Movatterモバイル変換


[0]ホーム

URL:


CN101334823A - A method and device for virtualizing files - Google Patents

A method and device for virtualizing files
Download PDF

Info

Publication number
CN101334823A
CN101334823ACN 200810141664CN200810141664ACN101334823ACN 101334823 ACN101334823 ACN 101334823ACN 200810141664CN200810141664CN 200810141664CN 200810141664 ACN200810141664 ACN 200810141664ACN 101334823 ACN101334823 ACN 101334823A
Authority
CN
China
Prior art keywords
file
storage device
target file
information
virtualization
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN 200810141664
Other languages
Chinese (zh)
Other versions
CN101334823B (en
Inventor
云朋
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
XFusion Digital Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co LtdfiledCriticalHuawei Technologies Co Ltd
Priority to CN 200810141664priorityCriticalpatent/CN101334823B/en
Publication of CN101334823ApublicationCriticalpatent/CN101334823A/en
Priority to PCT/CN2009/070516prioritypatent/WO2010006514A1/en
Application grantedgrantedCritical
Publication of CN101334823BpublicationCriticalpatent/CN101334823B/en
Activelegal-statusCriticalCurrent
Anticipated expirationlegal-statusCritical

Links

Images

Classifications

Landscapes

Abstract

Translated fromChinese

本发明实施例涉及通信技术领域,提供一种对文件虚拟化处理的方法及装置,利用本发明所公开的技术方案,通过获取对目标文件的操作指令及该目标文件的文件名信息,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。本发明实施例所公开的技术方案利用第三安全存储设备设置的灵活性,在不依赖于复杂的网络存储环境的情况下,实现对文件安全存储。

Figure 200810141664

The embodiment of the present invention relates to the field of communication technology, and provides a method and device for file virtualization processing. Using the technical solution disclosed in the present invention, by obtaining the operation instructions for the target file and the file name information of the target file, the corresponding After the conditions are met, the operation of the file is carried out virtually on the third safe storage device, and only an empty file is kept on the storage device directly operated by the user according to the original operating habits, and the storage location of the substantial content of the file is in the above-mentioned on the third safe storage device, in order to achieve the purpose of safe storage. The technical solution disclosed in the embodiment of the present invention utilizes the flexibility of setting the third safe storage device, and realizes safe storage of files without relying on a complicated network storage environment.

Figure 200810141664

Description

Translated fromChinese
一种对文件虚拟化处理方法及装置A method and device for virtualizing files

技术领域technical field

本发明涉及通信技术领域,尤其涉及一种对文件虚拟化处理方法及装置。The invention relates to the technical field of communications, in particular to a method and device for virtualizing files.

背景技术Background technique

随着计算机网络技术的快速发展,企业正常运营及个人工作生活越来越依赖网络技术,而一旦网络信息安全受到攻击,企业运营或个人工作生活将受到严重威胁。因此,网络技术飞速发展的今天,信息安全问题成为大家关注焦点,而文件信息防泄密就成为了信息安全的重中之重。现有技术中,保障文件信息安全的方法通常是利用文件服务器,文件服务器是运行在网络环境下的提供文件存储服务的设备,它给用户创建一个可以安全存储文档的服务器目录,将用户对指定文档的操作限制在文件服务器指定的目录下进行。文件服务器可以管理局域网共享目录或是广域网中的几个子网中定义好的文件存储目录,达到文件集中存储和共享的目的,通常用户的文件信息通过网络转储到指定的目录下,用户一旦脱离网络环境,就无法找到文件,从而达到文件安全存储的功能。With the rapid development of computer network technology, the normal operation of enterprises and personal work and life are increasingly dependent on network technology. Once network information security is attacked, business operations or personal work and life will be seriously threatened. Therefore, with the rapid development of network technology today, information security issues have become the focus of everyone's attention, and file information leakage prevention has become the top priority of information security. In the prior art, the method to ensure the security of file information is usually to use a file server. A file server is a device that provides file storage services running in a network environment. Document operations are limited to the directory specified by the file server. The file server can manage the shared directory of the LAN or the file storage directory defined in several subnets in the WAN to achieve the purpose of centralized storage and sharing of files. Usually, the user's file information is dumped to the specified directory through the network. Once the user leaves the In the network environment, files cannot be found, so as to achieve the function of safe storage of files.

上述技术中,所述的文件服务器通常是由专门的软件比如window2000Server或是专业的文件管理厂商提供文件服务器软件,因此,文件服务器需要完整的配置手册去完成配置工作,并且,文件服务器作为一种大型的文件转储应用,需要目录服务器支持,不利于小面积部署。In the above-mentioned technologies, the file server is usually provided by special software such as window2000Server or a professional file management manufacturer. Therefore, the file server needs a complete configuration manual to complete the configuration work, and the file server is used as a Large-scale file dump applications require directory server support, which is not conducive to small-area deployment.

发明内容Contents of the invention

本发明实施例提供一种对文件虚拟化处理方法及装置,为文件提供安全存储环境,不需要专门的网络支持,配置灵活。Embodiments of the present invention provide a file virtualization processing method and device, which provide a secure storage environment for files, do not require special network support, and are flexible in configuration.

本发明实施例所提供的对文件虚拟化处理方法及装置的技术方案如下:The technical solution of the file virtualization processing method and device provided by the embodiment of the present invention is as follows:

本发明实施例提供一种对文件虚拟化处理的方法,其特征在于,包括:An embodiment of the present invention provides a method for virtualizing a file, which is characterized in that it includes:

获取对目标文件的操作指令及该目标文件的文件名信息;Obtaining an operation instruction on the target file and the file name information of the target file;

根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;According to the obtained file name information, it is judged whether the preset third secure storage device contains the target file;

当判断得到所述第三安全存储设备上包含所述目标文件时,则根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作。When it is determined that the third secure storage device contains the target file, according to the operation instruction, the operation of the instruction is completed on the target file on the third secure storage device.

本发明实施例所提供的一种对文件虚拟化处理的装置,包括:A device for virtualizing files provided by an embodiment of the present invention includes:

信息获取单元,用于获取对目标文件的操作指令及所述目标文件的文件名信息;an information acquisition unit, configured to acquire an operation instruction for the target file and file name information of the target file;

第一判断单元,用于根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;The first judging unit is configured to judge whether the preset third secure storage device contains the target file according to the acquired file name information;

处理单元,用于当所述第三安全存储设备上包含有所述目标文件时,根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作。A processing unit configured to, when the third secure storage device contains the target file, complete the operation of the instruction on the target file on the third secure storage device according to the operation instruction.

本发明实施例所提供的对文件虚拟化处理的技术方案,通过获取对目标文件的操作指令及该目标文件的文件名信息,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,而文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。本发明实施例利用了第三安全存储设备设置的灵活性,在不依赖于复杂的网络存储环境的情况下,实现对文件安全存储。In the technical solution for file virtualization provided by the embodiment of the present invention, by obtaining the operation instruction for the target file and the file name information of the target file, after corresponding conditions are met, the operation on the file is virtualized on the third secure storage device. However, on the storage device directly operated by the user according to the original operating habits, only an empty file is kept, and the storage location of the substantial content of the file is on the third safe storage device, so as to achieve the purpose of safe storage . The embodiment of the present invention utilizes the flexibility of setting the third safe storage device, and realizes safe storage of files without relying on a complex network storage environment.

附图说明Description of drawings

为了更清楚地说明本发明实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作一简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动性的前提下,还可以根据这些附图获得其他的附图。In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description These are only some embodiments of the present invention, and those skilled in the art can also obtain other drawings based on these drawings without any creative effort.

