A DCS host computer trusted function one-key start-stop method, system, device and medium

Abstract

The application belongs to the field of DCS systems, and discloses a DCS host computer trusted function one-key putting and withdrawing method, system, equipment and medium. Through user authentication and permission management, only authorized users can perform trusted putting and withdrawing operations, and the safety of the system is enhanced. For trusted putting and withdrawing operations, only users with corresponding permissions are allowed to perform, and fine-grained permission control helps to reduce potential risks. Through the mode of automatically executing instructions, the application can reduce the risk of human error and improve the accuracy of operation. The application can query the state of the trusted device in real time, and take corresponding operations according to the state, ensuring real-time performance. The application is suitable for multiple nodes, multiple files and applications, has good scalability, and is suitable for complex systems. Through collecting the executed messages, the application can track the history of operations, which is helpful for auditing and troubleshooting.

Description

Technical Field

[0001] This invention belongs to the field of DCS systems, and specifically relates to a method, system, device and medium for one-click activation / deactivation of trusted functions in a DCS host computer. Background Technology

[0002] After the trusted DCS system starts, it protects the applications and files running on the host computer. When it is necessary to replace or update the host computer software, the trusted system must be started and stopped on each host computer. Otherwise, direct replacement and update will generate a large number of alarm messages, which will require manual cleanup by maintenance personnel. Summary of the Invention

[0003] The purpose of this invention is to overcome the above-mentioned shortcomings and provide a method, system, device and medium for one-click activation and deactivation of trusted functions in a DCS host computer, which can realize one-click deactivation and activation of trusted functions for a single or multiple files or programs.

[0004] To achieve the above objectives, a one-click enable / disable method for trusted functions on a DCS host computer includes:

[0005] Establish a connection with the trusted proxy, authenticate the current username, and check whether the current user has the right to enter or exit the trusted account.

[0006] Format the names of files and applications that require trusted input or output, and specify the operation node for each process and file;

[0007] When exiting, query the trusted agent for the trusted devices of each node. If the current status is not trusted, return success directly; if the current status is trusted, send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, return success.

[0008] When executing the deployment, query the trusted agent for the trusted device of each node. If the current status is trusted enabled, return success directly; if the current status is trusted disabled or the status is unknown, send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, return success.

[0009] Execute the formatted instructions, collect the executed messages, and complete the execution.

[0010] After checking whether the current user has the right to trust entry or exit, if the user does not have the right, an error message will be displayed and the user will be notified that the current user does not have the right. An alarm message will be sent and the operation log will be recorded.

[0011] Format the names of files and applications that require trusted entry or exit as shell commands.

[0012] The collected messages are parsed.

[0013] Based on the message parsing content, the system will notify the user that the operation was successful and save the operation record in the operation log; if the operation fails, the error code will be converted into the error reason and handling steps and the operation record will be saved in the operation log.

[0014] A one-click enable / disable system for trusted functions of a DCS host computer includes:

[0015] The permission acquisition module is used to establish a connection with the trusted proxy, authenticate the current username, and check whether the current user has the permission to enter or exit the trusted proxy.

[0016] The formatting module is used to format the names of files and applications that require trusted entry or exit, and to specify the operation node for each process and file;

[0017] The exit execution module is used to query the trusted agent for the trusted devices of each node when exiting. If the current status is that the trusted device is not enabled, it will return success directly; if the current status is that the trusted device is enabled, it will send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, it will return success.

[0018] The deployment execution module is used to query the trusted agent for the trusted devices of each node when deploying. If the current status is trusted enabled, it will return success directly; if the current status is trusted disabled or the status is unknown, it will send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, it will return success.

[0019] The formatting instruction execution module is used to execute the formatted instructions, collect the executed messages, and complete the execution.

[0020] Also includes:

[0021] The permission alarm module is used to check whether the current user has the permission to enter or exit trusted accounts. If the user does not have the permission, an error message will be sent to the user indicating that the current user does not have the permission, an alarm message will be sent, and the operation log will be recorded.

[0022] Also includes:

[0023] The logging module is used to parse the message content, prompt the user that the operation was successful and save the operation record in the operation log; if the execution fails, the error code is converted into the error reason and handling steps and prompted to the user, and the operation record is saved in the operation log.

