File operation record traceability system and traceability method

Abstract

The invention relates to a file operation record traceability system and traceability method. In the system, an intelligent terminal adds a preset file header for an original file to generate a target file, and the preset file header comprises file marking information used for marking the uniqueness of the file and file circulation information used for recording a file user. The operation system of the intelligent terminal records operation record information of the target file in the process that the intelligent terminal uses the target file. And the intelligent terminal uploads the current user information in the operation record information, the file marking information and the file circulation information to the cloud server and stores the current user information. The management terminal sends a viewing request containing the file marking information to the cloud server, and the cloud server issues the operation record information and the user information corresponding to the file marking information to the management terminal. According to the method, the file header and the operating system are used for recording the file operation record, and the cloud is used for storing the file operation record, so that the whole use process of the file can be traced conveniently.

Description

Technical Field

[0001] The present invention relates to the field of data security, and more specifically, to a file operation record traceability system and a traceability method. Background Art

[0002] In the information age, information security is becoming increasingly important to users. In the existing file usage scenarios, the leakage of private files is a rather thorny problem. Once private files are leaked, on the one hand, it will cause security incident problems, and on the other hand, it is very difficult or even impossible to quickly find the source of the leakage. To solve this problem, existing systems usually install proprietary tools in the cloud system and the client to encrypt files, and then the cloud system needs to decrypt and use the files, and records are made during the use process for easy traceability. The drawback of this method is that once the file is decrypted and used, the operations of the user on the file can no longer be traced. Summary of the Invention

[0003] The technical problem to be solved by the present invention is to provide a file operation record traceability system and a traceability method.

[0004] The technical solution adopted by the present invention to solve its technical problem is to construct a file operation record traceability system, including an intelligent terminal, a cloud server, and a management terminal. The cloud server is communicatively connected to the intelligent terminal and the management terminal;

[0005] The intelligent terminal is used to add a preset file header to the original file to generate a target file. The preset file header includes file marking information for marking the uniqueness of the file and file transfer information for recording the file user; and the operating system of the intelligent terminal records the operation record information of the target file during the use of the target file; and uploads the current user information in the operation record information, the file marking information, and the file transfer information to the cloud server;

[0006] The management terminal is used to send a viewing request including the file marking information to the cloud server;

[0007] The cloud server is used to save the operation record information, the file marking information, and the user information, and send the operation record information and user information corresponding to the file marking information in the viewing request to the management terminal.

[0008] Further, in the file operation record traceability system of the present invention, the intelligent terminal is further used to record the current user information into the file transfer information after the target file changes users.

[0009] Further, in the file operation record traceability system according to the present invention, the smart terminal calls the application corresponding to the target file to use the target file.

[0010] Further, in the file operation record traceability system according to the present invention, an operating system extension module for recording the operation record information of the user using the target file is installed in the operating system of the smart terminal;

[0011] After the smart terminal derives a new target file from the target file, the new target file inherits the file marking information and file transfer information of the target file and generates new file marking information.

[0012] Further, in the file operation record traceability system according to the present invention, the operation record information includes at least one of file usage time, file editing operation, file copying operation, file transmission operation, file printing operation, and file screenshot operation.

[0013] In addition, the present invention also provides a file operation record traceability method, including the following steps:

[0014] Adding a preset file header to the original file to generate a target file, where the preset file header includes file marking information for marking the uniqueness of the file and file transfer information for recording the file user;

[0015] The operating system of the smart terminal records the operation record information of the target file during the process of the smart terminal using the target file;

[0016] The smart terminal uploads the current user information in the operation record information, the file marking information, and the file transfer information to the cloud server for storage;

[0017] The management terminal sends a viewing request including the file marking information to the cloud server, and the cloud server sends the operation record information and user information corresponding to the file marking information to the management terminal.

[0018] Further, in the file operation record traceability method according to the present invention, the method further includes:

[0019] Recording the current user information into the file transfer information after the user of the target file is changed.

[0020] Further, in the file operation record traceability method according to the present invention, the smart terminal using the target file includes:

[0021] The smart terminal calls the application corresponding to the target file to use the target file.

