


技术领域technical field
本发明涉及通信技术领域,尤其涉及一种对文件虚拟化处理方法及装置。The invention relates to the technical field of communications, in particular to a method and device for virtualizing files.
背景技术Background technique
随着计算机网络技术的快速发展,企业正常运营及个人工作生活越来越依赖网络技术,而一旦网络信息安全受到攻击,企业运营或个人工作生活将受到严重威胁。因此,网络技术飞速发展的今天,信息安全问题成为大家关注焦点,而文件信息防泄密就成为了信息安全的重中之重。现有技术中,保障文件信息安全的方法通常是利用文件服务器,文件服务器是运行在网络环境下的提供文件存储服务的设备,它给用户创建一个可以安全存储文档的服务器目录,将用户对指定文档的操作限制在文件服务器指定的目录下进行。文件服务器可以管理局域网共享目录或是广域网中的几个子网中定义好的文件存储目录,达到文件集中存储和共享的目的,通常用户的文件信息通过网络转储到指定的目录下,用户一旦脱离网络环境,就无法找到文件,从而达到文件安全存储的功能。With the rapid development of computer network technology, the normal operation of enterprises and personal work and life are increasingly dependent on network technology. Once network information security is attacked, business operations or personal work and life will be seriously threatened. Therefore, with the rapid development of network technology today, information security issues have become the focus of everyone's attention, and file information leakage prevention has become the top priority of information security. In the prior art, the method to ensure the security of file information is usually to use a file server. A file server is a device that provides file storage services running in a network environment. Document operations are limited to the directory specified by the file server. The file server can manage the shared directory of the LAN or the file storage directory defined in several subnets in the WAN to achieve the purpose of centralized storage and sharing of files. Usually, the user's file information is dumped to the specified directory through the network. Once the user leaves the In the network environment, files cannot be found, so as to achieve the function of safe storage of files.
上述技术中,所述的文件服务器通常是由专门的软件比如window2000Server或是专业的文件管理厂商提供文件服务器软件,因此,文件服务器需要完整的配置手册去完成配置工作,并且,文件服务器作为一种大型的文件转储应用,需要目录服务器支持,不利于小面积部署。In the above-mentioned technologies, the file server is usually provided by special software such as window2000Server or a professional file management manufacturer. Therefore, the file server needs a complete configuration manual to complete the configuration work, and the file server is used as a Large-scale file dump applications require directory server support, which is not conducive to small-area deployment.
发明内容Contents of the invention
本发明实施例提供一种对文件虚拟化处理方法及装置,为文件提供安全存储环境,不需要专门的网络支持,配置灵活。Embodiments of the present invention provide a file virtualization processing method and device, which provide a secure storage environment for files, do not require special network support, and are flexible in configuration.
本发明实施例所提供的对文件虚拟化处理方法及装置的技术方案如下:The technical solution of the file virtualization processing method and device provided by the embodiment of the present invention is as follows:
本发明实施例提供一种对文件虚拟化处理的方法,其特征在于,包括:An embodiment of the present invention provides a method for virtualizing a file, which is characterized in that it includes:
获取对目标文件的操作指令及该目标文件的文件名信息;Obtaining an operation instruction on the target file and the file name information of the target file;
根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;According to the obtained file name information, it is judged whether the preset third secure storage device contains the target file;
当判断得到所述第三安全存储设备上包含所述目标文件时,则根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作。When it is determined that the third secure storage device contains the target file, according to the operation instruction, the operation of the instruction is completed on the target file on the third secure storage device.
本发明实施例所提供的一种对文件虚拟化处理的装置,包括:A device for virtualizing files provided by an embodiment of the present invention includes:
信息获取单元,用于获取对目标文件的操作指令及所述目标文件的文件名信息;an information acquisition unit, configured to acquire an operation instruction for the target file and file name information of the target file;
第一判断单元,用于根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;The first judging unit is configured to judge whether the preset third secure storage device contains the target file according to the acquired file name information;
处理单元,用于当所述第三安全存储设备上包含有所述目标文件时,根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作。A processing unit configured to, when the third secure storage device contains the target file, complete the operation of the instruction on the target file on the third secure storage device according to the operation instruction.
本发明实施例所提供的对文件虚拟化处理的技术方案,通过获取对目标文件的操作指令及该目标文件的文件名信息,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,而文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。本发明实施例利用了第三安全存储设备设置的灵活性,在不依赖于复杂的网络存储环境的情况下,实现对文件安全存储。In the technical solution for file virtualization provided by the embodiment of the present invention, by obtaining the operation instruction for the target file and the file name information of the target file, after corresponding conditions are met, the operation on the file is virtualized on the third secure storage device. However, on the storage device directly operated by the user according to the original operating habits, only an empty file is kept, and the storage location of the substantial content of the file is on the third safe storage device, so as to achieve the purpose of safe storage . The embodiment of the present invention utilizes the flexibility of setting the third safe storage device, and realizes safe storage of files without relying on a complex network storage environment.
附图说明Description of drawings
为了更清楚地说明本发明实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作一简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动性的前提下,还可以根据这些附图获得其他的附图。In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description These are only some embodiments of the present invention, and those skilled in the art can also obtain other drawings based on these drawings without any creative effort.
