A cross-platform optical disc data protection method and system based on transparent encryption strategy

Abstract

The present invention discloses a cross-platform optical disc data protection method and system based on a transparent encryption strategy, which is applied to scenarios where optical disc data is securely decrypted. The method includes: selecting a self-decryption program for the current operating platform from a self-decryption program combination, first decrypting an encrypted metadata file; using the decrypted detection address to continuously determine whether the optical disc is in an Internet environment, and sending a prompt using the decrypted alarm address as long as it is determined that the optical disc is in an Internet environment; only when the optical disc is in an offline environment and the received user-input password matches the decryption password, calling the file system open source library under the current operating platform to decrypt the encrypted burned file. The self-decryption program combination of the present invention supports cross-platform decryption; continuously monitors the environment in which the optical disc is located to improve the security of optical disc data decryption; and directly calls the file system open source library under the current operating platform for decryption, without the need to install additional software, thereby reducing usage costs.

Description

Technical Field

[0001] The present invention relates to the technical field of data security, and in particular to a cross-platform optical disc data protection method and system based on a transparent encryption strategy. Background Art

[0002] In certain specific fields where data security is strictly required, optical discs are often used to transfer important data to prevent data leakage or hacker attacks.

[0003] In the process of implementing the technical solution of the present invention, at least the following technical problems are found in the prior art:

[0004] (1) Since traditional burning systems rely on specific operating platforms, such as Windows-specific drivers, the operating platform used in the existing CD data decryption process must be consistent with the operating platform used in the encryption burning process in order to complete decryption. For example, if the encryption burning process is completed on the Windows operating platform, the decryption process must also be performed on the Windows operating platform. If the decryption process is performed on the Linux operating platform instead, decryption will not be possible. This strategy of strictly maintaining consistency in operating platforms will result in the existing CD data decryption process being unable to be performed across platforms, resulting in poor compatibility and difficulty in unified management of the CD decryption process in heterogeneous environments.

[0005] (2) In the traditional CD data decryption process, there is a lack of security supervision, which leads to security risks for the CD data. The CD data may be leaked or attacked by hackers.

[0006] (3) Traditional CD data decryption methods rely on specific software or client applications to decrypt CD data. The usage process is cumbersome, resulting in low decryption efficiency and poor customer experience.

[0007] In summary, traditional CD data decryption methods cannot meet actual usage needs. Summary of the Invention

[0008] The present invention provides a cross-platform optical disc data protection method and system based on a transparent encryption strategy, which solves the problem that traditional optical disc data decryption methods cannot meet actual usage requirements.

[0009] In a first aspect, the present invention provides a cross-platform optical disc data protection method based on a transparent encryption strategy, which is applied to a scenario where optical disc data is securely decrypted. The optical disc stores a burned file encrypted using the transparent encryption strategy, an encrypted metadata file using the transparent encryption strategy, and a multi-platform self-decryption program combination; the encrypted metadata file includes an encrypted detection address and an encrypted alarm address; the multi-platform self-decryption program combination includes multiple self-decryption programs used under different versions of Windows operating platforms and multiple self-decryption programs used under different versions of Linux operating platforms; each self-decryption program has its own alarm module; the method includes:

[0010] When the drive CD starts to decrypt, the self-decryption program combination of the multiple platforms is read, and the self-decryption program corresponding to the current operating platform is selected;

[0011] Decrypting the encrypted metadata file using a selected self-decryption program, and reading the detection address and the alarm address from the decrypted metadata file;

[0012] By continuously sending network requests to the detection address and detecting whether a network response is received, it is continuously determined whether the optical disc is in an Internet environment;

[0013] Once it is determined that the optical disc is in an Internet environment, the alarm module in the selected self-decryption program is used to send an alarm message to the alarm address for alarm prompting;

[0014] Only when the CD is in an offline environment and the received user-entered password matches the decryption password, the self-decryption program will call the file system open source library under the current operating platform to create an encryption and decryption file system using a transparent encryption strategy to decrypt the encrypted burned file and obtain the decrypted burned file.

