File permission management method and device, equipment, storage medium and program product

Abstract

The invention relates to the technical field of data security, and discloses a file permission management method, device and equipment, a storage medium and a program product, the method is executed by target equipment, and the method comprises the steps of obtaining first fingerprint data, calculating a hash feature value corresponding to the first fingerprint data, and according to the hash feature value, storing the first fingerprint data in a database; and judging whether a control protection area corresponding to the first fingerprint data exists or not, and if the control protection area corresponding to the first fingerprint data exists, displaying the control protected area so as to receive an operation aiming at the control protected area. According to the method, the unique fingerprint hash value is generated by utilizing the physiological characteristics of the fingerprints of the human body, and the fingerprint hash value is added into the metadata attribute characteristic value of the stored file, so that the aim of controlling the file access permission by utilizing the fingerprints is fulfilled.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a file authority management method, device, equipment, storage medium and program product. Background Art

[0002] The modern world is in the era of digital economic transformation. Various AI technologies have reactivated a large number of data elements. Technological innovation and knowledge innovation are becoming the mainstream of today's era. Various entities and individuals are paying more and more attention to information security. It has become the most urgent thing to resolutely prevent the leakage of important intellectual assets such as innovative achievements and company secrets.

[0003] The current computer system's data security permissions are still based on system-level roles, user groups, and accounts to control access to and editing of stored files. When an account is leaked or hacked, the security permissions of the stored data files will be compromised, and data security cannot be guaranteed well. Summary of the invention

[0004] In view of this, the present invention provides a file permission management method, apparatus, device, storage medium and program product to solve the problem of preventing the security of file data in an account from being threatened in the event of account leakage.

[0005] In a first aspect, the present invention provides a file permission management method, which is executed by a target device and includes:

[0006] Obtaining first fingerprint data, and calculating a hash feature value corresponding to the first fingerprint data;

[0007] According to the hash characteristic value, determining whether there is a control protection area corresponding to the first fingerprint data;

[0008] If there is a control protection area corresponding to the first fingerprint data, the control protected area is displayed to receive an operation on the control protected area.

[0009] The file permission management method provided by the embodiment of the present invention obtains fingerprint data and generates a corresponding unique hash feature value based on the fingerprint data for verification to determine whether there is a control protection area corresponding to the fingerprint data, and displays or hides the file control protection area, so as to achieve personalized access control and ensure that the security of file data will not be threatened when the account loses security.

[0010] In an optional implementation manner, before determining whether there is a control protection area corresponding to the first fingerprint data according to the hash characteristic value, the method further includes:

[0011] The hash value characteristic value corresponding to the authorized fingerprint data is added to the metadata attribute characteristic value of the file.

[0012] The file permission management method provided by the embodiment of the present invention directly associates the hash feature value of the fingerprint with the metadata of the file instead of just processing it in memory or temporary storage. In this way, even if the system is attacked or the data is stolen, the attacker cannot easily find or bypass the fingerprint-based access control. In addition, since the fingerprint data and its hash value are protected as part of the file and stored together with the file content, it is ensured that even if the file is moved, copied or shared between different devices, its access control policy will remain consistent.

[0013] In an optional implementation manner, judging whether there is a control protection area corresponding to the first fingerprint data according to the hash characteristic value includes:

[0014] Get the metadata attribute feature value of the file;

[0015] Comparing the metadata attribute feature value of the file with the hash feature value corresponding to the first fingerprint data to form a comparison result;

[0016] Based on the comparison result, it is determined whether there is a control protection area corresponding to the first fingerprint data.

[0017] The file permission management method provided by the embodiment of the present invention ensures that only users with authorized fingerprints can access protected file areas by pre-storing the hash feature value corresponding to the authorized fingerprint data in the metadata attributes of the file, and calculating the hash feature value of the user's fingerprint in real time for comparison when the user attempts to access it. At the same time, the metadata of the file can include hash feature values ​​of multiple authorized fingerprints, so the access rights of multiple users can be flexibly configured without modifying the file content, thereby simplifying the permission management process.

[0018] In an optional implementation, displaying a control protection area to receive an operation for controlling the protected area includes:

[0019] Determine the access rights of the file based on the hash characteristic value corresponding to the first fingerprint data;

[0020] Receive actions to control protected areas based on access rights.

