Shear plate data processing method and device, electronic equipment, storage medium and computer program product

Abstract

The invention provides a clipboard data processing method and device, electronic equipment, a storage medium and a computer program product, and relates to the technical field of computers, the method comprises the following steps: intercepting and obtaining a clipboard access request for an isolation space; based on the clipboard access request, determining a corresponding private clipboard; wherein the private clipboard is different from a system clipboard of a personal space; based on the clipboard access request, performing data processing in the private clipboard; wherein the data processing comprises encryption storage and decryption reading. According to the embodiment of the invention, the data security can be improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a clipboard data processing method, device, electronic device, storage medium and computer program product. Background Art

[0002] With the popularization of virtualization technology, enterprises have higher and higher requirements for data security and confidentiality. There are various relatively complete solutions for the protection of landed files, such as physical isolation, disk encryption, peripheral management, etc., to control and prevent the leakage of confidential files. But in addition, data can not only be leaked as files, but also through the clipboard, which is more hidden and difficult to audit. The current macOS platform prevents clipboard leakage by isolating the clipboard content of untrusted applications. Get the set data in the clipboard setting function through dynamic link library injection. Label the protected data, and choose whether to return the required data by judging whether the current application is trustworthy during the clipboard reading function.

[0003] However, in the related art, the scheme for determining whether the process reading the clipboard content is trustworthy has great loopholes and bypass risks. On the one hand, this scheme reuses the system clipboard, and both trusted applications and untrusted applications use the same clipboard. To ensure data security, it is necessary to hook all applications to obtain the clipboard content, which is almost impossible to achieve on the macOS system. On the other hand, the scheme of determining whether a process is trustworthy through a whitelist is not easy to expand on the one hand, and on the other hand, there is a risk of forging a trusted process and causing a leak. As a result, the security of the data in the system clipboard in the related art is relatively low. Summary of the invention

[0004] The embodiments of the present application provide a clipboard data processing method, device, electronic device, storage medium and computer program product, which can effectively improve the security of data.

[0005] The technical solution of this application is implemented as follows:

[0006] The present application embodiment provides a clipboard data processing method, including:

[0007] Intercept and obtain clipboard access requests for isolated spaces;

[0008] Based on the clipboard access request, determining a corresponding private clipboard; wherein the private clipboard is different from the system clipboard of the personal space;

[0009] Based on the clipboard access request, data processing is performed in the private clipboard; wherein the data processing includes: encrypted storage and decrypted reading.

[0010] In the above solution, before intercepting and obtaining the clipboard access request for the isolated space, the method further includes:

[0011] Based on the preset interception method and the clipboard instance creation method of the system clipboard, the private clipboard corresponding to the isolated space is created.

[0012] In the above solution, determining the corresponding private clipboard based on the clipboard access request includes:

[0013] The private clipboard is determined based on the clipboard identifier and the data to be processed included in the clipboard access request.

[0014] In the above solution, the determining the private clipboard based on the clipboard identifier and the data to be processed included in the clipboard access request includes:

[0015] The private clipboard is determined based on a match between the clipboard identifier and the identifier of the system clipboard, the private clipboard identifier, and the data type of the data to be processed.

[0016] In the above solution, the data processing in the private clipboard based on the clipboard access request includes one of the following:

[0017] Based on the clipboard access request, encrypt and store first data in the private clipboard; wherein the first data is the data required to be stored in the clipboard access request;

[0018] Based on the clipboard access request, second data is decrypted and read in the private clipboard; wherein the second data is data required to be read in the private clipboard by the clipboard access request.

[0019] In the above solution, decrypting and reading the second data in the private clipboard based on the clipboard access request includes:

[0020] Based on the clipboard access request, determining the required first encrypted data in the private clipboard;

[0021] Performing a format conversion detection on the first encrypted data to determine a format detection result; wherein the detection result is used to indicate whether there is a corresponding conversion data format for the data format of the first encrypted data;

[0022] Based on the format detection result, the second data after decrypting the first encrypted data is read.

[0023] In the above solution, the step of reading the second data after decrypting the first encrypted data based on the format detection result includes:

[0024] If the format detection result indicates that there is a corresponding conversion data format for the data format of the first encrypted data, decrypting the first encrypted data to obtain intermediate data;

[0025] The intermediate data is read and converted into the second data in the conversion data format.

[0026] In the above scheme, the method further comprises:

[0027] Based on the data synchronization configuration between the private clipboard and the system clipboard, data synchronization is performed between the private clipboard and the system clipboard.

[0028] In the above scheme, the data synchronization configuration includes data synchronization range configuration and data synchronization direction configuration; wherein, the data synchronization range configuration includes any one of the following: fully allowing synchronization, allowing text synchronization, allowing synchronization of unformatted text of a specific length, and completely prohibiting synchronization; wherein, the data synchronization direction configuration includes any one of the following: allowing mutual synchronization, allowing the system clipboard to synchronize to the private clipboard, and allowing the private clipboard to synchronize to the system clipboard.

[0029] In the above solution, the data synchronization between the private clipboard and the system clipboard based on the data synchronization configuration between the private clipboard and the system clipboard includes:

[0030] Based on the active state of the security application, monitoring data changes on the private clipboard and the system clipboard, and determining monitoring results;

[0031] If the monitoring result indicates that a change has occurred in the first data in the first clipboard, the change in the second data is synchronously performed in the second clipboard based on the data synchronization configuration; wherein the first data and the second data correspond, and the first clipboard is any one of the private clipboard and the system clipboard; and the second clipboard is one of the private clipboard and the system clipboard that is different from the first clipboard.

[0032] In the above scheme, the method further comprises:

[0033] A first timestamp is configured for the first data based on a change time of the first data, and a second timestamp is configured for the second data based on a change time of the second data.

[0034] The embodiment of the present application also provides a clipboard data processing device, including:

[0035] An interception unit, used for intercepting and obtaining a clipboard access request for the isolated space;

[0036] A determination unit, configured to determine a corresponding private clipboard based on the clipboard access request; wherein the private clipboard is different from the system clipboard of the personal space;

[0037] A data processing unit is used to process data in the private clipboard based on the clipboard access request; wherein the data processing includes: encrypted storage and decrypted reading.

[0038] An embodiment of the present application also provides an electronic device, including a memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the computer program, the steps in the clipboard data processing device method are implemented.

[0039] The embodiment of the present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps in the clipboard data processing device method are implemented.

