170 results about "Document security" patented technology

The invention relates to the technical field of archive management, in particular to an archive full life cycle management system and method based on cloud computing. The method specifically comprises an intelligent classification module based on a format adaptation degree function and semantic density analysis, a five-stage life cycle management module, and an authority scheduling module fusing RBAC / ABAC authority control and block chain auditing, and based on a matrix decomposition archiving static coding mechanism, document security storage and analysis are realized through an orthogonal matrix and pseudo-inverse operation, and the file security is realized. The data security in a long-term archiving scene is improved; cloud storage resources are dynamically optimized according to the document life cycle state and the access frequency, and the storage cost is reduced in combination with a cold and hot layering strategy; and an AI algorithm is introduced, the archive retention value is automatically evaluated according to laws and regulations and semantic analysis, and a compliant destruction decision is realized. According to the method, through multi-model fusion metadata extraction, dynamic strategy binding and automatic state transition, the whole-process management efficiency and safety are remarkably improved.

The present disclosure provides a method for securing document content. A document security manager receives a digital document containing original text and image content. The original text content is processed to identify text portions by parsing annotations, analyzing proximate text, extracting content within the determined scope, and determining encryption attributes. The original image content is processed to identify image portions by detecting user-defined selections or employing a neural network to identify sensitive objects. Encrypt content requests are generated including the identified text and image portions with associated attributes and metadata. The requests are transmitted to a cryptographic engine, which returns encrypted content. A partially encrypted document is built by replacing original content with masking symbols, applying visual obfuscation, embedding encrypted content as metadata, and updating document properties to indicate encrypted content.

The present disclosure provides a method for securing document content. A document security manager receives a digital document containing original text and image content. The original text content is processed to identify text portions by parsing annotations, analyzing proximate text, extracting content within the determined scope, and determining encryption attributes. The original image content is processed to identify image portions by detecting user-defined selections or employing a neural network to identify sensitive objects. Encrypt content requests are generated including the identified text and image portions with associated attributes and metadata. The requests are transmitted to a cryptographic engine, which returns encrypted content. A partially encrypted document is built by replacing original content with masking symbols, applying visual obfuscation, embedding encrypted content as metadata, and updating document properties to indicate encrypted content.

Disclosed is a cloud-based security system implemented using API notifications provided by a GenAI service or application. The security system provides bidirectional traffic inspection to protect against privacy and security concerns related to the GenAI services. The security system receives notifications of traffic including requests directed to the GenAI service from endpoints as well as the GenAI responses. The security system includes a GenAI request classifier trained to classify prompts as benign, prompt injection attack, or uploaded files. The security system further includes a GenAI response classifier trained to classify responses as normal, leaked system prompt, leaked user uploaded files, or leaked training data. Based on the classification, and optionally other security analysis, the security system may enforce security policies based on both the requests and responses that may include triggering alerts to administrators, deleting data stored by the GenAI service, and the like.

The invention relates to the technical field of data transmission security, in particular to a file security transmission system and method based on a virtual printer. The method comprises the following steps: acquiring a key constraint parameter set, and generating a preselected key pool according to the key constraint parameter set; acquiring virtual printing task information, analyzing the virtual printing task information, and generating a document data block set; based on the preselected key pool, performing encryption-write separated transmission on each data block in the document data block set to generate local encryption cache information; and determining a decryption key set according to the local encryption cache information and the preselected key pool, performing decryption-reading separated transmission on each data block in the local encryption cache information according to the decryption key set, and generating and outputting virtual printing content. According to the method and the device, the whole-process encryption and separated processing of the data are realized in the printing data transmission process, and the security and confidentiality of the document content are effectively guaranteed.

Disclosed is a cloud-based security system implemented in a reverse proxy that provides bidirectional traffic inspection to protect against privacy and security concerns related to the GenAI services. The security system intercepts requests directed to the GenAI service protected by the reverse proxy implementation of the network security system. The security system includes a GenAI request classifier trained to classify prompts submitted to the GenAI application as one of benign, prompt injection attack, or uploaded files. The security system further includes a GenAI response classifier trained to classify responses from the GenAI application as one of normal, leaked system prompt, leaked user uploaded files, or leaked training data. Based on the classification, and optionally other security analysis, the security system may enforce security policies on both the requests and responses that block the traffic, trigger alerts to administrators, and the like to enforce security and privacy protection on bidirectional traffic.

