Data security protection method of enterprise management software

Abstract

The invention discloses an enterprise management software security protection method and belongs to the field of information security. The method provided by the invention can protect the data security of enterprise confidential information without any influences on the application flow of enterprise management software. In the method, a database file which stores enterprise core confidential data is subjected to storage encryption to prevent secret leakage caused by copying the database file; for preventing password secret leakage from leading to network attack, the access to a database server is controlled, so that only specific terminals are allowed to access the database server after verification; and an enterprise management software system client is protected completely and intelligently, the output files are encrypted, and content copying, printing, screen capturing and any other operation which may lead to secret leakage are strictly controlled in a management software application process.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a method for ensuring data security and confidentiality of enterprise management software. technical background [0002] At present, most enterprises and institutions use domestic management software with low security and confidentiality to handle business processes such as corporate finance, purchase, sales, inventory, personnel, and wages, which involve core confidential information of the company. The mainstream products of these management software adopt C / S (Client / Server, client / database server) architecture, among which, the database server adopts a general-purpose DBMS (Database Management System, relational database, such as SQL-Server, Mysql, Oracle, etc.), Provide external services through the communication service port of the database (for example, SQL-Server is port 1433); the client establishes a connection with the above-mentioned database server thr...

AI Technical Summary

Problems solved by technology

Once these plaintext data files and log files are stolen, they can be easily imported on other machines installed with the same type of DBMS database, which will directly lead to the leakage of the core confidential information of the enterprise

[0006] Two: Hidden dangers of confidentiality leakage caused by client software

[0007] In the process of using the enterprise management software client, basically every interface and every report has a data export function, and the current report can be exported into a custom report format, Excel and other formats, causing leakage; basically every report can be printed directly output, resulting in leaks; even the current screen can be saved and sent directly through the screenshot tool, thus causing the leak of the core confidential information of the enterprise

[0008] Three: Network attacks caused by password loss

Any computer in the same local area network can directly connect to the remote DBMS database server by installing a DBMS database client tool of the same type, and then back up the plaintext database, resulting in the leakage of corporate confidential information

Images