Information security leakage prevention method and system based on diversified data
By generating a printing template for the identification code and using a confidential collaborative end to identify the identification code, the problem of unmonitorable monitoring of the printing file destruction process is solved, and the full-cycle management of the printed file and the information security is improved.
Patent Information
- Application Number
- CN202411570702.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-06
- Publication Date
- 2025-02-07
- Estimated Expiration
- 2044-11-06
AI Technical Summary
In the prior art, the destruction process of printed files cannot be monitored, resulting in the inability to determine whether the printed files have been destroyed, and there is a hidden danger of information leakage.
By generating a printing template with an identification code and when the print file is placed in a preset destruction position, the confidential collaboration ends identify the identification code, determine the file information, and mark the corresponding information recording area after the destruction operation is completed, to achieve the purpose of Monitor the entire process of printing files.
It realizes the full-cycle management of printed files, improves information security, prevents information leakage, and adjusts user permissions by real-time assessment of the printing situation on the user side, and improves management efficiency.
Smart Images

Figure CN119088327B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to data processing technology, and in particular to an information security leakage prevention method and system based on diversified data. Background Art
[0002] In the modern enterprise environment, the background of print document management technology covers all aspects from equipment selection to document archiving. Enterprises need to face the growing demand for printing and cost control pressure, so adopting efficient printing solutions becomes the key. Advanced print management systems integrate equipment monitoring, permission control and cost tracking functions, and support multiple printing modes, such as double-sided printing and network printing, to reduce paper and ink waste. In addition, electronic document management systems can realize digital storage and retrieval of documents, further optimize document processing and improve data security. By combining these technologies, enterprises can better control printing resources, reduce operating costs, and improve overall work efficiency.
[0003] The invention found in the research that it is crucial to destroy printed documents generated in the corporate environment because it can prevent the leakage of sensitive information and protect the privacy and confidential data of the enterprise. Effective document destruction measures help prevent information from being obtained by unauthorized personnel, thereby reducing potential legal risks and financial losses. In addition, proper document destruction can also improve the company's compliance with data protection regulations and maintain the company's reputation and customer trust. By using professional destruction services or equipment, companies can ensure that documents are completely destroyed during the destruction process, thereby achieving the ultimate guarantee of data security.
[0004] In the prior art, a common method of destroying printed documents is for employees to place the printed documents in a shredder for destruction. However, since the entire destruction process cannot be monitored, it is impossible to determine whether the corresponding printed documents have been destroyed, which may lead to the risk of corresponding information leakage. Summary of the invention
[0005] Based on the above problems, the present invention is proposed to provide an information security leakage prevention method and system based on diversified data to overcome the above problems or at least partially solve the above problems.
[0006] According to one aspect of the present invention, there is provided a method for preventing information security leakage based on diversified data, comprising the following steps:
[0007] In response to a print request signal sent by any user terminal based on file information that matches its user authority, trigger the anti-leakage plug-in to generate a print template with an identification code, and fill the file content corresponding to the file information into the print template to obtain a print file corresponding to the user terminal;
[0008] Creating a print record table, obtaining a signal sending time corresponding to the required print signal, and filling the user information, file information and the signal sending time corresponding to the user terminal in the same corresponding unrecorded attribute information recording area of the print record table;
[0009] In response to any of the printed files being placed at a preset destruction location, the confidentiality cooperation terminal is triggered to identify the identification code, determine the file information corresponding to the identification code, and after completing the destruction operation of the printed file, mark the information recording area corresponding to the file information in the printing record table for destruction;
[0010] Determine the corresponding user authority based on the user information in the information recording area marked for destruction, establish a printing requirement cycle corresponding to the user authority, and determine the printing cut-off time after the signal sending time in the information recording area marked for destruction corresponding to the printing requirement cycle;
[0011] An area marking time corresponding to the destruction mark is obtained, and the user authority is adjusted based on a time comparison between the area marking time and the printing cut-off time.
[0012] Optionally, in the method according to the present invention, in response to a print request signal sent by any user terminal based on file information having a matching relationship with its user authority, triggering the anti-leakage plug-in to generate a print template with an identification code, and filling the file content corresponding to the file information into the print template to obtain a print file corresponding to the user terminal, including:
[0013] In response to a print request signal sent by any user terminal, obtaining user information corresponding to the user terminal, and determining whether the user terminal has user authority based on the user information;
[0014] In response to the user end having user authority, calling a hierarchical authority tree, wherein the hierarchical authority tree includes authority nodes corresponding to each file classification distributed in a hierarchical manner;
[0015] Determine a permission node in the hierarchical permission tree that has a matching relationship with the user permission as a target permission, and determine the target permission in the hierarchical permission tree and all permission nodes distributed downward based on the target permission as a set to be selected;
[0016] Segmenting the hierarchical permission tree based on the set to be selected to obtain a tree portion corresponding to the set to be selected, and sending the tree portion to the user terminal for display;
[0017] In response to the user terminal performing a node interaction for a preset time on any authority node located in the tree portion, acquiring file information corresponding to the authority node;
[0018] Triggering the anti-leakage plug-in to generate an identification code based on the file information, and calling a printing template having an identification area and a content filling area;
[0019] Filling the identification code into the identification area in the printing template, and determining the file content corresponding to each character paragraph based on the file information;
[0020] The printing quantity of the corresponding printing template is determined based on each character paragraph, and the file content is filled into the filling area of each printing template corresponding to the printing quantity to obtain a printing file corresponding to the user terminal.
[0021] Optionally, in the method according to the present invention, determining the number of prints of the corresponding printing template based on each character paragraph includes:
[0022] Obtaining characters from the file content, and determining two adjacent blank characters in the file content as the same blank character group based on the obtained file characters;
[0023] Inserting a first marker between each blank character group and each remaining character respectively located after each blank character group, and determining a period character, a semicolon character or a colon character respectively located before and adjacent to each blank character group in the file content as each paragraph dividing character;
[0024] Inserting a second marker between each paragraph dividing character and each remaining character respectively located after each paragraph dividing character;
[0025] Divide the file content into paragraphs by using the first marker as a division starting point and a second marker adjacent to the first marker as a division end point to obtain character paragraphs corresponding to the file content;
[0026] Acquire the number of characters of each file included in each character paragraph, and acquire the reference character specification, reference horizontal specification and reference vertical specification corresponding to the printing template;
[0027] Determine the number of vertical lines corresponding to the number of characters based on the reference character specification and the reference horizontal specification, and sum the number of vertical lines to obtain a total value of the vertical lines;
[0028] The ratio of the total longitudinal row value to the reference longitudinal specification is calculated, and integer processing is performed based on the obtained longitudinal ratio to obtain the print quantity corresponding to the print template.
[0029] Optionally, in the method according to the present invention, creating a print record table, obtaining the signal sending time corresponding to the required print signal, and filling the user information, file information and the signal sending time corresponding to the user terminal in the same corresponding unrecorded attribute information recording area of the print record table, respectively, includes:
[0030] Creating a print record table, wherein the print record table includes vertically arranged information recording areas corresponding to different area attributes, the information recording areas including information recording areas with unrecorded attributes and information recording areas with recorded attributes corresponding to different specifications;
[0031] Filling the user information, file information and signal sending time corresponding to the same print file into the user sub-area, file sub-area and signal sub-area of the same corresponding unrecorded attribute information recording area respectively based on the filling order of vertical arrangement;
[0032] The area outline constituting the information recording area is acquired, and the specifications of the area outline are changed based on the thickness dimension and the shape dimension respectively.
