Method and device for preventing encrypted file from being forwarded, equipment and medium

Abstract

The invention provides a method and device for preventing encrypted file forwarding, equipment and a medium. The method comprises the steps that whether a to-be-sent file is marked through marking information or not is confirmed, a new marked file is obtained, and the new marked file comprises the marking information; the new tagged file is encrypted through a secret key, whether a target user waiting for receiving the new tagged file is a tagged user indicated by the tagged information or not is confirmed, and the tagged user is an object allowed to be forwarded; and if the target user is the marked user, confirming to encrypt the secret key, and sending the encrypted new marked file and the encrypted secret key to the target user. According to the method, the file can be effectively prevented from being forwarded at will, and the file transmission safety is improved.

Description

Technical Field

[0001] The present application relates to the field of file transmission technology, and in particular to a method, device, equipment and medium for preventing encrypted file forwarding. Background Art

[0002] With the rapid development of mobile terminals and mobile office, the storage and forwarding of daily work files in terminals has become a common phenomenon. In order to ensure the security of file transmission, files are usually encrypted for transmission.

[0003] However, for some special and important files, such as files that are only known within a certain range, using encrypted transmission can ensure the security of the file transmission process, but it cannot ensure that the file will not be forwarded and spread. For example, if A sends a file to B in an encrypted manner, B can also forward the encrypted file for a second time, which is not safe enough for some special files.

[0004] Therefore, it is urgent to propose a file transfer process with higher security performance. Summary of the invention

[0005] The present application provides a method, apparatus, device and medium for preventing encrypted file forwarding, so as to solve the problem in the prior art that special files cannot be prevented from being forwarded at will, thereby affecting security.

[0006] In a first aspect, the present application provides a method for preventing encrypted file forwarding, comprising:

[0007] confirming whether to mark the file to be sent by using the marking information, and obtaining a new marked file, wherein the new marked file includes the marking information;

[0008] Encrypting the new marked file by using a key, and confirming whether the target user to receive the new marked file is the marked user indicated by the marking information, wherein the marked user is the object allowed to be forwarded;

[0009] If the target user is the marked user, it is confirmed that the key is encrypted, and the encrypted new marked file and the encrypted key are sent to the target user.

[0010] In a possible implementation, the confirming whether to mark the file to be sent by using the marking information to obtain a new marked file includes:

[0011] If the file to be sent is an unmarked file, confirming to mark the file to be sent by using the marking information to obtain the new marked file, wherein the unmarked file is a file that is not marked by the marking information;

[0012] If the file to be sent is a marked file, it is confirmed that the file to be sent is no longer repeatedly marked, wherein the marked file is a file that has been marked by the marking information.

[0013] In a possible implementation manner, marking the to-be-sent file by using the marking information includes:

[0014] Select user information of some of the target users from the multiple target users as marking information, and mark the file to be sent by using the marking information, wherein the user information includes the identity public key of the target user.

[0015] In a possible implementation manner, after the confirmation marks the file to be sent by using the marking information and obtaining the new marked file, the method further includes:

[0016] The newly marked file is stored in the database as a marked file, waiting for the next sending.

[0017] In a possible implementation manner, the confirming whether the target user to receive the new marked file is the marked user indicated by the marking information includes:

[0018] If the user information of the target user is consistent with the marking information of the new marking file, confirming that the target user to receive the new marking file is the marked user of the marking information;

[0019] If the user information of the target user is inconsistent with the marking information of the new marking file, it is confirmed that the target user to receive the new marking file is not the marked user of the marking information.

[0020] In a possible implementation manner, if the target user is not the marked user, the method further includes:

[0021] It is prohibited to send the encrypted new mark file and the encrypted key to the target user.

[0022] In a second aspect, the present application provides a device for preventing encrypted file forwarding, comprising:

[0023] An acquisition module, used for confirming whether to mark the file to be sent by the marking information, and obtaining a new marked file, wherein the new marked file includes the marking information;

[0024] A processing module, used for encrypting the new marked file by using a key, and confirming whether a target user to receive the new marked file is a marked user indicated by the marking information, wherein the marked user is an object allowed to be forwarded;

[0025] The sending module is used for confirming the encryption of the key if the target user is the marked user, and sending the encrypted new marked file and the encrypted key to the target user.