[0040] The embodiment of the present application also provides a computer program product, including a computer program, which implements the steps in the clipboard data processing device method when executed by a processor.

[0041] In an embodiment of the present application, a clipboard access request for the isolated space is intercepted and obtained; based on the clipboard access request, a corresponding private clipboard is determined; wherein the private clipboard is different from the system clipboard of the personal space; based on the clipboard access request, data processing is performed in the private clipboard; wherein the data processing includes: encrypted storage and decrypted reading. Since in the present application, the system clipboard of the personal space and the private clipboard of the isolated space are completely isolated, the possibility of files in the isolated space being leaked from the less secure system clipboard is eliminated, and in the present application, the data in the private clipboard needs to be encrypted when stored and also needs to be decrypted when extracted, thereby further strengthening the security of the data in the private clipboard, solving the problem of data leakage from the clipboard, and improving data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0043] Figure 2 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0044] Figure 3An optional effect schematic diagram of the clipboard data processing method provided in an embodiment of the present application;

[0045] Figure 4 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0046] Figure 5 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0047] Figure 6 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0048] Figure 7 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0049] Figure 8 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0050] Fig. 9 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0051] Fig.10 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0052] Fig.11 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0053] Fig.12 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0054] Fig.13 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0055] Fig.14 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0056] Fig.15 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0057] Fig.16 An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0058] Fig.17An optional flowchart of a clipboard data processing method provided in an embodiment of the present application;

[0059] Fig.18 A schematic diagram of the structure of a shear plate data processing device provided in an embodiment of the present application;

[0060] Fig.19 A hardware entity schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0061] In order to make the purpose, technical solutions and advantages of the present application clearer, the technical solutions of the present application are further elaborated in detail below in conjunction with the drawings and embodiments. The described embodiments should not be regarded as limiting the present application. All other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present application.

[0062] In the following description, reference is made to “some embodiments”, which describe a subset of all possible embodiments, but it will be understood that “some embodiments” may be the same subset or different subsets of all possible embodiments and may be combined with each other without conflict.

[0063] If similar descriptions of "first / second" appear in the application documents, the following instructions are added. In the following description, the terms "first\second\third" involved are merely used to distinguish similar objects and do not represent a specific ordering of the objects. It can be understood that "first\second\third" can be interchanged in a specific order or sequence where permitted, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein.

[0064] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0065] This application embodiment provides a method for processing clipboard data. Figure 1 , is an optional flow chart of the clipboard data processing method provided in the embodiment of the present application, which will be combined with Figure 1 The steps shown are explained:

[0066] S101. Intercept and obtain a clipboard access request for the isolated space.

[0067] In an embodiment of the present application, a clipboard data processing device intercepts and obtains a clipboard access request from a preset security application for an isolated space.

[0068] Among them, the clipboard data processing device can be a terminal, a mobile terminal or a server with corresponding data processing functions. The isolated space can be a workspace isolated based on a sandbox. The security application can be a signed application corresponding to the isolated space formed by code configuration using an interception method for the isolated space. The clipboard access request can include: a copy request, a cut request and a paste request.

[0069] Among them, sandbox is a security mechanism, which belongs to virtualization technology. It provides an isolated environment for the executing program and restricts the files accessed and modified by the program to the isolated environment through redirection and other methods. Sandbox is usually used to isolate and protect the operating system, and is also used to isolate the virtual environment from the real environment and between virtual environments. Workspace: A secure desktop space virtualized by sandbox technology to provide users with files, networks and other data required for work.

[0070] S102. Determine a corresponding private clipboard based on the clipboard access request; wherein the private clipboard is different from the system clipboard of the personal space.

[0071] In an embodiment of the present application, the data processing device determines the private clipboard corresponding to the isolated space based on the information carried in the clipboard access request. The private clipboard is a system clipboard different from the personal space (personal space: the real system desktop space used by the user on a daily basis). The data processing device can create a corresponding private clipboard instance for the isolated space in advance.

[0072] In some other embodiments, the data processing device may determine the private clipboard corresponding to the isolated space based on the clipboard identifier in the clipboard access request.

[0073] Among them, private clipboard and system clipboard are both clipboards. Clipboard: also known as clipboard, clipbook, or clipbook. It is a software function, usually provided by the operating system, used to store data in the short term and transfer data between documents or applications using copy and paste operations.

[0074] S103. Based on the clipboard access request, perform data processing in the private clipboard; wherein the data processing includes: encrypted storage and decrypted reading.

[0075] In the embodiment of the present application, the data processing device can encrypt and store the data in the private clipboard, or decrypt and read the data based on the clipboard access request.

[0076] In an embodiment of the present application, a data processing device creates a private clipboard for the isolated space, sets data encryption storage in the private clipboard, and decrypts the data when a secure application reads it, to prevent non-secure processes from reading the clipboard data of the workspace and causing information leakage. Applications in the personal space share the use of the system clipboard, and applications in the workspace share the use of the private clipboard. If the sandbox opens multiple isolated spaces, the private clipboard of each workspace and the system clipboard of the personal space are isolated from each other, and the user can configure the scope and direction of data synchronization between the private clipboard and the system clipboard. The scope refers to fully allowing synchronization, allowing synchronization of text, allowing synchronization of unformatted text of a specific length, and completely prohibiting synchronization, etc.; the direction refers to allowing mutual synchronization or only allowing the system clipboard to synchronize data to the private clipboard.

[0077] In the application embodiment, the data processing device encrypts the data stored or read by the corresponding security application on the private clipboard of the isolated space. When the security application in the isolated space reads the data, the private clipboard decrypts the encrypted data and feeds it back to the security application for use. The recognition of the clipboard setting and reading operation executed by the security application is realized by hooking the system application programming interface (Application Programming Interface, API). The API calling method is divided into C language method and Objective-C language method, that is, there are two sets of calling interfaces, and both sets of interfaces need to be hooked to avoid data leakage caused by omissions. Hook technology: translated into Chinese as "hook" or "hook", refers to various technologies that modify or extend the behavior of the operating system, application or other software components by intercepting function calls, message transmission, and event transmission between software modules.