The invention relates to the technical field of artificial intelligence, in particular to an implementation system for document encryption, which comprises an exception perception and key optimization module, an encryption parameter adaptive adjustment module, a resource allocation and task scheduling module and an encryption risk assessment and analysis module. The exception perception and key optimization module identifies an exception access behavior, optimizes a key by using a genetic algorithm, and improves the security of document encryption; the encryption parameter adaptive adjustment module learns and adjusts the encryption parameters through a document encryption agent to realize adaptive optimization of the encryption parameters; the resource allocation and task scheduling module performs resource allocation and task scheduling by using a fuzzy logic algorithm, so that the document encryption efficiency is improved; and the encryption risk assessment and analysis module performs feature extraction and encryption risk quantitative assessment on the encrypted document, generates an early warning signal, and ensures the security of the document. The method and the device are used for solving the technical problem of poor current document encryption effect.

The invention provides a method for realizing secure encryption of a java source code file based on a C + + dynamic library, which relates to the technical field of secure encryption, and comprises the following steps of: partitioning the java source code file, and processing by adopting a dual encryption mechanism through an encryption module in the C + + dynamic library: firstly, generating a dynamic key and a static key XOR to obtain a mixed key, performing AES encryption by utilizing the mixed key, and then, performing encryption by utilizing the mixed key; carrying out secondary encryption by adopting an elliptic curve cryptographic algorithm; the environment is monitored in real time during decryption, and debugging protection is prevented; and if the environment is normal, executing reverse decryption to recover the source code. According to the method, the source code protection intensity is improved, and reverse engineering and debugging attacks are effectively prevented.

The invention discloses a file security sharing method and a related product, and relates to the technical field of data security. According to the application, a set of file security sharing architecture is constructed in combination with a cloud key technology, and an automatic authorization mechanism is provided on this basis. The mechanism mainly comprises the following steps that: an owner of a sharing scene authorizes the use right of a first cloud key for issuing a third authorization to subscribers to a sixth key of a service side, and when the service side judges that a certain subscriber meets a preset authorization rule corresponding to a sharing point in the sharing scene, the subscriber sends the third authorization to the sharing scene; and the service side can automatically call the first cloud key through the sixth key to sign and issue the third authorization for the subscriber. In this way, the subscriber has the authority to open the file published in the first sharing point. By adopting the scheme, under the condition of ensuring that the file is safely shared to the appointed user, the process related to authorization can be simplified, the manual intervention is reduced, and the file sharing management efficiency and the user experience are improved.

The invention discloses a watermark processing method and device, equipment, a medium and a program product. The method comprises the steps of obtaining an original document and an original watermark in response to a watermark generation instruction determined by a user; performing feature extraction on the original document to obtain structural features, semantic features and visual features corresponding to the original document; constructing an adaptive intensity mapping function based on the structural features, the semantic features and the visual features; constructing a quantum state watermark function based on the original watermark and a preset quantum parameter; and according to the adaptive intensity mapping function, the quantum state watermark function and a preset quantum entanglement enhancement function, a target watermark is generated, and the preset quantum entanglement enhancement function is used for realizing conversion between the original watermark and the quantum entanglement state. According to the embodiment of the invention, the watermark strength can be adaptively adjusted according to the document features, the watermark security is improved, and the document security is guaranteed.

The invention discloses a method for evaluating the technical content of an electric power bidding document, which comprises the following steps of: extracting the bidding document and each bidding document from a bidding platform, and analyzing and acquiring the technical content of each bidding document through an electronic document; intercepting the content of a construction safety specification plate from the content of the technical part of each bidding document, judging whether the content contains a necessary module and whether each subide of the necessary module meets the safety specification standard, and evaluating the safety specification conformity of each bidding document; according to the evaluation result of the safety specification conformity of each bidding document, preliminarily screening out each qualified bidding document; equipment material technical parameter plate content is intercepted from technical part content of each preliminarily screened qualified bidding document, technical parameters of core equipment, materials and accessories are acquired and compared with corresponding technical parameter requirements in the bidding document, technical parameter conformity scores of each bidding document are evaluated, and ranking is generated; the bid evaluation efficiency and quality are improved, fairness and justice are ensured, and the method is suitable for bidding files of different formats.

