Printing transparency auditing method and device, storage medium and program product
The printing behavior is monitored through the background global Hook hook monitoring program, which solves the problem of not being able to obtain real audit information and timely monitoring of abnormal behaviors in the existing technology, and realizes the effect of real-time monitoring and recording of printing behaviors.
Patent Information
- Application Number
- CN202411562636.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-05
- Publication Date
- 2025-03-28
AI Technical Summary
When monitoring the printing behavior of the printing computer, the existing technology cannot obtain real and complete printing audit information, cannot monitor abnormal printing behavior in a timely manner, and cannot record and report printing behavior in a timely manner.
The document printed by the user using the printer device is monitored through the background global Hook hook monitoring program, obtain printing data in real time, and report the monitored printing abnormal data in a timely manner.
Real-time monitoring and recording of printing behavior is realized, abnormal data is discovered and reported in a timely manner, and the efficiency and accuracy of printing audits are improved.
Smart Images
Figure CN119718220A_ABST
Abstract
Description
Technical Field
[0001] The present disclosure relates to the field of computer technology, and in particular to a method, device, storage medium and program product for printing transparent auditing. Background Art
[0002] Printing devices have been widely used in office environments. In the Windows print monitoring and auditing system, printer print task management and auditing is a very important function.
[0003] In the related art, the printing behavior of the printing device is monitored mainly by installing an agent program on the printing computer, or by deploying a monitoring server on the printing computer and installing a monitoring program in the server, connecting the printer computer to the monitoring server, and monitoring the printing behavior of the printing computer through the monitoring server.
[0004] The related art methods for monitoring the printing behavior of printing computers have the problems of being unable to obtain true and complete printing audit information, being unable to timely monitor abnormal printing behavior, and being unable to record and report printing behavior in a timely manner. Summary of the invention
[0005] In view of this, the embodiments of the present disclosure provide a method, device, storage medium and program product for transparent printing auditing, which can monitor the documents printed by users using printer devices through a background global Hook hook monitoring program, and can obtain the printing data of the printer device in real time, report the monitored printing abnormal data in time, and record and report the documents printed by the printer device.
[0006] In a first aspect, the present disclosure provides a method for printing transparent audit, which adopts the following technical solution:
[0007] Start a background monitoring program, wherein the background monitoring program is used to monitor the global Hook hook function;
[0008] Through the Hook mechanism of the Windows operating system, a global Hook hook function is set in the dynamic link library file, and the printing related parameters to be monitored are set to obtain the processed dynamic link library file;
[0009] Establishing a hook between the global Hook hook function and the document printing related event API interface, and performing hook monitoring on the document printing related event API interface through the global Hook hook function;
[0010] When it is detected that the target application of the document printing related event API interface is started, the processed dynamic link library file is injected into the target application by means of a hook injection method;
[0011] When it is detected that the target application selects a printer to print a document, the background monitoring program acquires the printing-related parameters to be monitored by calling the document printing-related event API interface and records an audit message.
[0012] In some embodiments, when the target application is detected to be started, before injecting the processed dynamic link library file into the target application by hook injection, the method further includes:
[0013] Start the background monitoring program and call the dynamic link library Hook DLL;
[0014] A monitoring program is started which monitors document printing related events of the printer using the global Hook hook function.
[0015] In some embodiments, when the target application is detected to be started, the processed dynamic link library file is injected into the target application by a hook injection method, including:
[0016] When it is detected that the target application is started, the processed dynamic link library file is automatically injected into the target application through the global Hook function.
[0017] In some embodiments, the method further comprises:
[0018] When it is detected that the target application is closed, the global Hook function is automatically uninstalled;
[0019] When it is detected that the global Hook function is uninstalled, resources are released according to a preset strategy.
[0020] In some embodiments, when it is detected that the target application selects a printer to print a document, the background monitoring program obtains the printing-related parameters to be monitored by calling the document printing-related event API interface and records an audit message, including:
[0021] When it is detected that the target application selects a printer to print a document through the preset document format parameters, the background monitoring program obtains the printing related parameters to be monitored by calling the document printing related event API interface;
[0022] The printing related parameters to be monitored are analyzed and processed to obtain analysis and processing results.
