Safety protection methods, devices, equipment, media and program products for drawing files

Abstract

The present disclosure relates to the field of data security technology, and discloses a method, apparatus, device, medium, and program product for the security protection of drawing files. The method for the security protection of drawing files includes: obtaining a first drawing file; obtaining a matching result of matching the first feature information corresponding to the first drawing file with each second feature information in a target feature information set; wherein the first feature information is obtained by parsing the first drawing file to obtain the description information of the target element in the first drawing file, and performing feature extraction on the description information of the obtained target element; the target feature information set includes the second feature information of at least one protected drawing file; and performing security protection management on the first drawing file based on the matching result. This method can effectively reduce the occurrence of misidentification or omission of drawings, thereby helping to improve the reliability and accuracy of the matching results and ensure the security of the drawings.

Description

Technical Field

[0001] The present disclosure relates to the field of data security technology, and in particular to a method, apparatus, equipment, medium and program product for security protection of drawing files. Background Art

[0002] Currently, in private / dedicated networks within enterprises or other organizations, it's common to install security management software on terminal devices. This software can be used to control network access, perform security checks, and prevent data leaks, particularly for drawings stored on these devices.

[0003] Taking circuit drawings as an example, the production and manufacturing of high-tech manufacturing industries rely on the circuit working principles provided by circuit drawings. Therefore, to ensure the security of circuit drawings, a method that can provide targeted security protection for drawing files is urgently needed. Summary of the Invention

[0004] In view of this, the present disclosure provides a method, apparatus, device, medium and program product for security protection of drawing files to solve the problem of low security protection of drawing files.

[0005] In a first aspect, the present disclosure provides a method for protecting a drawing file, the method comprising:

[0006] Obtain the first drawing file;

[0007] Obtaining a matching result of matching first feature information corresponding to the first drawing file with each second feature information in the target feature information set; wherein the first feature information is obtained by parsing the first drawing file to obtain description information of a target element in the first drawing file, and performing feature extraction on the obtained description information of the target element; the target feature information set includes the second feature information of at least one protected drawing file;

[0008] The first drawing file is managed for security protection based on the matching result.

[0009] In a second aspect, the present disclosure provides a safety protection device for drawing files, the device comprising:

[0010] A first acquisition module, used to acquire a first drawing file;

[0011] a second acquisition module, configured to obtain a matching result of matching first feature information corresponding to the first drawing file with each second feature information in the target feature information set; wherein the first feature information is obtained by parsing the first drawing file to obtain description information of a target element in the first drawing file, and performing feature extraction on the obtained description information of the target element; and the target feature information set includes the second feature information of at least one protected drawing file;

[0012] The management module is used to perform security protection management on the first drawing file based on the matching result.

[0013] In a third aspect, the present disclosure provides a computer device comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the computer instructions to execute the drawing file security protection method of the first aspect or any corresponding embodiment thereof.

[0014] In a fourth aspect, the present disclosure provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the method for securing drawing files of the first aspect or any corresponding embodiment thereof.

[0015] In a fifth aspect, the present invention provides a computer program product comprising computer instructions for enabling a computer to execute the method for securing drawing files according to the first aspect or any corresponding embodiment thereof.

[0016] The present embodiment provides a method for security protection of drawing files. The method performs security protection management on the first drawing file based on the matching results of first feature information corresponding to the first drawing file and each second feature information in a target feature information set. The first feature information is obtained by parsing the first drawing file to obtain description information of a target element in the first drawing file and extracting features from the description information, and the target feature information set includes the second feature information of at least one protected drawing file. Since the description information of the target element can describe the target element from a semantic perspective, and the first feature information is obtained by performing feature extraction on this basis, that is, by incorporating the idea of ​​natural language into the security protection of drawing files, it is possible to effectively reduce the occurrence of misidentification or missed identification, thereby helping to improve the reliability and accuracy of the matching results and ensure the security of the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the specific embodiments of the present disclosure or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the specific embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0018] Figure 1 is a schematic diagram of a network framework according to an embodiment of the present disclosure;

[0019] Figure 2 is a flowchart of a method for protecting a drawing file according to an embodiment of the present disclosure;

[0020] Figure 3 is a flow chart of another method for protecting the security of drawing files according to an embodiment of the present disclosure;

[0021] Figure 4 is a flowchart of another method for protecting the security of drawing files according to an embodiment of the present disclosure;

[0022] Figure 5 is a structural block diagram of a safety protection device for a drawing file according to an embodiment of the present disclosure;

[0023] Figure 6 Schematic diagram of the hardware structure of the computer device according to the embodiment of the present disclosure. DETAILED DESCRIPTION

[0024] The following describes embodiments of the present disclosure in more detail with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as limited to the embodiments described herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are for illustrative purposes only and are not intended to limit the scope of protection of the present disclosure.

