Cloud desktop file tracking method and system, electronic device and storage medium

Abstract

The present application belongs to the technical field of file tracking and relates to a cloud desktop file tracking method and system, an electronic device and a storage medium. The method comprises: configuring file tracking rules and, on the basis of a switch in the file tracking rules, determining whether to activate a filter driver module; if the filter driver module is activated, monitoring file creation, modification, renaming and deletion events; if an event has been detected, triggering the execution of a corresponding callback function to acquire an operation type, a process name and file information, and matching the file information with the file tracking rules; if the file information matches the file tracking rules, recording logs, determining whether a deleted file requires remote backup, and if remote backup is required, backing up the file and performing backup marking; performing structured processing on the logs to generate a file tracking record; reporting the file tracking record and uploading the backup file to a cloud management platform; and the cloud management platform processing and displaying the file tracking record and storing the backup file. The present application can implement tracking of all files.

Description

Cloud desktop file tracking method, system, electronic device and storage medium

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims priority to the Chinese patent application filed with the China Patent Office on December 11, 2023, with application number 202311694414.4 and invention name “A Cloud Desktop File Tracking Method and System”, the entire contents of which are incorporated by reference into this application. Technical Field

[0003] The present application relates to the field of file tracking technology, and in particular to a cloud desktop file tracking method, system, electronic device, and storage medium. Background Art

[0004] Existing file tracking technology solutions include:

[0005] 1. File synchronization and version control: File tracking in a cloud desktop environment can be achieved by implementing a file synchronization and version control mechanism. This can be achieved by using cloud storage services (such as Dropbox, Google Drive, OneDrive, etc.) to automatically synchronize and back up files and record the file version history. When a file is modified or deleted, the file change record and historical version can be tracked.

[0006] 2. Windows operating system API: For example, use FindFirstChangeNotification and ReadDirectoryChanges to monitor the creation, modification, or deletion of Windows files or directories.

[0007] Problems with existing technical solutions:

[0008] The disadvantage of Solution 1 is that it relies on a third-party cloud storage service, the user configuration operation is cumbersome, and the network requirements are high. Real-time performance cannot be guaranteed, and only a limited number of file directories can be configured.

[0009] The disadvantage of Solution 2 is that it requires maintaining a background application layer program, which may be stopped by the user or blocked by antivirus software, and can only monitor a specific folder. Summary of the Invention

[0010] In view of the above deficiencies in the prior art, the purpose of the application is to provide a cloud desktop file tracking method, system, electronic device and storage medium that can track all files in the system.

[0011] In a first aspect of the present application, a cloud desktop file tracking method is proposed, comprising:

[0012] The administrator configures file tracking rules on the cloud management platform. The file tracking rules include at least: switch, file suffix, file path, specified directory, operation type, excluded directory, whether to back up and delete files, and reporting frequency;

[0013] The rule management module obtains the file tracking rule from the cloud management platform through the HTTP interface, and determines whether to start the filter driver module according to the switch in the file tracking rule;

[0014] If the result of the determination is to start the filter driver module, the filter driver module monitors file creation, modification, renaming and deletion events;

[0015] If the filter driver module monitors the creation, modification, renaming and deletion events of files, it triggers the execution of the corresponding callback function, obtains the operation type, process name and file information, and matches the file information with the file tracking rules;

[0016] If the file information matches the file tracking rule, a log is recorded, wherein the log includes time, operation type, process name and file information;

[0017] Determine whether the deleted file needs to be remotely backed up. If the result of the determination is that the deleted file needs to be remotely backed up, the filter driver module backs up the file before deleting it and marks it as a backup.

[0018] The log processing module performs structured processing on the log to generate a file tracking record;

[0019] The data reporting module reports the file tracking record and uploads the backup file to the cloud management platform;

[0020] The cloud management platform processes and displays the file tracking records and stores the backup files.

[0021] Optionally, the above-mentioned cloud desktop file tracking method further includes:

[0022] If the file information does not match the file tracking rules;

[0023] The filter driver module monitors file creation, modification, renaming and deletion events.

[0024] Optionally, the above-mentioned cloud desktop file tracking method further includes:

[0025] Determine whether the deleted files need remote backup. If the result is that the deleted files do not need remote backup;

[0026] The log processing module performs structured processing on the log to generate a file tracking record;

[0027] The data reporting module regularly reports the file tracking record and uploads the tracking record to the cloud management platform;

[0028] The cloud management platform processes and displays file tracking records and stores backup files.

