A method and system for processing approval process based on file-free downloading

Abstract

The present invention discloses a method for processing an approval process based on file-free downloading, comprising: a first client receives a decryption approval request from a user, obtains the complete path information and file fingerprint information of the ciphertext file according to the ciphertext file to be decrypted corresponding to the decryption approval request, sends the decryption approval request to a second client, and uploads the ciphertext file, its complete path information, and its file fingerprint information to a server for storage; after receiving the decryption approval request, the second client checks the corresponding ciphertext file to be decrypted, and sends the approval result to the first client; the first client determines whether the approval result from the second client is consent, and if so, extracts the complete path information and file fingerprint information of the ciphertext file from the server. The present invention can solve the technical problems of the existing decryption process approval method, such as the complicated and cumbersome process, the poor experience of the applicant, and the technical problem of easily blocking the enterprise network bandwidth.

Description

Technical Field

[0001] The present invention belongs to the technical field of document approval, and more specifically, relates to an approval process processing method and system based on file-free downloading. Background Art

[0002] The file encryption and decryption system has been widely used in business. When an electronic file is opened, it is automatically decrypted to the memory for correct identification by the application. When the file is saved, it is automatically encrypted to the disk to prevent the leakage of electronic files. Even if the electronic file is copied, it remains encrypted, thus solving the company's need to protect trade secrets. In addition, the file transparent encryption and decryption system does not change the original file operation process and is imperceptible to users.

[0003] In an enterprise that has applied a file encryption and decryption system, if it is necessary to decrypt an encrypted file into plain text in order to communicate with the outside world of the enterprise, the decryption process approval method is generally adopted. That is, the applicant submits an encrypted file for decryption application (the encrypted file is uploaded to the server for archiving for auditing), and the approver views the encrypted file and approves it. After approval, the applicant can download the decrypted plain text from the server.

[0004] However, the above decryption process approval method has some defects that cannot be ignored:

[0005] 1. For files applied for decryption, after the approval is completed, the applicant needs to download them to get the plain text. The whole process is complicated and cumbersome, and the applicant's experience is poor.

[0006] 2. If the file to be decrypted is relatively large (for example, a set of drawings in GB), it will block the enterprise's network bandwidth. Summary of the invention

[0007] In response to the above defects or improvement needs of the prior art, the present invention provides an approval process processing method and system based on file-free downloading, which aims to solve the technical problems of the existing decryption process approval method, such as the complicated and cumbersome process, the poor applicant experience, and the technical problem of easily blocking the enterprise network bandwidth.

[0008] To achieve the above object, according to one aspect of the present invention, a method for processing an approval process based on file download-free is provided, comprising the following steps:

[0009] (1) The first client receives a decryption approval request from a user, obtains the complete path information and file fingerprint information of the ciphertext file according to the ciphertext file to be decrypted corresponding to the decryption approval request, sends the decryption approval request to the second client, and uploads the ciphertext file, its complete path information, and its file fingerprint information to the server for storage;

[0010] (2) After receiving the decryption approval request, the second client checks the corresponding ciphertext file to be decrypted and sends the approval result to the first client;

[0011] (3) The first client determines whether the approval result from the second client is approval. If so, the process proceeds to step (4); otherwise, the process ends;

[0012] (4) The first client extracts the complete path information and file fingerprint information of the ciphertext file from the server, obtains the local file according to the complete path information, calculates the file fingerprint of the local file, and determines whether the calculated file fingerprint is the same as the file fingerprint information extracted from the server. If they are the same, it means that the comparison is passed and the process proceeds to step (5). Otherwise, the process ends.

[0013] (5) The first client performs a decryption operation on the acquired local file according to the complete path information of the extracted ciphertext file to obtain a decryption result.

[0014] Preferably, the file fingerprint information of the ciphertext file is the MD5 value of the ciphertext file.

[0015] Preferably, the first client is a notebook, desktop computer, etc. operated by ordinary employees of a company or unit;

[0016] The second client is a laptop, desktop computer, etc. operated by a senior manager of a company or unit who has process approval authority.

[0017] Preferably, the ciphertext file is stored in a data warehouse on the server side;

[0018] The complete path information and file fingerprint information of the encrypted file are stored in the server's database.

[0019] Preferably, in step (2), the second client checks the file list in the file to be decrypted, or checks the specific content of the ciphertext file to be decrypted;

[0020] When the second client wants to view the specific content of the ciphertext file to be decrypted, the second client needs to request the data warehouse of the server to download the ciphertext file for viewing.