[0022] Further, in the file operation record traceability method of the present invention, before the operating system of the intelligent terminal records the operation record information of the target file during the use of the target file by the intelligent terminal, it further includes: adding an operating system extension module for recording the operation record information of the user's file use to the operating system of the intelligent terminal;

[0023] After adding the preset file header to the original file to generate the target file, it further includes: after the intelligent terminal derives a new target file from the target file, the new target file inherits the file marker information and file transfer information of the target file, and generates new file marker information.

[0024] Further, in the file operation record traceability method of the present invention, the operation record information includes at least one of file use time, file editing operation, file copying operation, file transmission operation, file printing operation, and file screenshot operation.

[0025] Implementing a file operation record traceability system and traceability method of the present invention has the following beneficial effects: The present invention uses the file header and the operating system to record the file operation record, and uses the cloud to save the file operation record, so as to facilitate tracing the entire use process of the file. Description of the Drawings

[0026] The present invention will be further described below in conjunction with the drawings and embodiments. In the drawings:

[0027] Figure 1 is a schematic diagram of a file operation record traceability system provided by an embodiment of the present invention;

[0028] Figure 2 is a flowchart of a file operation record traceability method provided by an embodiment of the present invention. Detailed Embodiments

[0029] In order to have a clearer understanding of the technical features, objectives, and effects of the present invention, the specific embodiments of the present invention will now be described in detail with reference to the drawings.

[0030] In a preferred embodiment, refer to Figure 1, this embodiment provides a file operation record traceability system, which is used to trace the file flow process and usage process. The file operation record traceability system includes an intelligent terminal, a cloud server, and a management terminal. The cloud server is communicatively connected to the intelligent terminal and the management terminal. It can be understood that the file operation record traceability system of this embodiment can simultaneously access multiple intelligent terminals and multiple management terminals. This embodiment takes one intelligent terminal and one management terminal as an example for illustration, and multiple intelligent terminals and multiple management terminals can refer to the implementation. Optionally, the intelligent terminal can be a desktop computer, a laptop computer, a tablet computer, a smart phone, a vehicle-mounted terminal, etc.; the management terminal can be a desktop computer, a laptop computer, a tablet computer, a smart phone, a vehicle-mounted terminal, etc.

[0031] The intelligent terminal is the terminal for users to view and use files. Since the operating systems of existing intelligent terminals cannot record the operation record information of users using files and upload it to the cloud server, in order to realize the traceability of file usage records, this embodiment needs to first install an operating system extension module for recording the operation record information of users using target files on the operating systems of existing intelligent terminals. This operating system extension module is different from ordinary application programs. Ordinary application programs are only installed in the operating system, while the operating system extension module of this embodiment is part of the operating system.

[0032] After installing the operating system extension module on the operating system of the intelligent terminal, it is also necessary to cooperate with the files in the specific format of this embodiment to realize the recording of the file usage process. The intelligent terminal of this embodiment needs to add a preset file header to the original file to generate a target file. The preset file header includes file marking information for marking the uniqueness of the file and file transfer information for recording the file user. Each target file has a unique file marking information, that is, the target file and the file marking information are in one-to-one correspondence. When the user of the target file is changed, the intelligent terminal records the current user information into the file transfer information. The file transfer information records all file users, that is, every time the target file is transmitted or used, the file user is recorded once. That is to say, all users who have used the target file will be recorded in the file transfer information. Optionally, the file user can be information such as the user's real name, registered account, physical address of the intelligent terminal, IP address, etc. that can uniquely identify the user's identity.

[0033] The preset file header of the target file stores file marking information and file transfer information. To enable the operating system of the intelligent terminal to find the positions of the file marking information and file transfer information in the preset file header, in this embodiment, a first marking bit and a second marking bit for marking positions are respectively set for the file marking information and file transfer information in the preset file header, that is, the first marking bit is used to mark the position of the file marking information, and the second marking bit is used to mark the position of the file transfer information. When using the target file, the operating system of the intelligent terminal can identify the first marking bit and the second marking bit, and read the file marking information in the preset file header through the first marking bit, and read the file transfer information in the preset file header through the second marking bit.

[0034] The so-called original file refers to a file that does not use the file operation record tracing system of this embodiment, that is, any file in the prior art. Here, a file refers to a data set containing a certain amount of data. For example, the original file can be a word file, a PDF file, a picture file, an audio file, a video file, a drawing file, etc. It can be understood that after the original file is converted into a target file, the subsequent target file can be directly used after flowing to other intelligent terminals, and there is no need to add a preset file header to the target file again.

