265 results about "Document security" patented technology

The invention relates to the technical field of archive management, in particular to an archive full life cycle management system and method based on cloud computing. The method specifically comprises an intelligent classification module based on a format adaptation degree function and semantic density analysis, a five-stage life cycle management module, and an authority scheduling module fusing RBAC / ABAC authority control and block chain auditing, and based on a matrix decomposition archiving static coding mechanism, document security storage and analysis are realized through an orthogonal matrix and pseudo-inverse operation, and the file security is realized. The data security in a long-term archiving scene is improved; cloud storage resources are dynamically optimized according to the document life cycle state and the access frequency, and the storage cost is reduced in combination with a cold and hot layering strategy; and an AI algorithm is introduced, the archive retention value is automatically evaluated according to laws and regulations and semantic analysis, and a compliant destruction decision is realized. According to the method, through multi-model fusion metadata extraction, dynamic strategy binding and automatic state transition, the whole-process management efficiency and safety are remarkably improved.

The present disclosure provides a method for securing document content. A document security manager receives a digital document containing original text and image content. The original text content is processed to identify text portions by parsing annotations, analyzing proximate text, extracting content within the determined scope, and determining encryption attributes. The original image content is processed to identify image portions by detecting user-defined selections or employing a neural network to identify sensitive objects. Encrypt content requests are generated including the identified text and image portions with associated attributes and metadata. The requests are transmitted to a cryptographic engine, which returns encrypted content. A partially encrypted document is built by replacing original content with masking symbols, applying visual obfuscation, embedding encrypted content as metadata, and updating document properties to indicate encrypted content.

The invention relates to the technical field of system security, in particular to a computer storage file protection system which comprises a risk analysis module, a dynamic encryption module, an authentication management module and a behavior monitoring module. According to the method, the response speed and the personalized protection level of the file security are improved by automatically collecting location, time and user information parameters and executing context risk logic analysis, the system can provide customized protection schemes for different security requirements by dynamically adjusting an encryption mechanism and the key length, and the security of the file is improved. The system is allowed to strengthen protection measures under the high-risk condition, resource use is optimized under the low-risk condition, unnecessary performance burdens are avoided, through real-time monitoring and behavior analysis, the system can recognize and respond to abnormal behaviors in time, unauthorized access and data leakage are effectively prevented, potential threats to sensitive information are reduced, and the safety of the system is improved. The overall security management capability of the system is improved, and the continuity and effectiveness of data protection are ensured.

The present disclosure provides a method for securing document content. A document security manager receives a digital document containing original text and image content. The original text content is processed to identify text portions by parsing annotations, analyzing proximate text, extracting content within the determined scope, and determining encryption attributes. The original image content is processed to identify image portions by detecting user-defined selections or employing a neural network to identify sensitive objects. Encrypt content requests are generated including the identified text and image portions with associated attributes and metadata. The requests are transmitted to a cryptographic engine, which returns encrypted content. A partially encrypted document is built by replacing original content with masking symbols, applying visual obfuscation, embedding encrypted content as metadata, and updating document properties to indicate encrypted content.

Disclosed is a cloud-based security system implemented using API notifications provided by a GenAI service or application. The security system provides bidirectional traffic inspection to protect against privacy and security concerns related to the GenAI services. The security system receives notifications of traffic including requests directed to the GenAI service from endpoints as well as the GenAI responses. The security system includes a GenAI request classifier trained to classify prompts as benign, prompt injection attack, or uploaded files. The security system further includes a GenAI response classifier trained to classify responses as normal, leaked system prompt, leaked user uploaded files, or leaked training data. Based on the classification, and optionally other security analysis, the security system may enforce security policies based on both the requests and responses that may include triggering alerts to administrators, deleting data stored by the GenAI service, and the like.

The invention relates to the technical field of data transmission security, in particular to a file security transmission system and method based on a virtual printer. The method comprises the following steps: acquiring a key constraint parameter set, and generating a preselected key pool according to the key constraint parameter set; acquiring virtual printing task information, analyzing the virtual printing task information, and generating a document data block set; based on the preselected key pool, performing encryption-write separated transmission on each data block in the document data block set to generate local encryption cache information; and determining a decryption key set according to the local encryption cache information and the preselected key pool, performing decryption-reading separated transmission on each data block in the local encryption cache information according to the decryption key set, and generating and outputting virtual printing content. According to the method and the device, the whole-process encryption and separated processing of the data are realized in the printing data transmission process, and the security and confidentiality of the document content are effectively guaranteed.