图1为本发明实施例一所提供的方法流程图;FIG. 1 is a flow chart of the method provided by Embodiment 1 of the present invention;
图2为本发明实施例二所提供的方法流程图;FIG. 2 is a flow chart of the method provided by Embodiment 2 of the present invention;
图3为本发明实施例三所提供的装置结构示意图;Fig. 3 is a schematic structural diagram of the device provided by Embodiment 3 of the present invention;
图4为本发明实施例四所提供的装置结构示意图。FIG. 4 is a schematic structural diagram of a device provided by Embodiment 4 of the present invention.
具体实施方式Detailed ways
为使本发明的目的、技术方案和优点更加清楚,下面将结合附图对本发明实施方式作进一步地详细描述。应当理解,此处所描述的具体实施方式仅仅用以解释本发明,并不用于限定本发明。In order to make the object, technical solution and advantages of the present invention clearer, the implementation manner of the present invention will be further described in detail below in conjunction with the accompanying drawings. It should be understood that the specific embodiments described here are only used to explain the present invention, and are not intended to limit the present invention.
本发明实施例中所涉及的对虚拟文件处理方法,将作用于操作系统之上,应用程序之下,部分接管当前进程对文件的操作,产生虚拟和可控的自动化操作。通常,用户在对一个文件进行操作时,相应的处理程序会去操作系统资源,达到文件打开、创建、删除及改名等目的。The virtual file processing method involved in the embodiment of the present invention will act on the operating system and under the application program to partially take over the operation of the current process on the file to generate a virtual and controllable automatic operation. Usually, when a user operates a file, the corresponding processing program will go to the operating system resources to achieve the purpose of opening, creating, deleting and renaming the file.
实施例一:Embodiment one:
本实施例提供一种对文件虚拟化处理方法,以改名或删除文件为例。参见图1,本发明实施例,具体包括:This embodiment provides a method for virtualizing a file, taking renaming or deleting a file as an example. Referring to Fig. 1, the embodiment of the present invention specifically includes:
步骤101:获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息;Step 101: Obtain an operation instruction for renaming or deleting a target file and file name information of the target file;
其中,获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息可以使用一种替换系统函数的钩子技术在系统服务描述符表上截获对目标文件改名或删除的操作指令及所述目标文件的文件名信息;Wherein, obtaining the operation instruction to rename or delete the target file and the file name information of the target file can use a hook technology to replace the system function on the system service descriptor table to intercept the operation instruction to rename or delete the target file and the information of the target file. Describe the file name information of the target file;
获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息也可以通过直接使用文件过滤驱动来过滤发向文件系统设备的输入/输出请求包,从中获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息;Obtaining the operation instructions for renaming or deleting the target file and the file name information of the target file can also filter the input/output request packets sent to the file system device by directly using the file filter driver, and obtain the renaming or deleting information for the target file therefrom. Operation instructions and file name information of the target file;
获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息的方法还有其他实施方式,在此不一一列举;There are other implementations for obtaining the operation instruction for renaming or deleting the target file and the file name information of the target file, which will not be listed here;
在实际操作中,有一些文件不需要进行虚拟化操作,例如临时文件、内存的映像文件等,这些文件虚拟化处理的意义不大。因此上述方法中还可进一步包括:In actual operation, some files do not need to be virtualized, such as temporary files, memory image files, etc., and the virtualization of these files is of little significance. Therefore also can further comprise in above-mentioned method:
步骤102:根据所述文件名信息,判断该文件是否需要进行虚拟化处理;如果是,则继续执行文件虚拟化处理程序中的步骤103;如果否,则结束虚拟化操作流程;Step 102: According to the file name information, determine whether the file needs to be virtualized; if yes, proceed to step 103 in the file virtualization processing procedure; if not, end the virtualization operation process;
其中,所述判断目标文件是否需要进行虚拟化处理的步骤,可以在整个虚拟化流程中获取到文件名信息后执行,但本实施例仅仅作为一个实施方式,不构成对所述判断目标文件是否需要进行虚拟化处理的步骤在整个方法流程中的执行顺序的限制;Wherein, the step of judging whether the target file needs to be virtualized can be executed after the file name information is obtained in the whole virtualization process, but this embodiment is only used as an implementation mode, and does not constitute a judgment on whether the target file needs to be virtualized or not. Restrictions on the execution order of the steps that need to be virtualized in the entire method flow;
其中,判断所述目标文件是否需要进行虚拟化操作,可以通过设置一个文件名信息表,将不需要虚拟化操作的文件信息配置于表中,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;Wherein, to determine whether the target file needs to be virtualized, a file name information table can be set to configure the file information that does not require virtualization in the table. When the file name information of the target file matches the file When the corresponding information in the information configuration table is completed, the virtualization operation process ends;
