A confidential document tracing method, document calling server and security server

Abstract

This article relates to the field of computer technology, and in particular to a confidential document tracing method, a document calling server and a security server. The method includes receiving a confidential document calling request from a user terminal; obtaining a corresponding confidential document according to the confidential document calling request; generating characteristic information of the confidential document called according to the confidential document calling request; generating a transparent layer according to the characteristic information; merging the confidential document and the transparent layer into a non-editable confidential document copy and sending it to the user terminal. Using the embodiments of this article, the called confidential document copy can be tracked, thereby alerting the user to pay attention to the confidential document and preventing the subsequent confidential document from being disclosed to the external network.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a confidential document tracing method, a document calling server and a security server. Background Art

[0002] In recent years, with the rapid development of the Internet and multimedia technology, electronic files have been widely used, which has greatly improved the efficiency of information circulation and processing. At the same time, there are also many hidden dangers of information leakage, such as: storage, transmission, printing, copying, screenshots, and photography of sensitive information in electronic files. For electronic files that carry a large amount of sensitive personal information, commercial secrets, and information involving state secrets, advanced technical means are urgently needed to protect them, effectively deterring and tracing information leakage without affecting the existing user experience and application system processing.

[0003] How to solve the problem of confidential documents being leaked without being held accountable in the existing technology is an urgent problem that needs to be solved. Summary of the invention

[0004] In order to solve the problems in the prior art, the embodiments of this article provide a confidential document tracing method and device, which are used to solve the problem in the prior art that confidential documents are disclosed by users to external networks and the leaking users cannot be traced.

[0005] The embodiment of this invention provides a method for tracing the source of confidential documents, including:

[0006] Receiving a request from a user terminal to call a confidential document;

[0007] Obtaining corresponding confidential documents according to the confidential document request;

[0008] Generate characteristic information of the currently called confidential document according to the request for calling the confidential document;

[0009] Generate a transparent layer according to the characteristic information;

[0010] The confidential document and the transparent layer are combined into a non-editable confidential document copy and sent to the user terminal.

[0011] The embodiment of this invention also provides a method for tracing the source of confidential documents, including:

[0012] Obtain copies of suspected confidential documents;

[0013] Identify whether the suspected confidential document copy is a confidential document copy;

[0014] Obtain characteristic information in the form of a QR code at a specified location on a copy of a confidential document;

[0015] Parse the characteristic information in the form of the QR code to obtain relevant information for calling the copy of the confidential document.

[0016] The embodiment of the present invention also provides a document calling server, including:

[0017] A receiving unit, used to receive a request from a user terminal to call a confidential document;

[0018] An acquisition unit, configured to acquire a corresponding confidential document according to the confidential document request;

[0019] A feature information unit, used to generate feature information of the currently called confidential document according to the request for calling the confidential document;

[0020] A layer generation unit, used for generating a transparent layer according to the characteristic information;

[0021] The confidential document copy generating unit is used to merge the confidential document and the transparent layer into a non-editable confidential document copy and send it to the user terminal.

[0022] The embodiment of the present invention also provides a security server, including:

[0023] A document acquisition unit, used to obtain a copy of a suspicious confidential document;

[0024] An identification unit, used to identify whether the suspicious confidential document copy is a confidential document copy;

[0025] A characteristic information acquisition unit, used to acquire characteristic information in the form of a QR code at a specified position of a copy of a confidential document;

[0026] The parsing unit is used to parse the characteristic information in the form of the QR code and obtain relevant information for calling the copy of the confidential document.

[0027] The embodiments of the present invention further provide a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above method when executing the computer program.

[0028] The embodiments of the present invention also provide a computer-readable storage medium on which computer instructions are stored. When the computer instructions are executed by a processor, the above method is implemented.

[0029] By using the embodiments of this article, the called copies of confidential documents can be tracked, thereby warning users to pay attention to confidential documents and preventing subsequent confidential documents from being disclosed to external networks. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solutions in the embodiments of this article or the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of this article. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0031] Figure 1 The figure shows a schematic diagram of a confidential document tracing system according to an embodiment of this invention;

[0032] Figure 2 The flowchart of a confidential document tracing method according to an embodiment of this invention is shown;

[0033] Figure 3a The figure shows the correspondence between the confidential document and the feature information in the transparent layer in the embodiment of this article;

[0034] Figure 3b The figure shows the correspondence between the confidential document and the feature information in the transparent layer in the embodiment of this article;

[0035] Figure 3c It is a schematic diagram showing the splitting of characteristic information in the form of a QR code according to the embodiment of this article;

[0036] Figure 3d It is a schematic diagram showing that the embodiment of this article places the split characteristic information in the form of a two-dimensional code in the content-free area of ​​the confidential document;

[0037] Figure 4 The flowchart of a confidential document tracing method according to an embodiment of this invention is shown;

[0038] Figure 5 The figure is a schematic diagram of the structure of the document calling server in the embodiment of this article;

[0039] Figure 6 The figure is a schematic diagram of the structure of the security server of the embodiment of this article;

[0040] Figure 7 The flowchart of a confidential document tracing method according to an embodiment of this invention is shown;

[0041] Figure 8 The flowchart of a confidential document tracing method according to an embodiment of this invention is shown;

[0042] Fig. 9 Shown is a schematic diagram of the structure of a document calling server or a security server in an embodiment of this article.

[0043]

Description of Figure Numbers

[0044] 101. User terminal;

[0045] 102. Confidential documents;

[0046] 103. Document call server;

[0047] 104. Copies of confidential documents;

[0048] 105. External network;

[0049] 106. Security server;

[0050] 501, receiving unit;

[0051] 502. Acquisition unit;

[0052] 503, feature information unit;

[0053] 504, layer generation unit;

[0054] 5041, layer generation module;

[0055] 5042, layout module;

[0056] 5043, analysis module;

[0057] 5044, split module;

[0058] 5045, recording module;

[0059] 505. Confidential document copy generation unit;

[0060] 506. Authority unit;

[0061] 507. Conversion unit;

[0062] 508. Hash calculation unit;

[0063] 509, storage unit;

[0064] 601, document acquisition unit;

[0065] 602, identification unit;

[0066] 603, feature information acquisition unit;

[0067] 6031, splicing module;

[0068] 604, parsing unit;

[0069] 605. Hash calculation unit;

[0070] 606, comparison unit;

[0071] 607, sending unit;

[0072] 902. Computing equipment;

[0073] 904. Processing equipment;

[0074] 906. Storage resources;

[0075] 908, driving mechanism;

[0076] 910, input / output module;

[0077] 912. Input device;

[0078] 914. Output device;

[0079] 916. Presentation equipment;

[0080] 918. Graphical user interface;

[0081] 920, network interface;

[0082] 922, communication link;

[0083] 924. Communication bus. DETAILED DESCRIPTION

[0084] The following will be combined with the drawings in the embodiments of this article to clearly and completely describe the technical solutions in the embodiments of this article. Obviously, the described embodiments are only part of the embodiments of this article, not all of the embodiments. Based on the embodiments of this article, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this article.