[0033] Optionally, in the method according to the present invention, the method further comprises:
[0034] Creating page number areas in each printing template corresponding to the same printing file, and filling the page number areas with the file serial numbers corresponding to the printing templates;
[0035] Establishing an information display layer having a link relationship with the file information in the file sub-area, wherein the information display layer includes display sub-areas corresponding to the reference display quantity, wherein each display sub-area includes a content display slot and a sequence number display slot;
[0036] Compare the area quantity corresponding to each display sub-area with the printed quantity, and adjust the area quantity of each display sub-area if there is a quantity difference;
[0037] The obtained display sub-areas having the same number as the printed quantity are determined as a display collection; the content display slots in each display sub-area in the display collection are filled with preset display content, and the serial number display slots are filled with corresponding different file serial numbers.
[0038] Optionally, in the method according to the present invention, the method further comprises:
[0039] Obtaining the number of print copies determined by the user terminal based on the print file;
[0040] When the number of print copies is at least greater than 1, the content display slot is segmented based on the number of print copies to obtain display sub-slots corresponding to the same content display slot and having the same number as the number of print copies.
[0041] Optionally, in the method according to the present invention, adjacent display sub-areas in the information display layer have the same horizontal spacing and vertical spacing;
[0042] The method further comprises:
[0043] When the print quantity is greater than the reference display quantity, obtaining a quantity difference between the reference display quantity and the print quantity;
[0044] Determine the horizontal and vertical quantities occupied by each display sub-area in the information display layer, and adjust the horizontal and vertical quantities based on the quantity difference to generate each display sub-area corresponding to the quantity difference in the information display layer.
[0045] Optionally, in the method according to the present invention, in response to any of the printed files being placed in a preset destruction location, triggering the confidentiality cooperation terminal to identify the identification code, determine the file information corresponding to the identification code, and after completing the destruction operation of the printed file, mark the information recording area corresponding to the file information in the printing record table for destruction, including:
[0046] Determining that the printed document is placed at a preset destruction location based on a preset identification strategy, triggering the confidentiality cooperation terminal to identify the identification area and page number area in the printed document, and obtaining the corresponding identification code and file serial number;
[0047] Determining file information corresponding to the print file based on the identification code, and retrieving the print record table;
[0048] In response to the existence of an information recording area corresponding to the file information in the printing record table, triggering the confidentiality cooperation terminal to collect environmental data of the surrounding environment within a preset range to obtain collected data;
[0049] Based on the collected data, the environmental state of the surrounding environment is identified, and when the environmental state is an unmanned state, a rolling device arranged at the preset destruction position is triggered to transmit the printed file to the destruction entrance, and a destruction operation is performed on the printed file;
[0050] In response to the completion of the execution of the destruction operation, the information display layer having a link relationship with the information recording area is retrieved, and the display sub-area corresponding to the file sequence number is marked for destruction.
[0051] Optionally, in the method according to the present invention, determining that the printed document is placed at a preset destruction location based on a preset identification strategy, triggering the confidentiality cooperation terminal to identify the identification code, includes:
[0052] Acquire a target collection value output by a target light sensor disposed at a first sub-position corresponding to the preset destruction position, and retrieve a preset light value;
[0053] In response to the target collection value being less than or equal to the preset light value, triggering each cooperative light sensor disposed at each second sub-position corresponding to the preset destruction position to collect light, and obtaining corresponding cooperative collection values;
[0054] In response to each collaborative collection value being less than or equal to the preset light value, it is determined that the printed file is placed at a preset destruction location, and the confidentiality collaboration terminal is triggered to identify the identification code.
[0055] Optionally, in the method according to the present invention, obtaining the area marking time corresponding to the destruction mark, and adjusting the user authority based on a time comparison between the area marking time and the printing cut-off time, comprises:
[0056] In response to all display sub-areas corresponding to the same information display layer being marked for destruction, obtaining the corresponding triggering confidentiality cooperation terminal to identify the identification code, and retrieving the area marking time corresponding to the identification code;
[0057] Calculate the difference between the area marking time and the printing cut-off time to obtain a time difference, and compare the time difference with the retrieved first preset threshold and second preset threshold;
[0058] When the time difference is negatively extended and greater than a first preset threshold, the user authority is adjusted downward;
[0059] When the time difference is positively extended and greater than a second preset threshold, obtaining a historical record corresponding to the user terminal, and determining whether there is a corresponding preset number of records showing a positive extension trend based on the historical record;
[0060] If so, the user rights are increased by a preset stable score, and the user rights are adjusted based on the increase result.
[0061] According to another aspect of the present invention, there is provided an information security leakage prevention system based on diversified data, comprising:
[0062] A print trigger module is configured to, in response to a print request signal sent by any user terminal based on file information having a matching relationship with its user authority, trigger the anti-leakage plug-in to generate a print template with an identification code, and fill the file content corresponding to the file information into the print template to obtain a print file corresponding to the user terminal;
[0063] a printing record module configured to create a printing record table, obtain a signal sending time corresponding to the required printing signal, and fill the user information, file information and the signal sending time corresponding to the user terminal in the same corresponding unrecorded attribute information recording area of the printing record table;
[0064] a destruction marking module, configured to, in response to any of the printed files being placed at a preset destruction location, trigger the confidentiality cooperation terminal to identify the identification code, determine the file information corresponding to the identification code, and after completing the destruction operation of the printed file, mark the information recording area corresponding to the file information in the printing record table for destruction;
[0065] a time determination module configured to determine corresponding user rights based on user information in the information recording area for destruction marking, establish a printing requirement cycle corresponding to the user rights, and determine a printing cut-off time after a signal sending time in the information recording area for destruction marking corresponding to the printing requirement cycle;
[0066] The authority adjustment module is configured to obtain the area marking time corresponding to the destruction mark, and adjust the user authority based on a time comparison between the area marking time and the printing cut-off time.
[0067] According to the solution of the present invention, the solution of the present invention may specifically include two different monitoring processes, the first being a monitoring process corresponding to a printing operation, and the second being a monitoring process corresponding to a destruction operation; first, for the first monitoring process, the present invention may generate a corresponding printing template with a unique identification code in response to a printing signal of a corresponding file information initiated by any user terminal, and execute a corresponding printing process based on the printing template to obtain a corresponding printing file, thereby realizing an online monitoring process for the printing operation, and at the same time, any printing file is generated corresponding to the same printing template, which can also improve the unified management of each printing file, and the identification codes in different printing files can also distinguish each printing file based on the file information; further, in order to be able to perform online monitoring of subsequent destruction operations, it is also necessary to establish a corresponding printing record table, and fill the corresponding user information and file information in the information recording area of the printing record table in sequence for recording; secondly, for the second monitoring process, when the user terminal needs to When the corresponding printed files are to be destroyed, the printed files need to be uniformly placed in a specific preset destruction location to perform the corresponding destruction operation, and before performing the destruction operation, the corresponding confidentiality collaboration terminal will identify the identification code located in the printed file, thereby obtaining the user information of the corresponding identification code, and perform information search in the print record table based on the user information. When an information recording area containing the user information is found in the information recording area, the corresponding destruction operation can be performed on the printed file, and the information recording area can be marked for destruction, thereby monitoring the destruction process in an online form; through the above two different monitoring processes, full-cycle management of printed files can be achieved, the corresponding information security can be improved, and information leakage can be prevented; at the same time, the printing situation of the user terminal can be assessed at the real-time moment when the user terminal performs the destruction operation, and the user authority of the corresponding user terminal can be adjusted accordingly based on the assessment result, further improving the management efficiency of each user terminal. BRIEF DESCRIPTION OF THE DRAWINGS
[0068] Figure 1 A flowchart of an information security anti-leakage method based on diversified data according to an embodiment of the present invention is shown;
[0069] Figure 2 A schematic diagram showing the structure of the print record table in this embodiment is shown;
[0070] Figure 3 A schematic diagram of the structure of the information display layer in this embodiment is shown;
[0071] Figure 4 A structural block diagram of an information security anti-leakage system based on diversified data according to another embodiment of the present invention is shown. DETAILED DESCRIPTION
[0072] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.