[0029] Optionally, in the above-mentioned cloud desktop file tracking method, the data reporting module reports the file tracking record in a reporting manner including: reporting according to a reporting frequency in the file tracking rule.

[0030] Optionally, in the above-mentioned cloud desktop file tracking method, the data reporting module, the rule management module, the filter driver module and the log processing module are all set in the cloud desktop.

[0031] Optionally, in the above-mentioned cloud desktop file tracking method, the file information includes at least: path, name, size and md5.

[0032] The second aspect of this application further proposes a cloud desktop file tracking system, comprising:

[0033] The cloud management platform is used by administrators to configure file tracking rules, store and display file tracking records, and manage backed-up deleted files.

[0034] The rule management module is used to obtain file tracking rules through the communication mechanism of the cloud management platform and start or stop the filter driver module according to the switches in the file tracking rules;

[0035] The filter driver module is used to monitor file creation, renaming, modification, and deletion events through the Windows driver, obtain file information and generate logs; back up files and create markers before they are deleted;

[0036] The log processing module is used to perform structured processing on the logs generated by the filter driver module and generate file tracking records;

[0037] The data reporting module is used to report tracking records according to the reporting frequency and upload the backup files to the cloud management platform.

[0038] Optionally, in the above-mentioned cloud desktop file tracking system, the file tracking rules include at least: switch, file suffix, file path, specified directory, operation type, excluded directory, whether to back up and delete files, and reporting frequency.

[0039] In a third aspect of the present application, an electronic device is provided, comprising: a processor and a memory;

[0040] The processor is configured to execute any one of the cloud desktop file tracking methods described above by calling the program or instruction stored in the memory.

[0041] In a fourth aspect of the present application, a computer-readable storage medium is further proposed, wherein the computer-readable storage medium stores a program or instruction, and the program or instruction enables a computer to execute any one of the cloud desktop file tracking methods described above.

[0042] The beneficial effects of the present application are as follows: the present application can track all files under the operating system by default, and can also configure a specified file directory; by configuring multiple target file suffixes, it can track specific file types; it supports configuring file deletion backup policies, and automatically backs up files to the cloud management platform server before they are deleted, and can be restored when necessary; the design of rule management modules, filter driver modules, log processing modules, and data reporting modules realizes low-coupling communication between modules, which is conducive to saving development and operation costs; the filter driver module implemented based on system kernel technology can track all files in the system with low performance overhead and high reliability; it can track change events of all files in the system in real time, and record relevant file information when events occur, and then upload the tracking records to the cloud management platform via the network for subsequent tracking and auditing. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] The accompanying drawings are only for the purpose of illustrating specific embodiments and are not to be considered as limiting the present application. Throughout the drawings, the same reference numerals represent the same components. Obviously, the drawings described below are only some of the embodiments described in the present application. Those skilled in the art can also obtain other drawings based on these drawings.

[0044] FIG1 is a diagram of a cloud desktop file tracking method provided by an embodiment of the present application;

[0045] FIG2 is a second diagram of a cloud desktop file tracking method provided by an embodiment of the present application;

[0046] FIG3 is a diagram of a cloud desktop file tracking method provided by an embodiment of the present application;

[0047] FIG4 is a diagram of a cloud desktop file tracking system provided by an embodiment of the present application;

[0048] FIG5 is a schematic block diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0049] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present application, the technical solutions of the present application will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. It should be understood that these descriptions are merely exemplary and are not intended to limit the scope of the present application. Based on the embodiments of the present application, all other embodiments obtained by those of ordinary skill in the art without making creative work should fall within the scope of protection of this application.

[0050] Furthermore, in the following description, descriptions of well-known structures and technologies are omitted to avoid unnecessarily obscuring the concepts disclosed in this application.

[0051] In the description of this application, the terms "first," "second," and "third" are used for descriptive purposes only and should not be construed as indicating or implying relative importance. The terms "mounted," "connected," and "connected" should be interpreted broadly, for example, to mean fixed, removable, or integral; mechanical or electrical; direct or indirect through an intermediary; and internal communication between two components. Those skilled in the art will understand the specific meanings of these terms in this application based on the specific circumstances.