[0021] The file permission management method provided by the embodiment of the present invention implements dual identity authentication by determining the access rights of the file based on the hash characteristic value corresponding to the first fingerprint data. At the same time, the hash characteristic value, as the only representation of the fingerprint data, further ensures the accuracy and unpredictability of the verification, increases the security level of the system, and even if the account information is leaked, the security of the file data will not be threatened due to the setting of the access rights.

[0022] In an optional implementation, the access permission is divided into at least one of a read permission or a write permission.

[0023] The file permission management method provided by the embodiment of the present invention can provide more sophisticated permission control by subdividing access permissions into read and write permissions. By separating read and write permissions, the system can more effectively prevent potential security threats. For users who only need to view files but not modify them, only read permission is required. Even if the user's account information is leaked, the attacker cannot modify the file content due to lack of write permission, thereby improving the overall level of data protection.

[0024] In an optional embodiment, the method further includes:

[0025] receiving preset actions for controlling the protected area;

[0026] Hide controls protected areas based on preset actions.

[0027] The file permission management method provided in the embodiment of the present invention allows the user to actively hide the controlled protected area by executing a preset operation. That is, in addition to having the access rights to display the controlled protected area and corresponding to the fingerprint data based on the fingerprint data, the controlled protected area can also be hidden based on the preset operation so that the area is invisible. This implementation method also allows the user to further control the access interface through preset operations.

[0028] In a second aspect, the present invention provides a file authority management device, the device comprising:

[0029] An acquisition module, used to acquire first fingerprint data and calculate a hash feature value corresponding to the first fingerprint data;

[0030] A judgment module, used for judging whether there is a control protection area corresponding to the first fingerprint data according to the hash characteristic value;

[0031] The display module is used to display the control protected area if there is a control protected area corresponding to the first fingerprint data, so as to receive an operation on the control protected area.

[0032] In a third aspect, the present invention provides a computer device comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the file permission management method of the first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0033] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the file permission management method of the first aspect or any corresponding embodiment thereof.

[0034] In a fifth aspect, the present invention provides a computer program product, including computer instructions, which are used to enable a computer to execute the file permission management method of the first aspect or any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0036] Figure 1 is a flowchart of a file authority management method according to an embodiment of the present invention;

[0037] Figure 2 is a structural block diagram of a file authority management device according to an embodiment of the present invention;

[0038] Figure 3 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0039] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0040] In today's world, which is accelerating its transformation to a digital economy, the vigorous development of artificial intelligence technology is profoundly activating massive data resources. Against this background, information security issues are becoming increasingly prominent and have become the focus of attention from all walks of life. Protecting core knowledge assets such as innovative achievements and corporate decisions from being leaked has become a top priority for maintaining organizational security and personal privacy.

[0041] However, the current computer system's data security protection mechanism still relies mainly on traditional system-level permission control, such as role assignment, user group management, and account verification to limit access and editing permissions to stored files. The limitation of this model is that once account information is leaked or the system is attacked, the security permissions of the stored data files will be compromised, causing the file data to face serious security risks.

[0042] The present invention provides a file permission management method, which generates a unique fingerprint Hash value by utilizing the physiological characteristics of human finger fingerprints, and adds the fingerprint Hash value to the metadata attribute characteristic value of the stored file, thereby achieving the goal of controlling file access permissions by fingerprints, ensuring that data security will not be threatened when the account security is lost.

[0043] According to an embodiment of the present invention, a file permission management method embodiment is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0044] In this embodiment, a file permission management method is provided, and the method is executed by a target device. Figure 1 is a flowchart of a file permission management method according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0045] Step S101: obtain first fingerprint data, and calculate a hash feature value corresponding to the first fingerprint data.

[0046] Specifically, the user's first fingerprint data is collected and entered into the system through a fingerprint collector, and unique and stable feature points are extracted from the fingerprint image, such as the starting point, end point, intersection point, bifurcation point, etc. of the ridge or valley line of the fingerprint, and the extracted feature points are encoded into a format that is easy to compare and store.