[0025] In the description of the embodiments of the present disclosure, the term "including" and similar terms should be understood as open inclusion, i.e., "including but not limited to". The term "based on" should be understood as "based at least in part on". The term "one embodiment" or "the embodiment" should be understood as "at least one embodiment". The term "some embodiments" should be understood as "at least some embodiments". Other explicit and implicit definitions may be included below.

[0026] Herein, unless explicitly stated otherwise, executing a step “in response to A” does not mean executing the step immediately after “A” but may include one or more intermediate steps.

[0027] It is understandable that the data involved in this technical solution (including but not limited to the data itself, the acquisition, use, storage or deletion of the data) shall comply with the requirements of relevant laws, regulations and relevant provisions.

[0028] It is understandable that before using the technical solutions disclosed in the various embodiments of the present disclosure, the type, scope of use, usage scenarios, etc. of the information involved in the present disclosure should be informed to relevant users and authorization should be obtained from relevant users in an appropriate manner in accordance with relevant laws and regulations. The relevant users may include any type of right holders, such as individuals, enterprises, and groups.

[0029] For example, in response to receiving an active request from a user, a prompt message is sent to the relevant user to clearly prompt the relevant user that the operation requested to be performed will require obtaining and using the information of the relevant user, so that the relevant user can independently choose whether to provide information to the software or hardware such as the electronic device, application, server or storage medium that executes the operation of the technical solution of the present disclosure based on the prompt message.

[0030] As an optional but non-limiting implementation, in response to receiving an active request from a relevant user, a prompt message may be sent to the relevant user in the form of a pop-up window, in which the prompt message may be presented in text form. Furthermore, the pop-up window may also include a selection control for the user to select "agree" or "disagree" to provide information to the electronic device.

[0031] It is understandable that the above notification and the process of obtaining user authorization are merely illustrative and do not constitute a limitation on the implementation of the present disclosure. Other methods that comply with relevant laws and regulations may also be applied to the implementation of the present disclosure.

[0032] Office security typically involves the security management of networks, identities, and terminals. By implementing private network configuration, access control, terminal management within private networks, and information security protection, digital office work can be made more secure, efficient, and user-friendly. Network-level security management ensures the secure and efficient operation of private networks, such as office networks, and thus ensures the secure transmission and storage of business data. Identity-level security management improves the efficiency and security of user authentication for accessing private networks. Terminal-level security management enables unified management of terminal devices within private networks, prevents data leaks, and protects against terminal threats, thereby ensuring the security of enterprise data.

[0033] In actual applications, the security management of networks, identities, and terminals can achieve technical linkage in multiple technical branches such as networking strategies, network access and control, remote access, unified terminal management, terminal detection and response, enterprise data leakage prevention, and identity authentication management, making digital office simpler, more efficient, and easier to implement.

[0034] In related technologies, when a company or other organization manages a large number of drawing files, to ensure access security, they use drawing name identification to distinguish each drawing and provide targeted access. However, since drawing names can be modified at will, and some drawings are not assigned corresponding drawing names during storage, these drawings cannot be effectively identified, thus affecting access security.

[0035] In view of this, embodiments of the present disclosure provide a method for securing drawing files. After acquiring a first drawing file, security management is performed on the first drawing file based on the matching results of first feature information corresponding to the first drawing file with each second feature information in a target feature information set. This method effectively reduces the occurrence of misidentification or missed identification, thereby helping to improve the reliability and accuracy of the matching results. The first feature information is obtained by parsing the first drawing file to obtain descriptive information of a target element in the first drawing file, and feature extraction is performed on the obtained descriptive information of the target element; the target feature information set includes the second feature information of at least one protected drawing file.

[0036] As an optional application scenario of the security protection method for drawing files provided by the embodiment of the present invention, Figure 1 As shown, a server with security management software is installed in the server device 1, and a client with security management software is installed in the terminal devices 2 to n. The server and the client are connected through a first network communication connection, thereby providing security protection for the drawing files in the terminal devices 2 to n.

[0037] According to an embodiment of the present disclosure, an embodiment of a method for security protection of drawing files is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0038] In this embodiment, a method for protecting the security of drawing files is provided, which can be used in the client of the security management software in the above-mentioned terminal device. Figure 2 is a flow chart of a method for protecting the security of a drawing file according to an embodiment of the present disclosure. Figure 2 As shown, the process includes the following steps:

[0039] Step S201: Obtain a first drawing file.

[0040] The first drawing file can be a locally stored offline drawing or an online drawing. The type of the first drawing file can be a circuit drawing, an architectural drawing, or an interior design drawing, etc., which can be determined based on actual business needs.

[0041] The first drawing file can be obtained from a local or cloud server, or can be obtained by downloading, editing, or creating. The drawing file format may include but is not limited to any of the following: .schdoc (a software circuit diagram file format), .kicad_sch (a software circuit diagram file format), .edf (a software native drawing file format), etc. The specific drawing file format to be used depends on the actual design requirements, software compatibility, and data exchange requirements, and is not limited here.

