Alarm tool for illegal external connection of encrypted optical disc

Abstract

The invention belongs to the technical field of informatization security and secrecy, and particularly relates to an encrypted optical disc illegal external connection alarm tool which comprises a recording and printing tool recorded in an optical disc in an encrypted mode and an internet detection module. And automatically associating a specific website after the recording and printing tool is opened, and judging that the compact disc is used illegally if the association is successful. According to the invention, information security management can be enhanced, the management efficiency is improved, the information security cost is reduced, comprehensive monitoring and timely alarm of the secret-related optical disk are realized, and the security and confidentiality of the secret-related information are greatly improved.

Description

Technical Field

[0001] The invention belongs to the technical field of information security and confidentiality, and in particular relates to an encrypted optical disc illegal external connection alarm tool. Background Art

[0002] With the rapid development of information technology, the security of confidential information is facing severe challenges, and the number of confidential information leaks is increasing. The leakage of confidential information may bring immeasurable losses. In the situation where information security is facing severe challenges, the security of confidential information has received more and more attention. In order to prevent the occurrence of leaks, most confidential individuals use traditional defense technologies such as firewalls, intrusion detection, network auditing and anti-virus software to prevent external attacks and information destruction and leakage. Existing technologies and products also focus on document encryption, intranet terminal equipment monitoring, etc., but ignore a very important aspect, that is, the management and control of CD-ROM information carriers. However, since CDs are easy to spread, easy to copy, and difficult to track, once they fall into the hands of criminals, they will pose a great threat to the security of the country and enterprises. In order to protect the security of confidential information, it is necessary to monitor the use of CDs to promptly detect and prevent violations.

[0003] The existing management of confidential optical discs often relies heavily on strict confidentiality management systems, supplemented by manual supervision and enforcement, which greatly increases the cost of confidentiality management and the risk of leaks. Some security vendors have developed some products that can audit the contents of optical discs in accordance with the requirements of confidentiality standards. At present, these products have single functions: there is no permission management for different user roles, and there are super administrators; the burned confidential information is not encrypted, and the burned confidential optical discs can be read on unauthorized computers; the operation records and audits of the optical discs are basically recorded manually, and the records are scattered and unsystematic, making it difficult to form comprehensive and detailed log audits and statistical reports, and the efficiency is low, and violations cannot be discovered and handled in a timely manner. The number of confidential optical discs is unclear, and their whereabouts are difficult to grasp, resulting in great risks and hidden dangers in the management of confidential optical discs. Summary of the invention

[0004] In view of this, the present invention provides an encrypted optical disc illegal external connection alarm tool to strengthen information security management, improve management efficiency and reduce information security costs, realize comprehensive monitoring and timely alarm of confidential optical discs, and greatly improve the security and confidentiality of confidential information.

[0005] The specific technical solution adopted by the present invention is:

[0006] An encrypted optical disc violation external connection alarm tool includes:

[0007] Burning and printing tool, with CD access password set;

[0008] The Internet detection module is triggered based on the opening of the burning and printing tool, and automatically associates with a specific website after the burning and printing tool is opened. If the association is successful, it is determined that the optical disc is used in violation of regulations.

[0009] Furthermore, the alarm tool is also provided with:

[0010] The configuration management module is used to configure and manage the system, including user management, permission management, alarm rule configuration, and violation handling configuration.

[0011] Furthermore, the alarm tool is also provided with:

[0012] The data encryption module encrypts and decrypts the contents of the optical disc through an encryption algorithm and is used to encrypt the sensitive data of the system.

[0013] Furthermore, the alarm tool is also provided with:

[0014] The security control module is used to manage user information, permission information and policy information, assign different system permissions to different user roles, and perform maintenance operations on user information. Before the CD is browsed, the user's identity and permission are verified based on the correct password or hardware key.

