File safe reading whole-process control and receipt feedback method and system

Abstract

The invention provides an archive safe reading whole-process control and receipt feedback method and system, and the system comprises a management platform which is in communication connection with a borrowing examination and approval module and an examination and approval management and receipt management module. According to the invention, through the design of security policies of all links from application to utilization of services, the service utilization security guarantee of archive data in a network environment is completed, which comprises the technical points of borrowing auditing list reminding, utilization control, borrowing utilization condition receipt feedback and the like, so that the use security of archives is ensured; and dynamic information and a closed-loop chain of complete archive service utilization are formed. An archive utilization receipt process is added, the borrowing condition of an archive borrower is fed back through a background in a data recording form, and the feedback content can be counted, consulted and subjected to an abnormal reminding operation process and method, so that a layer of protection is added for the safety of system operation and the controllability of the utilization condition of a borrowing user.

Description

Technical Field

[0001] The present invention relates to the technical field of archive management, and in particular to a method and system for full-process authorization and control of secure archive reading and receipt feedback. Background Art

[0002] Archives utilization is an important manifestation of the value of archives work. While the development of emerging technologies such as information technology has promoted the generation, development and utilization of archives resources, it has also brought about security crises. It is urgent to strengthen the management of archives resources, analyze information security issues from multiple aspects, and build an information security assurance system from multiple dimensions.

[0003] Publication number "CN114548921A" discloses a method and system for managing the borrowing of archives, which proposes a process and method for online application and approval of archive borrowing through a software system, and provides early warning for over-borrowing. This technical solution implements the archive borrowing approval process and the steps of analyzing user borrowing behavior. However, the use of archives such as reading and downloading of approved archives cannot be tracked and controlled, which is not conducive to the closed-loop security protection and confidentiality control of archives.

[0004] Publication No. "CN115378904A" discloses a method, system, storage medium and device for sending a mail receipt, and specifically discloses a technical idea for generating a receipt based on reading information. The mail receipt is designed to solve the problem that the sender cannot grasp the situation of unread mails. The feedback mechanism does not grasp the other party's computer hardware environment and whether there are any illegal operations during the reader's file reading process. It is impossible to judge the abnormal situation of file utilization behavior. It is not conducive to the safe and controllable use of files.

[0005] How to increase the means of archive utilization and ensure the safety of archive utilization is an urgent problem that needs to be solved in current archive work. Summary of the invention

[0006] In view of this, in order to solve the problems existing in the technical background, the present invention proposes a method for full-process authorization control and receipt feedback of archive security reading

[0007] A file security reading full-process authorization control and receipt feedback system, comprising a management platform, characterized in that the management platform is communicatively connected with a borrowing approval module, an approval management module and a receipt management module;

[0008] In the borrowing approval module, the borrower submits a borrowing application to the archive administrator for approval. In the borrowing approval module, the administrator analyzes the borrowing authority settings based on the borrowing reason and borrowing content mentioned in the approval form and the statistical data of the borrower's previous borrowing and returning situations collected by the system, gives a borrowing opinion and sends it to the approval leader, and executes the borrowing process according to the approval opinion of the approval leader;

[0009] The approval management module manages the borrowed files according to the borrowing approval authority after the borrowing approval, and processes the files in the following ways according to the borrowing authority, including but not limited to: file desensitization, file masking, stamping with a special stamp for borrowing and utilization, stamping with an electronic file number stamp, watermark setting, and setting the number of times or time limit for utilization;

[0010] The receipt management module, after the borrower completes the borrowing, downloading, printing and other processes of the archive in the form of controlled reading, the system will send the archive utilization receipt to the archive security administrator (the archive administrator of non-pushed files) through the background. The archive security administrator (the archive administrator of non-pushed files) will determine whether there are any risks in the archive utilization process based on the receipt.

[0011] Furthermore, in the borrowing approval module, the contents of the borrowing approval form include but are not limited to: identity authentication, review management, approval management, authority management, and system reminder management, wherein the system reminder management contents are not displayed on the borrowing user interface but on the archive administrator page.

