An electronic document trust and security control method and system

Abstract

The invention relates to an electronic document trust and security control method and system in computer networks. The control method comprises the step that a server side carries out trust granting, security isolation, flow control and isolation removal on a client side. The control system adopting the control method is further provided. A server is used for carrying out trust granting on the client side, a security and trust control environment can be built on the client side, the trusted client side and application programs can have normal access to data documents, untrusted client sides and application programs cannot use the data documents. Security and trust codes are embedded into electronic documents, data format conversion is carried out on the documents, and security isolation on the electronic documents can be achieved. The flow strategy is embedded into the electronic documents, control over the flow range of the electronic documents can be achieved, and illegal diffusion of document data is avoided. Security isolation removal of the electronic documents can be achieved through approval and decryption, and the normal access to the electronic documents can be achieved under the non-security and non-trust control environment.

Description

technical field [0001] The invention relates to a security trust control method and system, in particular to an electronic document trust and security control method and system in a computer network. Background technique [0002] With the popularization of computer networks and the continuous development of enterprise informatization, more and more materials are stored and disseminated in the form of electronic documents, but this brings convenience and also increases the risk of important information leakage within the organization: 1. External Information security threats: Untrustworthy devices such as external laptops, mobile phones, and U disks can obtain internal data through access to the intranet, WIFI, and Bluetooth transmission; 2. Internal information security risks: devices that store internal data (such as USB disks, CDs) are accidentally lost; internal employees deliberately spread data to untrustworthy areas such as the Internet, and the person responsible for ...

AI Technical Summary

Problems solved by technology

[0002] With the popularization of computer networks and the continuous development of enterprise informatization, more and more materials are stored and disseminated in the form of electronic documents, but this brings convenience and also increases the risk of important information leakage within the organization: 1. External Information security threats: Untrustworthy devices such as external laptops, mobile phones, and U disks can obtain internal data through access to the intranet, WIFI, and Bluetooth transmission; 2. Internal information security risks: devices that store internal data (such as USB disks, CDs) are accidentally lost; internal employees deliberately spread data to untrustworthy areas such as the Internet, and the person responsible for spreading the data cannot be traced; the Trojan horse program in the internal computer waits for an opportunity to steal internal data; 3. Internal data flows disorderly : The data flow of the engineering department is transferred to the financial department; the data of the leadership is transferred to the computers of ordinary employees, resulting in the illegal diffusion of data internally

Images