[0015] Furthermore, the alarm tool is also provided with:

[0016] The CD monitoring module is used to record the usage of the CD. The built-in monitoring program monitors the read and write operations of the CD in real time through the CD reader / writer, and records and analyzes the usage of the CD, including the usage time, user and purpose of use. According to the characteristics of user behavior, it monitors the access to confidential information in real time and accurately determines whether there is any violation.

[0017] Furthermore, the alarm tool is also provided with:

[0018] The violation alarm module is used to process and alarm violations. It has multiple built-in alarm rules for administrators to choose according to actual needs when burning CDs.

[0019] Furthermore, the alarm tool is also provided with:

[0020] The operation audit module is used to audit the use of CDs on all computers, including the access status, access time and user information of the CDs, generate audit logs and record them on the CDs.

[0021] Furthermore, in the configuration management module, the administrator can set different configuration parameters according to needs, and the configuration parameters include user roles, corresponding relationships between confidentiality levels, and violation rules.

[0022] Furthermore, before using the burning and printing tool, the optical disc is registered and bound. The burning and printing tool assigns a unique ID and key to each optical disc based on the registration and binding information, and stores the ID and key. When the user needs to use the optical disc, the burning and printing tool authenticates the optical disc, verifies the legitimacy of the optical disc and decrypts the optical disc content.

[0023] Furthermore, the user roles include system administrator, system auditor and burning user; the security management module permits different permissions for different user roles; and the security management module is configured with file access permission level management.

[0024] The beneficial effects of the present invention are:

[0025] (1) High security: Through data encryption and permission control, the security of confidential optical discs during transmission and use is guaranteed, effectively preventing information leakage and illegal copying.

[0026] (2) Real-time monitoring: This system can monitor the use of optical disks in real time and record the user's operations for easy traceability and management. It reduces the workload of operators and improves the efficiency of supervision and management. It can promptly detect and alarm confidential information leakage incidents, reducing the risk of information leakage.

[0027] (3) Automatic alarm: When a violation is detected, the system of the present invention can promptly handle the violation and issue an alarm, and notify relevant management personnel to handle it, thereby ensuring the security of information and preventing the leakage of confidential information.

[0028] (4) Flexible Configuration: The system can be flexibly configured and managed as needed, and can be quickly deployed to various places where confidential information protection is required. At the same time, it can also be flexibly configured and managed according to actual needs to meet the specific needs of different users.

[0029] (5) Convenient auditing: It can record and manage detailed information on the use of CDs, and can audit and track the use of confidential information; it is convenient to query and conduct statistical analysis on the use of confidential CDs, and it is convenient to supervise and manage the use of confidential CDs.

[0030] (6) The present invention solves some problems existing in traditional confidential information leakage prevention solutions, such as human negligence and insufficient technical means, has higher security and reliability, can provide users with more comprehensive and effective confidential information protection solutions, and has broad application prospects. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0032] Figure 1 This is the overall structure diagram of the confidential CD monitoring and violation alarm system;

[0033] Figure 2 This is the overall flow chart of the confidential CD monitoring and violation alarm system;

[0034] Figure 3 It is the overall process of the optical disk monitoring module;

[0035] Figure 4 It is the overall process of the violation alarm module;

[0036] Figure 5 The encryption and decryption process of the CD information. DETAILED DESCRIPTION

[0037] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0038] The following describes the embodiments of the present disclosure through specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.

[0039] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein can be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein can be implemented independently of any other aspect, and two or more of these aspects can be combined in various ways. For example, any number of aspects described herein can be used to implement the device and / or practice the method. In addition, other structures and / or functionalities other than one or more of the aspects described herein can be used to implement this device and / or practice this method.

[0040] It should also be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present disclosure. The illustrations only show components related to the present disclosure rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0041] Additionally, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects described may be practiced without these specific details.

[0042] In one embodiment of the present invention, an encrypted optical disc violation external connection alarm tool is provided, comprising:

[0043] Burning and printing tool, with CD access password set;

[0044] The Internet detection module is triggered based on the opening of the burning and printing tool, and automatically associates with a specific website after the burning and printing tool is opened. If the association is successful, it is determined that the optical disc is used in violation of regulations.