[0042] Step S202 : obtaining a matching result of matching the first feature information corresponding to the first drawing file with each piece of second feature information in the target feature information set.

[0043] Among them, the first characteristic information is obtained by parsing the first drawing file to obtain the description information of the target element in the first drawing file, and performing feature extraction on the obtained description information of the target element. It should be noted that the parsing of the first drawing file can be implemented on the client side of the security management software, or on the server side of the security management software, etc., and there is no limitation on it here. Taking the server side of the security management software as an example, the client sends the first drawing file to the server side, and the server side parses the first drawing file and performs other processing to obtain the first characteristic information, and matches the first characteristic information with each second characteristic information in the target feature set to obtain a matching result, and sends the matching result to the client side. Accordingly, the matching result can be obtained on the client side.

[0044] Since the first drawing file is an unknown drawing file, in order to understand the drawing content in the first drawing file, the first drawing file is parsed to concretely represent the drawing content in the first drawing file, thereby obtaining descriptive information of the target element in the first drawing file. For example, if the first drawing file is a circuit drawing, the descriptive information may include the connection relationship and annotation information of the pins corresponding to each target electronic component in the circuit drawing. The annotation information includes, but is not limited to, information such as the component name, model, value, power, and operating conditions. For another example, if the first drawing file is a mechanical drawing, the descriptive information may include information such as the size, shape, and installation method corresponding to each target part in the circuit drawing. The parsing process may be performed through semantic recognition, text matching, or using a specified code parsing tool. For example, if the parsing is performed through semantic recognition, the first drawing file may be converted into an abstract syntax tree (AST) using a preset lexer and parser, and the descriptive information of the target electronic component may be extracted from the AST. If parsing is performed using text matching, information can be extracted by identifying keywords, variable names, function names, etc. of the target element, thereby obtaining the description information of the target element. The specific parsing process can be determined based on the actual parsing method used and is not limited here.

[0045] Feature extraction is performed on the description information to reduce interference from redundant data, thereby obtaining first feature information that can express the key content of the first drawing file. For example, feature extraction can be performed by hashing or one-hot encoding the description information. The specific feature extraction process can be determined based on actual needs.

[0046] The target feature information set includes the second feature information of at least one protected drawing file. A protected drawing file can be understood as a drawing file that specifies in advance that the drawing content needs to be protected. In order to determine the matching between the first drawing file and each protected drawing file, the first feature information corresponding to the first drawing file is matched with each second feature information in the target feature information set, so as to clarify the difference between the first feature information and each second feature information through the obtained matching result, thereby facilitating the subsequent rapid identification of whether the first drawing file requires targeted security protection, thereby effectively reducing the occurrence of misidentification or missed identification and improving the reliability and accuracy of the matching results.

[0047] Step S203: Perform security protection management on the first drawing file based on the matching result.

[0048] The matching results can be used to determine the matching status between the first drawing file and each protected drawing file. Based on the matching status, targeted security protection management can be performed on the first drawing file. The security protection management includes but is not limited to blocking, releasing, or adding a protection mark to protect the first drawing file.

[0049] For example, if the matching result indicates that the first drawing file is a protected drawing file, the preset operation on the first drawing file is blocked. If the matching result indicates that the first drawing file is not a protected drawing file, the preset operation on the first drawing file is allowed. Alternatively, if the matching result indicates that the first drawing file is not a protected drawing file, the preset operation on the first drawing file is allowed, but a protection flag is added to the first drawing file to improve the transmission security of the first drawing file.

[0050] The security protection method for drawing files provided in this embodiment performs security protection management on the first drawing file based on the matching results of the first feature information corresponding to the first drawing file and each second feature information in the target feature information set. The first feature information is obtained by parsing the first drawing file to obtain the description information of the target element in the first drawing file and performing feature extraction on the description information, and the target feature information set includes the second feature information of at least one protected drawing file. Since the description information of the target element can describe the target element from a semantic perspective, and the first feature information is obtained by performing feature extraction on this basis, that is, by incorporating the concept of natural language into the security protection of drawing files, it can effectively reduce the occurrence of misidentification or missed identification, thereby helping to improve the reliability and accuracy of the matching results and ensure the security of the drawings.

[0051] In some optional implementations, the above step S201 includes:

[0052] Step a1: In response to a preset operation on a first drawing file, obtain the first drawing file.

[0053] The preset operation includes at least one of the following: sending the first drawing file to the outside of the first network, downloading the first drawing file, creating the first drawing file, and editing the first drawing file. Specifically, upon detecting a preset operation on the first drawing file, the first drawing file is retrieved to ensure the security of the first drawing file, allowing for subsequent targeted security management and improved access security to the first drawing file. The first network may be understood as an intranet used by an enterprise or other organization.

