to share the target file, query the user IDs of all members in the target conversation group;

Determining whether the user identifier of the first user exists among the user identifiers of all members in the target conversation group;

If the user ID of the first user exists among the user IDs of all members in the target conversation group, determining that the first user has the right to share the target file;

If the user identification of the first user does not exist among the user identifications of all members in the target conversation group, it is determined that the first user does not have the right to share the target file.
The method according to claim 3, wherein the target whitelist information further includes user identifications of members in the target conversation group who have the right to share the target file;

The determining whether the first user has the permission to share the target file according to the target whitelist information and the user identifier of the first user includes:

In the case where the value of the preset parameter is used to indicate that all members in the target conversation group do not have the right to share the target file, it is determined whether all the user identifiers included in the target whitelist information exist The user ID of the first user;

If the user identification of the first user exists in the user identification included in the target whitelist information, determining that the first user has the right to share the target file;

If the user identification of the first user does not exist in the user identification included in the target whitelist information, it is determined that the first user does not have the right to share the target file.
The method according to claim 1, wherein the target whitelist information includes user identifications of members in the target conversation group who have the right to share the target file;

The determining whether the first user has the permission to share the target file according to the target whitelist information and the user identifier of the first user includes:

Determining whether the user identifier of the first user exists among the user identifiers included in the target whitelist information;

If the user identification of the first user exists in the user identification included in the target whitelist information, determining that the first user has the right to share the target file;

If the user identification of the first user does not exist among the user identifications included in the target whitelist information, it is determined that the first user does not have the right to share the target file.
The method according to any one of claims 1 to 5, wherein before the receiving the access request for accessing the target file sent by the first terminal, the method further comprises:

Receiving the target file sent by the second terminal and the target whitelist information corresponding to the target file;

Save the correspondence between the file identifier of the target file and the target whitelist information;

The file identifier of the target file is sent to the terminal logged in by users other than the second user in the target conversation group.
The method according to claim 1, wherein the method further comprises:

If the first user does not have the right to share the target file, sending a reminder message to the first terminal to notify the first terminal that the first user has no right to share the target file.
The method according to claim 1, wherein the method further comprises:

If the first user has the right to share the target file, sending the target file to the first terminal.
A file sharing method, the method is applied to a second terminal, and the method includes:

Acquire the target file that the second user who logs in to the second terminal needs to share in the target conversation group and the target whitelist information corresponding to the target file, where the target whitelist information is used to identify the target conversation group Members who have the right to share the target file;

Send the target file and the target whitelist information to the server, so that when the server receives the access request for accessing the target file sent by the first terminal, it will be based on the pre-stored file identification and whitelist information To determine the target whitelist information corresponding to the file identifier of the target file, and determine whether the first user has shared the target according to the target whitelist information and the user identifier of the first user File permission, if the first user does not have the permission to share the target file, refuse to send the target file to the first terminal.
The method according to claim 9, wherein obtaining the target whitelist information corresponding to the target file comprises:

Receive a signal triggered by an operation in a predetermined area, where the predetermined area is located in a file access permission setting interface displayed by the second terminal, and the signal includes target whitelist information corresponding to the target file.
The method according to claim 9, wherein the target whitelist information is a session identifier of the target conversation group.
The method according to claim 9, wherein the target whitelist information includes a conversation group identifier of the target conversation group and preset parameters, and the preset parameters are used to indicate whether all members of the target conversation group Both have the permission to share the target file.
8. The method according to claim 9, wherein the target whitelist information includes user identifications of members in the target conversation group who have the right to share the target file.
A file sharing method, the method is applied to a server, and the method includes:

Receiving an access request for accessing a target file sent by a first terminal, wherein the access request carries the user ID of the first user logging in the first terminal and the file ID of the target file; the target file is A file that a second user who logs in to the second terminal needs to share in a target conversation group, and the second user is a member of the target conversation group;

Judging whether the first user is a member of the target conversation group according to the pre-stored correspondence between the file identifier and the conversation group identifier, the file identifier of the target file, and the user identifier of the first user;

If the first user is not a member of the target conversation group, refuse to send the target file to the first terminal.
A file sharing device, the device is applied to a server, and the device includes:

A receiving module, configured to receive an access request for accessing a target file sent by the first terminal, wherein the access request carries the user ID of the first user logging in the first terminal and the file ID of the target file; The target file is a file that a second user who logs in to the second terminal needs to share in a target conversation group, and the second user is a member of the target conversation group;

The determining module is configured to determine the target whitelist information corresponding to the file identifier of the target file according to the correspondence between the file identifier and the whitelist information stored in advance, wherein the target whitelist information is used to identify the target session Members in the group who have the right to share the target file;

A judging module, configured to judge whether the first user has the right to share the target file according to the target whitelist information and the user identification of the first user;

The first processing module is configured to refuse to send the target file to the first terminal if the first user does not have the right to share the target file.
The apparatus according to claim 15, wherein the target whitelist information is a conversation group identifier of the target conversation group;

The judgment module is specifically set as:

Determining whether the first user is a member of the target conversation group;

If the first user is a member of the target conversation group, determining that the first user has the right to share the target file;

If the first user is not a member of the target conversation group, it is determined that the first user does not have the right to share the target file.
The device according to claim 15, wherein the target whitelist information includes a conversation group identifier of the target conversation group and preset parameters, and the preset parameters are used to indicate whether all members of the target conversation group All have the permission to share the target file;