[0026] In a possible implementation, the acquisition module is specifically used to:

[0027] If the file to be sent is an unmarked file, confirming to mark the file to be sent by using the marking information to obtain the new marked file, wherein the unmarked file is a file that is not marked by the marking information;

[0028] If the file to be sent is a marked file, it is confirmed that the file to be sent is no longer repeatedly marked, wherein the marked file is a file that has been marked by the marking information.

[0029] In a third aspect, the present application provides a device for preventing encrypted file forwarding, comprising: at least one processor and a memory;

[0030] The memory stores computer-executable instructions;

[0031] The at least one processor executes the computer-executable instructions stored in the memory, so that the at least one processor performs the method for preventing the forwarding of encrypted files as described above.

[0032] In a fourth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method for preventing forwarding of encrypted files as described above.

[0033] The present application provides a method, apparatus, device and medium for preventing encrypted file forwarding, which confirms whether to mark a file to be sent through marking information to obtain a new marked file, wherein the new marked file includes the marking information; encrypts the new marked file through a key, and confirms whether a target user to receive the new marked file is a marked user indicated by the marking information, wherein the marked user is an object allowed to be forwarded; if the target user is the marked user, confirms that the key is encrypted, and sends the encrypted new marked file and the encrypted key to the target user.

[0034] In the above method, before encrypting and forwarding the file to be sent, the file to be sent is marked to obtain a new marked file, and the new marked file is encrypted. Before encrypting the key corresponding to the new marked file, it is necessary to use the marking information to check whether the target user meets the user marked by the marking information. If it is confirmed that it is a marked user, key encryption forwarding and file forwarding are performed to ensure that the file can be forwarded to a specially selected target user. Correspondingly, the file cannot be forwarded to unselected target users, thereby ensuring the target direction specificity and security of file forwarding. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0036] Figure 1 A schematic diagram of a scenario for preventing encrypted file forwarding provided in an embodiment of the present application;

[0037] Figure 2 A method for preventing encrypted file forwarding provided in an embodiment of the present application Figure 1 ;

[0038] Figure 3 A method for preventing encrypted file forwarding provided in an embodiment of the present application Figure 2 ;

[0039] Figure 4 A method for preventing encrypted file forwarding provided in an embodiment of the present application Figure 3 ;

[0040] Figure 5 A diagram of a device for preventing encrypted file forwarding provided by an embodiment of the present invention;

[0041] Figure 6 A hardware schematic diagram of a device for preventing encrypted file forwarding provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0042] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0043] In order to ensure that files are not destroyed, changed or leaked at will during the transmission process, there are many technical implementation methods in file transmission technology to ensure the security of file transmission, including encrypting files. However, encryption alone is not enough for some users who have high requirements for security performance, because for some special files, users hope that they can be forwarded and spread only within a certain range.

[0044] For example, in a unit with a high security level, in order to ensure the secure transmission of information, all work files are transmitted through secure IM (Instant Messaging) software. However, for some important files (such as classified files), A transmits them to B in an encrypted manner. It is necessary to control the spread of this file to prevent B from forwarding it to other people who do not meet the conditions for receiving the file.

[0045] In other words, some users hope that their files will not be spread arbitrarily and will only be used within a specific scope, and there is no corresponding way to deal with this.

[0046] Therefore, in order to meet users' higher personalized needs, to limit the dissemination scope of important files, and to further increase the security of file transmission, this application proposes a processing method for preventing encrypted file forwarding.

[0047] The following describes the implementation process of a method for preventing encrypted file forwarding proposed by the present application in conjunction with the accompanying drawings and specific embodiments.

[0048] Figure 1 A schematic diagram of a scenario for preventing encrypted file forwarding provided in an embodiment of the present application. Figure 1 As shown, the system includes: a first terminal 101, a second terminal 102 and an encrypted file 103; wherein the first terminal includes the file before encryption and can encrypt the file before encryption; the second terminal is used to receive the encrypted file and can also be used to decrypt the encrypted file to obtain the decrypted file; the file transmission can occur between terminals or within a terminal;

[0049] Before the file is officially sent, it is in a waiting-to-send state and is a waiting-to-send file. There are generally many files in the terminal, and the terminal can manage the forwarding of some or all files according to user needs. The files selected for management and forwarding can be marked, that is, the waiting-to-send files that need to be managed can be marked by marking information to obtain a marked new marked file. The marking information can authenticate whether the target user is an object allowed to be forwarded. If so, the encrypted new marked file and the key for encrypting the new marked file can be forwarded to the target user (such as the user in the second terminal 102). Otherwise, forwarding is prohibited, thereby preventing the arbitrary forwarding of files, meeting user needs, and ensuring the security of file transmission.