[0078] In an embodiment of the present application, a clipboard access request for the isolated space is intercepted and obtained; based on the clipboard access request, a corresponding private clipboard is determined; wherein the private clipboard is different from the system clipboard of the personal space; based on the clipboard access request, data processing is performed in the private clipboard; wherein the data processing includes: encrypted storage and decrypted reading. Since in the present application, the system clipboard of the personal space and the private clipboard of the isolated space are completely isolated, the possibility of files in the isolated space being leaked from the less secure system clipboard is eliminated, and in the present application, the data in the private clipboard needs to be encrypted when stored and also needs to be decrypted when extracted, thereby further strengthening the security of the data in the private clipboard, solving the problem of data leakage from the clipboard, and improving data security.

[0079] See also Figure 2 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Figure 1 The illustrated S101 may further include S201, which will be described in combination with the steps:

[0080] S201. Perform code injection into the application corresponding to the isolated space based on a preset interception method to implement secure application encapsulation corresponding to the isolated space.

[0081] In the embodiment of the present application, the data processing device performs code injection into the application corresponding to the isolated space based on the hook technology. The code encapsulated in the application here will include the code logic of the hook part, that is, to ensure that the hooked applications are actually safe applications in the isolated space. Among them, the code injection into the application is used to intercept and obtain the clipboard access request from the safe application.

[0082] Among them, application packaging refers to re-signing and packaging the application installation package (Android, iOS, and macOS platform installation package program), and adding some new functional features to the running package program to intercept and obtain clipboard access requests from secure applications.

[0083] Among them, the interception of private clipboard setting and reading operations relies on hook technology. This application hooks the clipboard content setting function PasteboardPutItemFlavor and content reading function PasteboardCopyItemFlavorData based on C language calls of the CoreFoundation system library. In addition, the clipboard content setting function setData(_:forType:index:usesPboardTypes:) and content reading functions dataWithoutConversionForTypeIdentifier(_:index:) and dataWithoutConversionForTypeIdentifier(_:securityScoped:) based on Objective-C language calls of the AppKit system library are hooked.

[0084] In view of the problems that existing clipboard isolation solutions are difficult to implement and easy to bypass, this paper proposes a solution for macOS workspace shared clipboard encryption isolation. The overall architecture of the solution is as follows: Figure 3As shown, it mainly includes an import encapsulation module 11, a data encryption and decryption module 12 and a data isolation module 13, wherein the data isolation module 13 is the focus of this application. In the embodiment of the present application, the data processing device relies on sandbox technology, and the application imported into the workspace needs to be injected and encapsulated before it can become a secure application. The import encapsulation module 11 is used to create a private clipboard independent of the system clipboard for the secure application in each workspace, and the secure application can share the data of the private clipboard. The data security of the private clipboard is implemented by the clipboard data isolation module 13. In order to avoid the leakage of the private clipboard setting data, the data encryption and decryption module 12 is used to encrypt and store the data set by the security application, and then decrypt it when the security application reads the data, so as to achieve perfect clipboard isolation. Since the set clipboard data is encrypted, when the application obtains data in the specified format that does not exist, the system cannot perform automatic format conversion, which requires relying on the data format conversion module to convert from the existing format to the required format and return the converted data. For user convenience, users can selectively enable data synchronization between the private clipboard and the system clipboard. For example, by enabling permission to copy from the personal space to the workspace clipboard, data set by non-secure applications can be synchronized to the secure space, enabling cross-domain data copy and paste.

[0085] In the embodiment of the present application, code injection is performed on the application corresponding to the isolated space based on a preset interception method to achieve the encapsulation of the secure application corresponding to the isolated space. In this way, the clipboard access requests of all secure applications in the isolated space will be intercepted and acquired, and then it is determined whether the request is for the private clipboard, and the data processing in the private clipboard is executed. Since the data in the private clipboard is encrypted and stored, this can effectively prevent the leakage of secure data, and the interception of secure applications can also reduce the risk of access vulnerabilities to the clipboard, further improving the security of data.

[0086] See also Figure 4 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Figure 1 The process shown in S101 may also include S301, which will be described in combination with the steps:

[0087] S301. Create the private clipboard corresponding to the isolated space based on a preset interception method and a clipboard instance creation method of the system clipboard.

[0088] In an embodiment of the present application, a data processing device creates a private clipboard corresponding to the isolated space based on hook technology and a clipboard instance creation method of a system clipboard.

[0089] In an embodiment of the present application, in order to achieve that the personal space and the isolated space do not share the clipboard, the present application hooks the PasteboardCreate of the Core Foundation system library and the generalPasteboard and pasteboardWithName: clipboard instance creation methods of the AppKit system library. When the secure application in the isolated space calls this method to obtain the system clipboard, it returns the private clipboard instance shared by the workspace, thereby achieving complete clipboard isolation.

[0090] In an embodiment of the present application, the private clipboard created for the isolated space is different from the system clipboard, so that the system clipboard of the personal space and the private clipboard of the isolated space are completely isolated, eliminating the possibility of files in the isolated space being leaked from the less secure system clipboard, thereby improving data security.

[0091] See also Figure 5 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Figure 1 The illustrated S102 can also be implemented by S1021, which will be described in combination with the steps:

[0092] S1021. Determine the private clipboard based on the clipboard identifier and the data to be processed included in the clipboard access request.

[0093] In an embodiment of the present application, the clipboard access request may include the clipboard identifier to be accessed and the data type of the data to be processed. The data processing device may determine the corresponding private clipboard based on the clipboard identifier in the request and the data type of the data to be processed.

[0094] In an embodiment of the present application, the private clipboard can be determined based on the clipboard identifier and the data to be processed included in the clipboard access request. Because the storage and reading of data in the private clipboard need to be encrypted and decrypted, the security of the data in the private clipboard is improved.

[0095] See also Figure 6 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Figure 5 The S1021 shown can also be implemented by S1022, which will be described in combination with the steps:

[0096] S1022: Determine the private clipboard based on a match between the clipboard identifier and the identifier of the system clipboard, the private clipboard identifier, and a data type of the data to be processed.

[0097] In an embodiment of the present application, the data processing device may match the clipboard identifier with the system clipboard identifier, and match the data type of the data to be processed with the preset type. If the clipboard identifier does not match the system clipboard identifier, and the data type of the data to be processed does not match the preset type, then it is determined that the clipboard access request needs to access the private clipboard. The data processing device may also match the clipboard identifier with the private clipboard identifier. If the clipboard identifier matches the system clipboard identifier and the data type of the data to be processed does not match the preset type, then it is determined that the clipboard access request needs to access the private clipboard.