[0052] Exemplary embodiments will be described in detail herein, with examples illustrated in the accompanying drawings. In the following description, when referring to the drawings, identical numerals in different figures represent identical or similar elements, unless otherwise indicated. The embodiments described in the following exemplary embodiments are not intended to represent all embodiments consistent with the present application. Rather, they are merely examples of methods and systems consistent with certain aspects of the present application, as detailed in the appended claims.

[0053] This application proposes a cloud desktop file tracking method, system, electronic device and storage medium, which can track all files in the system with low performance overhead and high reliability.

[0054] Method Example

[0055] Before introducing this method, the professional terms involved in this patent are introduced.

[0056] Cloud desktop: It is a virtual desktop solution based on cloud computing technology. It moves the traditional desktop environment to the cloud. Users can access and use their own desktop environment through a network connection without relying on specific physical devices.

[0057] File tracking is the process of monitoring, recording, and tracking file or document activity and changes in real time. It helps users or organizations track file creation, modification, and deletion events, while also recording information like file path, size, and timestamp to improve file management security, compliance, and visibility.

[0058] FIG1 is a diagram of a cloud desktop file tracking method provided in an embodiment of the present application.

[0059] In a first aspect, an embodiment of the present application provides a cloud desktop file tracking method, which includes nine steps S1 to S9, as shown in FIG1 :

[0060] S1: The administrator configures file tracking rules on the cloud management platform. The file tracking rules include at least: switch, file suffix, file path, specified directory, operation type, excluded directory, whether to back up and delete files, and reporting frequency.

[0061] Specifically, in an embodiment of the present application, the administrator configures file tracking rules such as switches, file suffixes, file paths, specified directories, operation types, excluded directories, whether to back up and delete files, and reporting frequencies on the cloud management platform.

[0062] It should be understood that file tracking rules include at least: switch, file suffix, file path, specified directory, operation type, excluded directory, whether to back up and delete files, and reporting frequency. In some embodiments, other file tracking rules may also be included, and this does not limit the scope of protection of this application.

[0063] S2: The rule management module obtains the file tracking rule from the cloud management platform through the HTTP interface, and determines whether to start the filter driver module according to the switch in the file tracking rule.

[0064] Specifically, in an embodiment of the present application, the rule management module obtains the file tracking rules from the cloud management platform through the HTTP interface: switch, file suffix, file path, specified directory, operation type, excluded directory, whether to back up deleted files and reporting frequency, and determines whether to start the filter driver module based on the switch in the file tracking rule.

[0065] S3: If the judgment result is to start the filter driver module, the filter driver module monitors the creation, modification, renaming and deletion events of the file.

[0066] Specifically, in an embodiment of the present application, whether to start the filter driver module is determined based on the switch in the file tracking rule. If the judgment result is to start the filter driver module, the Windows driver of the filter driver module monitors the creation, modification, renaming and deletion events of the file.

[0067] S4: If the filter driver module monitors the creation, modification, renaming and deletion events of the file, it triggers the execution of the corresponding callback function, obtains the operation type, process name and file information, and matches the file information with the file tracking rules.

[0068] Specifically, in an embodiment of the present application, if the Windows driver of the filter driver module monitors the creation, modification, renaming and deletion events of files, it triggers the execution of the corresponding callback function, obtains the operation type, process name and file information, and matches the file information such as path, name, size, md5 with the file tracking rules.

[0069] S5: If the file information matches the file tracking rule, a log is recorded. The log includes time, operation type, process name, and file information.

[0070] Specifically, if the file information matches the file tracking rules, the creation, modification, rename and deletion logs are recorded.

[0071] S6: Determine whether the deleted file needs to be remotely backed up. If the result of the determination is that the deleted file needs to be remotely backed up, the filter driver module backs up the file before deleting it and marks it for backup.

[0072] Specifically, in an embodiment of the present application, after generating a deletion event log, it is determined whether the deleted file needs to be remotely backed up. If the judgment result is that the deleted file needs to be remotely backed up, the filter driver module backs up the file before deletion and marks it for backup.

[0073] S7: The log processing module performs structured processing on the log and generates file tracking records.

[0074] Specifically, in the embodiment of the present application, after the creation, modification, and deletion event logs are generated, the log processing module performs structured processing on the logs to generate file tracking records.

[0075] S8: The data reporting module reports the file tracking record and uploads the backup file to the cloud management platform.