[0024] An electronic device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the steps of a one-click activation / deactivation method for a DCS host computer trusted function.

[0025] A storage medium storing a computer program, wherein the computer program, when executed by a processor, implements the steps of a one-click activation / deactivation method for a DCS host computer trusted function.

[0026] Compared to existing technologies, this invention enhances system security by ensuring that only authorized users can perform trusted input and output operations through user authentication and permission management. For trusted input and output operations, only users with the corresponding permissions are allowed to execute them; this fine-grained permission control helps reduce potential risks. By automating instruction execution, this invention reduces the risk of human error and improves operational accuracy. It can instantly query the status of trusted devices and take corresponding actions based on that status, ensuring real-time performance. This invention is applicable to multiple nodes, multiple files, and applications, exhibiting good scalability and suitability for complex systems. By collecting post-execution messages, this invention can trace the history of operations, aiding in auditing and troubleshooting. The querying and operation of trusted device status are performed asynchronously, improving system efficiency and performance. Permissions and operation nodes in the process can be customized according to actual needs to meet the requirements of different scenarios. Attached Figure Description

[0027] Figure 1 This is a flowchart of the present invention;

[0028] Figure 2 This is a system diagram of the present invention;

[0029] Figure 3 This is a system diagram of Embodiment 2 of the present invention. Detailed Implementation

[0030] The invention will now be further described with reference to the accompanying drawings.

[0031] See Figure 1 A method for one-click enabling / disabling of trusted functions on a DCS host computer, comprising:

[0032] S1 establishes a connection with the trusted agent, authenticates the current username, and checks whether the current user has the permission to enter or exit the trusted account. If the user does not have the permission, an error message is displayed, the user is not authorized, an alarm message is sent, and the operation log is recorded.

[0033] S2 formats the names of files and applications that need to be trusted for entry or exit into shell commands, specifying the operation node for each process and file.

[0034] S3, when exiting, queries the trusted agent for the trusted devices of each node. If the current status is not trusted, it returns success directly; if the current status is trusted, it sends a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, it returns success.

[0035] When executing the deployment, query the trusted agent for the trusted device of each node. If the current status is trusted enabled, return success directly; if the current status is trusted disabled or the status is unknown, send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, return success.

[0036] S4 executes the formatted instructions and collects the executed messages to complete the execution.

[0037] S5 parses the collected messages. Based on the parsed message content, it prompts the user that the operation was successful and saves the operation record in the operation log; if the execution fails, it converts the error code into the error reason and handling steps and prompts the user, and saves the operation record in the operation log.

[0038] See Figure 2 A DCS host computer trusted function one-click enable / disable system, comprising:

[0039] The permission acquisition module is used to establish a connection with the trusted proxy, authenticate the current username, and check whether the current user has the permission to enter or exit the trusted proxy.

[0040] The formatting module is used to format the names of files and applications that require trusted entry or exit, and to specify the operation node for each process and file;

[0041] The exit execution module is used to query the trusted agent for the trusted devices of each node when exiting. If the current status is that the trusted device is not enabled, it will return success directly; if the current status is that the trusted device is enabled, it will send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, it will return success.

[0042] The deployment execution module is used to query the trusted agent for the trusted devices of each node when deploying. If the current status is trusted enabled, it will return success directly; if the current status is trusted disabled or the status is unknown, it will send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, it will return success.

[0043] The formatting instruction execution module is used to execute the formatted instructions, collect the executed messages, and complete the execution.

[0044] The permission alarm module is used to check whether the current user has the permission to enter or exit trusted accounts. If the user does not have the permission, an error message will be sent to the user indicating that the current user does not have the permission, an alarm message will be sent, and the operation log will be recorded.

[0045] The logging module is used to parse the message content, prompt the user that the operation was successful and save the operation record in the operation log; if the execution fails, the error code is converted into the error reason and handling steps and prompted to the user, and the operation record is saved in the operation log.

[0046] Example 1:

[0047] The trusted exit process is as follows:

[0048] S1, the user logs into the sm_console software, selects a file or application, and exits the trusted function.