图1为本发明实施例一所提供的方法流程图;FIG. 1 is a flow chart of the method provided by Embodiment 1 of the present invention;

图2为本发明实施例二所提供的方法流程图;FIG. 2 is a flow chart of the method provided by Embodiment 2 of the present invention;

图3为本发明实施例三所提供的装置结构示意图;Fig. 3 is a schematic structural diagram of the device provided by Embodiment 3 of the present invention;

图4为本发明实施例四所提供的装置结构示意图。FIG. 4 is a schematic structural diagram of a device provided by Embodiment 4 of the present invention.

具体实施方式Detailed ways

为使本发明的目的、技术方案和优点更加清楚,下面将结合附图对本发明实施方式作进一步地详细描述。应当理解,此处所描述的具体实施方式仅仅用以解释本发明,并不用于限定本发明。In order to make the object, technical solution and advantages of the present invention clearer, the implementation manner of the present invention will be further described in detail below in conjunction with the accompanying drawings. It should be understood that the specific embodiments described here are only used to explain the present invention, and are not intended to limit the present invention.

本发明实施例中所涉及的对虚拟文件处理方法,将作用于操作系统之上,应用程序之下,部分接管当前进程对文件的操作,产生虚拟和可控的自动化操作。通常,用户在对一个文件进行操作时,相应的处理程序会去操作系统资源,达到文件打开、创建、删除及改名等目的。The virtual file processing method involved in the embodiment of the present invention will act on the operating system and under the application program to partially take over the operation of the current process on the file to generate a virtual and controllable automatic operation. Usually, when a user operates a file, the corresponding processing program will go to the operating system resources to achieve the purpose of opening, creating, deleting and renaming the file.

实施例一:Embodiment one:

本实施例提供一种对文件虚拟化处理方法,以改名或删除文件为例。参见图1,本发明实施例,具体包括:This embodiment provides a method for virtualizing a file, taking renaming or deleting a file as an example. Referring to Fig. 1, the embodiment of the present invention specifically includes:

步骤101:获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息;Step 101: Obtain an operation instruction for renaming or deleting a target file and file name information of the target file;

其中,获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息可以使用一种替换系统函数的钩子技术在系统服务描述符表上截获对目标文件改名或删除的操作指令及所述目标文件的文件名信息;Wherein, obtaining the operation instruction to rename or delete the target file and the file name information of the target file can use a hook technology to replace the system function on the system service descriptor table to intercept the operation instruction to rename or delete the target file and the information of the target file. Describe the file name information of the target file;

获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息也可以通过直接使用文件过滤驱动来过滤发向文件系统设备的输入/输出请求包,从中获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息;Obtaining the operation instructions for renaming or deleting the target file and the file name information of the target file can also filter the input/output request packets sent to the file system device by directly using the file filter driver, and obtain the renaming or deleting information for the target file therefrom. Operation instructions and file name information of the target file;

获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息的方法还有其他实施方式,在此不一一列举;There are other implementations for obtaining the operation instruction for renaming or deleting the target file and the file name information of the target file, which will not be listed here;

在实际操作中,有一些文件不需要进行虚拟化操作,例如临时文件、内存的映像文件等,这些文件虚拟化处理的意义不大。因此上述方法中还可进一步包括:In actual operation, some files do not need to be virtualized, such as temporary files, memory image files, etc., and the virtualization of these files is of little significance. Therefore also can further comprise in above-mentioned method:

步骤102:根据所述文件名信息,判断该文件是否需要进行虚拟化处理;如果是,则继续执行文件虚拟化处理程序中的步骤103;如果否,则结束虚拟化操作流程;Step 102: According to the file name information, determine whether the file needs to be virtualized; if yes, proceed to step 103 in the file virtualization processing procedure; if not, end the virtualization operation process;

其中,所述判断目标文件是否需要进行虚拟化处理的步骤,可以在整个虚拟化流程中获取到文件名信息后执行,但本实施例仅仅作为一个实施方式,不构成对所述判断目标文件是否需要进行虚拟化处理的步骤在整个方法流程中的执行顺序的限制;Wherein, the step of judging whether the target file needs to be virtualized can be executed after the file name information is obtained in the whole virtualization process, but this embodiment is only used as an implementation mode, and does not constitute a judgment on whether the target file needs to be virtualized or not. Restrictions on the execution order of the steps that need to be virtualized in the entire method flow;

其中,判断所述目标文件是否需要进行虚拟化操作,可以通过设置一个文件名信息表,将不需要虚拟化操作的文件信息配置于表中,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;Wherein, to determine whether the target file needs to be virtualized, a file name information table can be set to configure the file information that does not require virtualization in the table. When the file name information of the target file matches the file When the corresponding information in the information configuration table is completed, the virtualization operation process ends;

其中,对不需要进行虚拟化操作的文件的文件名信息可以提供给用户自己配置,用户可根据需求灵活配置;也可以由系统默认配置该信息表;也可以通过前述两种方法结合来配置该信息表;Among them, the file name information of the files that do not need to be virtualized can be provided to the user to configure, and the user can configure flexibly according to the needs; the information table can also be configured by the system by default; or the above two methods can be combined to configure the Information Sheet;

其中,所述的文件名信息可以包括:文件类型、文件名、文件所在存储装置中的分区信息等;Wherein, the file name information may include: file type, file name, partition information in the storage device where the file is located, etc.;

步骤103:根据所述文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;Step 103: According to the file name information, it is judged whether the target file is included in the preset third secure storage device;

其中,所述的第三安全存储设备可以是系统默认的固定安全存储设备;可以是用户预先指定的安全存储设备,将所指定的安全存储设备作为文件的存储环境,这个存储环境可以是目录,也可以是移动介质等等,原则上只要是用户能进行读写访问的位置即可;Wherein, the third secure storage device may be a default fixed secure storage device of the system; it may be a secure storage device designated by the user in advance, and the designated secure storage device may be used as a file storage environment, and this storage environment may be a directory, It can also be a removable medium, etc. In principle, as long as it is a location where the user can read and write;

其中,本发明实施例的方法可以嵌入到现有的操作系统下的文件安全产品中,通过与这些安全产品进行通讯,所述第三安全存储设备的位置则可由用户来设定;Wherein, the method of the embodiment of the present invention can be embedded in the existing file security products under the operating system, and the position of the third secure storage device can be set by the user through communication with these security products;

步骤104:当判断得到所述第三安全存储设备上不包含所述目标文件时,则结束此次虚拟化操作流程;Step 104: When it is determined that the third secure storage device does not contain the target file, then end the virtualization operation process;

其中,用户将需要安全存储的文件存入第三安全存储设备上后,对文件的改名或删除操作需要在第三安全存储设备上进行,当第三安全存储设备上没有存储需进行改名或删除操作的文件时,则可结束此次虚拟化处理流程,按现有技术进行操作,在此不再赘述;Among them, after the user stores the files that need to be safely stored in the third safe storage device, the operation of renaming or deleting the files needs to be performed on the third safe storage device. When operating files, you can end the virtualization process and operate according to the existing technology, so I won’t go into details here;

步骤105:当判断得到所述第三安全存储设备上包含所述目标文件时,则根据所述改名或删除的操作指令,对所述第三安全存储设备上的所述目标文件完成相应的改名或删除操作;Step 105: When it is determined that the third secure storage device contains the target file, complete the corresponding renaming of the target file on the third secure storage device according to the operation instruction of renaming or deleting or delete operations;