[0076] Specifically, in an embodiment of the present application, after the file tracking record is generated, the data reporting module reports the file tracking record and uploads the backup file to the cloud management platform.

[0077] S9: The cloud management platform processes and displays file tracking records and stores backup files.

[0078] Specifically, in an embodiment of the present application, files are automatically backed up to the cloud management platform server before being deleted and can be restored when necessary, thereby improving the user experience.

[0079] FIG2 is a second diagram of a cloud desktop file tracking method provided in an embodiment of the present application.

[0080] Optionally, the above-mentioned cloud desktop file tracking method, in conjunction with FIG2 , further includes steps S21 to S22:

[0081] S21: If the file information does not match the file tracking rule;

[0082] S22: The filter driver module monitors file creation, modification, renaming and deletion events.

[0083] Specifically, in an embodiment of the present application, if the Windows driver of the filter driver module monitors the creation, modification, renaming and deletion events of the file, it determines whether the file information matches the file tracking rules. If the file information does not match the file tracking rules, the Windows driver of the filter driver module re-monitors the creation, modification, renaming and deletion events of the file.

[0084] FIG3 is a third diagram of a cloud desktop file tracking method provided in an embodiment of the present application.

[0085] Optionally, the above-mentioned cloud desktop file tracking method, in conjunction with FIG3 , further includes four steps S31 to S34:

[0086] S31: Determine whether the deleted file needs remote backup. If the result of the determination is that the deleted file does not need remote backup;

[0087] S32: The log processing module performs structured processing on the log and generates a file tracking record;

[0088] S33: The data reporting module regularly reports file tracking records and uploads them to the cloud management platform;

[0089] S34: The cloud management platform processes and displays the file tracking record.

[0090] Specifically, in an embodiment of the present application, if the judgment result is that the file suffix and file path of the file of the deletion event monitored by the Windows driver of the filtering driver module match the file suffix and file path in the file tracking rule, the file path, time, size and other information of the deletion event are obtained, and after the deletion event log is generated, it is determined whether the deleted file needs to be remotely backed up. If the judgment result is that the deleted file does not need to be remotely backed up, the log processing module performs structured processing on the log and generates a file tracking record. The data reporting module regularly reports the file tracking record and uploads it to the cloud management platform. The cloud management platform processes and displays the file tracking record.

[0091] Optionally, in the above-mentioned cloud desktop file tracking method, the data reporting module reports the file tracking record in a reporting manner including: reporting according to a reporting frequency in the file tracking rule.

[0092] Specifically, in an embodiment of the present application, the data reporting module reports file tracking records in a manner including: reporting according to the reporting frequency in the file tracking rules. It should be understood that the reporting frequency here is flexibly set, which can be once every half an hour, once a day, once a week, etc., and does not limit the scope of protection of the present application.

[0093] Optionally, in the above-mentioned cloud desktop file tracking method, the data reporting module, the rule management module, the filter driver module and the log processing module are all set in the cloud desktop.

[0094] Specifically, in the embodiment of the present application, the data reporting module, rule management module, filter driver module and log processing module are all set on the cloud desktop; the rule management module, filter driver module, log processing module and data reporting module realize low-coupling communication between modules, which is conducive to saving development and operation and maintenance costs.

[0095] Optionally, in the above-mentioned cloud desktop file tracking method, the file information includes at least: a file path and a file size.

[0096] Specifically, in an embodiment of the present application, if the judgment result is that the file suffix and file path of the file of the creation event monitored by the Windows driver of the filter driver module match the file suffix and file path in the file tracking rule, the file path, time, size and other information are obtained, and a creation event log is generated; if the judgment result is that the file suffix and file path of the file of the modification event monitored by the Windows driver of the filter driver module match the file suffix and file path in the file tracking rule, the file path, time, size and other information are obtained, and a modification event log is generated; if the judgment result is that the file suffix and file path of the file of the deletion event monitored by the Windows driver of the filter driver module match the file suffix and file path in the file tracking rule, the file path, time, size and other information of the deletion event are obtained, and a deletion event log is generated.

[0097] The file information here at least includes: the file information at least includes: path, name, size and md5.

[0098] The following describes a cloud desktop file tracking method in this application in combination with two specific embodiments.

