Confidential file storage management method, device, equipment and readable storage medium

Abstract

The present application relates to a confidentiality archive storage management method, device, equipment and readable storage medium, which is applied to the field of information security technology. The method includes: obtaining the confidentiality level and file type of the confidentiality archive to be stored; determining the non-desensitized storage location of the confidentiality archive to be stored based on the confidentiality level, the file type and the preset storage rule; obtaining the file storage name, encrypting the confidentiality archive to be stored based on the file storage name and the preset encryption rule, and generating an encrypted confidentiality archive; generating a desensitized storage label based on the preset file desensitization rule and the non-desensitized storage location, and the non-desensitized storage location corresponds to the desensitized storage label one by one; storing the encrypted confidentiality archive in the non-desensitized storage location corresponding to the desensitized storage label. The present application has the effect of improving the security of confidentiality archive storage.

Description

Technical Field

[0001] The present application relates to the technical field of information security, and in particular to a confidential archive storage management method, device, equipment and readable storage medium. Background Art

[0002] Archives refer to various forms of original records with preservation value directly formed by people in various social activities, while confidential archives refer to various forms of documentary materials that are of great value to the country, society and enterprises and are formed by enterprises or state units in their production, operation and management activities and need special protection. Confidential archives are divided into electronic confidential archives and paper confidential archives, and paper confidential archives need to be placed in the filing cabinets in the archive storage room for storage.

[0003] When storing and managing confidential files in the archive storage room, ensuring the safety of confidential files is of paramount importance. Traditional confidential files are generally registered when entering and leaving the archive storage room and have personnel to guard them. Both storage and guarding require manpower. Once problems occur with the person responsible for guarding the registration, the safety of the confidential files will be most threatened. Summary of the invention

[0004] In order to improve the security of confidential file storage, the present application provides a confidential file storage management method, device, equipment and readable storage medium.

[0005] In the first aspect, the present application provides a confidentiality archive storage management method, which adopts the following technical solution:

[0006] A confidentiality archive storage management method, comprising:

[0007] Obtain the confidentiality level and file type of the confidential files to be stored;

[0008] Determine the non-desensitized storage location of the confidential file to be stored based on the confidentiality level, the file type and the preset storage rules;

[0009] Obtaining a file storage name, encrypting the confidential file to be stored based on the file storage name and a preset encryption rule, and generating an encrypted confidential file;

[0010] Generate a desensitized storage label based on the preset archive desensitization rule and the non-desensitized storage location, and the non-desensitized storage location corresponds to the desensitized storage label one by one;

[0011] The encrypted confidential file is stored in the non-desensitized storage location corresponding to the desensitizing storage label.

[0012] By adopting the above technical scheme, when storing confidential files, the storage location of the files is automatically selected, and after the storage location is selected, the storage location is desensitized to generate a desensitized label, and at the same time, the file storage name of the confidential file is encrypted, and the encrypted confidential file is stored in the non-desensitized storage location corresponding to the desensitized label. The outside world cannot determine the real non-desensitized storage location based on the desensitized label, and cannot determine the real confidential file storage name based on the encrypted confidential document. The correspondence between the confidential document and the storage location is saved by the system without human processing, thereby improving the security of confidential file storage.

[0013] Optionally, the determining the non-desensitized storage location of the confidential file to be stored based on the confidentiality level, the file type and a preset storage rule includes:

[0014] Obtain the location information of all vacancies in the archive storage room that do not store archives;

[0015] Select one of the empty spaces where no files are stored, and obtain the storage status of files at the positions on both sides of the empty space where no files are stored;

[0016] Determine whether the file storage status of the positions on both sides of the unstored file space are both unstored files;

[0017] If the file storage status of the positions on both sides of the unstored file space is that no files are stored, the unstored file positions are used as the undesensitized storage positions for the confidential files to be stored;

[0018] If the storage status of the files on both sides of the unstored file space is not all unstored files, the confidentiality level and file type of the files on both sides are obtained;

[0019] When the confidentiality level and file type of the files at the two side positions are inconsistent with the confidentiality level and file type of the confidential files to be stored, the unstored file position will be used as the non-desensitized storage position of the confidential files to be stored.

[0020] Optionally, encrypting the confidential file to be stored based on the file storage name and a preset encryption rule to generate an encrypted confidential file includes:

[0021] Obtaining sensitive words in the file storage name and the sensitivity levels corresponding to the sensitive words;

[0022] The sensitive words are replaced with preset encryption passwords in descending order of sensitivity to generate an encrypted confidentiality file.