[0085] like Figure 1 The figure shows a schematic diagram of a confidential document tracing system according to an embodiment of the present invention. In this figure, it is described that a user calls a confidential document 102 through a user terminal 101, and a document calling server 103 processes the confidential document 102, embeds characteristic information associated with this call in the confidential document 102, and sends a confidential document copy 104 with the characteristic information added to the confidential document 102 to the user terminal 101. Then, the user who obtains the confidential document copy 104 uploads the confidential document copy 104 to an external network 105 in violation of the confidentiality obligation, and then the security server 106 obtains the confidential document copy 104 from the external network 105, analyzes the confidential document copy 104, and determines which user uploaded the confidential document copy 104 to the external network 105. The system according to the embodiment of the present invention can track the called confidential document copy, thereby alerting the user to pay attention to the confidential document and preventing the subsequent confidential document from being disclosed to the external network.

[0086] like Figure 2The flowchart of a confidential document tracing method of an embodiment of the present invention is shown. In this figure, the processing flow when an internal user downloads and uses a confidential document is described. When the user's personal research, reference materials, project development, etc. are used, the internal confidential document needs to be called. If the user uploads the internal confidential information to the Internet, it will have a great impact on the user's unit or company, and the user may have to bear legal responsibility for this. However, such acts of uploading confidential documents or losing confidential documents are difficult to track. Therefore, the method described in this article is provided. When the user calls a confidential document, the copy of the confidential document is implanted with characteristic information, so that the copy of the confidential document can have the characteristic information of this call. Among them, the characteristic information may include user information, such as user name, work number, etc., which is used to uniquely identify the identity of the user who obtains the copy of the confidential document; it may also include time information of calling the confidential document, such as time information such as year, month, and day; it also includes the download address of calling the confidential document, such as information based on the IP address or the actual geographical location of the user; it may also include personal identification information of the user, such as a key set by the user. Through the personal identification information of the user, it can be avoided that others use the user's computer to call the confidential document, so that the user bears the responsibility for leakage. The method of this embodiment is run on a document calling server and is used to embed feature information related to the calling into a confidential document. The method specifically includes:

[0087] Step 201, receiving a request from a user terminal to call a confidential document;

[0088] Step 202, obtaining a corresponding confidential document according to the confidential document request;

[0089] Step 203, generating characteristic information of the current call of the confidential document according to the request for calling the confidential document;

[0090] Step 204, generating a transparent layer according to the characteristic information;

[0091] Step 205: merge the confidential document and the transparent layer into a non-editable confidential document copy and send it to the user terminal.

[0092] The confidential documents in this article refer to the internal documents of a company or unit, and the contents of the documents are not allowed to be published on the external network. The external network refers to the Internet, or the internal network of other companies or units.

[0093] Through the method of the above embodiment of this article, the characteristic information of this call can be embedded in the confidential document, and the information of the user who called the confidential document can be obtained through the characteristic information, so as to determine which user leaked the confidential document to the external network.

[0094] As an aspect of an embodiment of this document, after receiving a request from a user terminal to call a confidential document, it also includes confirming whether the user has the authority to call the confidential document based on the user's identity information; when the user has the authority to call the confidential document, obtaining the confidential document corresponding to the request to call the confidential document.

[0095] In this step, different users may have different permissions, and confidential documents also have different permission levels. The user operating the user terminal can call the corresponding confidential document according to his or her own permissions. When the user's permissions are lower than the permission level of the called confidential document, the user's request to call the confidential document is not allowed, and the reason for the failure of the user terminal to call the confidential document is fed back as: insufficient permissions.

[0096] The request to call a confidential document may include a file name, user identity information, a reason for calling a confidential document, time information, location information, user terminal information, etc., wherein the user identity information is the information entered by the user when logging into the user terminal or initiating the call to a confidential document; the file name is the information entered by the user when initiating the call to a confidential document; the reason for calling a confidential document is the information entered by the user when initiating the call to a confidential document; the time information is the system time when the document call server obtains the request to call a confidential document, or may also include the time information when the user initiates the call to a confidential document; the location information is the information automatically collected by the user terminal when the user initiates the call to a confidential document; the user terminal information is the information automatically collected by the user terminal when the user initiates the call to a confidential document. If the authority information associated with the user identity information matches the authority level of the confidential document being called, that is, the user's authority is greater than or equal to the authority level of the confidential document, the confidential document database or server is searched according to the file name of the confidential document being called, and a confidential document with the same or similar file name is found, and the user identity information, reason for calling the confidential document and time information of this operation of calling the confidential document are recorded.

[0097] As one aspect of the embodiment of this invention, after obtaining the corresponding confidential document according to the confidential document request, further comprising:

[0098] Convert the confidential document into a non-editable format.

[0099] In this step, for example, the confidential document may be converted into a document in JPG format or a document in PDF format.

[0100] As one aspect of the embodiment of this invention, the feature information of calling the confidential document according to the request for calling the confidential document is further included:

[0101] Generate feature information in the form of a QR code according to the request for calling the confidential document.

[0102] In this step, for example, the user identity information, time information and user terminal information in the confidential document request can be used to generate a QR code. The specific steps can refer to the technical solution for generating a QR code in the prior art and will not be repeated here.

[0103] In other embodiments, in addition to generating characteristic information in the form of a QR code, other patterns or color combinations with information storage functions may also be generated.

[0104] As one aspect of the embodiments of this document, generating a transparent layer according to the feature information further includes generating a transparent layer;

[0105] The characteristic information in the form of a two-dimensional code is arranged at a position specified by the transparent layer.