[0050] Figure 2 A method for preventing encrypted file forwarding provided in an embodiment of the present application Figure 1 .like Figure 2 As shown, the method includes:

[0051] S201. Confirm whether to mark a file to be sent by using marking information, and obtain a new marked file, wherein the new marked file includes the marking information.

[0052] According to user needs, the files to be sent can be files that need to be marked or files that do not need to be marked. Users can select the files they want to be marked before sending them. The files after marking can be sent to specific users. The marked files to be sent are new marked files, and the new marked files carry marking information to facilitate subsequent authentication with the target user.

[0053] S202: Encrypt the new marked file by using a key, and confirm whether the target user to receive the new marked file is the marked user indicated by the marking information, wherein the marked user is an object allowed to be forwarded.

[0054] The key for encrypting the new tag file can be selected based on the experience of the technician or the resources of the terminal itself, for example, a symmetric key is selected to encrypt the new tag file; and in order to ensure the security of the file, no matter what kind of transmission the new tag file is subsequently completed, it should be encrypted; after encryption, the tag information is verified to confirm whether the tag information in the new tag file indicates the target user as the tagged user, and if so, the next step can be continued;

[0055] The marking method is to mark the confirmed files to be sent through marking information. The marking information can be used for matching and authentication with the target user. For example, the marking information records the target users who can forward the files. The recorded target users are marked users, and the unrecorded target users are unmarked users.

[0056] S203: If the target user is the marked user, confirm that the key is encrypted, and send the encrypted new marked file and the encrypted key to the target user.

[0057] When the file to be forwarded starts to be sent (during the sending process), if it is found that the target user to be sent is under the record of the marking information, then the target user is a marked user, that is, the target user is confirmed to be a marked user through the marking information; on the contrary, if it is found that the target user to be sent is not under the record of the marking information, then the target user is a non-marked user, that is, the target user is confirmed to be a non-marked user through the marking information;

[0058] If the target user indicates to be a marked user, the key for encrypting the new marked file can be encrypted with the target user's identity public key. After the encrypted new marked file and the encrypted key are sent to the target user, the target user can also decrypt the encrypted key according to his own identity public key to obtain the key to open the new marked file.

[0059] If the target user is not the marked user, then confirm that the forwarding operation does not need to be continued. For example, if the target user is not the marked user, the method further includes:

[0060] It is prohibited to send the encrypted new mark file and the encrypted key to the target user.

[0061] If the target user indicates that it is a non-marked user, then the target user is not allowed to forward the file, and the target user's identity public key cannot be used to encrypt the key. It is prohibited to send the encrypted new marked file to the target user, or even if it is sent by mistake, the target user cannot use his or her own identity public key to complete the decryption, thus ensuring the security of file forwarding.

[0062] In the embodiment of the present application, it is confirmed whether to mark the file to be sent by the marking information, and obtain a new marked file, wherein the new marked file includes the marking information; the new marked file is encrypted by the key, and it is confirmed whether the target user to receive the new marked file is the marked user indicated by the marking information, wherein the marked user is an object allowed to be forwarded; if the target user is the marked user, it is confirmed that the key is encrypted, and the encrypted new marked file and the encrypted key are sent to the target user;

[0063] In the above, before encrypting and forwarding the file to be sent, the file to be sent is marked to obtain a new marked file, and the new marked file is encrypted. Before encrypting the key corresponding to the new marked file, it is necessary to use the marking information to check whether the target user meets the user marked by the marking information. If it is confirmed that it is a marked user, key encryption forwarding and file forwarding are performed to ensure that the file can be forwarded to a specially selected target user. Correspondingly, the file cannot be forwarded to the unselected target user, thereby ensuring the target direction specificity and security of file forwarding.

