Method and system for downloading storage document by browser

Abstract

The invention discloses a method and a system for downloading and storing documents by a browser, and the method comprises the following steps: installing a special browser on local equipment, and setting a security policy for downloading and storing documents on a policy server by an administrator according to the type of each document; the special browser obtains the security policy from the policy server, when the special browser is connected with a service website to download an important document, the file IO operation of the document is redirected to a memory space, and the downloaded document is stored in the memory space of a browser process; after the document is downloaded, creating an uploading task, dividing the document into a plurality of fragments, and uploading the fragments to a specified cloud storage space; after uploading is completed, the document in the process memory space is destroyed, and the URL of the document returned by the cloud storage server in the cloud storage space is recorded. According to the method and the system, the data security on the business website can be ensured, the document downloading and storage flexibility is improved, and the speed and the convenience of accessing the data of the business website are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of network connection, and in particular to a method and system for downloading stored documents by a browser. Background Art

[0002] With the accelerated evolution of enterprise digital transformation, IaaS infrastructure has become ubiquitous, and SaaS services are becoming more and more deeply integrated into enterprise business scenarios. The trend of cloud computing is firm and clear, and almost all new businesses tend to be accessed through browsers, which has pushed browsers to become the de facto entrance to enterprise business. However, many enterprises, especially small and medium-sized enterprises, generally use personal browsers for daily work. However, this common practice has brought many hidden dangers to enterprises and individuals: employees' use of personal browsers is outside the enterprise management system, lacks compliance insights, and has data leakage risks. The business model of personal browsers is mostly traffic and advertising. There is no doubt that it will widely collect and analyze users' browser usage behavior and access records. When enterprise employees use personal browsers to access enterprise business, access data will inevitably be collected and reported, shared or resold to uncertain third parties, causing data leakage.

[0003] In addition, because personal browsers rarely consider data security when using local cache to improve access efficiency, when enterprise employees visit business websites on untrusted devices, local cache will bring leakage risks. It is common for employees to download attachments when visiting business websites. Although employees of different roles have very different operations when consuming these attachments, for example, some only need to open the attachments in read-only mode (layout), while others need to edit the attachments (streaming), in most cases, the attachments will be downloaded in plain text to local temporary storage, which will bring some security risks. Therefore, personal browsers that are frequently used in enterprises cannot provide such security guarantees, which poses a great hidden danger to the data security of enterprises. Summary of the invention

[0004] The purpose of the present invention is to overcome the shortcomings of the above-mentioned prior art and provide a method for downloading and storing documents by a browser, which can download and store according to the type of document data and use cloud storage space to further ensure data security, as well as a system for downloading and storing documents by a browser that implements this method.

[0005] The present invention is achieved through the following technical solutions:

[0006] A method for downloading a stored document by a browser comprises the following steps:

[0007] S1. Install a dedicated browser on the local device. The team administrator assigns accounts to each user in the team and sets a security policy on the policy server for each user to download and store the corresponding documents on each business website through a dedicated browser according to the importance and confidentiality requirements of each document on each business website. For documents of a specified type (such as documents with a high level of importance or confidentiality), the security policy is set so that the dedicated browser first downloads the documents to the browser process memory and then uploads them to the online document service space corresponding to the team.

[0008] S2. The policy server sends the security policy to the dedicated browser. When the user logs in to the dedicated browser through his account in the team to visit a business website, the dedicated browser determines whether the website is a business website in the security policy based on the URL of the business website. If so, the corresponding security policy is executed. Otherwise, the security policy is not executed.