其中,对不需要进行虚拟化操作的文件的文件名信息可以提供给用户自己配置,用户可根据需求灵活配置;也可以由系统默认配置该信息表;也可以通过前述两种方法结合来配置该信息表;Among them, the file name information of the files that do not need to be virtualized can be provided to the user to configure, and the user can configure flexibly according to the needs; the information table can also be configured by the system by default; or the above two methods can be combined to configure the Information Sheet;
其中,所述的文件名信息可以包括:文件类型、文件名、文件所在存储装置中的分区信息等;Wherein, the file name information may include: file type, file name, partition information in the storage device where the file is located, etc.;
步骤103:根据所述文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;Step 103: According to the file name information, it is judged whether the target file is included in the preset third secure storage device;
其中,所述的第三安全存储设备可以是系统默认的固定安全存储设备;可以是用户预先指定的安全存储设备,将所指定的安全存储设备作为文件的存储环境,这个存储环境可以是目录,也可以是移动介质等等,原则上只要是用户能进行读写访问的位置即可;Wherein, the third secure storage device may be a default fixed secure storage device of the system; it may be a secure storage device designated by the user in advance, and the designated secure storage device may be used as a file storage environment, and this storage environment may be a directory, It can also be a removable medium, etc. In principle, as long as it is a location where the user can read and write;
其中,本发明实施例的方法可以嵌入到现有的操作系统下的文件安全产品中,通过与这些安全产品进行通讯,所述第三安全存储设备的位置则可由用户来设定;Wherein, the method of the embodiment of the present invention can be embedded in the existing file security products under the operating system, and the position of the third secure storage device can be set by the user through communication with these security products;
步骤104:当判断得到所述第三安全存储设备上不包含所述目标文件时,则结束此次虚拟化操作流程;Step 104: When it is determined that the third secure storage device does not contain the target file, then end the virtualization operation process;
其中,用户将需要安全存储的文件存入第三安全存储设备上后,对文件的改名或删除操作需要在第三安全存储设备上进行,当第三安全存储设备上没有存储需进行改名或删除操作的文件时,则可结束此次虚拟化处理流程,按现有技术进行操作,在此不再赘述;Among them, after the user stores the files that need to be safely stored in the third safe storage device, the operation of renaming or deleting the files needs to be performed on the third safe storage device. When operating files, you can end the virtualization process and operate according to the existing technology, so I won’t go into details here;
步骤105:当判断得到所述第三安全存储设备上包含所述目标文件时,则根据所述改名或删除的操作指令,对所述第三安全存储设备上的所述目标文件完成相应的改名或删除操作;Step 105: When it is determined that the third secure storage device contains the target file, complete the corresponding renaming of the target file on the third secure storage device according to the operation instruction of renaming or deleting or delete operations;
具体实现中,以删除目标文件为例,通常当一个文件被请求删除时,在文件系统设备中会发生一个功能号为MJ-CREATE的IRP事件,它的文件对象参数中包含有“DELETE(删除)”标志,如果通过文件过滤驱动的方法截获对文件进行删除的操作指令,对功能号为MJ-CREATE的IRP进行过滤,当发现了删除标志时,并在第三安全存储设备上发现有需要删除的该文件时,就在该第三安全存储设备上完成文件删除工作;In the specific implementation, take deleting the target file as an example, usually when a file is requested to be deleted, an IRP event whose function number is MJ-CREATE will occur in the file system device, and its file object parameter contains "DELETE (delete )" sign, if the operation instruction to delete the file is intercepted by the method of file filtering driver, the IRP whose function number is MJ-CREATE is filtered, and when the delete sign is found, it is found that there is a need on the third safe storage device When the file is deleted, the file deletion work is completed on the third safe storage device;
具体实现中,对所述第三安全存储设备上的所述目标文件完成相应的操作包括:In a specific implementation, completing corresponding operations on the target file on the third secure storage device includes:
将所述目标文件的路径重定向至所述的第三安全存储设备,在所述的第三安全存储设备上进行所述指令的操作。The path of the target file is redirected to the third safe storage device, and the operation of the instruction is performed on the third safe storage device.
为了用户更方便直接的了解对文件的操作请求的处理情况,本方法实施例还可进一步包括:In order for the user to more conveniently and directly understand the processing situation of the file operation request, this embodiment of the method may further include:
步骤106:将对目标文件的按照操作指令的虚拟化处理结果反馈至用户。Step 106: Feedback the virtualization processing result of the target file according to the operation instruction to the user.
由于本实施例的方法作用于操作系统之上,应用层之下,对文件的虚拟化操作将不会影响应用程序正常使用,用户的使用习惯能够保留;并且,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,而文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。Since the method of this embodiment acts on the operating system and under the application layer, the virtualization operation of the file will not affect the normal use of the application program, and the user's usage habits can be preserved; The operation is carried out virtually on the third safe storage device, and only an empty file is kept on the storage device directly operated by the user according to the original operating habits, and the storage location of the substantial content of the file is in the third safe storage device for safe storage purposes.