[0023] Optionally, generating a desensitized storage label based on a preset archive desensitization rule and the non-desensitized storage location includes:

[0024] Obtaining the position code of the un-desensitized storage position and the desensitized replacement word of each code;

[0025] The position code is converted into a desensitized replacement word to generate a desensitized storage label.

[0026] Optionally, after storing the encrypted confidential file in the non-desensitized storage location corresponding to the desensitized storage tag, the method further includes:

[0027] In response to a user's instruction to view the storage location of a confidential file, obtaining the user's identity information;

[0028] Determining whether the user has location viewing authority based on the identity information;

[0029] If the user has the location viewing permission, verify the user and generate a verification result;

[0030] Determine whether the verification result is passed;

[0031] If the verification result is passed, the storage location of the confidential file is displayed;

[0032] If the verification result is failure, generating a first warning message;

[0033] If the user does not have the location viewing authority, a second warning message is generated.

[0034] Optionally, the verifying the user includes:

[0035] Obtaining a verification method, wherein the verification method includes fingerprint verification, iris verification, and ID card number verification;

[0036] Generate a verification prompt based on a preset verification combination rule, the fingerprint verification, the iris verification and the ID card number verification;

[0037] In response to the user's response to the verification prompt, the user is verified.

[0038] Optionally, also include:

[0039] In response to the access instruction of the encrypted confidential file, obtaining the number of living beings in the file storage room;

[0040] Determining whether the number of the living organisms in the archive storage room is not zero;

[0041] If the number of the life forms in the archive storage room is zero, a storage operation is performed;

[0042] If the number of the living beings in the archive storage room is not zero, an alarm is issued;

[0043] Repeat the step of determining whether the number of the living beings in the archive storage room is not zero.

[0044] In a second aspect, the present application provides a confidentiality archive storage management device, which adopts the following technical solution:

[0045] A confidentiality archive storage management device, comprising:

[0046] A confidentiality file acquisition module is used to obtain the confidentiality level and file type of the confidentiality file to be stored;

[0047] A storage location determination module, used to determine the non-desensitized storage location of the confidential file to be stored based on the confidentiality level, the file type and the preset storage rules;

[0048] A confidentiality file encryption module, used to obtain a file storage name, encrypt the confidentiality file to be stored based on the file storage name and a preset encryption rule, and generate an encrypted confidentiality file;

[0049] A storage label generation module, used to generate a desensitized storage label based on a preset archive desensitization rule and the non-desensitized storage location, wherein the non-desensitized storage location corresponds to the desensitized storage label one by one;

[0050] The confidentiality file storage module is used to store the encrypted confidentiality file in the non-desensitized storage position corresponding to the desensitizing storage label.

[0051] By adopting the above technical scheme, when storing confidential files, the storage location of the files is automatically selected, and after the storage location is selected, the storage location is desensitized to generate a desensitized label, and at the same time, the file storage name of the confidential file is encrypted, and the encrypted confidential file is stored in the non-desensitized storage location corresponding to the desensitized label. The outside world cannot determine the real non-desensitized storage location based on the desensitized label, and cannot determine the real confidential file storage name based on the encrypted confidential document. The correspondence between the confidential document and the storage location is saved by the system without human processing, thereby improving the security of confidential file storage.

[0052] In a third aspect, the present application provides an electronic device, which adopts the following technical solution:

[0053] An electronic device, comprising a processor, wherein the processor is coupled to a memory;

[0054] The processor is used to execute the computer program stored in the memory, so that the electronic device executes the computer program of the confidential file storage management method described in any one of the first aspects.

[0055] In a fourth aspect, the present application provides a computer-readable storage medium, which adopts the following technical solution:

[0056] A computer-readable storage medium stores a computer program that can be loaded by a processor and execute the confidential file storage management method described in any one of the first aspects. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] Figure 1 It is a flow chart of a confidentiality archive storage management method provided in an embodiment of the present application.

[0058] Figure 2 It is a structural block diagram of a confidentiality archive storage and management device provided in an embodiment of the present application.

[0059] Figure 3 It is a structural block diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0060] The present application is further described in detail below in conjunction with the accompanying drawings.

