File distribution processing method and device, storage medium, and terminal

Abstract

The present invention discloses a file distribution processing method and device, storage medium, and terminal, relating to the field of network security technology. Its primary purpose is to address the low efficiency of existing file distribution. The method comprises: configuring the execution of at least one file distribution task within a target system service process, the target system service process being a system process providing system security services; upon receiving a target file distribution task, invoking the target system service process; and executing the corresponding operation of the target file distribution task via the target system service process to load and execute the distribution file for the target file distribution task. The method is primarily used for file distribution processing.

Description

Technical Field

[0001] The present invention relates to the technical field of network security, and in particular to a method and device for processing file distribution, a storage medium, and a terminal. Background Art

[0002] In order to meet the security protection needs of Internet users on terminal devices, the server will send files with different functions to each terminal device, and then perform software installation, configuration item modification, vulnerability repair and other operations on the terminal device based on the sent files to provide security protection for the terminal device.

[0003] Currently, file distribution requires the terminal device to load the file while the user is logged in. Furthermore, different software execution permissions can receive different distributed files, thereby ensuring file security. However, when unlogged-in user terminals or low-privilege user terminals are unable to implement security protection and, consequently, are unable to receive the required files, this can severely impact the terminal device's network security, reducing the efficiency of executing network security tasks and significantly reducing file distribution efficiency. Summary of the Invention

[0004] In view of this, the present invention provides a method and device for processing file distribution, a storage medium, and a terminal, the main purpose of which is to solve the problem of low efficiency of existing file distribution.

[0005] According to one aspect of the present invention, a method for processing file distribution is provided, comprising:

[0006] configuring the operation content of executing at least one file distribution task in a target system service process, wherein the target system service process is a system process that provides system security services;

[0007] When receiving a target file distribution task, calling the target system service process;

[0008] The target system service process executes the operation content corresponding to the target file distribution task to load and run the distribution file of the target file distribution task.

[0009] Furthermore, configuring the operation content of executing at least one file distribution task in the target system service process includes:

[0010] Obtaining distribution operation contents with different distribution attributes, and splitting the distribution operation contents to obtain operation contents corresponding to executing at least one file distribution task and operation contents corresponding to executing at least one software distribution task after the splitting, wherein the distribution attributes include file distribution and software distribution;

[0011] Storing the operation content corresponding to the execution file distribution task in a system file with independent attributes, and configuring the system file in the target system service process;

[0012] The operation content corresponding to the execution of the software distribution task is stored in an original file corresponding to the distribution operation content.

[0013] Furthermore, the step of storing the operation content corresponding to the execution of the file distribution task in a system file with independent attributes includes:

[0014] Obtain the software running permissions corresponding to the execution of the file distribution task, which include standard user permissions, management account permissions, system permissions, and security service permissions;

[0015] If the software running permission matches the preset running permission, the operation content of executing the file distribution task corresponding to the software running permission is stored in a system file with independent attributes.

[0016] Furthermore, the calling of the target system service process includes:

[0017] If the user status is detected as not logged in, calling the target system service process; and / or,

[0018] If the detected software running permission matches the preset running permission, calling the target system service process;

[0019] The operation content corresponding to executing the target file distribution task through the target system service process includes:

[0020] Extracting the system file from the target system service process;

[0021] The operation content for executing the target file distribution task is determined in the system file, and the operation content is executed in the target system service process to load and run the target distribution file of the target file distribution task.

[0022] Furthermore, determining the operation content for executing the target file distribution task in the system file, and executing the operation content in the target system service process to load and run the target distribution file of the target file distribution task includes:

[0023] Obtaining the running program version, running environment, and running security features of the target distribution file;

[0024] extracting sub-operation content corresponding to executing the target file distribution task from the system file according to the running program version, the running environment, and the running security feature, wherein the system file stores operation content including multiple sub-operation contents;

[0025] The target distribution file of the target file distribution task is loaded and executed in the target system service process based on the sub-operation content.

[0026] Furthermore, after executing the operation content corresponding to the target file distribution task through the target system service process, the method further includes:

[0027] Detecting whether the configuration file information and / or registry information corresponding to executing the target file distribution task matches a preset file execution condition;

[0028] If the configuration file information and / or the registry information matches the preset file execution condition, the file task distribution result is sent to the server to indicate that the file distribution task of the distributed file is completed.