[0099] Example 1:

[0100] Administrators configure file tracking rules through the cloud management platform;

[0101] The application is started after the cloud desktop is powered on, and calls the cloud management platform interface to obtain file tracking rules. If the switch in the file tracking rule is turned on, the filter driver module is started;

[0102] After the filter driver module is started, it establishes a communication mechanism with the application layer program and reads the file tracking rules configured on the cloud management platform;

[0103] The filter driver module registers WDM IRP event callback functions with the system, where IRP_MJ_CREATE is used to intercept file creation requests, and IRP_MJ_SET_INFORMATION is used to intercept file deletion or rename requests, obtain file attributes, etc.

[0104] The filter driver module creates a thread and cyclically listens for system events. When a file is created, deleted, modified, or renamed, the corresponding callback function is triggered to execute and obtain the operation type, process name, and file information such as path, name, size, MD5, etc.

[0105] Match the acquired file information with the file tracking rules. If a match is found, a log is recorded, including the time, operation type, process name, and file information.

[0106] The filter driver module notifies the application layer to back up the files to be deleted. After the application layer backup is completed, the logs and files are uploaded to the cloud management platform.

[0107] The cloud management platform saves logs and files and provides functions such as interface display and file download;

[0108] If the administrator modifies the file tracking rules, the backend automatically sends a signal, the application layer re-requests the policy and notifies the driver to update the policy, ensuring that it takes effect in real time;

[0109] The filter driver module continues to monitor the next event, loops the above process, and exits when the system is shut down or the function switch is turned off.

[0110] Example 2:

[0111] The administrator configures file tracking rules on the cloud management platform, including enabling the function, setting the file extension to .doc, specifying the directory D:\documents, and enabling remote backup.

[0112] The user's cloud desktop is turned on, the application layer program is started, and the HTTP interface is called to obtain the file tracking policy from the cloud management platform;

[0113] The filter driver module of the driver layer is started, the file tracking strategy is read into the memory, and the system IRP callback function is registered;

[0114] The filter driver module monitors file creation, deletion, modification or renaming events;

[0115] An application named danger.exe silently deletes the file C:\Users\John\A.doc in the background, triggering the execution of the callback function;

[0116] The filter driver module determines that A.doc matches the configured file suffix;

[0117] The filter driver module obtains the time, operation type deletion, application name danger.exe, and related information of the file to be deleted A.doc, such as path, name, size, md5, etc., and records it in the log;

[0118] The filter driver module notifies the application layer to back up the file and waits. The application layer backs up file A.doc and replies to the driver layer.

[0119] The application layer uploads the file and the tracking log to the cloud management platform;

[0120] The filter driver module continues to monitor the next system event;

[0121] The cloud management platform processes and displays file tracking logs, including the time, type, process name, and path of file operations. The administrator finds the suspicious program danger.exe.

[0122] The cloud management platform provided a download link for the backup file, and the user successfully retrieved the deleted file A.doc.

[0123] System Example

[0124] FIG4 is a diagram of a cloud desktop file tracking system provided in an embodiment of the present application.

[0125] In a second aspect, an embodiment of the present application further provides a cloud desktop file tracking system, which includes:

[0126] The cloud management platform 41 is used by administrators to configure file tracking rules, store and display file tracking records, and manage backed-up deleted files.

[0127] Specifically, in an embodiment of the present application, the administrator can configure file tracking rules through the cloud management platform 41. The file tracking rules include switches, file suffixes, file paths, whether to back up deleted files, reporting frequency, etc.; the cloud management platform is also used to store and visually display file tracking records; and manage backed up deleted files.

[0128] The rule management module 42 is used to obtain file tracking rules through the communication mechanism of the cloud management platform and start or stop the filter driver module according to the switch in the file tracking rules.

[0129] Specifically, in an embodiment of the present application, the rule management module 42 obtains the file tracking rules through a communication mechanism with the cloud management platform 41: switch, file suffix, file path, whether to back up and delete files, and reporting frequency, and determines whether to start the filter driver module 43 based on the switch in the file tracking rules.

[0130] The filter driver module 43 is used to monitor file creation, modification, and deletion events through the Windows driver, obtain file information and generate logs; back up files and create marks before deleting files.

[0131] Specifically, in an embodiment of the present application, the filter driver module 43 monitors file creation, modification, and deletion events through the Windows driver, obtains the file path, time, and size to generate creation, modification, and deletion event logs, and backs up the file and creates a mark before the file is deleted.

