File loading method and device, computer device, and storage medium

Abstract

This disclosure relates to a file loading method, apparatus, computer device, storage medium, and computer program product. The method includes: in response to detecting a file processing operation, acquiring process information generated by the file processing operation, wherein the file processing operation is a loading operation of a target file output by data processing software; in response to determining that the process information includes a plug-in loading process, and in response to acquiring control information output by an external device, intercepting the control information, wherein the plug-in loading process includes a process in the data processing software that loads a plug-in program; and in response to receiving a first indication message output by the plug-in program, stopping the interception of the control information and loading the target file, wherein the first indication message indicates that the plug-in program has finished loading. This method can ensure file security during the file loading process, even when the software has not finished loading.

Description

Technical Field

[0001] This disclosure relates to the field of security protection technology, and in particular to a file loading method, apparatus, computer equipment, and storage medium. Background Technology

[0002] With the development of information technology, electronic documents have become the most common information carrier. Many enterprises or organizations often need to transparently encrypt electronic documents for reasons of confidentiality or other reasons. In addition, classified documents usually need to be opened and edited in commonly used editing software (WPS, Word, Excel, Notepad, etc.).

[0003] However, in the domestically developed UnionTech UOS operating system, when using domestically produced Linux-based software to open classified files, the file may be in a transparently decrypted state during the loading process, but the software may not complete loading due to the software plugin not being started. In this case, because the software is not fully loaded, the relevant protection processes are not activated, leading to a risk of security breaches, alterations, and leaks of the classified file during loading. Summary of the Invention

[0004] Therefore, it is necessary to provide a file loading method, apparatus, computer device, or storage medium that can ensure file security during the file loading process and before the software has finished loading, in order to address the aforementioned technical problems.

[0005] Firstly, this disclosure provides a file loading method, the method comprising:

[0006] In response to the detection of a file processing operation, process information generated by the file processing operation is obtained, wherein the file processing operation is a loading operation of a target file output by data processing software;

[0007] In response to determining that the process information includes a plugin loading process, and in response to obtaining control information output by an external device, the control information is intercepted. The plugin loading process includes: the process in the data processing software that loads the plugin program.

[0008] In response to receiving the first indication message output by the plug-in program, the interception of the control information is stopped, and the target file is loaded. The first indication message is used to indicate that the plug-in program has finished loading.

[0009] In one embodiment, prior to detecting a file processing operation, the method further includes:

[0010] Obtain data processing software from a pre-set application injection list; the data processing software in the application injection list includes: data processing software containing the plug-in program;

[0011] The external device system library is injected into the data processing software in the application injection list using driver injection technology.

[0012] In one embodiment, obtaining the control information output by the external device includes:

[0013] In response to the data processing software in the application injection list, the system library of the external device is loaded, and the control information output by the external device is obtained through the external device control technology. The system library of the external device is the X11 system library, and the external device control technology is X11 HOOK technology.

[0014] In one embodiment, determining that the process information includes a plugin loading process includes:

[0015] Obtain the loader corresponding to each process in the process information;

[0016] In response to the fact that the loader includes the plugin program, it is determined that the process information includes the plugin loading process.

[0017] In one embodiment, after intercepting the control information, the method further includes:

[0018] Record the interception time of the control information interception;

[0019] In response to the failure to receive the first indication message output by the plug-in program, and the interception time being greater than a preset time threshold, the interception of the control information is stopped;

[0020] The system receives a second indication message output by the data processing software, which indicates that the target file failed to load.

[0021] In one embodiment, after obtaining the process information generated by the file processing operation, the method further includes:

[0022] Obtain the file information of the target file, and determine whether the target file is a transparently encrypted encrypted file based on the file information.

[0023] Accordingly, the response to determining that the process information includes a plugin loading process, and the response to obtaining control information output by an external device, and the interception of the control information, includes:

[0024] In response to the target file being an encrypted file, in response to determining that the process information includes a plugin loading process, and in response to obtaining control information output by an external device, the control information is intercepted.