[0023] In some embodiments, the method further comprises:
[0024] When it is detected that the target application has completed printing the document through the printer, the analysis and processing results of the printing-related parameters to be monitored are sent to a background server, so that the background server audits the analysis and processing results of the printing-related parameters to be monitored, and sends the audit results obtained by the audit to the target application;
[0025] Receive the audit result sent by the background server.
[0026] YY+242158P
[0027] In some embodiments, establishing a hook between the global Hook hook function and the document printing related event API interface, and performing hook monitoring on the document printing related event API interface through the global Hook hook function includes:
[0028] Establish a hook between the Mhook_SetHook function and the CreateDC interface for creating a device context environment, the DocumentProperties interface for printer configuration control function, the StartDoc interface for starting a print job, or the EndDoc interface for ending a print job;
[0029] The Mhook_SetHook function is used to hook and monitor the CreateDC interface for creating the device context environment, the DocumentProperties interface for printer configuration control function, the StartDoc interface for starting a print job, or the EndDoc interface for ending a print job.
[0030] In a second aspect, the disclosed embodiment also provides a device for printing transparent audit, which adopts the following technical solution:
[0031] A startup unit is configured to start a background monitoring program, wherein the background monitoring program is used to monitor a global Hook hook function;
[0032] The setting unit is configured to set a global Hook hook function in a dynamic link library file through a Hook mechanism of the Windows operating system, and to set printing related parameters to be monitored, so as to obtain a processed dynamic link library file;
[0033] A hook unit is configured to establish a hook between the global Hook hook function and the document printing related event API interface, and perform hook monitoring on the document printing related event API interface through the global Hook hook function;
[0034] An injection unit is configured to inject the processed dynamic link library file into the target application by a hook injection method when detecting that the target application of the document printing related event API interface is started;
[0035] The audit unit is configured to, when it is detected that the target application selects a printer to print a document, the background monitoring program acquires the printing-related parameters to be monitored by calling the document printing-related event API interface and records an audit message.
[0036] In a third aspect, the embodiments of the present disclosure further provide a computer device, which adopts the following technical solution:
[0037] The computer device comprises:
[0038] at least one processor; and,
[0039] a memory communicatively connected to the at least one processor; wherein,
[0040] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform any of the above-mentioned methods for printing transparent auditing.
[0041] In a fourth aspect, an embodiment of the present disclosure further provides a computer-readable storage medium, which stores computer instructions, and the computer instructions are used to enable a computer to execute any of the above-mentioned methods for transparent printing auditing.
[0042] In a fifth aspect, an embodiment of the present disclosure further provides a computer program product, including a computer program / instruction, which implements the steps of any of the above methods when executed by a processor.
[0043] The disclosed embodiment provides a method for transparent auditing of printing. When a user prints a document through an application, the method automatically monitors the process of the user printing the document using a printer, and captures the printing data of the user printing the document through the printer device in real time. The global Hook hook function and the printing related parameters to be monitored can be set in the dynamic link library file through the Hook mechanism of the Windows operating system to obtain the processed dynamic link library file; a hook is established between the global Hook hook function and the document printing related event API interface, and the document printing related event API interface is hooked and monitored through the global Hook hook function. When the target application is detected to be started, the processed dynamic link library file is injected into the target application. When the user opens the target application and prints the document through the printer, the document printed by the user using the printer device is monitored through the background global Hook hook monitoring program, and the printing related parameters are obtained. The audit is performed through the background server, thereby improving the efficiency of reporting the monitored abnormal printing data and the audit efficiency.
[0044] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the following preferred embodiments are specifically cited and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS
[0045] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.
[0046] Figure 1 A schematic diagram of a method flow for printing transparent auditing provided by an embodiment of the present disclosure;
[0047] Figure 2 A flowchart of another method for printing transparent audit provided by an embodiment of the present disclosure;
[0048] Figure 3 A schematic diagram of the structure of a device for printing transparent audit provided by an embodiment of the present disclosure;
[0049] Figure 4 A schematic diagram of the structure of a computer device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION
[0050] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.
[0051] It should be clear that the following embodiments of the present disclosure are described by specific specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other in the absence of conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.
[0052] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein may be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein may be implemented independently of any other aspect, and two or more of these aspects may be combined in various ways. For example, any number of aspects described herein may be used to implement the device and / or practice the method. In addition, other structures and / or functionalities other than one or more of the aspects described herein may be used to implement this device and / or practice this method.