[0054] In other optional implementations, when security protection management is performed on the first drawing file based on the matching result, in response to the matching result indicating that the first drawing file is a protected drawing file, preset operations on the first drawing file can be blocked, or in response to the matching result indicating that the first drawing file is not a protected drawing file, preset operations on the first drawing file can be released, so as to improve the flexibility of security access management for the first drawing file.

[0055] In some optional implementation scenarios, if the first drawing file is a circuit drawing, the target element in the first drawing file is the target electronic component. Among them, the circuit drawing is a drawing used to describe circuit connections and component configurations. The circuit drawing can clearly show the function, structure and working principle of the circuit, and is one of the basic tools for electronic engineers to perform circuit design and troubleshooting. For example: the target electronic component can be a capacitor, resistor, inductor, potentiometer, electron tube, connector, sensor, etc. Among them, the file format of the circuit drawing may include but is not limited to: .schdoc (a format for describing circuit diagrams), .kicad_sch (a format for describing circuit diagrams), .brd (a layout file format).

[0056] If the first drawing file is an engineering drawing, the target element in the first drawing file is the building structure, mechanical parts, piping layout, etc. Engineering drawings are drawings used for engineering design and construction and are one of the key documents in a project. Engineering drawings typically include architectural drawings, structural drawings, electrical drawings, piping drawings, and other types. The specific target element will depend on the content of the engineering drawing. For example, if the engineering drawing is an architectural drawing, the corresponding target element is the target building component. For example, the target building component can be a slab, beam, column, wall, etc.

[0057] If the engineering drawing type is a mechanical drawing, the corresponding target element is the target part. For example, the target part can be a shaft, gear, coupling, valve, etc. Different types of engineering drawings have different corresponding target elements.

[0058] The following will take the first drawing file as an example, which is a circuit drawing, to specifically explain the process of parsing the first drawing file:

[0059] Step b1: parsing the source code of the circuit drawing to obtain description information of the target electronic components in the circuit drawing.

[0060] Source code is a text file generated when creating a circuit schematic using a specific application. The file format of source code depends on the file formats supported by the application. Different applications may support different file formats, such as .sch or .brd.

[0061] If the circuit diagram remains unchanged, the source code will usually remain unchanged. Therefore, in order to fully understand the layout principle and execution logic of the circuit to be tested in the circuit diagram, the source code of the circuit diagram is obtained to obtain the specific description information of the circuit to be tested through the source code.

[0062] To clarify the circuit structure and layout characteristics of the circuit under test, the source code is parsed to obtain descriptive information that specifically describes the workings of the circuit under test. This descriptive information includes, but is not limited to, the target electronic component, its pin connections, and annotations. Annotations include, but are not limited to, the target electronic component's name, pin function, and circuit design instructions.

[0063] In some optional implementations, the above step b1 includes:

[0064] Step b11, performing field parsing on the source code of the circuit drawing to determine the target electronic component in the circuit drawing;

[0065] To identify the target electronic component involved in the circuit under test in the circuit diagram, field parsing is performed on the source code to identify the field or location where the target electronic component's description information resides. For example, the syntax and structure of the source code can be used to determine the specific field or tag where the target electronic component resides. This allows for targeted parsing to identify the target electronic component in the circuit diagram, helping to ensure reliable identification of the target electronic component.

[0066] Specifically, the above step b11 includes:

[0067] Step b111, performing field parsing on the source code to determine the fields in the circuit drawing;

[0068] Step b112: Screen the fields, determine the target field, and use the electronic component corresponding to the target field as the target electronic component.

[0069] Specifically, source code often includes information irrelevant to the circuit structure of the circuit being tested, such as definitions of various variables and functions, code control structures, code comments, and programming language-specific syntax and rules. Therefore, to reduce the interference of invalid information, the source code is parsed to identify fields related to electronic components. For example, fields related to electronic components may include information such as the component name, model, parameters, and connection method.

[0070] To identify the target electronic component, the parsed fields are further filtered to identify fields directly related to the electronic component. The target field is then obtained, and the electronic component corresponding to the target field is used as the target electronic component. For example, a field library corresponding to electronic components is pre-set. This field library includes fields for multiple candidate electronic components. The parsed field is then matched against the fields of the multiple candidate electronic components, and the matched field is used as the target field.

[0071] By parsing and filtering fields, the target field can be determined, which enables the rapid location of information related to the circuit structure in the source code. Subsequently, during feature extraction, the focus can be placed on information related to the circuit to be detected, thereby helping to improve the efficiency of identifying target electronic components.

[0072] Step b12: extracting description information of the target electronic component from the source code.

[0073] In order to determine the layout of the target electronic components in the circuit to be detected, the description information of the target electronic components is extracted from the source code, so that the layout settings and layout planning between the target electronic components can be clarified based on the description information, thereby improving the reliability of the first feature information during subsequent feature extraction.

[0074] Specifically, the above step b12 includes:

[0075] Step b121 , extracting the connection relationship between target electronic components and the model information of the target electronic components to obtain description information.