具体实现中,以删除目标文件为例,通常当一个文件被请求删除时,在文件系统设备中会发生一个功能号为MJ-CREATE的IRP事件,它的文件对象参数中包含有“DELETE(删除)”标志,如果通过文件过滤驱动的方法截获对文件进行删除的操作指令,对功能号为MJ-CREATE的IRP进行过滤,当发现了删除标志时,并在第三安全存储设备上发现有需要删除的该文件时,就在该第三安全存储设备上完成文件删除工作;In the specific implementation, take deleting the target file as an example, usually when a file is requested to be deleted, an IRP event whose function number is MJ-CREATE will occur in the file system device, and its file object parameter contains "DELETE (delete )" sign, if the operation instruction to delete the file is intercepted by the method of file filtering driver, the IRP whose function number is MJ-CREATE is filtered, and when the delete sign is found, it is found that there is a need on the third safe storage device When the file is deleted, the file deletion work is completed on the third safe storage device;

具体实现中,对所述第三安全存储设备上的所述目标文件完成相应的操作包括:In a specific implementation, completing corresponding operations on the target file on the third secure storage device includes:

将所述目标文件的路径重定向至所述的第三安全存储设备,在所述的第三安全存储设备上进行所述指令的操作。The path of the target file is redirected to the third safe storage device, and the operation of the instruction is performed on the third safe storage device.

为了用户更方便直接的了解对文件的操作请求的处理情况,本方法实施例还可进一步包括:In order for the user to more conveniently and directly understand the processing situation of the file operation request, this embodiment of the method may further include:

步骤106:将对目标文件的按照操作指令的虚拟化处理结果反馈至用户。Step 106: Feedback the virtualization processing result of the target file according to the operation instruction to the user.

由于本实施例的方法作用于操作系统之上,应用层之下,对文件的虚拟化操作将不会影响应用程序正常使用,用户的使用习惯能够保留;并且,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,而文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。Since the method of this embodiment acts on the operating system and under the application layer, the virtualization operation of the file will not affect the normal use of the application program, and the user's usage habits can be preserved; The operation is carried out virtually on the third safe storage device, and only an empty file is kept on the storage device directly operated by the user according to the original operating habits, and the storage location of the substantial content of the file is in the third safe storage device for safe storage purposes.

实施例二:Embodiment two:

文件的读写操作都是基于系统资源文件句柄来完成的,而这些句柄的获得是通过系统创建和打开文件句柄来完成的,文件读写本身并没有对文件名进行处理,只是按照句柄资源去读取或写入文件内容,所以关于文件读写的虚拟化操作只需要关注文件句柄的打开或创建,可以简单的理解为,文件的具体读写操作都是用户去完成的,系统只需要把需要读写的文件创建或打开给用户编辑;The read and write operations of files are all done based on system resource file handles, and these handles are obtained by creating and opening file handles by the system. File reading and writing itself does not process file names, but only handles resources. Read or write file content, so the virtualization operation of file read and write only needs to pay attention to the opening or creation of the file handle. It can be simply understood that the specific read and write operations of the file are completed by the user, and the system only needs to Create or open files that need to be read and written for users to edit;

本实施例二提供一种对文件虚拟化处理方法,以打开或创建文件为例,参见图2,该方法包括:Embodiment 2 provides a method for virtualizing a file. Taking opening or creating a file as an example, as shown in FIG. 2 , the method includes:

步骤201:获取打开或创建目标文件的操作指令及所述目标文件的文件名信息;Step 201: Obtain an operation instruction for opening or creating a target file and file name information of the target file;

其中,获取打开或创建目标文件的操作指令及所述目标文件的文件名信息可以使用一种替换系统函数的钩子技术在系统服务描述符表上截获打开或创建目标文件的操作指令并获取所述目标文件的文件名信息;Wherein, obtaining the operation instruction of opening or creating the target file and the file name information of the target file can use a hook technology replacing the system function to intercept the operation instruction of opening or creating the target file on the system service descriptor table and obtain the described The file name information of the target file;

获取打开或创建目标文件的操作指令及所述目标文件的文件名信息也可以通过直接使用文件过滤驱动来过滤发向文件系统设备的输入/输出请求包,从中获取打开或创建目标文件操作指令并获取所述目标文件的文件名信息;Obtaining the operation instruction of opening or creating the target file and the file name information of the target file can also filter the input/output request packet sent to the file system device by directly using the file filter driver, thereby obtaining the operation instruction of opening or creating the target file and Obtaining the file name information of the target file;

获取打开或创建目标文件的操作指令及所述目标文件的文件名信息的方法还有其他实施方式,在此不一一列举;There are other implementations for the method of obtaining the operation instruction for opening or creating the target file and the file name information of the target file, which are not listed here;

在实际操作中,有一些文件不需要进行虚拟化操作,例如临时文件、内存的映像文件等,这些文件虚拟化处理的意义不大。因此上述方法中还可进一步包括:In actual operation, some files do not need to be virtualized, such as temporary files, memory image files, etc., and the virtualization of these files is of little significance. Therefore also can further comprise in above-mentioned method:

步骤202:根据所获取的文件名信息,判断该文件是否需要进行虚拟化处理;如果是,则继续执行文件虚拟化处理程序中的步骤203;如果否,则结束虚拟化操作流程;Step 202: According to the acquired file name information, determine whether the file needs to be virtualized; if yes, continue to executestep 203 in the file virtualization processing program; if not, end the virtualization operation process;

其中,对所述判断目标文件是否需要进行虚拟化处理这个步骤的执行顺序,同实施例一中关于该步骤执行顺序的描述,在此不再赘述;Wherein, the execution sequence of the step of judging whether the target file needs to be virtualized is the same as the description of the execution sequence of this step in Embodiment 1, and will not be repeated here;

其中,判断所述目标文件是否需要进行虚拟化操作,可以通过设置一个文件名信息表,将不需要虚拟化操作的文件信息配置于表中,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;Wherein, to determine whether the target file needs to be virtualized, a file name information table can be set to configure the file information that does not require virtualization in the table. When the file name information of the target file matches the file When the corresponding information in the information configuration table is completed, the virtualization operation process ends;

其中,该不需要进行虚拟化操作的文件的文件名信息可以提供给用户自己配置,用户可根据需求灵活配置;也可以由系统默认配置该信息表;也可以前述两种方法结合来配置该信息表;Among them, the file name information of the file that does not need to be virtualized can be provided to the user for configuration, and the user can configure it flexibly according to the needs; the information table can also be configured by the system by default; or the information can be configured by combining the above two methods surface;

其中,所述的文件名信息可以包括:文件类型、文件名、文件所在存储装置中的分区信息等;Wherein, the file name information may include: file type, file name, partition information in the storage device where the file is located, etc.;

步骤203:根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件,如果是,则执行步骤205;Step 203: According to the acquired file name information, judge whether the preset third secure storage device contains the target file, if yes, executestep 205;

其中,所述的第三安全存储设备可以是系统默认的固定安全存储设备;可以是用户预先指定的安全存储设备,将所指定的安全存储设备作为文件的存储环境,这个存储环境可以是目录,也可以是移动介质等等,原则上只要是用户能进行读写访问的位置即可;Wherein, the third secure storage device may be a default fixed secure storage device of the system; it may be a secure storage device designated by the user in advance, and the designated secure storage device may be used as a file storage environment, and this storage environment may be a directory, It can also be a removable medium, etc. In principle, as long as it is a location where the user can read and write;