[0009] S3. When the user needs to download a file from the business website, the type of the downloaded file is determined by the content-type returned by the business website. When it is determined to be a specified file type, the corresponding download operation is performed; for a document of a specified type, the dedicated browser redirects the disk IO operation for storing the document to the process memory space of the browser during the download process, and first stores the downloaded document in the process memory space;

[0010] S4. When the document of the specified type is downloaded in the process memory space of the browser, the dedicated browser immediately creates an upload task, divides the downloaded document into several fragments, and then uploads these fragments concurrently to the online document service space specified in the security policy;

[0011] S5. After all fragments of the document are uploaded to the online document service space, the dedicated browser destroys the document in the process memory space and records the document URL returned by the online document service server;

[0012] S6. When a user needs to open a document in the online document service space, the user logs in to the dedicated browser through the user account assigned to the team. The dedicated browser passes the document URL and the identity information of the logged-in user as parameters to the online document service server. The online document service server verifies the user identity and document URL, and authorizes the user to access the document after confirmation. According to the document permissions of the current user, the user views, edits or shares the document online through the dedicated browser.

[0013] The online document service server verifies the user identity and document URL in the following ways:

[0014] S6-1: The dedicated browser accesses the online document service server and passes the currently logged-in user identity information and the document URL as parameters to the online document service server;

[0015] S6-2: The online document service server verifies the user identity and the document URL to determine whether the user has the authority to access the document;

[0016] S6-3: The user accesses the document online through a dedicated browser, and the online document service server restricts the user's operations on the document according to the document permissions owned by the user, such as read-only, edit, and share.

[0017] Furthermore, the document is in doc, docx, ppt, pptx, xls, xlsx or pdf format.

[0018] Furthermore, the security policy includes the URL of the business website, the document type, the storage location of the document, the document segmentation rule, the storage location of the document in the online document service space, the document opening method and the document exit and deletion method.

[0019] Furthermore, in step S1, the team administrator sets the security policy through the policy configuration page. One policy configuration page corresponds to the security policy of one business website, and the scope of users in the team to which the security policy applies is set on the policy configuration page.

[0020] Furthermore, in step S4, the dedicated browser concurrently uploads these fragments to the online document service space specified in the security policy as follows:

[0021] S4-1: After the document is downloaded in the browser's process memory space, the size is calculated and the file is split into several fragments according to a certain size (such as 2MB, 5MB);

[0022] S4-2: The dedicated browser creates several (e.g., 5) threads, each of which is responsible for uploading one of the segments to the online document service space. If a thread encounters an error during the uploading process, the thread or other threads will re-upload the segment;

[0023] S4-3: When a thread completes uploading a file segment, it starts uploading the remaining segment until there are no remaining segments.

[0024] A system for downloading stored documents by a browser, used to implement the above method for downloading stored documents by a browser, comprising a policy server, a dedicated browser and an online document service server;

[0025] The policy server is used by the team administrator to assign accounts to each user in the team, and to set security policies for each user to download and store documents according to the importance and confidentiality requirements of each document, and to distribute the security policies to dedicated browsers;

[0026] The dedicated browser is installed on the local access device, and includes a network module and a file download module. The network module is used to connect to the business website, the policy server and the online document service server; the file download module is used to download and store documents from the business website according to the security policy, and save the download record;

[0027] The online document service server is used to allocate online document service space to each team, receive documents uploaded by a dedicated browser, allocate online storage space for the documents and store them, verify the identity of the visitor, and control the visitor's access to the viewing, editing and sharing of the documents.

[0028] The present invention manages the downloading and storage of documents on a business website by a dedicated browser through a policy server, and can store the documents in different locations according to the type and importance of the documents, thereby ensuring the data security on the business website and improving the flexibility of document downloading and storage; when the documents on the business website are relatively important, the documents are temporarily stored in the browser process memory space when they are downloaded, and then uploaded to the cloud storage space after the download is completed. After the upload is completed, the downloaded documents are destroyed in the process memory space, and the documents in the cloud storage space can be viewed at any time, further improving the encryption protection of the documents; the behavior of user file downloading is managed and controlled in the form of a team, and members in the team can execute the same security policy, or different security policies can be set for each member separately, which can meet the actual needs of different enterprises and different teams according to local conditions; users can store, view and edit documents in the cloud storage space at any time by logging in with an account, and the application is flexible; the dedicated browser can open and edit various types of documents by means of document plug-ins, and does not rely on the huge document processing software installed in the local device, such as the office suite, and the local device can open and edit the downloaded documents without installing the corresponding software, thereby improving the speed and convenience of accessing the business website data. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 The figure is a flow chart of a method according to an embodiment of the present invention.