[0029] Furthermore, after executing the operation content corresponding to the target file distribution task through the target system service process, the method further includes:

[0030] Detecting whether the loaded target distribution file matches the system security operation requirements, where the system security operation requirements include at least one of system file execution security content, operation behavior execution security content, and storage space operation security content;

[0031] If the loaded target distribution file does not match the system's safe operation requirements, a file distribution task request is sent to the server, and the file distribution task request carries the system's safe operation requirements, so that the server determines the distribution file based on the system's safe operation requirements.

[0032] According to another aspect of the present invention, a file distribution processing device is provided, comprising:

[0033] a configuration module, configured to configure the operation content of executing at least one file distribution task in a target system service process, wherein the target system service process is a system process that provides system security services;

[0034] A calling module, configured to call the target system service process when receiving a target file distribution task;

[0035] An execution module is used to execute the operation content corresponding to the target file distribution task through the target system service process to load the distribution file for running the target file distribution task.

[0036] Furthermore, the configuration module includes:

[0037] an acquiring unit, configured to acquire distribution operation contents with different distribution attributes, and split the distribution operation contents to obtain operation contents corresponding to executing at least one file distribution task and operation contents corresponding to executing at least one software distribution task after the splitting, wherein the distribution attributes include file distribution and software distribution;

[0038] A first storage unit is configured to store the operation content corresponding to the execution file distribution task in a system file with independent attributes, and configure the system file in the target system service process;

[0039] The second storage unit is used to store the operation content corresponding to the execution of the software distribution task in an original file corresponding to the distribution operation content.

[0040] Furthermore, the first storage unit includes:

[0041] An acquisition subunit is used to obtain the software running permissions corresponding to the execution of the file distribution task, wherein the software running permissions include standard user permissions, management account permissions, system permissions, and security service permissions;

[0042] The storage subunit is used to store the operation content of executing the file distribution task corresponding to the software running permission in a system file with independent attributes if the software running permission matches the preset running permission.

[0043] Furthermore, the calling module is specifically configured to call the target system service process if the user status is detected as not logged in; and / or call the target system service process if the software running permission is detected to match the preset running permission;

[0044] The execution module includes:

[0045] An extraction unit, configured to extract the system file from the target system service process;

[0046] The execution unit is used to determine the operation content of executing the target file distribution task in the system file, and execute the operation content in the target system service process to load and run the target distribution file of the target file distribution task.

[0047] Furthermore, the execution unit is specifically used to obtain the running program version, running environment, and running security features of the target distribution file; extract the sub-operation content corresponding to executing the target file distribution task from the system file according to the running program version, the running environment, and the running security features, and the system file stores operation content containing multiple sub-operation contents; and load and run the target distribution file of the target file distribution task based on the sub-operation content in the target system service process.

[0048] Furthermore, the device further comprises:

[0049] A detection module, configured to detect whether configuration file information and / or registry information corresponding to executing the target file distribution task matches a preset file execution condition;

[0050] The sending module is used to send the file task distribution result to the server if the configuration file information and / or the registry information matches the preset file execution condition, so as to indicate the completion of the file distribution task of the distribution file.

[0051] Furthermore, the detection module is further configured to detect whether the loaded target distribution file matches the system security operation requirements, wherein the system security operation requirements include at least one of system file execution security content, operation behavior execution security content, and storage space operation security content;

[0052] The sending module is also used to send a file distribution task request to the server if the loaded and running target distribution file does not match the system's safe operation requirements. The file distribution task request carries the system's safe operation requirements, so that the server determines the distribution file based on the system's safe operation requirements.

[0053] According to another aspect of the present invention, a storage medium is provided, wherein the storage medium stores at least one executable instruction, and the executable instruction enables a processor to execute operations corresponding to the above-mentioned file distribution processing method.

[0054] According to another aspect of the present invention, there is provided a terminal, comprising: a processor, a memory, a communication interface, and a communication bus, wherein the processor, the memory, and the communication interface communicate with each other via the communication bus;

[0055] The memory is used to store at least one executable instruction, and the executable instruction enables the processor to execute operations corresponding to the above-mentioned file distribution processing method.

[0056] By means of the above technical solution, the technical solution provided by the embodiment of the present invention has at least the following advantages:

[0057] The present invention provides a method and device for processing file distribution, a storage medium, and a terminal. Compared with the prior art, an embodiment of the present invention configures the operation content of executing at least one file distribution task in a target system service process, and the target system service process is a system process that provides system security services; when a target file distribution task is received, the target system service process is called; the operation content corresponding to the target file distribution task is executed by the target system service process to load and run the distribution file of the target file distribution task, thereby realizing effective distribution of files under different user permissions and user states, meeting the file distribution requirements under the system security service, and thus improving the file distribution efficiency of the terminal for network security tasks.