[0098] In the embodiment of the present application, the clipboard includes: a system clipboard, a drag clipboard, and a font clipboard. The data processing device matches the clipboard identifier with the identifiers corresponding to the system clipboard, the drag clipboard, and the font clipboard, respectively. If the clipboard identifier does not match the identifiers corresponding to the three clipboards, and the data type of the data to be processed does not match the preset type, then the private clipboard that the clipboard access request needs to access is determined.

[0099] The preset data types may include: data types of uniform resource locator (URL). Since the cross-domain synchronization of the clipboard prohibits synchronizing the file URL to the personal space, even if the URL data is obtained in the personal space, the file isolation protection module will prohibit the access of non-safe processes. In this way, when the data type of the data to be processed is URL, it can be quickly determined that there is no need to use the private clipboard to process the data to be processed, saving the processing resources of the personal space.

[0100] In the embodiment of the present application, if the clipboard identifier does not match the identifier of the system clipboard, and the data type of the data to be processed does not belong to the preset type, a private clipboard is determined. Because the storage and reading of data in the private clipboard requires encryption and decryption processing, the security of the data in the private clipboard is improved.

[0101] Exemplary, combined Figure 7 , Figure 6 The illustrated S1022 can also be implemented by S11 to S16, which will be described in conjunction with the steps:

[0102] S11. The application performs a copy operation.

[0103] In an embodiment of the present application, a data processing device obtains a clipboard access request when a security application performs a copy operation.

[0104] S12: Is it the system clipboard?

[0105] In the embodiment of the present application, the data processing device matches the clipboard identifier in the clipboard access request with the identifier of the system clipboard to determine whether the clipboard access request needs to access the system clipboard. If so, S16 is executed to store the data in the clipboard access request to the system clipboard. If not, S13 is executed.

[0106] S13: Whether it is a drag shear plate.

[0107] In the embodiment of the present application, the data processing device matches the clipboard identifier in the clipboard access request with the identifier of the drag clipboard to determine whether the clipboard access request needs to access the drag clipboard, and if so, execute S16 to store the data in the clipboard access request to the drag clipboard. If not, execute S14.

[0108] S14: Is it a file URL?

[0109] In the embodiment of the present application, the data processing device determines whether the data to be processed in the clipboard access request is URL data. If so, S16 is executed to store the data in the clipboard access request in the corresponding clipboard. If not, S15 is executed.

[0110] S15. Encrypt the data to be set.

[0111] In the embodiment of the present application, the data processing device encrypts the data in the clipboard access request to obtain encrypted data.

[0112] S16. Save to the clipboard.

[0113] In the embodiment of the present application, the data processing device may store the encrypted data in a private clipboard.

[0114] Exemplary, combined Figure 8 , Figure 6 The illustrated S1022 can also be implemented by S17 to S25, which will be described in conjunction with the steps:

[0115] S17: The application performs a paste operation.

[0116] In an embodiment of the present application, a data processing device obtains a clipboard access request when a security application performs a copy operation.

[0117] S18: Is it the system clipboard?

[0118] In the embodiment of the present application, the data processing device matches the clipboard identifier in the clipboard access request with the identifier of the system clipboard to determine whether the clipboard access request needs to access the system clipboard, and if so, execute S25 to extract the data required to be obtained in the clipboard access request from the system clipboard. If not, execute S19.

[0119] S19: Whether it is a drag shear plate.

[0120] In the embodiment of the present application, the data processing device matches the clipboard identifier in the clipboard access request with the identifier of the drag clipboard to determine whether the clipboard access request needs to access the drag clipboard, and if so, execute S25 to extract the data required to be obtained in the clipboard access request from the system clipboard. If not, execute S20.

[0121] S20: Is it a file URL?

[0122] In the embodiment of the present application, the data processing device determines whether the data to be obtained in the clipboard access request is URL data. If so, S25 is executed to obtain the corresponding data on the corresponding clipboard based on the clipboard access request. If not, S21 is executed.

[0123] S21. Obtain data in the required format.

[0124] In the embodiment of the present application, the data processing device determines the format data required for the request based on the clipboard access request.

[0125] S22. The data format does not exist.

[0126] In the embodiment of the present application, the data processing device matches the data format of the acquired format data with the format in the preset format data set to determine whether there is a corresponding convertible data format. If so, S24 is executed. If not, S23 is executed.

[0127] S23. Decrypt the acquired data.

[0128] In the embodiment of the present application, the data processing device decrypts the required format data and provides feedback.

[0129] S24. Data format conversion.

[0130] In the embodiment of the present application, the data processing device converts the decrypted data using the determined conversion data format to obtain corresponding data.

[0131] S25. Return the content in the required format.

[0132] In the embodiment of the present application, the data processing device returns the data obtained based on the clipboard access request.

[0133] In an embodiment of the present application, when the application performs a copy operation, the set data is encrypted and stored. When the application performs a paste operation, the acquired data is decrypted and returned. Because the data is encrypted and stored, the system cannot automatically convert the format when obtaining some unset formats, and manual format conversion is required for data that does not exist in the format. For example, when setting the image data, the data types set are png and jpg. When obtaining tiff format data, the acquisition fails because the current format is not set. In this case, format conversion is required. After actual testing, it is only necessary to read the hook function of the clipboard in the Core Foundation system library to perform format conversion.

[0134] See also Fig. 9 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Figure 1 The illustrated S103 can also be implemented by S1031, which will be described in combination with the steps:

[0135] S1031. Based on the clipboard access request, encrypt and store the first data in the private clipboard.

[0136] In the embodiment of the present application, the clipboard access request includes first data that needs to be stored, and the data processing device can encrypt the first data using a preset encryption algorithm and then store it in the private clipboard.

[0137] In the embodiment of the present application, the data processing device determines the first data in the clipboard access request; encrypts the first data to obtain second encrypted data, and stores the second encrypted data in the private clipboard.

[0138] In the embodiment of the present application, when storing data in the private clipboard, it is necessary to perform encrypted storage, so that the data in the private clipboard are all encrypted data, thereby improving the security of the data in the private clipboard.

[0139] See also Fig.10 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Figure 1 The illustrated S103 can also be implemented by S1032, which will be described in conjunction with the steps:

[0140] S1032: Based on the clipboard access request, decrypt and read the second data in the private clipboard.

[0141] In the embodiment of the present application, the data processing device decrypts and reads the second data in the private clipboard based on the information of the data to be read in the private clipboard required by the clipboard access request, wherein the second data is the data to be read in the private clipboard required by the clipboard access request.