[0045] In this embodiment, the alarm tool is also provided with:

[0046] Configuration management module, used to configure and manage the system, including user management, authority management, alarm rule configuration, and violation handling configuration;

[0047] The data encryption module encrypts and decrypts the contents of the optical disc through encryption algorithms, and is used to encrypt the sensitive data of the system.

[0048] The security control module is used to manage user information, permission information, and policy information, assign different system permissions to different user roles, and perform maintenance operations on user information. Before the CD is browsed, the user's identity and permission are verified based on the correct password or hardware key;

[0049] The CD monitoring module is used to record the usage of the CD. The built-in monitoring program monitors the read and write operations of the CD in real time through the CD reader / writer, and records and analyzes the usage of the CD, including the usage time, user and purpose of use. According to the characteristics of user behavior, it monitors the access to confidential information in real time and accurately determines whether there is any violation.

[0050] The violation alarm module is used to process and alarm violations. It has multiple built-in alarm rules for administrators to choose according to actual needs when burning CDs.

[0051] The operation audit module is used to audit the use of CDs on all computers, including the access status, access time and user information of the CDs, generate audit logs and record them on the CDs.

[0052] In this embodiment, in the configuration management module, the administrator can set different configuration parameters according to needs, and the configuration parameters include user roles, corresponding relationships between confidentiality levels, and violation rules.

[0053] In this embodiment, before using the burning and printing tool, the optical disc is registered and bound. The burning and printing tool assigns a unique ID and key to each optical disc based on the registration and binding information, and stores the ID and key. When the user needs to use the optical disc, the burning and printing tool authenticates the optical disc, verifies the legitimacy of the optical disc and decrypts the contents of the optical disc.

[0054] In this embodiment, the user roles include system administrator, system auditor and burning user; the security control module permits different permissions for different user roles; the security control module is configured with file access permission level control.

[0055] Combined with the attached drawings of the specification:

[0056] Figure 1 This is the overall structure diagram of the confidential CD monitoring and violation alarm system, including security management module, data encryption module, CD monitoring module, violation alarm module, configuration management module and operation audit module.

[0057] Figure 2The following is the overall flow chart of the system. First, the encrypted confidential optical disc is placed in the reader / writer. The reader / writer and the monitoring software use a secure communication method to ensure the security of the data transmission process. The monitoring module monitors the use of confidential optical discs in real time and records relevant operation information in the log, including usage time, user, purpose of use, etc. When the monitoring module detects a violation, the violation alarm module will immediately issue a warning and block the violation, notify relevant management personnel, and record relevant illegal operations. In the operation audit module, the use of the optical disc can be queried and audited, which is convenient for supervision and accountability of confidential optical discs.

[0058] Figure 3 This is a flowchart of the overall process of the violation alarm module. First, it is determined whether the current device and user security level is lower than the CD. If it is lower than the CD, the violation operation is recorded in the log and the violation alarm module is called. The CD information is decrypted when reading. The system will continue to monitor the CD status and the operation of the CD and record it in the log until the CD is ejected. By matching with the system rules, if there is a violation, the violation log is recorded and the violation alarm module is called for processing.

[0059] Figure 4 This is a flowchart of the overall process of the violation alarm module. When the system monitors illegal operations, the violation information is transmitted to the violation alarm module. If the current device is connected to the Internet, the violation information is sent to the server, which automatically saves the violation information and notifies the relevant responsible persons. Then, the user is warned through pop-up windows and other methods, and then according to the strategy, operations such as ejecting the optical drive, disconnecting the network, and shutting down are executed.

[0060] The following is a further description of each module.

[0061] Configuration management module: The configuration management module is used to configure and manage the system, including user management, authority management, alarm rule configuration, violation handling configuration, etc. Administrators can set different configuration parameters according to actual needs, and the management control module will automatically save and apply the configuration information to ensure the stability and reliability of the system operation.