其中,本发明实施例的方法可以嵌入到现有的操作系统下的文件安全产品中,通过与这些安全产品进行通讯,所述第三安全存储设备的位置则可由用户来设定;Wherein, the method of the embodiment of the present invention can be embedded in the existing file security products under the operating system, and the position of the third secure storage device can be set by the user through communication with these security products;

步骤204:当判断得到预置的第三安全存储设备上不包含所述目标文件时,将所述目标文件复制与第三安全存储设备上,执行步骤205;Step 204: When it is judged that the preset third safe storage device does not contain the target file, copy the target file to the third safe storage device, and executestep 205;

在文件首次使用的时候,例如用户对一篇已有内容的文件进行编辑,对已存在的文件不能转存储到第三安全存储设备上去,而通过自动复制到第三安全存储设备上;When the file is used for the first time, for example, the user edits a file with existing content, the existing file cannot be transferred to the third safe storage device, but automatically copied to the third safe storage device;

步骤205:对所述第三安全存储设备上所述目标文件完成打开或创建的操作;Step 205: Open or create the target file on the third secure storage device;

具体实现中,对根据所述打开或创建目标文件的操作指令,所述第三安全存储设备上的所述目标文件完成相应的操作包括:In the specific implementation, according to the operation instruction of opening or creating the target file, completing the corresponding operation on the target file on the third secure storage device includes:

将所述目标文件的路径重定向至所述的第三安全存储设备,根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作在所述的第三安全存储设备上进行所述指令的操作。Redirecting the path of the target file to the third secure storage device, and according to the operation instruction, completing the operation of the instruction on the target file on the third secure storage device in the third secure storage device 3. Perform the operation of the instruction on the safe storage device.

为了用户更方便直接的了解对文件的操作请求的处理情况,本方法实施例还可进一步包括:In order for the user to more conveniently and directly understand the processing situation of the file operation request, this embodiment of the method may further include:

步骤206:将对目标文件的按照操作指令的虚拟化处理结果反馈至用户。Step 206: Feedback the result of the virtualization processing of the target file according to the operation instruction to the user.

由于本实施例的方法作用于操作系统之上,应用层之下,对文件的虚拟化操作将不会影响应用程序正常使用,用户的使用习惯能够保留;并且,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,而文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。Since the method of this embodiment acts on the operating system and under the application layer, the virtualization operation of the file will not affect the normal use of the application program, and the user's usage habits can be preserved; The operation is carried out virtually on the third safe storage device, and only an empty file is kept on the storage device directly operated by the user according to the original operating habits, and the storage location of the substantial content of the file is in the third safe storage device for safe storage purposes.

实施例三:Embodiment three:

参见图3,以改名或删除文件为例,本发明实施例还提供一种对文件虚拟化处理的装置,包括:Referring to Figure 3, taking renaming or deleting a file as an example, an embodiment of the present invention also provides a device for virtualizing files, including:

信息获取单元301,用于获取对目标文件改名或删除文件的操作指令及所述目标文件的文件名信息;Aninformation acquisition unit 301, configured to acquire an operation instruction for renaming or deleting a target file and file name information of the target file;

其中,该信息获取单元301获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息可以使用一种替换系统函数的钩子技术在系统服务描述符表上截获对目标文件改名或删除的操作指令并获取所述目标文件的文件名信息;Wherein, theinformation obtaining unit 301 obtains the operation instruction for renaming or deleting the target file and the file name information of the target file, and can use a hook technology to replace the system function to intercept the renaming or deleting of the target file on the system service descriptor table. operation instruction and obtain the file name information of the target file;

该信息获取单元301获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息也可以通过直接使用文件过滤驱动来过滤发向文件系统设备的输入/输出请求包,从中获取对目标文件改名或操作指令并获取所述目标文件的文件名信息;Theinformation acquisition unit 301 acquires the operation instruction for renaming or deleting the target file and the file name information of the target file. It can also filter the input/output request packet sent to the file system device by directly using the file filter driver, and obtain the target file from it. File renaming or operation instructions and obtaining the file name information of the target file;

该信息获取单元301获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息的方法还有其他实施方式,在此不一一列举;There are other implementations for theinformation acquisition unit 301 to acquire the operation instruction for renaming or deleting the target file and the file name information of the target file, which will not be listed here;

在实际操作中,有一些文件不需要进行虚拟化操作,例如临时文件、内存的映像文件等,这些文件虚拟化处理的意义不大。因此,上述对文件虚拟化处理的装置中还可包括:In actual operation, some files do not need to be virtualized, such as temporary files, memory image files, etc., and the virtualization of these files is of little significance. Therefore, the above-mentioned device for processing file virtualization may also include:

第二判断单元305,用于利用所获取的文件名信息判断该文件是否需要进行虚拟化处理;如果是,则继续执行文件虚拟化处理程序;如果否,则结束虚拟化操作流程;Thesecond judging unit 305 is configured to use the acquired file name information to judge whether the file needs to be virtualized; if yes, continue to execute the file virtualization processing program; if not, end the virtualization operation process;

其中,所述第二判断单元305判断所述目标文件是否需要进行虚拟化操作,可以通过设置一个文件名信息表,将不需要虚拟化操作的文件名信息配置于表中,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;若没有匹配到相应信息时,则继续进行虚拟化处理流程;Wherein, thesecond judging unit 305 judges whether the target file needs to be virtualized. A file name information table can be set to configure the file name information that does not require virtualization in the table. When the target file When the file name information matches the corresponding information in the file information configuration table, the virtualization operation process ends; if no corresponding information is matched, the virtualization process continues;

因此,第二判断单元305可以包括:Therefore, thesecond judging unit 305 may include:

存储单元3051,用于存储不需要虚拟化处理文件的文件名信息配置表;Astorage unit 3051, configured to store a file name information configuration table for files that do not require virtualization processing;

根据不同的匹配策略,所述的文件信息表中可以配置不需要虚拟化操作的文件名信息,也可以只配置需要虚拟化操作的文件名信息;本实施例以在所述文件名配置表中配置不需要虚拟化处理的文件名信息为例;According to different matching strategies, the file name information that does not require virtualization operation can be configured in the file information table, or only the file name information that requires virtualization operation can be configured; in this embodiment, the file name configuration table Configure file name information that does not require virtualization processing as an example;

匹配单元3052,用于将获取的文件名信息与存储单元所存储的文件信息配置表中的参数进行匹配,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;当所述目标文件的文件名信息匹配不到该文件信息配置表中的相应信息时,则继续进行虚拟化处理流程;Thematching unit 3052 is configured to match the obtained file name information with the parameters in the file information configuration table stored in the storage unit, when the file name information of the target file matches the corresponding information in the file information configuration table, Then end the virtualization operation flow; when the file name information of the target file does not match the corresponding information in the file information configuration table, continue the virtualization processing flow;

当所述对文件虚拟化处理的装置包括第二判断单元305时,其结构示意图可以为所述图3所示,但本实施例中的结构顺序不构成对所述第二判断单元305在所述装置中的位置的限定;When the device for virtualizing files includes asecond judging unit 305, its structural diagram may be as shown in FIG. The limitation of the location in the device;

其中,该不需要进行虚拟化操作的文件的文件名信息可以提供给用户自己配置,用户可根据需求灵活配置;也可以由系统默认配置该信息表;也可以前述两种方法结合来配置该信息表;Among them, the file name information of the file that does not need to be virtualized can be provided to the user for configuration, and the user can configure it flexibly according to the needs; the information table can also be configured by the system by default; or the information can be configured by combining the above two methods surface;