[0073] In the modern enterprise environment, the background of print document management technology covers all aspects from equipment selection to document archiving. Enterprises need to face the growing demand for printing and cost control pressure, so adopting efficient printing solutions becomes the key. Advanced print management systems integrate equipment monitoring, permission control and cost tracking functions, and support multiple printing modes, such as double-sided printing and network printing, to reduce paper and ink waste. In addition, electronic document management systems can realize digital storage and retrieval of documents, further optimize document processing and improve data security. By combining these technologies, enterprises can better control printing resources, reduce operating costs, and improve overall work efficiency.
[0074] The invention found in the research that it is crucial to destroy printed documents generated in the corporate environment because it can prevent the leakage of sensitive information and protect the privacy and confidential data of the enterprise. Effective document destruction measures help prevent information from being obtained by unauthorized personnel, thereby reducing potential legal risks and financial losses. In addition, proper document destruction can also improve the company's compliance with data protection regulations and maintain the company's reputation and customer trust. By using professional destruction services or equipment, companies can ensure that documents are completely destroyed during the destruction process, thereby achieving the ultimate guarantee of data security.
[0075] In the prior art, a common method of destroying printed documents is for employees to place the printed documents in a shredder for destruction. However, since the entire destruction process cannot be monitored, it is impossible to determine whether the corresponding printed documents have been destroyed, which may lead to the risk of corresponding information leakage.
[0076] To solve the problems existing in the above-mentioned prior art, the inventor proposes the solution of the present invention. An embodiment of the present invention provides an information security leakage prevention method based on diversified data, which can be executed in a computing device, wherein the computing device can be understood as a terminal with data processing function, such as a mobile phone or a computer.
[0077] Figure 1 FIG. 1 is a flowchart showing a method for preventing information security leakage based on diversified data according to an embodiment of the present invention. Figure 1As shown, the method starts at step S102, and in step S102, the following contents are included:
[0078] In response to a print request signal sent by any user terminal based on file information that matches its user permissions, the anti-leakage plug-in is triggered to generate a print template with an identification code, and the file content corresponding to the file information is filled into the print template to obtain a print file corresponding to the user terminal.
[0079] For example, in this embodiment, when any user terminal needs to print a corresponding file, the server needs to first determine whether the user terminal has the user authority to print the file, specifically including matching and determining the user authority corresponding to the user terminal with the file information corresponding to the file. When the user terminal and the file have a matching relationship, the server can control the triggering of the anti-leakage plug-in to generate a print template with an identification code based on the print demand signal sent by the user terminal, and at the same time fill the corresponding file content into the print template based on the file information, so that the user terminal can print based on the obtained print file to obtain a paper file, thereby realizing unified management of the printing process corresponding to different user terminals, and corresponding authority review is also required when printing to improve the security of file management.
[0080] Further, in this embodiment, the above-mentioned “in response to a print request signal sent by any user terminal based on file information having a matching relationship with its user authority, triggering the anti-leakage plug-in to generate a print template with an identification code, and filling the file content corresponding to the file information into the print template, to obtain a print file corresponding to the user terminal” may also include the following steps:
[0081] In response to a print request signal sent by any user terminal, obtaining user information corresponding to the user terminal, and determining whether the user terminal has user authority based on the user information;
[0082] In response to the user end having user authority, calling a hierarchical authority tree, wherein the hierarchical authority tree includes authority nodes corresponding to each file classification distributed in a hierarchical manner;
[0083] Determine a permission node in the hierarchical permission tree that has a matching relationship with the user permission as a target permission, and determine the target permission in the hierarchical permission tree and all permission nodes distributed downward based on the target permission as a set to be selected;
[0084] Segmenting the hierarchical permission tree based on the set to be selected to obtain a tree portion corresponding to the set to be selected, and sending the tree portion to the user terminal for display;
[0085] In response to the user terminal performing a node interaction for a preset time on any authority node located in the tree portion, acquiring file information corresponding to the authority node;
[0086] Triggering the anti-leakage plug-in to generate an identification code based on the file information, and calling a printing template having an identification area and a content filling area;
[0087] Filling the identification code into the identification area in the printing template, and determining the file content corresponding to each character paragraph based on the file information;
[0088] The printing quantity of the corresponding printing template is determined based on each character paragraph, and the file content is filled into the filling area of each printing template corresponding to the printing quantity to obtain a printing file corresponding to the user terminal.
[0089] For example, in this embodiment, it can be known from the above content that when the user end prints a certain file, the server needs to perform corresponding authority review, and the corresponding review process can be described as follows:
[0090] First, when the server receives a print request signal sent by a user terminal, the server can synchronously obtain user information corresponding to the user terminal, and further determine whether the user terminal has user authority based on the user information. Here, user authority can be understood as whether the user terminal has the authority to print the file. In addition, the user authority of different user terminals may be different, that is, for the same file, the user authority of some user terminals may be that the user terminal is allowed to print the file, while the user authority of other user terminals may be that the user terminal is not allowed to print the file;
[0091] Next, when it is obtained that the user terminal has the corresponding user authority, a pre-stored hierarchical authority tree can be retrieved from the server, wherein the hierarchical authority tree specifically includes authority nodes corresponding to each file classification distributed in a hierarchical manner; that is, different file classifications may correspond to different authority nodes, and different authority nodes may have a corresponding matching relationship with different user authorities;
[0092] Next, the permission node in the hierarchical permission tree that has a matching relationship with the user permission is determined as the target permission, and the target permission in the hierarchical permission tree and all permission nodes distributed downward based on the target permission are determined as the set to be selected; it should be noted that since the permission nodes in the hierarchical permission tree are distributed in a hierarchical manner, such as the permission nodes corresponding to the parent node, the child node, the grandchild node, etc., here, when the user permission of a certain user terminal has a matching relationship with any parent node, the user permission should be understood to have a corresponding matching relationship with the parent node and all nodes below the parent node, therefore, that is, the higher the level of the corresponding node, the higher the level of the user permission it matches, therefore, all nodes in the corresponding determined set to be selected can have a corresponding matching relationship with the user permission corresponding to the user terminal;
[0093] Then, the hierarchical permission tree can be segmented based on the set to be selected, so as to obtain the tree portion corresponding to the set to be selected, and the tree portion can be sent to the user end for display at the same time; it should be noted that, since each node in the hierarchical permission tree corresponds to a different file type, the file types corresponding to all the nodes in the set to be selected can be considered as all the file types that the user end is allowed to view and print, so the user end can select the corresponding file based on the tree portion to perform the corresponding operation, thereby improving the corresponding data security, and also enabling the user end to quickly understand all the file types that have a matching relationship with it;
[0094] Then, when the user terminal needs to perform a print operation on a file type corresponding to any permission node in the tree portion, it can perform node interaction on the permission node for a preset time, thereby obtaining file information corresponding to the permission node; here, the file information may include corresponding file content;
[0095] Next, after the user completes the selection of the authority node, the server can generate a corresponding identification code based on the file information by triggering the anti-leakage plug-in, and at the same time retrieve a printing template having an identification area and a content filling area, and fill the corresponding identification code into the identification area, and determine the file content including each character paragraph based on the file information; it should be noted that, in this embodiment, the identification code is generated based on the file information, so the identification code is unique, so as to uniquely identify the file information;
[0096] Finally, since the number of character paragraphs corresponding to different files is different, and the content filling area in the corresponding printing template is generally a fixed size, it is necessary to determine the print quantity of each character paragraph corresponding to the printing template according to different file information, so as to fill the corresponding file content into the filling area of each printing template of the corresponding print quantity, and then obtain the print file corresponding to the user end.