实施例二:Embodiment two:
文件的读写操作都是基于系统资源文件句柄来完成的,而这些句柄的获得是通过系统创建和打开文件句柄来完成的,文件读写本身并没有对文件名进行处理,只是按照句柄资源去读取或写入文件内容,所以关于文件读写的虚拟化操作只需要关注文件句柄的打开或创建,可以简单的理解为,文件的具体读写操作都是用户去完成的,系统只需要把需要读写的文件创建或打开给用户编辑;The read and write operations of files are all done based on system resource file handles, and these handles are obtained by creating and opening file handles by the system. File reading and writing itself does not process file names, but only handles resources. Read or write file content, so the virtualization operation of file read and write only needs to pay attention to the opening or creation of the file handle. It can be simply understood that the specific read and write operations of the file are completed by the user, and the system only needs to Create or open files that need to be read and written for users to edit;
本实施例二提供一种对文件虚拟化处理方法,以打开或创建文件为例,参见图2,该方法包括:Embodiment 2 provides a method for virtualizing a file. Taking opening or creating a file as an example, as shown in FIG. 2 , the method includes:
步骤201:获取打开或创建目标文件的操作指令及所述目标文件的文件名信息;Step 201: Obtain an operation instruction for opening or creating a target file and file name information of the target file;
其中,获取打开或创建目标文件的操作指令及所述目标文件的文件名信息可以使用一种替换系统函数的钩子技术在系统服务描述符表上截获打开或创建目标文件的操作指令并获取所述目标文件的文件名信息;Wherein, obtaining the operation instruction of opening or creating the target file and the file name information of the target file can use a hook technology replacing the system function to intercept the operation instruction of opening or creating the target file on the system service descriptor table and obtain the described The file name information of the target file;
获取打开或创建目标文件的操作指令及所述目标文件的文件名信息也可以通过直接使用文件过滤驱动来过滤发向文件系统设备的输入/输出请求包,从中获取打开或创建目标文件操作指令并获取所述目标文件的文件名信息;Obtaining the operation instruction of opening or creating the target file and the file name information of the target file can also filter the input/output request packet sent to the file system device by directly using the file filter driver, thereby obtaining the operation instruction of opening or creating the target file and Obtaining the file name information of the target file;
获取打开或创建目标文件的操作指令及所述目标文件的文件名信息的方法还有其他实施方式,在此不一一列举;There are other implementations for the method of obtaining the operation instruction for opening or creating the target file and the file name information of the target file, which are not listed here;
在实际操作中,有一些文件不需要进行虚拟化操作,例如临时文件、内存的映像文件等,这些文件虚拟化处理的意义不大。因此上述方法中还可进一步包括:In actual operation, some files do not need to be virtualized, such as temporary files, memory image files, etc., and the virtualization of these files is of little significance. Therefore also can further comprise in above-mentioned method:
步骤202:根据所获取的文件名信息,判断该文件是否需要进行虚拟化处理;如果是,则继续执行文件虚拟化处理程序中的步骤203;如果否,则结束虚拟化操作流程;Step 202: According to the acquired file name information, determine whether the file needs to be virtualized; if yes, continue to execute
其中,对所述判断目标文件是否需要进行虚拟化处理这个步骤的执行顺序,同实施例一中关于该步骤执行顺序的描述,在此不再赘述;Wherein, the execution sequence of the step of judging whether the target file needs to be virtualized is the same as the description of the execution sequence of this step in Embodiment 1, and will not be repeated here;
其中,判断所述目标文件是否需要进行虚拟化操作,可以通过设置一个文件名信息表,将不需要虚拟化操作的文件信息配置于表中,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;Wherein, to determine whether the target file needs to be virtualized, a file name information table can be set to configure the file information that does not require virtualization in the table. When the file name information of the target file matches the file When the corresponding information in the information configuration table is completed, the virtualization operation process ends;
其中,该不需要进行虚拟化操作的文件的文件名信息可以提供给用户自己配置,用户可根据需求灵活配置;也可以由系统默认配置该信息表;也可以前述两种方法结合来配置该信息表;Among them, the file name information of the file that does not need to be virtualized can be provided to the user for configuration, and the user can configure it flexibly according to the needs; the information table can also be configured by the system by default; or the information can be configured by combining the above two methods surface;
其中,所述的文件名信息可以包括:文件类型、文件名、文件所在存储装置中的分区信息等;Wherein, the file name information may include: file type, file name, partition information in the storage device where the file is located, etc.;
步骤203:根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件,如果是,则执行步骤205;Step 203: According to the acquired file name information, judge whether the preset third secure storage device contains the target file, if yes, execute
其中,所述的第三安全存储设备可以是系统默认的固定安全存储设备;可以是用户预先指定的安全存储设备,将所指定的安全存储设备作为文件的存储环境,这个存储环境可以是目录,也可以是移动介质等等,原则上只要是用户能进行读写访问的位置即可;Wherein, the third secure storage device may be a default fixed secure storage device of the system; it may be a secure storage device designated by the user in advance, and the designated secure storage device may be used as a file storage environment, and this storage environment may be a directory, It can also be a removable medium, etc. In principle, as long as it is a location where the user can read and write;
其中,本发明实施例的方法可以嵌入到现有的操作系统下的文件安全产品中,通过与这些安全产品进行通讯,所述第三安全存储设备的位置则可由用户来设定;Wherein, the method of the embodiment of the present invention can be embedded in the existing file security products under the operating system, and the position of the third secure storage device can be set by the user through communication with these security products;
步骤204:当判断得到预置的第三安全存储设备上不包含所述目标文件时,将所述目标文件复制与第三安全存储设备上,执行步骤205;Step 204: When it is judged that the preset third safe storage device does not contain the target file, copy the target file to the third safe storage device, and execute
在文件首次使用的时候,例如用户对一篇已有内容的文件进行编辑,对已存在的文件不能转存储到第三安全存储设备上去,而通过自动复制到第三安全存储设备上;When the file is used for the first time, for example, the user edits a file with existing content, the existing file cannot be transferred to the third safe storage device, but automatically copied to the third safe storage device;
步骤205:对所述第三安全存储设备上所述目标文件完成打开或创建的操作;Step 205: Open or create the target file on the third secure storage device;
具体实现中,对根据所述打开或创建目标文件的操作指令,所述第三安全存储设备上的所述目标文件完成相应的操作包括:In the specific implementation, according to the operation instruction of opening or creating the target file, completing the corresponding operation on the target file on the third secure storage device includes:
将所述目标文件的路径重定向至所述的第三安全存储设备,根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成所述指令的操作在所述的第三安全存储设备上进行所述指令的操作。Redirecting the path of the target file to the third secure storage device, and according to the operation instruction, completing the operation of the instruction on the target file on the third secure storage device in the third secure storage device 3. Perform the operation of the instruction on the safe storage device.