[0076] To determine the signal flow paths between target electronic components and the functional relationships between target electronic components in the circuit to be tested, the connection relationships between the target electronic components are extracted from the source code. The connection relationships can be determined based on the pin information of the target electronic components.

[0077] Furthermore, since the functions performed by electronic components of different models are different, in order to better locate the function of the target electronic component in the circuit to be tested, the model information of the target electronic component is extracted from the source code, and then combined with the connection relationship between the corresponding target electronic component and other target electronic components, the description information of the target electronic component is obtained, which helps to better understand and analyze the role of the target electronic component in the circuit to be tested.

[0078] By parsing the source code of the first drawing file in the above-mentioned manner, the description information of the target electronic component is determined, and the layout position of the target electronic component in the circuit to be detected and the function performed can be quickly located. Therefore, when performing feature extraction, the interference of invalid information can be effectively avoided, and the reliability and accuracy of the first feature information can be improved. Therefore, based on the matching result of the first feature information with each second feature information in the target feature information set, when performing security access management on the first drawing file, the pertinence and accuracy of security protection can be effectively improved.

[0079] In some optional embodiments, in order to make the first feature information more reliable and able to fully express the layout position of each target electronic component in the circuit to be detected and the corresponding function performed, the description information of each target electronic component is separately processed, and then the electronic component features of multiple target electronic components are integrated to obtain a first feature vector corresponding to the first feature information. That is, the description information of the current target electronic component is subjected to feature extraction processing to obtain the electronic component features of the current target electronic component in the circuit to be detected. After the description information of all target electronic components has completed feature processing, all the obtained electronic component features are integrated to obtain a first feature vector that can represent the specific circuit principle of the circuit to be detected.

[0080] In this embodiment, a method for protecting the security of drawing files is provided, which can be used in the client of the security management software in the terminal device. Figure 3 is a flow chart of a method for protecting the security of a drawing file according to an embodiment of the present disclosure. Figure 3 As shown, the process includes the following steps:

[0081] Step S301: Obtain a first drawing file.

[0082] Step S302: Obtain a matching result of matching the first feature information corresponding to the first drawing file with each piece of second feature information in the target feature information set.

[0083] Specifically, the above step S302 includes:

[0084] Step S3021 : Match the first eigenvector with each second eigenvector to determine the similarity between the first eigenvector and the second eigenvector.

[0085] The first eigenvector corresponds to the first feature information, and the second eigenvector corresponds to the second feature information.

[0086] The first feature information and the second feature information are each represented in the form of a feature vector to reduce the difficulty of matching during subsequent feature matching. The dimension of the feature vector corresponds to the number of features. In some examples, the vector dimension of the first feature vector is the same as the vector dimension of the second feature vector.

[0087] In order to determine the matching between the first eigenvector and the second eigenvector, the cosine value between the first eigenvector and the second eigenvector is determined, and then according to the size of the cosine value, the similarity between the first eigenvector and the second eigenvector can be clarified, thereby helping to improve the accuracy of the similarity determination.

[0088] The cosine value between the first eigenvector and the second eigenvector can be determined by the following formula:

[0089]

[0090] Where S(A,B) represents the cosine value between the first and second eigenvectors, A represents the first eigenvector, B represents the second eigenvector, i represents the feature of the current dimension, and n represents the total number of eigenvector dimensions. The value range of S(A,B) is [-1, 1]. If S(A,B) is -1, it means that the first and second eigenvectors are completely dissimilar. If S(A,B) is 1, it means that the first and second eigenvectors are completely similar.

[0091] Step S3022: Based on the comparison result between the similarity and the preset similarity threshold, a matching result between the first drawing file and the second feature vector is obtained.

[0092] In order to identify whether the first drawing file is the same as the protected circuit drawing, the obtained similarity is compared with the preset similarity threshold to determine the comparison result between the two, and then the matching result is determined based on the comparison result, which can effectively improve the efficiency of security protection management for the first drawing file. Among them, the preset similarity threshold can be understood as the minimum similarity at which the first eigenvector and the second eigenvector are considered to match. For example: if the comparison result indicates that the similarity is greater than or equal to the preset similarity threshold, it means that the first drawing file matches the protected circuit drawing, and then it can be determined that the first drawing file is a protected drawing file. If the comparison result indicates that the similarity is less than the preset similarity threshold, it means that the first drawing file does not match the protected circuit drawing, and then it can be determined that the first drawing file is not a protected drawing file.

[0093] Step S303: Perform security protection management on the first drawing file based on the matching result.

[0094] Specifically, the above step S303 includes:

[0095] Step S3031: In response to the existence of a second feature vector whose matching result indicates a similarity greater than or equal to a preset similarity threshold, a target management level of the first drawing file is determined based on the management level of the protected drawing file corresponding to the matched second feature vector, so as to perform security protection management on the first drawing file according to the target management level.