其中,所述的文件名信息可以包括:文件类型、文件名、文件所在存储装置中的分区信息等;Wherein, the file name information may include: file type, file name, partition information in the storage device where the file is located, etc.;

第一判断单元302,用于根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;Thefirst judging unit 302 is configured to judge whether the preset third secure storage device contains the target file according to the acquired file name information;

其中,所述的第三安全存储设备可以是系统默认的固定安全存储设备;也可以是用户预先指定的安全存储设备,将所指定的安全存储设备作为文件的存储环境,这个存储环境可以是目录,也可以是移动介质等等,原则上只要是用户能进行读写访问的位置即可;Wherein, the third secure storage device may be a default fixed secure storage device of the system; it may also be a secure storage device designated by the user in advance, and the designated secure storage device may be used as a file storage environment, and this storage environment may be a directory , it can also be a removable medium, etc. In principle, as long as it is a location where the user can read and write;

处理单元303,用于当所述第三安全存储设备上包含有所述目标文件时,则根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成改名或删除的工作;当第三安全存储设备上不包含所述的目标文件时,则结束虚拟化操作流程。Aprocessing unit 303, configured to rename or delete the target file on the third secure storage device according to the operation instruction when the third secure storage device contains the target file ; When the third secure storage device does not contain the target file, the virtualization operation process is ended.

其中,用户将需要安全存储的文件存入第三安全存储设备上后,对文件的改名或删除操作需要在第三安全存储设备上进行,当第三安全存储设备上没有存储需进行改名或删除操作的文件时,则可结束此次虚拟化处理流程,虚拟化处理流程结束后按现有技术进行操作,在此不再赘述;Among them, after the user stores the files that need to be safely stored in the third safe storage device, the operation of renaming or deleting the files needs to be performed on the third safe storage device. When operating files, you can end the virtualization processing flow, and operate according to the existing technology after the virtualization processing flow is completed, and will not repeat them here;

其中,所述处理单元303可以包括重定向单元3031和执行单元3032:Wherein, theprocessing unit 303 may include aredirection unit 3031 and an execution unit 3032:

所述重定向单元3031,用于当第一判断单元302判断预置的第三安全存储设备上包含有所述目标文件时,将所述目标文件的路径重定向至所述的第三安全存储设备;Theredirection unit 3031 is configured to redirect the path of the target file to the third safe storage device when thefirst judging unit 302 judges that the preset third safe storage device contains the target file equipment;

其中,所述重定向单元3031还可用于,与外部安全存储设备进行交互,接收外部所提供的存储设备位置信息;Wherein, theredirection unit 3031 can also be used to interact with an external secure storage device and receive externally provided storage device location information;

由此,所述的重定向单元3031还作为与外部系统的接口,本发明实施例所提供的对文件虚拟化处理的装置可嵌入到现有的操作系统下的文件安全产品中,例如Windows操作系统下的文件安全产品中,通过所述的重定向单元3031与这些产品进行通讯来将文件路径重定向到第三安全存储设备上。Therefore, theredirection unit 3031 also serves as an interface with external systems, and the device for virtualizing files provided by the embodiment of the present invention can be embedded in file security products under existing operating systems, such as Windows operating systems. Among the file security products under the system, theredirection unit 3031 communicates with these products to redirect the file path to the third secure storage device.

所述执行单元3032,用于根据所述改名或删除目标文件的操作指令,在所述第三安全存储设备上进行所述指令的操作;Theexecution unit 3032 is configured to perform the operation of the instruction on the third secure storage device according to the operation instruction of renaming or deleting the target file;

为了用户更方便直接的了解对文件的操作请求的处理情况,本装置实施例还可进一步包括:In order for the user to more conveniently and directly understand the processing situation of the operation request to the file, this embodiment of the device may further include:

反馈单元304,用于将处理单元303对目标文件的按照操作指令的虚拟化处理结果反馈至用户。Thefeedback unit 304 is configured to feed back the virtualization processing result of theprocessing unit 303 on the target file according to the operation instruction to the user.

由于利于本实施例所提供的装置来实现文件虚拟化处理的方法,作用于操作系统之上,应用层之下,对文件的虚拟化操作将不会影响应用程序正常使用,用户的使用习惯能够保留;并且,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。Because the device provided by this embodiment is beneficial to realize the method of file virtualization processing, it acts on the operating system and under the application layer, and the virtualization operation on files will not affect the normal use of the application program, and the user's usage habits can be and, after satisfying the corresponding conditions, the operation of the file is carried out virtually on the third safe storage device, and only an empty file is kept on the storage device directly operated by the user according to the original operating habits, and the actual content of the file The storage location is on the third safe storage device, so as to achieve the purpose of safe storage.

实施例四:Embodiment four:

参见图4,以打开或创建文件为例,本发明实施例还提供一种对文件虚拟化处理的装置,包括:Referring to FIG. 4, taking opening or creating a file as an example, an embodiment of the present invention also provides a device for virtualizing a file, including:

信息获取单元401,用于获取打开或创建目标文件的操作指令及所述目标文件的文件名信息;Aninformation obtaining unit 401, configured to obtain an operation instruction for opening or creating a target file and file name information of the target file;

其中,所述信息获取单元获取打开或创建目标文件的操作指令及所述目标文件的文件名信息可以使用一种替换系统函数的钩子技术在系统服务描述符表上截获打开或创建目标文件的操作指令并获取所述目标文件的文件名信息;Wherein, the information acquisition unit obtains the operation instruction of opening or creating the target file and the file name information of the target file, and can use a hook technology replacing the system function to intercept the operation of opening or creating the target file on the system service descriptor table command and obtain the file name information of the target file;

获取打开或创建目标文件的操作指令也可以通过直接使用文件过滤驱动来过滤发向文件系统设备的输入/输出请求包,从中获取打开或创建目标文件操作指令并获取所述目标文件的文件名信息;Obtaining the operation instruction of opening or creating the target file may also directly use the file filter driver to filter the input/output request packet sent to the file system device, thereby obtaining the operation instruction of opening or creating the target file and obtaining the file name information of the target file ;

该信息获取单元401获取打开或创建目标文件的操作指令及所述目标文件的文件名信息的方法还有其他实施方式,在此不一一列举;The method for theinformation obtaining unit 401 to obtain the operation instruction for opening or creating the target file and the file name information of the target file has other implementations, which are not listed here;

在实际操作中,有一些文件不需要进行虚拟化操作,例如临时文件、内存的映像文件等,这些文件虚拟化处理的意义不大。因此,上述对文件虚拟化处理的装置中还可包括:In actual operation, some files do not need to be virtualized, such as temporary files, memory image files, etc., and the virtualization of these files is of little significance. Therefore, the above-mentioned device for processing file virtualization may also include:

第二判断单元406,用于利用该文件名信息判断该文件是否需要进行虚拟化处理;如果是,则继续执行文件虚拟化处理程序;如果否,则结束虚拟化操作流程;Thesecond judging unit 406 is configured to use the file name information to judge whether the file needs to be virtualized; if yes, continue to execute the file virtualization processing program; if not, end the virtualization operation flow;

其中,所述第二判断单元406判断所述目标文件是否需要进行虚拟化操作,可以通过设置一个文件名信息表,将不需要虚拟化操作的文件名信息配置于表中,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;若没有匹配到相应信息时,则继续进行虚拟化处理流程;Wherein, thesecond judging unit 406 judges whether the target file needs to be virtualized. A file name information table can be set to configure the file name information that does not require virtualization in the table. When the target file When the file name information matches the corresponding information in the file information configuration table, the virtualization operation process ends; if no corresponding information is matched, the virtualization process continues;