[0061] The embodiment of the present application provides a confidentiality archive storage management method, which can be executed by an electronic device, which can be a server or a terminal device, wherein the server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services. The terminal device can be a smart phone, a tablet computer, a desktop computer, etc., but is not limited thereto.

[0062] Figure 1 A flowchart of a confidentiality file storage management method provided in an embodiment of the present application.

[0063] like Figure 1 As shown, the main process of the method is described as follows (steps S101 to S105):

[0064] Step S101, obtaining the confidentiality level and file type of the confidential file to be stored;

[0065] In this embodiment, the confidentiality level of the confidentiality file to be stored is related to the importance of the confidential content of the file to be stored, and is set by the creator of the confidentiality file to be stored. The higher the importance of the confidential content of the stored file, the higher the corresponding confidentiality level. For example, the confidentiality level of the basic information file of the researcher is level three, and the confidentiality level of the data content file of the research data is level five, etc., which are not specifically limited here. The file type is also related to the confidential content. For example, the file type of the basic information file of the researcher is a personnel file, and the file type of the data content file of the research data is a data file, etc. The specific file type needs to be set according to the creator of the file according to the specific confidential content, and is not specifically limited here.

[0066] Step S102, determining the non-desensitized storage location of the confidential file to be stored based on the confidentiality level, file type and preset storage rules;

[0067] For step S102, obtain the location information of all the empty spaces without archives in the archive storage room; select one of the empty spaces without archives, and obtain the archive storage status of the adjacent positions on both sides of the empty space without archives; determine whether the archive storage status of the positions on both sides of the empty space without archives are all unstored archives; if the archive storage status of the positions on both sides of the empty space without archives are all unstored archives, then use the unstored archive positions as non-desensitized storage positions for confidential archives to be stored; if the archive storage status of the positions on both sides of the empty space without archives is not all unstored archives, obtain the confidentiality level and file type of the archives at the positions on both sides; when the confidentiality level and file type of the archives at the positions on both sides are inconsistent with the confidentiality level and file type of the confidential archives to be stored, use the unstored archive positions as non-desensitized storage positions for confidential archives to be stored.

[0068] In this embodiment, before storing the confidential files to be stored, it is necessary to determine the non-desensitized storage location of the confidential files to be stored according to the confidentiality level of the confidential files to be stored, the file type and the preset storage rules, and the confidential files to be stored are stored in a disorderly manner, that is, they are not stored in accordance with certain storage rules.

[0069] When determining the non-desensitized storage location for the confidential archives to be stored, obtain the location information of all the file shelves in the archive storage room that do not store archives, that is, the location information of the empty spaces where no archives are stored, randomly select one of the empty spaces where no archives are stored, obtain the archive storage status of the positions on both sides of the empty space where no archives are stored, and judge whether the archive storage status of the positions on both sides of the empty space where no archives are stored are all unstored archives. When the archive storage status of the positions on both sides of the empty space where no archives are stored are all unstored archives, that is, the positions on both sides of the empty space where no archives are stored are also unstored archives. At this time, the empty space where no archives are stored can be used as the non-desensitized storage location for the confidential archives to be stored; when the archive storage status of the positions on both sides of the empty space where no archives are stored are not all unstored archives, that is, one of the positions on both sides of the adjacent positions where no archives are stored is one or two positions of the adjacent positions on both sides of the empty space where no archives are stored. When the file storage status of the file storage position is to store files, if the file storage status of one of the positions of the unstored file space is to store files, the confidentiality level and file type of the confidential file at this position are obtained. When the confidentiality level and file type of the confidential file at this position are all inconsistent with the confidentiality level and file type of the confidential file to be stored, the unstored file space is used as the un-desensitized storage position for the confidential file to be stored; if the file storage status of the positions on both sides of the storage file space are both to store files, the confidentiality level and file type of any confidential file on both sides are obtained. When the confidentiality level and file type of the confidential file at this position are all inconsistent with the confidentiality level and file type of the confidential file to be stored, the unstored file space is used as the un-desensitized storage position for the confidential file to be stored, otherwise a new unstored file space will be selected to perform the same step of judgment. Thus, confidentiality schemes with the same confidentiality level and the same file type can be placed separately, thereby further ensuring the security of the storage of confidential files to be stored.

[0070] In this embodiment, a storage location change cycle is set according to confidentiality requirements, and the storage location of confidential files is changed regularly to further improve the security of the storage of confidential files to be stored. It should be noted that the storage location change cycle needs to be set according to requirements and is not specifically limited here.

