Virtual object generation method and device
By generating replication objects and mapping objects, and selecting one of them for data processing based on trigger rules, the problem of lack of flexibility in data control and resource allocation of existing virtualization technology is solved, and flexible protection of data objects is achieved.
Patent Information
- Application Number
- CN202411322673.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-23
- Publication Date
- 2025-01-24
AI Technical Summary
Existing virtualization technologies lack flexibility when processing more granular data control or optimize resource allocation, making it difficult to effectively protect data.
By generating copying objects and mapping objects, the data monitoring machine transmits the data to the data state machine. According to the rules set by the trigger, select the copy object or mapping object to process the data to generate virtual objects.
It realizes flexible and effective protection of data objects through partial virtualization, and can perform data operations without affecting the original data, and can also affect the original data when needed.
Smart Images
Figure CN119356792A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the technical field of virtual data, and in particular to a method and apparatus for generating virtual objects. Background Technology
[0002] Currently, virtualization technology simulates a complete computer system through software, including processors, memory, storage devices, and network interfaces, allowing users to run multiple independent virtual environments on the same physical hardware.
[0003] However, current virtualization technologies, including VMware Workstation, primarily focus on virtualizing the entire data environment. While this approach effectively isolates different virtual environments, it also means that all data is placed in a relatively independent environment. When more granular data control or optimized resource allocation is required, this global virtualization approach proves inflexible in handling specific needs. Summary of the Invention
[0004] The technical problem to be solved by the present invention is to provide a method and apparatus for generating virtual objects, which can protect data through local virtualization.
[0005] To solve the above-mentioned technical problems, the technical solution adopted by the present invention is as follows:
[0006] A method for generating virtual objects, comprising the following steps:
[0007] The data monitoring machine acquires the data objects accessed by the device, generates corresponding copy objects and mapping objects based on the data objects, and transmits the copy objects and mapping objects corresponding to the data objects to the data state machine;
[0008] The data state machine determines whether to use the copied object or the mapped object for data processing based on the triggering rules set for the data object in the trigger, and calls back the object that has been processed as a virtual object.
[0009] To solve the above-mentioned technical problems, another technical solution adopted by the present invention is as follows:
[0010] A device for generating virtual objects, comprising:
[0011] The data monitoring machine is used to acquire data objects accessed by the device, generate corresponding copy objects and mapping objects based on the data objects, and transmit the copy objects and mapping objects corresponding to the data objects to the data state machine.
[0012] The data state machine is used to determine whether to use the copied object or the mapped object for data processing based on the triggering rules set for the data object in the trigger, and to call back the processed object as a virtual object.
[0013] The beneficial effects of this invention are as follows: When the data monitoring machine obtains the data object accessed by the device, it generates corresponding copy objects and mapping objects based on the data object to provide initial data for the data state machine. After obtaining the initial data, the data state machine first determines whether to use the copy object or the mapping object in the initial data for data processing based on the triggering rules set for the data object in the trigger, and then calls back the processed object as a virtual object. In this way, the data object is virtualized into an object of the corresponding state according to the operation to be performed. When it is not desired to affect the original data, a copy virtual object can be generated; when it is desired to affect the original data, a mapping virtual object can be generated. This allows for flexible and effective protection of data objects through partial virtualization. Attached Figure Description
[0014] Figure 1 This is a flowchart of a method for generating virtual objects according to an embodiment of the present invention;
[0015] Figure 2 This is a schematic diagram of a virtual object generation device according to an embodiment of the present invention;
[0016] Figure 3 This is a schematic diagram illustrating the specific process of a method for generating virtual objects according to an embodiment of the present invention. Detailed Implementation
[0017] To explain in detail the technical content, objectives, and effects of the present invention, the following description is provided in conjunction with the embodiments and accompanying drawings.
[0018] Please refer to Figure 1 This invention provides a method for generating virtual objects, including the following steps:
[0019] The data monitoring machine acquires the data objects accessed by the device, generates corresponding copy objects and mapping objects based on the data objects, and transmits the copy objects and mapping objects corresponding to the data objects to the data state machine;
[0020] The data state machine determines whether to use the copied object or the mapped object for data processing based on the triggering rules set for the data object in the trigger, and calls back the object that has been processed as a virtual object.
[0021] As described above, the beneficial effects of this invention are as follows: When the data monitoring machine obtains the data object accessed by the device, it generates corresponding copy objects and mapping objects based on the data object to provide initial data for the data state machine. After obtaining the initial data, the data state machine first determines whether to use the copy object or the mapping object in the initial data for data processing based on the triggering rules set for the data object in the trigger, and then calls back the processed object as a virtual object. In this way, the data object is virtualized into an object of the corresponding state according to the operation to be performed. When it is not desired to affect the original data, a copy virtual object can be generated; when it is desired to affect the original data, a mapping virtual object can be generated. This allows for flexible and effective protection of data objects through partial virtualization.
