Document distribution method and device, computer equipment and readable storage medium

Abstract

The invention relates to a document distribution method and device, computer equipment and a readable storage medium. The method comprises the steps of obtaining a pre-constructed initial document reading application; embedding a to-be-distributed portable document format document and an identification association rule of the portable document format document into the initial document reading application to obtain an intermediate document reading application; configuring a security access strategy of the document in the portable document format in the intermediate document reading application to obtain a target document reading application; and packaging the target document reading application into an executable file and forwarding the executable file to the target equipment, so that the target equipment runs the target document reading application based on the executable file, and positioning the portable document format document based on the identification association rule through the target document reading application. And calling and displaying the portable document format document based on the secure access policy. By adopting the method, the document distribution security can be improved.

Description

Technical Field

[0001] This application relates to the field of information security technology, and in particular to a document distribution method, apparatus, computer equipment, computer-readable storage medium, and computer program product. Background Technology

[0002] In fields such as software, industrial equipment, and consumer electronics, manufacturers are required to provide users with technical documents, product specifications, or help manuals in PDF format to guide usage or convey technical details. Among these, magnetic drive systems, as high-precision control devices, have technical documents containing confidential information such as core algorithms and component tolerances, making secure distribution a significant requirement.

[0003] Existing document distribution methods have the following main problems in magnetic drive system scenarios: When providing PDF document downloads directly, the documents are easily copied, forwarded, or tampered with, which may lead to abnormal equipment operation, technology leakage, or production safety risks; online reading based on cloud platforms relies on the network and is difficult to adapt to unstable network environments such as industrial workshops and outdoor operations, and the content can still be leaked through screenshots, printing, etc.; encrypted PDF documents require users to enter passwords, which is not conducive to efficient operation by on-site maintenance personnel, and the passwords are easily leaked or cracked during dissemination. Summary of the Invention

[0004] Therefore, it is necessary to provide a document distribution method, apparatus, computer equipment, computer-readable storage medium, and computer program product that can improve the security of document distribution in response to the above-mentioned technical problems.

[0005] Firstly, this application provides a document distribution method, including:

[0006] Get a pre-built initial document reading application;

[0007] The portable document format document to be distributed and the identification and association rules of the portable document format document are embedded into the initial document reading application to obtain the intermediate document reading application;

[0008] Configure the security access policy for the portable document format document in the intermediate document reading application to obtain the target document reading application;

[0009] The target document reading application is packaged into an executable file and forwarded to the target device, so that the target device runs the target document reading application based on the executable file, and the target document reading application locates the portable document format document based on the identification association rules, and calls and displays the portable document format document based on the security access policy.

[0010] In one embodiment, configuring the security access policy for the portable document format document in the intermediate document reading application to obtain the target document reading application includes:

[0011] In the backend control layer of the intermediate document reading application, a security access policy for the portable document format document is configured to obtain the target document reading application. The target device is used to temporarily load the portable document format document into memory and display it through the target document reading application, and to clear the memory after the portable document format document is displayed. In addition, during the display of the portable document format document, document content extraction requests are intercepted.

[0012] In one embodiment, the target device is also configured to intercept write requests to a temporary file directory in the memory via the target document reading application, and / or, intercept memory dump attacks.

[0013] In one embodiment, packaging the target document reading application into an executable file and forwarding it to the target device, so that the target device runs the target document reading application based on the executable file, includes:

[0014] The target document reading application is packaged into an executable file, and an integrity verification value for the target document reading application is generated based on a preset algorithm.

[0015] The executable file and the integrity verification value are forwarded to the target device, so that the target device generates a real-time verification value for the target document reading application based on the executable file and the preset algorithm, and runs the target document reading application based on the executable file if the real-time verification value matches the integrity verification value.

[0016] In one embodiment, prior to obtaining the pre-built initial document reading application, the following steps are included:

[0017] An integrated document rendering component is used to form a front-end presentation layer; wherein, the document rendering component supports page rendering of portable document format documents under different operating system environments;

[0018] Based on the aforementioned front-end presentation layer, an initial document reading application is constructed.

[0019] In one embodiment, embedding the portable document format document to be distributed and the identification association rules of the portable document format document into the initial document reading application to obtain the intermediate document reading application includes:

[0020] Convert the portable document format document to be distributed into binary data, and create an access identifier corresponding to the binary data;

[0021] The binary data is embedded into the initial document reading application, and the association between the access identifier and the binary data is recorded in the resource mapping table of the initial document reading application to obtain the intermediate document reading application.

[0022] In one embodiment, the portable document format document contains content related to the magnetic drive system.

[0023] Secondly, this application also provides a document distribution device, comprising:

[0024] The application acquisition module is used to acquire a pre-built initial document reading application;

[0025] The document embedding module is used to embed the portable document format document to be distributed and the identification and association rules of the portable document format document into the initial document reading application to obtain an intermediate document reading application;

[0026] The strategy configuration module is used to configure the security access policy for the portable document format document in the intermediate document reading application to obtain the target document reading application;

[0027] The document distribution module is used to package the target document reading application into an executable file and forward it to the target device, so that the target device runs the target document reading application based on the executable file, locates the portable document format document based on the identification association rules, and calls and displays the portable document format document based on the security access policy.

[0028] Thirdly, this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of the method described in any of the above-mentioned embodiments.

[0029] Fourthly, this application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in any of the preceding claims.

[0030] Fifthly, this application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the method described in any of the above claims.