[0015] Optionally, before the step of driving the optical disc to start decryption, a process of encrypting and burning the optical disc is further included, and the process specifically includes:

[0016] Download the file to be burned and related information corresponding to the currently approved burning task from the server, wherein the related information includes a detection address and an alarm address;

[0017] Use the file system open source library under the current operating platform to specify a source directory and a mount point directory to create an encrypted and decrypted file system using a transparent encryption strategy;

[0018] Put the file to be burned into the mount point directory of the encryption and decryption file system for encryption to form an encrypted file to be burned;

[0019] Use encryption and decryption algorithms to directly encrypt the burning-related information, and then write the encrypted burning-related information into the metadata file to form an encrypted metadata file;

[0020] Put the encrypted file to be burned, the encrypted metadata file, and the pre-compiled multi-platform self-decryption program into the folder to be burned;

[0021] Based on the folder to be burned, a burning tool under the current operating platform is used to burn the optical disc, so that the optical disc stores the encrypted burned files, encrypted metadata files, and a multi-platform self-decryption program combination.

[0022] Optionally, before the step of downloading the to-be-burned file and the burning-related information corresponding to the currently approved burning task from the server, a burning approval process is further included, specifically including:

[0023] By sending a burning request to the server, the file to be burned is uploaded to the server, so that the server generates a new burning task;

[0024] When receiving the notification of the approved burning task sent by the server, the following steps are allowed to be executed: downloading the to-be-burned file and burning related information corresponding to the currently approved burning task from the server.

[0025] Optionally, the burning related information further includes: burning password, burning confidentiality level, task application time, responsible person, and department; the alarm information includes: latitude and longitude information of the current terminal, burning time, and alarm time.

[0026] Optionally, the underlying algorithms used by the transparent encryption strategy include SM4, AES, and DES.

[0027] Optionally, the self-decryption program is specifically a lightweight program built using the fltk toolkit.

[0028] Optionally, the file system open source library under the current operating platform includes the libfuse library under the Linux operating platform or the WinFsp library under the Window operating platform; the burning tool under the current operating platform includes wodim under the Linux operating platform or IMAPI under the Windows operating platform.

[0029] Optionally, an encryption or decryption operation is performed using an encryption and decryption file system with a transparent encryption policy, specifically:

[0030] Use the write function in the registered libfuse library or WinFsp library to encrypt the file stream to be encrypted in the mount point directory; or use the read function in the registered libfuse library or WinFsp library to decrypt the encrypted file stream in the mount point directory.

[0031] Optionally, the step of directly encrypting the burning-related information using an encryption / decryption algorithm specifically includes:

[0032] Write the burning related information into a string in json format;

[0033] Use the encryption and decryption algorithm to directly encrypt the JSON format string.

[0034] In a second aspect, the present invention further provides a cross-platform optical disc data protection system based on a transparent encryption strategy, the system comprising a client and a server, for executing the aforementioned cross-platform optical disc data protection method based on a transparent encryption strategy.

[0035] One or more technical solutions provided by the present invention have at least the following technical effects or advantages:

[0036] The present invention pre-stores multiple self-decryption programs used under different versions of Windows operating platforms and multiple self-decryption programs used under different versions of Linux operating platforms in the optical disc, and can screen out the corresponding self-decryption program according to the operating platform actually used in the decryption process. The self-decryption program can first decrypt the encrypted metadata file in the optical disc. When the optical disc is in an offline environment and the received user input password matches the decryption password, the self-decryption program then calls the file system open source library under the current operating platform to create an encryption and decryption file system using a transparent encryption strategy to decrypt the encrypted burned files in the optical disc. It can support cross-platform decryption of optical disc data, solves the technical problem that the operating platform used in the decryption process and the encryption burning process in the traditional optical disc decryption method must be strictly consistent, has no requirements for the operating platform used for optical disc data decryption, improves compatibility, facilitates unified management of the optical disc decryption process in a heterogeneous environment, and can adapt to the current environment where multiple platforms and multiple devices coexist. Then, before decrypting the encrypted burned files in the optical disc, the present invention will first use the selected self-decryption program to decrypt the encrypted metadata file, and read the detection address and alarm address in the decrypted metadata file to continuously determine whether the environment in which the optical disc is located is safe. As long as it is determined that the optical disc is in an Internet environment, it is determined that the optical disc is in an unallowed environment, that is, there are security risks in the environment in which the optical disc is located; and only when the optical disc is in an offline environment, it is determined that the optical disc is in a permitted environment, that is, the environment in which the optical disc is located is relatively safe. Specifically, by continuously sending network requests to the detection address and detecting whether a network response is received, it is determined whether the CD is in an Internet environment. As long as it is determined that the CD is in an Internet environment, an alarm message is sent to the alarm website through the alarm module built into the self-decryption program to issue an alarm prompt; only when the CD is in an offline environment and the received user-entered password matches the decryption password, the encrypted burned file will be decrypted, which solves the problem of lack of security supervision in the traditional CD data decryption process. By continuously monitoring the environment in which the CD is located, different response plans are adopted in different environments to supervise the CD decryption process, thereby improving the security of CD data, preventing unauthorized access, and reducing the risk of data leakage and hacker attacks.Finally, the present invention calls the file system open source library under the current operating platform through the self-decryption program integrated in the CD. Since the self-decryption program is adapted to the current operating platform, the self-decryption program can call the file system open source library adapted to the current operating platform to decrypt the encrypted burned files. The entire process does not require the additional installation of specific software or client applications, which solves the problem that the traditional CD data decryption process needs to rely on specific software or client applications, reduces the cost of use, and can use the file system open source library under the current operating platform to decrypt the encrypted burned files, and use a transparent encryption strategy for decryption. The process is simple and the decryption efficiency is high, which is conducive to improving customer experience.