[0047] Furthermore, based on the hash algorithm, the extracted fingerprint features are encrypted and converted into a hash value of a fixed length, namely, a hash feature value, which is unidirectional and collision-resistant, i.e., it is difficult to reversely derive the original fingerprint features from the hash value and the probability that different fingerprint features generate the same hash value is extremely low.

[0048] Step S102: judging whether there is a control protection area corresponding to the first fingerprint data according to the hash characteristic value.

[0049] Specifically, the hash characteristic value is used as a query condition to compare with the fingerprint hash characteristic values ​​of all set file access control protection areas and their corresponding control protection area information to find out whether there is a completely matching hash characteristic value.

[0050] Furthermore, if a matching hash feature value is found, it means that there is a control protection area corresponding to the fingerprint data in the system; if no matching hash feature value is found, it means that there is no control protection area corresponding to the fingerprint data in the system.

[0051] Optionally, if no matching hash feature value is found, the system of the target device will give a corresponding prompt message, such as "the corresponding control protection area is not found".

[0052] In some optional implementations, before determining, according to the hash characteristic value, whether there is a control protection area corresponding to the first fingerprint data, the method further includes:

[0053] The hash value characteristic value corresponding to the authorized fingerprint data is added to the metadata attribute characteristic value of the file.

[0054] Specifically, the user or system administrator selects the file or folder that needs to set access control, retrieves the hash feature value corresponding to the authorized fingerprint data by searching the database or directly obtaining the hash feature value, and adds the hash feature value as a specific metadata attribute to the metadata of the selected file or folder, so that a direct connection is established between the file or folder that needs to be protected and the fingerprint hash value of the specific authorized user.

[0055] In an optional implementation, judging whether there is a control protection area corresponding to the first fingerprint data according to the hash characteristic value includes:

[0056] Get the metadata attribute feature value of the file;

[0057] Comparing the metadata attribute feature value of the file with the hash feature value corresponding to the first fingerprint data to form a comparison result;

[0058] Based on the comparison result, it is determined whether there is a control protection area corresponding to the first fingerprint data.

[0059] Specifically, the metadata of the file or folder in the control protection area is first read, which includes the attribute of the authorized fingerprint hash value. The system compares the hash feature value corresponding to the first fingerprint data calculated in step S101 with the hash value extracted from the file metadata.

[0060] Optionally, the comparison process can be a simple string comparison or based on a more complex hash matching algorithm.

[0061] Further, if the comparison result shows a match, the system believes that there is a control protection area corresponding to the first fingerprint data, and then executes step S103. If there is no match, it means that there is no control protection area corresponding to the fingerprint data in the system.

[0062] Optionally, the system may give a corresponding prompt message, such as "You do not have permission to access this area" or "No control protection area matching your fingerprint was found".

[0063] Step S103: if there is a control protection area corresponding to the first fingerprint data, display the control protection area to receive an operation on the control protection area.

[0064] Specifically, if the existence of a control protection area corresponding to the first fingerprint data has been determined and confirmed based on the hash feature value, the target device will load the specific information of the control protection area corresponding to the fingerprint hash feature value from the storage system. This information may include a list of protected files or folders, permission settings, and other possible metadata.

[0065] Further, based on the loaded information, a control protected area is displayed on the user interface. The control protected area may be a dedicated file browser window, a sidebar, or files and folders displayed with special marks in a file manager.

[0066] Furthermore, once the control protected area is displayed, the system is ready to receive user operations. These operations may be attempts to access protected files or folders, including: double-clicking to open a file, right-clicking a file to select an operation, etc.; modifying permission settings, such as adding or removing permissions for a specific user or user group; and managing the protected area itself, such as adding new files to the protected area, removing files from the protected area, etc., re-hiding the protected area, etc. For each operation, the system needs to verify according to the current permission settings and user identity to ensure that only users with the corresponding permissions can perform the corresponding operation.

[0067] Optionally, if a user attempts to access a protected file but does not have the appropriate permissions, the system should display a prompt message denying access.