[0022] Furthermore, the data monitoring machine acquires the data objects accessed by the device, and then includes: storing the access records of the data objects.
[0023] As described above, access records of data objects are accessed through storage devices to achieve log storage of access records, so as to facilitate the tracing of the data objects corresponding to subsequently generated virtual objects.
[0024] Furthermore, the data state machine determines whether to use the copied object or the mapped object for data processing based on the triggering rules set for the data object in the trigger, including:
[0025] The data state machine acquires and saves the copy object and the mapping object of the data object. When the operation behavior corresponding to the data object triggers the first triggering rule, the copy object is used for data processing. When the operation behavior corresponding to the data object triggers the second triggering rule, the mapping object is used for data processing.
[0026] The first triggering rule is a condition, action, or behavior that does not affect the original data of the data object, and the second triggering rule is a condition, action, or behavior that affects the original data of the data object.
[0027] As described above, when the operation of a data object can match the preset triggering conditions in the trigger, it can be determined whether to use a copied object or a mapped object, and virtual objects can be generated reasonably and flexibly.
[0028] Further, determining whether to use the copied object or the mapped object for data processing includes:
[0029] If the copied object is used for data processing, the processed data generated in the copied object is obtained, the feature data in the processed data is determined according to the blurring rules, and the feature data is blurred.
[0030] As described above, after obtaining the processing data of the copied object, the corresponding actions are executed to process the data as needed, effectively performing multi-dimensional judgment, interception, and modification of the data to achieve the effect of data protection.
[0031] Furthermore, the step of calling back the processed object as a virtual object also includes: generating snapshot data for the processed object.
[0032] As described above, by generating snapshot data for objects that have been processed, the object state transition process during the virtual object generation process can be recorded in the data state machine, so as to facilitate the management of virtual objects.
[0033] Please refer to Figure 2 Another embodiment of the present invention provides a virtual object generation apparatus, comprising:
[0034] The data monitoring machine is used to acquire data objects accessed by the device, generate corresponding copy objects and mapping objects based on the data objects, and transmit the copy objects and mapping objects corresponding to the data objects to the data state machine.
[0035] The data state machine is used to determine whether to use the copied object or the mapped object for data processing based on the triggering rules set for the data object in the trigger, and to call back the processed object as a virtual object.
[0036] As described above, the beneficial effects of this invention are as follows: When the data monitoring machine obtains the data object accessed by the device, it generates corresponding copy objects and mapping objects based on the data object to provide initial data for the data state machine. After obtaining the initial data, the data state machine first determines whether to use the copy object or the mapping object in the initial data for data processing based on the triggering rules set for the data object in the trigger, and then calls back the processed object as a virtual object. In this way, the data object is virtualized into an object of the corresponding state according to the operation to be performed. When it is not desired to affect the original data, a copy virtual object can be generated; when it is desired to affect the original data, a mapping virtual object can be generated. This allows for flexible and effective protection of data objects through partial virtualization.
[0037] Furthermore, the data monitoring machine acquires the data objects accessed by the device, and then includes: storing the access records of the data objects.
[0038] As described above, access records of data objects are accessed through storage devices to achieve log storage of access records, so as to facilitate the tracing of the data objects corresponding to subsequently generated virtual objects.
[0039] Furthermore, the data state machine determines whether to use the copied object or the mapped object for data processing based on the triggering rules set for the data object in the trigger, including:
[0040] The data state machine acquires and saves the copy object and the mapping object of the data object. When the operation behavior corresponding to the data object triggers the first triggering rule, the copy object is used for data processing. When the operation behavior corresponding to the data object triggers the second triggering rule, the mapping object is used for data processing.
[0041] The first triggering rule is a condition, action, or behavior that does not affect the original data of the data object, and the second triggering rule is a condition, action, or behavior that affects the original data of the data object.
[0042] As described above, when the operation of a data object can match the preset triggering conditions in the trigger, it can be determined whether to use a copied object or a mapped object, and virtual objects can be generated reasonably and flexibly.
[0043] Further, determining whether to use the copied object or the mapped object for data processing includes:
[0044] If the copied object is used for data processing, the processed data generated in the copied object is obtained, the feature data in the processed data is determined according to the blurring rules, and the feature data is blurred.
[0045] As described above, after obtaining the processing data of the copied object, the corresponding actions are executed to process the data as needed, effectively performing multi-dimensional judgment, interception, and modification of the data to achieve the effect of data protection.
[0046] Furthermore, the step of calling back the processed object as a virtual object also includes: generating snapshot data for the processed object.
