Privilege control method of encryption document in terminal and terminal

Abstract

The invention provides a privilege control method of an encryption document in a terminal and the terminal. The method comprises that a file filter drive obtains the user identifier of a current user and a file header containing the file identifier of the current to-be-opened file of the user; when the file header comprises a file encryption identifier, the file filter drive sends a file privilege request instruction containing the user identifier and the file identifier to a file management module; the file management module sends received file privilege request instruction to a privilege management server, receives file privileges sent by the privilege management server and finally sends the file privileges to a file privilege control module; and the operations of the current user carried out to the file are controlled according to the file privileges, wherein the file management module sends the received file privileges sent by the privilege management server to the file privilege control module, thus enabling the privilege control module to control the privileges of the application layer needing to be carried out to the file currently by the user, and the processing demand of the user on the file is satisfied.

Description

technical field [0001] The invention relates to information security technology, in particular to a method for controlling the authority of encrypted documents in a terminal and a terminal. Background technique [0002] File transparent encryption technology is a file encryption technology developed for enterprise files including demand applications. The transparency means that users will not be aware of the encryption and decryption process. When users open or edit protected files, the system will Automatically encrypt unencrypted files and decrypt encrypted files. Files are stored in cipher text on the hard disk and in plain text in the memory. Once the use environment is changed, they cannot be opened due to the inability to obtain automatic decryption services, thereby achieving The purpose of protecting file content. [0003] Using the above-mentioned method of controlling file permissions by using file filtering drivers can only control file permissions according to f...

AI Technical Summary

Problems solved by technology

[0004] Embodiments of the present invention provide a method for controlling the authority of an encrypted document in a terminal and a terminal, so as to solve the problem that the authority of the application layer cannot be controlled and the user's needs cannot be met

Images