[0064] Figure 3 A method for preventing encrypted file forwarding provided in an embodiment of the present application Figure 2 .like Figure 3 As shown, the method includes:

[0065] S301. If the file to be sent is an unmarked file, confirm that the file to be sent is marked by the marking information to obtain the new marked file, wherein the unmarked file is a file that is not marked by the marking information.

[0066] If the file to be sent is selected by the user and needs to be marked, before marking, in order to avoid repeated marking, it is also necessary to confirm whether the file to be sent is an unmarked file (unmarked file). If it is an unmarked file, the file to be sent can be marked by the marking information to obtain a new marked file that has completed the marking. The new marked file contains the marking information.

[0067] In order to authenticate the target user with the tag information, the tag information may use the user information of the target user:

[0068] For example, user information of some of the target users is selected from the multiple target users as marking information, and the file to be sent is marked by the marking information, wherein the user information includes the identity public key of the target user.

[0069] When a file is transferred to a terminal sending a file and there are multiple target users receiving the file, the terminal sending the file can select which target user can receive the file according to the demand, and the selected target user can provide content for marking the file to be sent; for example, user information can be used as marking information and carried by the file to be sent;

[0070] User information is selected as the tag information, for example, the target user's identity public key is selected as the tag information, and the new tag file includes the target user's identity public key. When it is confirmed that the new tag file is consistent with a target user's identity public key, it can be confirmed that the target user is a marked user and is allowed to be forwarded.

[0071] The public key can also be used to encrypt the key. After confirming that the key is encrypted, the new tag file is encrypted using the symmetric key. If the target user wants to decrypt the encrypted new tag file after obtaining it, he needs to obtain the key.

[0072] If the target user is a marked user, the target user's own identity public key can decode the encrypted key to obtain the decrypted key, and the decrypted key can be used to open the encrypted new marked file;

[0073] If the target user is an unmarked user, the target user's own public key cannot decode the encrypted key. In this case, the unmarked user will be restricted from further receiving the decrypted new marked file. Even if the unmarked user receives the encrypted new marked file, it is still necessary to perform public key verification at the beginning of the reception process to check whether the public key can open the encrypted key. If not, the encrypted new marked file will no longer be sent, and a file sending failure feedback will be returned to the sender.

[0074] For the newly marked files, you can store the files and their marking information in the database:

[0075] After confirming that the file to be sent is marked by the marking information and obtaining the new marked file:

[0076] For example, the newly marked file is stored in the database as a marked file, waiting for the next sending.

[0077] If the file is to be sent again, it will be selected from the database, and since the file has been marked, it does not need to be marked again, and authentication can be performed directly with the target user; the marked files stored in the database can be deleted according to user needs, or the user can select the marked files and delete the marking information of the marked files.

[0078] S302: If the file to be sent is a marked file, confirm that the file to be sent is no longer marked repeatedly, wherein the marked file is a file that has been marked by the marking information.

[0079] If the file to be sent is a marked file (marked file), there is no need to mark it again, that is, the file to be sent has been marked before it is prepared for sending, and authentication with the target user can be started directly.

[0080] In the embodiment of the present application, if the file to be sent is an unmarked file, it is confirmed that the file to be sent is marked by the marking information to obtain the new marked file, wherein the unmarked file is a file that is not marked by the marking information; if the file to be sent is a marked file, it is confirmed that the file to be sent is no longer marked repeatedly;

[0081] By confirming whether the files to be sent have been marked, confirming whether to mark the files to be sent, marking the unmarked files to be sent, and not marking the marked files to be sent again, the files selected by the user to be marked and managed can be reasonably distinguished.

[0082] Figure 4 A method for preventing encrypted file forwarding provided in an embodiment of the present application Figure 3 .like Figure 4 As shown, the method includes:

[0083] S401: If the user information of the target user is consistent with the marking information of the new marking file, confirm that the target user to receive the new marking file is the marked user of the marking information.

[0084] User information includes the target user's identity public key. When the tag information selected for the new tag file is the target user's user information, the tag information is consistent with the user information, that is, the identity public key recorded in the new tag file is consistent with the target user's identity public key. Then it can be confirmed that the target user of the new tag file is the selected tag user allowed to forward.

[0085] S402: If the user information of the target user is inconsistent with the marking information of the new marking file, confirm that the target user to receive the new marking file is not the marked user of the marking information.