[0058] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are specifically listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] Various other advantages and benefits will become apparent to those skilled in the art upon reading the detailed description of the preferred embodiment below. The accompanying drawings are for illustration purposes only and are not to be considered as limiting the present invention. The same reference symbols are used throughout the drawings to represent the same components. In the drawings:

[0060] Figure 1 A flow chart of a method for processing file distribution provided by an embodiment of the present invention is shown;

[0061] Figure 2 A flow chart of another method for processing file distribution provided by an embodiment of the present invention is shown;

[0062] Figure 3 A schematic diagram of a file distribution task execution process provided by an embodiment of the present invention is shown;

[0063] Figure 4 A flow chart of another method for processing file distribution provided by an embodiment of the present invention is shown;

[0064] Figure 5 A flow chart of another method for processing file distribution provided by an embodiment of the present invention is shown;

[0065] Figure 6 A flowchart of a method for processing file distribution provided by an embodiment of the present invention is shown;

[0066] Figure 7 A block diagram showing the composition of a file distribution processing device provided by an embodiment of the present invention is shown;

[0067] Figure 8 A schematic structural diagram of a terminal provided by an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0068] Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0069] For file distribution, the terminal device needs to be loaded under the premise of user login. At the same time, the distributed files that can be received by different users with different permissions are different, so as to provide security protection for the files. However, when the user terminal that is not logged in or the user terminal with low permissions cannot perform security protection and thus cannot receive the required files, it will seriously affect the network security of the terminal device, thereby reducing the execution efficiency of the network security tasks of the terminal device and greatly reducing the efficiency of file distribution. The embodiment of the present invention provides a processing method for file distribution, such as Figure 1 As shown, the method includes:

[0070] 101. Configure the operation content of executing at least one file distribution task in the target system service process.

[0071] In an embodiment of the present invention, the current execution end serves as a terminal that receives the distribution file sent by the server for loading and installation, including but not limited to computers, mobile communication devices and other terminal devices. Correspondingly, before executing the file distribution task, the current execution end configures the operation content of executing the file distribution task in the target system service process. Among them, the file distribution task is the task of the current execution end to load the distribution file sent by the server. At this time, the operation content is the specific program or code for loading and running the distribution file corresponding to the execution file distribution task, which can be achieved by storing it in a system module in the form of a system file. The embodiment of the present invention does not make specific limitations. In addition, the target system service process is a system process that provides system security services. Specifically, the system security service is a service that provides security protection for the computer system, including but not limited to virus protection, abnormality detection and elimination, system repair and other service contents. Under the target system service process that provides system security services, security protection can be performed on the distribution files of any file distribution task, thereby eliminating the need to verify whether the user is logged in or has the corresponding authority. Among them, the system security service can be obtained by loading and installing the terminal security management application in the current execution end. During the execution process, the terminal security management application separately generates a target system service process at the system layer as a system process that provides system security services. For example, the TianQing client is loaded and installed on the current terminal. At this time, the TianQing client provides the TianQing service process to the system layer as the target system service process, and configures the operation content of the file distribution task in the TianQing service process.

[0072] It should be noted that since the distribution files corresponding to the file distribution tasks are different, the corresponding operation contents may be different. Therefore, when configuring the operation contents in the target system service process, the operation contents of each file distribution task are configured separately in the target system service process so that when different file distribution tasks are received, the corresponding operation contents are executed. The embodiment of the present invention does not make specific limitations.

[0073] 102. When a target file distribution task is received, the target system service process is called.

[0074] In an embodiment of the present invention, when the current execution end receives the target file distribution task issued by the server end, it directly calls the target system service process. At this time, since the target system service process provides a system security service, regardless of whether the user status of the current execution end is logged in, and regardless of the level of software running permissions of the current execution end, the distribution file can be loaded and run through the system security service to ensure the efficiency and security of the distribution file.

[0075] 103. Execute the operation content corresponding to the target file distribution task through the target system service process.

[0076] In an embodiment of the present invention, after reaching the target system service program, the operation content corresponding to the target file distribution task is executed based on the target system service program to load and run the distribution file of the target file distribution task, thereby realizing the loading and running of the distribution file without logging in or at different software running levels, greatly increasing the efficiency of file distribution.

[0077] In another embodiment of the present invention, in order to further define and illustrate, as Figure 2 As shown, step 101 configures the operation content of executing at least one file distribution task in the target system service process, including:

[0078] 201. Obtain distribution operation contents with different distribution attributes, and split the distribution operation contents to obtain operation contents corresponding to executing at least one file distribution task and operation contents corresponding to executing at least one software distribution task after the splitting.