[0012] Furthermore, the content of the receipt management module includes but is not limited to: borrower information, borrowing method, borrowing time, number of times of use, and the hardware and software environment of the equipment used when the borrower's file is used.

[0013] Furthermore, in the receipt management module, the system will send a file utilization receipt to the file security administrator (the file administrator of non-pushed files) through the background. During the sending process, the borrower and the file administrator's page will not display the relevant content, and the file security administrator (the file administrator of non-pushed files) will judge whether the borrowing approval process is compliant, whether there are any abnormalities in the borrowing and utilization process, and whether the borrower's borrowing and utilization environment is safe according to the receipt situation, to ensure that there are no abnormal operations on the borrower and the file administrator's account, and that there is no account theft or system hacking, etc.

[0014] Furthermore, in the receipt management module, if the borrowing user does not use a network connection but independently configures a controlled reader in a stand-alone form, the receipt will be stored on the computer desktop in the form of an encrypted garbled "Archive Service Receipt" that cannot be read by a stand-alone machine. The borrowing user will extract it from the stand-alone machine through copying, burning a disc, or other forms, and submit it to the archives department. If the receipt is not submitted within the time limit, the system will automatically set the account to be abnormally disabled or submit the data to the archives security administrator (not the archives administrator who pushes files) for the administrator to modify the borrowing user's account permissions.

[0015] A method for full-process authorization and control and receipt feedback of secure reading of archives, applicable to any of the above-mentioned systems for full-process authorization and control and receipt feedback of secure reading of archives, characterized in that the archive administrator analyzes the borrowing situation of the borrower recorded in the system, approves the borrower's borrowing authority, submits the file in the reader for conversion, encryption, and distribution to the designated borrower, gives a temporary verification number for borrowing, sets a security label, and the designated borrower can read and print the encrypted file in a client-free environment after logging into the system. During the authorization and control reading process, the borrower is not aware of whether the file is encrypted, but a reading trace will be left in the system and borrowing feedback will be given to the archive security administrator (the archive administrator who does not push the file). The whole life cycle of the file can be archived in the system to trace back, complete the information recording and borrowing and utilization situation tracing functions, avoid the occurrence of leakage, prevent hacker intrusion, and achieve the purpose of security management.

[0016] The above technical solution has the following beneficial effects:

[0017] 1. The present invention completes the security protection of archive data service utilization through the design of security strategies for each link from application to utilization of the service, which includes technical points such as reminder of borrowing review list, utilization control, feedback on receipt of borrowing utilization, etc., to ensure the safety of archive use and form dynamic information and closed-loop chain of complete archive service utilization.

[0018] 2. Add a receipt process for archive use, and provide feedback on the borrowing status of archive borrowers in the form of data records through the background. The feedback content can be counted, consulted, and the operation process and methods for abnormal reminders can be added to ensure the safety of system operation and the controllable use of archive borrowers.

[0019] 3. The invention sets security barriers item by item in the approval of service use to grasp the situation of borrowers and users, and ensure the efficiency and safety of the service use process; through service restrictions in the use process, it ensures that the use of archives is within a reasonable range and does not get out of control, secondary loaning and unapproved use beyond authority do not occur, and borrowing and returning are completed on time; through the service situation abnormal receipt, the use environment of the borrowing account archives is grasped to prevent the account from being stolen, controlled, and used as a virtual account, thereby avoiding the loss of control of the archive system. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 It is a flow chart of online authorized reading of the present invention. DETAILED DESCRIPTION

[0021] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0022] See also Figure 1 As shown in the borrowing approval module: the borrower submits a borrowing application and sends it to the archive administrator for approval. The administrator analyzes the borrowing permission settings based on the borrowing reason and borrowing content mentioned in the approval form and the statistical data of the borrower's previous borrowing and returning situations collected by the system, gives borrowing opinions and sends them to the approval leader, and executes the borrowing process based on the approval opinion of the approval leader.