[0096] Specifically, if the matching result indicates that the similarity is greater than or equal to a preset similarity threshold, it means that the first drawing file matches the protected circuit drawing. Therefore, in order to improve the management efficiency of the first drawing file, the target management level of the first drawing file can be determined based on the management level of the protected drawing file corresponding to the matched second feature vector, so that the first drawing file can be managed according to the target management level in the future, thereby ensuring the timeliness of the management of the first drawing file and helping to reduce the cost of supervising circuit drawings.

[0097] The security protection method for drawing files provided in this embodiment can automatically detect and identify target electronic components in circuit drawings, improving work efficiency and accuracy. Furthermore, by determining whether a first drawing file is a protected drawing file through feature vector matching, it can effectively avoid missed or misidentified instances, thereby effectively improving the accuracy and reliability of drawing file security protection management.

[0098] In some optional implementations, the target feature information set may contain multiple pieces of second feature information, and the corresponding businesses or products may not be completely identical. To avoid missed identification, during the security protection process for the first drawing file, the first feature necklace of the first drawing file may be matched against each second feature vector. Based on the matching results between the first feature vector and each second feature vector, it is determined whether any of the multiple second feature vectors has a similarity with the first feature vector greater than or equal to a preset similarity threshold, thereby helping to improve the accuracy of the matching results.

[0099] In some optional implementations, the method is applied to the client of the security management software, and based on this, the method further includes: receiving a target feature information set issued by the server of the security management software. In the production and manufacturing process of an enterprise or other organization, when there are many links involved, the accuracy of the security protection of the drawing file may be affected due to business isolation and other reasons. Therefore, in order to ensure the security of the drawing file protection, the server of the security management software can send a target feature information set to the client of the security management software, so that when the client of the security management software detects a predicted operation on the first drawing file, it can perform targeted security protection management on the first drawing file based on the obtained target feature information set, thereby improving the efficiency of the security protection management of the first drawing file and ensuring the timeliness of the security protection of the first drawing file.

[0100] As a specific application embodiment of the embodiment of the present disclosure, the server of security management software A is installed in server device 1, and the client of security management software A is installed in terminal device 2 to terminal device n respectively. Through interaction with the server of security management software A, multiple drawing files that need to be protected are determined. Based on the source code of each drawing file that needs to be protected, the second feature information of each drawing file that needs to be protected is determined, thereby obtaining a target feature information set. The server of security management software A sends the target feature information set to the client of corresponding security management software A, for example, terminal device 2 to terminal device n. On this basis, terminal device 2 to terminal device n can use the target feature information set to identify the first drawing file currently obtained, and then perform targeted security protection management on the first drawing file.

[0101] Specifically, taking the first drawing file as a circuit drawing as an example, the process of performing security protection on the circuit drawing in the device where the client of the security management software A is located is as follows: Figure 4 As shown, the following steps are included:

[0102] Obtain the source code of the circuit diagram. The circuit diagram may be obtained by the client of security management software A in response to a preset operation on the circuit diagram. The preset operation includes at least one of the following: sending the circuit diagram outside the first network, downloading the circuit diagram, creating the circuit diagram, editing the circuit diagram, or retrieving the circuit diagram locally.

[0103] The source code is parsed to obtain description information of the target electronic component in the circuit drawing, and then feature extraction is performed on the description information to obtain first feature information corresponding to the circuit drawing.

[0104] The first feature information is matched with the second feature information in the target feature information set to determine the similarity between the first feature vector and the second feature vector. Based on the comparison result between the similarity and the preset similarity threshold, the matching result between the first drawing file and the second feature vector is obtained. If the comparison result indicates that the similarity is greater than or equal to the preset similarity threshold, it means that the first drawing file matches the protected circuit drawing, and the first drawing file is determined to be a protected drawing file. If the comparison result indicates that the similarity is less than the preset similarity threshold, it means that the first drawing file does not match the protected circuit drawing, and the first drawing file is determined to be not a protected drawing file. Among them, the target feature information set is issued by the server of security management software A. The second feature information is the feature information of the protected drawing file. The second feature information is obtained by parsing the source code of the protected circuit drawing and extracting the feature information of the target electronic component in the obtained protected circuit drawing.

[0105] If the matching result indicates that the first drawing file is a protected drawing file, the preset operation on the first drawing file is blocked. If the matching result indicates that the first drawing file is not a protected drawing file, the preset operation on the first drawing file is released, and the circuit drawing can be sent to the audit for review.

[0106] Through the above-mentioned security protection method for drawing files, it is possible to ensure that the first characteristic information is not affected by the modification of the drawing suffix or name during the extraction process, thereby improving the reliability of the first characteristic information. When the security protection of the drawing files is subsequently performed, the occurrence of missed recognition or misidentification can be effectively reduced, thereby effectively improving the accuracy and reliability of security protection for drawing files.