[0106] In this step, if Figure 3a The diagram shows the corresponding relationship between the confidential document and the characteristic information in the transparent layer in the embodiment of this article, wherein the horizontal line represents the body of the confidential document, the dotted box represents the transparent layer, and the characteristic information in the form of a QR code is arranged in the upper left corner, upper right corner, lower right corner, lower left corner, etc. of the transparent layer, so as to avoid the text or pictures in the body of the confidential document. In order to clearly show the transparent layer and the confidential document in the figure, the transparent layer and the confidential document are staggered and displayed. When the transparent layer and the confidential document overlap, the characteristic information in the form of a QR code in the lower left corner of the transparent layer is located in the content-free area in the lower left corner of the confidential document.

[0107] As one aspect of the embodiment of this invention, arranging the characteristic information in the form of a two-dimensional code at a position specified by the transparent layer further includes:

[0108] Analyzing the layout information of the confidential document;

[0109] According to the typesetting information, the characteristic information in the form of a two-dimensional code is arranged at a designated position of the transparent layer relative to the content-free area of ​​the confidential document.

[0110] In this step, if Figure 3b Shown is a schematic diagram of the correspondence between the characteristic information in the confidential document and the transparent layer in the embodiment of the present invention. If, after analyzing the typeset information of the confidential document, it is obtained that there is no text or picture in the lower left corner of the confidential document, the characteristic information in the form of a QR code can be displayed in this content-free area, wherein the gray dotted box in the confidential document represents the content-free area, and the characteristic information in the form of a QR code is arranged at a position corresponding to the transparent layer and the content-free area of ​​the confidential document. In the figure, since the transparent layer and the confidential document are not completely superimposed and overlapped, the characteristic information in the form of a QR code in the transparent layer is not located in the gray dotted box of the confidential document.

[0111] As one aspect of the embodiment of this invention, arranging the characteristic information in the form of a two-dimensional code at a designated position of the transparent layer relative to the content-free area of ​​the confidential document according to the typesetting information further includes:

[0112] Splitting the characteristic information in the form of the QR code into multiple parts;

[0113] Arranging at least one portion of feature information on a transparent layer corresponding to the content-free area of ​​the confidential document according to the coordinate information of the content-free area of ​​the confidential document;

[0114] The coordinate information of the content-free area of ​​the confidential document where the characteristic information of each part is arranged is recorded.

[0115] In this step, if Figure 3c FIG. 1 is a schematic diagram showing how the characteristic information in the form of a two-dimensional code is split according to an embodiment of the present invention. In the embodiment shown in the figure, the characteristic information in the form of a two-dimensional code is split into 9 parts, which are marked with 1, 2, 3 ... 9 respectively. Figure 3d Shown is a schematic diagram of an embodiment of the present invention placing the feature information in the form of a split QR code in a content-free area of ​​a confidential document. In this figure, the feature information in the form of a split QR code in the transparent layer is directly located in the content-free area of ​​the confidential document, and the transparent layer is no longer displayed. After analyzing the confidential document, it is found that the content-free areas are located in the 9 positions shown in the figure, mainly between lines, or between words, or between paragraphs, or between columns in the confidential document. These content-free areas are referred to here as content-free areas of the document's focus portion. The feature information split into 9 parts, in this example, the feature information of each part is a dot matrix block of a QR code, which is arranged on transparent layers corresponding to the above-mentioned 9 positions of the confidential document. Figure 3d In the embodiment shown, the characteristic information of the nine parts is evenly arranged in the content-free area between the document focus parts of the confidential document, so as to solve the problem that the characteristic information is arranged relatively concentratedly in a certain part of the confidential document, and if this part of the content-free area is blocked or erased, the relevant information for calling the confidential document cannot be parsed. The coordinate information of all the nine parts of the characteristic information is recorded, so that when the security server identifies the confidential document, the characteristic information of the nine parts is obtained at the position specified by the coordinate information, so that it can be spliced ​​into a complete characteristic information in the form of a two-dimensional code, so as to obtain the information stored therein related to the user who called the confidential document.

[0116] As one aspect of the embodiment of this invention, after merging the confidential document and the transparent layer into a non-editable confidential document copy and sending it to the user terminal, the method further includes:

[0117] Performing a predetermined hash calculation on the confidential document copy to obtain a corresponding first hash value;

[0118] The first hash value corresponding to the confidential document copy is stored.

[0119] In this step, the confidential document copy is stored as a binary file composed of 0 and 1. A hash calculation such as MD5 is performed on the binary file to obtain its corresponding hash value, i.e., MD5 value. The MD5 value and the corresponding unique identifier of the confidential document copy are stored. The unique identifier of the confidential document copy includes, for example, information composed of the file name, version, call time, calling user and other information of the confidential document, or may also include information composed of feature information. When the MD5 values ​​are the same, the corresponding confidential document copy and the corresponding calling user information can be found.

[0120] Through the method of the above-mentioned embodiment of this article, feature information related to the call can be implanted in the document call server for the confidential document called by the user, so that each time the confidential document is called by the user, it can be tracked to ensure the traceability and security of the confidential document.

[0121] like Figure 4 The flowchart of a confidential document tracing method in an embodiment of this invention is shown. The figure describes the process of verifying confidential documents disclosed on an external network (or internal network), identifying the feature information embedded in the confidential document, and obtaining the information stored in the feature information for calling the confidential document, such as user information, time information, location information, etc. of calling the confidential document. The method runs on a security server and can obtain data information from an external network, specifically including:

[0122] Step 401, obtaining a copy of a suspicious confidential document;

[0123] Step 402, identifying whether the suspicious confidential document copy is a confidential document copy;

[0124] Step 403, obtaining characteristic information in the form of a QR code at a specified position of the confidential document copy;

[0125] Step 404, parse the characteristic information in the form of the QR code to obtain relevant information for calling the copy of the confidential document.

[0126] Through the method of the above-mentioned embodiment of this article, it is possible to determine whether the confidential document on the external network includes characteristic information, and thus it is possible to determine whether the document is a copy of the confidential document originating from within the company, and the information for calling the confidential document can be obtained through the characteristic information in the content of the confidential document copy. The leaking user can be warned, criticized, and educated on confidentiality awareness, or economic or legal penalties can be imposed, thereby avoiding the recurrence of the leakage of confidential documents within the company and recovering the company's losses to a certain extent.