[0023] The contents of the borrowing approval form include but are not limited to: identity authentication, review management (referring to the review of the scope of archive borrowing), approval management (approval process of leaders who meet the authority of archive borrowing approval, such as leaders of the borrower's unit, leaders of the archive management unit, leaders of the unit of the archive responsible person, etc.), authority management (archive administrator operation authority management), system reminder management (displaying the borrowing and use process and return status statistics of borrowers, including but not limited to: the number of borrowing and use applications initiated, the number of approved borrowing and use files, the number of readings, the number of downloads, the borrowing and use equipment hardware and software records and abnormal situations, the borrowing and use IP abnormal records and other information). The system reminder management content is not displayed on the borrower interface, but on the archive administrator page.

[0024] Approval management module: After borrowing approval, the borrowed archives are managed according to the borrowing approval authority, and the archives are processed in the following ways according to the borrowing authority, including but not limited to: archive desensitization (setting sensitive words, leaking vocabulary, replacing relevant content with relevant codes or displaying with *), archive masking (blocking or smearing the content that does not belong to the borrower's request to borrow or the content that does not meet the borrower's reading authority), stamping with special stamps for borrowing (including but not limited to: invalid copy, for reading only, scanned copy of original, archive query and other special stamps), stamping with electronic file number stamp (including information such as the content of the general file number stamp and the identification code of the special file number stamp), watermark setting (including but not limited to information such as borrower information, borrowing method, borrowing time, borrowing temporary verification number, etc.), number of uses (including but not limited to number of readings, printings, downloads, etc.) or time limit setting (generally based on standard time, you can set hours or days).

[0025] The number of times or time limit settings are the authorized reading content, which mainly refers to authorizing and controlling the number of times or the length of time that borrowers can borrow. Its specific implementation methods are as follows:

[0026] According to the approval requirements, the permission setting is performed for the borrowing and using archives. At this time, the system receives the instruction and converts the format of the borrowing and using archives. The format setting is mainly based on the format that can be recognized and opened by the reading interface provided by the system. The available formats include but are not limited to PDF, OFD, etc. The archives that have completed the format conversion are encrypted. The encryption algorithm includes but is not limited to: based on the preset RSA asymmetric encryption algorithm, AES symmetric encryption algorithm, file compression encryption. The archive administrator sets relevant watermarks and permission settings for the encrypted archives according to the permission requirements. The watermark settings include but are not limited to: borrower information, borrowing and using methods, borrowing and using time, borrowing temporary verification number and other information. The position, transparency, font, font size, aspect ratio, display size, rotation angle, foreground background can be set. Multiple watermarks can be set in one plan. The permission settings include but are not limited to: whether to allow copying text, whether to allow printing, limit the use time, limit the number of uses, and distribute time-limited licenses. The archives that have completed encryption and setting will generate temporary use archives. The archive administrator distributes this temporary use archive to the borrower's use end.

[0027] The borrowing user installs a dedicated secure document reader on the user end. When the reader is installed, it will automatically read the software and hardware environment of the user end. If the software and hardware environment belongs to the red line data (such as the brand and model of the software and hardware processor of the borrowing user's archive use equipment, the brand and version of the operating system, the computer IP field and other data are not in the standard list, and the borrowing user violates the regulations to open wifi, camera, Bluetooth and other data transmission devices, etc.), the reader will not be able to open. After opening the reader, the borrowing user logs in with the account. When finding the use document, enter the temporary verification number or insert the identity authentication USB disk for use authentication, execute the encryption security policy to decrypt the temporary use file and make a record, and start the file use. The file use interface is forced to be full screen to prevent the Print key from copying the screen. If a limited number of times is set, it means that the file can only be opened for reading (or downloaded, printed, set according to the borrowing use requirements). The system automatically determines the number of clicks, and it will not be opened if the number exceeds the number. If a limited time is set, it means that the file can only be opened for reading (or downloaded, printed, set according to the borrowing use requirements). The system uses a countdown or opens the use according to the reader time calibrator. Regardless of whether the number of times or the time limit reaches the maximum value, the exploit is completed. After the exploit is completed, the temporary verification code becomes invalid and the system automatically deletes the cache.