[0086] On the contrary, if the marking information is inconsistent with the user information, that is, the identity public key recorded in the new marking file is inconsistent with the identity public key of the target user, then it can be confirmed that the target user of the new marking file is the selected marking user who is not allowed to forward.

[0087] In the embodiment of the present application, if the user information of the target user is consistent with the marking information of the new marking file, it is confirmed that the target user to receive the new marking file is the marked user of the marking information; if the user information of the target user is inconsistent with the marking information of the new marking file, it is confirmed that the target user to receive the new marking file is not the marked user of the marking information;

[0088] By authenticating the new marked file and the target user, confirming whether the user information is consistent with the marked information, confirming whether the target user is a marked user who is allowed to forward the new marked file, clarifying the forwarding target, and accurately forwarding the new marked file to prevent the new marked file from being forwarded to an inappropriate location.

[0089] Figure 5 A diagram of a device for preventing encrypted file forwarding provided by an embodiment of the present invention, such as Figure 5 As shown, the device includes: an acquisition module 501, a processing module 502 and a sending module 503;

[0090] The acquisition module 501 is used to confirm whether to mark the file to be sent through the marking information, and obtain a new marked file, wherein the new marked file includes the marking information.

[0091] The acquisition module 501 is further configured to, if the file to be sent is an unmarked file, confirm that the file to be sent is marked by the marking information to obtain the new marked file, wherein the unmarked file is a file that is not marked by the marking information;

[0092] If the file to be sent is a marked file, it is confirmed that the file to be sent is no longer repeatedly marked, wherein the marked file is a file that has been marked by the marking information.

[0093] The acquisition module 501 is further used to select user information of some of the target users from the multiple target users as marking information, and mark the file to be sent by using the marking information, wherein the user information includes the identity public key of the target user.

[0094] The acquisition module 501 is further used to confirm that the file to be sent is marked by the marking information. After obtaining the new marked file, the method further includes:

[0095] The newly marked file is stored in the database as a marked file, waiting for the next sending.

[0096] The processing module 502 is used to encrypt the new marked file by using a key, and confirm whether the target user to receive the new marked file is the marked user indicated by the marking information, wherein the marked user is the object allowed to be forwarded.

[0097] The processing module 502 is further configured to confirm that the target user to receive the new marked file is the marked user of the marked information if the user information of the target user is consistent with the marking information of the new marked file;

[0098] If the user information of the target user is inconsistent with the marking information of the new marking file, it is confirmed that the target user to receive the new marking file is not the marked user of the marking information.

[0099] The sending module 503 is used for confirming the encryption of the key if the target user is the marked user, and sending the encrypted new marked file and the encrypted key to the target user.

[0100] The sending module 503 is further configured to: if the target user is not the marked user, the method further includes:

[0101] It is prohibited to send the encrypted new mark file and the encrypted key to the target user.

[0102] The present application also provides a device for preventing encrypted file forwarding, comprising: at least one processor and a memory;

[0103] The memory stores computer-executable instructions;

[0104] The at least one processor executes the computer-executable instructions stored in the memory, so that the at least one processor performs a method for preventing encrypted files from being forwarded.

[0105] Figure 6 A hardware schematic diagram of a device for preventing encrypted file forwarding provided by an embodiment of the present invention. Figure 6 As shown, the device 60 for preventing encrypted file forwarding provided in this embodiment includes: at least one processor 601 and a memory 602. The device 60 also includes a communication component 603. The processor 601, the memory 602 and the communication component 603 are connected via a bus 604.

[0106] In a specific implementation process, at least one processor 601 executes the computer-executable instructions stored in the memory 602, so that at least one processor 601 executes the above method for preventing the forwarding of encrypted files.

[0107] The specific implementation process of the processor 601 can be found in the above method embodiment, and its implementation principle and technical effect are similar, so this embodiment will not be repeated here.

[0108] In the above Figure 6In the illustrated embodiment, it should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor may be a microprocessor or any conventional processor. The steps of the method disclosed in the invention may be directly implemented as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0109] The memory may include a high-speed memory (Random Access Memory, RAM), and may also include a non-volatile memory (Non-volatile Memory, NVM), such as at least one disk memory.

[0110] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus.

[0111] The present application also provides a computer-readable storage medium, in which computer-executable instructions are stored. When a processor executes the computer-executable instructions, the method for preventing encrypted file forwarding as described above is implemented.