[0031] The aforementioned document distribution methods, devices, computer equipment, computer-readable storage media, and computer program products, by acquiring a pre-built initial document reading application, ensure that document distribution has a dedicated and adapted reading environment, avoiding compatibility issues with general readers; by embedding the portable document format document to be distributed and its corresponding identification and association rules into the initial document reading application, the document and reader are bound together, reducing the risk of the document being extracted and disseminated separately; by configuring a secure access policy for the portable document format document in the document reading application to regulate document access behavior, document protection capabilities are strengthened, reducing document content leakage caused by various illegal operations; furthermore, by packaging the document reading application containing the document into an executable file and forwarding it to the target device, the portable document format document and the dedicated reader are integrated into a single package. The target device does not need to install an additional reader or manually associate the document; it can directly run the executable file to use it, improving document reading convenience and distribution efficiency; after the target device runs the executable file, it accurately locates the document by identifying the association rules, calls and displays the document based on the secure access policy, ensuring that the document can only be legally viewed in a dedicated reading environment and that the original document cannot be obtained, thus achieving secure and efficient document distribution. Attached Figure Description

[0032] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0033] Figure 1 This is a diagram illustrating the application environment of a document distribution method in one embodiment.

[0034] Figure 2 This is a flowchart illustrating a document distribution method in one embodiment;

[0035] Figure 3 This is a flowchart illustrating the security access policy control process in one embodiment;

[0036] Figure 4 This is a flowchart illustrating step S208 in one embodiment;

[0037] Figure 5 This is a schematic diagram of the process of packaging the target document reading application into an executable file in one embodiment;

[0038] Figure 6 This is a flowchart illustrating the document distribution method in another embodiment;

[0039] Figure 7This is a schematic diagram of the architecture of a document reading application in one embodiment;

[0040] Figure 8 This is a flowchart illustrating step S204 in one embodiment;

[0041] Figure 9 This is a flowchart illustrating the process of embedding binary data into an initial document reading application in one embodiment;

[0042] Figure 10 This is a structural block diagram of a document distribution device in one embodiment;

[0043] Figure 11 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0044] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0045] It should be noted that the terms "first," "second," etc., used in this application can be used to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish the first element from the second element. The terms "comprising" and "having," and any variations thereof, used in this application, are intended to cover non-exclusive inclusion. The term "multiple" used in this application refers to two or more. The term "and / or" used in this application refers to one of the embodiments, or any combination of multiple embodiments.

[0046] Traditional dedicated readers mostly require separate installation and deployment, and rely on association and adaptation with external PDF documents; while the use cases of magnetic drive systems often involve multiple devices and multiple maintenance teams, making the decentralized management of external PDF documents difficult and prone to technical problems such as inconsistent document versions and unauthorized document replacement.

[0047] Based on this, embodiments of this application provide a document distribution method that can be applied to, for example... Figure 1In the application environment shown, the current device 102 can communicate with the target device 104 via a network beforehand: the current device 102 can obtain a pre-built initial document reading application; embed the portable document format document to be distributed and its identification association rules into the initial document reading application to obtain an intermediate document reading application; configure the security access policy for the portable document format document in the intermediate document reading application to obtain the target document reading application; package the target document reading application into an executable file and forward it to the target device 104. Thus, even in poor communication conditions, the target device 104 can run the target document reading application based on the executable file, locate the portable document format document based on the identification association rules, and call and display the portable document format document based on the security access policy. The current device 102 can be a first terminal or a server. The target device 104 can be a second terminal other than the first terminal. The first / second terminal can be, but is not limited to, various personal computers, laptops, smartphones, and tablets. The server can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services.

[0048] In one exemplary embodiment, such as Figure 2 As shown, a document distribution method is provided, which is applied to... Figure 1 Taking the current device 102 as an example, the explanation includes the following steps S202 to S208. Wherein:

[0049] S202, Obtain the pre-built initial document reading application.

[0050] The initial document reading application can be a dedicated document reading application developed for portable document format (PDF) documents, and at least has the function of displaying embedded PDF documents.

[0051] In one possible implementation, an initial document reading application can be pre-built based on the Electron or Qt framework. The pre-built initial document reading application can be stored on the local storage of the current device 102 or in the cloud. For example, the initial document reading application can be stored as a compiled base application package on the local hard drive, solid-state drive, or removable storage medium of the current device 102; wherein the base application package can contain front-end code, back-end logic, dependency libraries, and configuration files.

[0052] S204, embed the portable document format document to be distributed and the identification and association rules of the portable document format document into the initial document reading application to obtain the intermediate document reading application.

[0053] The PDF document recognition and association rules are used by document reading applications to locate and access the PDF document. For example, the recognition and association rules may include the storage location or data indexing method of the embedded PDF document in the initial document reading application.

[0054] For example, the portable document format document to be distributed can be converted into binary data, and the binary data and the identification association rules of the portable document format document can be embedded into the initial document reading application. In this way, by embedding the PDF document in binary form, users cannot directly obtain the original file, effectively preventing the copying, forwarding and illegal dissemination of the PDF document.

[0055] In one possible implementation, a segmented encryption algorithm can be used to encrypt binary data in blocks, generating encrypted segmented binary data. A unique segment index identifier is assigned to each segment of encrypted binary data. Based on all segment index identifiers, the starting address of each segment data storage, the segment encryption key, and the data concatenation rules, identification and association rules are generated. The encrypted segmented binary data is written into the resource file segment of the initial document reading application, and the identification and association rules are embedded into the initial document reading application as encrypted configuration items.

[0056] S206, Configure a secure access policy for portable document format documents in the intermediate document reading application to obtain the target document reading application.