[0142] In the embodiment of the present application, since the data in the private clipboard is stored in encrypted form, decryption reading is required when reading the encrypted data in the private clipboard. In this way, even if the data in the private clipboard is stolen, the true content of the data in the private clipboard cannot be obtained, thereby improving the security of the data in the private clipboard.

[0143] See also Fig.11 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Fig.10 The illustrated S1032 can also be implemented through S401 to S403, which will be described in conjunction with the steps:

[0144] S401. Determine required first encrypted data in the private clipboard based on the clipboard access request.

[0145] In the embodiment of the present application, the data processing device determines the required first encrypted data in the private clipboard based on the information of the required extracted data carried in the clipboard access request.

[0146] S402: Perform a format conversion test on the first encrypted data to determine a format test result.

[0147] In the embodiment of the present application, the data processing device performs a format conversion detection on the data format of the first encrypted data to determine a format detection result, wherein the format detection result is used to indicate whether there is a corresponding conversion data format for the data format of the first encrypted data.

[0148] In some other embodiments, the clipboard access request may also include the data format of the data to be read, and then the data format is detected to determine the format detection result.

[0149] S403: Based on the format detection result, read the second data after decrypting the first encrypted data.

[0150] In the embodiment of the present application, if the data detection result indicates that there is a corresponding data conversion format, the data processing device decrypts the first encrypted data and converts it into a corresponding format for reading. If the data detection result indicates that there is no corresponding data conversion format, the data processing device decrypts the first encrypted data for reading.

[0151] In the embodiment of the present application, the first encrypted data is subjected to a format conversion detection to determine the format detection result. Based on the format detection result, the second data after decrypting the first encrypted data is read. Since the data in the private clipboard is encrypted, when the data in the specified format obtained by the application does not exist, the system cannot perform automatic format conversion. This requires relying on the detection of the data type of the first encrypted data to determine whether there is a corresponding conversion data format. In this way, the first encrypted data can be converted from the existing format to the required format, and the converted data is returned, thereby realizing the smooth reading of the encrypted data in the private clipboard.

[0152] See also Fig.12 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Fig.11 S402 to S403 shown can also be implemented by S501 to S503, which will be described in combination with the steps:

[0153] S501. Based on the data format of the first encrypted data, match it in a preset data format set to determine the format detection result.

[0154] In the embodiment of the present application, the data processing device obtains the data format of the first encrypted data, matches the data format in a preset data format set, and determines a format detection result. The preset data format set includes: a corresponding relationship between data of different data formats for mutual conversion.

[0155] In the embodiment of the present application, the type set that supports conversion to a certain format does not vary due to different machine architectures and operating system versions. After obtaining the convertible type set, it is necessary to filter out the type of data that exists, and then decrypt the data of that type and convert it into the required format. The specific implementation of the format conversion can be achieved with the help of the TranslationPerformForData external interface of the Core Foundation system library.

[0156] S502: If the format detection result indicates that there is a corresponding conversion data format for the data format of the first encrypted data, decrypt the first encrypted data to obtain intermediate data.

[0157] In the embodiment of the present application, if the format detection result indicates that there is a corresponding conversion data format for the data format of the first encrypted data in the preset data format set, the first encrypted data is decrypted to obtain intermediate data.

[0158] S503: Read the intermediate data and convert it into the second data in the converted data format.

[0159] In the embodiment of the present application, the data processing device converts the intermediate data into second data in a converted data format, and then reads the second data.

[0160] In the embodiment of the present application, if the format detection result indicates that there is no corresponding conversion data format for the data format of the first encrypted data, the second data obtained by decrypting the first encrypted data is read.

[0161] The types of data format conversion involved in this application are pictures and text. After investigation, all picture formats can be directly converted to each other, while text types have limited conversion types. In particular, the utf8-plain-text type is consistent with the data of the public.text type and does not need to be converted; the formats that can be converted to the utf16-plain-text type are utf16-external-plain-text and utf8-plain-text.

[0162] In an embodiment of the present application, based on the data format of the first encrypted data, a match is performed in a preset data format set to determine a format detection result. If the format detection result indicates that there is a corresponding conversion data format for the data format of the first encrypted data, the first encrypted data is decrypted to obtain intermediate data. The intermediate data is read and converted into second data in a conversion data format. Since the data in the private clipboard is encrypted, when the data in the specified format obtained by the application does not exist, the system cannot perform automatic format conversion. This requires relying on the detection of the data type of the first encrypted data to determine whether there is a corresponding conversion data format. In this way, the first encrypted data can be converted from the existing format to the corresponding conversion data format, and the converted data can be returned, thereby realizing the smooth reading of the encrypted data in the private clipboard.

[0163] See also Fig.13 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Fig.12 S501 to S503 shown can also be implemented by S26 to S30, which will be described in combination with the steps:

[0164] S26. Generate a convertible type set.

[0165] In an embodiment of the present application, the data processing device can generate a set of convertible data types, that is, a set of preset data formats.

[0166] S27. Filter the types of data that exist.

[0167] In the embodiment of the present application, the data processing device matches and screens the data format of the first encrypted data in a preset data format set to determine a conversion data format that can be converted.

[0168] S28. Obtain convertible data.

[0169] In the embodiment of the present application, the data to be read is obtained in the private clipboard based on the clipboard access request.

[0170] S29. Decrypt the acquired data.

[0171] In the embodiment of the present application, the data processing device decrypts the data to be read.

[0172] S30. Convert to the required type.

[0173] In the embodiment of the present application, the data processing device converts the decrypted data into a corresponding conversion data format and then reads it.

[0174] See also Fig.14 , which is an optional flow chart of the clipboard data processing method provided in the embodiment of the present application, will be described in combination with the steps:

[0175] S601: Based on the data synchronization configuration between the private clipboard and the system clipboard, synchronize data between the private clipboard and the system clipboard.

[0176] In the embodiment of the present application, the data synchronization configuration may include a data synchronization direction between the private clipboard and the system clipboard, and a data synchronization range. After the data processing device detects that data changes occur in either the private clipboard or the system clipboard, the data is synchronized between the private clipboard and the system clipboard based on the data synchronization direction and the data synchronization range.