[0071] Step S103, obtaining the file storage name, encrypting the confidential file to be stored based on the file storage name and the preset encryption rule, and generating an encrypted confidential file;

[0072] With respect to step S103, the sensitive words in the file storage name and the sensitivity levels corresponding to the sensitive words are obtained; the sensitive words are replaced with preset encryption passwords in descending order of sensitivity levels to generate an encrypted confidential file.

[0073] In this embodiment, before the confidential file to be stored is stored, encryption is performed according to the file storage name of the confidential file to be stored, so that other personnel cannot determine the confidentiality level and file type of the confidential file according to the file storage name. The confidential file to be stored is encrypted according to the preset encryption rule, and the preset encryption rule is to set sensitive words and each sensitive word to obtain a sensitivity level, and each sensitive word corresponds to a preset encryption password, and the sensitive words are arranged in descending order according to the sensitivity level, and an arrangement result is generated, and it is checked whether the high-level sensitive words contain low-level sensitive words. When the high-level sensitive words contain low-level sensitive words, the low-level sensitive words are deleted from the arrangement result, and the arrangement result is updated. According to the arrangement result, the sensitive words are replaced with the preset encryption password in descending order of sensitivity level, that is, from the sensitive words with the highest sensitivity level to the sensitive words with the lower sensitivity level, the preset encryption password is replaced, and the final encryption result is used as the encrypted confidential file. Sensitive words and their corresponding sensitivity levels and preset encryption passwords are set according to needs, and are not specifically limited here.

[0074] Step S104, generating a desensitized storage label based on the preset archive desensitization rule and the non-desensitized storage location, and the non-desensitized storage location corresponds to the desensitized storage label one by one;

[0075] With respect to step S104, the position codes of the un-desensitized storage positions and the desensitized replacement words of each code are obtained; the position codes are converted into desensitized replacement words to generate desensitized storage labels.

[0076] In the present embodiment, the preset archive desensitization rule is that each storage position in the archive storage room is provided with a corresponding position code, each position code corresponds to at least one desensitized replacement word, and a desensitized replacement word is randomly selected, and the sensitive replacement word is used as the corresponding position code, and the replacement result is used as the desensitized storage label. For example, the position code of the storage position is A1X11Y11, representing the position of the 11th row and 11th column of the first file shelf, the desensitized replacement word of A1 is the third, the desensitized replacement word of X11 is fifty-five, and the desensitized replacement word of Y11 is the upper row, then the generated desensitized label is the third fifty-five upper row. It should be noted that the position code and its corresponding desensitized replacement word need to be set according to actual needs, and no specific limitation is made here.

[0077] Step S105, storing the encrypted confidential file in the non-desensitized storage location corresponding to the desensitizing storage tag.

[0078] In this embodiment, in response to the user's instruction to view the storage location of confidential files, the user's identity information is obtained; based on the identity information, it is determined whether the user has the location viewing permission; if the user has the location viewing permission, the user is verified and a verification result is generated; it is determined whether the verification result is passed; if the verification result is passed, the confidential file storage location is displayed; if the verification result is not passed, a first alarm message is generated; if the user does not have the location viewing permission, a second alarm message is generated.

[0079] Specifically, a verification method is obtained, wherein the verification method includes fingerprint verification, iris verification and ID number verification; a verification prompt is generated based on a preset verification combination rule, fingerprint verification, iris verification and ID number verification; and the user is verified in response to the user's response to the verification prompt.

[0080] In this embodiment, when a user views the storage location of a confidential file, the user's location viewing authority is determined based on the user's identity information. Only users with viewing authority can view the storage location of the confidential file. When a user who does not have location viewing authority views the storage location of the confidential file, a second alarm message is generated based on the user's identity information and viewing time. When the user views the storage location of the confidential file, the user's identity needs to be verified. After the verification is passed, the storage location of the confidential file is displayed in the display part.

[0081] The verification methods include fingerprint verification, iris verification and ID card number verification. The preset verification combination rule can be a random combination of the three verification methods, or a combination of the three verification methods in pairs, and the order is randomly set. A verification prompt is generated according to the combination and arrangement result. In response to the user's response to the verification prompt, the verification information responded by the user is verified. After all are correct, the storage location of the confidential file is displayed. When the verification fails, the first alarm information is generated according to the user's identity information, the viewing time and the verification method with an incorrect verification result in the verification prompt.