[0057] Among them, the security access policy for portable document formats is used to regulate the access behavior of target devices to embedded PDF documents. For example, the security access policy may include runtime permission restriction policies and memory data isolation policies. The runtime permission restriction policy is used to block operation requests on the target device that may lead to the leakage of document content, and the memory data isolation policy is used to regulate the storage and flow of PDF data in the memory of the target device, blocking the risk of leakage at the data flow level.

[0058] Optionally, the secure access policy may also include an access validity period control policy and a device binding verification policy. Configuring an access validity period control policy for portable document format documents in an intermediate document reading application may include: configuring validity period control parameters so that when the target device runs the target document reading application, it automatically reads the local system time and compares it with preset validity period parameters, allowing the loading and display of PDF documents only within the valid time range. Configuring a device binding verification policy for portable document format documents in an intermediate document reading application may include: configuring allowed target device identifiers, pre-developing an identifier verification interface for comparing the target device identifier with a preset list when the application starts, so that when the target device runs the target document reading application, it automatically collects the local device identifier, compares it with a preset encrypted identifier list through the verification interface, and allows the loading of PDF documents only when the identifiers match.

[0059] S208, the target document reading application is packaged into an executable file and forwarded to the target device, so that the target device runs the target document reading application based on the executable file, and the target document reading application locates portable document format documents based on identification association rules, and calls and displays portable document format documents based on security access policies.

[0060] For example, a compilation and packaging tool can be used to integrate the source code, dependent libraries, embedded PDF documents (which may be binary data), identification association rule configuration files, and security access policy configuration items of the target document reading application, package them into an executable (EXE) file, and forward it to the target device. Then, after receiving the executable file, the target device can directly run it to launch the target document reading application. After the application starts, it automatically parses the built-in identification association rules and locates the embedded portable document format document based on these rules. During the process of calling and displaying the document, the target document reading application enables preset security access policies: it intercepts operation requests that may lead to document leakage through runtime permission restriction policies and regulates the storage and flow of PDF data in memory through memory data isolation policies, ensuring that the document can only be viewed legally.

[0061] Understandably, since the target document reading application embeds a distributed portable document format, the packaged result is a single EXE file. This single EXE file contains both the reader and the document, so no additional installation is required; it can be used simply by double-clicking, thus reducing the user's operational costs.

[0062] In the above document distribution method, by acquiring a pre-built initial document reading application, the document distribution is guaranteed to have a dedicated and adapted reading environment, avoiding compatibility issues with general readers. By embedding the portable document format document to be distributed and its corresponding identification and association rules into the initial document reading application, the document and reader are bound together, reducing the risk of the document being extracted and disseminated separately. By configuring a secure access policy for the portable document format document in the document reading application, access behavior to the document is standardized, document protection capabilities are strengthened, and document content leakage caused by various illegal operations is reduced. Furthermore, the document reading application with the embedded document is packaged into an executable file and forwarded to the target device, realizing the integrated encapsulation of the portable document format document and the dedicated reader. The target device does not need to install an additional reader or manually associate the document; it can directly run the executable file to use it, improving the convenience of document reading and distribution efficiency. After the target device runs the executable file, it accurately locates the document by identifying the association rules, calls and displays the document based on the secure access policy, ensuring that the document can only be legally viewed in a dedicated reading environment and that the original document cannot be obtained, thus achieving secure and efficient document distribution.

[0063] In one exemplary embodiment, the portable document format document contains content related to the magnetic drive system.

[0064] In the specific implementation process, the current device 102 (such as an enterprise technical server) embeds sensitive PDF documents such as technical manuals and troubleshooting guides for the magnetic drive system into a pre-built initial document reading application and configures secure access policies. After packaging it into a single executable file, it is distributed to target devices 104 (such as industrial tablets and laptops) of multiple operation and maintenance teams. In scenarios with poor communication conditions, such as industrial workshops and outdoor operations, operation and maintenance personnel can start the target document reading application by double-clicking the executable file without relying on the network. They can securely view the embedded document content and cannot copy, extract or replace the document, effectively ensuring the security of core technologies and avoiding version inconsistencies.

[0065] In one possible implementation, deployment can be adapted to multiple user groups. For example, to meet the needs of different operation and maintenance teams and different device types, multiple independent EXE files can be generated in batches using a packaging tool. Each EXE file embeds the PDF document required by the corresponding user group (e.g., Team A's basic operation and maintenance manual for the magnetic drive system, Team B's core technical parameter document), and different access identifiers and permission policies are configured in the resource mapping table. After receiving the corresponding EXE file, the target device can only access the embedded exclusive document, achieving unified version management and fine-grained permission control, and preventing document mixing or unauthorized access.

[0066] Traditional security controls often rely on single-point protection (such as encrypting only PDFs or disabling only copying). In an exemplary embodiment, step S206 above may include:

[0067] Configure a secure access policy for portable document format documents in the backend control layer of the intermediate document reading application to obtain the target document reading application. The target device uses the target document reading application to temporarily load portable document format documents into memory and display them. The portable document format documents are cleared from memory after they are displayed. During the display of portable document format documents, document content extraction requests are intercepted.

[0068] For example, the backend control layer of the intermediate document reading application can pre-integrate security access control components (including permission control sub-components, memory isolation sub-components, and operation monitoring sub-components). Security access policy rules can be written into the application configuration file, binding policy trigger conditions (such as automatic loading at application startup and activation of protection during document rendering). Through compilation and integration, the policies can be made to automatically take effect when the target document reading application runs. Security access policies may include: runtime permission restriction policies, used to disable document copying, block printing and save-as functions, and restrict screenshot permissions; and memory data isolation policies, used to temporarily load data into a dedicated memory area and clear the memory cache after use.