[0049] S2, the sm_console software establishes a connection with the trusted proxy, sends the current username to the trusted proxy for authentication, and checks whether the current user has the permission to log out. If the user does not have permission, an error message is displayed, indicating that the current user does not have permission, an alarm message is sent, and the operation log is recorded.

[0050] S3, after the user's trusted permissions are verified, formats the names of the files and applications that need to be trusted to exit into shell commands. As shown below, the operation for each process and file is specified with a designated node.

[0051] cluster-l root-w gk1,gk2,gk3,gk4,gk5"stop_trust-p abc;stop_trust-fabc.xml;stop_trust-fbcd.ini"

[0052] S4, each node executes the script stop_trust. stop_trust queries the trusted agent for the file's trusted status. If the current status is trusted but not enabled, it returns success directly. If the current status is trusted but enabled, it sends a request to the trusted agent to disable the trusted function for the specified file. The result is returned after the operation is complete.

[0053] S5 executes formatted shell commands and collects the resulting messages.

[0054] S6 parses the message. If successful, it notifies the user of the successful operation and saves the operation record in the operation log. If the operation fails, it converts the error code into the error reason and handling steps and prompts the user, and saves the operation record in the operation log.

[0055] Example 2:

[0056] The process for credible input is as follows:

[0057] S1, the user logs into the sm_console software, selects a file or application, and performs the trusted function deployment operation.

[0058] S2, the Sm_console software establishes a connection with the trusted agent, sends the current username to the trusted agent for authentication, and checks whether the current user has the necessary permissions for trusted input. If the user lacks permissions, an error message is displayed, indicating that the current user does not have the necessary permissions. An alarm message is also sent, and the operation log is recorded.

[0059] S3, after the user's trusted permissions are verified, formats the names of the files and applications that need to be trusted into shell commands. As shown below, the operation for each process and file is specified with a designated node.

[0060] cluster-l root-w gk1,gk2,gk3,gk4,gk5"start_trust-p abc;start_trust-fabc.xml;start_trust-fbcd.ini"

[0061] S4: Each node executes the script `start_trust`. `start_trust` queries the trusted agent for the file's trusted status. If the current status is trusted and enabled, it returns success directly. If the current status is trusted and not enabled or the status is unknown, it sends a request to the trusted agent to disable the trusted function for the specified file. The operation result is returned after completion.

[0062] S5 executes formatted shell commands and collects the resulting messages.

[0063] S6 parses the message. If successful, it notifies the user of the successful operation and saves the operation record in the operation log. If the operation fails, it converts the error code into the error reason and handling steps and prompts the user, and saves the operation record in the operation log.

[0064] Example 2:

[0065] Please see Figure 3 As shown, the present invention also provides an electronic device 100 for a one-click activation / deactivation method of a DCS host computer trusted function; the electronic device 100 includes a memory 101, at least one processor 102, a computer program 103 stored in the memory 101 and executable on the at least one processor 102, and at least one communication bus 104.

[0066] The memory 101 can be used to store the computer program 103. The processor 102 implements the steps of the one-click activation / deactivation method for a DCS host computer trusted function described in Embodiment 1 by running or executing the computer program stored in the memory 101 and calling the data stored in the memory 101. The memory 101 may mainly include a program storage area and a data storage area. The program storage area may store the operating system, at least one application program required for a function (such as sound playback function, image playback function, etc.), etc.; the data storage area may store data created according to the use of the electronic device 100 (such as audio data), etc. In addition, the memory 101 may include non-volatile memory, such as hard disk, memory, plug-in hard disk, smart media card (SMC), secure digital (SD) card, flash card, at least one disk storage device, flash memory device, or other non-volatile solid-state storage device.

[0067] The at least one processor 102 may be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The processor 102 may be a microprocessor or any conventional processor. The processor 102 is the control center of the electronic device 100, connecting various parts of the electronic device 100 via various interfaces and lines.

[0068] The memory 101 in the electronic device 100 stores multiple instructions to implement a one-click enable / disable method for trusted functions of a DCS host computer, and the processor 102 can execute the multiple instructions to achieve the following:

[0069] Establish a connection with the trusted proxy, authenticate the current username, and check whether the current user has the right to enter or exit the trusted account.