[0025] Secondly, this disclosure also provides a file loading device, the device comprising:

[0026] The data acquisition module is used to acquire process information generated by the file processing operation in response to the detection of a file processing operation, wherein the file processing operation is a loading operation of a target file output by data processing software.

[0027] The information interception module is used to intercept the control information in response to determining that the process information includes a plug-in loading process and in response to detecting control information output from an external device. The plug-in loading process includes the process of loading plug-in programs in the data processing software.

[0028] The information processing module is used to stop intercepting the control information and load the target file in response to receiving a first indication message output by the plug-in program. The first indication message is used to indicate that the plug-in program has finished loading.

[0029] Thirdly, this disclosure also provides a computer device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the steps in any of the above method embodiments.

[0030] Fourthly, this disclosure also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, implements the steps in any of the above method embodiments.

[0031] Fifthly, this disclosure also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, implements the steps in any of the above method embodiments.

[0032] In the above embodiments, when a loading operation on a target file using data processing software is detected, it can be determined that the target file needs to be opened. Therefore, the corresponding process information can be obtained at this time. When the process information includes a loading process, it can be determined that the data processing software needs to load a plug-in program. However, if the plug-in program has not completed its startup, there may be risks of damage, alteration, and leakage of the target file information. Therefore, when control information output by an external device is obtained, this control information is intercepted to prohibit all user operations and ensure the security of the target file. In addition, when the first instruction message output by the plug-in program is received, it can be determined that the data processing software has completed loading and the relevant protection processes of the data processing software have started. The interception of control information can be stopped. Through the above methods, the security of the file can be ensured during the file loading process, even if the software has not completed loading. Attached Figure Description

[0033] To more clearly illustrate the technical solutions in the specific embodiments of this disclosure or the prior art, the drawings used in the description of the specific embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this disclosure. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0034] Figure 1 This is a flowchart illustrating a file loading method in one embodiment;

[0035] Figure 2 This is a flowchart illustrating the process prior to step S102 in one embodiment;

[0036] Figure 3 This is a flowchart illustrating step S104 in one embodiment;

[0037] Figure 4 This is a flowchart illustrating the process after step S106 in one embodiment;

[0038] Figure 5 This is a flowchart illustrating the process after step S102 in one embodiment;

[0039] Figure 6 This is a flowchart illustrating the file loading method in another embodiment;

[0040] Figure 7 This is a schematic block diagram of the file loading device in one embodiment;

[0041] Figure 8 This is a schematic diagram of the internal structure of a computer device in one embodiment. Detailed Implementation

[0042] To make the objectives, technical solutions, and advantages of this disclosure clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this disclosure.

[0043] It should be noted that the terms "first," "second," etc., used in the specification, claims, and accompanying drawings herein are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, apparatus, product, or device that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or devices.

[0044] In this article, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A alone, A and B simultaneously, and B alone. Additionally, the character " / " in this article generally indicates that the preceding and following related objects have an "or" relationship.

[0045] As mentioned in the background section, with the development of domestic innovative industries, more and more enterprises are undergoing comprehensive IT-based transformation of their office systems and software. Therefore, the complete localization of operating systems and supporting software is an inevitable trend.

[0046] However, the applicant discovered that when opening transparently encrypted files on the domestic Tongxin UOS operating system using Linux versions of WPS or other Linux-based software with plugins, there are instances where the transparently encrypted file is in a transparently decrypted state, but the plugin is not activated, causing the software to fail to load completely. This incomplete loading results in a vacuum in program control, where the relevant protection processes are not initiated, allowing users to perform operations incompatible with their permissions. Furthermore, the likelihood of plugin failure leading to incomplete loading increases when the transparently encrypted file is large, posing a significant risk of information security breaches, alterations, and leaks to transparently encrypted software.