The invention provides a transfer station system and method for safely sharing audit files. According to the method, the audit files entering the transfer station system can be effectively subjected to sensitivity and confidentiality classification based on the analysis capability of a large model; by using a block chain technology and an intelligent contract mechanism, an approval management workflow for safely executing shared access and operation on an audit file is automatically realized, meanwhile, transparent encryption and strict access control are ensured, and only authorized personnel can access the file, so that the problems in the prior art are solved, and the audit efficiency is improved. And the audit file sharing efficiency and confidentiality are improved.

Disclosed is a cloud-based security system implemented in a reverse proxy that provides bidirectional traffic inspection to protect against privacy and security concerns related to the GenAI services. The security system intercepts requests directed to the GenAI service protected by the reverse proxy implementation of the network security system. The security system includes a GenAI request classifier trained to classify prompts submitted to the GenAI application as one of benign, prompt injection attack, or uploaded files. The security system further includes a GenAI response classifier trained to classify responses from the GenAI application as one of normal, leaked system prompt, leaked user uploaded files, or leaked training data. Based on the classification, and optionally other security analysis, the security system may enforce security policies on both the requests and responses that block the traffic, trigger alerts to administrators, and the like to enforce security and privacy protection on bidirectional traffic.

The invention relates to the technical field of artificial intelligence, in particular to an implementation system for document encryption, which comprises an exception perception and key optimization module, an encryption parameter adaptive adjustment module, a resource allocation and task scheduling module and an encryption risk assessment and analysis module. The exception perception and key optimization module identifies an exception access behavior, optimizes a key by using a genetic algorithm, and improves the security of document encryption; the encryption parameter adaptive adjustment module learns and adjusts the encryption parameters through a document encryption agent to realize adaptive optimization of the encryption parameters; the resource allocation and task scheduling module performs resource allocation and task scheduling by using a fuzzy logic algorithm, so that the document encryption efficiency is improved; and the encryption risk assessment and analysis module performs feature extraction and encryption risk quantitative assessment on the encrypted document, generates an early warning signal, and ensures the security of the document. The method and the device are used for solving the technical problem of poor current document encryption effect.

The invention provides a method for realizing secure encryption of a java source code file based on a C + + dynamic library, which relates to the technical field of secure encryption, and comprises the following steps of: partitioning the java source code file, and processing by adopting a dual encryption mechanism through an encryption module in the C + + dynamic library: firstly, generating a dynamic key and a static key XOR to obtain a mixed key, performing AES encryption by utilizing the mixed key, and then, performing encryption by utilizing the mixed key; carrying out secondary encryption by adopting an elliptic curve cryptographic algorithm; the environment is monitored in real time during decryption, and debugging protection is prevented; and if the environment is normal, executing reverse decryption to recover the source code. According to the method, the source code protection intensity is improved, and reverse engineering and debugging attacks are effectively prevented.

The invention discloses a file security sharing method and a related product, and relates to the technical field of data security. According to the application, a set of file security sharing architecture is constructed in combination with a cloud key technology, and an automatic authorization mechanism is provided on this basis. The mechanism mainly comprises the following steps that: an owner of a sharing scene authorizes the use right of a first cloud key for issuing a third authorization to subscribers to a sixth key of a service side, and when the service side judges that a certain subscriber meets a preset authorization rule corresponding to a sharing point in the sharing scene, the subscriber sends the third authorization to the sharing scene; and the service side can automatically call the first cloud key through the sixth key to sign and issue the third authorization for the subscriber. In this way, the subscriber has the authority to open the file published in the first sharing point. By adopting the scheme, under the condition of ensuring that the file is safely shared to the appointed user, the process related to authorization can be simplified, the manual intervention is reduced, and the file sharing management efficiency and the user experience are improved.

Security-enhanced documents and methods of forming security-enhanced documents having indicia under a Scratch-Off Coating (SOC), and more particularly including digitally imaging video frames onto the display area and / or back of the documents. In certain embodiments, portions of digitally imaged video frames are also utilized as game play variable indicia.