[0079] 202. Storing the operation content corresponding to the execution file distribution task in a system file with independent attributes, and configuring the system file in the target system service process;

[0080] 203. Store the operation content corresponding to the execution of the software distribution task in an original file corresponding to the distribution operation content.

[0081] In an embodiment of the present invention, in order to meet the effectiveness requirements of file distribution, distribution operation contents with different distribution attributes are obtained, thereby splitting the operation contents corresponding to the file distribution task to configure the target system service process. Among them, the distribution attributes include file distribution and software distribution. Therefore, the distribution operation contents of the specific program or code that can be loaded and run are split to obtain the operation contents corresponding to the file distribution task and the operation contents corresponding to the software distribution task. Specifically, in an embodiment of the present invention, the distribution operation contents are system modules of the distribution function. After file distribution and software distribution, the operation contents corresponding to the execution of the file distribution task are stored in a system file with independent attributes. At this time, the system file with independent attributes is a system file that stores the operation contents in an independent module according to the file distribution function, such as EntSoftwareDistSvc.ext. This system file is configured with the target system service process, so that the target system service process loads the operation contents in this system file and runs it.

[0082] In addition, in an embodiment of the present invention, for the operation content corresponding to the execution of the software distribution task, since the software distribution task is highly targeted, after the operation content corresponding to the software distribution task is split, it will still be stored in the original file EntSoftwareDist.ext corresponding to the distribution operation content, so that the software distribution task still relies on the user's login or authority to execute the distribution.

[0083] It should be noted that if Figure 3 As shown, after the distribution operation content is split, the operation content corresponding to the file distribution task and the operation content corresponding to the software distribution task are obtained and stored separately. For example, the operation content corresponding to the file distribution task is cached in the system file FileDistTask.json. When the current execution end is restarted, this operation content can be cached in the FileInstallOnRestart.dat system file. Correspondingly, the operation content corresponding to the software distribution task is cached in the original file SoftwareDistTask.json. When the current execution end is restarted, this operation content can be cached in the InstallSoftListOnRestart.dat original file to ensure that the operation content is not lost.

[0084] In another embodiment of the present invention, in order to further define and illustrate, as Figure 4 As shown, step 202 stores the operation content corresponding to the execution file distribution task in a system file with independent attributes, including:

[0085] 2021. Obtain the software execution permissions corresponding to the file distribution task;

[0086] 2022. If the software running permission matches the preset running permission, the operation content of executing the file distribution task corresponding to the software running permission is stored in a system file with independent attributes.

[0087] Specifically, in order to achieve the purpose of elevating the software running permissions, since the file distribution can be directly executed in the target system service process based on the configuration, the operation content is stored in the system file with independent attributes. Therefore, when storing the operation content in the system file, it can be specifically judged according to the software running permissions and the preset running permissions, so as to determine that the operation content corresponding to the software running permissions is stored in the system file with independent attributes. Among them, the software running permissions include standard user permissions, management account permissions, system permissions, and security service permissions, that is, different levels of permissions for software operation after the user logs in. In the embodiment of the present invention, the standard user permissions are lower than the management account permissions, the management account permissions are lower than the system permissions, and the system permissions are lower than the security service permissions TrustInstaller. At this time, the standard user permissions are the permissions for performing standard or basic operations, the management account permissions are the permissions for performing management operations on various applications, the system permissions are the permissions for performing system-level operations, and the full service permissions TrustInstaller are system update and patch update permissions. In order to achieve the purpose of distributing files to elevate the software running permissions, the preset running permissions for elevating permissions are pre-determined so that the software running permissions corresponding to the operation content for executing the file distribution task are stored in the system file with independent attributes. For example, the preset running permissions are standard user permissions, management account permissions, and system permissions. At this time, if the software running permissions corresponding to the current execution end executing the file distribution task are management account permissions, the operation content of the execution file distribution task corresponding to the management account permissions is directly stored in a system file with independent attributes. After the system file is configured with the target system service process, the execution file distribution task is directly called to achieve low-level permissions to run the distribution file software with high-level permissions.

[0088] In another embodiment of the present invention, for further limitation and explanation, step 102 of calling the target system service process includes: if the user status is detected as not logged in, calling the target system service process; and / or, if the software running permissions are detected to match the preset running permissions, calling the target system service process.