[0069] Specifically, the current device can configure memory management rules in the memory isolation subcomponent of the intermediate document reading application, specifying a dedicated memory area for PDF data and setting control logic to load the data only temporarily during document display and clear the cache immediately after display. Therefore, when the target device runs the target document reading application, it only loads the PDF data into the dedicated memory area, which is isolated from the memory of other system processes. When the document is finished being displayed or the application is closed, the memory cache is automatically cleared. The current device can configure interception rules in the permission control subcomponent of the intermediate document reading application, including disabling the right-click menu copy function, blocking document content selection, and hiding the print and save as options. It also calls the operating system's native interface to configure screenshot permission restrictions. Therefore, when the target device runs the target document reading application, it can automatically intercept document content extraction requests such as mouse drag and drop, shortcut key copy, system print, file save as, and screenshots. In one possible implementation, a screen recording behavior detection interface can be integrated into the operation monitoring subcomponent. By calling the underlying APIs of the operating system (such as Windows' Hook mechanism or macOS's ScreenCapture framework), the screen recording process startup request of the target device can be monitored in real time. Once a screen recording operation is detected, an interception mechanism is immediately triggered (such as terminating the screen recording process, pausing document display and popping up a warning) to prevent the leakage of document content through screen recording.

[0070] Furthermore, the memory data isolation strategy can also be used to prevent writing to temporary files and to prevent memory dump attacks. The aforementioned target device is also used to intercept write requests to temporary file directories in memory via target document reading applications, and / or to intercept memory dump attacks.

[0071] Specifically, the current device can configure write interception rules in the memory isolation subcomponent and process management subcomponent of the intermediate document reading application to prohibit PDF-related data from being written to the target device's temporary file directory, and pre-develop interfaces for detecting and intercepting temporary file write requests. Therefore, when the target device runs the target document reading application, it can monitor all data write operations in real time, intercept requests to the temporary file directory, and ensure that PDF data flows only in memory throughout the entire process without generating local temporary files. The current device can configure memory protection rules in the security protection component of the intermediate document reading application, including setting memory pages to read-only attributes, enabling address space layout randomization, and integrating memory access permission verification logic. Therefore, when the target device runs the target document reading application, it can resist memory dump attacks launched through debugging tools such as WinDbg and GDB, and prevent unauthorized reading of PDF data in the application process's memory.

[0072] In one possible implementation, the target document reading application can automatically load runtime permission restriction rules and memory data isolation rules after startup; when the user opens a document, the PDF data is temporarily loaded into a dedicated memory area and rendered for display; during the display process, operations such as copying, screenshotting, and printing are intercepted; the cache is cleared after the document display ends; no PDF data is written to temporary files throughout the process, and the memory protection mechanism resists dump attacks.

[0073] In the specific implementation process, refer to Figure 3 As shown, Figure 3 This is a flowchart illustrating the secure access policy control process in one embodiment.

[0074] In this embodiment, a secure access policy for PDF documents is implemented by configuring the backend control layer. When a target device accesses the document, the PDF is temporarily loaded into memory, and after display, the memory is cleared and content extraction requests are blocked. This can block document leakage channels from both the operational scenario and data storage levels, ensuring that the document can only be viewed legally and cannot be extracted illegally. By blocking write requests to the temporary file directory and / or memory dump attacks, the security of data flow can be strengthened, preventing document content from being leaked through temporary file theft or memory cracking.

[0075] In one exemplary embodiment, such as Figure 4 As shown, step S208 above may include:

[0076] S2081, Package the target document reading application into an executable file and generate an integrity verification value for the target document reading application based on a preset algorithm.

[0077] For example, the executable file can be calculated based on a preset hash algorithm (such as the SHA-256 algorithm) to generate a corresponding hash value as an integrity verification value, which is used to uniquely identify the target document reading application packaged this time, for subsequent integrity verification.

[0078] S2082, forward the executable file and integrity check value to the target device, so that the target device can generate a real-time check value for the target document reading application based on the executable file and a preset algorithm, and run the target document reading application based on the executable file if the real-time check value matches the integrity check value.

[0079] For example, the current device can synchronously forward a single executable file and its corresponding integrity check value to the target device via a transmission link. After receiving the file, the target device extracts the integrity check value, calculates the real-time check value for the received executable file using the same preset hash algorithm, and compares the real-time check value with the integrity check value. If the two are consistent, it is confirmed that the file has not been tampered with or damaged, and the target device runs the executable file to start the target document reading application. If the two are inconsistent, the target device can refuse to run the file and indicate that the file is abnormal.

[0080] Optionally, digital signature technology can also be used to verify file integrity. Specifically, the current device can generate an integrity verification value for the executable file based on a preset hash algorithm, encrypt the verification value using a private key to generate a digital signature, and then forward the executable file, integrity verification value, and digital signature together to the target device. After receiving the data, the target device first decrypts the digital signature using the corresponding public key to obtain a baseline verification value, and then calculates the real-time verification value of the executable file using the same hash algorithm. The baseline verification value and the real-time verification value are compared. If they match and the public key verification passes, the application is run.

[0081] In one possible implementation, the components of the target document reading application and the embedded PDF binary data can be organized first, and redundant resources can be removed. Then, the application source code, dependent libraries, embedded PDF data, identification association rules and security access policy configuration items can be integrated and compiled using a compilation and packaging tool to generate an initial executable file. The integrity check value of the initial executable file is calculated based on a preset hash algorithm and stored accordingly. Finally, a single executable file bound to the check value is output, completing the packaging.