[0097] Furthermore, in this embodiment, the above-mentioned “determining the print quantity of the corresponding printing template based on each character paragraph” may also include the following steps:
[0098] Obtaining characters from the file content, and determining two adjacent blank characters in the file content as the same blank character group based on the obtained file characters;
[0099] Inserting a first marker between each blank character group and each remaining character respectively located after each blank character group, and determining a period character, a semicolon character or a colon character respectively located before and adjacent to each blank character group in the file content as each paragraph dividing character;
[0100] Inserting a second marker between each paragraph dividing character and each remaining character respectively located after each paragraph dividing character;
[0101] Divide the file content into paragraphs by using the first marker as a division starting point and a second marker adjacent to the first marker as a division end point to obtain character paragraphs corresponding to the file content;
[0102] Acquire the number of characters of each file included in each character paragraph, and acquire the reference character specification, reference horizontal specification and reference vertical specification corresponding to the printing template;
[0103] Determine the number of vertical lines corresponding to the number of characters based on the reference character specification and the reference horizontal specification, and sum the number of vertical lines to obtain a total value of the vertical lines;
[0104] The ratio of the total longitudinal row value to the reference longitudinal specification is calculated, and integer processing is performed based on the obtained longitudinal ratio to obtain the print quantity corresponding to the print template.
[0105] For example, in this embodiment, when determining the number of prints of the corresponding printing template based on each character paragraph, it can be implemented specifically as follows:
[0106] First, characters of the file content can be obtained, and two adjacent blank characters in the file content can be further determined as the same blank character group based on the characters of each file, wherein the blank character can be understood as a character corresponding to "space input"; according to traditional writing habits, each independent character paragraph is generally preceded by two characters of "space input" before writing, so when determining the character paragraph of the file content, the determination can be made based on this feature;
[0107] Next, after obtaining each blank character group, a first identifier may be inserted between each blank character group and each remaining character respectively located after each blank character group, and at the same time, a period character, a semicolon character or a colon character respectively located before and adjacent to each blank character group in the file content is determined as each paragraph dividing character; it should be noted that, for each independent character paragraph, its end may be identified by a period character, a semicolon character or a colon character, so this feature may also be used to determine the character paragraph;
[0108] Next, a second marker may be inserted between each paragraph dividing character and each remaining character located after each paragraph dividing character, so that the file content may be divided into paragraphs in a division manner with the first marker as the division starting point and the second marker adjacent to the first marker as the division end point, thereby obtaining each character paragraph that exists independently of the corresponding file content;
[0109] Then, after completing the acquisition of each character paragraph, the specification comparison between the printing template and the character paragraph can be performed based on the character paragraph, which can specifically include acquiring the number of characters of the file characters respectively included in each character paragraph, and determining the reference character specification, reference horizontal specification and reference vertical specification of the corresponding printing template at the same time; here, the reference character specification can be understood as the character size presented after the file characters are filled into the content filling area, and the reference horizontal specification and reference vertical specification can be understood as the specification template corresponding to the content filling area of each page of the printing template;
[0110] Then, based on the corresponding reference character specifications and reference horizontal specifications, the number of vertical lines corresponding to the number of characters, that is, the number of vertical lines required for each character paragraph, can be determined; by summing up the total values of all vertical lines, the corresponding total vertical line value can be obtained;
[0111] Finally, the ratio of the total vertical row value to the benchmark vertical specification is calculated, and the vertical ratio is integerized to obtain the print quantity of the corresponding printing template; for example, when the vertical ratio is 1.2, the print quantity obtained by integerization is 2.
[0112] In step S104, the following contents are included:
[0113] A print record table is created, a signal sending time corresponding to the required print signal is obtained, and user information, file information and the signal sending time corresponding to the user terminal are respectively filled in the information recording area of the same corresponding unrecorded attribute in the print record table.
[0114] For example, in order to realize online recording of the printing process, in this embodiment, a corresponding printing record table can also be created, and the signal sending time corresponding to the required printing signal can be obtained at the same time, and the user information, file information and signal sending time corresponding to the user terminal can be filled in the same corresponding unrecorded attribute information recording area in the printing record table; it should be noted that the printing record table may include multiple information recording areas, each information recording area corresponds to a printing process, and therefore, the information recording area may include recorded attributes corresponding to content recording and unrecorded attributes corresponding to content recording.
[0115] Further, in this embodiment, the above-mentioned "creating a print record table, obtaining the signal sending time corresponding to the required print signal, and filling the user information, file information and the signal sending time corresponding to the user terminal in the same corresponding unrecorded attribute information recording area of the print record table" may also include the following steps:
[0116] Creating a print record table, wherein the print record table includes vertically arranged information recording areas corresponding to different area attributes, the information recording areas including information recording areas with unrecorded attributes and information recording areas with recorded attributes corresponding to different specifications;
[0117] Filling the user information, file information and signal sending time corresponding to the same print file into the user sub-area, file sub-area and signal sub-area of the same corresponding unrecorded attribute information recording area respectively based on the filling order of vertical arrangement;
[0118] The area outline constituting the information recording area is acquired, and the specifications of the area outline are changed based on the thickness dimension and the shape dimension respectively.
[0119] For example, in this embodiment, Figure 2As shown, the created print record table may include vertically arranged information recording areas corresponding to different area attributes, wherein the information recording areas include information recording areas with unrecorded attributes and information recording areas with recorded attributes corresponding to different specifications; and when filling in content, the filling may be performed based on the vertically arranged filling method, wherein each information recording area includes a user sub-area, a file sub-area and a signal sub-area corresponding to the filled user information, the file information and the signal sending time; and after completing the content filling of a certain information recording area, in order to be able to distinguish the information recording area with unrecorded attributes and the information recording area with recorded attributes based on a visual angle, the area outline of the information recording area with the completed content can be changed based on the thickness dimension and the shape dimension, for example, the area outline is thickened and modified to a wavy line.
[0120] Furthermore, in this embodiment, the method further includes the following steps:
[0121] Creating page number areas in each printing template corresponding to the same printing file, and filling the page number areas with the file serial numbers corresponding to the printing templates;
[0122] Establishing an information display layer having a link relationship with the file information in the file sub-area, wherein the information display layer includes display sub-areas corresponding to the reference display quantity, wherein each display sub-area includes a content display slot and a sequence number display slot;
[0123] Compare the area quantity corresponding to each display sub-area with the printed quantity, and adjust the area quantity of each display sub-area if there is a quantity difference;
[0124] The obtained display sub-areas having the same number as the printed quantity are determined as a display collection; the content display slots in each display sub-area in the display collection are filled with preset display content, and the serial number display slots are filled with corresponding different file serial numbers.
[0125] For example, in this embodiment, it can be known from the above content that due to the difference in field paragraphs, the printing templates corresponding to the same printing file may include multiple ones. In order to distinguish each page file, a corresponding page number area can be created in each printing template corresponding to the same printing file, and the file number corresponding to the printing template is filled in the page number area;
[0126] After completing the filling of the file number, such as Figure 3As shown, an information display layer having a link relationship with the file information in the file sub-area can be further established, wherein the information display layer includes display sub-areas corresponding to the reference display quantity and arranged in a preset sequence, and each display sub-area includes a content display slot and a sequence number display slot (wherein, Figure 3 Area A is the content display slot, and area B is the serial number display slot):
[0127] Here, since the number of areas of each display sub-area is preset, the number of areas may be different from the print number of the print file. In this case, the number of areas can be compared with the print number and the number of areas can be adjusted if there is a difference in the number, so as to ensure that the number of areas of each display sub-area is consistent with the print number.