The invention discloses an intelligent government affair file classification and retrieval system, and belongs to the technical field of file management and information. Aiming at the problems that a traditional government affair file management mode is low in efficiency and high in error rate, and an existing general file management system is insufficient in security management and control in the aspect of government affair file management, low in retrieval accuracy and the like, intelligent classification is performed by adopting a CNN and RNN combined deep learning architecture, and accurate retrieval is realized through a word vector model and an attention mechanism. The system constructs a knowledge graph in the government affair field to provide intelligent decision support, designs a multi-level authority management system to guarantee file security, has a real-time data updating and self-learning mechanism, and can adapt to rapid updating of government affair knowledge. Compared with the prior art, the system has the remarkable advantages in the aspects of classification and retrieval efficiency, accuracy, safety, compatibility, intelligent expansibility and the like, intelligence, high efficiency and standardization of government affair file management can be achieved, and the complex requirements of government affair office are met.

The invention discloses an encryption method and device suitable for a large file, computer equipment and a medium, and the method comprises the steps: segmenting a to-be-encrypted large file into a plurality of sub-data blocks according to a preset rule, and coding each sub-data block to obtain an index value of each sub-data block; generating a master key, and generating a sub-data key corresponding to each sub-data block based on the index value of each sub-data block and the master key; based on the sub-data key corresponding to each sub-data block, performing encryption processing on each sub-data block to obtain a plurality of encrypted sub-data blocks; obtaining a check chain value of the to-be-encrypted large file based on each encrypted sub-data block; and merging the plurality of encrypted sub-data blocks and the check chain value to obtain a ciphertext of the to-be-encrypted large file. According to the method, association between blocks can be effectively cut off, the key leakage risk can be effectively reduced, the encryption strength is enhanced through the dynamic sub-keys, memory overflow is avoided through block processing, the security, reliability and processing efficiency of large file encryption are improved, and the requirements of large file secure storage and transmission are met.

The embodiment of the invention discloses a permission control method and device based on an operation intention and electronic equipment. A specific embodiment of the method comprises the following steps: in response to a received permission acquisition request initiated by a target user and aiming at a target file, constructing a temporary verification ring; initiating authorization verification for the target user according to the user attribute information of the target user, the file summary information corresponding to the target file and the N verification nodes in the temporary verification ring; in response to passing of the authorization verification, distributing an operation authority matched with the authority type to the target user, and updating an operation recorder corresponding to the target user; determining a file operation intention and a risk level according to the file operation record and a pre-constructed operation intention recognition network; responding to the condition that the file operation intention and the risk level meet the triggering condition, and generating operation record summary information for the file operation record; and performing dynamic permission updating on the target user. According to the embodiment, the security and integrity of the file are ensured.

The invention discloses a system for solving intercommunication editing of a file and a cloud document in a chat application. Comprising a file editing module, a cloud document integration module, a multi-device synchronization module, a real-time collaborative editing module, a version management module, a format conversion module, an authority control module, a document search module, a file sharing module, a document preview module and a document annotation module. By integrating the cloud document technology, the technical problems of file format compatibility, real-time collaboration, multi-device synchronization, version management and safety control are solved, seamless file and cloud document intercommunication editing is realized, a user can directly open, edit and share the file in a chat application, multi-user real-time collaboration and automatic version management are supported, and the user experience is improved. The file security is ensured; the operation convenience and team cooperation efficiency are improved through the multi-device synchronization and format conversion function, and efficient, safe and convenient file management and cooperation experience is provided for users.

The present disclosure provides a method for selectively encrypting and decrypting portions of a document. The method includes receiving a document containing plaintext, analyzing the document using an artificial intelligence system to identify portions containing sensitive information, assigning predefined security levels or attributes to the identified portions, sending an encrypt file content request to a cryptographic engine, receiving an encrypted file content response, building an encrypted document by replacing portions with masking symbols and storing encrypted portions as metadata, and sending the encrypted document to a client device. The artificial intelligence system uses machine learning models trained on domain-specific data and employs pattern recognition and contextual analysis to identify sensitive content based on semantic understanding and classification rules.