[0021] Preferably, the approval process of step (2) is a joint approval by multiple second clients of the same level, or a multi-level approval by multiple second clients in a hierarchical relationship.

[0022] Preferably, the decryption operation in step (5) is implemented by calling the DecryptFile(stringstrFilePath) function.

[0023] According to another aspect of the present invention, there is provided an approval process processing system based on file download-free operation, comprising:

[0024] The first module is provided at the first client and is used to receive a decryption approval request from the user, obtain the complete path information and file fingerprint information of the ciphertext file according to the ciphertext file to be decrypted corresponding to the decryption approval request, send the decryption approval request to the second client, and upload the ciphertext file, its complete path information, and its file fingerprint information to the server for storage;

[0025] The second module is provided in the second client and is used to check the corresponding ciphertext file to be decrypted after receiving the decryption approval request, and send the approval result to the first client;

[0026] The third module is provided in the first client and is used to determine whether the approval result from the second client is approval. If yes, the fourth module is entered, otherwise the process ends;

[0027] The fourth module is set on the first client and is used to extract the complete path information and file fingerprint information of the ciphertext file from the server, obtain the local file according to the complete path information, calculate the file fingerprint of the local file, and determine whether the calculated file fingerprint is the same as the file fingerprint information extracted from the server. If they are the same, it means that the comparison is passed and enters the fifth module, otherwise the process ends.

[0028] The fifth module is arranged in the first client and is used to perform a decryption operation on the acquired local file according to the complete path information of the extracted ciphertext file to obtain a decryption result.

[0029] In general, the above technical solutions conceived by the present invention can achieve the following beneficial effects compared with the prior art:

[0030] (1) Since the present invention adopts step (4), it only needs to obtain the complete file path information and file fingerprint information from the server. Compared with the existing method that needs to download the entire file, the amount of data required to be transmitted in the present invention is negligible, so it will not occupy the enterprise's network bandwidth, and at the same time completely eliminates the complicated and tedious process of file downloading;

[0031] (2) Since the present invention adopts step (4), it uses the file fingerprint information for comparison to determine whether the file has been modified or replaced, which can effectively avoid malicious replacement behavior by users;

[0032] (3) Since the present invention adopts step (1), the file itself and the complete path information and file fingerprint information of the file are stored in the database of the server, which can facilitate post-audit and accountability. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 It is a flow chart of the approval process processing method based on file download-free of the present invention. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention. In addition, the technical features involved in the various embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

[0035] like Figure 1 As shown, the present invention provides an approval process processing method based on file download-free, comprising the following steps:

[0036] (1) The first client receives a decryption approval request from a user, obtains the complete path information and file fingerprint information (i.e., the MD5 value of the ciphertext file) of the ciphertext file to be decrypted corresponding to the decryption approval request, sends the decryption approval request to the second client, and uploads the ciphertext file, its complete path information, and its file fingerprint information to the server for storage;

[0037] Specifically, the first client is a laptop, desktop, etc. operated by an ordinary employee of a company or unit; the second client is a laptop, desktop, etc. operated by a senior manager of a company or unit with process approval authority; the full path information is, for example, C:\Users\fang\Desktop\1.docx.

[0038] The ciphertext file is stored in the data warehouse on the server side, and the complete path information and file fingerprint information of the ciphertext file are stored in the database on the server side;

[0039] It should be noted that in the above step (1), the file fingerprint information of the ciphertext file is extracted to prevent the user from modifying or replacing the ciphertext file to evade audit after the first client submits the decryption approval request.

[0040] It should be noted that in the above step (1), the full path information of the ciphertext file is extracted so that the address where the ciphertext file corresponding to the previously submitted decryption approval request is correctly found when the first client performs local decryption in the subsequent step (5).

[0041] It should be noted that in the above step (1), the encrypted file will be permanently stored on the server for subsequent audit and traceability.

[0042] (2) After receiving the decryption approval request, the second client checks the corresponding ciphertext file to be decrypted and sends the approval result to the first client;

[0043] Specifically, the second client can view the file list in the file to be decrypted, and can also view the specific content of the ciphertext file to be decrypted. At this time, the second client needs to request the data warehouse of the server to download the ciphertext file and then view it.

[0044] More specifically, the approval result is approval or rejection.

[0045] Preferably, the approval process in step (2) can be a joint approval by multiple second clients (ie, multiple second clients of the same level) or a multi-level approval (ie, multiple second clients in a hierarchical relationship).