[0068] In summary, this method firstly inputs the user's fingerprint data through the fingerprint collector, extracts feature data based on the fingerprint image, and calculates a unique feature value based on the feature data of the fingerprint through the Hash algorithm. The feature value is saved in ciphertext to ensure the uniqueness and security of the data. Subsequently, the user can set the access control protection area of ​​the file or folder as needed. By storing the hash value of the authorized fingerprint in the metadata of the file or folder, it helps to make the permission verification efficient and accurate, and also makes the access rights of these areas directly associated with the user's fingerprint hash value. By default, when the fingerprint is not entered, the protected area will remain hidden and will not have any read or write permissions, effectively preventing unauthorized access.

[0069] When a user needs to access a protected file or folder, he only needs to enter the fingerprint data, and the system will compare the hash feature value of the first fingerprint entered with the authorized fingerprint hash value stored in the file metadata. If the two match, it means that the user has the corresponding permission, the system will automatically display the protected area, and allow the user to perform operations such as read, write, and view according to the preset permission rules.

[0070] In some optional implementations, displaying a control protection area to receive an operation for controlling the protected area includes:

[0071] Determine the access rights of the file based on the hash characteristic value corresponding to the first fingerprint data;

[0072] Receive actions to control protected areas based on access rights.

[0073] The corresponding hash feature value is extracted and parsed from the first fingerprint data, and the hash feature value corresponding to the different permission authorization fingerprints in the metadata is compared to determine the file access rights corresponding to the hash feature value corresponding to the first fingerprint data. These permission information may include read, write, view, etc. Specifically, the read permission includes viewing the file content, the write permission includes modifying the file content, and the view permission may be the permission to list the folder directory content, but not the file content, and receive operations for controlling the protected area according to the specific permissions. Permission verification is required for each operation request to ensure that the operation performed by the user is within the scope of the permissions granted to him. If the operation exceeds the user's permissions, it will be refused to execute and a corresponding error prompt will be given.

[0074] In an optional implementation, the access permission is divided into at least one of a read permission or a write permission.

[0075] First, the permission information associated with the first fingerprint data hash characteristic value is parsed from the metadata attribute characteristic value of the file. Based on the parsed permission information, it is clearly distinguished whether the current user has the read permission, write permission, or both to control the protected area. Next, the user's operation request for controlling the protected area, such as opening a file, editing content, etc., is received. Finally, each operation request of the user is verified for permissions to ensure that it complies with the user's current permissions. For example, if a user attempts to perform an unauthorized operation, such as trying to edit a file without write permission, the operation is rejected and a corresponding error prompt is given. If the operation request passes the permission verification, the user is allowed to perform the corresponding operation. For example, if the user has read permission, he is allowed to view the file content; if the user has write permission, he is allowed to edit the file.

[0076] In an optional embodiment, the method further includes:

[0077] receiving preset actions for controlling the protected area;

[0078] Hide controls protected areas based on preset actions.

[0079] This embodiment first enters the user's fingerprint data through a fingerprint collector, extracts feature data based on the fingerprint image, and calculates a unique feature value based on the feature data of the fingerprint through a hash algorithm. The feature value is securely stored in ciphertext to ensure the uniqueness and security of the data. Subsequently, the user can set the access control protection area of ​​the file or folder as needed. By storing the hash value of the authorized fingerprint in the metadata of the file or folder, it helps to make the permission verification efficient and accurate, and also makes the access rights of these areas directly associated with the user's fingerprint hash value. By default, when the fingerprint is not entered, the protected area will remain hidden and will not have any read or write permissions, effectively preventing unauthorized access.

[0080] When a user needs to access a protected file or folder, he only needs to enter the fingerprint data, and the system will compare the hash feature value of the first fingerprint entered with the authorized fingerprint hash value stored in the file metadata. If the two match, it means that the user has the corresponding permission, the system will automatically display the protected area, and allow the user to perform operations such as read, write, and view according to the preset permission rules.

[0081] After the operation is completed, while controlling the display of the protected area, one or more preset operation options are provided to the user. For example, the user can easily hide the file access control protection area again through one-click setting. After receiving the preset operation instruction triggered by the user through interface input or other interactive methods, if the operation is successfully recognized and the permission verification is passed, the operation of hiding the protected area is executed to ensure that sensitive information is not exposed when it is not needed.