[0053] It should also be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present disclosure. The drawings only show components related to the present disclosure rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.
[0054] Additionally, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects described may be practiced without these specific details.
[0055] like Figure 1 As shown, Figure 1 A flow chart of a method for printing transparent auditing provided by an embodiment of the present disclosure is provided. A method for printing transparent auditing provided by an embodiment of the present disclosure comprises the following steps:
[0056] S101, start a background monitoring program, wherein the background monitoring program is used to monitor a global Hook hook function.
[0057] S102, through the Hook mechanism of the Windows operating system, a global Hook hook function is set in the dynamic link library file, and printing related parameters to be monitored are set to obtain a processed dynamic link library file.
[0058] Set a global Hook function through the Hook mechanism of the Windows operating system, monitor the print file task information sent by the application to the printer driver, and obtain the print-related parameters of the printer driver contained in the print file task information, for example, obtain the printer name, driver name, file name of the print document, paper size, single-sided or double-sided, color, number of copies, direction, print task start time, and print task end time.
[0059] S103: Establish a hook between the global Hook function and the document printing related event API interface, and perform hook monitoring on the document printing related event API interface through the global Hook function.
[0060] S104, when the target application of the document printing related event API interface is detected to be started, the processed dynamic link library file is injected into the YY+242158P
[0061] Describe the target application.
[0062] S105. When it is detected that the target application selects a printer to print a document, the background monitoring program obtains the printing-related parameters to be monitored by calling the document printing-related event API interface and records an audit message.
[0063] The disclosed embodiment provides a method for transparent auditing of printing. When a user prints a document through an application, the method automatically monitors the process of the user printing the document using a printer, and captures the print data of the user printing the document through the printer device in real time. The Hook mechanism of the Windows operating system can be used to set a global Hook function in a dynamic link library file and set printing-related parameters to be monitored to obtain a processed dynamic link library file; the global Hook function is used to hook the document printing-related event API interface.
[0064] When it is detected that the target application is started, the processed dynamic link library file is injected into the target application. When the user opens the target application and prints documents through the printer, the background global Hook monitoring program monitors the documents printed by the user using the printer device, obtains printing related parameters, and performs auditing through the background server, thereby improving the efficiency of reporting the monitored printing abnormality data and the auditing efficiency.
[0065] The disclosed embodiment is based on the Hook mechanism of the Windows operating system to send the print document to be printed to the driver and monitor the process. Hook is a system mechanism provided in the Windows operating system to replace the "interrupt" in DOS. Most applications in the Windows operating system are based on the message mechanism. Hook is a program segment for processing messages. Hook is hung in the system through system calls.
[0066] Whenever a printer event PrinterEvent or a document event DocumentEvent is triggered by the system, the hook program can obtain messages related to the printing process in advance through the hooked document printing related event API interface, obtain control, and analyze, record and audit the relevant data, and then send the processing results to the operating system, thereby realizing transparent monitoring, control and auditing of the entire printing process.
[0067] In some embodiments, establishing a hook between the global Hook hook function and the document printing related event API interface, and performing hook monitoring on the document printing related event API interface through the global Hook hook function includes:
[0068] Establish a hook between the Mhook_SetHook function and the CreateDC interface for creating a device context environment, the DocumentProperties interface for printer configuration control function, the StartDoc interface for starting a print job, or the EndDoc interface for ending a print job;
[0069] The Mhook_SetHook function is used to hook and monitor the CreateDC interface for creating the device context environment, the DocumentProperties interface for printer configuration control function, the StartDoc interface for starting a print job, or the EndDoc interface for ending a print job.
[0070] Optionally, a hook may be established between the Mhook_SetHook function and the printer attribute parameters of the printer, and the printer attribute parameters of the printer may be hooked and monitored through the Mhook_SetHook function.
[0071] Optionally, in Windows operating system, to use global Hook function across processes, the global Hook function needs to be written in DLL (Dynamic Link Library), which is a modular and relatively independent component. Use SetWindowsHookEx function to set global Hook function, use Microsoft Visual C++ (Visual C++, MSVC, VS or VC for short, is a free C++ development tool of Microsoft Corporation, with integrated development environment, can provide editing C language, C++ and C++ / CLI YY+242158P
[0072] The __declspec(dllexport) (a keyword in Microsoft Visual C++ used to export data, functions, classes, or class member functions from a DLL file) in the DLL file can export the interface of the global Hook function inside the DLL file, and the background monitoring program can load this SetWindowsHookEx function to call this interface.