[0030] Figure 2 It is a structural block diagram of an embodiment of the present invention. DETAILED DESCRIPTION

[0031] A method for a browser to download a stored document, such as Figure 1 As shown, the following steps are included:

[0032] S1. Install a dedicated browser on the local device. The team administrator assigns an account to each user in the team and sets a security policy on the policy server for each user to download and store the corresponding documents on each business website through a dedicated browser according to the importance and confidentiality requirements of each document on each business website. For documents of specified types (such as documents with a higher level of importance and confidentiality), the security policy is set so that the dedicated browser first downloads the documents to the browser process memory and then uploads them to the online document service space corresponding to the team.

[0033] Team administrators set security policies through the policy configuration page. The policy configuration page can be based on business websites, and one setting page corresponds to the access policy of one business website. The security policy includes the URL of the business website, the user range to which the security policy applies, the document type, the document storage method, the document segmentation rules when the document needs to be uploaded to the online document service space, the segmentation upload rules, the storage location of the document in the online document service space, the document opening method, and the document exit and deletion method.

[0034] For enterprises, in order to regulate the document downloading and storage behaviors of enterprise employees when logging into the enterprise business website, when setting security policies, it is necessary to enter the URL of the enterprise business website on the storage configuration page, set the types of documents that can be downloaded from the business website, and set the location where each type of document can be stored in the browser or cloud storage space. Configure security policies for document downloads according to document types, where document types can be classified according to document format types. For documents in certain formats, such as seven document types, specifically doc, docx, xls, xlsx, ppt, pptx, and pdf, these seven document types are saved in memory when downloaded and not written to the local disk, and are uploaded to the online document service after the download is complete. For "other" types other than these seven document types, files can be downloaded to the local disk or downloads can be prohibited; they can also be classified according to the specific content of the document. Administrators can pre-classify these documents according to the content. Which ones have a high confidentiality level, which ones have a general confidentiality level, and which ones do not need to be kept confidential. For example, for some less important documents, they can be saved on local devices (such as hard disks, USB flash drives, etc.) without encryption and can be downloaded normally. For some important documents that are not suitable for wide dissemination, they can be set to be stored only in the memory sandbox and prohibited from being stored on local storage devices. For documents with a higher security and confidentiality level, it is stipulated that they can only be downloaded to the browser process memory space first, and then uploaded to the online document service space (cloud storage space) after the download is complete, and the location of the online document service space (cloud storage space) is specified in the security policy. Therefore, when it is necessary to store documents in the online document service space, it is necessary to specify the type of document that needs to perform the operation in the security policy. Whether it is specified according to the format of the file or the specific content of the file, it must be reflected in the security policy.

[0035] Similarly, the document exit deletion method can also be set according to the document type. For documents with low importance, it is not required to delete them when exiting, but for documents with high importance, users are required to delete them when exiting the browser, or when logging out, or after uploading to the cloud storage space, they can be deleted in the memory sandbox or process memory space. These policies and rules are set by the team administrator on the policy server (browser management console), and only the administrator can set and modify the relevant authorizations.

[0036] The present invention regulates the behavior of users downloading files in teams. An enterprise can have multiple teams according to different business types. The document download permissions of each team are different. Different members in the same team may also have different download permissions. This ensures document security while taking flexibility into account. The administrator of each team sets the user range applicable to each security policy in the setting interface. All or part of the team members can be selected according to the actual situation. Only users with set permissions can log in to the corresponding business website and have the corresponding download permissions. When a user is removed from the team (login account is deleted), he or she will not have the permission to download documents on the corresponding website, and even the documents originally downloaded and stored in the online document service space will not be viewed.

[0037] The online document service server allocates an online document service space to each team to store all documents uploaded by the team members. When the user logs in to the dedicated browser, he can view and edit all documents uploaded by the user to the online document service space on the corresponding file service module.

[0038] S2. The policy server sends the security policy to the dedicated browser. When the user logs in to the dedicated browser through his account in the team to visit a business website, the dedicated browser determines whether the website is a business website in the security policy based on the URL of the business website. If so, the corresponding security policy is executed. Otherwise, the security policy is not executed.