[0177] In the embodiment of the present application, after the data processing device detects that data is added to any of the private clipboard and the system clipboard, the data is added synchronously in the private clipboard and the system clipboard based on the data synchronization direction and the data synchronization range. After the data processing device detects that data is deleted from any of the private clipboard and the system clipboard, the data is deleted synchronously in the private clipboard and the system clipboard based on the data synchronization direction and the data synchronization range.

[0178] Wherein, the data synchronization configuration includes data synchronization range configuration and data synchronization direction configuration; wherein, the data synchronization range configuration includes any one of the following: fully allowing synchronization, allowing text synchronization, allowing synchronization of unformatted text of a specific length and completely prohibiting synchronization; wherein, the data synchronization direction configuration includes any one of the following: allowing mutual synchronization, allowing the system clipboard to synchronize to the private clipboard and allowing the private clipboard to synchronize to the system clipboard.

[0179] In the embodiment of the present application, based on the data synchronization configuration between the private clipboard and the system clipboard, data synchronization is performed between the private clipboard and the system clipboard. In this way, cross-domain clipboard data synchronization can solve the problem of inconvenience in copying and pasting operations caused by complete clipboard isolation, and enhance the usability of the solution.

[0180] See also Fig.15 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Fig.14 S601 in the above can also be implemented through S701 to S702, which will be described in combination with the steps:

[0181] S701. Based on the active state of the security application, monitor data changes on the private clipboard and the system clipboard, and determine monitoring results.

[0182] In an embodiment of the present application, after the data processing device determines the security application corresponding to the isolated space, the activity state of the security application is monitored. Based on the different activity states of the security application, the private clipboard and the system clipboard are monitored for data changes, and the monitoring results are determined. The monitoring results are used to indicate whether data changes occur in the private clipboard and the system clipboard.

[0183] Among them, the application has three states: set to foreground, keep foreground, and set to background. Among them, setting to foreground is a transient state, that is, the active state. At this time, the data change monitoring of the system clipboard and the private clipboard will be turned on. The monitoring method is to query the number of data changes on the clipboard at regular intervals. Each time the clipboard sets data, the system will increase the number by one. When the application is set to the background, that is, the user no longer uses it, the monitoring will stop to reduce unnecessary resource consumption. When the user uses the workspace application, the monitoring state is always maintained.

[0184] S702: If the monitoring result indicates that a change occurs to the first data in the first clipboard, the change to the second data is synchronously performed in the second clipboard based on the data synchronization configuration.

[0185] In the embodiment of the present application, if the monitoring result indicates that the first data in the first clipboard has been changed, the second data is changed in the second clipboard based on the preset data synchronization direction and data synchronization range. The first data corresponds to the second data, the first clipboard is any one of the private clipboard and the system clipboard; the second clipboard is one of the private clipboard and the system clipboard that is different from the first clipboard.

[0186] In the embodiment of the present application, if the monitoring result indicates that the first data is added to the first clipboard, the second data is added to the second clipboard based on the preset data synchronization direction and data synchronization range. If the monitoring result indicates that the first data is deleted from the first clipboard, the second data is deleted from the second clipboard based on the preset data synchronization direction and data synchronization range.

[0187] In the embodiment of the present application, taking the synchronization of data from the system clipboard to the private clipboard as an example, when the system clipboard data change is monitored, it is first determined whether the current policy allows data synchronization. If allowed, a timestamp data is added to the system clipboard, and then the system clipboard data is set to the private clipboard, and then the timestamp is added to the private clipboard. The basic logic of synchronizing data from the private clipboard to the system clipboard is the same as above, the difference is that the private clipboard can be hooked when setting data, so the timestamp can be added while setting the data.

[0188] In an embodiment of the present application, based on the active state of the security application, the private clipboard and the system clipboard are monitored for data changes to determine the monitoring result. If the monitoring result indicates that a change in the first data occurs in the first clipboard, the change in the second data is synchronized in the second clipboard based on the data synchronization configuration. Similarly, cross-domain clipboard data synchronization can solve the problem of inconvenience in copying and pasting operations caused by complete clipboard isolation, and enhance the usability of the solution.

[0189] See also Fig.16 , is an optional flow chart of a clipboard data processing method provided in an embodiment of the present application, Fig.14 S601 in the above can also be implemented through S701 to S702, which will be described in combination with the steps:

[0190] S703: Configure a first timestamp for the first data based on a change time of the first data, and configure a second timestamp for the second data based on a change time of the second data.

[0191] In an embodiment of the present application, the data processing device may configure a first timestamp for the first data based on a change time of the first data, and configure a second timestamp for the second data based on a data change time of the second data.

[0192] In the embodiment of the present application, the role of the timestamp is to determine which side's data is new when the clipboard is synchronized, so as to avoid the user's newly copied data being overwritten by the old data. It is specifically applied to the scenario where the application is set to the foreground. At this time, because the monitoring has just been restarted, it is impossible to know which side of the system clipboard and the private clipboard has newer data, so it is necessary to determine the direction of data synchronization based on the date on the timestamp. If the system clipboard data is newer, the system clipboard data needs to be synchronized to the private clipboard, otherwise the private clipboard data needs to be synchronized to the system clipboard.

[0193] In the embodiment of the present application, a first timestamp is configured for the first data based on the time when the first data was changed, and a second timestamp is configured for the second data based on the time when the second data was changed. In this way, after the first data is changed, the first data in the first clipboard will have a corresponding first timestamp, and the second data in the second clipboard will have a corresponding second timestamp. Based on the first timestamp and the second timestamp, it can be analyzed to determine which of the first data and the second data is the latest, so as to avoid the user's newly copied data being overwritten by the old data.

[0194] See also Fig.16 , is an optional flow chart of the clipboard data processing method provided in the embodiment of the present application, and S601 to S603 shown can also be implemented by S31 to S42, which will be described in combination with the steps:

[0195] S31. Active application of workspace.

[0196] In an embodiment of the present application, the data processing device detects the activity status of the corresponding security application in the isolated space.

[0197] S32. Monitor the system clipboard.

[0198] In the embodiment of the present application, if the security application is active, the system clipboard is monitored.

[0199] S33: Whether data change occurs.

[0200] In the embodiment of the present application, the data processing device monitors whether data changes occur in the system clipboard.

[0201] S34: Whether to allow data synchronization.

[0202] In the embodiment of the present application, the data processing device determines whether to allow synchronization of the data based on the data synchronization configuration between the system clipboard and the private clipboard.

[0203] S35. Add timestamp to system clipboard.