[0132] The log processing module 44 is used to perform structured processing on the logs generated by the filter driver module to generate file tracking records.

[0133] Specifically, in the embodiment of the present application, the log processing module 44 is used to perform structured processing on the log generated by the filter driver module to generate a file tracking record.

[0134] The data reporting module 45 is used to report the tracking record according to the reporting frequency and upload the backup file to the cloud management platform.

[0135] Specifically, in the embodiment of the present application, the data reporting module 45 is used to report tracking records to the cloud management platform according to the reporting frequency, and upload the backup files of deleted files to the cloud management platform.

[0136] Optionally, in the above-mentioned cloud desktop file tracking system, the file tracking rules include at least: switch, file suffix, file path, specified directory, operation type, excluded directory, whether to back up and delete files, and reporting frequency.

[0137] In a third aspect, an embodiment of the present application further provides an electronic device, comprising: a processor and a memory;

[0138] The processor is used to execute any one of the cloud desktop file tracking methods described above by calling a program or instruction stored in the memory.

[0139] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, which stores a program or instruction, and the program or instruction enables a computer to execute any one of the cloud desktop file tracking methods above.

[0140] FIG5 is a schematic block diagram of an electronic device provided in an embodiment of the present application.

[0141] As shown in Figure 5 , the electronic device includes at least one processor 501, at least one memory 502, and at least one communication interface 503. The various components within the electronic device are coupled together via a bus system 504. Communication interface 503 is used to transmit information with external devices. It will be understood that bus system 504 is used to facilitate communication between these components. In addition to a data bus, bus system 504 also includes a power bus, a control bus, and a status signal bus. However, for clarity, in Figure 5 , all of these buses are labeled as bus system 504.

[0142] It can be understood that the memory 502 in this embodiment can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories.

[0143] In some embodiments, the memory 502 stores the following elements, executable units or data structures, or a subset or an extended set thereof: an operating system and application programs.

[0144] Among them, the operating system includes various system programs, such as the framework layer, the core library layer, the driver layer, etc., which are used to implement various basic services and process hardware-based tasks. The application program includes various application programs, such as a media player (Media Player), a browser (Browser), etc., which are used to implement various application services. A program that implements any of the methods in the cloud desktop file tracking method provided in the embodiment of the present application can be included in the application program.

[0145] In an embodiment of the present application, the processor 501 calls a program or instruction stored in the memory 502, specifically, a program or instruction stored in an application, and the processor 501 is used to execute the steps of each embodiment of a cloud desktop file tracking method provided in an embodiment of the present application.

[0146] The administrator configures file tracking rules on the cloud management platform. The file tracking rules include at least: switch, file suffix, file path, specified directory, operation type, excluded directory, whether to back up and delete files, and reporting frequency;

[0147] The rule management module obtains the file tracking rule from the cloud management platform through the HTTP interface, and determines whether to start the filter driver module according to the switch in the file tracking rule;

[0148] If the result of the determination is to start the filter driver module, the filter driver module monitors file creation, modification, renaming and deletion events;

[0149] If the filter driver module monitors the creation, modification, renaming and deletion events of files, it triggers the execution of the corresponding callback function, obtains the operation type, process name and file information, and matches the file information with the file tracking rules;

[0150] If the file information matches the file tracking rule, a log is recorded, wherein the log includes time, operation type, process name and file information;

[0151] Determine whether the deleted file needs to be remotely backed up. If the result of the determination is that the deleted file needs to be remotely backed up, the filter driver module backs up the file before deleting it and marks it as a backup.

[0152] The log processing module performs structured processing on the log to generate a file tracking record;

[0153] The data reporting module reports the file tracking record and uploads the backup file to the cloud management platform;

[0154] The cloud management platform processes and displays the file tracking records and stores the backup files.

[0155] Any of the cloud desktop file tracking methods provided in the embodiments of the present application can be applied to the processor 501, or implemented by the processor 501. The processor 501 can be an integrated circuit chip with signal processing capabilities. During the implementation process, each step of the above method can be completed by the hardware integrated logic circuit in the processor 501 or instructions in the form of software. The above-mentioned processor 501 can be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc.

[0156] Any of the steps in the cloud desktop file tracking method provided in the embodiments of this application can be directly implemented and executed by a hardware decoding processor, or by a combination of hardware and software units within the decoding processor. The software units can be located in a storage medium well-known in the art, such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, etc. The storage medium is located in memory 502, and processor 501 reads the information in memory 502 and, in conjunction with the hardware, completes the steps of the method.