[0082] In the specific implementation process, refer to Figure 5 As shown, Figure 5This is a flowchart illustrating the process of packaging a target document reading application into an executable file in one embodiment. Component integration includes: compiling the front-end presentation layer to generate interface target files, compiling the back-end control layer and security protection components to generate logic target files, compressing the embedded PDF binary data and merging it with the resource segments of each target file, and statically linking dependent libraries (to avoid runtime dependencies on external libraries). Compilation and packaging include: creating a program entry point, compiling the integrated components into a unified intermediate file, and generating a single EXE file using a packaging tool (such as PyInstaller or Electron Packager). Verification and testing include: performing integrity verification (based on the SHA-256 algorithm), resource access validity testing (verifying whether the embedded PDF can be loaded correctly), security restriction function verification (testing copy, screenshot, and print interception effects), and cross-platform compatibility testing (verifying operational stability on Windows, macOS, and Linux systems). Distribution is only permitted after all tests are passed.

[0083] In this embodiment, by generating an integrity verification value through packaging and running it after verification with the target device, the integrity and security of executable file transmission and storage can be ensured, avoiding the running of tampered or damaged applications and embedded PDF documents.

[0084] In an exemplary embodiment, step S206 may include: configuring a secure access policy for portable document format documents in the backend control layer of the intermediate document reading application to obtain a target document reading application. The target device uses the target document reading application to temporarily load portable document format documents into memory and display them, and clears the memory after the portable document format documents are displayed. During the display of the portable document format documents, document content extraction requests are intercepted, and write requests to the temporary file directory in memory and memory dump attacks are intercepted through the target document reading application. Step S208 may include: S2081, packaging the target document reading application into an executable file and generating an integrity verification value for the target document reading application based on a preset algorithm; S2082, forwarding the executable file and the integrity verification value to the target device, so that the target device generates a real-time verification value for the target document reading application based on the executable file and the preset algorithm, and runs the target document reading application based on the executable file if the real-time verification value matches the integrity verification value.

[0085] In this way, by combining binary embedding (source protection), runtime restrictions (in-use protection), memory isolation (data flow protection), and integrity verification (file anti-tampering protection), a full-chain protection system is formed, which further improves the security of document distribution.

[0086] In one exemplary embodiment, such as Figure 6 As shown, the above document distribution method may further include:

[0087] S2011 integrates a document rendering component to form a front-end presentation layer; the document rendering component supports page rendering of portable document format documents under different operating system environments.

[0088] For example, a PDF processing library that supports cross-operating system rendering can be used as the document rendering component. This library includes, but is not limited to, Poppler, PDF.js, or iText. Furthermore, a front-end interface framework can be built based on web technologies or native development technologies, integrating the document rendering component into the framework. This enables the front-end presentation layer to perform page rendering, scaling, rotation, and page turning functions for PDF documents. Different operating system environments include, but are not limited to, Windows, macOS, or Linux operating systems.

[0089] Optionally, reading assistance components, including reading progress tracking and page navigation components, can be integrated into the front-end presentation layer to help users quickly locate document content. Alternatively, operation restriction components can also be integrated into the front-end presentation layer to disable the browser's default right-click menu and document content selection, thus preventing the copying of document content.

[0090] S2012, based on the front-end presentation layer, builds an initial document reading application.

[0091] For example, the initial document reading application can be constructed by: building a backend control layer, which may include resource loading subcomponents, permission control subcomponents, process management subcomponents, and system interaction adaptation subcomponents; integrating the frontend presentation layer with the backend control layer to enable collaborative operation between the function calls of the frontend presentation layer and the logical management of the backend control layer. Further, security protection subcomponents can be integrated, including memory isolation subcomponents and operation monitoring subcomponents; configuring basic application runtime parameters; and integrating the frontend presentation layer, backend control layer, security protection subcomponents, and dependency libraries to obtain the initial document reading application. In this way, by integrating the frontend presentation layer, backend control layer, and security protection subcomponents to build the initial document reading application, a stable platform can be provided for subsequent PDF document embedding and secure access policy configuration, while simultaneously deploying basic security control functions in advance to support secure document distribution and reading.

[0092] In one possible implementation, the front-end presentation layer is built using Web technologies, integrating the PDF.js library as a document rendering component to complete the page parsing and rendering of PDF documents. It also integrates a reading progress recording component and a page navigation component to enable saving reading progress and quick page navigation, and configures the code to disable the browser's default right-click menu and document content selection functionality. The back-end control layer is developed based on Node.js. The resource loading subcomponent reserves an interface for reading PDF binary data streams, the permission control subcomponent presets interception rules for copy, print, and save-as operations, the process management subcomponent configures the application's lifecycle management logic for startup, running, and shutdown, and the system adaptation subcomponent writes low-level interaction adaptation code for Windows, macOS, and Linux operating systems. In the security protection subcomponents, the memory isolation subcomponent sets the logic for temporarily loading PDF data and clearing the cache after use, and the operation monitoring subcomponent configures the detection and interception rules for screenshot and screen recording behaviors. The front-end presentation layer, back-end control layer, security protection subcomponents, and Electron framework dependencies are integrated, and a basic application package adapted to different operating systems is generated using a compilation tool. After functional testing and compatibility verification, the initial document reading application is obtained. The packaging tool can configure compilation parameters according to the target operating system: for Windows systems, it uses NSIS to package components into EXE files; for macOS systems, it uses Electron Packager to generate DMG format files; and for Linux systems, it generates DEB / RPM format files.