[0127] As one aspect of the embodiment of this invention, obtaining a copy of a suspicious confidential document further includes:

[0128] Obtain publicly available suspicious confidential documents from external or internal networks based on the document name.

[0129] In this step, technical means such as web crawler technology or keyword retrieval can be used to search for possible confidential documents with the same or similar names as confidential documents from the external network or internal network. Technical means such as semantic recognition can be used to expand the name of the confidential document to form multiple similar synonyms or near-synonyms, and the corresponding suspicious confidential documents can be retrieved from the external network or internal network based on these synonyms or near-synonyms.

[0130] As one aspect of the embodiment of this document, the step of identifying whether the suspicious confidential document copy is a confidential document copy further includes:

[0131] Performing a predetermined hash calculation on the suspicious confidential document copy to obtain a corresponding second hash value;

[0132] The second Hash value is compared with the pre-stored first Hash value; if the second Hash value is equal to the first Hash value, the suspicious confidential document copy is a confidential document copy.

[0133] In this step, the suspicious confidential document may be a document formed by text, or may be a document formed by images, or may be a document formed by both text and images. Regardless of the format of the document, it is stored in binary form. Therefore, a hash calculation is performed on the binary file of the suspicious confidential document copy. For example, MD5 hash calculation may be used, wherein the hash algorithm used at this time is the same as the hash algorithm used when the confidential document copy is formed in the document call server in the aforementioned step. The second hash value of the suspicious confidential document copy calculated in this step is compared with the first hash value recorded in the aforementioned step. If they are the same, it means that the current suspicious confidential document copy is the same as the confidential document copy generated by the document call server, and the suspicious confidential document copy is the confidential document copy; if they are not the same, it means that the suspicious confidential document copy is different from the confidential document copy generated by the document call server, and the suspicious confidential document copy is discarded, or the subsequent steps are continued, that is, it is determined whether there is corresponding feature information in the suspicious confidential document copy, or whether the text or picture content in the suspicious confidential document copy is the same or similar to the confidential document in the database.

[0134] As one aspect of the embodiment of this invention, the feature information in the form of a QR code of a specified position of a copy of a confidential document is further included:

[0135] The characteristic information in the form of the QR code is obtained according to the designated position of the content-free area of ​​the pre-stored confidential document.

[0136] In this step, when the document calling server arranges the characteristic information in the form of a two-dimensional code at a designated position of the transparent layer relative to the content-free area of ​​the confidential document according to the typesetting information of the confidential document in the previous step, the typesetting information of different confidential documents and the designated position information of arranging the characteristic information in the form of a two-dimensional code at the content-free area of ​​the confidential document are stored. In the steps of this embodiment, the characteristic information in the form of a two-dimensional code is obtained according to the stored designated position, for example, the characteristic information in the form of a two-dimensional code is obtained at the lower left corner of the confidential document (such as Figure 3b shown).

[0137] As one aspect of the embodiment of this invention, the feature information in the form of a QR code of a specified position of a copy of a confidential document is further included:

[0138] Acquire the feature information of the plurality of parts according to the pre-stored coordinate information of the non-content area of ​​the confidential document where each part of the feature information is arranged;

[0139] The characteristic information of the multiple parts are spliced ​​together to obtain the complete characteristic information in the form of the two-dimensional code.

[0140] In this step, the document calling server records the coordinate information of each part of the characteristic information in the non-content area of ​​the confidential document after splitting the characteristic information in the form of the QR code in the previous step. In the steps of this embodiment, the partial characteristic information of the corresponding position in the confidential document is obtained according to these coordinate information, and the characteristic information of these parts is spliced, such as Figure 3c As shown, the characteristic information of 9 parts are spliced ​​together to form the complete characteristic information in the form of a two-dimensional code.

[0141] As one aspect of an embodiment of this invention, obtaining relevant information for calling the copy of the confidential document includes user information, calling time information, calling location information, and user terminal information used when calling the confidential document to form a corresponding copy of the confidential document.

[0142] In this step, the user information includes the user name, the calling location information includes the geographical location information, IP address, etc., and the user terminal information used during the calling includes the MAC address of the computer, etc.

[0143] As one aspect of the embodiment of this invention, after parsing the characteristic information in the form of the QR code and obtaining the relevant information for calling the copy of the confidential document, it also includes:

[0144] The relevant information is sent to a designated user.

[0145] In this step, the designated users include system administrators or staff responsible for the security of confidential documents, and the above-mentioned designated users can be notified via email, mobile phone text messages, APP message push, etc.

[0146] Through the method of the above-mentioned embodiment of this article, the export of confidential documents can be effectively managed, and detailed operation logs can be provided for analysis and viewing; the writing and extraction of confidential document feature information can be realized, providing strong technical support for file tracing; based on the information related to calling confidential documents obtained from the confidential document copies, risk analysis and display of confidential documents disclosed on external networks or internal networks can be performed, so as to more accurately identify the leaker and prevent the same leaker from leaking again.

[0147] like Figure 5 The figure shows a schematic diagram of the structure of the document calling server in the embodiment of this invention. In this figure, the functional modules involved in the document calling server completing the confidential document tracing are described, wherein each functional module can be implemented by a dedicated chip or a general chip with a data processing function, or can also be implemented by a functional module formed by a software program, or by a chip and a software program function, specifically including:

[0148] The receiving unit 501 is used to receive a request from a user terminal to call a confidential document;

[0149] An acquisition unit 502 is used to acquire a corresponding confidential document according to the confidential document request;

[0150] The characteristic information unit 503 is used to generate characteristic information of the currently called confidential document according to the request for calling the confidential document;

[0151] A layer generation unit 504, used to generate a transparent layer according to the characteristic information;

[0152] The confidential document copy generating unit 505 is used to merge the confidential document and the transparent layer into a non-editable confidential document copy and send it to the user terminal.

[0153] As an aspect of the embodiment of this article, it also includes a permission unit 506, which is used to confirm whether the user has the authority to call the confidential document based on the user's identity information; when the user has the authority to call the confidential document, obtain the confidential document corresponding to the request to call the confidential document.

[0154] As an aspect of the embodiment of this document, a conversion unit 507 is also included, which is used to convert the confidential document into a non-editable format.

