A method for preventing the deletion and alteration of data files in special materials monitoring software

Abstract

A method for preventing the deletion and modification of data files in special material monitoring software includes the following steps: S1: Create a new system user; S2: Install the software and specify the storage location; S3: Establish a one-to-one correspondence between the software user and the system user; S4: Create a new software operator; S5: Configure software user operation permissions; S6: Set read, write, and execute permissions; S7: Set read / write and non-delete permissions; S8: Set a sticky bit; S9: Multi-user software data sharing; S10: User private data protection; This patent is based on the NeoKylin operating system, with multi-user partition management and independent operation. The software login username corresponds one-to-one with the system user account, and modular management is implemented. Software operation permissions can be flexibly configured, folder permission settings can be progressively layered, multi-user software data can be securely shared, and cannot be deleted or modified; multi-user operating spaces are securely isolated, enabling secure protection of user private data.

Description

Technical Field

[0001] This invention specifically relates to a method for preventing the deletion and alteration of data files in special materials monitoring software. It enables tiered authorization and permission protection for specific folders generated by computer application software running on the Kylin operating system. It belongs to the technical field of computer file operation permission protection. Background Technology

[0002] Special materials require regular monitoring. The monitoring data files contain critical data and important information used for the storage, management, and production of these materials, and are crucial for safety. Once generated, they cannot be arbitrarily deleted or altered. Because different operators operate within the same system user space, two scenarios may occur when reading monitoring data files from each other: first, operators may intentionally delete or maliciously tamper with the monitoring data files; second, operators may delete or modify the monitoring data files due to operational errors, resulting in the loss of the monitoring data files.

[0003] Windows systems typically employ mature methods for protecting application file data, using permission management and appropriate plugins to prevent file deletion and modification. However, due to the relatively homogeneous user base of the Kylin operating system and its poorer compatibility compared to Windows, coupled with the unique user permission allocation in monitoring data management software, multiple users operating under the same system cannot effectively prevent the deletion and modification of software data files.

[0004] To address the potential issues of intentional deletion, malicious modification, and accidental deletion or alteration of files by multiple users operating under the same system in the NeoKylin application software, current conventional technical measures primarily rely on encryption protection, permission settings, and the implementation of management systems. While these measures have some effectiveness, several problems remain: First, encrypting the monitoring data storage folder, although preventing some users from deleting or modifying files, does not guarantee data sharing in a multi-user environment. Second, setting read / write permissions for the monitoring data storage folder, while preventing all software operator users from deleting or modifying files, fails to effectively achieve self-management of operator users' private data as numerous software operator users operate within the same system user space. Third, implementing management systems to regulate operator behavior and prevent the deletion or alteration of monitoring data files carries the risk of accidental deletion or alteration due to uncontrollable factors in manual control. Summary of the Invention

[0005] The purpose of this invention is to provide a method for preventing the deletion and modification of software data files based on the multi-user operating environment, user hierarchy, and permission management of the NeoKylin system.

[0006] The technical solution of the present invention is as follows: A method for preventing the deletion and modification of data files in special material monitoring software, comprising the following steps:

[0007] S1: Create new system users. System user 1 logs in as system administrator root5 and enters the system. Create system user 10. System user 10 includes system user testa18 and system user testb19. The data file generated by system administrator root5 is stored in folder root7 under computer directory 3. The data files generated by system user testa18 and system user testb19 are stored in folder home8 under computer directory 3 and named folder testa12 and folder testb13 respectively.

[0008] S2: Install the software and specify the storage location. The special materials monitoring software is installed in the software9 folder under the computer directory 3. The software administrator 6 and the software operator 11 have the functions of information collection, supervision and inspection and data analysis for oxide special materials and metallic special materials.

[0009] S3: Establish a one-to-one correspondence between software users and system users. Software administrator 6 enters the software operator management module and associates the newly created system ordinary user testa18 and system ordinary user testb19 with the personnel number drop-down menu. Establish a one-to-one correspondence between system ordinary user testa18 and software operator testa21, and between system ordinary user testb19 and software operator testb20.