[0204] In the embodiment of the present application, if synchronization of corresponding data is allowed, a corresponding first timestamp is configured for the changed data in the system clipboard.

[0205] S36, obtaining system clipboard data.

[0206] In the embodiment of the present application, the data processing device reads the changed first data in the system clipboard.

[0207] S37. Set data to the private clipboard.

[0208] In the embodiment of the present application, the data processing device stores the changed first data in the private clipboard, forming the second data in the private clipboard.

[0209] S38. Add timestamp to private clipboard.

[0210] In the embodiment of the present application, the data processing device configures a corresponding second timestamp for the second data.

[0211] S39. Continue to monitor the system clipboard.

[0212] In the embodiment of the present application, when the security application starts to become active, the data processing device starts to monitor the data changes in the system clipboard.

[0213] S40. The system clipboard has a timestamp.

[0214] In the embodiment of the present application, the data processing device obtains the timestamp of the data in the system clipboard.

[0215] S41. The system clipboard timestamp is newer than the private clipboard.

[0216] In the embodiment of the present application, the data processing device compares the timestamp of the data in the system clipboard with the timestamp of the data in the private clipboard. If the timestamp of the data in the system clipboard is newer than the timestamp of the data in the private clipboard, S34 to S38 are executed. If the timestamp of the data in the system clipboard is not newer than the timestamp of the data in the private clipboard, the subsequent steps are not executed.

[0217] S42. Stop monitoring the system clipboard.

[0218] In the embodiment of the present application, when the security application stops being active, the data processing device stops monitoring data changes in the system clipboard.

[0219] See also Fig.18 , which is a schematic diagram of the structure of the shear plate data processing device provided in an embodiment of the present application.

[0220] The embodiment of the present application further provides a clipboard data processing device 800 , including: an interception unit 801 , a determination unit 802 and a data processing unit 803 .

[0221] An interception unit 801 is used to intercept and obtain a clipboard access request for the isolated space;

[0222] A determining unit 802 is configured to determine a corresponding private clipboard based on the clipboard access request; wherein the private clipboard is different from the system clipboard of the personal space;

[0223] The data processing unit 803 is used to process data in the private clipboard based on the clipboard access request; wherein the data processing includes: encrypted storage and decrypted reading.

[0224] In an embodiment of the present application, the clipboard data processing device 800 is used to create the private clipboard corresponding to the isolated space based on a preset interception method and a clipboard instance creation method of the system clipboard.

[0225] In the embodiment of the present application, the determination unit 802 in the clipboard data processing device 800 is used to determine the private clipboard based on the clipboard identifier and the data to be processed included in the clipboard access request.

[0226] In an embodiment of the present application, the determination unit 802 in the clipboard data processing device 800 is used to determine the private clipboard based on the matching of the clipboard identifier with the system clipboard identifier, the private clipboard identifier, and the data type of the data to be processed.

[0227] In the embodiment of the present application, the data processing unit 803 in the clipboard data processing device 800 is used to encrypt and store the first data in the private clipboard based on the clipboard access request; wherein the first data is the data required to be stored in the clipboard access request;

[0228] Based on the clipboard access request, second data is decrypted and read in the private clipboard; wherein the second data is data required to be read in the private clipboard by the clipboard access request.

[0229] In the embodiment of the present application, the data processing unit 803 in the clipboard data processing device 800 is used to determine the required first encrypted data in the private clipboard based on the clipboard access request;

[0230] Performing a format conversion detection on the first encrypted data to determine a format detection result; wherein the detection result is used to indicate whether there is a corresponding conversion data format for the data format of the first encrypted data;

[0231] Based on the format detection result, the second data after decrypting the first encrypted data is read.

[0232] In the embodiment of the present application, the data processing unit 803 in the clipboard data processing device 800 is used to decrypt the first encrypted data to obtain intermediate data if the format detection result indicates that there is a corresponding conversion data format for the data format of the first encrypted data;

[0233] The intermediate data is read and converted into the second data in the conversion data format.

[0234] In the embodiment of the present application, the data processing unit 803 in the clipboard data processing device 800 is used to synchronize data between the private clipboard and the system clipboard based on the data synchronization configuration between the private clipboard and the system clipboard.

[0235] Wherein, the data synchronization configuration includes data synchronization range configuration and data synchronization direction configuration; wherein, the data synchronization range configuration includes any one of the following: fully allowing synchronization, allowing text synchronization, allowing synchronization of unformatted text of a specific length and completely prohibiting synchronization; wherein, the data synchronization direction configuration includes any one of the following: allowing mutual synchronization, allowing the system clipboard to synchronize to the private clipboard and allowing the private clipboard to synchronize to the system clipboard.

[0236] In the embodiment of the present application, the data processing unit 803 in the clipboard data processing device 800 is used to monitor data changes of the private clipboard and the system clipboard based on the active state of the security application program, and determine the monitoring result;

[0237] If the monitoring result indicates that a change has occurred in the first data in the first clipboard, the change in the second data is synchronously performed in the second clipboard based on the data synchronization configuration; wherein the first data and the second data correspond, and the first clipboard is any one of the private clipboard and the system clipboard; and the second clipboard is one of the private clipboard and the system clipboard that is different from the first clipboard.

[0238] In the embodiment of the present application, the data processing unit 803 in the clipboard data processing device 800 is used to configure a first timestamp for the first data based on the change time of the first data, and to configure a second timestamp for the second data based on the change time of the second data.

[0239] It should be noted that in the embodiments of the present application, if the above-mentioned clipboard data processing method is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application can be essentially or partly reflected in the form of a software product that contributes to the relevant technology. The computer software product is stored in a storage medium, including a number of instructions to enable a clipboard data processing device (which can be a personal computer, etc.) to execute all or part of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a U disk, a mobile hard disk, a read-only memory (ROM), a magnetic disk or an optical disk. In this way, the embodiments of the present application are not limited to any specific combination of hardware and software.

[0240] Correspondingly, an embodiment of the present application provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps in the method on the side of the clipboard data processing device are implemented.

[0241] It should be noted here that the description of the above storage medium and device embodiments is similar to the description of the above method embodiments, and has similar beneficial effects as the method embodiments. For technical details not disclosed in the storage medium and device embodiments of this application, please refer to the description of the method embodiments of this application for understanding.