[0155] As one aspect of the embodiments of this document, the feature information unit 503 is further used to generate feature information in the form of a QR code according to the request to call the confidential document.

[0156] As one aspect of the embodiment of this article, the layer generation unit 504 further includes:

[0157] The layer generation module 5041 is used to generate a transparent layer;

[0158] The arrangement module 5042 is used to arrange the characteristic information in the form of a two-dimensional code at a position specified by the transparent layer.

[0159] As one aspect of the embodiment of this article, the layer generation unit 504 further includes:

[0160] An analysis module 5043, used for analyzing the layout information of the confidential document;

[0161] The arrangement module 5042 is further used to arrange the characteristic information in the form of a two-dimensional code at a specified position of the transparent layer relative to the content-free area of ​​the confidential document according to the typesetting information.

[0162] As one aspect of the embodiment of this article, the layer generation unit 504 further includes:

[0163] A splitting module 5044 is used to split the characteristic information in the form of a two-dimensional code into multiple parts;

[0164] The arrangement module 5042 is further used to arrange at least one part of the characteristic information on the transparent layer corresponding to the content-free area of ​​the confidential document according to the coordinate information of the content-free area of ​​the confidential document;

[0165] The recording module 5045 is used to record the coordinate information of the content-free area of ​​the confidential document where the characteristic information of each part is arranged.

[0166] As one aspect of the embodiment of this article, the document calling server also includes:

[0167] A hash calculation unit 508, configured to perform a predetermined hash calculation on the confidential document copy to obtain a corresponding first hash value;

[0168] The storage unit 509 is used to store the correspondence between the confidential document copy and the first hash value.

[0169] Through the document calling server of the above-mentioned embodiment of this article, feature information related to the call can be implanted in the document calling server for the confidential document called by the user, so that each confidential document called by the user can be tracked to ensure the traceability and security of the confidential document.

[0170] like Figure 6 The figure shows a schematic diagram of the structure of the security server of the embodiment of the present invention. In this figure, it is described that the security server obtains public documents from the external network or the internal network, and screens out suspicious confidential document copies that may be confidential, and determines whether the suspicious confidential document copies are confidential document copies. If they are confidential document copies, the feature information embedded in the confidential document copies is parsed, and the relevant information for calling the confidential document can be obtained, so as to obtain the user information of the confidential document copy that is disclosed to the external network or the internal network. All functional units in the security server can be implemented by a dedicated chip or a general chip or a software program, specifically including:

[0171] The document acquisition unit 601 is used to acquire a copy of a suspicious confidential document;

[0172] An identification unit 602 is used to identify whether the suspicious confidential document copy is a confidential document copy;

[0173] The characteristic information acquisition unit 603 is used to acquire characteristic information in the form of a QR code at a specified position of the confidential document copy;

[0174] The parsing unit 604 is used to parse the characteristic information in the form of the QR code to obtain relevant information for calling the copy of the confidential document.

[0175] As one aspect of the embodiment of this document, the document acquisition unit 601 is further used to acquire a public suspicious confidential document in an external network or an internal network according to the document name.

[0176] As one aspect of the embodiment of this article, the security server also includes:

[0177] The hash calculation unit 605 is used to perform a predetermined hash calculation on the suspicious confidential document copy to obtain a corresponding second hash value;

[0178] The comparing unit 606 is configured to compare the second Hash value with a pre-stored first Hash value; if the second Hash value is equal to the first Hash value, the suspicious confidential document copy is a confidential document copy.

[0179] As one aspect of the embodiments of this document, the feature information acquisition unit 603 is further used to acquire the feature information in the form of a QR code according to a specified position of a pre-stored content-free area of ​​the confidential document.

[0180] As one aspect of the embodiment of this document, the feature information acquisition unit 603 is further used to acquire feature information of multiple parts according to the pre-stored coordinate information of the non-content area of ​​the confidential document where each part of the feature information is arranged;

[0181] The feature information acquisition unit 603 further includes a splicing module 6031, which is used to splice the feature information of the multiple parts to obtain the complete feature information in the form of the two-dimensional code.

[0182] As one aspect of the embodiment of this document, the security server further includes a sending unit 607, which is used to send the relevant information to a designated user.

[0183] Through the security server of the above-mentioned embodiment of the present invention, the export of confidential documents can be effectively managed, and detailed operation logs can be provided for analysis and viewing; the writing and extraction of confidential document feature information can be realized, providing strong technical support for file tracing; based on the information related to calling confidential documents obtained from the confidential document copies, risk analysis and display of confidential documents disclosed on external networks or internal networks can be performed, so as to more accurately identify the leaker and prevent the same leaker from leaking again.

[0184] like Figure 7The flowchart of a confidential document tracing method in an embodiment of the present invention is shown. The figure describes the complete process of a user downloading a confidential document in an internal network. In this process, the document calling server adds the characteristic information of the confidential document called this time to the confidential document copy sent to the user. When the user makes the confidential document copy public in an external network or an internal network, the confidential document copy carries the relevant information of the call, such as the user's information, time information, location information, etc., so that in subsequent embodiments, the user who leaked the confidential document copy can be known by identifying the relevant information, thereby realizing the closed-loop tracking and protection of confidential documents, which specifically includes:

[0185] Step 701: An internal user of a company logs into the internal network.

[0186] In this step, the user logs in to the system using a user name and password, where the user name serves as the user identity information.

[0187] Step 702: The user inputs the confidential document that he wants to call.

[0188] In this step, the content input by the user includes the name of the confidential document. It may also include the user authorization code entered when calling the confidential document. The user authorization code is to prevent other users from using the user's username and password to log in to the internal network and impersonate the user to call the confidential document, which can further enhance the security of calling the confidential document.

[0189] As another embodiment, the document calling server may also display a message dialog box requiring the user to enter a personal authorization code. The user enters the authorization code for calling confidential documents in the dialog box, such as a personal pre-stored password, or a personal authorization code pre-assigned to the user by the document calling server. The personal authorization code is different from the login password when the user logs in. This is to prevent other users from logging into the internal network with the user's username and password, and impersonating the user to call confidential documents. This can further ensure that the confidential document calling behavior is performed by the user, which can further enhance the security of calling confidential documents.