[0128] Finally, through the information display layer, the display sub-areas with the same number as the print quantity are determined as a display collection, and the content display slots corresponding to each display sub-area in the display collection are filled with preset display content, and the serial number display slots are filled with the corresponding file serial numbers.
[0129] It should be noted that, since each display sub-area is used to record files of different page numbers, the corresponding preset display content may be a thumbnail corresponding to the file.
[0130] In this embodiment, by creating the information display layer as described above, files with different page numbers can be recorded and displayed when there are multiple print quantities, thereby further improving the comprehensiveness and security of file management.
[0131] It should be further explained that, in this embodiment, since the adjacent display sub-areas in the information display layer have the same horizontal spacing and vertical spacing, when there is a difference between the area number and the print number, and the print number is greater than the reference display number, it is necessary to adjust the size of the information display layer accordingly to ensure that there is an appropriate spacing distance between the display sub-areas. Specifically, the following steps may be included:
[0132] When the print quantity is greater than the reference display quantity, obtaining a quantity difference between the reference display quantity and the print quantity;
[0133] Determine the horizontal and vertical quantities occupied by each display sub-area in the information display layer, and adjust the horizontal and vertical quantities based on the quantity difference to generate each display sub-area corresponding to the quantity difference in the information display layer.
[0134] For example, when the corresponding print quantity is greater than the benchmark display quantity, the quantity difference between the benchmark display quantity and the print quantity can be obtained to further determine the horizontal and vertical quantities occupied by each display sub-area in the information display layer. Based on the quantity difference, the corresponding horizontal and vertical quantities are adjusted (that is, the corresponding horizontal and vertical intervals are reduced), and at the same time, each display sub-area with the corresponding quantity difference is generated in the information display layer, thereby ensuring that each display sub-area located in the information display layer is the same as the print quantity and has the same horizontal and vertical intervals.
[0135] At the same time, when there is a quantity difference between the area quantity and the print quantity, and the print quantity is less than the benchmark display quantity, the display sub-areas corresponding to the quantity difference can be hidden to complete the corresponding quantity adjustment.
[0136] In addition, in this embodiment, the following steps are also included:
[0137] Obtaining the number of print copies determined by the user terminal based on the print file;
[0138] When the number of print copies is at least greater than 1, the content display slot is segmented based on the number of print copies to obtain display sub-slots corresponding to the same content display slot and having the same number as the number of print copies.
[0139] For example, in actual operation, the user corresponding to the user terminal may print multiple copies of a certain file. Since the file content of each printed file is the same, it is necessary to track the printing status of each printed file accordingly. From the above content, it can be seen that the content display slot is a slot used to record and display files of each different page number. Therefore, the content display slot can be further divided into slots based on the number of prints, so as to obtain display sub-slots corresponding to the same content display slot with the same number as the number of prints, so that files corresponding to the same page number but different numbers of prints can be filled into the display sub-slots corresponding to the same content display slot.
[0140] In step S106, the following contents are included:
[0141] In response to any of the printed files being placed in a preset destruction location, the confidentiality collaboration terminal is triggered to identify the identification code, determine the file information corresponding to the identification code, and after completing the destruction operation of the printed file, mark the information recording area corresponding to the file information in the printing record table for destruction.
[0142] For example, in this embodiment, after the user of the corresponding user terminal completes printing of the printed file, in order to monitor the entire process of destroying the printed file, a corresponding preset destruction position can be set, and the corresponding destruction process can be executed by placing the printed file at the preset destruction position;
[0143] Specifically, when a printed file is placed at a preset destruction location, the server will trigger the confidentiality collaboration terminal to identify the identification code corresponding to the printed file, thereby determining the file information corresponding to the printed file based on the identified identification code, and after completing the destruction operation of the printed file, the information recording area of the corresponding file information in the print record table will be marked for destruction, thereby achieving full detection of the entire process of printing and destruction of the same printed file, and then the management personnel can check which printed files have not been destroyed accordingly based on the print record table, thereby improving the security management of the files.
[0144] Further, in this embodiment, the above-mentioned “in response to any of the printed files being placed in the preset destruction location, triggering the confidentiality cooperation terminal to identify the identification code, determining the file information corresponding to the identification code, and marking the information recording area corresponding to the file information in the printing record table for destruction after completing the destruction operation of the printed file” may also include the following steps:
[0145] Determining that the printed document is placed at a preset destruction location based on a preset identification strategy, triggering the confidentiality cooperation terminal to identify the identification area and page number area in the printed document, and obtaining the corresponding identification code and file serial number;
[0146] Determining file information corresponding to the print file based on the identification code, and retrieving the print record table;
[0147] In response to the existence of an information recording area corresponding to the file information in the printing record table, triggering the confidentiality cooperation terminal to collect environmental data of the surrounding environment within a preset range to obtain collected data;
[0148] Based on the collected data, the environmental state of the surrounding environment is identified, and when the environmental state is an unmanned state, a rolling device arranged at the preset destruction position is triggered to transmit the printed file to the destruction entrance, and a destruction operation is performed on the printed file;
[0149] In response to the completion of the execution of the destruction operation, the information display layer having a link relationship with the information recording area is retrieved, and the display sub-area corresponding to the file sequence number is marked for destruction.
[0150] For example, in this embodiment, the complete process of performing the destruction operation on the print file can be described as follows:
[0151] First, in order to determine whether the printed file is placed at the preset destruction location, a preset identification strategy can be set to determine whether the printed file is placed at the preset destruction location. When the printed file is determined to be placed at the preset destruction location based on the preset identification strategy, the server can trigger the confidentiality cooperation terminal to identify the identification area and the page number area in the printed file, and obtain the corresponding identification code and file serial number;
[0152] Next, the server may determine the file information corresponding to the print file based on the identification code and retrieve the print record table;
[0153] Next, when there is an information record area corresponding to the file information in the print record table, it indicates that the process of executing the destruction operation on the print file needs to be monitored. At this time, the server will trigger the confidentiality cooperation end again to identify the environmental status of the surrounding environment, so as to trigger the rolling device set at the preset destruction position to transfer the print file to the destruction entrance when the environmental status is unmanned, thereby executing the destruction operation of the print file; here, by identifying whether the environmental status is unmanned to determine whether to execute the destruction of the print file, it can prevent human interference in the destruction process, thereby affecting the destruction record of the file and reducing the corresponding management security; it should be noted that the rolling device can be specifically a rolling belt driven by a roller. When the print file is placed on the rolling belt, the confidentiality writing end can be triggered to control the roller to roll, thereby sending the print file to the destruction entrance. The corresponding destruction entrance can be understood as, for example, the entrance of a shredder;
[0154] Finally, after it is determined that the destruction operation on the printed file is completed, the information display layer having a link relationship with the information recording area can be retrieved, and the display sub-area corresponding to the file serial number can be marked for destruction.
[0155] Furthermore, in this embodiment, the above-mentioned “determining that the printed document is placed at the preset destruction location based on the preset identification strategy, triggering the confidentiality cooperation terminal to identify the identification code” may also include the following steps:
[0156] Acquire a target collection value output by a target light sensor disposed at a first sub-position corresponding to the preset destruction position, and retrieve a preset light value;
[0157] In response to the target collection value being less than or equal to the preset light value, triggering each cooperative light sensor disposed at each second sub-position corresponding to the preset destruction position to collect light, and obtaining corresponding cooperative collection values;
[0158] In response to each collaborative collection value being less than or equal to the preset light value, it is determined that the printed file is placed at a preset destruction location, and the confidentiality collaboration terminal is triggered to identify the identification code.