[0082] In the present embodiment, a file authority management device is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0083] This embodiment provides a file authority management device, such as Figure 2 As shown, including:

[0084] The acquisition module 201 is used to acquire first fingerprint data and calculate a hash feature value corresponding to the first fingerprint data.

[0085] The judgment module 202 is used to judge whether there is a control protection area corresponding to the first fingerprint data according to the hash characteristic value.

[0086] The display module 203 is used to display the control protected area if there is a control protected area corresponding to the first fingerprint data, so as to receive an operation on the control protected area.

[0087] In some optional embodiments, the device further comprises:

[0088] The adding module is used to add the hash value characteristic value corresponding to the authorized fingerprint data to the metadata attribute characteristic value of the file.

[0089] In some optional implementations, the determination module 202 includes:

[0090] The metadata acquisition submodule is used to obtain the metadata attribute characteristic values ​​of the file.

[0091] The comparison submodule is used to compare the metadata attribute feature value of the file with the hash feature value corresponding to the first fingerprint data to form a comparison result.

[0092] The comparison result determination submodule is used to determine whether there is a control protection area corresponding to the first fingerprint data based on the comparison result.

[0093] In some optional implementations, the display module 203 includes:

[0094] The permission determination submodule is used to determine the access permission of the file based on the hash characteristic value corresponding to the first fingerprint data.

[0095] The receiving operation submodule is used to receive an operation for controlling a protected area based on access rights.

[0096] In an optional embodiment, the device further comprises:

[0097] The preset operation receiving module is used to receive a preset operation for controlling the protected area.

[0098] The hidden module is used to hide and control the protected area based on preset operations.

[0099] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0100] A file permission management device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0101] The embodiment of the present invention also provides a computer device having the above Figure 2 The file permission management device shown.

[0102] See also Figure 3 , Figure 3 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 3 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 3 A processor 10 is taken as an example.

[0103] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0104] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0105] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0106] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0107] The computer device also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 3 The example of connecting through bus is taken in the following.

[0108] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0109] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0110] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0111] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A file authority management method, characterized in that: The method is performed by a target device, and includes: Obtaining first fingerprint data, and calculating a hash feature value corresponding to the first fingerprint data; According to the hash characteristic value, determining whether there is a control protection area corresponding to the first fingerprint data; If there is a control protection area corresponding to the first fingerprint data, the control protected area is displayed to receive an operation on the control protected area.

2. The method according to claim 1, characterized in that Before judging whether there is a control protection area corresponding to the first fingerprint data according to the hash characteristic value, the method further includes: The hash value characteristic value corresponding to the authorized fingerprint data is added to the metadata attribute characteristic value of the file.

3. The method according to claim 2, characterized in that The determining, according to the hash characteristic value, whether there is a control protection area corresponding to the first fingerprint data includes: Obtaining a metadata attribute characteristic value of the file; Comparing the metadata attribute feature value of the file with the hash feature value corresponding to the first fingerprint data to form a comparison result; Based on the comparison result, it is determined whether there is a control protection area corresponding to the first fingerprint data.

4. The method according to claim 1, characterized in that: The displaying of the control protection area to receive an operation on the control protected area includes: Determining the access rights of the file based on the hash characteristic value corresponding to the first fingerprint data; Based on the access permission, an operation for controlling the protected area is received.

5. The method according to claim 4, characterized in that The access authority is divided into at least one of read or write authority.

6. The method according to any one of claims 1 to 5, characterized in that: The method further comprises: receiving a preset operation for the controlled protected area; Based on the preset operation, the control protected area is hidden.

7. A file authority management device, characterized in that: The device comprises: An acquisition module, used to acquire first fingerprint data and calculate a hash feature value corresponding to the first fingerprint data; A judgment module, used for judging whether there is a control protection area corresponding to the first fingerprint data according to the hash characteristic value; A display module is used to display the control protected area if there is a control protected area corresponding to the first fingerprint data, so as to receive an operation on the control protected area.

8. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the file permission management method according to any one of claims 1 to 6 by executing the computer instructions.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the file permission management method according to any one of claims 1 to 6.

10. A computer program product, characterized in that The method comprises computer instructions, wherein the computer instructions are used to enable a computer to execute the file permission management method according to any one of claims 1 to 6.

Images