[0047] As described above, by generating snapshot data for objects that have been processed, the object state transition process during the virtual object generation process can be recorded in the data state machine, so as to facilitate the management of virtual objects.
[0048] The virtual object generation method and apparatus of the present invention described above are applicable to data protection through local virtualization. The specific embodiments are described below:
[0049] Example 1
[0050] Please refer to Figure 1 and Figure 3 A method for generating virtual objects, comprising the following steps:
[0051] S1. The data monitoring machine obtains the data object accessed by the device, generates the corresponding copy object and mapping object according to the data object, and transmits the copy object and mapping object corresponding to the data object to the data state machine.
[0052] Specifically, when the data monitoring machine monitors the access of the data object by the device, it stores the access record of the data object, which includes thread objects, process objects and device objects. Then, it copies and maps the data objects according to their data content and data size to obtain copied objects and mapped objects. The data objects and their copied and mapped objects are then delivered to the data state machine for processing, preparing two types of data sources for the data state machine.
[0053] In this embodiment, the copied object and the original data of the data object are exactly the same. Modifying the copied object does not affect the data structure of the original data in the data object. The mapping object and the original data of the data object are exactly the same. The data of the mapping object is synchronized with the data of the data object. Modifying the mapping object will also change the original data in the data object.
[0054] S2. The data state machine determines whether to use the copied object or the mapped object for data processing based on the triggering rules set for the data object in the trigger, and calls back the object that has been processed as a virtual object.
[0055] Specifically, the data state machine acquires and saves the copy object and the mapping object of the data object. When the operation behavior corresponding to the data object triggers the first triggering rule, the copy object is used for data processing. When the operation behavior corresponding to the data object triggers the second triggering rule, the mapping object is used for data processing. The first triggering rule is a condition, action, or behavior that does not affect the original data of the data object, and the second triggering rule is a condition, action, or behavior that affects the original data of the data object.
[0056] In this embodiment, the data state machine obtains initial data for two states provided by the data monitoring machine, namely, the copy object and the mapping object, and saves the state corresponding to the object, that is, saves the copy object data and the mapping object data. The initial data in the data state machine is passed into the intermediate data stage, and the required copy object or mapping object is selected according to the corresponding triggering rules set in the trigger. The triggering rules include triggering conditions, triggering behaviors, and actions. When data enters the intermediate data, triggering trigger conditions / actions / behaviors, etc., if it cannot affect the original data and only affects the current (device / process / thread), the copy object is used. If it is necessary to pass on the impact, the mapping object is used.
[0057] If the copied object is used for data processing, the processed data generated in the copied object is obtained, the feature data in the processed data is determined according to the blurring rules, and the feature data is blurred.
[0058] In this embodiment, let the data object be thread A. If the condition of the data object is "thread B", the behavior is "thread A accesses thread B", and the access to the data object requires data cloning, then a copy object is used. During the access process, data D is generated. Data D contains feature data to be hidden. Then, the action "replace data D with other data" is executed. At this time, the replaced and cloning data is returned, and the cloning copy object is returned as the final data. A snapshot data is generated on it, thereby protecting the hidden information of the original data. The corresponding feature data is determined according to the data type. For example, when accessing a txt file, the feature data corresponding to the data generated during the access process is text data.
[0059] In this embodiment, when the operation conditions and actions of the data object can match the preset trigger conditions in the trigger, it is determined whether to use a copied object or a mapped object, and the determined object is used to execute the corresponding action. During the execution of the action, data is virtualized as needed. In this way, data can be judged, intercepted and modified in multiple dimensions through conditions, actions or behaviors.
[0060] Therefore, in this embodiment, data processing is handled by dedicated virtual events. By using virtual data objects, copied or mapped objects replace the original data objects, thereby expanding and modifying the data through local virtualization, and providing more flexible and effective protection for the data.
[0061] Example 2
[0062] Please refer to Figure 2 A device for generating virtual objects, comprising:
[0063] The data monitoring machine is used to acquire data objects accessed by the device, store access records of the data objects, generate corresponding copy objects and mapping objects based on the data objects, and transmit the copy objects and mapping objects corresponding to the data objects to the data state machine;
[0064] The data state machine is used to determine whether to use the copied object or the mapped object for data processing based on the triggering rules set for the data object in the trigger, and to call back the processed object as a virtual object.
[0065] Specifically, the data state machine acquires and saves the copy object and the mapping object of the data object. When the operation behavior corresponding to the data object triggers the first triggering rule, the copy object is used for data processing. When the operation behavior corresponding to the data object triggers the second triggering rule, the mapping object is used for data processing, and snapshot data is generated for the data-processed object. The first triggering rule is a condition, action, or behavior that does not affect the original data of the data object, and the second triggering rule is a condition, action, or behavior that affects the original data of the data object.