[0047] Therefore, to solve the above problems, in one embodiment, such as Figure 1 As shown, a file loading method is provided. This embodiment illustrates the method applied to a terminal. It is understood that this method can also be applied to a server, and to a system including both a terminal and a server, and is implemented through interaction between the terminal and the server. In this embodiment, the method is applied to the domestic Tongxin UOS operating system, and includes the following steps:

[0048] S102, in response to detecting a file processing operation, process information generated by the file processing operation is obtained, wherein the file processing operation is a loading operation of a target file output by data processing software. Data processing software may include, for example, WPS (Word Processing System), Notepad, Word, Excel, and other editing software. Process information typically represents a running activity of a program on a certain data set in a computer; it is the basic unit for system resource allocation and the foundation of the operating system structure. In some embodiments of this disclosure, process information may typically be instance information of a running program. In some embodiments of this disclosure, a loading operation may typically refer to the operation of opening a file. The target file may be a document type or a compressed file type. This disclosure does not limit the specific type of the target file.

[0049] First, it should be noted that the scenarios described in some embodiments of this disclosure can all be performed within the domestic Tongxin UOS operating system. Additionally, if software on other operating systems also experiences issues such as incomplete software loading due to non-started software plugins when opening documents, the solutions mentioned in this disclosure can also be used.

[0050] Specifically, in the domestically developed UnionTech UOS operating system, when a user needs to open a target file using data processing software (such as WPS Office), that is, by inputting the open operation on the target file through the data processing software, the UnionTech UOS operating system generates process information corresponding to the data processing software's action of opening the target file. This process information can be obtained.

[0051] S104, in response to determining that the process information includes a plug-in loading process, and in response to obtaining control information output by an external device, the control information is intercepted, wherein the plug-in loading process includes: the process in the data processing software that loads the plug-in program.

[0052] Intercepting control information typically involves preventing control information from being sent to the domestic Tongxin UOS operating system, thereby preventing external devices from performing their functions. External devices typically include mice, keyboards, or other control devices within the computer. The control information output by these external devices can include, for example, mouse clicks, movements, and selections. Plugin programs are typically programs written using application programming interfaces (APIs) that adhere to certain specifications.

[0053] Specifically, when a user opens a target file through data processing software, if the software requires a plugin to be loaded, and the plugin is not yet running, the software may not have completed the loading process, potentially posing a risk during the file opening process. Therefore, the presence of a plugin loading process in the process information can determine whether the currently used data processing software needs to start a plugin. If the process information includes a plugin loading process, it indicates that the software needs to load the plugin upon startup, creating a control vacuum. During this time, if the user performs inappropriate operations via an external device, such as inputting, deleting, or copying, it can compromise document security. Therefore, it's possible to detect whether the external device is outputting control information. If so, this control information might perform inappropriate operations on the target file. Intercepting this control information can prevent any user operations and ensure the security of the target file.

[0054] S106, in response to receiving the first indication message output by the plug-in program, stop intercepting the control information and load the target file, wherein the first indication message is used to indicate that the plug-in program has finished loading.

[0055] Once the plugin program has loaded, it will output a first indication message. Receiving this message confirms that the plugin program has finished loading and has started. At the same time, the data processing software also loads. Therefore, the relevant protection processes in the data processing software have already started, and no security control over the target file is required. Interception of control information from external devices can be stopped at this point. Simultaneously, the target file is already open in the data processing software. Users can then perform other operations on the target file through external devices.

[0056] In the file loading method described above, when a loading operation on the target file by the data processing software is detected, it can be determined that the target file needs to be opened. Therefore, the corresponding process information can be obtained at this time. When the process information includes a loading process, it can be determined that the data processing software needs to load a plug-in program. However, if the plug-in program has not completed its startup, there may be risks of damage, alteration, and leakage of the target file information. Therefore, when control information output by an external device is obtained, this control information is intercepted to prohibit all user operations and ensure the security of the target file. In addition, when the first instruction message output by the plug-in program is received, it can be determined that the data processing software has completed loading and that the relevant protection processes of the data processing software have started. The interception of control information can be stopped. Through the above methods, file security can be ensured during the file loading process, but before the software has completed loading.

[0057] In one embodiment, such as Figure 2As shown, in response to detecting a file processing operation, the method further includes:

[0058] S202, Obtain the data processing software from the pre-set application injection list; the data processing software in the application injection list includes: data processing software containing the plug-in program.