[0037] Furthermore, during the encryption process, the present invention can use either the libfuse library under the Linux operating platform or the WinFsp library under the Window operating platform to create an encryption and decryption file system, thereby enabling cross-platform encryption. During the burning process, the present invention can use either wodim under the Linux operating platform or IMAPI under the Window operating platform for burning, thereby enabling cross-platform burning. In addition, the files to be burned and the burning-related information are separated. In addition to serving as a "label" or "instruction manual" for the files to be burned, the burning-related information also serves as a detection basis and an alarm basis for the environment in which the optical disc is located, thereby supporting the security supervision function of the decryption process. The compiled multi-platform self-decryption program combination can support the cross-platform function of the decryption process, remove the restriction that specific software or client applications must be installed, and broaden the scope of application of subsequent decryption.

[0038] Furthermore, before encryption and burning, new burning tasks can be approved, and the encryption and burning process will be started only after approval, realizing a full-process supervision mechanism.

[0039] Furthermore, the burning-related information also includes the burning password, burning level, task application time, responsible person, and department. This not only records the information generated at each stage but also facilitates tracing the burning behavior. Alarm information includes the current terminal's latitude and longitude, burning time, and alarm time, enabling effective alarms and facilitating subsequent investigation and tracking.

[0040] Furthermore, the underlying algorithms used in the transparent encryption strategy include SM4, AES, and DES. The corresponding underlying algorithm can be selected according to actual usage requirements to expand the scope of application.

[0041] Furthermore, the self-decryption program is a lightweight program built using the fltk toolkit. Considering that the self-decryption program needs to be executed on a disc and is limited by the disc's read speed, the self-decryption program built using the fltk toolkit, a lightweight cross-platform UI framework, has no additional dependencies and occupies a small amount of storage space. Compiled for Windows and Linux platforms, the self-decryption program is typically between 2MB and 3MB in size, enabling rapid decryption startup, shortening decryption time and improving decryption efficiency.

[0042] Furthermore, the libfuse library is available for Linux, and the WinFsp library is available for Windows. This facilitates targeted access to open-source file system libraries on different platforms, enabling cross-platform encryption and decryption. wodim is available for Linux, and IMAPI is available for Windows, facilitating the targeted use of burning tools on different platforms, enabling cross-platform burning.

[0043] Furthermore, encryption operations can be implemented through the write function in the registered libfuse library or WinFsp library, and decryption operations can be implemented through the read function in the registered libfuse library or WinFsp library, so that the encryption and decryption processes do not require user intervention.

[0044] Furthermore, JSON is a structured data format that clearly distinguishes fields, types, and hierarchical relationships. It logically groups data before encryption, facilitating quick parsing after decryption. JSON is a universal data format that supports parsing in nearly all programming languages ​​and systems, and encrypted data requires no additional adaptation when transferred between platforms. In short, using JSON format for encryption combines the ease of use of structured data with the security of encryption, balancing development efficiency and security requirements. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 This is a flowchart of an encrypted burning method for a cross-platform optical disc data protection method based on a transparent encryption strategy in the present invention;

[0046] Figure 2 This is a secure decryption flow chart of a cross-platform optical disc data protection method based on a transparent encryption strategy in the present invention. DETAILED DESCRIPTION

[0047] The present invention provides a cross-platform optical disc data protection method and system based on a transparent encryption strategy, which solves the problem that traditional optical disc data decryption methods cannot meet actual usage requirements.