[0159] For example, in this embodiment, the above-mentioned preset identification strategy includes the following identification steps:
[0160] First, a corresponding target light sensor is pre-set at the first sub-position of the preset destruction position, and the target collection value output by the target light sensor is acquired in real time; here, the first sub-position can be understood as the position center point of the preset destruction position;
[0161] Next, when the printed file is placed at the preset destruction position, the printed file will cover the target light sensor, thereby reducing the ambient light brightness collected by the target light sensor. At this time, the target collection value output by the target light sensor will be lower. Therefore, when the target collection value at any moment is less than the preset light value, it can be determined that the printed file may be placed at the preset destruction position.
[0162] Next, in order to further determine whether the target collection value output by the target light sensor is reduced based on the printed file being placed at the preset destruction position, the cooperative light sensors set at the second sub-positions corresponding to the preset destruction position can be triggered to collect light and obtain the corresponding cooperative collection values; here, the second sub-position can be understood as the position points located around the position center point respectively;
[0163] Finally, when all collaborative collection values are also less than or equal to the preset light values, it can be determined that the printed file is placed at the preset destruction location, thereby triggering the confidentiality collaboration terminal to identify the identification code.
[0164] It should be noted that, in this embodiment, the above-mentioned confidentiality cooperation terminal can be understood as a device integrating multiple different functional units, or a controller that controls multiple functional units.
[0165] In step S108, the following contents are included:
[0166] Based on the user information located in the information recording area marked for destruction, the corresponding user authority is determined, and a printing requirement cycle corresponding to the user authority is established, and a printing cut-off time corresponding to the printing requirement cycle and located in the information recording area marked for destruction is determined after the signal sending time.
[0167] For example, in this embodiment, in order to further improve the security management of files, the destruction time (that is, the printing demand cycle mentioned above) can also be rigidly stipulated, and the destruction time corresponding to different user permissions is also different. In order to determine whether each user complies with the corresponding rigid regulations for the use cycle of the printed file, it is necessary to determine the corresponding printing deadline through the aforementioned signal sending time and the printing demand cycle corresponding to different user permissions; here, the printing deadline can be understood as the specified time when the printed file needs to be destroyed based on the rigid regulations. For example, the printing demand cycle corresponding to the user permission of a certain user is 12 hours, and the corresponding signal sending time is 08:00. Then, after calculation, the user needs to complete the destruction of the printed file at the corresponding printing deadline of 20:00.
[0168] In step S110, the following contents are included:
[0169] An area marking time corresponding to the destruction mark is obtained, and the user authority is adjusted based on a time comparison between the area marking time and the printing cut-off time.
[0170] For example, in this embodiment, by obtaining the area marking time corresponding to the destruction mark, the actual operation time when the user destroys the printed file can be determined, so that the user authority can be further adjusted based on the comparison between the area marking time and the printing deadline; for example, when the area marking time is before the printing deadline, it indicates that the user has performed the corresponding destruction operation based on the hard regulations, so the user authority of the user can be considered to be adjusted upward, and vice versa.
[0171] Furthermore, in this embodiment, the above-mentioned “obtaining the area marking time corresponding to the destruction mark, and adjusting the user authority based on the time comparison between the area marking time and the printing cut-off time” may also include the following steps:
[0172] In response to all display sub-areas corresponding to the same information display layer being marked for destruction, obtaining the corresponding triggering confidentiality cooperation terminal to identify the identification code, and retrieving the area marking time corresponding to the identification code;
[0173] Calculate the difference between the area marking time and the printing cut-off time to obtain a time difference, and compare the time difference with the retrieved first preset threshold and second preset threshold;
[0174] When the time difference is negatively extended and greater than a first preset threshold, the user authority is adjusted downward;
[0175] When the time difference is positively extended and greater than a second preset threshold, obtaining a historical record corresponding to the user terminal, and determining whether there is a corresponding preset number of records showing a positive extension trend based on the historical record;
[0176] If so, the user rights are increased by a preset stable score, and the user rights are adjusted based on the increase result.
[0177] For example, in this embodiment, after obtaining the corresponding area marking moment, the difference between the area marking moment and the printing deadline moment can be calculated to obtain the corresponding moment difference, and the moment difference can be compared with the retrieved first preset threshold and second preset threshold respectively; wherein, when the moment difference is negatively extended and greater than the first preset threshold, it indicates that the area marking moment is after the printing deadline moment and the corresponding moment difference is longer, and at this time, it is necessary to reduce the user authority of the user to complete the punishment measures for the user; and when the moment difference is positively extended and greater than the second preset threshold, it indicates that the area marking moment is before the printing deadline moment and the corresponding moment difference is longer, and at this time, the historical record corresponding to the user terminal can be retrieved, and based on The historical records determine whether there is a preset number of records that show a positive extension trend. If so, it indicates that the user has maintained good destruction conditions for a long time and completed the use and destruction of printed documents in a timely manner. At this time, the user's user rights can be increased by a preset score, and the user rights can be adjusted based on the increase results to complete the reward measures for the user; it should be noted that the preset score increase for the user's user rights can be understood as different user rights correspond to different score intervals, and the user obtains the corresponding user rights based on the score he has. Therefore, after the preset score increase is obtained, the user rights can be adjusted based on the comparison between the preset score and the different score intervals corresponding to different user rights.
[0178] In summary, according to the scheme of the present embodiment, the scheme of the present embodiment may specifically include two different monitoring processes, the first being a monitoring process corresponding to a printing operation, and the second being a monitoring process corresponding to a destruction operation; first, for the first monitoring process, the present invention may generate a corresponding printing template with a unique identification code for a printing signal corresponding to file information initiated by any user terminal, and execute a corresponding printing process based on the printing template to obtain a corresponding printing file, thereby realizing an online monitoring process for the printing operation, and at the same time, any printing file is generated corresponding to the same printing template, which can also improve the unified management of each printing file, and the identification codes corresponding to different printing files can also distinguish each printing file based on the file information; further, in order to be able to perform online monitoring of subsequent destruction operations, it is also necessary to establish a corresponding printing record table, and fill the corresponding user information and file information into the information recording area of the printing record table in sequence for recording; secondly, for the second monitoring process, when the user terminal When it is necessary to destroy the corresponding printed files, the printed files need to be placed in a specific preset destruction location to perform the corresponding destruction operation. Before performing the destruction operation, the corresponding confidentiality collaboration terminal will identify the identification code located in the printed file, thereby obtaining the user information of the corresponding identification code, and perform information search in the print record table based on the user information. When an information recording area containing the user information is found in the information recording area, the corresponding destruction operation can be performed on the printed file, and the information recording area can be marked for destruction, thereby monitoring the destruction process in an online form. Through the above two different monitoring processes, full-cycle management of printed files can be achieved, the corresponding information security can be improved, and information leakage can be prevented. At the same time, the printing situation of the user terminal can be assessed at the real-time moment when the user terminal performs the destruction operation, and the user authority of the corresponding user terminal can be adjusted accordingly based on the assessment result, further improving the management efficiency of each user terminal.
[0179] Another embodiment of the present invention provides an information security leakage prevention system based on diversified data. Figure 4 As the corresponding system block diagram, the system includes:
[0180] A print trigger module is configured to, in response to a print request signal sent by any user terminal based on file information having a matching relationship with its user authority, trigger the anti-leakage plug-in to generate a print template with an identification code, and fill the file content corresponding to the file information into the print template to obtain a print file corresponding to the user terminal;
[0181] a printing record module configured to create a printing record table, obtain a signal sending time corresponding to the required printing signal, and fill the user information, file information and the signal sending time corresponding to the user terminal in the same corresponding unrecorded attribute information recording area of the printing record table;
[0182] a destruction marking module, configured to, in response to any of the printed files being placed at a preset destruction location, trigger the confidentiality cooperation terminal to identify the identification code, determine the file information corresponding to the identification code, and after completing the destruction operation of the printed file, mark the information recording area corresponding to the file information in the printing record table for destruction;
[0183] a time determination module configured to determine corresponding user rights based on user information in the information recording area for destruction marking, establish a printing requirement cycle corresponding to the user rights, and determine a printing cut-off time after a signal sending time in the information recording area for destruction marking corresponding to the printing requirement cycle;
[0184] The authority adjustment module is configured to obtain the area marking time corresponding to the destruction mark, and adjust the user authority based on a time comparison between the area marking time and the printing cut-off time.