The invention discloses a watermark processing method and device, equipment, a medium and a program product. The method comprises the steps of obtaining an original document and an original watermark in response to a watermark generation instruction determined by a user; performing feature extraction on the original document to obtain structural features, semantic features and visual features corresponding to the original document; constructing an adaptive intensity mapping function based on the structural features, the semantic features and the visual features; constructing a quantum state watermark function based on the original watermark and a preset quantum parameter; and according to the adaptive intensity mapping function, the quantum state watermark function and a preset quantum entanglement enhancement function, a target watermark is generated, and the preset quantum entanglement enhancement function is used for realizing conversion between the original watermark and the quantum entanglement state. According to the embodiment of the invention, the watermark strength can be adaptively adjusted according to the document features, the watermark security is improved, and the document security is guaranteed.

The invention discloses a file previewing system and method for realizing real-time online previewing of multi-format files, belongs to the technical field of file processing, and aims to solve the technical problem of how to realize online previewing of files on the basis of ensuring file security and user experience. Comprising an application system interface used for receiving a file preview request and forwarding the file preview request to a file stream processor; the file stream processor is used for reading a file stream of a specified file from the server based on the file preview request and sending the file stream to the format identification module; the format identification module is used for carrying out format identification on the file stream read from the server and sending the file stream and the file stream format to the conversion module; the conversion module is used for calling the corresponding parser and renderer to convert the file stream into a file stream in a renderable format based on the file stream format; and the rendering engine is used for rendering the file stream in the renderable format in real time and returning the file preview content to the service system.

The invention discloses a method for evaluating the technical content of an electric power bidding document, which comprises the following steps of: extracting the bidding document and each bidding document from a bidding platform, and analyzing and acquiring the technical content of each bidding document through an electronic document; intercepting the content of a construction safety specification plate from the content of the technical part of each bidding document, judging whether the content contains a necessary module and whether each subide of the necessary module meets the safety specification standard, and evaluating the safety specification conformity of each bidding document; according to the evaluation result of the safety specification conformity of each bidding document, preliminarily screening out each qualified bidding document; equipment material technical parameter plate content is intercepted from technical part content of each preliminarily screened qualified bidding document, technical parameters of core equipment, materials and accessories are acquired and compared with corresponding technical parameter requirements in the bidding document, technical parameter conformity scores of each bidding document are evaluated, and ranking is generated; the bid evaluation efficiency and quality are improved, fairness and justice are ensured, and the method is suitable for bidding files of different formats.

The invention discloses an intelligent government affair file classification and retrieval system, and belongs to the technical field of file management and information. Aiming at the problems that a traditional government affair file management mode is low in efficiency and high in error rate, and an existing general file management system is insufficient in security management and control in the aspect of government affair file management, low in retrieval accuracy and the like, intelligent classification is performed by adopting a CNN and RNN combined deep learning architecture, and accurate retrieval is realized through a word vector model and an attention mechanism. The system constructs a knowledge graph in the government affair field to provide intelligent decision support, designs a multi-level authority management system to guarantee file security, has a real-time data updating and self-learning mechanism, and can adapt to rapid updating of government affair knowledge. Compared with the prior art, the system has the remarkable advantages in the aspects of classification and retrieval efficiency, accuracy, safety, compatibility, intelligent expansibility and the like, intelligence, high efficiency and standardization of government affair file management can be achieved, and the complex requirements of government affair office are met.

The invention relates to a method for supporting secure transmission and verification of large data files in a cloud environment, and belongs to the technical field of file transmission. The method comprises the steps of a preparation stage, file fragmentation encryption, confusion processing, file uploading and downloading, file decryption and combination and the like. The method is characterized in that a file is divided into a plurality of file fragments, each fragment is symmetrically encrypted to generate file fragment metadata, then confusion fragments and encrypted file fragments are uploaded to a cloud server at the same time, and due to the fact that the encrypted file fragments lose sequence information, the sequence information is encrypted and then stored, and the file fragments are stored in the cloud server. The user needs to access and read; and hiding the sequence information of the file fragments in the graph, obtaining the sequence information by using an algorithm, and finally carrying out file merging, so that the secure transmission of the file is completed. According to the method, under the condition of distributed deployment, the transmission efficiency can be improved, the file transmission safety can be improved, and safe transmission of file data is achieved.

The invention discloses an encryption method and device suitable for a large file, computer equipment and a medium, and the method comprises the steps: segmenting a to-be-encrypted large file into a plurality of sub-data blocks according to a preset rule, and coding each sub-data block to obtain an index value of each sub-data block; generating a master key, and generating a sub-data key corresponding to each sub-data block based on the index value of each sub-data block and the master key; based on the sub-data key corresponding to each sub-data block, performing encryption processing on each sub-data block to obtain a plurality of encrypted sub-data blocks; obtaining a check chain value of the to-be-encrypted large file based on each encrypted sub-data block; and merging the plurality of encrypted sub-data blocks and the check chain value to obtain a ciphertext of the to-be-encrypted large file. According to the method, association between blocks can be effectively cut off, the key leakage risk can be effectively reduced, the encryption strength is enhanced through the dynamic sub-keys, memory overflow is avoided through block processing, the security, reliability and processing efficiency of large file encryption are improved, and the requirements of large file secure storage and transmission are met.