[0107] This embodiment also provides a safety protection device for drawing files, which is used to implement the above-mentioned embodiments and preferred embodiments. Details already described will not be repeated here. As used below, the term "module" may refer to a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementation using hardware, or a combination of software and hardware, is also possible and contemplated.

[0108] This embodiment provides a safety protection device for drawing files, such as Figure 5 As shown, including:

[0109] A first acquisition module 501 is used to acquire a first drawing file;

[0110] The second acquisition module 502 is configured to obtain a matching result of matching the first feature information corresponding to the first drawing file with each second feature information in the target feature information set; wherein the first feature information is obtained by parsing the first drawing file to obtain description information of a target element in the first drawing file, and performing feature extraction on the obtained description information of the target element; and the target feature information set includes the second feature information of at least one protected drawing file;

[0111] The management module 503 performs security protection management on the first drawing file based on the matching result.

[0112] In some optional implementations, the first acquisition module 501 includes:

[0113] A file acquiring unit, configured to acquire the first drawing file in response to a preset operation on the first drawing file;

[0114] The preset operation includes at least one of the following: sending the first drawing file to the outside of the first network, downloading the first drawing file, creating the first drawing file, and editing the first drawing file.

[0115] In some optional implementations, the management module 503 includes:

[0116] a first management unit, configured to block a preset operation on the first drawing file in response to the matching result indicating that the first drawing file is a protected drawing file;

[0117] or

[0118] The second management unit is configured to release a preset operation on the first drawing file in response to the matching result indicating that the first drawing file is not a protected drawing file.

[0119] In some optional implementations, the first drawing file is a circuit drawing, and the target element in the first drawing file is a target electronic component;

[0120] The module for parsing the first drawing file to obtain description information of the target element in the first drawing file includes:

[0121] The parsing unit is used to parse the source code of the circuit drawing to obtain description information of the target electronic components in the circuit drawing.

[0122] In some optional implementations, the parsing unit includes:

[0123] A first processing unit is configured to perform field parsing on the source code of the circuit drawing to determine a target electronic component in the circuit drawing;

[0124] The second processing unit is configured to extract description information of the target electronic component from the source code.

[0125] In some optional implementations, the first processing unit includes:

[0126] A first execution unit is used to perform field parsing on the source code to determine the fields in the circuit drawing;

[0127] The screening unit is used to screen the fields, determine the target fields, and use the electronic components corresponding to the target fields as the target electronic components.

[0128] In some optional embodiments, the second processing unit includes:

[0129] The extraction unit is used to extract the connection relationship between target electronic components and the model information of the target electronic components to obtain description information.

[0130] In some optional implementations, the second acquisition module 502 includes:

[0131] a matching unit, configured to match the first eigenvector with the second eigenvector, determine the similarity between the first eigenvector and each of the second eigenvectors, the first eigenvector corresponding to the first feature information, and the second eigenvector corresponding to the second feature information;

[0132] The third processing unit is configured to obtain a matching result between the first feature information and each piece of the second feature information based on a comparison result between the similarity and a preset similarity threshold.

[0133] In some optional implementations, the management module 503 includes:

[0134] The fourth processing unit is used to determine the target management level of the first drawing file according to the management level of the protected drawing file corresponding to the matched second feature vector in response to the existence of a matching result indicating that the similarity is greater than or equal to a preset similarity threshold, so as to perform security protection management on the first drawing file according to the target management level.

[0135] In some optional implementations, the above-mentioned security protection device for drawing files is applied to a client of security management software, and the security protection device further includes:

[0136] The receiving unit is used to receive the target feature information set sent by the server of the security management software.

[0137] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0138] The security protection device for the drawing files in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0139] The present disclosure also provides a computer device having the above Figure 5 Safety guards as shown in the drawing files.

[0140] See also Figure 6 , Figure 6 is a structural diagram of a computer device provided by an optional embodiment of the present disclosure, such as Figure 6 As shown, the computer device includes: one or more processors 10, memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components utilize different buses to communicate with each other and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in the memory or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Equally, multiple computer devices can be connected, and each device provides part of the necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 6 A processor 10 is taken as an example.

[0141] The processor 10 may be a central processing unit, a network processor, or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be an application-specific integrated circuit, a programmable logic device, or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic, or any combination thereof.

[0142] The memory 20 stores instructions that can be executed by at least one processor 10, so as to enable at least one processor 10 to execute the method shown in the above embodiment.

[0143] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and application programs required for at least one function; the data storage area may store data created based on the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely located relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0144] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid-state drive; the memory 20 may also include a combination of the above types of memory.

[0145] The computer device further includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 6 The bus connection is taken as an example.

