Electronic document security management system and electronic document security management method

Abstract

The invention relates to an electronic document security management system and an electronic document security management method. The electronic document security management system comprises a console, a server and a client side, wherein the client side comprises a document drive transparent encryption and decryption module which is used for detecting whether secret-related data operation exists or not and carrying out corresponding encryption and decryption processing on secret-related data according to a security strategy, a clipboard control module which is used for limiting any copying and clipping / pasting operation from a trusted progress to an untrusted progress and a progress recognizing module which is used for extracting related information of progresses, judging the legality of the progresses according to the related information of the progresses, allowing corresponding operation of the progresses if the progresses are legal, otherwise, refusing the corresponding operation. The all-dimensional document data information security management system covering the life cycle and the application range of a document is established by taking a password technology as a support, identity authentication as a foundation, data security as a core and monitoring and auditing as a basis, and thus information leakage caused by non-subjective events such as hacker invasion and storage medium loss can be effectively prevented.

Description

technical field [0001] The invention relates to an electronic document safety management system and method. Background technique [0002] With the transformation of users' business forms and the rapid popularization of various web applications, the traditional security boundary is becoming more and more blurred, users' requirements for security have changed, and threats are gradually shifting from the edge of the network to key information stored by users and applications, even web-based core business systems. Under the lure of economic interests, not only hackers will launch attacks, but internal employees will also take risks and steal confidential documents, leading to continuous leaks in enterprises, governments, and the military. [0003] For electronic data encryption products, the existing encryption protection of most enterprises has the following types: 1. Data channel management: conduct on-off management of all data channels of the computer (such as network, CD-R...

AI Technical Summary

Problems solved by technology

Its main disadvantage is the one-size-fits-all management model, which is safe but not easy to use; 2. Content filtering: through the data protection products deployed on terminals and network nodes with content analysis as the core function, filter and analyze the passing data stream, and communicate with Pre-set interception keywords are matched to achieve anti-leakage function

[0006] After the comparison and practical application of different types of information security protection products, enterprise users generally tend to use products that realize document security protection through transparent encryption technology, and have extremely high requirements for product security, ease of use, and stability. , pay attention to the integration of security products and other IT systems. Considering the actual situation of frequent upgrades of computer hardware equipment, application layer transparent encryption technology products can no longer meet the needs of enterprises, so there is an urgent need for further development of file-driven transparent encryption technology

Images