[0010] S4: Create a new software operator. Software administrator 6 enters the software operator management module, selects the associated account system ordinary user testa18 and system ordinary user testb19 from the personnel number drop-down menu, creates operator information, sets user login password, and the newly created software operator login username is software operator testb20 and software operator testa21.

[0011] S5: Configure software user operation permissions. Software administrator 6 sets information collection, supervision and inspection and data analysis software function operation permissions for software operators testb20 and testa21, and enables software operators testb20 and testa21 to write files in folders yhw14, js15, check-record16 and date-analysis17 under folder software9.

[0012] S6: Set read, write, and execute permissions. System administrator 5 sets -rwxrwxrwx- permissions for folders yhw14, js15, check-record16, and date-analysis17 in folder software9. This means that the user owner, group owner, and other users in the system have read, write, and execute permissions for the directory.

[0013] S7: Set read and write permissions. System administrator 5 uses the code "sudo chattr+aR / directory name" to recursively set the read and write permissions for folders yhw14, js15, check-record16 and date-analysis17 in folder software9 respectively.

[0014] S8: Set sticky bit. System administrator 5 uses the code "chmod o +rwxt directory name" to set the permissions of the rwxt folder in folder software9 for folders yhw14, js15, check-record16 and date-analysis17.

[0015] S9: Multi-user software data sharing. Through the permission settings in S6, S7, and S8, ordinary system users testa18 and testb19 can read and share software data in folders yhw14, js15, check-record16, and date-analysis17 within folder software9.

[0016] S10: User private data protection. The files of ordinary system users testa18 and testb19 are located in folders testa12 and testb13 under folder home8 in computer directory 3. Ordinary system user testa18 can only access folder testa12 and cannot access folder testb13.

[0017] In step S1, the adduser-m command is used to create a regular system user 10.

[0018] In step S2, the data file for collecting information on oxide special materials is stored in the folder yhw14 under the folder software9.

[0019] In step S2, the data file for collecting information on special metallic materials is stored in the folder js15 under the folder software9.

[0020] In step S2, the supervision and inspection data file is stored in the folder check-record16 under the folder software9.

[0021] In step S2, the data analysis data file is stored in the folder date-analysis17 under the folder software9.

[0022] In step S4, the system's regular users log in to the software by switching between them, and the software operator's username is bound to the system user account.

[0023] In step S6, the user deletes the aforementioned directory.

[0024] In step S7, the deletion permission command is not allowed, so the group owner and other users in the system cannot delete the folders yhw14, js15, check-record16, and date-analysis17 in the folder software9.

[0025] In S8, t refers to the sticky bit. After setting it, it is found that users can read other users' files and also create their own files, but they can only delete the files they create and cannot delete the files created by other users.

[0026] In step S9, data files between each other cannot be deleted or modified.

[0027] The significant advantages of this invention are: multi-user partitioned management and independent operation of the system; one-to-one correspondence between software login usernames and system user accounts; modular management; flexible configuration of software operation permissions; progressively tiered folder permission settings; secure sharing of multi-user software data, which cannot be deleted or modified; and secure isolation of multi-user operating spaces, enabling secure protection of user private data. Attached Figure Description

[0028] Figure 1 This is a schematic diagram illustrating the operation of a method for preventing the deletion and alteration of data files in special material monitoring software, as described in this invention.

[0029] Figure 1The following are the user IDs in the system: 1. Kylin System User, 2. Administrator Module, 3. Computer Directory, 4. Regular User Module, 5. System Administrator (root), 6. Software Administrator, 7. Folder (root), 8. Folder (home), 9. Folder (software), 10. System Regular User, 11. Software Operator, 12. Folder (testa), 13. Folder (testb), 14. Folder (yhw), 15. Folder (js), 16. Folder (check-record), 17. Folder (date-analysis), 18. System Regular User (testa), 19. System Regular User (testb), 20. Software Operator (testb), 21. Software Operator (testa). Detailed Implementation

[0030] To facilitate understanding, the following is a brief introduction to special material monitoring software:

[0031] 1. The special materials monitoring software operates on the NeoKylin operating system.

[0032] II. The special materials monitoring software users include administrators and ordinary users. There is only one administrator, and the number of ordinary users can be set according to needs. The software administrator can manage operators and permissions, set personnel numbers, and set information collection, supervision and inspection and data analysis operation permissions.