[0146] The input device 30 can receive input digital or character information and generate key signal input related to user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a trackpad, a touch pad, an indicator stick, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 can include a display device, an auxiliary lighting device (e.g., an LED), and a tactile feedback device (e.g., a vibration motor). The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display, and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0147] The embodiments of the present disclosure also provide a computer-readable storage medium. The above-mentioned method according to the embodiments of the present disclosure can be implemented in hardware, firmware, or implemented as a computer code that can be recorded in a storage medium, or implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and downloaded through a network and will be stored in a local storage medium, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state drive, etc.; further, the storage medium can also include a combination of the above-mentioned types of memory. It can be understood that a computer, a processor, a microprocessor controller or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor or hardware, the method shown in the above embodiment is implemented.

[0148] A portion of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the form in which the computer program instruction exists in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc. Accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium that can be accessed by the computer.

[0149] Although the embodiments of the present disclosure have been described with reference to the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present disclosure, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A method for protecting the safety of drawing files, characterized in that: The method comprises: Obtain the first drawing file; Obtaining a matching result of matching first feature information corresponding to the first drawing file with each second feature information in a target feature information set; wherein the first feature information is obtained by parsing the first drawing file to obtain description information of a target element in the first drawing file, and performing feature extraction on the obtained description information of the target element; the target feature information set includes second feature information of at least one protected drawing file; and the first feature information and the second feature information are respectively represented in the form of feature vectors; Performing security protection management on the first drawing file based on the matching result; The first drawing file is a circuit drawing, and the target elements in the first drawing file include target electronic components; parsing the first drawing file to obtain description information of the target elements in the first drawing file includes: parsing the source code of the circuit drawing to obtain description information of the target electronic components in the circuit drawing.

2. The method according to claim 1, characterized in that The obtaining of the first drawing file includes: In response to a preset operation on the first drawing file, obtaining the first drawing file; The preset operation includes at least one of the following: sending the first drawing file to the outside of the first network, downloading the first drawing file, creating the first drawing file, and editing the first drawing file.

3. The method according to claim 1, characterized in that The performing security protection management on the first drawing file based on the matching result includes: In response to the matching result indicating that the first drawing file is a protected drawing file, blocking a preset operation on the first drawing file; or In response to the matching result indicating that the first drawing file is not a protected drawing file, a preset operation on the first drawing file is released.

4. The method according to claim 1, wherein The step of parsing the source code of the circuit drawing to obtain description information of a target electronic component in the circuit drawing includes: Performing field parsing on the source code of the circuit drawing to determine the target electronic component in the circuit drawing; The description information of the target electronic component is extracted from the source code.

5. The method according to claim 4, characterized in that The performing field parsing on the source code of the circuit drawing to determine the target electronic component in the circuit drawing includes: Performing field parsing on the source code to determine the fields in the circuit drawing; The fields are screened to determine a target field, and the electronic component corresponding to the target field is used as the target electronic component.

6. The method according to claim 4, characterized in that The extracting the description information of the target electronic component from the source code includes: The connection relationship between the target electronic components and the model information of the target electronic components are extracted to obtain the description information.

7. The method according to claim 1, characterized in that The obtaining of a matching result of matching the first feature information corresponding to the first drawing file with each piece of second feature information in the target feature information set includes: Matching a first feature vector with each second feature vector to determine a similarity between the first feature vector and each second feature vector, wherein the first feature vector corresponds to the first feature information and the second feature vector corresponds to the second feature information; Based on a comparison result between the similarity and a preset similarity threshold, a matching result between the first feature information and each of the second feature information is obtained.

8. The method according to claim 7, characterized in that The performing security protection management on the first drawing file based on the matching result includes: In response to the existence of the second feature vector whose matching result indicates that the similarity is greater than or equal to the preset similarity threshold, the target management level of the first drawing file is determined according to the management level of the protected drawing file corresponding to the matched second feature vector, so as to perform security protection management on the first drawing file according to the target management level.

9. The method according to any one of claims 1 to 8, characterized in that The method is applied to a client of security management software, and the method further includes: Receive the target feature information set sent by the server of the security management software.

10. A safety protection device for drawing files, characterized in that: The device comprises: A first acquisition module, used to acquire a first drawing file; A second acquisition module is configured to obtain a matching result of matching first feature information corresponding to the first drawing file with each second feature information in a target feature information set; wherein the first feature information is obtained by parsing the first drawing file to obtain description information of a target element in the first drawing file, and performing feature extraction on the obtained description information of the target element; the target feature information set includes second feature information of at least one protected drawing file; the first feature information and the second feature information are respectively represented in the form of feature vectors; the first drawing file is a circuit drawing, and the target element in the first drawing file includes a target electronic component; parsing the first drawing file to obtain the description information of the target element in the first drawing file includes parsing the source code of the circuit drawing to obtain the description information of the target electronic component in the circuit drawing; A management module is used to perform security protection management on the first drawing file based on the matching result.

11. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the drawing file security protection method according to any one of claims 1 to 9 by executing the computer instructions.

12. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the drawing file security protection method according to any one of claims 1 to 9.

13. A computer program product, characterized in that The method comprises computer instructions for causing a computer to execute the method for protecting the safety of drawing files according to any one of claims 1 to 9.

Images