[0082] In this embodiment, in response to the access instruction of the encrypted confidential archive, the number of life forms in the archive storage room is obtained; it is determined whether the number of life forms in the archive storage room is not zero; if the number of life forms in the archive storage room is zero, a storage operation is performed; if the number of life forms in the archive storage room is not zero, an alarm is issued; and the step of determining whether the number of life forms in the archive storage room is not zero is repeated.

[0083] When accessing encrypted and confidential archives, it is necessary to ensure that there are no living organisms in the archive storage room. Therefore, the number of living organisms in the archive storage room needs to be obtained. Specifically, the number can be collected and obtained by using cameras and infrared detection. When the number of living organisms in the archive storage room is zero, it means that the storage environment of the archive storage room is safe and storage can be performed. When the number of living organisms in the archive storage room is not zero, it means that the storage environment of the archive storage room is unsafe, and an alarm is issued to prompt the living organisms in the archive storage room to leave the archive storage room as soon as possible. The boatman detects the number of living organisms in the archive storage room until the number of living organisms in the archive storage room is zero, and then the encrypted and confidential archives are accessed.

[0084] Figure 2 A structural block diagram of a confidentiality file storage management device 200 provided in an embodiment of the application.

[0085] like Figure 2 As shown, the confidentiality file storage management device 200 mainly includes:

[0086] The confidentiality file acquisition module 201 is used to obtain the confidentiality level and file type of the confidentiality file to be stored;

[0087] A storage location determination module 202, for determining a non-desensitized storage location of a confidential file to be stored based on the confidentiality level, file type and preset storage rules;

[0088] The confidentiality file encryption module 203 is used to obtain the file storage name, encrypt the confidentiality file to be stored based on the file storage name and the preset encryption rule, and generate an encrypted confidentiality file;

[0089] A storage label generating module 204 is used to generate a desensitized storage label based on a preset archive desensitization rule and a non-desensitized storage location, wherein the non-desensitized storage location corresponds to the desensitized storage label one by one;

[0090] The confidentiality file storage module 205 is used to store the encrypted confidentiality file in the non-desensitized storage location corresponding to the desensitized storage tag.

[0091] As an optional implementation manner of this embodiment, the storage location determination module 202 is specifically used to obtain the location information of all unstored file spaces in the file storage room; select one of the unstored file spaces, and obtain the file storage status of the adjacent two sides of the unstored file space; determine whether the file storage status of the positions on both sides of the unstored file space are all unstored files; if the file storage status of the positions on both sides of the unstored file space are all unstored files, then the unstored file positions are used as non-desensitized storage locations for confidential files to be stored; if the file storage status of the positions on both sides of the unstored file space is not all unstored files, then obtain the confidentiality level and file type of the files at the two sides; when the confidentiality level and file type of the files at the two sides are inconsistent with the confidentiality level and file type of the confidential files to be stored, the unstored file positions are used as non-desensitized storage locations for confidential files to be stored.

[0092] As an optional implementation of this embodiment, the confidentiality file encryption module 203 is specifically used to obtain sensitive words in the file storage name and the sensitivity level corresponding to the sensitive words; replace the sensitive words with preset encryption passwords in descending order of sensitivity level to generate an encrypted confidentiality file.

[0093] As an optional implementation of this embodiment, the storage label generation module 204 is specifically used to obtain the position code of the un-desensitized storage position and the desensitized replacement word of each code;

[0094] Convert the positional encoding into a desensitized replacement word to generate a desensitized storage label.

[0095] As an optional implementation of this embodiment, the confidentiality file storage management device 200 further includes:

[0096] An information acquisition module, for obtaining the user's identity information in response to the user's confidential file storage location viewing instruction;

[0097] Permission judgment module. Used to judge whether the user has the permission to view the location based on the identity information;

[0098] A result generation module, used to verify the user and generate verification results;

[0099] The result judgment module is used to judge whether the verification result is passed;

[0100] Location display module, used to display the storage location of confidential files;

[0101] A first alarm module, used to generate first alarm information;

[0102] The second alarm module is used to generate second alarm information.

[0103] In this optional embodiment, the result generation module is specifically used to obtain a verification method, wherein the verification method includes fingerprint verification, iris verification, and ID number verification; generate a verification prompt based on preset verification combination rules, fingerprint verification, iris verification, and ID number verification; and verify the user in response to the user's response to the verification prompt.