[0035] It should be noted that after the intelligent terminal adds a preset file header to the original file to generate a target file, it will not affect the normal use of the original file, and the operating system can still call the application program corresponding to the target file when using the target file. That is to say, after the original file is converted into a target file in a specific format, the corresponding relationship between the original file and the application program is still retained, so as to ensure that the original file can be used normally after being converted into a target file.

[0036] When using the target file, the intelligent terminal calls the application program corresponding to the target file to use the target file. During the use of the target file, the operating system of the intelligent terminal records the operation record information of the target file during the use of the target file. The operation record information refers to various operations imposed by the user during the use of the target file. As an option, the operation record information includes but is not limited to file use time, file editing operation, file copying operation, file transmission operation, file printing operation, file screenshot operation, etc. The specific content of the operation record information to be recorded can be selected according to needs during the system setting process.

[0037] After the operating system of the intelligent terminal obtains the operation record information, it uploads the operation record information, the current user information in the file marking information and file transfer information, and the corresponding relationship between the operation record information, the file marking information and the current user information to the cloud server.

[0038] After the cloud server receives the operation record information, file marking information, current user information, and their corresponding relationships, it stores the operation record information, file marking information, current user information, and their corresponding relationships in the cloud server. To facilitate data storage and user search, since the file marking information is the unique marking information of the target file, data is stored based on the file marking information, that is, the operation record information and user information corresponding to the same file marking information are stored together. As an option, when storing the operation record information and user information corresponding to the same file marking information, they are stored in chronological order.

[0039] When the user needs to view the target file for traceability, the management terminal sends a viewing request containing the file marking information to the cloud server. The remote server searches for the operation record information and user information corresponding to the file marking information, and sends the obtained operation record information and user information to the management terminal. The management terminal displays the operation record information and user information for the user to view. Further, if you want to accurately search for the operation record information of a certain user using a certain target file, the viewing request sent by the management terminal contains the file marking information and user information. Then the cloud server searches for the operation record information corresponding to both the file marking information and the user information, and sends the obtained operation record information to the management terminal. The management terminal displays the operation record information for the user to view.

[0040] The file operation record traceability system of this embodiment uses the file header and the operating system to record the file operation record, and uses the cloud to save the file operation record, so as to facilitate the traceability of the entire usage process of the file.

[0041] In a file operation record traceability system of some embodiments, in addition to the separate use and transfer use of the target file in the above embodiments, there will also be cases where new files are generated based on the target file, such as copying the target file to generate a new file, or saving the modified target file as a new file, or changing the storage format of the target file, etc. In response to this situation, after the intelligent terminal in this embodiment derives a new target file from the target file, the new target file will inherit the file marking information and file transfer information of the target file, so that the genetic information of the target file can be inherited to facilitate subsequent traceability requirements. In addition, the new target file still contains the preset file header and the uniquely corresponding new file marking information, that is, the new target file can still record the file transfer information like the target file in the above embodiments, and cooperate with the operating system to complete operations such as uploading the operation record information of the new target file, etc. For details, please refer to the above embodiments. The derivative file of this embodiment based on the target file inherits the genetic information of the target file, which can ensure the continuous storage of file usage information and facilitate file traceability.

[0042] In a preferred embodiment, refer toFigure 2 , this embodiment provides a method for tracing the origin of file operation records, which is applied to the file operation record tracing system of the above embodiment. Specifically, the method for tracing the origin of file operation records includes the following steps:

[0043] Step S1: Add a preset file header to the original file to generate a target file. The preset file header includes file marking information for marking the uniqueness of the file and file transfer information for recording the file user.

[0044] Specifically, the intelligent terminal is the terminal for users to view and use files. Since the existing operating systems of intelligent terminals cannot record the operation record information of users using files and upload it to the cloud server, in order to realize the traceability of file usage records, this embodiment needs to first install an operating system extension module for recording the operation record information of users using the target file on the operating system of the intelligent terminal. This operating system extension module is different from ordinary application programs. Ordinary application programs are only installed in the operating system, while the operating system extension module of this embodiment is part of the operating system.