为了用户更方便直接的了解对文件的操作请求的处理情况,本方法实施例还可进一步包括:In order for the user to more conveniently and directly understand the processing situation of the file operation request, this embodiment of the method may further include:
步骤206:将对目标文件的按照操作指令的虚拟化处理结果反馈至用户。Step 206: Feedback the result of the virtualization processing of the target file according to the operation instruction to the user.
由于本实施例的方法作用于操作系统之上,应用层之下,对文件的虚拟化操作将不会影响应用程序正常使用,用户的使用习惯能够保留;并且,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,而文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。Since the method of this embodiment acts on the operating system and under the application layer, the virtualization operation of the file will not affect the normal use of the application program, and the user's usage habits can be preserved; The operation is carried out virtually on the third safe storage device, and only an empty file is kept on the storage device directly operated by the user according to the original operating habits, and the storage location of the substantial content of the file is in the third safe storage device for safe storage purposes.
实施例三:Embodiment three:
参见图3,以改名或删除文件为例,本发明实施例还提供一种对文件虚拟化处理的装置,包括:Referring to Figure 3, taking renaming or deleting a file as an example, an embodiment of the present invention also provides a device for virtualizing files, including:
信息获取单元301,用于获取对目标文件改名或删除文件的操作指令及所述目标文件的文件名信息;An
其中,该信息获取单元301获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息可以使用一种替换系统函数的钩子技术在系统服务描述符表上截获对目标文件改名或删除的操作指令并获取所述目标文件的文件名信息;Wherein, the
该信息获取单元301获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息也可以通过直接使用文件过滤驱动来过滤发向文件系统设备的输入/输出请求包,从中获取对目标文件改名或操作指令并获取所述目标文件的文件名信息;The
该信息获取单元301获取对目标文件改名或删除的操作指令及所述目标文件的文件名信息的方法还有其他实施方式,在此不一一列举;There are other implementations for the
在实际操作中,有一些文件不需要进行虚拟化操作,例如临时文件、内存的映像文件等,这些文件虚拟化处理的意义不大。因此,上述对文件虚拟化处理的装置中还可包括:In actual operation, some files do not need to be virtualized, such as temporary files, memory image files, etc., and the virtualization of these files is of little significance. Therefore, the above-mentioned device for processing file virtualization may also include:
第二判断单元305,用于利用所获取的文件名信息判断该文件是否需要进行虚拟化处理;如果是,则继续执行文件虚拟化处理程序;如果否,则结束虚拟化操作流程;The
其中,所述第二判断单元305判断所述目标文件是否需要进行虚拟化操作,可以通过设置一个文件名信息表,将不需要虚拟化操作的文件名信息配置于表中,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;若没有匹配到相应信息时,则继续进行虚拟化处理流程;Wherein, the
因此,第二判断单元305可以包括:Therefore, the
存储单元3051,用于存储不需要虚拟化处理文件的文件名信息配置表;A
根据不同的匹配策略,所述的文件信息表中可以配置不需要虚拟化操作的文件名信息,也可以只配置需要虚拟化操作的文件名信息;本实施例以在所述文件名配置表中配置不需要虚拟化处理的文件名信息为例;According to different matching strategies, the file name information that does not require virtualization operation can be configured in the file information table, or only the file name information that requires virtualization operation can be configured; in this embodiment, the file name configuration table Configure file name information that does not require virtualization processing as an example;
匹配单元3052,用于将获取的文件名信息与存储单元所存储的文件信息配置表中的参数进行匹配,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;当所述目标文件的文件名信息匹配不到该文件信息配置表中的相应信息时,则继续进行虚拟化处理流程;The
当所述对文件虚拟化处理的装置包括第二判断单元305时,其结构示意图可以为所述图3所示,但本实施例中的结构顺序不构成对所述第二判断单元305在所述装置中的位置的限定;When the device for virtualizing files includes a