因此,第二判断单元406可以包括:Therefore, thesecond judging unit 406 may include:

存储单元4061,用于存储不需要虚拟化处理文件的文件名信息配置表;Astorage unit 4061, configured to store a file name information configuration table for files that do not require virtualization processing;

根据不同的匹配策略,所述的文件信息表中可以配置不需要虚拟化操作的文件名信息,也可以只配置需要虚拟化操作的文件名信息;本实施例以在所述文件名配置表中配置不需要虚拟化处理的文件名信息为例;According to different matching strategies, the file name information that does not require virtualization operation can be configured in the file information table, or only the file name information that requires virtualization operation can be configured; in this embodiment, the file name configuration table Configure file name information that does not require virtualization processing as an example;

匹配单元4062,用于将获取的文件名信息与存储单元所存储的文件信息配置表中的参数进行匹配,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;当所述目标文件的文件名信息匹配不到该文件信息配置表中的相应信息时,则继续进行虚拟化处理流程;Thematching unit 4062 is configured to match the obtained file name information with the parameters in the file information configuration table stored in the storage unit, when the file name information of the target file matches the corresponding information in the file information configuration table, Then end the virtualization operation flow; when the file name information of the target file does not match the corresponding information in the file information configuration table, continue the virtualization processing flow;

其中,对于所述第二判断单元在所述对文件虚拟化处理装置中的位置结构,同实施例三中对第二判断单元的描述,在此不再赘述;Wherein, the position structure of the second judging unit in the file virtualization processing device is the same as the description of the second judging unit in Embodiment 3, and will not be repeated here;

其中,该不需要进行虚拟化操作的文件的文件名信息可以提供给用户自己配置,用户可根据需求灵活配置;也可以由系统默认配置该信息表;也可以前述两种方法结合来配置该信息表;Among them, the file name information of the file that does not need to be virtualized can be provided to the user for configuration, and the user can configure it flexibly according to the needs; the information table can also be configured by the system by default; or the information can be configured by combining the above two methods surface;

其中,所述的文件名信息可以包括:文件类型、文件名、文件所在存储装置中的分区信息等;Wherein, the file name information may include: file type, file name, partition information in the storage device where the file is located, etc.;

第一判断单元402,用于根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;Thefirst judging unit 402 is configured to judge whether the preset third secure storage device contains the target file according to the acquired file name information;

其中,所述的第三安全存储设备可以是系统默认的固定安全存储设备;也可以是用户预先指定的安全存储设备,将所指定的安全存储设备作为文件的存储环境,这个存储环境可以是目录,也可以是移动介质等等,原则上只要是用户能进行读写访问的位置即可;Wherein, the third secure storage device may be a default fixed secure storage device of the system; it may also be a secure storage device designated by the user in advance, and the designated secure storage device may be used as a file storage environment, and this storage environment may be a directory , it can also be a removable medium, etc. In principle, as long as it is a location where the user can read and write;

复制单元403,用于当判断结果为预置的第三安全存储设备上不包含所述目标文件时,将所述目标文件复制于第三安全存储设备上;The copyingunit 403 is configured to copy the target file to the third safe storage device when the judgment result is that the preset third safe storage device does not contain the target file;

在文件首次使用的时候,例如用户对一篇已有内容的文件进行编辑,对已存在的文件不能转存储到第三安全存储设备上去,而通过自动复制到第三安全存储设备上;When the file is used for the first time, for example, the user edits a file with existing content, the existing file cannot be transferred to the third safe storage device, but automatically copied to the third safe storage device;

处理单元404,用于当所述第三安全存储设备上包含有所述目标文件时,根据所述打开或创建目标文件的操作指令,对所述第三安全存储设备上的所述目标文件完成打开或创建的操作;Theprocessing unit 404 is configured to, when the third safe storage device contains the target file, complete the processing of the target file on the third safe storage device according to the operation instruction for opening or creating the target file. Open or create operations;

其中,所述处理单元404包括:Wherein, theprocessing unit 404 includes:

重定向单元4041,用于将所述目标文件的路径重定向至所述的第三安全存储设备;Aredirection unit 4041, configured to redirect the path of the target file to the third secure storage device;

其中,所述重定向单元4041还可用于,与用户所提供的安全存储设备进行交互,接收用户所提供的存储设备位置信息;Wherein, the redirectingunit 4041 is also configured to interact with the secure storage device provided by the user, and receive the location information of the storage device provided by the user;

由此,所述的重定向单元4041还作为与外部系统的接口,本发明实施例所提供的对文件虚拟化处理的装置可嵌入到现有的操作系统下的文件安全产品中,例如Windows操作系统下的文件安全产品中,通过所述的重定向单元与这些产品进行通讯来自有的将文件路径重定向到第三安全存储设备上。Thus, theredirection unit 4041 also serves as an interface with external systems, and the device for virtualizing files provided by the embodiment of the present invention can be embedded in file security products under existing operating systems, such as Windows operating systems Among the file security products under the system, the redirection unit communicates with these products to redirect the file path to the third secure storage device.

执行单元4042,用于根据所述改名或删除目标文件的操作指令,在所述第三安全存储设备上进行所述指令的操作;Anexecution unit 4042, configured to perform the operation of the instruction on the third secure storage device according to the operation instruction of renaming or deleting the target file;

为了用户更方便直接的了解对文件的操作请求的处理情况,本装置实施例还可进一步包括:In order for the user to more conveniently and directly understand the processing situation of the operation request to the file, this embodiment of the device may further include:

反馈单元405,用于将对目标文件的按照操作指令的虚拟化处理结果反馈至用户。Thefeedback unit 405 is configured to feed back the virtualization processing result of the target file according to the operation instruction to the user.

由于利用本实施例所提供的装置来实现文件虚拟化处理的方法,作用于操作系统之上,应用层之下,对文件的虚拟化操作将不会影响应用程序正常使用,用户的使用习惯能够保留;并且,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。Since the method for implementing file virtualization processing using the device provided in this embodiment acts on the operating system and under the application layer, the virtualization operation on files will not affect the normal use of applications, and the user's usage habits can be and, after satisfying the corresponding conditions, the operation of the file is carried out virtually on the third safe storage device, and only an empty file is kept on the storage device directly operated by the user according to the original operating habits, and the substantial content of the file The storage location is on the third safe storage device, so as to achieve the purpose of safe storage.

本发明实施例所提供的对文件虚拟化处理的技术方案,通过获取对目标文件的操作指令及该目标文件的文件名信息;将对于该目标文件的所述指令的操作定向到第三安全存储设备上进行,利用了第三安全存储设备设置的灵活性,在不依赖于复杂的网络存储环境的情况下,实现对文件安全存储的目的。In the technical solution for file virtualization processing provided by the embodiment of the present invention, by obtaining the operation instruction for the target file and the file name information of the target file; directing the operation of the instruction for the target file to the third safe storage It is carried out on the device, utilizing the flexibility of setting the third safe storage device, and realizes the purpose of safe storage of files without relying on the complicated network storage environment.

本领域普通技术人员可以理解实现上述实施例方法中的全部或部分步骤是可以通过程序来指令相关的硬件来完成,所述程序可以存储于一计算机可读取存储介质中,所述存储介质为ROM/RAM、磁碟、光盘等。Those of ordinary skill in the art can understand that all or part of the steps in the method of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, and the storage medium is ROM/RAM, disk, CD, etc.