[0045] After installing the operating system extension module on the operating system of the intelligent terminal, it is also necessary to cooperate with the files in the specific format of this embodiment to realize the recording of the file usage process. The intelligent terminal of this embodiment also needs to add a preset file header to the original file to generate a target file. The preset file header includes file marking information for marking the uniqueness of the file and file transfer information for recording the file user. Each target file has unique file marking information, that is, the target file and the file marking information are in one-to-one correspondence. The intelligent terminal records the current user information into the file transfer information after the target file changes users. The file transfer information records all file users, that is, every time the target file is transmitted or used, the file user is recorded once. That is to say, all users who have used the target file will be recorded into the file transfer information. As an option, the file user can be information such as the user's real name, registered account, physical address of the intelligent terminal, IP address, etc. that can uniquely identify the user's identity.

[0046] The original file mentioned here refers to a file that has not used the file operation record tracing system of this embodiment, that is, any file in the prior art. A file refers to a data set containing a certain amount of data. For example, the original file can be a word file, a PDF file, a picture file, an audio file, a video file, a drawing file, etc. It can be understood that after the original file is converted into a target file, when the subsequent target file is transferred to other intelligent terminals, it can be directly used without adding a preset file header to the target file again.

[0047] It should be noted that after the intelligent terminal generates the target file by adding a preset file header to the original file, it will not affect the normal use of the original file. When using the target file, the operating system of the intelligent terminal can still call the application corresponding to the target file. That is to say, after converting the original file into a target file in a specific format, the corresponding relationship between the original file and the application is still retained, so as to ensure the normal use of the original file after it is converted into the target file.

[0048] Step 2: The operating system of the intelligent terminal records the operation record information of the target file during the process of the intelligent terminal using the target file.

[0049] Specifically, when the intelligent terminal uses the target file, it calls the application corresponding to the target file to use the target file. During the use of the target file, the operating system of the intelligent terminal records the operation record information of the target file during the process of using the target file. The operation record information refers to various operations imposed by the user during the process of using the target file. As an option, the operation record information includes but is not limited to file usage time, file editing operations, file copying operations, file transmission operations, file printing operations, file screenshot operations, etc. The specific content of the operation record information to be recorded can be selected according to needs during the system setup process.

[0050] Step S3: The intelligent terminal uploads the current user information in the operation record information, file marking information, and file circulation information to the cloud server and stores it.

[0051] Specifically, after the operating system of the intelligent terminal obtains the operation record information, it uploads the current user information in the operation record information, file marking information, and file circulation information, as well as the corresponding relationship between the operation record information, file marking information, and current user information to the cloud server.

[0052] After receiving the operation record information, file marking information, current user information, and their corresponding relationships, the cloud server stores the operation record information, file marking information, current user information, and their corresponding relationships in the cloud server. For the convenience of data storage and user search, since the file marking information is the unique marking information of the target file, data is stored based on the file marking information, that is, the operation record information and user information corresponding to the same file marking information are stored together. As an option, when storing the operation record information and user information corresponding to the same file marking information together, they are stored in chronological order.

[0053] Step S4: The management terminal sends a viewing request containing the file marking information to the cloud server, and the cloud server sends the operation record information and user information corresponding to the file marking information to the management terminal.

[0054] Specifically, when the user needs to view the target file for traceability, the management terminal sends a viewing request containing file marking information to the cloud server. The remote server searches for the operation record information and user information corresponding to the file marking information, and sends the obtained operation record information and user information to the management terminal. The management terminal displays the operation record information and user information for the user to view. Further, if you want to accurately search for the operation record information of a certain user using a certain target file, the viewing request sent by the management terminal includes file marking information and user information. Then the cloud server searches for the operation record information corresponding to both the file marking information and the user information, and sends the obtained operation record information to the management terminal. The management terminal displays the operation record information for the user to view.

[0055] The file operation record traceability method of this embodiment uses the file header and the operating system to record file operation records, and uses the cloud to store file operation records, so as to facilitate tracing the entire usage process of the file.

[0056] In summary, the advantages of the present invention compared with the prior art are as follows: First, after the user obtains the file, the lineage of the file is very clear, which is convenient for the file to be used as a favorable proof in asset transactions to avoid disputes; Second, after the user obtains the file, any behavior of the user such as copying, transmitting, printing, and screenshotting will be monitored, and it is very easy to trace the file behavior and find the source of file leakage.