[0070] Format the names of files and applications that require trusted input or output, and specify the operation node for each process and file;

[0071] When exiting, query the trusted agent for the trusted devices of each node. If the current status is not trusted, return success directly; if the current status is trusted, send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, return success.

[0072] When executing the deployment, query the trusted agent for the trusted device of each node. If the current status is trusted enabled, return success directly; if the current status is trusted disabled or the status is unknown, send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, return success.

[0073] Execute the formatted instructions, collect the executed messages, and complete the execution.

[0074] Example 3:

[0075] If the modules / units integrated in the electronic device 100 are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments can also be implemented by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various method embodiments described above. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium can include: any entity or device capable of carrying the computer program code, a recording medium, a USB flash drive, a portable hard drive, a magnetic disk, an optical disk, a computer memory, and a read-only memory (ROM).

[0076] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0077] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0078] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0079] These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable apparatus for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

Claims

1. A method for one-click activation / deactivation of trusted functions in a DCS host computer, characterized in that, include: Establish a connection with the trusted proxy, authenticate the current username, and check whether the current user has the right to enter or exit the trusted account. Format the names of files and applications that require trusted entry or exit as shell commands; When exiting, query the trusted agent for the trusted devices of each node. If the current status is not trusted, return success directly; if the current status is trusted, send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, return success. When executing the deployment, query the trusted agent for the trusted device of each node. If the current status is trusted enabled, return success directly; if the current status is trusted disabled or the status is unknown, send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, return success. Execute the formatted instructions, collect the executed messages, and complete the execution.

2. The method for one-click activation / deactivation of trusted functions in a DCS host computer according to claim 1, characterized in that, After checking whether the current user has the right to trust entry or exit, if the user does not have the right, an error message will be displayed and the user will be notified that the current user does not have the right. An alarm message will be sent and the operation log will be recorded.

3. The method for one-click activation / deactivation of trusted functions in a DCS host computer according to claim 1, characterized in that, The collected messages are parsed.

4. The method for one-click activation / deactivation of trusted functions in a DCS host computer according to claim 3, characterized in that, Based on the message parsing content, the user is prompted that the operation was successful and the operation record is saved in the operation log; if the execution fails, the error code is converted into the error reason and handling steps and prompted to the user, and the operation record is saved in the operation log.

5. A one-click enable / disable system for trusted functions in a DCS host computer, characterized in that, include: The permission acquisition module is used to establish a connection with the trusted proxy, authenticate the current username, and check whether the current user has the permission to enter or exit the trusted proxy. The formatting module is used to format file and application names that require trusted entry or exit into shell commands; The exit execution module is used to query the trusted agent for the trusted devices of each node when exiting. If the current status is that the trusted device is not enabled, it will return success directly; if the current status is that the trusted device is enabled, it will send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, it will return success. The deployment execution module is used to query the trusted agent for the trusted devices of each node when deploying. If the current status is trusted enabled, it will return success directly; if the current status is trusted disabled or the status is unknown, it will send a request to the trusted agent to disable the trusted function of the specified file. After the operation is completed, it will return success. The formatting instruction execution module is used to execute the formatted instructions, collect the executed messages, and complete the execution.

6. A one-click enable / disable system for trusted functions of a DCS host computer according to claim 5, characterized in that, Also includes: The permission alarm module is used to check whether the current user has the permission to enter or exit trusted accounts. If the user does not have the permission, an error message will be sent to the user indicating that the current user does not have the permission, an alarm message will be sent, and the operation log will be recorded.

7. A DCS host computer trusted function one-click enable / disable system according to claim 5, characterized in that, Also includes: The logging module is used to parse the message content, prompt the user that the operation was successful, and save the operation record in the operation log; If the operation fails, the error code will be converted into the error reason and the handling steps and prompted to the user, and the operation record will be saved in the operation log.

8. An electronic device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the one-click activation / deactivation method for trusted functions of a DCS host computer according to any one of claims 1 to 4.

9. A storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the steps of the one-click activation / deactivation method for trusted functions of a DCS host computer as described in any one of claims 1 to 4.

Images