[0048] First, the terms that appear in the specification will be explained respectively.

[0049] Transparent encryption is an encryption implementation method or strategy that emphasizes the transparency of the encryption process to users and applications, meaning no intervention is required. SM4 is a specific encryption algorithm, falling within the realm of technical implementation. SM4 can serve as the underlying algorithm for transparent encryption. Transparent encryption does not rely on a specific algorithm and can use algorithms such as SM4, AES, and DES, depending on actual implementation requirements.

[0050] Metadata is "data about data," information that describes the properties of other data. Metadata is a "label" or "instruction manual" for data. It doesn't directly constitute the data itself, but rather describes its characteristics.

[0051] File system open source library, including libfuse library and WinFsp library.

[0052] libfuse, short for Filesystem in Userspace, is an open-source library for implementing file systems in user space, used on the Linux operating system. It allows developers to create custom file systems without modifying the operating system kernel, greatly simplifying file system development.

[0053] WinFsp, short for Windows File System Proxy, is an open-source library for implementing file systems in user space on the Windows operating system. Its core functionality allows developers to write user-space programs to implement custom file systems and mount them as virtual disks in Windows (e.g., drive letter X:).

[0054] IMAPI stands for Image Mastering Applications Programming Interface. It's a set of application programming interfaces (APIs) provided by Microsoft for the Windows operating system. It's primarily used to control and manage the disc burning process, supporting the creation, writing, and verification of disc images (such as ISO files).

[0055] wodim, short for Write Optical Disk Image, is a commonly used command-line tool in Linux. It is used to burn data (such as ISO images, files, and audio) to optical discs (CD / DVD / BD).

[0056] For a better understanding, the following is a detailed description with reference to the accompanying drawings and specific implementation methods. Obviously, the embodiments described in the present invention are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0057] The cross-platform optical disc data protection method based on a transparent encryption strategy of the present invention mainly includes three different processes, namely a burning approval process, an encrypted burning process, and a secure decryption process.

[0058] (1) Recording approval process;

[0059] In order to be able to approve new burning tasks and implement a full-process supervision mechanism, first, the burning approval process begins, which mainly includes steps S1 to S2.

[0060] Step S1: sending a burning request to the server to upload the file to be burned to the server, so that the server generates a new burning task.

[0061] Step S2: When receiving the approved burning task notification from the server, step S3 in the encrypted burning process is allowed to be executed: downloading the to-be-burned file and burning-related information corresponding to the currently approved burning task from the server.

[0062] (2) Encrypted burning process;

[0063] like Figure 1 As shown, the user clicks a button to trigger the encryption burning process, and the encryption burning process mainly includes steps S3 to S8.

[0064] Step S3: Download the file to be burned and the burning related information corresponding to the currently approved burning task from the server, where the burning related information includes the detection address and the alarm address.

[0065] Among them, the burning-related information also includes: burning password, burning confidentiality level, task application time, responsible person, and department.

[0066] Step S4: through the file system open source library under the current operating platform, specify a source directory and a mount point directory to create an encryption and decryption file system using a transparent encryption strategy.

[0067] Among them, the file system open source library under the current operating platform includes the libfuse library under the Linux operating platform or the WinFsp library under the Windows operating platform.

[0068] Among them, the underlying algorithms used in the transparent encryption strategy include SM4, AES, and DES.

[0069] During the specific implementation of step S4, for example, the libfuse library or WinFsp library creates an SM4 encryption and decryption file system by specifying a source directory and a mount point directory. Files placed in the mount point directory are automatically SM4 encrypted when written to the directory, and automatically SM4 decrypted when retrieved from the directory. For example, copying a file to the desktop automatically performs SM4 decryption. The contents of the source directory are encrypted files, and directly opening files in the source directory produces ciphertext, achieving transparent encryption. The subsequent burning process only requires burning the files in the source directory to the disc.

[0070] Step S4 specifically includes step S41 to step S42.

[0071] Step S41: Construct a structure under the libfuse library or WinFsp library. The structure contains a set of callback functions. When performing certain operations on the source directory or mount point directory, the corresponding callback function will be called. For example, construct the fuse_operations structure under the libfuse library. The fuse_operations structure contains a set of callback functions, such as read function, write function, create function, readdir function, etc.