[0093] In the specific implementation process, refer to Figure 7 As shown, Figure 7 This is a schematic diagram of the architecture of a document reading application in one embodiment.

[0094] In this embodiment, by integrating a document rendering component (which supports cross-system rendering) to form a front-end display layer, the consistency of PDF document display under different operating system environments can be ensured.

[0095] In one exemplary embodiment, such as Figure 8 As shown, step S204 above may include:

[0096] S2041, convert the portable document format document to be distributed into binary data and create an access identifier corresponding to the binary data.

[0097] For example, a file reading tool can be used to read the PDF document to be distributed and convert it into binary data in the form of a byte stream, thus fully preserving the original structure and content information of the PDF document. A unique access identifier is created based on the characteristics of the binary data. The creation methods include: using a hash algorithm (such as the SHA-256 algorithm) to calculate the binary data and generate a fixed-length hash value as the access identifier; or calling a UUID (Universally Unique Identifier) ​​generation tool to generate a globally unique string as the access identifier. The access identifier is used to uniquely correspond to the embedded binary data, providing an index basis for subsequent document location.

[0098] S2042, embed the binary data into the initial document reading application, and record the association between the access identifier and the binary data in the resource mapping table of the initial document reading application to obtain the intermediate document reading application.

[0099] For example, a dedicated resource storage area can be reserved in the initial document reading application. This area is isolated from the application's code segment and dependency library segment to avoid data interference. A resource packaging tool embeds binary data as static resources into this dedicated resource storage area, achieving integrated storage of PDF documents and the initial document reading application. A resource mapping table is configured in the backend control layer of the initial document reading application. This resource mapping table can be a key-value pair structure, using the access identifier as the key and the location information of the binary data in the dedicated resource storage area, such as the starting address, data length, and storage path, as the value, recording a one-to-one correspondence between the access identifier and the binary data. A resource access interface is pre-developed in the initial document reading application. This interface allows querying the resource mapping table by inputting the access identifier, locating and reading the corresponding binary data, and after the embedding operation is completed, compiling and integrating the initial document reading application to obtain the intermediate document reading application.

[0100] In the specific implementation process, refer to Figure 9 As shown, Figure 9 This is a schematic diagram illustrating the process of embedding binary data into an initial document reading application in one embodiment.

[0101] In this embodiment, by converting PDF documents into embedded binary data, users are prevented from directly accessing the original PDF file, thus blocking the risk of illegal copying and forwarding of documents at the source. By creating a unique access identifier and recording its association with the binary data in the resource mapping table, the initial document reading application can quickly and accurately locate the embedded PDF document, ensuring the efficiency and accuracy of document retrieval.

[0102] In one possible implementation, step S202 above may include: obtaining a pre-built initial document reading application, which includes a front-end presentation layer and a back-end control layer. The front-end presentation layer is built based on Web technologies, integrating a PDF rendering engine and user interface components such as toolbars, reading areas, and navigation panels. It supports basic reading operations such as page rendering, zooming, and rotation, and disables the browser's default right-click menu. The back-end control layer includes a resource loading component, a process management component, and a system adaptation component. The resource loading component is used to read document data, the process management component is used to control the application lifecycle and memory resource allocation, and the system adaptation component is used to handle the underlying interaction differences between different operating systems.

[0103] The aforementioned S204 may include: converting the target PDF document to be distributed into binary data and embedding it as an embedded resource in the initial document reading application; assigning a unique access identifier to the binary data, recording the association between the unique access identifier and the binary data in the resource mapping table of the initial document reading application, thus obtaining an intermediate document reading application. The initial document reading application deploys a resource access interface that supports querying the resource mapping table based on the unique access identifier, thereby retrieving the corresponding embedded PDF binary data.

[0104] The above-mentioned S206 may include: configuring a security access policy for the intermediate document reading application. The security access policy includes a memory isolation policy and runtime permission restrictions. Specifically, it sets PDF data to be loaded only temporarily in memory, does not allocate local storage write permissions to the target PDF document, and prohibits data from being written to system temporary files; immediately clears the PDF data cache loaded into memory when switching pages, minimizing the application, or exiting, while employing memory protection technology to prevent memory dump attacks; disables document content selection and right-click menu copy functions, blocks the print and save-as operation entry points in the reading interface, and intercepts system screenshot and print commands to prevent document content extraction through interactive operations. Through the above configuration, the target document reading application is obtained.

[0105] Step S208 above may include: integrating the components of the target document reading application using a compilation and packaging tool, including compiling the front-end presentation layer and the back-end control layer to generate intermediate target files, merging the embedded PDF binary data with the resource segments of each component, statically linking the dependent libraries, creating the program entry point, and finally packaging it into a single EXE file. After packaging, multi-dimensional verification tests are performed to ensure that the file integrity, functional effectiveness, and security meet the standards. The single executable file is forwarded to the target device. After the target device receives it, double-clicking it will run the target document reading application corresponding to the executable file. Specifically, when the application is running, the resource access interface of the back-end control layer queries the resource mapping table based on the unique access identifier, locates and retrieves the embedded PDF binary data; the process management component controls the temporary loading of the binary data into memory, and the PDF rendering engine of the front-end presentation layer reads the data from memory and renders and displays it. At the same time, the copy, print, screenshot, and save as functions are disabled through runtime permission restrictions; when the reading operation ends, the page is switched, or the application exits, the process management component automatically triggers the memory cache clearing instruction to delete the PDF data loaded in memory, and no local temporary files are generated throughout the process.