The embodiment of the invention discloses a permission control method and device based on an operation intention and electronic equipment. A specific embodiment of the method comprises the following steps: in response to a received permission acquisition request initiated by a target user and aiming at a target file, constructing a temporary verification ring; initiating authorization verification for the target user according to the user attribute information of the target user, the file summary information corresponding to the target file and the N verification nodes in the temporary verification ring; in response to passing of the authorization verification, distributing an operation authority matched with the authority type to the target user, and updating an operation recorder corresponding to the target user; determining a file operation intention and a risk level according to the file operation record and a pre-constructed operation intention recognition network; responding to the condition that the file operation intention and the risk level meet the triggering condition, and generating operation record summary information for the file operation record; and performing dynamic permission updating on the target user. According to the embodiment, the security and integrity of the file are ensured.

The invention discloses a system for solving intercommunication editing of a file and a cloud document in a chat application. Comprising a file editing module, a cloud document integration module, a multi-device synchronization module, a real-time collaborative editing module, a version management module, a format conversion module, an authority control module, a document search module, a file sharing module, a document preview module and a document annotation module. By integrating the cloud document technology, the technical problems of file format compatibility, real-time collaboration, multi-device synchronization, version management and safety control are solved, seamless file and cloud document intercommunication editing is realized, a user can directly open, edit and share the file in a chat application, multi-user real-time collaboration and automatic version management are supported, and the user experience is improved. The file security is ensured; the operation convenience and team cooperation efficiency are improved through the multi-device synchronization and format conversion function, and efficient, safe and convenient file management and cooperation experience is provided for users.

The present disclosure provides a method for selectively encrypting and decrypting portions of a document. The method includes receiving a document containing plaintext, analyzing the document using an artificial intelligence system to identify portions containing sensitive information, assigning predefined security levels or attributes to the identified portions, sending an encrypt file content request to a cryptographic engine, receiving an encrypted file content response, building an encrypted document by replacing portions with masking symbols and storing encrypted portions as metadata, and sending the encrypted document to a client device. The artificial intelligence system uses machine learning models trained on domain-specific data and employs pattern recognition and contextual analysis to identify sensitive content based on semantic understanding and classification rules.

A file security processing method based on selective encryption and adaptive transmission comprises the following steps: analyzing file metadata in an upload request of a client to obtain a file feature and a user identity; based on the file features and the user identity, calling a configured encryption seed model to generate an initial encryption seed, and inputting the initial encryption seed into the optimized pseudo-random sequence model to generate an encryption position index so as to obtain an encryption position index; on the basis of the encryption position index and the initial encryption seed, performing encryption processing on a data block in a file data stream uploaded by the client in a streaming manner to obtain an encrypted data block; meanwhile, the transmission rate is adjusted based on the real-time transmission quantity and the network quality, and a transmission rate parameter of the adaptive network is obtained so as to control the time sequence scheduling and the data sending frequency of encrypted data block streaming transmission; and performing fragmentation aggregation and data splicing processing on the transmitted encrypted data blocks according to a transmission sequence to generate a complete encrypted file, and updating a file storage record in a database according to the complete encrypted file.

The invention relates to the field of data access, and discloses a document security access method and device based on a block chain, equipment and a storage medium. The method comprises the following steps: storing identification information and encrypted data characteristics of a document in the block chain; setting a permission configuration strategy of the document through a preset configuration logic of the block chain; performing identity and permission verification on the user based on the permission configuration strategy, and storing verification-related interaction information in the block chain; and performing data recovery or integrity verification on the document based on the encrypted data features and the identification information stored in the block chain. According to the document security access method based on the block chain provided by the invention, the security and reliability of document storage are improved and auditing and recovery processes are simplified by utilizing the characteristics of decentralization, tampering resistance and transparency of the block chain.