[0185] In the description provided herein, algorithms and displays are not inherently related to any particular computer, virtual system or other device. Various general purpose systems can also be used together with the examples of the present invention. According to the above description, it is obvious that the structure required for constructing such systems. In addition, the present invention is not directed to any specific programming language either. It should be understood that various programming languages can be utilized to implement the content of the present invention described herein, and the above description of specific languages is for the purpose of disclosing the preferred embodiment of the present invention.
[0186] In the description provided herein, a large number of specific details are described. However, it is understood that embodiments of the present invention can be practiced without these specific details. In some instances, well-known methods, structures and techniques are not shown in detail so as not to obscure the understanding of this description.
[0187] Similarly, it should be understood that in order to streamline the present disclosure and aid in understanding one or more of the various inventive aspects, in the above description of exemplary embodiments of the present invention, the various features of the present invention are sometimes grouped together into a single embodiment, figure, or description thereof. However, this disclosed method should not be interpreted as reflecting the following intention: that the claimed invention requires more features than the features explicitly recited in each claim. More specifically, as reflected in the claims below, inventive aspects lie in less than all the features of the individual embodiments disclosed above. Therefore, the claims that follow the specific embodiment are hereby expressly incorporated into the specific embodiment, with each claim itself serving as a separate embodiment of the present invention.
[0188] Those skilled in the art will appreciate that the modules or units or components of the devices in the examples disclosed herein may be arranged in the devices described in the embodiment, or alternatively may be located in one or more devices different from the devices in the examples. The modules in the foregoing examples may be combined into one module or may be divided into multiple submodules.
[0189] Those skilled in the art will appreciate that the modules in the devices in the embodiments may be adaptively changed and arranged in one or more devices different from the embodiments. The modules or units or components in the embodiments may be combined into one module or unit or component, and further may be divided into a plurality of submodules or subunits or subcomponents. All features disclosed in this specification (including the accompanying claims, abstracts and drawings) and all processes or units of any method or device so disclosed may be combined in any combination, except that at least some of such features and / or processes or units are mutually exclusive. Unless otherwise expressly stated, each feature disclosed in this specification (including the accompanying claims, abstracts and drawings) may be replaced by an alternative feature that provides the same, equivalent or similar purpose.
[0190] In addition, those skilled in the art will appreciate that, although some embodiments described herein include certain features included in other embodiments but not other features, the combination of features of different embodiments is meant to be within the scope of the present invention and form different embodiments. For example, in the claims below, any one of the claimed embodiments may be used in any combination.
[0191] In addition, some of the embodiments are described herein as methods or combinations of method elements that can be implemented by a processor of a computer system or by other devices that perform the functions. Therefore, a processor with necessary instructions for implementing the method or method elements forms a device for implementing the method or method elements. In addition, the elements described herein of the device embodiments are examples of devices for implementing the functions performed by the elements for the purpose of implementing the invention.
[0192] As used herein, unless otherwise specified, the use of ordinal numbers "first," "second," "third," etc. to describe common objects merely indicates that different instances of similar objects are involved, and is not intended to imply that the objects so described must have a given order in time, space, order, or in any other manner.
[0193] Although the present invention has been described according to a limited number of embodiments, it will be apparent to those skilled in the art, with the benefit of the above description, that other embodiments may be envisioned within the scope of the invention thus described. In addition, it should be noted that the language used in this specification is selected primarily for readability and teaching purposes, rather than for explaining or defining the subject matter of the present invention. Therefore, many modifications and variations will be apparent to those skilled in the art without departing from the scope and spirit of the appended claims. The disclosure of the present invention is illustrative and not restrictive with respect to the scope of the present invention, and the scope of the present invention is defined by the appended claims.
Claims
1. An information security leakage prevention method based on diversified data, characterized in that: include: In response to a print request signal sent by any user terminal based on file information that matches its user authority, trigger the anti-leakage plug-in to generate a print template with an identification code, and fill the file content corresponding to the file information into the print template to obtain a print file corresponding to the user terminal; Creating a print record table, obtaining a signal sending time corresponding to the required print signal, and filling the user information, file information and the signal sending time corresponding to the user terminal in the same corresponding unrecorded attribute information recording area of the print record table; In response to any of the printed files being placed at a preset destruction location, the confidentiality cooperation terminal is triggered to identify the identification code, determine the file information corresponding to the identification code, and after completing the destruction operation of the printed file, mark the information recording area corresponding to the file information in the printing record table for destruction; Determine the corresponding user authority based on the user information in the information recording area marked for destruction, establish a printing requirement cycle corresponding to the user authority, and determine the printing cut-off time after the signal sending time in the information recording area marked for destruction corresponding to the printing requirement cycle; Acquire the area marking time corresponding to the destruction mark, and adjust the user authority based on a time comparison between the area marking time and the printing cut-off time; The step of adjusting the user authority based on the time comparison between the area marking time and the printing cut-off time includes: Calculate the difference between the area marking time and the printing cut-off time to obtain a time difference, and compare the time difference with the retrieved first preset threshold and second preset threshold; When the time difference is negatively extended and greater than a first preset threshold, the user authority is adjusted downward; When the time difference is positively extended and greater than a second preset threshold, obtaining a historical record corresponding to the user terminal, and determining whether there is a corresponding preset number of records showing a positive extension trend based on the historical record; If so, the user rights are increased by a preset stable score, and the user rights are adjusted based on the increase result.
2. The information security anti-leakage method based on diversified data according to claim 1 is characterized in that: In response to a print request signal sent by any user terminal based on file information that matches its user authority, trigger the anti-leakage plug-in to generate a print template with an identification code, and fill the file content corresponding to the file information into the print template to obtain a print file corresponding to the user terminal, including: In response to a print request signal sent by any user terminal, obtaining user information corresponding to the user terminal, and determining whether the user terminal has user authority based on the user information; In response to the user end having user authority, calling a hierarchical authority tree, wherein the hierarchical authority tree includes authority nodes corresponding to each file classification distributed in a hierarchical manner; Determine a permission node in the hierarchical permission tree that has a matching relationship with the user permission as a target permission, and determine the target permission in the hierarchical permission tree and all permission nodes distributed downward based on the target permission as a set to be selected; Segmenting the hierarchical permission tree based on the set to be selected to obtain a tree portion corresponding to the set to be selected, and sending the tree portion to the user terminal for display; In response to the user terminal performing a node interaction for a preset time on any authority node located in the tree portion, acquiring file information corresponding to the authority node; Triggering the anti-leakage plug-in to generate an identification code based on the file information, and calling a printing template having an identification area and a content filling area; Filling the identification code into the identification area in the printing template, and determining the file content corresponding to each character paragraph based on the file information; The printing quantity of the corresponding printing template is determined based on each character paragraph, and the file content is filled into the filling area of each printing template corresponding to the printing quantity to obtain a printing file corresponding to the user terminal.