[0089] After completing the configuration of the target system service process, in one implementation scenario, upon receiving the target file distribution task from the server, the current execution end checks whether the user is logged in and / or whether the software's execution permissions match the preset execution permissions, thereby determining whether to call the target service process. If the user is not logged in, the target system service process is directly called. If the user is logged in and the software's execution permissions match the preset execution permissions, such as administrative account permissions, the target system service process is called.

[0090] Correspondingly, for further limitation and explanation, step 103 includes the following operations corresponding to executing the target file distribution task through the target system service process: extracting the system file from the target system service process; determining the operation content of executing the target file distribution task in the system file, and executing the operation content in the target system service process to load and run the target distribution file of the target file distribution task.

[0091] Specifically, since the operation content is the specific program or code for loading and running the distribution file corresponding to the execution file distribution task, after determining to call the target system service process, the target system service process summarizes and extracts the system files, and determines the operation content for executing the target file distribution task, so as to execute the operation content in the target system service process to load and run the target distribution file of the target file distribution task, that is, load the distribution file and run it.

[0092] It should be noted that since the user status or software running permissions have been determined, the target system service process is called. Correspondingly, in the embodiment of the present invention, the distribution file can be directly loaded and run, so that under the corresponding software running permissions, the file distribution task can be achieved regardless of whether logged in or not.

[0093] In another embodiment of the present invention, in order to further limit and explain, the step of determining the operation content of executing the target file distribution task in the system file, and executing the operation content in the target system service process to load and run the target distribution file of the target file distribution task includes: obtaining the running program version, running environment, and running security features of the target distribution file; extracting the sub-operation content corresponding to executing the target file distribution task from the system file according to the running program version, the running environment, and the running security features; and loading and running the target distribution file of the target file distribution task based on the sub-operation content in the target system service process.

[0094] In order to achieve accurate operation of the operation content in the target system service process, specifically, the operating program version, operating environment, and operating security features of the target distribution file are obtained, thereby extracting the sub-operation content in the operation content. Among them, the system file stores the operation content containing multiple sub-operation contents. Different operating program versions, operating environments, and operating security features match different sub-operation contents, thereby making the loading and operation of the target distribution file more accurate and safe. The operating program version is the program version loaded and run by different distribution files. Different operating program versions require different operation contents to execute. The operating environment is the system environment loaded and run by different distribution files, including but not limited to window10, windowxp, etc. Different operating environments require different operation contents to execute. The operating security features are the feature contents for security protection of distribution files, including but not limited to virus detection and system repair, etc. Different operating security features require different operation contents to execute. The embodiment of the present invention does not make specific limitations.

[0095] It should be noted that, since different running program versions, running environments, and running security features require different operation contents for execution, when splitting the distribution operation content, the operation content corresponding to the file distribution task can be further split into multiple matching sub-operation contents according to the running program version, running environment, and running security features, so as to extract the sub-operation content corresponding to the execution file distribution task from the system file according to the running program version, running environment, and running security features, so as to load and run the target distribution file of the target file distribution task based on the sub-operation content in the target system service process, thereby greatly improving the efficiency and security of executing the target distribution file.

[0096] In another embodiment of the present invention, in order to further define and illustrate, as Figure 5 As shown, after step 103 executes the operation content corresponding to the target file distribution task through the target system service process, the method further includes:

[0097] 301. Detect whether configuration file information and / or registry information corresponding to executing the target file distribution task matches a preset file execution condition;

[0098] 302. If the configuration file information and / or the registry information matches the preset file execution condition, the file task distribution result is sent to the server to indicate that the file distribution task of distributing the file is completed.

[0099] In the embodiment of the present invention, in order to determine whether the target file distribution task is completed, the target file distribution task is reported to the server so that the server can confirm the accurate distribution execution of the file distribution. Figure 3As shown, after executing the operation content corresponding to the target file distribution task in the target system service process, the configuration file information and / or registry information corresponding to the target file distribution task are detected to see if they match the preset file execution conditions, as a basis for judging whether the target file distribution task has been completed. Among them, the configuration file information includes but is not limited to the version number, file content, etc., and the registry information includes but is not limited to the registry value, registry key, etc. The corresponding preset file execution conditions are whether the pre-defined configuration file information exists and whether the registry information exists, so that when the configuration file information and / or registry information match the preset file execution conditions, it is determined that the target file distribution task has been completed. When the configuration file information and / or registry information match the preset file execution conditions and it is determined that the file distribution task has been completed, a file task distribution result is generated and sent to the server to indicate that the server has completed the file distribution task.