[0106] The target document reading application can include a front-end presentation layer, a back-end control layer, security protection components, and packaging tool components. The front-end presentation layer can include: UI component sub-components: building user interfaces such as toolbars, reading areas, and navigation panels based on web technologies, providing users with intuitive reading operation entry points; PDF rendering sub-components: integrating PDF rendering engines (such as Poppler, PDF.js, iText, etc.) to implement basic reading functions such as page rendering, scaling, rotation, and page turning of PDF documents; Reading assistance sub-components: recording user reading progress and providing page navigation, chapter jumping, and other functions to improve reading convenience; Operation restriction sub-components: blocking the browser's default right-click menu and disabling document content selection, blocking the operation path of copying document content from the front end; the back-end control layer can include... The system includes: a resource loading subcomponent (which queries the application's embedded resource mapping table via a preset interface, reads PDF binary data from a dedicated resource storage area, and provides data support for front-end rendering); a permission control subcomponent (which implements restriction policies for operations such as copying, printing, and saving as, interfaces with front-end operation commands and security access rules, and intercepts unauthorized operation requests); a process management subcomponent (which controls the entire lifecycle of the application, from startup to shutdown, allocates memory resources reasonably, coordinates the collaborative work of various components, and ensures stable application operation); and a system adaptation subcomponent (which handles the underlying interaction differences between different operating systems such as Windows, macOS, and Linux, and adapts to the API calls and resource management mechanisms of each system). The system ensures cross-platform compatibility; security protection components may include a memory isolation subcomponent: limiting PDF data to a dedicated memory storage area, loading data only temporarily during document display, clearing the memory cache immediately after display ends or the application closes, prohibiting data from being written to temporary files, and preventing memory data leakage; an operation monitoring subcomponent: detecting screenshot and screen recording behavior of the target device in real time, intercepting related operations by calling the underlying interface of the operating system, and preventing the extraction of document content through indirect means; an integrity verification subcomponent: verifying application files based on hash algorithms (such as SHA-256) to prevent EXE files from being tampered with, cracked, or replaced, ensuring the security of the application and embedded documents; and a packaging toolkit. The component can include a resource processing subcomponent: converting the PDF document to be distributed into a binary data stream, compressing the binary resources to reduce file size, and configuring a resource mapping table to establish a unique identifier associated with the embedded data; a compilation and linking subcomponent: compiling the code of the front-end presentation layer and the back-end control layer to generate intermediate target files, merging the resource segments of each component, statically linking the dependent libraries, creating the program entry point, and finally integrating them into a unified executable file; and a signature verification subcomponent: adding a digital signature to the generated EXE file, combined with an integrity verification mechanism, to ensure that the file has not been tampered with during distribution and transmission, and providing users with a basis for authenticating legitimate files.

[0107] In summary, the above document distribution method ensures a dedicated and compatible reading environment for document distribution by acquiring a pre-built initial document reading application, thus avoiding compatibility issues with general-purpose readers. By embedding the portable document format document to be distributed and its corresponding identification and association rules into the initial document reading application, the document and reader are bound together, reducing the risk of the document being extracted and disseminated independently. Configuring a secure access policy for the portable document format document in the document reading application regulates access behavior, strengthening document protection and reducing document content leakage caused by various illegal operations. Furthermore, packaging the document reading application containing the embedded document into an executable file and forwarding it to the target device achieves integrated encapsulation of the portable document format document and the dedicated reader. The target device does not need to install an additional reader or manually associate the document; it can directly run the executable file to use it, improving document reading convenience and distribution efficiency. After the target device runs the executable file, it accurately locates the document through identification and association rules, calls and displays the document based on the secure access policy, ensuring that the document can only be legally viewed in a dedicated reading environment and that the original document cannot be accessed. This achieves secure and efficient document distribution, suitable for distribution scenarios involving documents related to magnetic drive systems.

[0108] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages in other steps. It is understood that the steps in different embodiments can be freely combined as needed, and all non-contradictory solutions formed by such combinations are within the scope of protection of this application.

[0109] Based on the same inventive concept, this application also provides a document distribution apparatus for implementing the document distribution method described above. The solution provided by this apparatus is similar to the implementation described in the above method; therefore, the specific limitations in one or more document distribution apparatus embodiments provided below can be found in the limitations of the document distribution method described above, and will not be repeated here.

[0110] In one exemplary embodiment, such as Figure 10As shown, a document distribution device 300 is provided, including: an application acquisition module 301, a document embedding module 302, a strategy configuration module 303, and a document distribution module 304, wherein:

[0111] Application acquisition module 301 is used to acquire a pre-built initial document reading application;

[0112] The document embedding module 302 is used to embed the identification and association rules of the portable document format document to be distributed and the portable document format document of the backend control layer into the initial document reading application of the backend control layer to obtain the intermediate document reading application;

[0113] The strategy configuration module 303 is used to configure the security access policy for portable document format documents in the backend control layer intermediate document reading application to obtain the target document reading application;

[0114] The document distribution module 304 is used to package the target document reading application of the backend control layer into an executable file and forward it to the target device, so that the target device of the backend control layer can run the target document reading application of the backend control layer based on the executable file of the backend control layer, locate the portable document format document of the backend control layer based on the backend control layer identification association rules, and call and display the portable document format document of the backend control layer based on the backend control layer security access policy.

[0115] In one embodiment, the policy configuration module 303 is further configured to:

[0116] Configure a secure access policy for portable document format documents in the backend control layer of the document reading application in the backend control layer to obtain the target document reading application. The target device in the backend control layer temporarily loads the portable document format documents in the backend control layer into memory and displays them through the target document reading application in the backend control layer. After the portable document format documents in the backend control layer are displayed, clear the memory of the backend control layer. During the display of the portable document format documents in the backend control layer, intercept document content extraction requests.