其中,该不需要进行虚拟化操作的文件的文件名信息可以提供给用户自己配置,用户可根据需求灵活配置;也可以由系统默认配置该信息表;也可以前述两种方法结合来配置该信息表;Among them, the file name information of the file that does not need to be virtualized can be provided to the user for configuration, and the user can configure it flexibly according to the needs; the information table can also be configured by the system by default; or the information can be configured by combining the above two methods surface;
其中,所述的文件名信息可以包括:文件类型、文件名、文件所在存储装置中的分区信息等;Wherein, the file name information may include: file type, file name, partition information in the storage device where the file is located, etc.;
第一判断单元302,用于根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;The
其中,所述的第三安全存储设备可以是系统默认的固定安全存储设备;也可以是用户预先指定的安全存储设备,将所指定的安全存储设备作为文件的存储环境,这个存储环境可以是目录,也可以是移动介质等等,原则上只要是用户能进行读写访问的位置即可;Wherein, the third secure storage device may be a default fixed secure storage device of the system; it may also be a secure storage device designated by the user in advance, and the designated secure storage device may be used as a file storage environment, and this storage environment may be a directory , it can also be a removable medium, etc. In principle, as long as it is a location where the user can read and write;
处理单元303,用于当所述第三安全存储设备上包含有所述目标文件时,则根据所述操作指令,对所述第三安全存储设备上的所述目标文件完成改名或删除的工作;当第三安全存储设备上不包含所述的目标文件时,则结束虚拟化操作流程。A
其中,用户将需要安全存储的文件存入第三安全存储设备上后,对文件的改名或删除操作需要在第三安全存储设备上进行,当第三安全存储设备上没有存储需进行改名或删除操作的文件时,则可结束此次虚拟化处理流程,虚拟化处理流程结束后按现有技术进行操作,在此不再赘述;Among them, after the user stores the files that need to be safely stored in the third safe storage device, the operation of renaming or deleting the files needs to be performed on the third safe storage device. When operating files, you can end the virtualization processing flow, and operate according to the existing technology after the virtualization processing flow is completed, and will not repeat them here;
其中,所述处理单元303可以包括重定向单元3031和执行单元3032:Wherein, the
所述重定向单元3031,用于当第一判断单元302判断预置的第三安全存储设备上包含有所述目标文件时,将所述目标文件的路径重定向至所述的第三安全存储设备;The
其中,所述重定向单元3031还可用于,与外部安全存储设备进行交互,接收外部所提供的存储设备位置信息;Wherein, the
由此,所述的重定向单元3031还作为与外部系统的接口,本发明实施例所提供的对文件虚拟化处理的装置可嵌入到现有的操作系统下的文件安全产品中,例如Windows操作系统下的文件安全产品中,通过所述的重定向单元3031与这些产品进行通讯来将文件路径重定向到第三安全存储设备上。Therefore, the
所述执行单元3032,用于根据所述改名或删除目标文件的操作指令,在所述第三安全存储设备上进行所述指令的操作;The
为了用户更方便直接的了解对文件的操作请求的处理情况,本装置实施例还可进一步包括:In order for the user to more conveniently and directly understand the processing situation of the operation request to the file, this embodiment of the device may further include:
反馈单元304,用于将处理单元303对目标文件的按照操作指令的虚拟化处理结果反馈至用户。The
由于利于本实施例所提供的装置来实现文件虚拟化处理的方法,作用于操作系统之上,应用层之下,对文件的虚拟化操作将不会影响应用程序正常使用,用户的使用习惯能够保留;并且,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。Because the device provided by this embodiment is beneficial to realize the method of file virtualization processing, it acts on the operating system and under the application layer, and the virtualization operation on files will not affect the normal use of the application program, and the user's usage habits can be and, after satisfying the corresponding conditions, the operation of the file is carried out virtually on the third safe storage device, and only an empty file is kept on the storage device directly operated by the user according to the original operating habits, and the actual content of the file The storage location is on the third safe storage device, so as to achieve the purpose of safe storage.