[0100] It should be noted that, in Figure 3 In the flowchart shown, after receiving the file distribution task, the current execution end obtains the operation content to be executed from the files FileDistTask.json, FileInstallOnRestart.dat, SoftwareDistTask.json, and InstallSoftListOnRestart.dat, executes it in the called target system service process, caches the file distribution task to be loaded and run in the EntSoftwareDistSvc.ext file, and caches the software distribution task to be loaded and run in the EntSoftwareDist.ext file, so that the target system service process can be started to load and run the file distribution task when the user permissions or software execution permissions match. Finally, the loaded and run data is cached in EntSoftwareDistSvc.ext or EntSoftwareDist.ext, so that when executing the step of detecting whether the configuration file information and / or registry information corresponding to the target file distribution task match the preset file execution condition, the configuration file information and / or registry information corresponding to the target file distribution task can be extracted.

[0101] In another embodiment of the present invention, in order to further define and illustrate, as Figure 6 As shown, after step 103 executes the operation content corresponding to the target file distribution task through the target system service process, the method further includes:

[0102] 401. Check whether the loaded target distribution file matches the system's security operation requirements;

[0103] 402. If the loaded target distribution file does not match the system's safe operation requirements, a file distribution task request is sent to the server.

[0104] In an embodiment of the present invention, since the distribution file can be a program file generated by the server and used to repair or operate the terminal device system, in order to improve the accuracy of the file distribution task and avoid the situation where the current execution end system is invalid during the process of loading and running the distribution file, it is detected whether the target distribution file loaded and run to complete the execution of the operation content matches the system's safe operation requirements, so as to determine whether to re-send the file distribution task request to the server. Among them, the system safe operation requirements include at least one of the system file execution security content, the operation behavior execution security content, and the storage space operation security content. The system file execution security content is used to characterize the specific system file content required in the process of executing security protection services, the operation behavior execution security content is used to characterize the specific operation behavior content required in the process of executing security protection services, and the storage space operation security content is used to characterize the specific storage space content required in the process of executing security protection services. Then, when matching whether the target distribution file matches the system safe operation requirements, it is judged in turn whether at least one of the system file execution security content, the operation behavior execution security content, and the storage space operation security content matches the content loaded and executed by the target distribution file. If there is no match, it means that the target distribution file cannot meet the system security protection requirements in the current execution end. Then, the file distribution task request can be resent to the server end. At this time, the file distribution task request carries the system safe operation requirements, so that the server end determines the distribution file based on the system safe operation requirements.

[0105] An embodiment of the present invention provides a method for processing file distribution. Compared with the prior art, the embodiment of the present invention configures the operation content of executing at least one file distribution task in a target system service process, and the target system service process is a system process that provides system security services; when a target file distribution task is received, the target system service process is called; the operation content corresponding to the target file distribution task is executed by the target system service process to load and run the distribution file of the target file distribution task, thereby realizing effective distribution of files under different user permissions and user states, meeting the file distribution requirements under the system security service, and thus improving the file distribution efficiency of the terminal for network security tasks.

[0106] Furthermore, as a response to the above Figure 1 The embodiment of the present invention provides a file distribution processing device, such as Figure 7 As shown, the device includes:

[0107] A configuration module 51 is configured to configure the operation content of executing at least one file distribution task in a target system service process, wherein the target system service process is a system process that provides system security services;

[0108] The calling module 52 is used to call the target system service process when receiving the target file distribution task;

[0109] The execution module 53 is configured to execute the operation content corresponding to the target file distribution task through the target system service process, so as to load the distribution file for running the target file distribution task.

[0110] Furthermore, the configuration module includes:

[0111] an acquiring unit, configured to acquire distribution operation contents with different distribution attributes, and split the distribution operation contents to obtain operation contents corresponding to executing at least one file distribution task and operation contents corresponding to executing at least one software distribution task after the splitting, wherein the distribution attributes include file distribution and software distribution;

[0112] A first storage unit is configured to store the operation content corresponding to the execution file distribution task in a system file with independent attributes, and configure the system file in the target system service process;

[0113] The second storage unit is used to store the operation content corresponding to the execution of the software distribution task in an original file corresponding to the distribution operation content.

[0114] Furthermore, the first storage unit includes:

[0115] An acquisition subunit is used to obtain the software running permissions corresponding to the execution of the file distribution task, wherein the software running permissions include standard user permissions, management account permissions, system permissions, and security service permissions;

[0116] The storage subunit is used to store the operation content of executing the file distribution task corresponding to the software running permission in a system file with independent attributes if the software running permission matches the preset running permission.