[0112] The computer-readable storage medium mentioned above can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The readable storage medium can be any available medium that can be accessed by a general or special-purpose computer.

[0113] An exemplary readable storage medium is coupled to a processor so that the processor can read information from the readable storage medium and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can be located in an application specific integrated circuit (Application Specific Integrated Circuits, referred to as: ASIC). Of course, the processor and the readable storage medium can also exist in the device as discrete components.

[0114] The division of the units is only a logical function division, and there may be other divisions in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, which may be electrical, mechanical or other forms.

[0115] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0116] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0117] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program codes.

[0118] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0119] Finally, it should be noted that those skilled in the art will readily conceive of other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. The present invention is intended to cover any variations, uses or adaptations of the present invention, which follow the general principles of the present invention and include common knowledge or customary technical means in the art not disclosed by the present invention, are not limited to the precise structure described above and shown in the drawings, and may be modified and changed in various ways without departing from the scope thereof. The scope of the present invention is limited only by the appended claims.

Claims

1. A method for preventing encrypted file forwarding, characterized in that: include: confirming whether to mark the file to be sent by using the marking information, and obtaining a new marked file, wherein the new marked file includes the marking information; Encrypting the new marked file by using a key, and confirming whether the target user to receive the new marked file is the marked user indicated by the marking information, wherein the marked user is the object allowed to be forwarded; If the target user is the marked user, it is confirmed that the key is encrypted, and the encrypted new marked file and the encrypted key are sent to the target user.

2. The method according to claim 1, characterized in that The step of confirming whether to mark the file to be sent by using the marking information to obtain a new marked file includes: If the file to be sent is an unmarked file, confirming to mark the file to be sent by using the marking information to obtain the new marked file, wherein the unmarked file is a file that is not marked by the marking information; If the file to be sent is a marked file, it is confirmed that the file to be sent is no longer repeatedly marked, wherein the marked file is a file that has been marked by the marking information.

3. The method according to claim 2, characterized in that The marking the file to be sent by using the marking information includes: Select user information of some of the target users from the multiple target users as marking information, and mark the file to be sent by using the marking information, wherein the user information includes the identity public key of the target user.

4. The method according to claim 2, characterized in that: After the confirmation that the file to be sent is marked by the marking information and the new marked file is obtained, the method further includes: The newly marked file is stored in the database as a marked file, waiting for the next sending.

5. The method according to claim 3, characterized in that: The confirming whether the target user to receive the new marked file is the marked user indicated by the marking information includes: If the user information of the target user is consistent with the marking information of the new marking file, confirming that the target user to receive the new marking file is the marked user of the marking information; If the user information of the target user is inconsistent with the marking information of the new marking file, it is confirmed that the target user to receive the new marking file is not the marked user of the marking information.

6. The method according to claim 1, characterized in that If the target user is not the marked user, the method further includes: It is prohibited to send the encrypted new mark file and the encrypted key to the target user.

7. A device for preventing encrypted files from being forwarded, characterized in that: include: An acquisition module, used for confirming whether to mark the file to be sent by the marking information, and obtaining a new marked file, wherein the new marked file includes the marking information; A processing module, used for encrypting the new marked file by using a key, and confirming whether a target user to receive the new marked file is a marked user indicated by the marking information, wherein the marked user is an object allowed to be forwarded; The sending module is used for confirming the encryption of the key if the target user is the marked user, and sending the encrypted new marked file and the encrypted key to the target user.

8. The device according to claim 7, characterized in that The acquisition module is specifically used for: If the file to be sent is an unmarked file, confirming to mark the file to be sent by using the marking information to obtain the new marked file, wherein the unmarked file is a file that is not marked by the marking information; If the file to be sent is a marked file, it is confirmed that the file to be sent is no longer repeatedly marked, wherein the marked file is a file that has been marked by the marking information.

9. A device for preventing encrypted files from being forwarded, characterized in that: include: at least one processor and memory; The memory stores computer-executable instructions; The at least one processor executes the computer-executable instructions stored in the memory, so that the at least one processor executes the method for preventing the forwarding of encrypted files as described in any one of claims 1-6.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for preventing the forwarding of encrypted files as described in any one of claims 1 to 6 are implemented.

Images