A full-view monitoring method of cross-domain file knowledge range and activity track

Abstract

The invention discloses a full-view monitoring method for the access range and motion trails of cross-domain files. The method includes: S1, binding a file body and a security label attached to the file body to generate a security file, and storing the security file in a local domain file storage server; S2, recording file activities of the security file in the local domain as a file activity log, and establishing correspondence between the file activity log and the security file; S3, when the security file is transmitted in a cross-domain manner, establishing integral relation between cross-domain file state and file activities by means of file image and file activity bidirectional reference so as to track and audit cross-domain file access and activities in full view. Activity state information and derivative information are attached to the security label by means of extension, a bidirectional log reference and file image mechanism between source and target classified domains is achieved by a cross-domain security transmission technique, and full-view monitoring and auditing of the access range and motion trails of the cross-domain files is achieved.

Description

technical field [0001] The invention relates to the field of confidentiality management of secret-related documents, in particular to a full-view monitoring method for cross-domain document knowledge scope and activity track. Background technique [0002] In enterprise activities, the storage of information resource files, the operation activities of each file and the management of files are the key concerns. In the general network information security management system in China, it is usually a heterogeneous network environment across multiple domains, and the network security levels of different domains are different. However, due to the design, management, production and manufacturing aspects involved in the documents, various industrial and process documents are relatively complicated. In the process of file transmission, a confidential document is derived and decomposed into multiple non-confidential documents, such as: process documents corresponding to confidential d...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide a full-view monitoring of cross-domain file knowledge range and activity trajectory that can monitor activities such as declassification, decryption, derivation, and cross-domain transmission of classified files, monitor content knowledge range, track usage, etc. method, thereby solving the aforementioned problems existing in the prior art

Images