[0190] Step 703 , the document calling server determines the user's authority. If the user's authority meets the authority level of the called confidential document, the process proceeds to step 704 , otherwise, the process proceeds to step 715 .

[0191] In this step, the document calling server finds the corresponding authority of the user according to the user name entered by the user when logging in, and obtains the authority level corresponding to the confidential document according to the name of the confidential document entered by the user. If the user authority is greater than or equal to the authority level of the confidential document called by the user, the process proceeds to step 704. If it is less than the authority level of the confidential document called by the user, the process proceeds to step 715 to deny access.

[0192] Step 704: The document calling server obtains the confidential document that the user wants to call.

[0193] In this step, the confidential document is stored in a confidential document database, and the document calling server searches the confidential document to be called in the confidential document database according to the confidential document name input by the user.

[0194] Step 705: The document calling server records the relevant information of the user calling the confidential document.

[0195] In this step, the document calling server records the user name, the IP address of the user terminal used by the user, the time when the user initiates the request to call the confidential document, the location information of the user terminal, and may also include the file name of the called confidential document and other information.

[0196] Step 706: The document calling server converts the confidential document into a non-editable document format.

[0197] In this step, the document calling server may convert the confidential document in word format into a document in jpg format, or may also convert it into a document in PDF format.

[0198] Step 707: The document calling server generates feature information in the form of a QR code based on the relevant information of the confidential document called this time.

[0199] In this step, the document calling server can generate a QR code based on the user name, the name of the confidential document, the time when the user initiated the request to call the confidential document, and the IP address of the user terminal used by the user, obtained in the above step. In other embodiments, the QR code can also be generated based on other confidential document related information.

[0200] Step 708: The document calls the server to split the characteristic information in the form of the QR code into multiple Figure 3c Part of the QR code shown.

[0201] In this step, the document calling server can, for example, split the characteristic information in the form of a QR code into 9 parts of characteristic information, each of which is a partial QR code composed of a dot matrix image. The dot matrix image of each part alone cannot identify the specific content contained therein, that is, the information related to the confidential document. Only after all 9 parts of the QR code are spliced ​​together and identified can the relevant information stored therein for calling the confidential document be obtained.

[0202] Step 709: The document calls the server to analyze the confidential document and obtain the layout information of the confidential document.

[0203] In this step, the OCR technology in the prior art can be used to identify the text area, image area and content-free area in the confidential document. The content-free area refers to the area in the confidential document where there is no document content in the focus area where the text or image is located. For example, the blank area between the text and the image, the blank area between text lines, the blank area between text, the blank area between text columns, and the blank area between text segments and paragraphs in the confidential document.

[0204] Step 710: The document calls the server to form a transparent layer, and arranges all the split feature information in the form of two-dimensional codes in the transparent layer corresponding to the content-free area of ​​the confidential document.

[0205] In this step, the above-mentioned 9 parts of the characteristic information in the form of two-dimensional codes can be arranged in different content-free areas. For example, the characteristic information in the form of two-dimensional codes marked as 1 is arranged in the blank area between the text paragraphs of the confidential document; the characteristic information in the form of two-dimensional codes marked as 2 is arranged in the blank area between the lines of text; the characteristic information in the form of two-dimensional codes marked as 3 is arranged in the blank area between the characters, and so on, all the characteristic information in the form of two-dimensional codes is arranged in the confidential document.

[0206] In another embodiment, each characteristic information in the form of a two-dimensional code may be arranged in a blank area between specific text lines. For example, the characteristic information in the form of a part of the two-dimensional code numbered 1 may be arranged in a blank area between specific text lines. Figure 3d The blank area between the first line of text and the second line of text shown; the partial feature information in the form of a two-dimensional code numbered 2 is arranged in the blank area between the second line of text and the third line of text; the partial feature information in the form of a two-dimensional code numbered 3 is arranged in the blank area between the third line of text and the fourth line of text, and so on, until all the partial feature information in the form of a two-dimensional code is arranged.

[0207] Step 711: The document calls the server to record the location information of all the characteristic information in the form of the QR code.

[0208] In this step, the document calling server can record the coordinates of the position where each part of the characteristic information in the form of a two-dimensional code is arranged. For example, the coordinates of the characteristic information in the form of a part of the two-dimensional code numbered 1 are x 1 y 1 ; The coordinate of the feature information in the form of a two-dimensional code marked with 2 is x 2 y 2 ; The coordinates of the characteristic information in the form of the part of the QR code marked 3 are x 3 y 3 etc.

[0209] Step 712: The document calls the server to overlay the transparent layer with the non-editable confidential document to form a non-editable copy of the confidential document.

[0210] In this step, since the characteristic information in the form of a QR code on the transparent layer corresponds to the content-free area of ​​the confidential document, the characteristic information in the form of a QR code will not obscure the text or image information of the confidential document, and the resulting copy of the confidential document can be in a non-editable PDF format or jpg format.

[0211] Step 713: The document calling server performs a hash operation on the confidential document copy to obtain a corresponding hash value, and stores the corresponding relationship between the hash value and the confidential document copy.

[0212] In this step, a hash operation may be performed on the confidential document copy using, for example, an MD5 hash operation method to obtain a corresponding hash value.

[0213] Step 714: The document calling server sends a copy of the confidential document to the user terminal.

[0214] Step 715, terminate the confidential document call request.

[0215] At this point, the confidential document tracing method running on the document calling server of the embodiment of this article is completed, and the confidential document called by the user can be implanted with feature information related to the call on the document calling server, so that each confidential document called by the user can be tracked to ensure the traceability and security of the confidential document. Even for ordinary documents, the tracing method of this article is applicable.

[0216] like Figure 8 The flowchart of a confidential document tracing method in an embodiment of the present invention is shown. In this figure, it is described that the security server searches for suspicious confidential document copies on the external network, and parses and identifies the characteristic information in the form of a QR code in the confidential document copy, thereby obtaining the relevant information about calling the confidential document in the confidential document copy, such as the user's information, time information, location information, etc., to achieve closed-loop tracking and protection of confidential documents, specifically including:

[0217] Step 801: The security server searches for suspicious confidential document copies in the external network.

[0218] In this step, the security server uses the names of all confidential documents as keywords to search all documents in the external network. The search can be performed using existing technologies such as semantic recognition and keyword matching. In semantic recognition, the file name of the confidential document can be parsed into multiple synonyms or near-synonyms, and all documents are searched using these synonyms and near-synonyms as keywords. After the suspicious confidential document is found, a copy of the suspicious confidential document is downloaded.