A file security processing method based on selective encryption and adaptive transmission comprises the following steps: analyzing file metadata in an upload request of a client to obtain a file feature and a user identity; based on the file features and the user identity, calling a configured encryption seed model to generate an initial encryption seed, and inputting the initial encryption seed into the optimized pseudo-random sequence model to generate an encryption position index so as to obtain an encryption position index; on the basis of the encryption position index and the initial encryption seed, performing encryption processing on a data block in a file data stream uploaded by the client in a streaming manner to obtain an encrypted data block; meanwhile, the transmission rate is adjusted based on the real-time transmission quantity and the network quality, and a transmission rate parameter of the adaptive network is obtained so as to control the time sequence scheduling and the data sending frequency of encrypted data block streaming transmission; and performing fragmentation aggregation and data splicing processing on the transmitted encrypted data blocks according to a transmission sequence to generate a complete encrypted file, and updating a file storage record in a database according to the complete encrypted file.

The invention relates to the field of data access, and discloses a document security access method and device based on a block chain, equipment and a storage medium. The method comprises the following steps: storing identification information and encrypted data characteristics of a document in the block chain; setting a permission configuration strategy of the document through a preset configuration logic of the block chain; performing identity and permission verification on the user based on the permission configuration strategy, and storing verification-related interaction information in the block chain; and performing data recovery or integrity verification on the document based on the encrypted data features and the identification information stored in the block chain. According to the document security access method based on the block chain provided by the invention, the security and reliability of document storage are improved and auditing and recovery processes are simplified by utilizing the characteristics of decentralization, tampering resistance and transparency of the block chain.

The invention discloses a video and audio file security management method and system, and belongs to the technical field of file security, video and audio files are stored in a buffer area after being collected by a camera, the capacity of the buffer area is adjusted according to the network bandwidth and the change of the number of bytes of the files, and source identification information is coded and embedded and then stored in a security storage area; key marking operation of a user on the video and audio files in the secure storage area is monitored, key interval fragments are extracted, key marking information is obtained through screening and recognition, and then a multi-dimensional metadata structure positioning index is constructed; for video and audio files in a secure storage area, an initial encryption key is generated based on a metadata structure positioning index of the files, and then the encryption level is determined according to the data size and format of the files and hierarchical encryption is carried out. The technical problems of buffer area capacity self-adaption in video and audio file collection and storage, key mark information processing after user operation, index construction and the like are solved, and transmission, tracing, management and safety protection of video and audio files are guaranteed.

Described herein is a technique to update an edge device deployed in a secure computing network. A repository connected to a public network stores build contents configured to update software installed on the edge device; the public network is inaccessible to devices within the secure computing environment. A second device connected to the public network acquires the build contents in a signed lockbox file. An edge device management service generates a lockbox file containing the build contents and a trusted signer outside the secure computing network signs the lockbox file. The second device connects to secure computing network and establishes communications with the edge device. The edge device verifies the signed lockbox file provided by the second device. Upon verification, the edge device extracts the contents of the signed lockbox file and updates the software installed on the edge device.

The invention discloses a multi-strategy fusion file data desensitization management and control system, and relates to the technical field of information security and data processing, a system architecture adopts a hierarchical design and comprises a presentation layer, a business logic layer and a data access layer, the interface design of the presentation layer is simple, and a user can easily operate the presentation layer; the business logic layer is responsible for processing various rules and ensuring that data can be correctly processed; the data access layer is responsible for interacting with a database to realize secure storage and quick reading of data, and the architecture design ensures the expandability and maintainability of the data desensitization file security management system; system functions are realized in two ways: a common user can perform desensitization operation on sensitive data and download a file; an administrator can modify configuration and manage the desensitization rule besides the functions of a common user; the system can effectively protect sensitive data and reduce the risk of data leakage, and has high practical value.

Embodiments relate to providing granular level document security with role-based access. A technique includes determining, by a first artificial intelligence (AI) model, segments of a document and generating, by a second AI model, tags for the segments of the document, the tags being unique identifiers for the segments. The technique includes defining permissions for the tags in an access control table based on a plurality of identifications, an identification being in the plurality of identifications. The technique includes, in response to receiving the identification with a request to access the document, extracting the tags permitted for the identification from the access control table, and filtering the document according to the segments for the tags permitted for the identification. The technique includes, in response to the request to access the document, causing the document that is filtered to be rendered with the segments for the tags permitted for the identification.

A method includes creating a first package of an application, registering the first package with an orchestrator and triggering deployment of the application on a set of target servers. In response to triggering deployment of the application, the orchestrator obtains client identification of security information for the application, deploys the application on the set of target servers, submits the configuration files to a configuration management tool for configuration, applies the configuration files to perform configuration of the application in the set of target servers, and triggers an observability framework (OBF) tool to start application monitoring in response to at least the orchestrator submitting the monitoring configurations to the OBF tool, and monitors the application in the set of target servers. The first package includes deployment files, security information, management configurations of the application, or monitoring configurations for the OBF tool.