[0059] S204, inject the external device system library into the data processing software in the application injection list through driver injection technology.

[0060] The pre-set application injection list typically includes multiple data processing software programs with plug-ins. This list may typically be a list of data processing software programs that require injection of functions related to mouse and keyboard behavior. Driver injection technology, in some embodiments of this disclosure, typically involves using a driver to insert functions related to mouse and keyboard behavior into the target process (data processing software). The external device system library is typically the X11 system library.

[0061] Specifically, typically only data processing software that requires plugins is injected, thus requiring the creation of an application injection list for differentiation. Therefore, users can pre-determine which data processing software requires plugins during runtime within the domestic Tongxin UOS operating system, and then set up the application injection list. Before opening a target file, the data processing software in the application injection list can be obtained. Then, the X11 system library is injected into the data processing software in the application injection list using driver injection technology, thereby controlling external devices during the data processing software startup process. Furthermore, after confirming that the process information includes a plugin loading process, the data processing software used in step S102 above can usually also be identified as data processing software in the application injection list.

[0062] In some exemplary embodiments, an application injection list can be set up, and the X11 system library can be dynamically injected into the data processing software in the application injection list through driver injection technology.

[0063] In this embodiment, before the user opens the target file, the X11 system library for controlling external devices is injected into the data processing software that requires the loading of plugins. When using the data processing software, the functions of the X11 system library can be used in a timely manner to control the external devices, ensuring the security of the target file.

[0064] In one embodiment, obtaining the control information output by the external device includes:

[0065] In response to the data processing software in the application injection list, the system library of the external device is loaded, and the control information output by the external device is obtained through the external device control technology. The system library of the external device is the X11 system library, and the external device control technology is X11 HOOK technology.

[0066] X11 HOOK technology typically refers to an injection technique into external devices, which enables control over the functions of those devices. In some embodiments of this disclosure, this typically involves disabling all functions output by the external device.

[0067] Specifically, when the data processing software on the application injection list is starting up or loading, the plugin loading process is running, and since the X11 system library has already been injected into the data processing software on the application injection list, X11 hook technology can be used to obtain control information output by external devices during the startup or loading process of this data processing software.

[0068] In some exemplary embodiments, the data processing software on the application injection list loads the X11 system library and, through X11 hooking technology, hooks XGrabPointer to obtain mouse events (including all mouse information such as movement, clicks, and position). The data processing software on the application injection list also loads the X11 system library and, through X11 hooking technology, hooks XGrabKeyBoard to obtain keyboard events (all keyboard operation information).

[0069] Additionally, during the process of intercepting control information, this can be achieved by starting XGrabPointer to disable mouse-related operations and starting XGrabKeyBoard to disable keyboard-related operations.

[0070] In this embodiment, by using external device control technology, the data processing software that injects the application list can promptly identify the control information of the external device during startup or loading, and then accurately intercept the control information to ensure the security of the target file.

[0071] In one embodiment, such as Figure 3 As shown, determining that the process information includes the plugin loading process includes:

[0072] S302, Obtain the loading program corresponding to each process in the process information.

[0073] S304, in response to the fact that the loader includes the plug-in program, determine that the process information includes the plug-in loading process.

[0074] The loader is typically a program that is currently running on the system.

[0075] Specifically, when opening a target file using data processing software, not all opening methods require loading the plugin. Therefore, even if the data processing software contains a plugin, some opening methods may not require it. Thus, it's necessary to determine if the process information includes a plugin loading process. If so, it confirms that the current opening method requires loading the plugin. This can be done by obtaining the loader for each process in the process information. This allows us to determine if the currently running program includes the plugin for the data processing software listed above. If it does, the process information confirms the plugin loader is present, and the current opening method requires loading the plugin. Only then can further processing proceed.

[0076] In this embodiment, by using the loader corresponding to each process in the process information, it can be determined whether the loader is a plugin loader, and thus determine whether the current way of opening the target file requires loading a plugin. When loading a plugin is required, subsequent processing is performed, which can protect the security of the target file.

[0077] In one embodiment, such as Figure 4 As shown, after intercepting the control information, the method further includes:

[0078] S402, record the interception time of the interception of the control information.