[0028] Receipt management module: After the borrower completes the borrowing, downloading, printing and other processes of the archives in the form of authorized reading, the system will send the archive use receipt to the archive security administrator (archive administrator of non-pushed files) through the background. The borrower and archive administrator pages do not display the relevant content of the sending process. The archive security administrator (archive administrator of non-pushed files) determines whether the borrowing approval process is compliant, whether there are any abnormalities in the borrowing and use process, and whether the borrower's borrowing and use environment is safe based on the receipt. This ensures that there are no risks in the archive use process, and ensures that there are no abnormal operations on the borrower and archive administrator accounts, and that the accounts are not stolen or the system is attacked by hackers. The process and receipt information will be permanently stored in the system and can be checked for life. If the borrowing user does not use a network connection, but instead independently configures a controlled reader in a stand-alone form, the receipt will be stored on the computer desktop in the form of an encrypted garbled "Archive Service Receipt" that cannot be read by a stand-alone machine. The borrowing user will extract it from the stand-alone machine through copying, burning a disc, or other means, and submit it to the archives department. If the receipt is not submitted within the time limit, the system will automatically set the account to be abnormally disabled or submit the data to the archives security administrator (not the archives administrator who pushes files) to modify the borrowing user's account permissions.

[0029] The receipt content includes but is not limited to: borrower information, borrowing method (such as reading, downloading, printing, etc.), borrowing time (detailed to year, month, day, hour, minute and second, and statistics of reading time. If the file is opened multiple times, record the time and duration of each use), number of uses (such as reading, downloading, printing, etc.), the hardware and software environment of the device used by the borrower when using the file (including but not limited to: CPU processor information, hard disk serial number, motherboard serial number, storage information, operating system version information, computer IP address, mac address and other information, whether Bluetooth, infrared, wireless and other devices are turned on).

[0030] The receipt can set red line data, such as the time to open the file exceeds * hours or the number of attempts to open it exceeds * times, the brand and model of the hardware and software processor of the borrower's file utilization equipment, the brand and version of the operating system, the computer IP field and other data, the borrower's violation of the opening of wifi and other data transmission devices, etc. If there is data information that violates the red line, the receipt feedback will give a reminder and allow the file security administrator (not the file administrator who pushes the file) to deal with it (such as prohibiting borrowing, downloading, printing, etc. or prohibiting certain behaviors for a certain period of time or even deactivating the account).

[0031] In the actual operation process, the archive administrator analyzes the borrowing situation of the borrower recorded in the system, approves the borrower's borrowing rights (unreadable, partially readable, fully readable, downloadable, printable, etc.), submits the file in the web browser for conversion, encryption, and distribution to the designated borrower, gives a temporary verification number for borrowing (or through the use of an identity authentication USB flash drive, etc.), and sets security labels (reading time, number of times, watermarks, etc.). After logging into the system, the designated borrower can read and print the encrypted file in a clientless environment. During the authorized reading process, the borrower does not know whether the file is encrypted, but a reading trace will be left in the system and the archive security administrator (the archive administrator who does not push the file) will be given borrowing feedback. The entire life cycle of the file can be archived in the system to trace the information record and borrowing and utilization situation, avoid leakage, prevent hacker intrusion, and achieve the purpose of security management.

[0032] Embodiment 2, based on embodiment 1, in the architectural design of controlled reading of this embodiment, other computers, information means and methods are adopted to realize the control of reading, such as not using the network connection form, and independently configuring the control reader in the form of a stand-alone machine. However, no matter which method is used to load information and encrypt data, the authorized reading must be controllable, and there must be restrictions on the borrowing time or the number of openings, and the borrowing and use archives must be independently encrypted. After reading, the temporary verification code must be invalidated and the cached data must be automatically deleted.

[0033] In the architectural design of the receipt, other computers, information means and methods, and other process forms may be used to realize the feedback of borrowing and utilization information receipt. However, no matter which method is used, the receipt should contain the borrower's account information and the number of times, duration, etc. of file browsing, downloading, and copying. The recipient of the receipt must not be the borrower himself.

