数据文件安全管控技术的研究与实现

Research and Implementation of Security Management of Data Files

数据文件安全管控技术通过将文件过滤驱动技术应用于文档的创建、编辑和使用的过程,利用透明加解密实现对涉密文件的内容保护.结合用户主动、被动授权,通过文件过滤驱动技术、API HOOK技术与权限库的联动,实现文件在线流转和离线环境下的全方位、动态、细粒度权限控制.重点从数据文件安全管控技术的研究与实现提供相应的解决方案,分别从统一数据出入口、数据文件防护管理、加密数据文件的使用控制和审计、加密数据文件的动态权限管理、文件溯源、大数据平台接口加解密和文档溯源这些方面研究数据文件的安全管控技术.通过对数据文件安全管控技术的研究,找到解决现在重庆移动业务系统文件数据保护的有效措施.

Data file security control technology applies file filter driver technology to the process of document creation, editing and using, and uses transparent encryption and decryption to realize content protection of classified files. Combined with user initiative and passive authorization,through file filtering driver technology, API HOOK technology and permission library interaction,we can achieve online, online and off-line full, dynamic and fine grained access control. This paper provides corresponding solutions from the research of safety control technology and implementation of data files, respectively from the unified data security management, data file management,entrance door control and the use of encrypted data file encryption, audit data file dynamic authorization management, file tracing, data encryption and document traceability platform interface the research of data file. Through the research of data file security management and control technology, the effective measures to solve the file data protection in Chongqing mobile business system are found.