[0117] Furthermore, the calling module is specifically configured to call the target system service process if the user status is detected as not logged in; and / or call the target system service process if the software running permission is detected to match the preset running permission;

[0118] The execution module includes:

[0119] An extraction unit, configured to extract the system file from the target system service process;

[0120] The execution unit is used to determine the operation content of executing the target file distribution task in the system file, and execute the operation content in the target system service process to load and run the target distribution file of the target file distribution task.

[0121] Furthermore, the execution unit is specifically used to obtain the running program version, running environment, and running security features of the target distribution file; extract the sub-operation content corresponding to executing the target file distribution task from the system file according to the running program version, the running environment, and the running security features, and the system file stores operation content containing multiple sub-operation contents; and load and run the target distribution file of the target file distribution task based on the sub-operation content in the target system service process.

[0122] Furthermore, the device further comprises:

[0123] A detection module, configured to detect whether configuration file information and / or registry information corresponding to executing the target file distribution task matches a preset file execution condition;

[0124] The sending module is used to send the file task distribution result to the server if the configuration file information and / or the registry information matches the preset file execution condition, so as to indicate the completion of the file distribution task of the distribution file.

[0125] Furthermore, the detection module is further configured to detect whether the loaded target distribution file matches the system security operation requirements, wherein the system security operation requirements include at least one of system file execution security content, operation behavior execution security content, and storage space operation security content;

[0126] The sending module is also used to send a file distribution task request to the server if the loaded and running target distribution file does not match the system's safe operation requirements. The file distribution task request carries the system's safe operation requirements, so that the server determines the distribution file based on the system's safe operation requirements.

[0127] An embodiment of the present invention provides a file distribution processing device. Compared with the prior art, the embodiment of the present invention configures the operation content of executing at least one file distribution task in a target system service process, and the target system service process is a system process that provides system security services; when a target file distribution task is received, the target system service process is called; the operation content corresponding to the target file distribution task is executed by the target system service process to load and run the distribution file of the target file distribution task, thereby realizing effective distribution of files under different user permissions and user states, meeting the file distribution requirements under the system security service, and thus improving the file distribution efficiency of the terminal for network security tasks.

[0128] According to one embodiment of the present invention, a storage medium is provided, wherein the storage medium stores at least one executable instruction. The computer-executable instruction can execute the file distribution processing method in any of the above method embodiments.

[0129] Figure 8 A schematic structural diagram of a terminal provided according to an embodiment of the present invention is shown. The specific embodiment of the present invention does not limit the specific implementation of the terminal.

[0130] like Figure 8 As shown, the terminal may include: a processor (processor) 602 , a communications interface (Communications Interface) 604 , a memory (memory) 606 , and a communication bus 608 .

[0131] The processor 602 , the communication interface 604 , and the memory 606 communicate with each other via a communication bus 608 .

[0132] The communication interface 604 is used to communicate with other devices such as clients or other servers.

[0133] The processor 602 is configured to execute the program 610 , and specifically to execute the relevant steps in the above-mentioned embodiment of the method for processing file distribution.

[0134] Specifically, the program 610 may include program codes, which include computer operation instructions.

[0135] Processor 602 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention. The one or more processors included in the terminal may be processors of the same type, such as one or more CPUs, or processors of different types, such as one or more CPUs and one or more ASICs.

[0136] The memory 606 is used to store the program 610. The memory 606 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

[0137] The program 610 may be specifically configured to enable the processor 602 to perform the following operations:

[0138] configuring the operation content of executing at least one file distribution task in a target system service process, wherein the target system service process is a system process that provides system security services;

[0139] When receiving a target file distribution task, calling the target system service process;

[0140] The target system service process executes the operation content corresponding to the target file distribution task to load and run the distribution file of the target file distribution task.

[0141] Obviously, those skilled in the art will appreciate that the various modules or steps of the present invention described above can be implemented using a general-purpose computing device, centralized on a single computing device, or distributed across a network of multiple computing devices. Alternatively, they can be implemented using program code executable by a computing device, which can then be stored in a storage device and executed by the computing device. In some cases, the steps shown or described can be performed in a different order than that shown, or can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, the present invention is not limited to any particular combination of hardware and software.

[0142] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that various modifications and variations of the present invention are possible. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention shall be included within the scope of protection of the present invention.