[0079] S404, in response to not receiving the first indication message output by the plug-in program and the interception time being greater than a preset time threshold, stop intercepting the control information.

[0080] S406, Receive the second indication information output by the data processing software, the second indication information is used to indicate that the target file failed to load.

[0081] The interception time is typically the time from the start of the interception of control information to the current time. For example, if the start time is 11:00 and the current time is 15:00, then the interception time can be 4 hours.

[0082] Specifically, when intercepting control information, a timer can be started to record the interception time. If the first instruction message from the plug-in program is not received, it indicates that the data processing software has failed to load or has encountered a problem. Furthermore, if the interception time is long, exceeding a preset time threshold, the target file and data processing software are typically not open and require reprocessing. Therefore, intercepting control information can be stopped at this point. The user can output control information through an external device to close the data processing software, then reopen it and execute steps S102 to S106 as described above. Additionally, if the first instruction message from the plug-in program is not received, due to the data processing software failing to load or encountering a problem, the data processing software can output a second instruction message to notify the target file and the data processing software of the loading failure.

[0083] In this embodiment, if the first indication message is not received and the interception time is relatively long, the interception of control information can be stopped to ensure other user operations. At this time, a second indication message can be output to notify the user of loading failure. The user can then perform other operations, such as reopening the target file or opening other files, without wasting the user's time.

[0084] In one embodiment, such as Figure 5 As shown, after obtaining the process information generated by the file processing operation, the method further includes:

[0085] S502, Obtain the file information of the target file, and determine whether the target file is a transparently encrypted encrypted file based on the file information of the target file.

[0086] Accordingly, the response to determining that the process information includes a plugin loading process, and the response to obtaining control information output by an external device, intercepting the control information includes:

[0087] S504, in response to the target file being an encrypted file, in response to determining that the process information includes a plugin loading process, and in response to obtaining control information output by an external device, the control information is intercepted.

[0088] Transparent encryption is typically a file encryption technology; "transparent" means it's unknown to the user. When a user opens or edits a specified file, the system automatically encrypts unencrypted files and automatically decrypts encrypted files. The file is ciphertext on the hard drive and plaintext in memory. Once the user leaves the environment, the application cannot open it because it lacks the automatic decryption service, thus protecting the file content.

[0089] Specifically, file information of the target file can be obtained, such as the document type, document name, document permissions, etc. Then, based on this information, it can be determined whether the target file is a transparently encrypted file. When the target file is a transparently encrypted file, it is generally considered to be important. Therefore, when the process information includes a plugin loading process and control information output from an external device is detected, the control information is intercepted to ensure the security of the target file. When the target file is not a transparently encrypted file, it can be determined that the target file is not very important, and the scheme mentioned in this disclosure does not need to be executed, ensuring fast file opening speed.

[0090] In this embodiment, when the target file is transparently encrypted, control information is intercepted, thus protecting against program defects during the loading of encrypted files. Furthermore, when the target file is not transparently encrypted, control information is not intercepted, ensuring that other user functions are not affected.

[0091] In one embodiment, such as Figure 6 As shown, this disclosure also provides a file loading method, the method comprising:

[0092] S602, Obtain the data processing software from the pre-set application injection list; the data processing software in the application injection list includes: data processing software containing the plug-in program.

[0093] S604, inject the external device system library into the data processing software in the application injection list through driver injection technology.

[0094] S606, in response to detecting a file processing operation, obtain the process information generated by the file processing operation, wherein the file processing operation is a loading operation of a target file output by data processing software.

[0095] S608, Obtain the file information of the target file, and determine whether the target file is a transparently encrypted encrypted file based on the file information of the target file.

[0096] S610, in response to the target file being an encrypted file, obtain the loader corresponding to each process in the process information.

[0097] S612, in response to the fact that the loader includes the plug-in program, determine that the process information includes the plug-in loading process.

[0098] S614, in response to the data processing software in the application injection list loading the system library of the external device, obtaining the control information output by the external device through external device control technology, and intercepting the control information, wherein the system library of the external device is the X11 system library, and the external device control technology is X11 HOOK technology.