[0072] Step S42: Call the core entry function in the set to register the constructed structure with the libfuse library or WinFsp library, thereby obtaining the registered libfuse library or the registered WinFsp library. For example, for the libfuse library, call the fuse_main function in the set to register the constructed structure fuse_operations with the libfuse library, thereby obtaining the registered libfuse library.

[0073] Step S5: The file to be burned is placed in the mount point directory of the encryption and decryption file system and encrypted to form the encrypted file to be burned. Continuing with the previous embodiment, for example, after downloading from the server, a zip archive containing the file to be burned is obtained. The zip archive is then decompressed to the mount point directory of the registered libfuse library. During the decompression process, the registered libfuse library calls the corresponding encryption code to perform SM4 encryption on the file to be burned, forming the encrypted file to be burned.

[0074] Step S6: Use an encryption / decryption algorithm to directly encrypt the burn-related information, and then write the encrypted burn-related information into the metadata file to form an encrypted metadata file.

[0075] Among them, step S6 mainly includes step S61 to step S62.

[0076] Step S61: Write the burning related information into a string in json format. For example, write the burning password, burning level, task application time, responsible person, department, detection address, alarm address and other burning related information into a string in json format.

[0077] Step S62: Use an encryption / decryption algorithm to directly encrypt the JSON format string to form an encrypted metadata file. For example, use the SM4 encryption / decryption algorithm to perform SM4 encryption on the JSON format string, and then write the encrypted JSON format string into the metadata file to form an encrypted metadata file.

[0078] Step S7: Put the encrypted file to be burned obtained in step S5, the encrypted metadata file obtained in step S6, and the pre-compiled multi-platform self-decryption program into the folder to be burned.

[0079] The multi-platform self-decryption program combination includes multiple self-decryption programs used under different versions of Windows operating platforms and multiple self-decryption programs used under different versions of Linux operating platforms.

[0080] The self-decryption program is a lightweight program built using the fltk toolkit. Considering that the self-decryption program needs to be executed on a disc and is limited by the disc's read speed, the self-decryption program built using the fltk toolkit, a lightweight cross-platform UI framework, has no additional dependencies and occupies minimal storage space. Compiled for Windows and Linux platforms, the self-decryption program typically weighs between 2MB and 3MB, enabling rapid decryption startup, shortening decryption time and improving efficiency.

[0081] Each self-decryption program has its own alarm module, which will automatically alarm when the CD is run in an unauthorized environment.

[0082] Step S8: Based on the folder to be burned, the burning tool under the current operating platform is used to burn the optical disc, so that the optical disc stores the encrypted burned files, the encrypted metadata files, and the multi-platform self-decryption program combination.

[0083] The burning tools under the current operating platform include wodim under the Linux operating platform or IMAPI under the Windows operating platform.

[0084] After steps S3 to S8, the folder to be burned can be burned into the optical disc, completing the encrypted burning process.

[0085] (3) Secure decryption process;

[0086] like Figure 2 As shown, the secure decryption process can be performed on either a Windows or Linux operating platform. When performed on a Windows operating platform, the user simply double-clicks the drive letter of the CD to initiate the secure decryption process. When performed on a Linux operating platform, the user simply opens the corresponding execution script to initiate the secure decryption process. The secure decryption process includes steps S9 to S13.

[0087] Step S9: When the drive disc begins decryption, the self-decryption program combination of multiple platforms is read and the self-decryption program corresponding to the current operating platform is selected from them. For example, if the current operating platform is the Loongson instruction set architecture under Linux (not x86), the self-decryption program corresponding to the Loongson instruction set architecture will be selected from the self-decryption program combination consisting of multiple self-decryption programs.

[0088] Among them, the multi-platform self-decryption program combination includes multiple self-decryption programs used under different versions of Windows operating platforms and multiple self-decryption programs used under different versions of Linux operating platforms. It can automatically select the corresponding self-decryption program according to the operating platform actually used in the decryption process. The self-decryption program can first decrypt the encrypted metadata file in the CD. When the CD is in an offline environment and the received user input password matches the decryption password, the self-decryption program will call the file system open source library under the current operating platform to create an encryption and decryption file system using a transparent encryption strategy to decrypt the encrypted burned files in the CD. It can support cross-platform decryption of CD data, solving the technical problem that the operating platform used in the decryption process and the encryption burning process in the traditional CD decryption method must be strictly consistent. There is no requirement for the operating platform used for CD data decryption, which improves compatibility and facilitates unified management of the CD decryption process in heterogeneous environments. It can adapt to the current environment where multiple platforms and multiple devices coexist.