[0039] Before users download files from a business website, the team administrator must configure the URL of the business website and the document security policy that the website should implement in advance and send it to the dedicated browser.

[0040] S3. When a user needs to download a file from a business website, the type of the downloaded file is determined by the content-type returned by the business website. When it is determined to be a specified file type, the corresponding download operation is performed; for a document of a specified type, the dedicated browser redirects the disk IO operation for storing the document to the browser's process memory space during the download process, and first stores the downloaded document in the process memory space. The dedicated browser allocates memory space according to the security policy, and then downloads the document to the memory space.

[0041] S4. When the download of the specified type of document is completed, the dedicated browser immediately creates an upload task, divides the downloaded document into several fragments, and then uploads these fragments concurrently to the online document service space specified in the security policy.

[0042] The method by which the dedicated browser concurrently uploads these fragments to the online document service space specified in the security policy is as follows:

[0043] S4-1: After the file is downloaded, the size is calculated and the file is divided into several pieces according to a certain size (such as 2MB, 5MB);

[0044] S4-2: The dedicated browser creates several (e.g., 5) threads, each of which is responsible for uploading one of the segments to the online document service space. If a thread encounters an error during the uploading process, the thread or other threads will re-upload the segment;

[0045] S4-3: When a thread completes uploading a file segment, it starts uploading the remaining segment until there are no remaining segments.

[0046] S5. After all segments of the document are uploaded to the online document service space, the dedicated browser destroys the document in the process memory space and records the document URL returned by the online document service server.

[0047] Compared with documents written to local disk and memory, documents written to the browser process memory space cannot be accessed or deleted by other users, are protected at the system level, and cannot be restored after being destroyed. In the end, the documents are stored in the online document service space and can only be accessed after identity verification, which ensures the security of the files and is not affected by local devices and can be accessed anytime and anywhere.

[0048] S6. When a user needs to open a document in the online document service space, the user logs in to the dedicated browser through the user account assigned to the team. The dedicated browser passes the document URL and the identity information of the logged-in user as parameters to the online document service server. The online document service server verifies the user identity and document URL, and authorizes the user to access the document after confirmation. According to the document permissions of the current user, the user views, edits or shares the document online through the dedicated browser.

[0049] The specific method for the online document service server to verify the user identity and document URL is:

[0050] S6-1: The dedicated browser connects to the online document service server and passes the currently logged-in user identity information and the document URL as parameters to the online document service server;

[0051] S6-2: The online document service server verifies the user identity and the document URL to determine whether the user has the authority to access the document;

[0052] S6-3: The user accesses the document online through a dedicated browser, and the online document service server restricts the user's operations on the document according to the document permissions owned by the user, such as read-only, edit, and share.

[0053] A system for downloading stored documents by a browser, used to implement the above-mentioned method for downloading stored documents by a browser, such as Figure 2 As shown, it includes a policy server, a dedicated browser and an online document service server (cloud storage server);

[0054] The policy server is used by the team administrator to assign accounts to each user in the team, and to set security policies for each user to download and store documents according to the importance and confidentiality requirements of each document, and distribute the security policies to dedicated browsers. The policy server is generally included in the browser backend server, and the security policy can be configured in the browser web control configuration page.

[0055] The dedicated browser is installed on the local access device, and includes a network module and a file download module. The network module is used to connect to the business website, the policy server and the online document service server; the file download module is used to download and store documents from the business website according to the security policy, and save the download record;

[0056] The online document service server (cloud storage server) is used to allocate online document service space to each team, receive documents uploaded by a dedicated browser, allocate online storage space (cloud storage space) to the documents and store them, verify the identity of the visitor, and control the visitor's access to view, edit and share documents.

[0057] When accessing corporate business, the dedicated browser can establish a reliable middle layer between the corporate business system and the local access device. After the dedicated browser connects to the browser server, it obtains the document protection policy set by the administrator from the server in the form of a policy.