3. The information security anti-leakage method based on diversified data according to claim 2 is characterized in that: Determine the number of prints of the corresponding print template based on each character paragraph, including: Obtaining characters from the file content, and determining two adjacent blank characters in the file content as the same blank character group based on the obtained file characters; Inserting a first marker between each blank character group and each remaining character respectively located after each blank character group, and determining a period character, a semicolon character or a colon character respectively located before and adjacent to each blank character group in the file content as each paragraph dividing character; Inserting a second marker between each paragraph dividing character and each remaining character respectively located after each paragraph dividing character; Divide the file content into paragraphs by using the first marker as a division starting point and a second marker adjacent to the first marker as a division end point to obtain character paragraphs corresponding to the file content; Acquire the number of characters of each file included in each character paragraph, and acquire the reference character specification, reference horizontal specification and reference vertical specification corresponding to the printing template; Determine the number of vertical lines corresponding to the number of characters based on the reference character specification and the reference horizontal specification, and sum the number of vertical lines to obtain a total value of the vertical lines; The ratio of the total longitudinal row value to the reference longitudinal specification is calculated, and integer processing is performed based on the obtained longitudinal ratio to obtain the print quantity corresponding to the print template.
4. The information security anti-leakage method based on diversified data according to claim 3 is characterized in that: Creating a print record table, obtaining a signal sending time corresponding to the required print signal, and filling the user information, file information and the signal sending time corresponding to the user terminal in the same corresponding unrecorded attribute information recording area of the print record table, including: Creating a print record table, wherein the print record table includes vertically arranged information recording areas corresponding to different area attributes, the information recording areas including information recording areas with unrecorded attributes and information recording areas with recorded attributes corresponding to different specifications; Filling the user information, file information and signal sending time corresponding to the same print file into the user sub-area, file sub-area and signal sub-area of the same corresponding unrecorded attribute information recording area respectively based on the filling order of vertical arrangement; The area outline constituting the information recording area is acquired, and the specifications of the area outline are changed based on the thickness dimension and the shape dimension respectively.
5. The information security anti-leakage method based on diversified data according to claim 4 is characterized in that: The method further comprises: Creating page number areas in each printing template corresponding to the same printing file, and filling the page number areas with the file serial numbers corresponding to the printing templates; Establishing an information display layer having a link relationship with the file information in the file sub-area, wherein the information display layer includes display sub-areas corresponding to the reference display quantity, wherein each display sub-area includes a content display slot and a sequence number display slot; Compare the area quantity corresponding to each display sub-area with the printed quantity, and adjust the area quantity of each display sub-area if there is a quantity difference; The obtained display sub-areas having the same number as the printed quantity are determined as a display collection; the content display slots in each display sub-area in the display collection are filled with preset display content, and the serial number display slots are filled with corresponding different file serial numbers.
6. The information security anti-leakage method based on diversified data according to claim 5 is characterized in that: The method further comprises: Obtaining the number of print copies determined by the user terminal based on the print file; When the number of print copies is at least greater than 1, the content display slot is segmented based on the number of print copies to obtain display sub-slots corresponding to the same content display slot and having the same number as the number of print copies.
7. The information security anti-leakage method based on diversified data according to claim 5 is characterized in that: Adjacent display sub-areas in the information display layer have the same horizontal spacing and vertical spacing; The method further comprises: When the print quantity is greater than the reference display quantity, obtaining a quantity difference between the reference display quantity and the print quantity; Determine the horizontal and vertical quantities occupied by each display sub-area in the information display layer, and adjust the horizontal and vertical quantities based on the quantity difference to generate each display sub-area corresponding to the quantity difference in the information display layer.
8. The information security anti-leakage method based on diversified data according to claim 6 is characterized in that: In response to any of the printed files being placed at a preset destruction location, the confidentiality cooperation terminal is triggered to identify the identification code, determine the file information corresponding to the identification code, and after completing the destruction operation of the printed file, mark the information recording area corresponding to the file information in the printing record table for destruction, including: Determining that the printed document is placed at a preset destruction location based on a preset identification strategy, triggering the confidentiality cooperation terminal to identify the identification area and page number area in the printed document, and obtaining the corresponding identification code and file serial number; Determining file information corresponding to the print file based on the identification code, and retrieving the print record table; In response to the existence of an information recording area corresponding to the file information in the printing record table, triggering the confidentiality cooperation terminal to collect environmental data of the surrounding environment within a preset range to obtain collected data; Based on the collected data, the environmental state of the surrounding environment is identified, and when the environmental state is an unmanned state, a rolling device arranged at the preset destruction position is triggered to transmit the printed file to the destruction entrance, and a destruction operation is performed on the printed file; In response to the completion of the execution of the destruction operation, the information display layer having a link relationship with the information recording area is retrieved, and the display sub-area corresponding to the file sequence number is marked for destruction.
9. The information security anti-leakage method based on diversified data according to claim 8 is characterized in that: Based on the preset identification strategy, it is determined that the printed document is placed at the preset destruction location, triggering the confidentiality collaboration terminal to identify the identification code, including: Acquire a target collection value output by a target light sensor disposed at a first sub-position corresponding to the preset destruction position, and retrieve a preset light value; In response to the target collection value being less than or equal to the preset light value, triggering each cooperative light sensor disposed at each second sub-position corresponding to the preset destruction position to collect light, and obtaining corresponding each cooperative collection value; In response to each collaborative collection value being less than or equal to the preset light value, it is determined that the printed file is placed at a preset destruction location, and the confidentiality collaboration terminal is triggered to identify the identification code.
10. The information security leakage prevention method based on diversified data according to claim 8, characterized in that: Obtaining the region marking time corresponding to the destruction mark includes: In response to all display sub-areas in the same information display layer being marked for destruction, the corresponding triggering confidentiality cooperation terminal is obtained to identify the identification code and retrieve the area marking time corresponding to the identification code.
11. An information security leakage prevention system based on diversified data, characterized in that: include: A print trigger module is configured to, in response to a print request signal sent by any user terminal based on file information having a matching relationship with its user authority, trigger the anti-leakage plug-in to generate a print template with an identification code, and fill the file content corresponding to the file information into the print template to obtain a print file corresponding to the user terminal; a printing record module configured to create a printing record table, obtain a signal sending time corresponding to the required printing signal, and fill the user information, file information and the signal sending time corresponding to the user terminal in the same corresponding unrecorded attribute information recording area of the printing record table; a destruction marking module, configured to, in response to any of the printed files being placed at a preset destruction location, trigger the confidentiality cooperation terminal to identify the identification code, determine the file information corresponding to the identification code, and after completing the destruction operation of the printed file, mark the information recording area corresponding to the file information in the printing record table for destruction; a time determination module configured to determine corresponding user rights based on user information in the information recording area for destruction marking, establish a printing requirement cycle corresponding to the user rights, and determine a printing cut-off time after a signal sending time in the information recording area for destruction marking corresponding to the printing requirement cycle; The authority adjustment module is configured to obtain the area marking time corresponding to the destruction mark, and adjust the user authority based on a time comparison between the area marking time and the printing cut-off time. The step of adjusting the user authority based on the time comparison between the area marking time and the printing cut-off time includes: Calculate the difference between the area marking time and the printing cut-off time to obtain a time difference, and compare the time difference with the retrieved first preset threshold and second preset threshold; When the time difference is negatively extended and greater than a first preset threshold, the user authority is adjusted downward; When the time difference is positively extended and greater than a second preset threshold, obtaining a historical record corresponding to the user terminal, and determining whether there is a corresponding preset number of records showing a positive extension trend based on the historical record; If so, the user rights are increased by a preset stable score, and the user rights are adjusted based on the increase result.
Citation Information
Patent Citations
Anti-counterfeiting secret-related destruction management system based on face recognition and two-dimensional code recognition
CN113190814A
User authority management method and system and storage medium
CN113392423A