[0066] If the copied object is used for data processing, the processed data generated in the copied object is obtained, the feature data in the processed data is determined according to the blurring rules, and the feature data is blurred.
[0067] In summary, the present invention provides a method and apparatus for generating virtual objects. When a data monitoring machine acquires a data object accessed by a device, it stores the access records of the data object and generates corresponding copy objects and mapping objects based on the data object, providing initial data for the data state machine. After acquiring the initial data, the data state machine first determines whether to use the copy object or the mapping object in the initial data for data processing based on the trigger rules set for the data object in the trigger, and then calls back the processed object as a virtual object. Specifically, when the operation of the data object matches the preset trigger conditions in the trigger, it can be determined whether to use a copy object or a mapping object. Furthermore, after acquiring the processing data of the copy object, the corresponding actions are executed to virtualize the processed data as needed, effectively performing multi-dimensional judgment, interception, and modification of the data to achieve data protection. In this way, the data object is virtualized into an object of a corresponding state according to the operation to be performed. When it is not desired to affect the original data, a copy virtual object can be generated; when it is desired to affect the original data, a mapping virtual object can be generated. This allows for flexible and effective protection of data objects through partial virtualization.
[0068] The above description is merely an embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent modifications made based on the content of the present invention specification and drawings, or direct or indirect applications in related technical fields, are similarly included within the patent protection scope of the present invention.
Claims
1. A method for generating a virtual object, characterized in that: Includes steps: The data monitoring machine obtains the data object accessed by the device, generates a corresponding copy object and a mapping object according to the data object, and transmits the copy object and the mapping object corresponding to the data object to the data state machine; The data state machine determines whether to use the copy object or the mapping object for data processing according to the trigger rule set for the data object in the trigger, and calls back the data-processed object as a virtual object.
2. A method for generating a virtual object according to claim 1, characterized in that: The data monitoring machine obtains the data object accessed by the device, and then includes: storing the access record of the data object.
3. The method for generating a virtual object according to claim 1, characterized in that: The data state machine determines whether to use the copy object or the mapping object to process the data according to the trigger rule set for the data object in the trigger, including: The data state machine obtains and saves the copy object and the mapping object of the data object, and when the operation behavior corresponding to the data object triggers the first trigger rule, the copy object is used to process the data, and when the operation behavior corresponding to the data object triggers the second trigger rule, the mapping object is used to process the data; The first trigger rule is a condition, action or behavior that does not affect the original data of the data object, and the second trigger rule is a condition, action or behavior that affects the original data of the data object.
4. A method for generating a virtual object according to claim 3, characterized in that: Determining whether to use the copy object or the mapping object for data processing, and then comprising: If the copy object is used for data processing, the processed data generated by processing the copy object is obtained, feature data in the processed data is determined according to a blurring rule, and the feature data is blurred.
5. The method for generating a virtual object according to claim 1, characterized in that: The calling back of the data-processed object to a virtual object further includes: generating snapshot data for the data-processed object.
6. A device for generating a virtual object, characterized in that: include: A data monitoring machine, used for acquiring a data object accessed by a device, generating a corresponding copy object and a mapping object according to the data object, and transmitting the copy object and the mapping object corresponding to the data object to a data state machine; The data state machine is used to determine whether to use the copy object or the mapping object for data processing according to the trigger rule set for the data object in the trigger, and call back the data-processed object to a virtual object.
7. The device for generating a virtual object according to claim 6, characterized in that: The data monitoring machine obtains the data object accessed by the device, and then includes: storing the access record of the data object.
8. The device for generating a virtual object according to claim 6, characterized in that: The data state machine determines whether to use the copy object or the mapping object to process the data according to the trigger rule set for the data object in the trigger, including: The data state machine obtains and saves the copy object and the mapping object of the data object, and when the operation behavior corresponding to the data object triggers the first trigger rule, the copy object is used to process the data, and when the operation behavior corresponding to the data object triggers the second trigger rule, the mapping object is used to process the data; The first trigger rule is a condition, action or behavior that does not affect the original data of the data object, and the second trigger rule is a condition, action or behavior that affects the original data of the data object.
9. The device for generating a virtual object according to claim 8, characterized in that: Determining whether to use the copy object or the mapping object for data processing, and then comprising: If the copy object is used for data processing, the processed data generated by processing the copy object is obtained, feature data in the processed data is determined according to a blurring rule, and the feature data is blurred.
10. The device for generating a virtual object according to claim 6, characterized in that: The calling back of the data-processed object to a virtual object further includes: generating snapshot data for the data-processed object.