[0099] S616, in response to receiving the first indication message output by the plug-in program, stop intercepting the control information and load the target file, wherein the first indication message is used to indicate that the plug-in program has finished loading.

[0100] S618, record the interception time of the interception of the control information.

[0101] S620, in response to not receiving the first indication message output by the plug-in program and the interception time being greater than a preset time threshold, stop intercepting the control information.

[0102] S622, receive the second indication information output by the data processing software, the second indication information being used to indicate that the target file failed to load.

[0103] For specific implementation methods and limitations in this embodiment, please refer to the above embodiments, which will not be repeated here.

[0104] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0105] Based on the same inventive concept, this disclosure also provides a file loading apparatus for implementing the file loading method described above. The solution provided by this apparatus is similar to the implementation described in the above method; therefore, specific limitations in one or more file loading apparatus embodiments provided below can be found in the limitations of the file loading method described above, and will not be repeated here.

[0106] In one embodiment, such as Figure 7As shown, a file loading device 700 is provided, including: a data acquisition module 702, an information interception module 704, and an information processing module 706, wherein:

[0107] The data acquisition module 702 is used to acquire process information generated by the file processing operation in response to the detection of a file processing operation, wherein the file processing operation is a loading operation of a target file output by data processing software.

[0108] The information interception module 704 is used to intercept the control information in response to determining that the process information includes a plug-in loading process and in response to detecting control information output from an external device. The plug-in loading process includes the process of loading plug-in programs in the data processing software.

[0109] The information processing module 706 is used to stop intercepting the control information and load the target file in response to receiving a first indication message output by the plug-in program. The first indication message is used to indicate that the plug-in program has finished loading.

[0110] In one embodiment of the device, the device further includes:

[0111] The software acquisition module is used to acquire data processing software from a pre-set application injection list; the data processing software in the application injection list includes data processing software containing the plug-in program.

[0112] The injection module is used to inject external device system libraries into the data processing software in the application injection list using driver injection technology.

[0113] In one embodiment of the device, the information interception module 704 is further configured to load the system library of the external device in response to the data processing software in the application injection list, and obtain the control information output by the external device through external device control technology, wherein the system library of the external device is the X11 system library, and the external device control technology is X11HOOK technology.

[0114] In one embodiment of the device, the information interception module 704 is further configured to obtain the loading program corresponding to each process in the process information; in response to the loading program including the plug-in program, determine that the process information includes a plug-in loading process.

[0115] In one embodiment of the device, the device further includes:

[0116] The time recording module is used to record the interception time of the interception of the control information.

[0117] The stop interception module is used to stop intercepting the control information in response to not receiving the first indication message output by the plug-in program and the interception time being greater than a preset time threshold.

[0118] The data receiving module is used to receive the second indication information output by the data processing software, which is used to indicate that the target file failed to load.

[0119] In one embodiment of the device, the device further includes: a file determination module, used to obtain file information of the target file and determine whether the target file is a transparently encrypted encrypted file based on the file information of the target file.

[0120] The information interception module 704 is further configured to intercept the control information in response to the target file being an encrypted file, in response to determining that the process information includes a plugin loading process, and in response to obtaining control information output by an external device.

[0121] Each module in the aforementioned file loading device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the operations corresponding to each module.

[0122] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 8 As shown, the computer device includes a processor, memory, and a network interface connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores target files and application injection lists. The network interface communicates with external terminals via a network connection. When executed by the processor, the computer program implements a file loading method.

[0123] Those skilled in the art will understand that Figure 8 The structure shown is merely a block diagram of a portion of the structure related to the present disclosure and does not constitute a limitation on the computer device to which the present disclosure is applied. A specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0124] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in any of the above method embodiments.

[0125] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps in any of the above method embodiments.

[0126] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in any of the above method embodiments.

[0127] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this disclosure can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this disclosure may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this disclosure may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0128] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0129] The embodiments described above are merely illustrative of several implementations of this disclosure, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent disclosure. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this disclosure, and these all fall within the protection scope of this disclosure. Therefore, the protection scope of this disclosure should be determined by the appended claims.