[0057] In this specification, the various embodiments are described in a progressive manner. The key point of each embodiment is to illustrate the differences from other embodiments. The same or similar parts among the various embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method part.

[0058] Those skilled in the art can further realize that the units and algorithm steps of each example described in combination with the embodiments disclosed in this article can be implemented by electronic hardware, computer software, or a combination of the two. To clearly illustrate the interchangeability of hardware and software, the components and steps of each example have been generally described according to functions in the above description. Whether these functions are executed in a hardware or software manner depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present invention.

[0059] The steps of the methods or algorithms described in connection with the embodiments disclosed herein may be implemented directly in hardware, in software modules executed by a processor, or in a combination thereof. The software modules may be placed in a random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium well-known in the art.

[0060] The above embodiments are only for illustrating the technical concept and features of the present invention, and the purpose thereof is to enable those skilled in the art to understand the content of the present invention and implement it accordingly, and shall not limit the protection scope of the present invention. All equivalent changes and modifications made in accordance with the scope of the claims of the present invention shall fall within the scope covered by the claims of the present invention.

Claims

1. A file operation record tracing system, characterized in that, it includes an intelligent terminal, a cloud server and a management terminal, and the cloud server is communicatively connected to the intelligent terminal and the management terminal; the intelligent terminal is used to add a preset file header to the original file to generate a target file, and the preset file header includes file marking information for marking the uniqueness of the file and file transfer information for recording the file user; and the operating system of the intelligent terminal records the operation record information of the target file during the process of using the target file; and uploads the current user information in the operation record information, the file marking information and the file transfer information to the cloud server; the management terminal is used to send a viewing request containing the file marking information to the cloud server; the cloud server is used to save the operation record information, the file marking information and the user information, and send the operation record information and user information corresponding to the file marking information in the viewing request to the management terminal.

2. The file operation record tracing system according to claim 1, characterized in that, the intelligent terminal is further used to record the current user information into the file transfer information after the target file changes users.

3. The file operation record tracing system according to claim 1, characterized in that, the intelligent terminal calls the application program corresponding to the target file to use the target file.

4. The file operation record tracing system according to claim 1, characterized in that, the operating system of the intelligent terminal is installed with an operating system extension module for recording the operation record information of the user using the target file; after the intelligent terminal derives a new target file from the target file, the new target file inherits the file marking information and file transfer information of the target file and generates new file marking information.

5. The file operation record tracing system according to claim 1, characterized in that, the operation record information includes at least one of file usage time, file editing operation, file copying operation, file transmission operation, file printing operation, and file screenshot operation.

6. A file operation record tracing method, characterized in that, it includes the following steps: adding a preset file header to the original file to generate a target file, and the preset file header includes file marking information for marking the uniqueness of the file and file transfer information for recording the file user; the operating system of the intelligent terminal records the operation record information of the target file during the process of the intelligent terminal using the target file; the intelligent terminal uploads the operation record information, the file marking information and the current user information in the file transfer information to the cloud server for storage; the management terminal sends a viewing request containing the file marking information to the cloud server, and the cloud server sends the operation record information and user information corresponding to the file marking information to the management terminal.

7. The file operation record tracing method according to claim 6, characterized in that, the method further includes: After the user of the target file is changed, record the current user information into the file transfer information.

8. The file operation record traceability method according to claim 6, characterized in that the use of the target file by the intelligent terminal includes: the intelligent terminal calls the application corresponding to the target file to use the target file.

9. The file operation record traceability method according to claim 6, characterized in that before the operating system of the intelligent terminal records the operation record information of the target file during the use of the target file by the intelligent terminal, it further includes: adding an operating system extension module for recording the operation record information of the user using the file to the operating system of the intelligent terminal; after generating the target file by adding a preset file header to the original file, it further includes: after the intelligent terminal derives a new target file from the target file, the new target file inherits the file mark information and file transfer information of the target file, and generates new file mark information.

10. The file operation record traceability method according to claim 6, characterized in that the operation record information includes at least one of file use time, file editing operation, file copying operation, file transmission operation, file printing operation, and file screenshot operation.

Images