[0062] Data encryption module: Encrypt and decrypt the contents of the optical disc through a specific encryption algorithm. Encrypt the sensitive data of the system and use advanced encryption algorithms and key management technologies to ensure the confidentiality and privacy of the data. Before using the system, the optical disc needs to be registered and bound. The system will assign a unique ID and key to each optical disc and store it in the system. When the user needs to use the optical disc, the system will authenticate the optical disc, verify its legitimacy and decrypt the contents of the optical disc to ensure the security of the contents of the optical disc.

[0063] Security control module: mainly responsible for managing information such as users, permissions, and policies to ensure the security and reliability of the system. Different system permissions are assigned to different user roles, such as system administrator, auditor, and burning user. Users can obtain corresponding permissions by establishing users based on roles, and maintenance operations can be performed on user information. The system supports ordinary burning, password-encrypted burning, and hardware key-encrypted burning. To browse the encrypted data in the encrypted burning disc, the system's dedicated disc browser needs to be called up and the correct password or hardware key needs to be entered. Ordinary burning discs can be read normally. Users need to log in and verify through the security control module. Only verified users can access the system to ensure the security of the system.

[0064] CD monitoring module: CD monitoring module is used to record the usage of CDs. The monitoring program monitors the read and write operations of CDs in real time through CD readers and writers, and records and analyzes the usage of CDs, including usage time, users, and usage purposes (such as copying, deleting, tampering, and transmission). According to the characteristics of user behavior, access to confidential information is monitored in real time, and it is accurately determined whether there are any violations. For example, it can determine whether users have accessed confidential information without authorization, or whether they have copied confidential information to illegal devices or networks. By analyzing the usage records of CDs, it can help to promptly discover and deal with violations.

[0065] Violation alarm module: The violation alarm module is one of the important components of the system, which is used to process and alarm violations. Different alarm rules can be set according to actual needs, and the system will automatically identify and alarm. When the encrypted CD is taken out, when the user violates the rules and browses the CD data on the computer connected to the Internet, the client will quickly report the alarm information to the violation alarm platform (external network server) and perform operations such as alarm, disconnection, ejection of the CD drive, and shutdown.

[0066] The confidential CD monitoring software can communicate with the server and upload the usage records of confidential CDs to the server for storage and analysis. The following measures are used to ensure secure communication with the server:

[0067] (1) Encrypted communication: Encrypt communication data to ensure the security of data transmission.

[0068] (2) Authentication: Authenticate the server and monitoring software to prevent unauthorized access.

[0069] (3) Data integrity verification: Verify the integrity of communication data to prevent data tampering during transmission.

[0070] Operation audit module: The operation audit module can audit the use of CDs on all computers, including the insertion and removal of CDs, usage time, users and other information, and generate corresponding audit reports to track and record violations. Use log files to record the use of CDs, including the insertion time, location and user information of the CDs, as well as data access on the CDs. The logging module can support multiple log formats for subsequent data processing and analysis. For example, it can support logs in multiple formats such as text, XML, JSON, etc., so that system administrators and security personnel can audit and hold accountable the operation of the system. Auditors can audit the administrator's operating behavior and provide a basis for the confidentiality supervision of carrier CDs through auditing and statistical analysis.

[0071] The technical solution of this embodiment realizes the full life cycle management and control of confidential optical discs, and realizes the security protection of the content of the optical disc through the functions of optical disc identification, monitoring, violation alarm, etc., thereby improving the security of confidential information. At the same time, the technical solution of this patent is highly reliable, scalable and customizable, and can meet the needs of different users.

[0072] The following is a trial example of deploying the encrypted disc violation external alarm tool in the system on a non-public classified disc, which has practical use value;

[0073] CD-ROM Carrier Generation

[0074] Burn a high-security CD through the client for testing. Enter the CD encryption password in the client, select "internal" for the CD encryption level, and burn the IE browser program and flashplayer compressed package using a DVD.

