File security control and trace method and system based on digital fingerprints

Abstract

The invention discloses a file security control and trace method and system based on digital fingerprints. The method includes the file uploading procedure and the file downloading procedure. In the file uploading procedure, when a user uploads files to a file server, the file server starts a natural language analysis program and conducts full-context scanning and matched analysis on file contexts, a position where the digital fingerprints can be inserted is found, a fingerprint feature position list is generated, the fingerprint feature position list and original files are stored in the file server together, the uploading and downloading record list is generated, and information uploaded this time is recorded. In the file downloading procedure, when the user sends a file downloading request to the file server, the file server generates binary random codes with the same length according to the length of the fingerprint feature position list, when the random code corresponding position is 1, the digital fingerprints are inserted in the contexts at the corresponding position, a new file is generated and sent to the user, and meanwhile the downloaded information is recorded in the uploading and downloading record list. By means of the method and system, the context files can be traced back, and the security of the context files is managed.

Description

technical field [0001] The invention relates to a method for file security control and traceability, in particular to a method and system for file security control and traceability based on digital fingerprints. It belongs to the field of information security management and control. Background technique [0002] With the advancement of information technology, computers and networks have become necessary tools for daily office work, communication and collaboration. However, while information technology improves people's work efficiency, it also puts forward higher requirements for information security precautions. At present, most users still use passive protection methods such as firewalls, intrusion detection, and anti-virus to protect office networks. However, the actual survey data shows that only a very small part of the incidents in which internal secrets of companies or units are leaked through the network are stolen by hackers, and most of the rest are caused by int...

AI Technical Summary

Problems solved by technology

The disadvantage of this method is that malicious users can easily clean up these characters in the digital document, and the document will lose the watermark after being printed, copied, screenshotted, or photographed

[0023] 5) Synonym replacement: Insert watermark by replacing synonyms, but there are few completely synonymous words, this method is easy to be perceived by readers, and in some cases it will affect semantic expression

[0036] 1) Expensive to deploy and maintain

In order to deploy a DLP system, it is necessary to deploy special software on the database, server, and client, and even purchase special network security equipment to monitor the flow of sensitive files on the network. For small and medium-sized enterprises, the cost is too high

In particular, these solutions require the deployment of client management and control software on the desktop of each employee, and the purchase of a license is expensive, and each terminal software requires dedicated maintenance, resulting in high daily operation and maintenance costs for the enterprise.

[0037] 2) There is no support for digital fingerprints, and there is no difference between files downloaded through different channels

The existing mainstream DLP system mainly focuses on file access control, and once a file is approved for download, any user who downloads the file will get the same file, and accurate traceability cannot be achieved

When one of multiple downloaders leaks sensitive files, it is theoretically impossible to find out who leaked them

[0038] 3) Unable to trace the source of offline files

However, once the document is printed, copied, screen shot, or photographed, the DLP system cannot track the flow of the document and trace the source of the leaker

Images