[0073] Optionally, the SetHook interface of the Mhook library is called to hook the property parameters corresponding to the printer properties of the printer or to hook the document printing related event API interface (for example, Create DC, Start Doc, End Doc, DocumentProperties).
[0074] In some embodiments, when the target application is detected to be started, before injecting the processed dynamic link library file into the target application by hook injection, the method further includes:
[0075] Start the background monitoring program and call the dynamic link library Hook DLL;
[0076] A monitoring program is started which monitors document printing related events of the printer using the global Hook hook function.
[0077] In some embodiments, when the target application is detected to be started, the processed dynamic link library file is injected into the target application by a hook injection method, including:
[0078] When it is detected that the target application is started, the processed dynamic link library file is automatically injected into the target application through the global Hook function.
[0079] Optionally, when the target application (such as office software) opens a document, the global Hook function is automatically injected into the target application by the Windows operating system. When the user selects a printer to print the document through the target application, the global Hook function will intercept the document printing related event API interface and intercept the printing related parameters of interest during the printing process. After that, the global Hook function ends the processing and returns the process to the target application. YY+242158P
[0080] Perform subsequent printing actions.
[0081] In some embodiments, the method further comprises:
[0082] When it is detected that the target application is closed, the global Hook function is automatically uninstalled;
[0083] When it is detected that the global Hook function is uninstalled, resources are released according to a preset strategy.
[0084] In some embodiments, when it is detected that the target application selects a printer to print a document, the background monitoring program obtains the printing-related parameters to be monitored by calling the document printing-related event API interface and records an audit message, including:
[0085] When it is detected that the target application selects a printer to print a document through the preset document format parameters, the background monitoring program obtains the printing related parameters to be monitored by calling the document printing related event API interface;
[0086] The printing related parameters to be monitored are analyzed and processed to obtain analysis and processing results.
[0087] In some embodiments, the method further comprises:
[0088] When it is detected that the target application has completed printing the document through the printer, the analysis and processing results of the printing-related parameters to be monitored are sent to a background server, so that the background server audits the analysis and processing results of the printing-related parameters to be monitored, and sends the audit results obtained by the audit to the target application;
[0089] Receive the audit result sent by the background server.
[0090] The disclosed embodiment monitors the process of users using printers to print documents. When users print documents through target applications, the printing process is automatically monitored, the entire process of printing documents is monitored, and printing-related parameters such as document name, document size, dimensions, direction, single-sided and double-sided, color, number of copies, print start time, and print end time are acquired in real time. The printed documents are recorded and reported, and abnormal behaviors are reported in a timely manner.
[0091] like Figure 2 As shown, Figure 2 A flow chart of another method for transparent auditing of printing provided by an embodiment of the present disclosure, step 1, start a background monitoring program; step 2, set a global Hook hook function in a dynamic link library file; step 3, call Hook DLL (Dynamic Link Library is a dynamic link library file), set the printing related parameters to be monitored, and call the SetHook interface of the Mhook library to hook the document printing related event API interface (for example, DocumentProperties, Create DC, Start Doc, End Doc, etc.); step 4, wait for an office application (for example, office software) to start, and submit the print document to the printer after the office application is started; step 5, the system issues a print event (printer event, document event), and when the background monitoring program detects that the target application is started, the system automatically injects the processed dynamic link library file into the target application by means of hook injection (that is, automatically performs Hook injection). DLL hook injection; Step 6, the target application sets the document format parameters, selects the printer to print the document, the background monitoring program intercepts the document printing related event API interface, analyzes and processes the document printing related event API interface, and obtains printing related parameters; Step 7, after printing is completed, the background monitoring program reports the information to the background server according to the record for the administrator to view; Step 8, when the target application is closed, the global Hook hook function of the background monitoring program is automatically uninstalled to release resources.