This invention belongs to the field of computer science and discloses a file download method, apparatus, device, storage medium, and computer program product. The method includes: responding to a user-initiated business data query request, generating a download token based on the business data query request, and feeding back the download token; upon receiving a file download request containing the download token, verifying the download token and obtaining a verification result; and if the verification result is successful, sending the file corresponding to the file download request to the user terminal. Because this invention generates a download token based on a business data query request and downloads files based on the download token, compared to the existing method of adding a data isolation dimension to a file table and then establishing an authorization relationship between the user and the isolation dimension in a dedicated table to verify file download permissions, this invention can prevent users from unauthorizedly downloading files and improve file security.

An embodiment of the present application discloses a text processing method, which includes: opening the text content corresponding to the target file through an editor; determining an editable area in the text content according to the editing tags corresponding to the target file, where the editable area is a part of the text area in the text content; identifying the focus position of the input focus in the text content; if it is determined that the focus position is in the editable area, adjusting the state of the editor to an editable state; if it is determined that the focus position is not in the editable area, adjusting the state of the editor to a non-editable state. The present application can set an editable area in the text content of the target file, and only adjust the state of the editor to an editable state when the user wants to edit the text content in the editable area, thereby realizing the protection of the text content outside the editable area, and at the same time eliminating the need to check the text content outside the editable area in other processes, improving the file security and text processing efficiency.

To provide an attribute-based encryption system and method for selectively encrypting and decrypting portions of documents based on user attributes in order to protect document content.SOLUTION: A document encryption method comprises: receiving, by a document security manager, a digital document containing original text and image content; processing the original text content to identify each of text portions and image portions; generating encrypt content requests including the identified text and image portions with associated attributes and metadata; transmitting the requests to a cryptographic engine, which returns encrypted content; receiving the encrypted content from the cryptographic engine; and replacing original content with masking symbols, applying visual obfuscation, embedding the encrypted content as metadata, and updating document properties to indicate the encrypted content.SELECTED DRAWING: Figure 12

Embodiments of the present disclosure disclose a permission control method, apparatus, and electronic device based on operation intent. A specific implementation of this method includes: in response to receiving a permission acquisition request for a target file initiated by a target user, constructing a temporary verification ring; initiating an authorization verification for the target user according to the user attribute information of the target user, the file summary information corresponding to the target file, and N verification nodes in the temporary verification ring; in response to passing the authorization verification, allocating an operation permission matching the permission type to the target user, and updating the operation recorder corresponding to the target user; determining the file operation intent and risk level according to the file operation record and a pre-constructed operation intent recognition network; in response to the file operation intent and risk level meeting the trigger conditions, generating an operation record summary information for the file operation record; and performing dynamic permission update on the target user. This implementation ensures the security and integrity of the file.

The invention relates to the related field of document security management, and discloses a method and a system for displaying hidden contents on a graphical user interface, which are used for realizing full-content hiding and unauthenticated display interaction of important files and objects by performing triggering and execution control on a preset scene guide program by adopting an image encryption recognition mode. Compared with a page type password or biological encryption authentication mode adopted in the prior art, the method has the advantages that the effect of completely hiding the object file can be achieved, and a specific authentication access interface does not need to be reserved for user operation and use, so that existence of the hidden file is not easily found by third-party personnel, and the file protection effect is more excellent.

The embodiment of the present disclosure provides a file security acquisition method, device, medium and electronic equipment, and relates to the technical field of data processing. The method comprises the following steps: obtaining a model training request about a preset task initiated by a requestor for a to-be-trained model, the model training request carrying a training configuration parameter, verifying the model training request, confirming a container group and a resource access key corresponding to the training configuration parameter after the verification is passed, and allocating computing resource and data resource required by the container group; and accessing training corpus in the data resource according to the resource access key in the container group, so as to train the to-be-trained model according to the computing resource and the training corpus. The file security acquisition method adopted by the present disclosure controls the access authority of data through the resource access key, so that the model training is carried out under the condition of ensuring data security, the risk of data and privacy leakage is reduced, and the effect of model training is improved.