实施例四:Embodiment four:
参见图4,以打开或创建文件为例,本发明实施例还提供一种对文件虚拟化处理的装置,包括:Referring to FIG. 4, taking opening or creating a file as an example, an embodiment of the present invention also provides a device for virtualizing a file, including:
信息获取单元401,用于获取打开或创建目标文件的操作指令及所述目标文件的文件名信息;An
其中,所述信息获取单元获取打开或创建目标文件的操作指令及所述目标文件的文件名信息可以使用一种替换系统函数的钩子技术在系统服务描述符表上截获打开或创建目标文件的操作指令并获取所述目标文件的文件名信息;Wherein, the information acquisition unit obtains the operation instruction of opening or creating the target file and the file name information of the target file, and can use a hook technology replacing the system function to intercept the operation of opening or creating the target file on the system service descriptor table command and obtain the file name information of the target file;
获取打开或创建目标文件的操作指令也可以通过直接使用文件过滤驱动来过滤发向文件系统设备的输入/输出请求包,从中获取打开或创建目标文件操作指令并获取所述目标文件的文件名信息;Obtaining the operation instruction of opening or creating the target file may also directly use the file filter driver to filter the input/output request packet sent to the file system device, thereby obtaining the operation instruction of opening or creating the target file and obtaining the file name information of the target file ;
该信息获取单元401获取打开或创建目标文件的操作指令及所述目标文件的文件名信息的方法还有其他实施方式,在此不一一列举;The method for the
在实际操作中,有一些文件不需要进行虚拟化操作,例如临时文件、内存的映像文件等,这些文件虚拟化处理的意义不大。因此,上述对文件虚拟化处理的装置中还可包括:In actual operation, some files do not need to be virtualized, such as temporary files, memory image files, etc., and the virtualization of these files is of little significance. Therefore, the above-mentioned device for processing file virtualization may also include:
第二判断单元406,用于利用该文件名信息判断该文件是否需要进行虚拟化处理;如果是,则继续执行文件虚拟化处理程序;如果否,则结束虚拟化操作流程;The
其中,所述第二判断单元406判断所述目标文件是否需要进行虚拟化操作,可以通过设置一个文件名信息表,将不需要虚拟化操作的文件名信息配置于表中,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;若没有匹配到相应信息时,则继续进行虚拟化处理流程;Wherein, the
因此,第二判断单元406可以包括:Therefore, the
存储单元4061,用于存储不需要虚拟化处理文件的文件名信息配置表;A
根据不同的匹配策略,所述的文件信息表中可以配置不需要虚拟化操作的文件名信息,也可以只配置需要虚拟化操作的文件名信息;本实施例以在所述文件名配置表中配置不需要虚拟化处理的文件名信息为例;According to different matching strategies, the file name information that does not require virtualization operation can be configured in the file information table, or only the file name information that requires virtualization operation can be configured; in this embodiment, the file name configuration table Configure file name information that does not require virtualization processing as an example;
匹配单元4062,用于将获取的文件名信息与存储单元所存储的文件信息配置表中的参数进行匹配,当所述目标文件的文件名信息匹配到该文件信息配置表中的相应信息时,则结束此次虚拟化操作流程;当所述目标文件的文件名信息匹配不到该文件信息配置表中的相应信息时,则继续进行虚拟化处理流程;The
其中,对于所述第二判断单元在所述对文件虚拟化处理装置中的位置结构,同实施例三中对第二判断单元的描述,在此不再赘述;Wherein, the position structure of the second judging unit in the file virtualization processing device is the same as the description of the second judging unit in Embodiment 3, and will not be repeated here;
其中,该不需要进行虚拟化操作的文件的文件名信息可以提供给用户自己配置,用户可根据需求灵活配置;也可以由系统默认配置该信息表;也可以前述两种方法结合来配置该信息表;Among them, the file name information of the file that does not need to be virtualized can be provided to the user for configuration, and the user can configure it flexibly according to the needs; the information table can also be configured by the system by default; or the information can be configured by combining the above two methods surface;
其中,所述的文件名信息可以包括:文件类型、文件名、文件所在存储装置中的分区信息等;Wherein, the file name information may include: file type, file name, partition information in the storage device where the file is located, etc.;
第一判断单元402,用于根据所获取的文件名信息,判断预置的第三安全存储设备上是否包含有所述目标文件;The
其中,所述的第三安全存储设备可以是系统默认的固定安全存储设备;也可以是用户预先指定的安全存储设备,将所指定的安全存储设备作为文件的存储环境,这个存储环境可以是目录,也可以是移动介质等等,原则上只要是用户能进行读写访问的位置即可;Wherein, the third secure storage device may be a default fixed secure storage device of the system; it may also be a secure storage device designated by the user in advance, and the designated secure storage device may be used as a file storage environment, and this storage environment may be a directory , it can also be a removable medium, etc. In principle, as long as it is a location where the user can read and write;
复制单元403,用于当判断结果为预置的第三安全存储设备上不包含所述目标文件时,将所述目标文件复制于第三安全存储设备上;The copying
在文件首次使用的时候,例如用户对一篇已有内容的文件进行编辑,对已存在的文件不能转存储到第三安全存储设备上去,而通过自动复制到第三安全存储设备上;When the file is used for the first time, for example, the user edits a file with existing content, the existing file cannot be transferred to the third safe storage device, but automatically copied to the third safe storage device;
处理单元404,用于当所述第三安全存储设备上包含有所述目标文件时,根据所述打开或创建目标文件的操作指令,对所述第三安全存储设备上的所述目标文件完成打开或创建的操作;The
其中,所述处理单元404包括:Wherein, the
重定向单元4041,用于将所述目标文件的路径重定向至所述的第三安全存储设备;A
其中,所述重定向单元4041还可用于,与用户所提供的安全存储设备进行交互,接收用户所提供的存储设备位置信息;Wherein, the redirecting
由此,所述的重定向单元4041还作为与外部系统的接口,本发明实施例所提供的对文件虚拟化处理的装置可嵌入到现有的操作系统下的文件安全产品中,例如Windows操作系统下的文件安全产品中,通过所述的重定向单元与这些产品进行通讯来自有的将文件路径重定向到第三安全存储设备上。Thus, the
执行单元4042,用于根据所述改名或删除目标文件的操作指令,在所述第三安全存储设备上进行所述指令的操作;An
为了用户更方便直接的了解对文件的操作请求的处理情况,本装置实施例还可进一步包括:In order for the user to more conveniently and directly understand the processing situation of the operation request to the file, this embodiment of the device may further include:
反馈单元405,用于将对目标文件的按照操作指令的虚拟化处理结果反馈至用户。The
由于利用本实施例所提供的装置来实现文件虚拟化处理的方法,作用于操作系统之上,应用层之下,对文件的虚拟化操作将不会影响应用程序正常使用,用户的使用习惯能够保留;并且,满足相应条件后,对文件的操作在第三安全存储设备上虚拟的进行,而用户按原有操作习惯所直接操作的存储设备上,只保留一份空的文档,文件实质内容的存储位置在所述的第三安全存储设备上,以达到安全存储的目的。Since the method for implementing file virtualization processing using the device provided in this embodiment acts on the operating system and under the application layer, the virtualization operation on files will not affect the normal use of applications, and the user's usage habits can be and, after satisfying the corresponding conditions, the operation of the file is carried out virtually on the third safe storage device, and only an empty file is kept on the storage device directly operated by the user according to the original operating habits, and the substantial content of the file The storage location is on the third safe storage device, so as to achieve the purpose of safe storage.