[0092] like Figure 3 As shown, the embodiment of the present disclosure also provides a device for printing transparent audit, including:
[0093] The starting unit 31 is configured to start a background monitoring program, wherein the background monitoring program is used to monitor a global Hook hook function;
[0094] The setting unit 32 is configured to set a global Hook hook function in the dynamic link library file through the Hook mechanism of the Windows operating system, and set the printing related parameters to be monitored to obtain a processed dynamic link library file;
[0095] The hook unit 33 is configured to establish a hook between the global Hook hook function and the document printing related event API interface, and perform hook monitoring on the document printing related event API interface through the global Hook hook function;
[0096] The injection unit 34 is configured to inject the processed dynamic link library file into the target application by a hook injection method when the target application of the document printing related event API interface is detected to be started;
[0097] The audit unit 35 is configured to, when it is detected that the target application selects a printer to print a document, the background monitoring program acquires the printing-related parameters to be monitored by calling the document printing-related event API interface and records an audit message.
[0098] The computer device according to the embodiment of the present disclosure includes a memory and a processor. The memory is used to store non-temporary computer-readable instructions. Specifically, the memory may include one or more computer program products, and the computer program product may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may, for example, include a random access memory (RAM) and / or a cache memory (cache), etc. The non-volatile memory may, for example, include a read-only memory (ROM), a hard disk, a flash memory, etc.
[0099] The processor may be a central processing unit (CPU) or other forms of processing units with data processing capabilities and / or instruction execution capabilities, and may control other components in the computer device to perform desired functions. In one embodiment of the present disclosure, the processor is used to run the computer-readable instructions stored in the memory, so that the computer device performs all or part of the steps of a method for printing transparent auditing in the aforementioned embodiments of the present disclosure.
[0100] Those skilled in the art should be able to understand that in order to solve the technical problem of how to obtain a good user experience, the present embodiment may also include well-known structures such as a communication bus and an interface, and these well-known structures should also be included in the protection scope of the present disclosure.
[0101] like Figure 4 A schematic diagram of the structure of a computer device provided in an embodiment of the present disclosure is shown, which is a schematic diagram of the structure of a computer device suitable for implementing the embodiment of the present disclosure. Figure 4 The computer device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.
[0102] like Figure 4As shown, the computer device may include a processor (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) or a program loaded from a storage device into a random access memory (RAM). In the RAM, various programs and data required for the operation of the computer device are also stored. The processor, ROM, and RAM are connected to each other via a bus. An input / output (I / O) interface is also connected to the bus.
[0103] Typically, the following devices can be connected to the I / O interface: input devices such as sensors or visual information acquisition devices; output devices such as display screens; storage devices such as tapes, hard disks, etc.; and communication devices. The communication device can allow the computer device to communicate with other devices (such as edge computing devices) wirelessly or by wire to exchange data. Figure 4 A computer device having various devices is shown, but it should be understood that it is not required to implement or possess all of the devices shown. More or fewer devices may be implemented or possessed instead.
[0104] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device, or installed from a ROM. When the computer program is executed by a processor, all or part of the steps of a method for printing transparent auditing of an embodiment of the present disclosure are executed.
[0105] For detailed description of this embodiment, reference may be made to the corresponding descriptions in the aforementioned embodiments, which will not be repeated here.
[0106] According to the computer-readable storage medium of the embodiment of the present disclosure, non-transitory computer-readable instructions are stored thereon. When the non-transitory computer-readable instructions are executed by a processor, all or part of the steps of the method for printing transparent auditing of the above-mentioned embodiments of the present disclosure are executed.
[0107] The above-mentioned computer-readable storage media include, but are not limited to: optical storage media (e.g., CD-ROM and DVD), magneto-optical storage media (e.g., MO), magnetic storage media (e.g., magnetic tape or mobile hard disk), media with built-in rewritable non-volatile memory (e.g., memory card) and media with built-in ROM (e.g., ROM box).
[0108] For detailed description of this embodiment, reference may be made to the corresponding descriptions in the aforementioned embodiments, which will not be repeated here.
[0109] The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, and are not limitations. The above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.
[0110] In the present disclosure, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. The block diagrams of the devices, devices, equipment, and systems involved in the present disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagram. As will be appreciated by those skilled in the art, these devices, devices, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including", "comprising", "having", etc. are open words, referring to "including but not limited to", and can be used interchangeably with them. The words "or" and "and" used here refer to the words "and / or" and can be used interchangeably with them, unless the context clearly indicates otherwise. The words "such as" used here refer to the phrase "such as but not limited to", and can be used interchangeably with them.