[0089] The self-decryption program is specifically a lightweight program built using the fltk toolkit. The description of the fltk toolkit is given in step S7 and will not be repeated for the sake of brevity. Each self-decryption program has its own alarm module, which will automatically issue an alarm when the optical disc is running in an unauthorized environment.

[0090] Step S10: Use the selected self-decryption program to decrypt the encrypted metadata file and read the detection address and alarm address from the decrypted metadata file. In step S10, the self-decryption program directly decrypts the encrypted detection address and the encrypted alarm address in the encrypted metadata file to read the decrypted detection address and the decrypted alarm address.

[0091] Step S11: Determine whether the optical disc is in an internet environment by continuously sending network requests to the detection address and detecting whether a network response is received. For example, HTTP requests are sent to the detection address in real time. If an HTTP response is received, it indicates that the optical disc is in an internet environment; if no HTTP response is received, it indicates that the optical disc is offline. In actual applications, different detection frequencies can be set, such as every 1 minute or every 2 minutes, but this is not limited in the present invention.

[0092] Step S12: once it is determined that the optical disc is in an Internet environment, the alarm module included in the selected self-decryption program is used to send an alarm message to the alarm address for alarm prompting.

[0093] The alarm information includes: the latitude and longitude of the current terminal, the burning time, the alarm time and other related information.

[0094] Before decrypting the encrypted burned files in the optical disc, the present invention will first use the selected self-decryption program to decrypt the encrypted metadata file, and read the detection address and alarm address in the decrypted metadata file to continuously determine whether the environment of the optical disc is safe. As long as it is determined that the optical disc is in an Internet environment, it is determined that the optical disc is in an unallowed environment, that is, there are security risks in the environment where the optical disc is located, and an alarm prompt is issued; and only when the optical disc is in an offline environment, it is determined that the optical disc is in a permitted environment, that is, the environment where the optical disc is located is relatively safe, and step S13 will be executed to decrypt the encrypted burned files in the optical disc, which solves the problem of lack of security supervision link in the traditional optical disc data decryption process. By continuously monitoring the environment where the optical disc is located and performing different response processing in different environments to supervise the optical disc decryption process, the security of the optical disc data is improved, unauthorized access is prevented, and the risk of data leakage and hacker attacks is reduced.

[0095] Step S13: Only when the CD is in an offline environment and the received user input password matches the decryption password, the self-decryption program calls the file system open source library under the current operating platform to create an encryption and decryption file system using a transparent encryption strategy to decrypt the encrypted burned file and obtain the decrypted burned file.

[0096] Among them, the underlying algorithms used in the transparent encryption strategy include SM4, AES, and DES.

[0097] The present invention calls the file system open source library under the current operating platform through a self-decryption program integrated in the optical disc. Since the self-decryption program is adapted to the current operating platform, the self-decryption program can call the file system open source library adapted to the current operating platform to decrypt the encrypted burned files. The entire process does not require the additional installation of specific software or client applications, which solves the problem that the traditional optical disc data decryption process needs to rely on specific software or client applications, reduces the cost of use, and can decrypt the encrypted burned files using the file system open source library under the current operating platform, and uses a transparent encryption strategy for decryption. The process is simple and the decryption efficiency is high, which is conducive to improving customer experience.

[0098] In step S13, the self-decryption program calls the open source file system library under the current operating platform to create an encryption and decryption file system using a transparent encryption strategy. This process is similar to step S4 and will not be repeated for the sake of brevity. In step S13, the sub-step of decrypting the encrypted burned file using the encryption and decryption file system using the transparent encryption strategy is specifically implemented by using the read function in the libfuse library or WinFsp library registered in step S13 to decrypt the encrypted burned file in the mount point directory. For example, calling the read function in the registered libfuse library can decrypt the encrypted burned file in the mount point directory.

[0099] Another embodiment of the present invention provides a cross-platform optical disc data protection system based on a transparent encryption strategy. The system includes a client and a server, and is configured to execute the aforementioned cross-platform optical disc data protection method based on a transparent encryption strategy.

[0100] The present invention describes a cross-platform optical disc data protection system based on a transparent encryption strategy. This system is a software system with a server-side and client-side architecture. The client is the part directly used by users, typically running on their devices (such as computers) and responsible for user interaction. The server is a backend service system, typically deployed on a server and invisible to users, responsible for processing core logic and data.