以上所述,仅为本发明的具体实施方式,但本发明的保护范围并不局限于此,任何熟悉本技术领域的技术人员在本发明揭露的技术范围内,可轻易想到变化或替换,都应涵盖在本发明的保护范围之内。因此,本发明的保护范围应所述以权利要求的保护范围为准。The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (14)

Translated fromChinese
1、一种对文件虚拟化处理的方法,其特征在于,包括:1. A method for virtualizing files, comprising:获取对目标文件的操作指令及该目标文件的文件名信息;Obtaining an operation instruction on the target file and the file name information of the target file;根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;According to the obtained file name information, it is judged whether the preset third secure storage device contains the target file;当判断得到所述第三安全存储设备上包含所述目标文件时,则根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作。When it is determined that the third secure storage device contains the target file, according to the operation instruction, the operation of the instruction is completed on the target file on the third secure storage device.2、根据权利要求1所述的对文件虚拟化处理的方法,其特征在于:2. The method for virtualizing files according to claim 1, characterized in that:所述操作指令包括:修改所述目标文件的文件名或删除所述目标文件的操作指令;The operation instruction includes: an operation instruction of modifying the file name of the target file or deleting the target file;当判断得到所述第三安全存储设备上不包含所述目标文件时,结束此次虚拟化操作流程。When it is determined that the third secure storage device does not contain the target file, the virtualization operation process ends.3、根据权利要求1所述的对文件虚拟化处理的方法,其特征在于:3. The method for virtualizing files according to claim 1, characterized in that:所述操作指令包括:打开或创建所述目标文件的操作指令;The operation instruction includes: an operation instruction for opening or creating the target file;当判断得到预置的第三安全存储设备上不包含所述目标文件时,将所述目标文件复制于所述的第三安全存储设备上;When it is judged that the preset third safe storage device does not contain the target file, copying the target file to the third safe storage device;根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作。According to the operation instruction, the operation of the instruction is completed on the target file on the third secure storage device.4、根据权利要求1至3任一权利要求所述的对文件虚拟化处理方法,其特征在于,所述根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作包括:4. The file virtualization processing method according to any one of claims 1 to 3, characterized in that, according to the operation instruction, the target file on the third secure storage device is The operations of the above instructions include:将所述目标文件的路径重定向至所述的第三安全存储设备;Redirecting the path of the target file to the third secure storage device;对所述第三安全存储设备上的所述目标文件进行所述指令的操作。Perform the operation of the instruction on the target file on the third secure storage device.5、根据权利要求4所述的对文件虚拟化处理方法,其特征在于,该方法还包括:5. The method for processing file virtualization according to claim 4, further comprising:根据所述文件名信息,判断所述目标文件是否需要进行虚拟化处理,如果是,则继续进行虚拟化处理流程;如果否,结束虚拟化处理流程。According to the file name information, it is judged whether the target file needs to be virtualized, and if so, continue the virtualization process; if not, end the virtualization process.6、根据权利要求5所述的对文件虚拟化处理方法,其特征在于,根据所述文件名信息,判断所述目标文件是否需要进行虚拟化处理包括:6. The file virtualization processing method according to claim 5, wherein, according to the file name information, judging whether the target file needs to be virtualized includes:将所获取的文件名信息与预置的不需要虚拟化处理的文件的文件名信息匹配表进行匹配,如果匹配到该文件信息配置表中的相应信息时,结束虚拟化处理流程;如果没有匹配到该文件信息配置表中的相应信息时,继续进行虚拟化处理流程。Match the obtained file name information with the preset file name information matching table for files that do not require virtualization processing. If the corresponding information in the file information configuration table is matched, the virtualization processing process is ended; if there is no match When the corresponding information in the file information configuration table is found, the virtualization processing flow is continued.7、根据权利要求6所述的对文件虚拟化处理方法,其特征在于:7. The file virtualization processing method according to claim 6, characterized in that:所述预置的文件名信息匹配表由用户预先配置。The preset filename information matching table is preconfigured by the user.8、根据权利要求1至3任一所述的对文件虚拟化处理方法,其特征在于该方法还包括:8. The file virtualization processing method according to any one of claims 1 to 3, characterized in that the method further comprises:将对目标文件的按照操作指令的虚拟化处理结果反馈至用户。Feedback the result of the virtualization processing of the target file according to the operation instruction to the user.9、一种对文件虚拟化处理的装置,其特征在于,包括:9. A device for virtualizing files, comprising:信息获取单元,用于获取对目标文件的操作指令及所述目标文件的文件名信息;an information acquisition unit, configured to acquire an operation instruction for the target file and file name information of the target file;第一判断单元,用于根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;The first judging unit is configured to judge whether the preset third secure storage device contains the target file according to the acquired file name information;处理单元,用于当所述第三安全存储设备上包含有所述目标文件时,根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作。A processing unit configured to, when the third secure storage device contains the target file, complete the operation of the instruction on the target file on the third secure storage device according to the operation instruction.10、根据权利要求9所述的对文件虚拟化处理的装置,其特征在于:10. The device for virtualizing files according to claim 9, characterized in that:所述操作指令包括:打开或创建所述目标文件的操作指令;The operation instruction includes: an operation instruction for opening or creating the target file;该装置还包括:The unit also includes:复制单元,用于当第一判断单元判断得到预置的第三安全存储设备上不包含所述目标文件时,将所述目标文件复制于第三安全存储设备上。The copying unit is configured to copy the target file to the third safe storage device when the first judging unit judges that the preset third safe storage device does not contain the target file.11、根据权利要求9或10所述的对文件虚拟化处理的装置,其特征在于,所述处理单元包括:11. The device for virtualizing files according to claim 9 or 10, wherein the processing unit comprises:重定向单元,用于将所述目标文件的路径重定向至所述的第三安全存储设备;a redirection unit, configured to redirect the path of the target file to the third secure storage device;执行单元,用于根据所述操作指令,在所述第三安全存储设备上进行所述指令的操作。An execution unit, configured to perform the operation of the instruction on the third secure storage device according to the operation instruction.12、根据权利要求11所述的对文件虚拟化处理的装置,其特征在于,所述重定向单元还用于:12. The device for virtualizing files according to claim 11, wherein the redirection unit is further configured to:与用户所提供的安全存储设备进行交互,接收用户所提供的存储设备位置信息。Interact with the secure storage device provided by the user, and receive the location information of the storage device provided by the user.13、根据权利要求11所述的对文件虚拟化处理的装置,其特征在于,该装置还包括:13. The device for virtualizing files according to claim 11, further comprising:第二判断单元,用于利用该文件名信息判断该文件是否需要进行虚拟化处理;如果是,则继续执行文件虚拟化处理程序;如果否,结束虚拟化操作流程。The second judging unit is used to judge whether the file needs to be virtualized by using the file name information; if yes, continue to execute the file virtualization processing program; if not, end the virtualization operation process.14、根据权利要求13所述的对文件虚拟化处理的装置,其特征在于,所述第二判断单元包括:14. The device for virtualizing files according to claim 13, wherein the second judging unit comprises:存储单元,用于存储不需要虚拟化处理文件的文件名信息配置表;The storage unit is used to store the file name information configuration table of the file that does not require virtualization processing;匹配单元,用于将获取的文件名信息与存储单元所存储的文件信息配置表中的参数进行匹配,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;当所述目标文件的文件名信息匹配不到该文件信息配置表中的相应信息时,则继续进行虚拟化处理流程。A matching unit, configured to match the obtained file name information with the parameters in the file information configuration table stored in the storage unit, when the file name information of the target file matches the corresponding information in the file information configuration table, then End the virtualization operation flow; when the file name information of the target file does not match the corresponding information in the file information configuration table, continue the virtualization processing flow.
CN 2008101416642008-07-172008-07-17File virtualization processing method and deviceActiveCN101334823B (en)