[0219] In step 802, the security server performs a hash operation on the suspicious confidential document copy to obtain a corresponding hash value.

[0220] In this step, the same hash operation method as in step 713 is used to perform a hash operation on the suspicious confidential document copy to obtain a corresponding hash value.

[0221] Step 803 , compare the hash value of the suspicious confidential document copy with the hash value of the stored confidential document copy. If they are the same, proceed to step 804 , otherwise proceed to step 809 .

[0222] In this step, if the hash value of the suspicious confidential document copy is the same as the hash value of the stored confidential document copy, it means that the suspicious confidential document copy is a confidential document copy.

[0223] Step 804: The security server obtains the location information of the arrangement of the characteristic information in the form of a stored QR code from the document calling server.

[0224] Step 805 , the security server obtains part of the characteristic information in the form of a QR code at a designated location of the copy of the confidential document according to the location information of the obtained characteristic information in the form of a QR code.

[0225] In this step, when the position information of the characteristic information in the form of the part of the two-dimensional code numbered 1 is x 1 y 1 , then go to the corresponding position of the confidential document copy to obtain the corresponding partial QR code feature information, and mark it as the QR code feature information of part 1; when the position information of the partial QR code feature information numbered 2 is x 2 y 2 , then go to the corresponding position of the confidential document copy to obtain the characteristic information of the corresponding part in the form of QR code, and mark it as the characteristic information of the QR code form of part 2; and so on, until all the characteristic information in the form of QR code is obtained.

[0226] Step 806: The security server concatenates all the partial feature information in the form of a QR code to form complete feature information in the form of a QR code.

[0227] In this step, the position of each part of the characteristic information in the form of a two-dimensional code is arranged according to the number of the characteristic information in the form of a two-dimensional code of each part obtained. For example, the characteristic information in the form of a two-dimensional code of part 1 is arranged at the leftmost position of the first line of the two-dimensional code, the characteristic information in the form of a two-dimensional code of part 2 is arranged at the middle position of the first line of the two-dimensional code, and the characteristic information in the form of a two-dimensional code of part 3 is arranged at the rightmost position of the first line of the two-dimensional code, and so on, until the complete characteristic information in the form of a two-dimensional code is obtained by splicing.

[0228] Step 807: The security server identifies the relevant information for calling the confidential document stored in the characteristic information in the form of the QR code.

[0229] In this step, the security server parses the characteristic information in the form of a QR code to obtain the user name of the user who calls the confidential document, the file name of the confidential document, the time when the user initiated the request to call the confidential document, and the IP address of the user terminal used by the user.

[0230] Step 808: The security server sends the parsed information about the calling confidential document to the system administrator.

[0231] Thus, the system administrator can remind the user who leaked the confidential document, or perform other related operations.

[0232] Step 809, obtaining a copy of the next confidential document from an external network, and returning to step 801.

[0233] Through the confidential document tracing method running on the security server in the above-mentioned embodiment of the present invention, the export of confidential documents can be effectively managed, and detailed operation logs can be provided for analysis and viewing; the writing and extraction of confidential document feature information can be realized, providing strong technical support for file tracing; based on the information related to calling confidential documents obtained from the confidential document copies, risk analysis and display of confidential documents disclosed on external networks or internal networks can be performed, so as to more accurately identify the leaker and avoid the same leaker from leaking again.

[0234] like Fig. 9The structure diagram of the document calling server or security server of the embodiment of this article is shown. The document calling server and the security server in this article can be run in the computing device in this embodiment. The computing device 902 may include one or more processing devices 904, such as one or more central processing units (CPUs), and each processing unit may implement one or more hardware threads. The computing device 902 may also include any storage resource 906, which is used to store any kind of information such as code, settings, data, etc. Non-limiting, for example, the storage resource 906 may include any one or more combinations of the following: any type of RAM, any type of ROM, flash memory device, hard disk, optical disk, etc. More generally, any storage resource can use any technology to store information. Further, any storage resource can provide volatile or non-volatile retention of information. Further, any storage resource can represent a fixed or removable component of the computing device 902. In one case, when the processing device 904 executes an associated instruction stored in any storage resource or a combination of storage resources, the computing device 902 can perform any operation of the associated instruction. The computing device 902 also includes one or more drive mechanisms 908 for interacting with any storage resources, such as a hard disk drive mechanism, an optical disk drive mechanism, and the like.

[0235] The computing device 902 may also include an input / output module 910 (I / O) for receiving various inputs (via input devices 912) and for providing various outputs (via output devices 914). One specific output mechanism may include a presentation device 916 and an associated graphical user interface (GUI) 918. The computing device 902 may also include one or more network interfaces 920 for exchanging data with other devices via one or more communication links 922. One or more communication buses 924 couple the components described above together.

[0236] The communication link 922 may be implemented in any manner, for example, through a local area network, a wide area network (e.g., the Internet), a point-to-point connection, etc., or any combination thereof. The communication link 922 may include any combination of hardwired links, wireless links, routers, gateway functions, name servers, etc. governed by any protocol or combination of protocols.

[0237] The embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program:

[0238] Receiving a request from a user terminal to call a confidential document;

[0239] Obtaining corresponding confidential documents according to the confidential document request;

[0240] Generate characteristic information of the currently called confidential document according to the request for calling the confidential document;

[0241] Generate a transparent layer according to the characteristic information;

[0242] The confidential document and the transparent layer are combined into a non-editable confidential document copy and sent to the user terminal.

[0243] The computer device provided in the embodiments of this invention can also implement the following Figure 2 , Figure 3a-3d , Figure 7 All methods of the embodiments shown.

[0244] Corresponds to Figure 2 , Figure 3a-3d , Figure 7 The method in this article also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above method are executed.

[0245] The embodiment of the present invention also provides a computer readable instruction, wherein when the processor executes the instruction, the program therein causes the processor to execute the following Figure 2 , Figure 3a-3d , Figure 7 All methods of the embodiments shown.