[0157] Those skilled in the art will understand that although some embodiments described herein include certain features included in other embodiments but not other features, the combination of features from different embodiments is intended to be within the scope of this application and to form different embodiments.

[0158] Those skilled in the art will appreciate that the description of each embodiment has its own focus, and for parts not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0159] Although the embodiments of the present application are described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present application, and such modifications and variations shall fall within the scope defined by the appended claims. The above are only specific embodiments of the present application, but the scope of protection of the present application is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present application, and such modifications or replacements shall be included in the scope of protection of the present application. Therefore, the scope of protection of the present application shall be based on the scope of protection of the claims.

[0160] The above are only specific embodiments of the present application, but the scope of protection of the present application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and such modifications or substitutions should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A cloud desktop file tracking method, characterized in that: include: The administrator configures file tracking rules on the cloud management platform, where the file tracking rules at least include: switch, file suffix, file path, specified directory, operation type, excluded directory, whether to back up and delete files, and reporting frequency; The rule management module obtains the file tracking rule from the cloud management platform through the HTTP interface, and determines whether to start the filter driver module according to the switch in the file tracking rule; If the result of the determination is to start the filter driver module, the filter driver module monitors the creation, modification, renaming and deletion events of the file; If the filter driver module monitors the creation, modification, renaming and deletion events of files, it triggers the execution of the corresponding callback function, obtains the operation type, process name and file information, and matches the file information with the file tracking rules; If the file information matches the file tracking rule, a log is recorded, wherein the log includes time, operation type, process name and file information; Determine whether the deleted file needs remote backup. If the result of the determination is that the deleted file needs remote backup, the filter driver module backs up the file before deleting it and marks it for backup. The log processing module performs structured processing on the log to generate a file tracking record; The data reporting module reports the file tracking record and uploads the backup file to the cloud management platform; The cloud management platform processes and displays the file tracking records and stores the backup files.

2. The cloud desktop file tracking method according to claim 1, characterized in that: The method further comprises: If the file information does not match the file tracking rule; The filter driver module monitors file creation, modification, renaming and deletion events.

3. The cloud desktop file tracking method according to claim 1, characterized in that: The method further comprises: Determine whether the deleted files need to be remotely backed up. If the judgment result is that the deleted files do not need to be remotely backed up; The log processing module performs structured processing on the log to generate a file tracking record; The data reporting module regularly reports the file tracking record and uploads the tracking record to the cloud management platform; The cloud management platform processes and displays file tracking records and stores backup files.

4. The cloud desktop file tracking method according to claim 1, characterized in that: The data reporting module reports the file tracking record in a manner including: reporting according to a reporting frequency in a file tracking rule.

5. The cloud desktop file tracking method according to claim 1, characterized in that: The data reporting module, the rule management module, the filter driver module and the log processing module are all arranged on the cloud desktop.

6. The cloud desktop file tracking method according to claim 1, characterized in that: The file information at least includes: path, name, size and md5.

7. A cloud desktop file tracking system, characterized in that: include: The cloud management platform is used by administrators to configure file tracking rules, store and display file tracking records; Manage deleted files for backup. The rule management module is used to obtain the file tracking rules through the communication mechanism of the cloud management platform, and start or stop the filter driver module according to the switch in the file tracking rules; The filter driver module is used to monitor file creation, renaming, modification and deletion events through the Windows driver, obtain file information and generate logs; back up files and create markers before deleting them; The log processing module is used to perform structured processing on the logs generated by the filter driver module and generate file tracking records; The data reporting module is used to report tracking records according to the reporting frequency and upload the backup files to the cloud management platform.

8. The cloud desktop file tracking system according to claim 7, characterized in that: The file tracking rules at least include: switch, file suffix, file path, specified directory, operation type, excluded directory, whether to back up and delete files, and reporting frequency.

9. An electronic device, characterized in that: include: Processor and memory; The processor is used to execute the cloud desktop file tracking method according to any one of claims 1 to 6 by calling the program or instruction stored in the memory.

10. A computer-readable storage medium, characterized in that: The non-transitory computer-readable storage medium stores a program or instruction, and the program or instruction enables a computer to execute the cloud desktop file tracking method according to any one of claims 1 to 6.

Images