[0034] Through controlled reading, illegal operations in the process of reading archives can be controlled. The receipt information can trace whether the archive utilization environment is safe and whether the borrowing account is used maliciously. This is the inventive technical point of this technical solution. The content, approval process and method of controlled reading and receipts may vary, but the form of controlling the entire process of archive use and timely feedback of information remains unchanged. The above describes the basic principles and main features of the present invention. Those skilled in the art should understand that the present invention is not limited by the above embodiments. The above embodiments and descriptions are only to illustrate the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention will have various changes and improvements, which fall within the scope of the invention to be protected. The scope of protection of the invention is defined by the attached claims and their equivalents.

Claims

1. A file security reading full-process authorization control and receipt feedback system, including a management platform, characterized in that: The management platform is communicatively connected with a borrowing approval module, an approval management module and a receipt management module; In the borrowing approval module, the borrower submits a borrowing application to the archive administrator for approval. In the borrowing approval module, the administrator analyzes the borrowing authority settings based on the borrowing reason and borrowing content mentioned in the approval form and the statistical data of the borrower's previous borrowing and returning situations collected by the system, gives a borrowing opinion and sends it to the approval leader, and executes the borrowing process according to the approval opinion of the approval leader; The approval management module manages the borrowed files according to the borrowing approval authority after the borrowing approval, and processes the files in the following ways according to the borrowing authority, including but not limited to: file desensitization, file masking, stamping with a special stamp for borrowing and utilization, stamping with an electronic file number stamp, watermark setting, and setting the number of times or time limit for utilization; The receipt management module, after the borrower completes the borrowing, downloading, printing and other processes of the archive in the form of controlled reading, the system will send the archive utilization receipt to the archive security administrator through the background. The archive security administrator will judge whether there are any risks in the archive utilization process based on the receipt.

2. According to claim 1, a file security reading full-process authorization control and receipt feedback system is characterized in that: The contents of the borrowing approval module include but are not limited to: identity authentication, review management, approval management, authority management, and system reminder management, wherein the system reminder management contents are not displayed on the borrowing user interface but on the archive administrator page.

3. According to claim 1, a system for full-process authorization and control of secure reading of archives and receipt feedback is characterized in that: The content of the receipt management module includes but is not limited to: borrower information, borrowing method, borrowing time, number of times of use, and the hardware and software environment of the equipment used when the borrower's file is used.

4. According to claim 1, a system for full-process authorization and control of secure reading of archives and receipt feedback is characterized in that: In the receipt management module, the system will send an archive utilization receipt to the archive security administrator through the background. During the sending process, the borrower and the archive manager's pages will not display the relevant content and the archive security administrator will judge whether the borrowing approval process is compliant, whether there are any abnormalities in the borrowing process, and whether the borrower's borrowing environment is safe based on the receipt situation, to ensure that there are no abnormal operations in the borrower and the archive manager's accounts, and that there is no account theft or system hacking.

5. According to claim 1, a file security reading full-process authorization control and receipt feedback system is characterized in that: In the receipt management module, if the borrower does not use a network connection but instead independently configures a controlled reader in a stand-alone form, the receipt will be stored on the computer desktop in the form of an encrypted garbled "Archive Service Receipt" that cannot be read by a stand-alone machine. The borrower will extract it from the stand-alone machine through copying, burning a disc, or other forms, and submit it to the archives department. If the receipt is not submitted within the time limit, the system will automatically set the account to be abnormally disabled or submit the data to the archives security administrator to modify the borrower's account permissions.

6. A method for full-process authorization and control of secure reading of archives and receipt feedback, applicable to the full-process authorization and control of secure reading of archives and receipt feedback system as claimed in any one of claims 1 to 7, characterized in that: The archive administrator analyzes the borrowing history of the borrowers recorded in the system, approves the borrowers' borrowing permissions, submits the files in the reader for conversion, encryption, and distribution to designated borrowers, gives temporary verification numbers for borrowing, sets security labels, and designates that borrowers can read and print encrypted files in a clientless environment after logging into the system. During the authorized reading process, borrowers are not aware of whether the files are encrypted, but reading traces will be left in the system and feedback will be given to the archive security administrator. The entire life cycle of the file can be archived in the system to trace back the information, complete the information recording and borrowing and utilization traceability functions, avoid confidentiality leaks, prevent hacker intrusions, and achieve the purpose of security management.

Images