[0104] As an optional implementation of this embodiment, the confidentiality file storage management device 200 further includes:

[0105] A quantity acquisition module, for obtaining the number of living things in the archive storage room in response to the access instruction of the encrypted confidential archive;

[0106] A quantity judgment module is used to judge whether the number of living things in the archive storage room is not zero;

[0107] A storage execution module, used for executing storage operations;

[0108] An alarm prompt module is used for providing an alarm prompt;

[0109] The step repeating module is used to repeatedly execute the step of determining whether the number of living things in the archive storage room is not zero.

[0110] In one example, the module in any of the above devices can be one or more integrated circuits configured to implement the above methods, such as: one or more application specific integrated circuits (ASICs), or, one or more digital signal processors (DSPs), or, one or more field programmable gate arrays (FPGAs), or a combination of at least two of these integrated circuit forms.

[0111] For another example, when the modules in the device can be implemented in the form of a processing element scheduling program, the processing element can be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call a program. For another example, these modules can be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0112] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described devices and modules can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0113] Figure 3 This is a structural block diagram of an electronic device 300 provided in an embodiment of the present application.

[0114] like Figure 3 As shown, the electronic device 300 includes a processor 301 and a memory 302 , and may further include an information input / information output (I / O) interface 303 , one or more of a communication component 304 , and a communication bus 305 .

[0115] The processor 301 is used to control the overall operation of the electronic device 300 to complete all or part of the steps of the above-mentioned confidential archive storage management method; the memory 302 is used to store various types of data to support the operation of the electronic device 300, and these data may include, for example, instructions for any application or method used to operate on the electronic device 300, and data related to the application. The memory 302 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0116] The I / O interface 303 provides an interface between the processor 301 and other interface modules, and the above-mentioned other interface modules can be keyboards, mice, buttons, etc. These buttons can be virtual buttons or physical buttons. The communication component 304 is used for wired or wireless communication between the electronic device 300 and other devices. Wireless communication, such as Wi-Fi, Bluetooth, Near Field Communication (NFC), 2G, 3G or 4G, or a combination of one or more of them, so the corresponding communication component 104 can include: Wi-Fi components, Bluetooth components, NFC components.

[0117] The electronic device 300 can be implemented by one or more application specific integrated circuits (ASIC), digital signal processors (DSP), digital signal processing devices (DSPD), programmable logic devices (PLD), field programmable gate arrays (FPGA), controllers, microcontrollers, microprocessors or other electronic components to execute the confidential file storage management method given in the above embodiment.

[0118] The communication bus 305 may include a path to transmit information between the above components. The communication bus 305 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus, etc. The communication bus 305 may be divided into an address bus, a data bus, a control bus, etc.

[0119] The electronic device 300 may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc., and may also be servers, etc.

[0120] The present application also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned confidential archive storage management method are implemented.

[0121] The computer-readable storage medium may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0122] The terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion such that a process, method, article, or apparatus that includes a list of elements includes not only those elements but also other elements not expressly listed, or also includes elements inherent to such process, method, article, or apparatus.

[0123] The above description is only a preferred embodiment of the present application and an explanation of the technical principles used. Those skilled in the art should understand that the scope of application involved in the present application is not limited to the technical solution formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the aforementioned application concept. For example, the above features are replaced with (but not limited to) technical features with similar functions applied in the present application.

Claims

1. A confidentiality file storage management method, characterized in that: include: Obtain the confidentiality level and file type of the confidential files to be stored; Determine the non-desensitized storage location of the confidential file to be stored based on the confidentiality level, the file type and the preset storage rules; Obtaining a file storage name, encrypting the confidential file to be stored based on the file storage name and a preset encryption rule, and generating an encrypted confidential file; Generate a desensitized storage label based on the preset file desensitization rule and the non-desensitized storage location, the non-desensitized storage location corresponds to the desensitized storage label one by one; store the encrypted confidential file in the non-desensitized storage location corresponding to the desensitized storage label; The method of determining the non-desensitized storage position of the confidential archive to be stored based on the confidentiality level, the archive type and the preset storage rule includes: obtaining the position information of all the empty spaces for unstored archives in the archive storage room; selecting one of the empty spaces for unstored archives, and obtaining the archive storage status of the adjacent positions on both sides of the empty space for unstored archives; judging whether the archive storage status of the positions on both sides of the empty space for unstored archives are all unstored archives; if the archive storage status of the positions on both sides of the empty space for unstored archives are all unstored archives, then using the unstored archive positions as the non-desensitized storage positions for the confidential archive to be stored; if the archive storage status of the positions on both sides of the empty space for unstored archives are not all unstored archives, then obtaining the confidentiality level and archive type of the archives at the positions on both sides; when the confidentiality level and archive type of the archives at the positions on both sides are inconsistent with the confidentiality level and archive type of the confidential archive to be stored, using the unstored archive positions as the non-desensitized storage positions for the confidential archive to be stored.