[0046] (3) The first client determines whether the approval result from the second client is approval. If so, the process proceeds to step (4); otherwise, the process ends;

[0047] (4) The first client extracts the complete path information and file fingerprint information of the ciphertext file from the server, obtains the local file according to the complete path information, calculates the file fingerprint of the local file, and determines whether the calculated file fingerprint is the same as the file fingerprint information extracted from the server. If they are the same, it means that the comparison is passed and the process proceeds to step (5). Otherwise, the process ends.

[0048] In this step, the first client extracts the complete path information and file fingerprint information of the ciphertext file from the server, but does not extract the ciphertext file itself, thus omitting the download process of the ciphertext file.

[0049] (5) The first client performs a decryption operation on the obtained local file according to the complete path information of the extracted ciphertext file to obtain a decryption result;

[0050] Specifically, the decryption operation is implemented by calling a function such as DecryptFile(stringstrFilePath).

[0051] It will be easily understood by those skilled in the art that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for processing approval processes based on file-free downloading, characterized in that: The following steps are involved: (1) The first client receives a decryption approval request from a user, obtains the complete path information and file fingerprint information of the ciphertext file corresponding to the decryption approval request, sends the decryption approval request to the second client, and uploads the ciphertext file, its complete path information, and its file fingerprint information to the server for storage; (2) After receiving the decryption approval request, the second client checks the corresponding ciphertext file to be decrypted and sends the approval result to the first client; (3) The first client determines whether the approval result from the second client is approval. If so, the process proceeds to step (4); otherwise, the process ends. (4) The first client extracts the complete path information and file fingerprint information of the ciphertext file from the server, obtains the local file according to the complete path information, calculates the file fingerprint of the local file, and determines whether the calculated file fingerprint is the same as the file fingerprint information extracted from the server. If they are the same, it means that the comparison is successful and the process proceeds to step (5). Otherwise, the process ends. (5) The first client performs a decryption operation on the obtained local file according to the complete path information of the extracted ciphertext file to obtain a decryption result.

2. The method for processing approval flow based on file download-free according to claim 1 is characterized in that: The file fingerprint information of the ciphertext file is the MD5 value of the ciphertext file.

3. The method for processing approval flow based on file download-free according to claim 1 or 2, characterized in that: The first client is a laptop or desktop computer operated by ordinary employees of a company or unit; The second client is a laptop or desktop computer operated by a senior manager of a company or unit who has process approval authority.

4. The method for processing approval flow based on file download-free according to any one of claims 1 to 3, characterized in that: The ciphertext file is stored in the data warehouse on the server; The complete path information and file fingerprint information of the encrypted file are stored in the server's database.

5. The method for processing approval flow based on file download-free according to claim 1 is characterized in that: In step (2), the second client checks the file list in the file to be decrypted, or checks the specific content of the ciphertext file to be decrypted; When the second client wants to view the specific content of the ciphertext file to be decrypted, the second client needs to request the data warehouse of the server to download the ciphertext file for viewing.

6. The method for processing approval flow based on file download-free according to claim 5 is characterized in that: The approval process of step (2) is that multiple second clients of the same level jointly sign and approve, or multiple second clients with a hierarchical relationship perform multi-level approval.

7. The method for processing approval flow based on file download-free according to claim 1 is characterized in that: The decryption operation in step (5) is implemented by calling the DecryptFile(string strFilePath) function.

8. An approval process processing system based on file download-free operation, characterized in that: include: The first module is provided at the first client and is used to receive a decryption approval request from the user, obtain the complete path information and file fingerprint information of the ciphertext file according to the ciphertext file to be decrypted corresponding to the decryption approval request, send the decryption approval request to the second client, and upload the ciphertext file, its complete path information, and its file fingerprint information to the server for storage; The second module is provided in the second client and is used to check the corresponding ciphertext file to be decrypted after receiving the decryption approval request, and send the approval result to the first client; The third module is provided in the first client and is used to determine whether the approval result from the second client is approval. If yes, the fourth module is entered, otherwise the process ends; The fourth module is arranged on the first client and is used to extract the complete path information and file fingerprint information of the ciphertext file from the server, obtain the local file according to the complete path information, calculate the file fingerprint of the local file, and determine whether the calculated file fingerprint is the same as the file fingerprint information extracted from the server. If they are the same, it means that the comparison is passed and the fifth module is entered. Otherwise, the process ends. The fifth module is arranged in the first client and is used to perform a decryption operation on the acquired local file according to the complete path information of the extracted ciphertext file to obtain a decryption result.

Images