Claims

1. A method for processing file distribution, characterized in that: include: configuring the operation content of executing at least one file distribution task in a target system service process, wherein the target system service process is a system process that provides system security services; When receiving a target file distribution task, calling the target system service process; Executing the operation content corresponding to the target file distribution task through the target system service process to load and run the distribution file of the target file distribution task, so that the distribution file can be loaded and run through the system security service when the user status is logged in or not logged in, and the software running permission is any permission; The configuration of the operation content of executing at least one file distribution task in the target system service process includes: Obtaining distribution operation contents with different distribution attributes, and splitting the distribution operation contents to obtain operation contents corresponding to executing at least one file distribution task and operation contents corresponding to executing at least one software distribution task after the splitting, wherein the distribution attributes include file distribution and software distribution; Storing the operation content corresponding to the execution file distribution task in a system file with independent attributes, and configuring the system file in the target system service process; The operation content corresponding to the execution of the software distribution task is stored in an original file corresponding to the distribution operation content.

2. The method according to claim 1, characterized in that The step of storing the operation content corresponding to the execution file distribution task in a system file with independent attributes includes: Obtain the software running permissions corresponding to the execution of the file distribution task, which include standard user permissions, management account permissions, system permissions, and security service permissions; If the software running permission matches the preset running permission, the operation content of executing the file distribution task corresponding to the software running permission is stored in a system file with independent attributes.

3. The method according to claim 2, characterized in that The calling of the target system service process includes: If the user status is detected as not logged in, calling the target system service process; and / or, If the detected software running permission matches the preset running permission, calling the target system service process; The operation content corresponding to executing the target file distribution task through the target system service process includes: Extracting the system file from the target system service process; The operation content for executing the target file distribution task is determined in the system file, and the operation content is executed in the target system service process to load and run the target distribution file of the target file distribution task.

4. The method according to claim 3, characterized in that Determining the operation content of executing the target file distribution task in the system file, and executing the operation content in the target system service process to load and run the target distribution file of the target file distribution task includes: Obtaining the running program version, running environment, and running security features of the target distribution file; extracting sub-operation content corresponding to executing the target file distribution task from the system file according to the running program version, the running environment, and the running security feature, wherein the system file stores operation content including multiple sub-operation contents; The target distribution file of the target file distribution task is loaded and executed in the target system service process based on the sub-operation content.

5. The method according to claim 1, wherein After executing the operation content corresponding to the target file distribution task through the target system service process, the method further includes: Detecting whether the configuration file information and / or registry information corresponding to executing the target file distribution task matches a preset file execution condition; If the configuration file information and / or the registry information matches the preset file execution condition, the file task distribution result is sent to the server to indicate that the file distribution task of the distributed file is completed.

6. The method according to any one of claims 1 to 5, characterized in that After executing the operation content corresponding to the target file distribution task through the target system service process, the method further includes: Detecting whether the loaded target distribution file matches the system security operation requirements, where the system security operation requirements include at least one of system file execution security content, operation behavior execution security content, and storage space operation security content; If the loaded target distribution file does not match the system's safe operation requirements, a file distribution task request is sent to the server, and the file distribution task request carries the system's safe operation requirements, so that the server determines the distribution file based on the system's safe operation requirements.

7. A file distribution processing device, characterized in that: include: a configuration module, configured to configure the operation content of executing at least one file distribution task in a target system service process, wherein the target system service process is a system process that provides system security services; A calling module, configured to call the target system service process when receiving a target file distribution task; an execution module, configured to execute the operation content corresponding to the target file distribution task through the target system service process to load and execute the distribution file of the target file distribution task, so that the distribution file can be loaded and executed through the system security service when the user status is logged in or not logged in, and the software execution permission is any permission; The configuration module includes: an acquiring unit, configured to acquire distribution operation contents with different distribution attributes, and split the distribution operation contents to obtain operation contents corresponding to executing at least one file distribution task and operation contents corresponding to executing at least one software distribution task after the splitting, wherein the distribution attributes include file distribution and software distribution; A first storage unit is configured to store the operation content corresponding to the execution file distribution task in a system file with independent attributes, and configure the system file in the target system service process; The second storage unit is used to store the operation content corresponding to the execution of the software distribution task in an original file corresponding to the distribution operation content.

8. A storage medium storing at least one executable instruction, wherein the executable instruction enables a processor to execute an operation corresponding to the file distribution processing method according to any one of claims 1 to 6.

9. A terminal comprising: A processor, a memory, a communication interface, and a communication bus, wherein the processor, the memory, and the communication interface communicate with each other via the communication bus; The memory is used to store at least one executable instruction, and the executable instruction enables the processor to execute an operation corresponding to the file distribution processing method according to any one of claims 1 to 6.

Images