2. The method according to claim 1, characterized in that: The method of encrypting the confidential file to be stored based on the file storage name and the preset encryption rules to generate an encrypted confidential file includes: obtaining sensitive words in the file storage name and the sensitivity levels corresponding to the sensitive words; replacing the sensitive words with preset encryption passwords in descending order of sensitivity levels to generate an encrypted confidential file.

3. The method according to claim 1, characterized in that The method of generating a desensitized storage label based on a preset archive desensitization rule and the non-desensitized storage location includes: obtaining a position code of the non-desensitized storage location and a desensitized replacement word for each code; and converting the position code into a desensitized replacement word to generate a desensitized storage label.

4. The method according to claim 1, characterized in that: After storing the encrypted confidential file in the un-desensitized storage location corresponding to the desensitized storage tag, it also includes: in response to the user's confidential file storage location viewing instruction, obtaining the user's identity information; judging whether the user has the location viewing permission based on the identity information; if the user has the location viewing permission, verifying the user and generating a verification result; judging whether the verification result is passed; if the verification result is passed, displaying the confidential file storage location; if the verification result is not passed, generating a first alarm message; if the user does not have the location viewing permission, generating a second alarm message.

5. The method according to claim 4, characterized in that The verification of the user includes: obtaining a verification method, wherein the verification method includes fingerprint verification, iris verification and ID number verification; generating a verification prompt based on a preset verification combination rule, the fingerprint verification, iris verification and ID number verification; and verifying the user in response to the user's response to the verification prompt.

6. The method according to any one of claims 1 to 5, characterized in that: Also includes: In response to the access instruction of the encrypted confidential file, obtaining the number of life forms in the file storage room; determining whether the number of life forms in the file storage room is not zero; If the number of the life forms in the archive storage room is zero, a storage operation is performed; if the number of the life forms in the archive storage room is not zero, an alarm is issued; and the step of determining whether the number of the life forms in the archive storage room is not zero is repeated.

7. A confidential file storage management device, characterized in that: include: A confidentiality file acquisition module is used to obtain the confidentiality level and file type of the confidentiality file to be stored; A storage location determination module, used to determine the non-desensitized storage location of the confidential file to be stored based on the confidentiality level, the file type and the preset storage rules; A confidentiality file encryption module is used to obtain a file storage name, encrypt the confidentiality file to be stored based on the file storage name and a preset encryption rule, and generate an encrypted confidentiality file; A storage label generation module, used for generating a desensitized storage label based on a preset file desensitization rule and the non-desensitized storage location, wherein the non-desensitized storage location corresponds to the desensitized storage label one by one; a confidentiality file storage module, used for storing the encrypted confidentiality file in the non-desensitized storage location corresponding to the desensitized storage label; The storage position determination module is also used to determine the non-desensitized storage position of the confidential archive to be stored based on the confidentiality level, the file type and the preset storage rule, including: obtaining the position information of all the unstored file spaces in the archive storage room; selecting one of the unstored file spaces, and obtaining the file storage status of the adjacent two sides of the unstored file space; judging whether the file storage status of the positions on both sides of the unstored file space are all unstored files; if the file storage status of the positions on both sides of the unstored file space is all unstored files, then the unstored file position is used as the non-desensitized storage position for the confidential archive to be stored; if the file storage status of the positions on both sides of the unstored file space is not all unstored files, then obtaining the confidentiality level and file type of the files at the two sides; when the confidentiality level and file type of the files at the two sides are inconsistent with the confidentiality level and file type of the confidential archive to be stored, then the unstored file position is used as the non-desensitized storage position for the confidential archive to be stored.

8. An electronic device, characterized in that: The electronic device comprises a processor coupled to a memory; the processor is used to execute a computer program stored in the memory so that the electronic device executes the method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The method comprises a computer program or an instruction, which, when executed on a computer, causes the computer to execute the method according to any one of claims 1 to 6.

Images