[0242] It should be noted that Fig.19 A hardware entity diagram of an electronic device provided in an embodiment of the present application, such as Fig.19 As shown, an embodiment of the present application provides an electronic device 900, including a memory 902 and a processor 901, wherein the memory 902 stores a computer program that can be run on the processor 901, and the processor 901 implements the steps in the above method when executing the program, wherein;

[0243] The processor 901 generally controls the overall operation of the electronic device 900 .

[0244] The memory 902 is configured to store instructions and applications executable by the processor 901, and can also cache data to be processed or processed by the processor 901 and various modules in the electronic device 900 (for example, image data, audio data, voice communication data, and video communication data), which can be implemented through flash memory (FLASH) or random access memory (Random Access Memory, RAM).

[0245] Correspondingly, an embodiment of the present application further provides a computer program product, including a computer program, which can be executed by the processor 901 of the electronic device 900 to complete the steps in the method on the side of the clipboard data processing device.

[0246] It should be understood that "one embodiment" or "an embodiment" mentioned throughout the specification means that specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present application. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It should be understood that in various embodiments of the present application, the size of the sequence number of the above-mentioned processes does not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application. The above-mentioned sequence numbers of the embodiments of the present application are only for description and do not represent the advantages and disadvantages of the embodiments.

[0247] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0248] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored, or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the device or unit can be electrical, mechanical or other forms.

[0249] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units; they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0250] In addition, all functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may be a separate unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0251] A person skilled in the art can understand that all or part of the steps of implementing the above method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps of the above method embodiment; and the aforementioned storage medium includes: a mobile storage device, a read-only memory (ROM), a magnetic disk or an optical disk, and other media that can store program codes.

[0252] Alternatively, if the above-mentioned integrated unit of the present application is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application can be essentially or partly embodied in the form of a software product that contributes to the relevant technology. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a mobile storage device, a ROM, a magnetic disk, or an optical disk.

[0253] The above is only an implementation method of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for processing clipboard data, characterized in that: include: Intercept and obtain clipboard access requests for isolated spaces; Based on the clipboard access request, determining a corresponding private clipboard; wherein the private clipboard is different from the system clipboard of the personal space; Based on the clipboard access request, data processing is performed in the private clipboard; wherein the data processing includes: encrypted storage and decrypted reading.

2. The method for processing clipboard data according to claim 1, characterized in that: Before intercepting and obtaining a clipboard access request for the isolated space, the method further includes: Based on the preset interception method and the clipboard instance creation method of the system clipboard, the private clipboard corresponding to the isolated space is created.

3. The shear plate data processing method according to claim 1 or 2, characterized in that: The determining, based on the clipboard access request, a corresponding private clipboard includes: The private clipboard is determined based on the clipboard identifier and the data to be processed included in the clipboard access request.

4. The method for processing shear plate data according to claim 3, characterized in that: The determining the private clipboard based on the clipboard identifier and the data to be processed included in the clipboard access request includes: The private clipboard is determined based on a match between the clipboard identifier and the identifier of the system clipboard, the private clipboard identifier, and the data type of the data to be processed.

5. The shear plate data processing method according to claim 1 or 2, characterized in that: The processing of data in the private clipboard based on the clipboard access request includes one of the following: Based on the clipboard access request, encrypt and store first data in the private clipboard; wherein the first data is the data required to be stored in the clipboard access request; Based on the clipboard access request, second data is decrypted and read in the private clipboard; wherein the second data is data required to be read in the private clipboard by the clipboard access request.

6. The method for processing clipboard data according to claim 5, characterized in that: The decrypting and reading the second data in the private clipboard based on the clipboard access request comprises: Based on the clipboard access request, determining the required first encrypted data in the private clipboard; Performing a format conversion detection on the first encrypted data to determine a format detection result; wherein the detection result is used to indicate whether there is a corresponding conversion data format for the data format of the first encrypted data; Based on the format detection result, the second data after decrypting the first encrypted data is read.

7. The method for processing clipboard data according to claim 6, characterized in that: The step of reading the second data after decrypting the first encrypted data based on the format detection result includes: If the format detection result indicates that there is a corresponding conversion data format for the data format of the first encrypted data, decrypting the first encrypted data to obtain intermediate data; The intermediate data is read and converted into the second data in the conversion data format.

8. The shear plate data processing method according to claim 1 or 2, characterized in that: The method further comprises: Based on the data synchronization configuration between the private clipboard and the system clipboard, data synchronization is performed between the private clipboard and the system clipboard.

9. The method for processing clipboard data according to claim 8, characterized in that: The data synchronization configuration includes data synchronization range configuration and data synchronization direction configuration; wherein, the data synchronization range configuration includes any one of the following: fully allowing synchronization, allowing text synchronization, allowing synchronization of unformatted text of a specific length, and completely prohibiting synchronization; wherein, the data synchronization direction configuration includes any one of the following: allowing mutual synchronization, allowing the system clipboard to synchronize to the private clipboard, and allowing the private clipboard to synchronize to the system clipboard.

10. The data processing method of the data clipboard according to claim 8, characterized in that: The step of synchronizing data between the private clipboard and the system clipboard based on the data synchronization configuration between the private clipboard and the system clipboard includes: Based on the active state of the security application, monitoring data changes on the private clipboard and the system clipboard, and determining monitoring results; If the monitoring result indicates that a change has occurred in the first data in the first clipboard, the change in the second data is synchronously performed in the second clipboard based on the data synchronization configuration; wherein the first data and the second data correspond, and the first clipboard is any one of the private clipboard and the system clipboard; and the second clipboard is one of the private clipboard and the system clipboard that is different from the first clipboard.

11. The method for processing clipboard data according to claim 10, characterized in that: The method further comprises: A first timestamp is configured for the first data based on a change time of the first data, and a second timestamp is configured for the second data based on a change time of the second data.

12. A shear plate data processing device, characterized in that: include: An interception unit, used for intercepting and obtaining a clipboard access request for the isolated space; A determination unit, configured to determine a corresponding private clipboard based on the clipboard access request; wherein the private clipboard is different from the system clipboard of the personal space; A data processing unit is used to process data in the private clipboard based on the clipboard access request; wherein the data processing includes: encrypted storage and decrypted reading.

13. An electronic device, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program executable on the processor, and the processor implements the steps in the method according to any one of claims 1 to 11 when executing the computer program.

14. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps in the method according to any one of claims 1 to 11 are implemented.

15. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the computer program implements the steps of the method according to any one of claims 1 to 11.

Images