Claims

1. A file loading method, characterized in that, The method includes: In response to the detection of a file processing operation, process information generated by the file processing operation is obtained, wherein the file processing operation is a loading operation of a target file output by data processing software; In response to determining that the process information includes a plugin loading process, and in response to obtaining control information output by an external device, the control information is intercepted. The plugin loading process includes: the process in the data processing software that loads the plugin program. In response to receiving a first indication message output by the plug-in program, the interception of the control information is stopped, and the target file is loaded. The first indication message is used to indicate that the plug-in program has finished loading. The method further includes, in response to detecting a file processing operation, the following: Obtain data processing software from a pre-set application injection list; the data processing software in the application injection list includes: data processing software containing the plug-in program; The external device system library is injected into the data processing software in the application injection list using driver injection technology. The control information obtained from the external device includes: In response to the data processing software in the application injection list, the system library of the external device is loaded, and the control information output by the external device is obtained through the external device control technology. The system library of the external device is the X11 system library, and the external device control technology is X11 HOOK technology. After obtaining the process information generated by the file processing operation, the method further includes: Obtain the file information of the target file, and determine whether the target file is a transparently encrypted encrypted file based on the file information. Accordingly, the response to determining that the process information includes a plugin loading process, and the response to obtaining control information output by an external device, and the interception of the control information, includes: In response to the target file being an encrypted file, in response to determining that the process information includes a plugin loading process, and in response to obtaining control information output by an external device, the control information is intercepted.

2. The method according to claim 1, characterized in that, The determination that the process information includes the plugin loading process includes: Obtain the loader corresponding to each process in the process information; In response to the fact that the loader includes the plugin program, it is determined that the process information includes the plugin loading process.

3. The method according to claim 1, characterized in that, After intercepting the control information, the method further includes: Record the interception time of the control information interception; In response to the failure to receive the first indication message output by the plug-in program, and the interception time being greater than a preset time threshold, the interception of the control information is stopped; The system receives a second indication message output by the data processing software, which indicates that the target file failed to load.

4. A file loading device, characterized in that, The device includes: The data acquisition module is used to acquire process information generated by the file processing operation in response to the detection of a file processing operation, wherein the file processing operation is a loading operation of a target file output by data processing software. The information interception module is used to intercept the control information in response to determining that the process information includes a plug-in loading process and in response to detecting control information output from an external device. The plug-in loading process includes the process of loading plug-in programs in the data processing software. The information processing module is used to stop intercepting the control information and load the target file in response to receiving a first indication message output by the plug-in program. The first indication message is used to indicate that the plug-in program has finished loading. The device further includes: The software acquisition module is used to acquire data processing software from a pre-set application injection list; the data processing software in the application injection list includes: data processing software containing the plug-in program; The injection module is used to inject external device system libraries into the data processing software in the application injection list using driver injection technology; The information interception module is also used to respond to the data processing software in the application injection list loading the system library of the external device, and to obtain the control information output by the external device through the external device control technology, wherein the system library of the external device is the X11 system library, and the external device control technology is the X11 HOOK technology; The file determination module is used to obtain the file information of the target file and determine whether the target file is a transparently encrypted encrypted file based on the file information of the target file. Accordingly, the information interception module is also used to intercept the control information in response to the target file being an encrypted file, in response to determining that the process information includes a plugin loading process, and in response to obtaining control information output by an external device.

5. The apparatus according to claim 4, characterized in that, The information interception module is further configured to obtain the loading program corresponding to each process in the process information; in response to the loading program including the plug-in program, it determines that the process information includes the plug-in loading process.

6. The apparatus according to claim 4, characterized in that, The device further includes: The time recording module is used to record the interception time of the interception of the control information; The stop interception module is used to stop intercepting the control information in response to not receiving the first indication message output by the plug-in program and the interception time being greater than a preset time threshold. The data receiving module is used to receive the second indication information output by the data processing software, which is used to indicate that the target file failed to load.

7. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 3.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 3.

9. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 3.

Images