[0101] Obviously, those skilled in the art may make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if such changes and modifications fall within the scope of the claims and their equivalents, the present invention is intended to include such changes and modifications.

Claims

1. A cross-platform optical disc data protection method based on a transparent encryption strategy, applied to scenarios where optical disc data is securely decrypted, characterized in that: The optical disc stores a burned file encrypted using a transparent encryption strategy, an encrypted metadata file using the transparent encryption strategy, and a multi-platform self-decryption program combination; the encrypted metadata file contains an encrypted detection address and an encrypted alarm address; the multi-platform self-decryption program combination includes multiple self-decryption programs for use under different versions of Windows operating platforms and multiple self-decryption programs for use under different versions of Linux operating platforms; each self-decryption program has an alarm module; the method includes: When the drive CD starts to decrypt, the self-decryption program combination of the multiple platforms is read, and the self-decryption program corresponding to the current operating platform is selected; Decrypting the encrypted metadata file using a selected self-decryption program, and reading the detection address and the alarm address from the decrypted metadata file; By continuously sending network requests to the detection address and detecting whether a network response is received, it is continuously determined whether the optical disc is in an Internet environment; Once it is determined that the optical disc is in an Internet environment, the alarm module in the selected self-decryption program is used to send an alarm message to the alarm address for alarm prompting; Only when the CD is in an offline environment and the received user-entered password matches the decryption password, the self-decryption program will call the file system open source library under the current operating platform to create an encryption and decryption file system using a transparent encryption strategy to decrypt the encrypted burned file and obtain the decrypted burned file.

2. The method according to claim 1, wherein Before the step of driving the CD to start decryption, the CD-ROM encryption burning process is also included. The process specifically includes: Download the file to be burned and related information corresponding to the currently approved burning task from the server, wherein the related information includes a detection address and an alarm address; Use the file system open source library under the current operating platform to specify a source directory and a mount point directory to create an encrypted and decrypted file system using a transparent encryption strategy; Put the file to be burned into the mount point directory of the encryption and decryption file system for encryption to form an encrypted file to be burned; Use encryption and decryption algorithms to directly encrypt the burning-related information, and then write the encrypted burning-related information into the metadata file to form an encrypted metadata file; Put the encrypted file to be burned, the encrypted metadata file, and the pre-compiled multi-platform self-decryption program into the folder to be burned; Based on the folder to be burned, a burning tool under the current operating platform is used to burn the optical disc, so that the optical disc stores the encrypted burned files, encrypted metadata files, and a multi-platform self-decryption program combination.

3. The method according to claim 2, wherein Before the step of downloading the to-be-burned file and the burning related information corresponding to the currently approved burning task from the server, a burning approval process is also included, specifically including: By sending a burning request to the server, the file to be burned is uploaded to the server, so that the server generates a new burning task; When receiving the notification of the approved burning task sent by the server, the following steps are allowed to be executed: downloading the to-be-burned file and burning related information corresponding to the currently approved burning task from the server.

4. The method according to claim 2, wherein The burning related information also includes: burning password, burning confidentiality level, task application time, responsible person, and department; the alarm information includes: latitude and longitude information of the current terminal, burning time, and alarm time.

5. The method according to claim 1, wherein The underlying algorithms used in the transparent encryption strategy include SM4, AES, and DES.

6. The method according to claim 1, wherein The self-decryption program is specifically a lightweight program built using the fltk toolkit.

7. The method according to claim 2, wherein The file system open source library under the current operating platform includes the libfuse library under the Linux operating platform or the WinFsp library under the Window operating platform; the burning tool under the current operating platform includes wodim under the Linux operating platform or IMAPI under the Windows operating platform.

8. The method according to claim 7, wherein Use the encryption and decryption file system of the transparent encryption policy to perform encryption or decryption operations, specifically: Use the write function in the registered libfuse library or WinFsp library to encrypt the file stream to be encrypted in the mount point directory; or use the read function in the registered libfuse library or WinFsp library to decrypt the encrypted file stream in the mount point directory.

9. The method according to claim 2, wherein The step of directly encrypting the burning related information using an encryption and decryption algorithm specifically includes: Write the burning related information into a string in json format; Use the encryption and decryption algorithm to directly encrypt the JSON format string.

10. A cross-platform optical disc data protection system based on transparent encryption strategy, characterized in that: The system comprises a client and a server, and is configured to execute the method according to any one of claims 1 to 9.

Images