Priority Applications (2)

Application NumberPriority DateFiling DateTitle
CN 200810141664CN101334823B (en)2008-07-172008-07-17File virtualization processing method and device
PCT/CN2009/070516WO2010006514A1 (en)2008-07-172009-02-24Method and device of virtualizing file

Applications Claiming Priority (1)

Application NumberPriority DateFiling DateTitle
CN 200810141664CN101334823B (en)2008-07-172008-07-17File virtualization processing method and device

Publications (2)

Publication NumberPublication Date
CN101334823Atrue CN101334823A (en)2008-12-31
CN101334823B CN101334823B (en)2010-07-07

Family

ID=40197416

Family Applications (1)

Application NumberTitlePriority DateFiling Date
CN 200810141664ActiveCN101334823B (en)2008-07-172008-07-17File virtualization processing method and device

Country Status (2)

CountryLink
CN (1)CN101334823B (en)
WO (1)WO2010006514A1 (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
WO2010006514A1 (en)*2008-07-172010-01-21成都市华为赛门铁克科技有限公司Method and device of virtualizing file
CN105975567A (en)*2016-05-032016-09-28青岛海信移动通信技术股份有限公司Method and device for processing internal file of application program
CN106293963A (en)*2016-08-012017-01-04北京金山安全管理系统技术有限公司A kind of application layer and method and system of driving layer communication in windows system
CN106534380A (en)*2016-12-302017-03-22郑州云海信息技术有限公司Virtual platform file management method and system
CN110134339A (en)*2019-05-222019-08-16北京明朝万达科技股份有限公司A kind of data guard method and system based on file virtual disk

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN1204501C (en)*2001-09-182005-06-01华为技术有限公司FLASH storage file management method
WO2006012418A2 (en)*2004-07-212006-02-02Beach Unlimited LlcDistributed storage architecture based on block map caching and vfs stackable file system modules
CN101334823B (en)*2008-07-172010-07-07成都市华为赛门铁克科技有限公司File virtualization processing method and device

Cited By (5)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
WO2010006514A1 (en)*2008-07-172010-01-21成都市华为赛门铁克科技有限公司Method and device of virtualizing file
CN105975567A (en)*2016-05-032016-09-28青岛海信移动通信技术股份有限公司Method and device for processing internal file of application program
CN106293963A (en)*2016-08-012017-01-04北京金山安全管理系统技术有限公司A kind of application layer and method and system of driving layer communication in windows system
CN106534380A (en)*2016-12-302017-03-22郑州云海信息技术有限公司Virtual platform file management method and system
CN110134339A (en)*2019-05-222019-08-16北京明朝万达科技股份有限公司A kind of data guard method and system based on file virtual disk

Also Published As

Publication numberPublication date
WO2010006514A1 (en)2010-01-21
CN101334823B (en)2010-07-07

Similar Documents

PublicationPublication DateTitle
EP3278539B1 (en)Shared workspaces with selective content item synchronization
CN103034453B (en) Method and device for managing persistent data of pre-installed applications in virtual machine instances
JP2008537255A (en) System and method for peer-to-peer synchronization of files
WO2019119850A1 (en)Application software deployment method and device, and virtual machine
CN104281484B (en)A kind of virtual machine migration method and device
CN103761168B (en)It is a kind of that the method for carrying backup virtual machine is wrapping with based on nfs
CN105359088A (en) Method for Optimizing Provisioning Time Using Dynamically Generated Virtual Disk Contents
JP2013109630A (en)Document management device, control method thereof and program
TWI516978B (en)Management of security modes applied to execution of applications in a computer device
CN111988292B (en) A method, device and system for accessing the Internet by an intranet terminal
CN103037008A (en)Authority management method and system of synchronous network disk
WO2019149184A1 (en)Virtual machine disk space reclamation method and system
CN101334823A (en) A method and device for virtualizing files
CN111684437B (en)Staggered update key-value storage system ordered by time sequence
CN113420306B (en)Resource sharing method, device, computing equipment and computer readable storage medium
CN115480910A (en)Multi-cluster resource management method and device and electronic equipment
US9075635B1 (en)Systems and methods for merging virtual layers
CN113721841A (en)Data access method, device, equipment and storage medium
CN105550018A (en)Method for creating virtual machine in cloud computing system
JP6733300B2 (en) Information processing apparatus and information processing system
CN115297107A (en)Data transmission control method and related equipment
JP4858879B2 (en) File processing apparatus file processing method and file processing program
KR101028150B1 (en) File management apparatus, method, and program of the client terminal recording medium
US20240146828A1 (en)Reverse forwarded connections
CN118035965B (en) Method and device for collaborative use of graphics processor computing power by multiple users

Legal Events

DateCodeTitleDescription
C06Publication
PB01Publication
C10Entry into substantive examination
SE01Entry into force of request for substantive examination
ASSSuccession or assignment of patent right

Owner name:CHENGDU CITY HUAWEI SAIMENTEKE SCIENCE CO., LTD.

Free format text:FORMER OWNER: HUAWEI TECHNOLOGY CO., LTD.

Effective date:20090424

C41Transfer of patent application or patent right or utility model
TA01Transfer of patent application right

Effective date of registration:20090424

Address after:Qingshui River District, Chengdu high tech Zone, Sichuan Province, China: 611731

Applicant after:CHENGDU HUAWEI SYMANTEC TECHNOLOGIES Co.,Ltd.

Address before:Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen Province, China: 518129

Applicant before:HUAWEI TECHNOLOGIES Co.,Ltd.

C14Grant of patent or utility model
GR01Patent grant
C56Change in the name or address of the patentee

Owner name:HUAWEI DIGITAL TECHNOLOGY (CHENGDU) CO., LTD.

Free format text:FORMER NAME: CHENGDU HUAWEI SYMANTEC TECHNOLOGIES CO., LTD.

CP01Change in the name or title of a patent holder

Address after:611731 Chengdu high tech Zone, Sichuan, West Park, Qingshui River

Patentee after:HUAWEI DIGITAL TECHNOLOGIES (CHENG DU) Co.,Ltd.

Address before:611731 Chengdu high tech Zone, Sichuan, West Park, Qingshui River

Patentee before:CHENGDU HUAWEI SYMANTEC TECHNOLOGIES Co.,Ltd.

TR01Transfer of patent right
TR01Transfer of patent right

Effective date of registration:20211228

Address after:518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen

Patentee after:HUAWEI TECHNOLOGIES Co.,Ltd.

Address before:611731 Qingshui River District, Chengdu hi tech Zone, Sichuan, China

Patentee before:HUAWEI DIGITAL TECHNOLOGIES (CHENG DU) Co.,Ltd.

Effective date of registration:20211228

Address after:450046 Floor 9, building 1, Zhengshang Boya Plaza, Longzihu wisdom Island, Zhengdong New Area, Zhengzhou City, Henan Province

Patentee after:xFusion Digital Technologies Co., Ltd.

Address before:518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen

Patentee before:HUAWEI TECHNOLOGIES Co.,Ltd.


[8]ページ先頭

©2009-2025 Movatter.jp