[0058] The above detailed description is a specific description of a feasible embodiment of the present invention. The embodiment is not intended to limit the patent scope of the present invention. Any equivalent implementation or modification that does not deviate from the present invention should be included in the patent scope of this case.

Claims

1. A method for downloading a stored document by a browser, characterized in that: The steps include: S1. Install a dedicated browser on the local device. The team administrator assigns an account to each user in the team. The team administrator sets a security policy on the policy server for each user to download and store the corresponding documents on each business website through a dedicated browser according to the importance and confidentiality requirements of each document on each business website. For documents of a specified type, the security policy is set to first download the documents to the browser process memory when downloading, and then upload them to the online document service space corresponding to the team. S2. The policy server sends the security policy to the dedicated browser. When the user logs in to the dedicated browser through his account in the team to visit a business website, the dedicated browser determines whether the website is a business website in the security policy based on the URL of the business website. If so, the corresponding security policy is executed. Otherwise, the security policy is not executed. S3. When the user needs to download a file from the business website, the type of the downloaded file is determined by the content-type returned by the business website. When it is determined to be a specified file type, the corresponding download operation is performed; for a document of a specified type, the dedicated browser redirects the disk IO operation for storing the document to the process memory space of the browser during the download process, and first stores the downloaded document in the process memory space; S4. When the document of the specified type is downloaded in the process memory space of the browser, the dedicated browser immediately creates an upload task, divides the downloaded document into several fragments, and then uploads these fragments concurrently to the online document service space specified in the security policy; S5. After all fragments of the document are uploaded to the online document service space, the dedicated browser destroys the document in the process memory space and records the document URL returned by the online document service server; S6. When a user needs to open a document in the online document service space, the user logs in to the dedicated browser through the user account assigned to the team. The dedicated browser passes the document URL and the identity information of the logged-in user as parameters to the online document service server. The online document service server verifies the user identity and document URL, and authorizes the user to access the document after confirmation. The user views, edits or shares the document online through the dedicated browser according to the document permissions he has.

2. A method for downloading a stored document by a browser according to claim 1, characterized in that: The security policy includes the URL of the business website, applicable user scope, document type, document storage method, document segmentation rules when the document needs to be uploaded to the online document service space, segment upload rules, document storage location in the online document service space, document opening method and document exit and deletion method.

3. A method for downloading a stored document by a browser according to claim 1, characterized in that: In step S1, the team administrator sets the security policy through the policy configuration page. One policy configuration page corresponds to the security policy of a business website. The scope of users in the team to which the security policy applies is set on the policy configuration page.

4. A method for downloading a stored document by a browser according to claim 1, characterized in that: The document is in doc, docx, ppt, pptx, xls, xlsx or pdf format.

5. A method for downloading a stored document by a browser according to claim 1, characterized in that: The method in step S4 for the dedicated browser to concurrently upload these fragments to the online document service space specified in the security policy is: S4-1: After the document is downloaded in the browser's process memory space, the size is calculated and the file is split into several fragments according to certain size; S4-2: The dedicated browser creates several threads, each of which is responsible for uploading one of the segments to the online document service space. If a thread encounters an error during the uploading process, the thread or other threads will re-upload the segment; S4-3: When a thread completes uploading a file segment, it starts uploading the remaining segment until there are no remaining segments.

6. A system for downloading stored documents by a browser, used to implement the method for downloading stored documents by a browser as claimed in any one of claims 1 to 5, characterized in that: Includes policy server, dedicated browser and online document service server; The policy server is used by the team administrator to assign accounts to each user in the team, and to set security policies for each user to download and store documents according to the importance and confidentiality requirements of each document, and to distribute the security policies to dedicated browsers; The dedicated browser is installed on the local access device, and includes a network module and a file download module. The network module is used to connect to the business website, the policy server and the online document service server; the file download module is used to download and store documents from the business website according to the security policy, and save the download record; The online document service server is used to allocate online document service space to each team, receive documents uploaded by a dedicated browser, allocate online storage space for the documents and store them, verify the identity of the visitor, and control the visitor's access to the viewing, editing and sharing of the documents.

Images