[0117] In one embodiment, the target device is further configured to intercept write requests to a temporary file directory in the backend control layer memory via a target document reading application in the backend control layer, and / or to intercept memory dump attacks.

[0118] In one embodiment, the document distribution module 304 is further configured to:

[0119] Package the target document reading application in the backend control layer into an executable file, and generate an integrity verification value for the target document reading application in the backend control layer based on a preset algorithm;

[0120] The executable file of the backend control layer and the integrity verification value of the backend control layer are forwarded to the target device, so that the target device of the backend control layer can generate a real-time verification value of the target document reading application based on the executable file of the backend control layer and the preset algorithm of the backend control layer. If the real-time verification value of the backend control layer is consistent with the integrity verification value of the backend control layer, the target document reading application of the backend control layer is run based on the executable file of the backend control layer.

[0121] In one embodiment, the document distribution device 300 further includes an application building module, configured to:

[0122] An integrated document rendering component is used to form the front-end presentation layer; the back-end control layer document rendering component supports page rendering of portable document formats under different operating system environments.

[0123] An initial document reading application is built based on a backend control layer and a frontend presentation layer.

[0124] In one embodiment, the document embedding module 302 is further configured to:

[0125] Convert the portable document format document to be distributed into binary data and create an access identifier corresponding to the binary data of the backend control layer;

[0126] The binary data of the backend control layer is embedded into the initial document reading application of the backend control layer, and the association between the backend control layer access identifier and the binary data of the backend control layer is recorded in the resource mapping table of the initial document reading application of the backend control layer to obtain the intermediate document reading application.

[0127] In one embodiment, the aforementioned portable document format document contains content related to the magnetic drive system.

[0128] Each module in the aforementioned document distribution device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can invoke and execute the operations corresponding to each module.

[0129] In one exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 11As shown, this computer device includes a processor, memory, input / output (I / O) interfaces, and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is also connected to the system bus via the I / O interfaces. The processor provides computational and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores pre-built initial document reading applications and portable document format documents to be distributed. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communicating with external terminals via a network connection. When executed by the processor, the computer program implements a document distribution method.

[0130] Those skilled in the art will understand that Figure 11 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0131] In one exemplary embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in the above-described method embodiments.

[0132] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps in the above method embodiments.

[0133] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above method embodiments.

[0134] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0135] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0136] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A document distribution method, characterized in that, The method includes: Get a pre-built initial document reading application; The portable document format document to be distributed and the identification and association rules of the portable document format document are embedded into the initial document reading application to obtain the intermediate document reading application; Configure the security access policy for the portable document format document in the intermediate document reading application to obtain the target document reading application; The target document reading application is packaged into an executable file and forwarded to the target device, so that the target device runs the target document reading application based on the executable file, and the target document reading application locates the portable document format document based on the identification association rules, and calls and displays the portable document format document based on the security access policy.

2. The method according to claim 1, characterized in that, The step of configuring a security access policy for the portable document format document in the intermediate document reading application to obtain the target document reading application includes: In the backend control layer of the intermediate document reading application, a security access policy for the portable document format document is configured to obtain the target document reading application. The target device is used to temporarily load the portable document format document into memory and display it through the target document reading application, and to clear the memory after the portable document format document is displayed. In addition, during the display of the portable document format document, document content extraction requests are intercepted.

3. The method according to claim 2, characterized in that, The target device is also used to intercept write requests to a temporary file directory in the memory via the target document reading application, and / or to intercept memory dump attacks.

4. The method according to claim 1, characterized in that, The step of packaging the target document reading application into an executable file and forwarding it to the target device, so that the target device runs the target document reading application based on the executable file, includes: The target document reading application is packaged into an executable file, and an integrity verification value for the target document reading application is generated based on a preset algorithm. The executable file and the integrity verification value are forwarded to the target device, so that the target device generates a real-time verification value for the target document reading application based on the executable file and the preset algorithm, and runs the target document reading application based on the executable file if the real-time verification value matches the integrity verification value.

5. The method according to claim 1, characterized in that, Prior to obtaining the pre-built initial document reading application, the following is included: An integrated document rendering component is used to form a front-end presentation layer; wherein, the document rendering component supports page rendering of portable document format documents under different operating system environments; Based on the aforementioned front-end presentation layer, an initial document reading application is constructed.

6. The method according to claim 1, characterized in that, The step of embedding the portable document format document to be distributed and the identification and association rules of the portable document format document into the initial document reading application to obtain the intermediate document reading application includes: Convert the portable document format document to be distributed into binary data, and create an access identifier corresponding to the binary data; The binary data is embedded into the initial document reading application, and the association between the access identifier and the binary data is recorded in the resource mapping table of the initial document reading application to obtain the intermediate document reading application.

7. The method according to claim 1, characterized in that, The portable document format contains content related to magnetic drive systems.

8. A document distribution device, characterized in that, The device includes: The application acquisition module is used to acquire a pre-built initial document reading application; The document embedding module is used to embed the portable document format document to be distributed and the identification and association rules of the portable document format document into the initial document reading application to obtain an intermediate document reading application; The strategy configuration module is used to configure the security access policy of the portable document format document in the intermediate document reading application to obtain the target document reading application; The document distribution module is used to package the target document reading application into an executable file and forward it to the target device, so that the target device runs the target document reading application based on the executable file, locates the portable document format document based on the identification association rules, and calls and displays the portable document format document based on the security access policy.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 7.

Images