[0246] The embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program:

[0247] Obtain copies of suspected confidential documents;

[0248] Identify whether the suspected confidential document copy is a confidential document copy;

[0249] Obtain characteristic information in the form of a QR code at a specified location on a copy of a confidential document;

[0250] Parse the characteristic information in the form of the QR code to obtain relevant information for calling the copy of the confidential document.

[0251] The computer device provided in the embodiments of this invention can also implement the following Figure 3a-3d , Figure 4 , Figure 8 All methods of the embodiments shown.

[0252] Corresponds to Figure 3a-3d , Figure 4 , Figure 8The method in this article also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above method are executed.

[0253] The embodiment of the present invention also provides a computer readable instruction, wherein when the processor executes the instruction, the program therein causes the processor to execute the following Figure 3a-3d , Figure 4 , Figure 8 All methods of the embodiments shown.

[0254] It should be understood that in the various embodiments of this document, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this document.

[0255] It should also be understood that in the embodiments of this article, the term "and / or" is only a description of the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0256] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this article.

[0257] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0258] In the several embodiments provided herein, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or can be electrical, mechanical or other forms of connection.

[0259] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of this article.

[0260] In addition, each functional unit in each embodiment of this invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or in the form of software functional unit.

[0261] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this article is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of this article. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0262] Specific embodiments are used in this article to illustrate the principles and implementation methods of this article. The description of the above embodiments is only used to help understand the methods and core ideas of this article. At the same time, for general technicians in this field, according to the ideas of this article, there will be changes in the specific implementation methods and application scopes. In summary, the content of this specification should not be understood as a limitation on this article.

Claims

1. A method for tracing the source of confidential documents. Features include, Receiving a request from a user terminal to call a confidential document; Obtaining corresponding confidential documents according to the confidential document request; Generate characteristic information of the currently called confidential document according to the request for calling the confidential document; Generate a transparent layer according to the characteristic information; Merging the confidential document and the transparent layer into a non-editable confidential document copy and sending the copy to the user terminal; Generating characteristic information of the current call of the confidential document according to the request for calling the confidential document further includes generating characteristic information in the form of a QR code according to the request for calling the confidential document; splitting the characteristic information in the form of a QR code into multiple parts; Generating a transparent layer based on the characteristic information further includes analyzing the layout information of the confidential document; arranging at least one portion of the characteristic information in the form of a QR code on the corresponding transparent layer based on the coordinate information of the content-free area between paragraphs, lines or characters in the confidential document in the layout information, and recording the coordinate information of the content-free area of ​​the confidential document where each portion of the characteristic information is arranged.

2. The method according to claim 1, It is characterized in that After receiving the request for calling the confidential document from the user terminal, the method further includes confirming whether the user has the authority to call the confidential document according to the user's identity information; when the user has the authority to call the confidential document, obtaining the confidential document corresponding to the request for calling the confidential document.

3. The method according to claim 1, It is characterized in that After obtaining the corresponding confidential document according to the confidential document request, further comprising: Convert the confidential document into a non-editable format.

4. The method according to claim 1, It is characterized in that After merging the confidential document and the transparent layer into a non-editable confidential document copy and sending it to the user terminal, the method further includes: Performing a predetermined hash calculation on the confidential document copy to obtain a corresponding first hash value; The first hash value corresponding to the confidential document copy is stored.

5. A method for tracing the source of confidential documents. Features include, Obtaining a copy of a suspicious confidential document; wherein the copy of the suspicious confidential document is generated by the method described in any one of claims 1 to 4; Identify whether the suspected confidential document copy is a confidential document copy; Acquire all feature information in the form of two-dimensional codes that are split into multiple parts according to the coordinate information of the content-free areas between segments, lines or characters of the confidential document stored in advance; Parse all the characteristic information in the form of the QR code that is split into multiple parts, and obtain relevant information for calling the copy of the confidential document.

6. The method according to claim 5, It is characterized in that Obtaining a copy of a suspected confidential document further includes: Obtain publicly available suspicious confidential documents from external or internal networks based on the document name.

7. The method according to claim 5, It is characterized in that The step of identifying whether the suspected confidential document copy is a confidential document copy further includes: Performing a predetermined hash calculation on the suspicious confidential document copy to obtain a corresponding second hash value; The second Hash value is compared with the pre-stored first Hash value; if the second Hash value is equal to the first Hash value, the suspicious confidential document copy is a confidential document copy.

8. The method according to claim 5, It is characterized in that The information related to calling the confidential document copy is obtained, including user information, calling time information, calling location information, and user terminal information used when calling the confidential document to form a corresponding confidential document copy.

9. The method according to claim 5, It is characterized in that After parsing the characteristic information in the form of the QR code and obtaining the relevant information for calling the copy of the confidential document, the following further includes: The relevant information is sent to a designated user.

10. A document calling server, Features include, A receiving unit, used to receive a request from a user terminal to call a confidential document; An acquisition unit, configured to acquire a corresponding confidential document according to the confidential document request; A feature information unit, used to generate feature information of the currently called confidential document according to the request for calling the confidential document; A layer generation unit, used for generating a transparent layer according to the characteristic information; A confidential document copy generating unit, used for merging the confidential document and the transparent layer into a non-editable confidential document copy and sending the copy to the user terminal; The characteristic information unit is further used to generate characteristic information in the form of a QR code according to the request for calling the confidential document; and split the characteristic information in the form of a QR code into multiple parts; The layer generation unit is further used to analyze the layout information of the confidential document; and arrange at least one partial feature information in the form of a QR code on the corresponding transparent layer according to the coordinate information of the content-free area between paragraphs, lines or characters of the confidential document in the layout information.

11. A secure server, Features include, A document acquisition unit, used to acquire a copy of a suspicious confidential document; wherein the copy of the suspicious confidential document is generated by the document calling server according to claim 10; An identification unit, used to identify whether the suspicious confidential document copy is a confidential document copy; A feature information acquisition unit, used to acquire feature information in the form of a two-dimensional code that is split into multiple parts according to the coordinate information of the content-free area between segments, lines or characters of the confidential document stored in advance; The parsing unit is used to parse all the characteristic information in the form of the two-dimensional code that is split into multiple parts, and obtain the relevant information for calling the copy of the confidential document.

12. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, It is characterized in that When the processor executes the computer program, the method according to any one of claims 1 to 9 is implemented.

13. A computer-readable storage medium, It is characterized in that The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method of any one of claims 1 to 9 is executed.

Images