[0075] Disk violation external contact monitoring

[0076] After the application for CD burning is approved, the disc is burned and output at the self-service burning point, and used on the Internet computer in the institute. Insert the CD into the CD-ROM drive, open the CD and execute the DiscExp.exe CD decryption program, and a password input box will pop up. While the DiscExp.exe decryption program is running, the alarm tool has begun to detect whether it is an Internet environment. After the environmental detection is confirmed, a message reminder box will pop up to remind the user to use the internal CD in the institute in a standardized manner, and send the relevant information of the CD to the email recipient. Finally, the computer performs a forced shutdown action, and a series of preventive actions in the alarm tool are all executed.

[0077] Alarm information identification

[0078] When the email recipient receives the message in the business network mailbox, he / she will compare the non-confidential personnel, department, confidentiality level and other code information in the email, and contact the user as soon as possible to persuade him / her to prohibit the user from using it again. Other subsequent processing procedures shall be in accordance with the unit regulations.

[0079] The above is only a specific implementation of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present disclosure should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be based on the protection scope of the claims.

Claims

1. An encrypted disc violation external contact warning tool, characterized in that: Included encrypted and recorded on said disc: Burning and printing tool, with CD access password set; The Internet detection module is triggered based on the opening of the burning and printing tool, and automatically associates with a specific website after the burning and printing tool is opened. If the association is successful, it is determined that the optical disc is used in violation of regulations.

2. The encrypted optical disc violation external alarm tool according to claim 1, characterized in that: The alarm tool is also provided with: The configuration management module is used to configure and manage the system, including user management, permission management, alarm rule configuration, and violation handling configuration.

3. The encrypted optical disc violation external alarm tool according to claim 2, characterized in that: The alarm tool is also provided with: The data encryption module encrypts and decrypts the contents of the optical disc through an encryption algorithm and is used to encrypt the sensitive data of the system.

4. The encrypted optical disc violation external alarm tool according to claim 3, characterized in that: The alarm tool is also provided with: The security control module is used to manage user information, permission information and policy information, assign different system permissions to different user roles, and perform maintenance operations on user information. Before the CD is browsed, the user's identity and permission are verified based on the correct password or hardware key.

5. The encrypted optical disc violation external alarm tool according to claim 4, characterized in that: The alarm tool is also provided with: The CD monitoring module is used to record the usage of the CD. The built-in monitoring program monitors the read and write operations of the CD in real time through the CD reader / writer, and records and analyzes the usage of the CD, including the usage time, user and purpose of use. According to the characteristics of user behavior, it monitors the access to confidential information in real time and accurately determines whether there is any violation.

6. The encrypted optical disc violation external alarm tool according to claim 5, characterized in that: The alarm tool is also provided with: The violation alarm module is used to process and alarm violations. It has multiple built-in alarm rules for administrators to choose according to actual needs when burning CDs.

7. The encrypted optical disc violation external alarm tool according to claim 6, characterized in that: The alarm tool is also provided with: The operation audit module is used to audit the use of CDs on all computers, including the access status, access time and user information of the CDs, generate audit logs and record them on the CDs.

8. The encrypted optical disc violation external alarm tool according to claim 7, characterized in that: In the configuration management module, the administrator can set different configuration parameters according to needs, and the configuration parameters include user roles, corresponding relationships of confidentiality levels, and violation rules.

9. The encrypted optical disc violation external alarm tool according to claim 8, characterized in that: Before using the burning and printing tool, the optical disc is registered and bound. The burning and printing tool assigns a unique ID and key to each optical disc based on the registration and binding information, and stores the ID and key. When the user needs to use the optical disc, the burning and printing tool authenticates the optical disc, verifies the legitimacy of the optical disc and decrypts the optical disc content.

10. The encrypted optical disc violation external alarm tool according to claim 9, characterized in that: The user roles include system administrator, system auditor and burning user; the security control module grants different permissions to different user roles; the security control module is configured with file access permission level control.

Images