[0111] Additionally, as used herein, "or" used in a list of items beginning with "at least one" indicates a separate list, so that, for example, a list of "at least one of A, B, or C" means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Furthermore, the word "exemplary" does not mean that the example described is preferred or better than other examples.
[0112] It should also be noted that in the system and method of the present disclosure, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present disclosure.
[0113] Various changes, substitutions, and modifications of the techniques described herein may be made without departing from the teachings defined by the appended claims. Furthermore, the scope of the claims of the present disclosure is not limited to the specific aspects of the processes, machines, manufactures, compositions of events, means, methods, and actions described above. Currently existing or later to be developed processes, machines, manufactures, compositions of events, means, methods, or actions that perform substantially the same functions or achieve substantially the same results as the corresponding aspects described herein may be utilized. Thus, the appended claims include such processes, machines, manufactures, compositions of events, means, methods, or actions within their scope.
[0114] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.
[0115] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.
Claims
1. A method for printing transparent audit, characterized in that: include: Start a background monitoring program, wherein the background monitoring program is used to monitor the global Hook hook function; Through the Hook mechanism of the Windows operating system, a global Hook hook function is set in the dynamic link library file, and the printing related parameters to be monitored are set to obtain the processed dynamic link library file; Establishing a hook between the global Hook hook function and the document printing related event API interface, and performing hook monitoring on the document printing related event API interface through the global Hook hook function; When it is detected that the target application of the document printing related event API interface is started, the processed dynamic link library file is injected into the target application by means of a hook injection method; When it is detected that the target application selects a printer to print a document, the background monitoring program acquires the printing-related parameters to be monitored by calling the document printing-related event API interface and records an audit message.
2. The method for printing transparent audit according to claim 1, characterized in that: When the target application is detected to be started, before injecting the processed dynamic link library file into the target application by hook injection, the method further includes: Start the background monitoring program and call the dynamic link library Hook DLL; A monitoring program is started which monitors document printing related events of the printer using the global Hook hook function.
3. The method for printing transparent audit according to claim 2, characterized in that: When the target application is detected to be started, the processed dynamic link library file is injected into the target application by a hook injection method, including: When it is detected that the target application is started, the processed dynamic link library file is automatically injected into the target application through the global Hook function.
4. The method for printing transparent audit according to claim 3, characterized in that: The method further comprises: When it is detected that the target application is closed, the global Hook function is automatically uninstalled; When it is detected that the global Hook function is uninstalled, resources are released according to a preset strategy.
5. The method for printing transparent audit according to claim 1, characterized in that: When it is detected that the target application selects a printer to print a document, the background monitoring program obtains the printing-related parameters to be monitored by calling the document printing-related event API interface and records an audit message, including: When it is detected that the target application selects a printer to print a document through the preset document format parameters, the background monitoring program obtains the printing related parameters to be monitored by calling the document printing related event API interface; The printing related parameters to be monitored are analyzed and processed to obtain analysis and processing results.
6. The method for printing transparent audit according to claim 5, characterized in that: The method further comprises: When it is detected that the target application has completed printing the document through the printer, the analysis and processing results of the printing-related parameters to be monitored are sent to a background server, so that the background server audits the analysis and processing results of the printing-related parameters to be monitored, and sends the audit results obtained by the audit to the target application; Receive the audit result sent by the background server.
7. The method for printing transparent audit according to claim 1, characterized in that: Establishing a hook between the global Hook hook function and the document printing related event API interface, and performing hook monitoring on the document printing related event API interface through the global Hook hook function, including: Establish a hook between the Mhook_SetHook function and the CreateDC interface for creating a device context environment, the DocumentProperties interface for printer configuration control function, the StartDoc interface for starting a print job, or the EndDoc interface for ending a print job; The Mhook_SetHook function is used to hook and monitor the CreateDC interface for creating the device context environment, the DocumentProperties interface for printer configuration control function, the StartDoc interface for starting a print job, or the EndDoc interface for ending a print job.
8. A computer device, characterized in that: The computer device comprises: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the method for printing transparent auditing described in any one of claims 1 to 7.
9. A computer-readable storage medium, characterized in that: The computer readable storage medium stores computer instructions for causing a computer to execute claims 1 to 7 YY+242158P Any method of printing transparent audit as described above.
10. A computer program product comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.