[0033] Third, the special materials monitoring software can monitor a variety of special materials, including oxide special materials and metallic special materials mentioned in this embodiment;

[0034] IV. The special materials monitoring software has information collection, supervision and inspection and data analysis functions. Information collection mainly involves inputting design information and material characteristic information for different types of special materials. Supervision and inspection involves periodically monitoring special materials. Data analysis mainly involves analyzing supervision and inspection records.

[0035] A method for preventing the deletion and modification of data files in special material monitoring software includes the following steps:

[0036] S1: Create new system users. System user 1 logs in as system administrator root5 and enters the system. Use the adduser -m command to create system user 10. System user 10 includes system user testa18 and system user testb19. The data file generated by system administrator root5 is stored in the folder root7 under computer directory 3. The data files generated by system user testa18 and system user testb19 are stored in the folder home8 under computer directory 3, and named folder testa12 and folder testb13 respectively.

[0037] S2: Install the software and specify the storage location. The special materials monitoring software is installed in the folder software9 under the computer directory 3. The software administrator 6 and the software operator 11 have the functions of information collection, supervision and inspection and data analysis for oxide special materials and metallic special materials. The information collection data file of oxide special materials is stored in the folder yhw14 under the folder software9, the information collection data file of metallic special materials is stored in the folder js15 under the folder software9, the supervision and inspection data file is stored in the folder check-record16 under the folder software9, and the data analysis data file is stored in the folder date-analysis17 under the folder software9.

[0038] S3: Establish a one-to-one correspondence between software users and system users. Software administrator 6 enters the software operator management module and associates the newly created system ordinary user testa18 and system ordinary user testb19 with the personnel number drop-down menu. Establish a one-to-one correspondence between system ordinary user testa18 and software operator testa21, and between system ordinary user testb19 and software operator testb20.

[0039] S4: Create a new software operator. Software administrator 6 enters the software operator management module and selects the associated account system ordinary user testa18 and system ordinary user testb19 from the personnel number drop-down menu. Create operator information and set user login password. The newly created software operator login usernames are software operator testb20 and software operator testa21. Subsequently, you can log in to the software by switching between system ordinary users. The software operator username has been successfully bound to the system user account. You only need to enter the login password to log in.

[0040] S5: Configure software user operation permissions. Software administrator 6 sets information collection, supervision and inspection and data analysis software function operation permissions for software operators testb20 and testa21, and enables software operators testb20 and testa21 to write files in folders yhw14, js15, check-record16 and date-analysis17 under folder software9.

[0041] S6: Set read, write, and execute permissions. System administrator 5 sets -rwxrwxrwx- permissions for folders yhw14, js15, check-record16, and date-analysis17 in folder software9. This means that the user owner, group owner, and other users in the system have read, write, and execute permissions for the directories. At this time, users can delete the above directories.

[0042] S7: Set read and write permissions, but not delete permissions. System administrator 5 uses the code "sudo chattr+aR / directory name" to recursively set read and write permissions for folders yhw14, js15, check-record16, and date-analysis17 in folder software9, but not delete permissions. The group owner and other users in the system will not be able to delete folders yhw14, js15, check-record16, and date-analysis17 in folder software9. At this time, users can still delete files stored in the above folders by creating them through software.

[0043] S8: Set the sticky bit. System administrator 5 uses the code "chmod o +rwxt directory name" to set the rwxt permissions of folders yhw14, js15, check-record16, and date-analysis17 in folder software9. Here, t refers to the sticky bit. After setting, it can be found that users can read other users' files and can also create their own files, but they can only delete the files they create and cannot delete the files created by other users.

[0044] S9: Multi-user software data sharing. Through the permission settings in S6, S7, and S8, ordinary system users testa18 and testb19 can read and share software data in folders yhw14, js15, check-record16, and date-analysis17 within folder software9. Data files between them cannot be deleted or modified.

[0045] S10: User private data protection. The files of ordinary system users testa18 and testb19 are located in folders testa12 and testb13 under folder home8 in computer directory 3. Taking advantage of the multi-user and multi-tasking features of the Kylin system, ordinary system user testa18 can only access folder testa12 and cannot access folder testb13. The same applies to ordinary system user testb19, thus realizing the security protection of user private data.