The invention discloses a video and audio file security management method and system, and belongs to the technical field of file security, video and audio files are stored in a buffer area after being collected by a camera, the capacity of the buffer area is adjusted according to the network bandwidth and the change of the number of bytes of the files, and source identification information is coded and embedded and then stored in a security storage area; key marking operation of a user on the video and audio files in the secure storage area is monitored, key interval fragments are extracted, key marking information is obtained through screening and recognition, and then a multi-dimensional metadata structure positioning index is constructed; for video and audio files in a secure storage area, an initial encryption key is generated based on a metadata structure positioning index of the files, and then the encryption level is determined according to the data size and format of the files and hierarchical encryption is carried out. The technical problems of buffer area capacity self-adaption in video and audio file collection and storage, key mark information processing after user operation, index construction and the like are solved, and transmission, tracing, management and safety protection of video and audio files are guaranteed.

Described herein is a technique to update an edge device deployed in a secure computing network. A repository connected to a public network stores build contents configured to update software installed on the edge device; the public network is inaccessible to devices within the secure computing environment. A second device connected to the public network acquires the build contents in a signed lockbox file. An edge device management service generates a lockbox file containing the build contents and a trusted signer outside the secure computing network signs the lockbox file. The second device connects to secure computing network and establishes communications with the edge device. The edge device verifies the signed lockbox file provided by the second device. Upon verification, the edge device extracts the contents of the signed lockbox file and updates the software installed on the edge device.

The invention discloses a multi-strategy fusion file data desensitization management and control system, and relates to the technical field of information security and data processing, a system architecture adopts a hierarchical design and comprises a presentation layer, a business logic layer and a data access layer, the interface design of the presentation layer is simple, and a user can easily operate the presentation layer; the business logic layer is responsible for processing various rules and ensuring that data can be correctly processed; the data access layer is responsible for interacting with a database to realize secure storage and quick reading of data, and the architecture design ensures the expandability and maintainability of the data desensitization file security management system; system functions are realized in two ways: a common user can perform desensitization operation on sensitive data and download a file; an administrator can modify configuration and manage the desensitization rule besides the functions of a common user; the system can effectively protect sensitive data and reduce the risk of data leakage, and has high practical value.

The invention discloses an offline file security management and control method and system based on a quantum key and a national secret algorithm, and relates to the technical field of file security management and control, and the method comprises the steps: setting a plurality of simulated quantum key updating frequencies, equally dividing the time before updating the quantum key in a simulation process in simulation software, obtaining equal interval security data and key updating performance influence data; constructing a key updating frequency effect evaluation model based on a BP neural network according to the safety data and the key updating performance influence data in the equal division interval; according to the output of the key updating frequency effect evaluation model and the corresponding quantum key updating frequency, drawing a frequency-effect curve graph; and performing data analysis on the frequency-effect curve graph to obtain a screened quantum key update frequency, and applying the screened quantum key update frequency as a final quantum key update frequency to offline file security management and control. According to the invention, the problem of lack of balance in selection of the quantum key updating frequency through experience setting in the prior art is solved.

The invention relates to an enterprise cloud disk file content auditing method and system based on a deep learning technology, and the method comprises the steps: triggering a corresponding auditing program according to a file type, and carrying out the analysis of the extracted file content, so as to judge whether the file content contains data in a sensitive lexicon or not; if the content contains the sensitive word, further judging whether the content contains data in the associated word bank or not; and if the content does not contain the data of the associated lexicon or contains the data of the associated lexicon and the type of the content is forbidden, forbidding operation is executed on the file, and a notification is sent to a user. And if the content contains the content and the type is passing, not taking any treatment measures. The invention aims to extract and analyze content from a file to audit the content of the file. The method aims at preventing files related to sensitive information such as pornographic information, violence information and political information from appearing in an enterprise cloud disk, and therefore legal risks and safety problems caused by the files are avoided. The time required for manually checking the file content is shortened, and the labor cost is reduced; information leakage is prevented, and document security is ensured; and the file content auditing accuracy is improved.

Embodiments relate to providing granular level document security with role-based access. A technique includes determining, by a first artificial intelligence (AI) model, segments of a document and generating, by a second AI model, tags for the segments of the document, the tags being unique identifiers for the segments. The technique includes defining permissions for the tags in an access control table based on a plurality of identifications, an identification being in the plurality of identifications. The technique includes, in response to receiving the identification with a request to access the document, extracting the tags permitted for the identification from the access control table, and filtering the document according to the segments for the tags permitted for the identification. The technique includes, in response to the request to access the document, causing the document that is filtered to be rendered with the segments for the tags permitted for the identification.