The judgment module is specifically set as:

In the case where the value of the preset parameter is used to indicate that all members in the target conversation group have the right to share the target file, query the user IDs of all members in the target conversation group;

Determining whether the user identifier of the first user exists among the user identifiers of all members in the target conversation group;

If the user ID of the first user exists among the user IDs of all members in the target conversation group, determining that the first user has the right to share the target file;

If the user identification of the first user does not exist among the user identifications of all members in the target conversation group, it is determined that the first user does not have the right to share the target file.
The apparatus according to claim 17, wherein the target whitelist information further comprises user identifications of members in the target conversation group who have the right to share the target file;

The judgment module is specifically set as:

In the case where the value of the preset parameter is used to indicate that all members in the target conversation group do not have the permission to share the target file, it is determined whether there are all user identifiers included in the target whitelist information. The user ID of the first user;

If the user identification of the first user exists in the user identification included in the target whitelist information, determining that the first user has the right to share the target file;

If the user identification of the first user does not exist in the user identification included in the target whitelist information, it is determined that the first user does not have the right to share the target file.
The apparatus according to claim 15, wherein the target whitelist information includes user identifications of members in the target conversation group who have the right to share the target file;

The determining module is specifically configured to determine whether the user identifier of the first user exists among the user identifiers included in the target whitelist information;

If the user identification of the first user exists in the user identification included in the target whitelist information, determining that the first user has the right to share the target file;

If the user identification of the first user does not exist in the user identification included in the target whitelist information, it is determined that the first user does not have the right to share the target file.
A file sharing device, which is applied to a second terminal, and includes:

The acquiring module is configured to acquire the target file that the second user logging in the second terminal needs to share in the target conversation group, and the target whitelist information corresponding to the target file, wherein the target whitelist information is used to identify Members of the target conversation group who have the right to share the target file;

The sending module is configured to send the target file and the target whitelist information to the server, so that when the server receives the access request for accessing the target file sent by the first terminal, it will be based on the pre-stored file Identify the correspondence between the identifier and the whitelist information, determine the target whitelist information corresponding to the file identifier of the target file, and determine whether the first user is the first user based on the target whitelist information and the user identifier of the first user Having the right to share the target file, and if the first user does not have the right to share the target file, refuse to send the target file to the first terminal.
The device according to claim 20, wherein the acquisition module is specifically configured to receive a signal triggered by an operation in a predetermined area, wherein the predetermined area is located in a file access authority setting interface displayed by the second terminal , The signal includes target whitelist information corresponding to the target file.
A file sharing device, the device is applied to a server, and the device includes:

A receiving module, configured to receive an access request for accessing a target file sent by a first terminal, wherein the access request carries the user ID of the first user logging in the first terminal and the file ID of the target file; The target file is a file that a second user who logs in to the second terminal needs to share in a target conversation group, and the second user is a member of the target conversation group;

The judgment module is configured to judge whether the first user belongs to the target conversation group based on the pre-stored correspondence between the file ID and the conversation group ID, the file ID of the target file, and the user ID of the first user member;

The first processing module is configured to refuse to send the target file to the first terminal if the first user is not a member of the target conversation group.
A file sharing system, the system including a server and multiple terminals;

The second terminal of the plurality of terminals is configured to obtain the target file that the second user logging in the second terminal needs to share in the target conversation group, and the target whitelist information corresponding to the target file, where The target whitelist information is used to identify members in the target conversation group who have the right to share the target file; sending the target file and the target whitelist information to the server;

The server is configured to receive an access request for accessing the target file sent by a first terminal of the plurality of terminals; and determine a connection with the target file according to the correspondence relationship between the file identifier and whitelist information stored in advance The target whitelist information corresponding to the file identifier of the file ID; according to the target whitelist information and the user ID of the first user, determine whether the first user has the right to share the target file; if the first user does not Having the right to share the target file, refuse to send the target file to the first terminal.
A server includes a processor, a communication interface, a memory, and a communication bus. The processor, the communication interface, and the memory communicate with each other through the communication bus;

Memory, set to store computer programs;

The processor is configured to implement the method steps of any one of claims 1-8 or 14 when it is configured to execute the program stored in the memory.
A terminal includes a processor, a communication interface, a memory, and a communication bus, where the processor, the communication interface, and the memory complete mutual communication through the communication bus;

Memory, set to store computer programs;

The processor is configured to implement the method steps of any one of claims 9-13 when it is configured to execute the program stored in the memory.
A computer-readable storage medium in which a computer program is stored, and when the computer program is executed by a processor, the method steps of any one of claims 1-8 or 14 are realized.
A computer-readable storage medium in which a computer program is stored, and when the computer program is executed by a processor, the method steps of any one of claims 9-13 are realized.
A computer program product containing instructions, which when running on a computer, causes the computer to execute the method steps of any one of claims 1-8 or 14.
A computer program product containing instructions, when the computer program product containing instructions runs on a computer, the computer executes the method steps of any one of claims 9-13.
A computer program, which when running on a computer, causes the computer to execute the method steps of any one of claims 1-8 or 14.
A computer program that, when running on a computer, causes the computer to execute the method steps of any one of claims 9-13.