Claims

1. A method for preventing the deletion and alteration of data files in special material monitoring software, characterized in that: Includes the following steps: S1: Create a new system user. The system user (1) logs in to the system administrator root (5) to enter the system and creates a system ordinary user (10). The system ordinary user (10) includes system ordinary user testa (18) and system ordinary user testb (19). The data file generated by the system administrator root (5) is stored in the folder root (7) under the computer directory (3). The data files generated by system ordinary user testa (18) and system ordinary user testb (19) are stored in the folder home (8) under the computer directory (3) and named folder testa (12) and folder testb (13) respectively. S2: Install the software and specify the storage location. The special material monitoring software is installed in the software folder (9) under the computer directory (3). The software administrator (6) and software operator (11) have the functions of information collection, supervision and inspection and data analysis for oxide special materials and metal special materials. S3: Establish a one-to-one correspondence between software users and system users. The software administrator (6) enters the software operator management module and associates the newly created system ordinary user testa (18) and system ordinary user testb (19) user accounts with the personnel number drop-down menu to establish a one-to-one correspondence between system ordinary user testa (18) and software operator testa (21), and between system ordinary user testb (19) and software operator testb (20). S4: Create a new software operator. The software administrator (6) enters the software operator management module and selects the associated account system ordinary user testa (18) and system ordinary user testb (19) respectively in the personnel number drop-down menu. Create operator information and set user login password. The newly created software operator login username is software operator testb (20) and software operator testa (21). S5: Configure software user operation permissions. The software administrator (6) sets the information collection, supervision and inspection and data analysis software function operation permissions for software operators testb (20) and testa (21), and realizes the file write permissions of software operators testb (20) and testa (21) to folder yhw (14), folder js (15), folder check-record (16) and folder date-analysis (17) under folder software (9); S6: Set read, write and execute permissions. System administrator 5 sets -rwxrwxrwx- permissions for folders yhw(14), js(15), check-record(16) and date-analysis(17) in folder software9. That is, the user owner, group owner and other users in the system have read, write and execute permissions for the directory. S7: Set read and write permissions. The system administrator (5) uses the code "sudo chattr +a -R / directory name" to recursively set the read and write permissions of folders yhw (14), js (15), check-record (16) and date-analysis (17) in folder software (9); S8: Set sticky bit. The system administrator (5) uses the code "chmod o+rwxt directory name" to set the rwxt permissions of folder yhw (14), folder js (15), folder check-record (16) and folder date-analysis (17) in folder software (9); S9: Multi-user software data sharing. Through the permission settings in S6, S7 and S8, ordinary system users testa (18) and testb (19) can read and share software data in folders yhw (14), js (15), check-record (16) and date-analysis (17) in folder software (9). S10: User private data protection. The files of ordinary system users testa(18) and testb(19) are located in the folder home(8) of the computer directory (3), under the folder testa(12) and folder testb(13). Ordinary system user testa(18) can only access folder testa(12) and cannot access folder testb(13).

2. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In S1, the adduser -m command under the NeoKylin system is used to create a regular system user (10).

3. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In S2, the data file for collecting information on special oxide materials is stored in the folder yhw(14) under the folder software(9).

4. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In S2, the data file for collecting information on special metallic materials is stored in the folder js(15) under the folder software(9).

5. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In S2, the supervision and inspection data file is stored in the folder check-record(16) under the folder software(9).

6. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In S2, the data analysis data file is stored in the folder date-analysis(17) under the folder software(9).

7. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In step S4, the system's regular users log in to the software by switching between them, and the software operator's username is bound to the system user account.

8. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In step S6, the user deletes the aforementioned directory.

9. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In S7, without the deletion permission command, the group owner and other users in the system will not delete the folders yhw (14), js (15), check-record (16), and date-analysis (17) in the folder software (9).

10. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In S8, t refers to the sticky bit. After setting it, it is found that the user reads other users' files.

11. The method for preventing the deletion and alteration of data files in special material monitoring software according to claim 1, characterized in that: In step S9, data files between each other cannot be deleted or modified.

Images