本发明实施例所提供的对文件虚拟化处理的技术方案,通过获取对目标文件的操作指令及该目标文件的文件名信息;将对于该目标文件的所述指令的操作定向到第三安全存储设备上进行,利用了第三安全存储设备设置的灵活性,在不依赖于复杂的网络存储环境的情况下,实现对文件安全存储的目的。In the technical solution for file virtualization processing provided by the embodiment of the present invention, by obtaining the operation instruction for the target file and the file name information of the target file; directing the operation of the instruction for the target file to the third safe storage It is carried out on the device, utilizing the flexibility of setting the third safe storage device, and realizes the purpose of safe storage of files without relying on the complicated network storage environment.
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分步骤是可以通过程序来指令相关的硬件来完成,所述程序可以存储于一计算机可读取存储介质中,所述存储介质为ROM/RAM、磁碟、光盘等。Those of ordinary skill in the art can understand that all or part of the steps in the method of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, and the storage medium is ROM/RAM, disk, CD, etc.
以上所述,仅为本发明的具体实施方式,但本发明的保护范围并不局限于此,任何熟悉本技术领域的技术人员在本发明揭露的技术范围内,可轻易想到变化或替换,都应涵盖在本发明的保护范围之内。因此,本发明的保护范围应所述以权利要求的保护范围为准。The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 200810141664CN101334823B (en) | 2008-07-17 | 2008-07-17 | File virtualization processing method and device |
| PCT/CN2009/070516WO2010006514A1 (en) | 2008-07-17 | 2009-02-24 | Method and device of virtualizing file |
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 200810141664CN101334823B (en) | 2008-07-17 | 2008-07-17 | File virtualization processing method and device |
| Publication Number | Publication Date |
|---|---|
| CN101334823Atrue CN101334823A (en) | 2008-12-31 |
| CN101334823B CN101334823B (en) | 2010-07-07 |
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN 200810141664ActiveCN101334823B (en) | 2008-07-17 | 2008-07-17 | File virtualization processing method and device |
| Country | Link |
|---|---|
| CN (1) | CN101334823B (en) |
| WO (1) | WO2010006514A1 (en) |
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2010006514A1 (en)* | 2008-07-17 | 2010-01-21 | 成都市华为赛门铁克科技有限公司 | Method and device of virtualizing file |
| CN105975567A (en)* | 2016-05-03 | 2016-09-28 | 青岛海信移动通信技术股份有限公司 | Method and device for processing internal file of application program |
| CN106293963A (en)* | 2016-08-01 | 2017-01-04 | 北京金山安全管理系统技术有限公司 | A kind of application layer and method and system of driving layer communication in windows system |
| CN106534380A (en)* | 2016-12-30 | 2017-03-22 | 郑州云海信息技术有限公司 | Virtual platform file management method and system |
| CN110134339A (en)* | 2019-05-22 | 2019-08-16 | 北京明朝万达科技股份有限公司 | A kind of data guard method and system based on file virtual disk |
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1204501C (en)* | 2001-09-18 | 2005-06-01 | 华为技术有限公司 | FLASH storage file management method |
| WO2006012418A2 (en)* | 2004-07-21 | 2006-02-02 | Beach Unlimited Llc | Distributed storage architecture based on block map caching and vfs stackable file system modules |
| CN101334823B (en)* | 2008-07-17 | 2010-07-07 | 成都市华为赛门铁克科技有限公司 | File virtualization processing method and device |
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2010006514A1 (en)* | 2008-07-17 | 2010-01-21 | 成都市华为赛门铁克科技有限公司 | Method and device of virtualizing file |
| CN105975567A (en)* | 2016-05-03 | 2016-09-28 | 青岛海信移动通信技术股份有限公司 | Method and device for processing internal file of application program |
| CN106293963A (en)* | 2016-08-01 | 2017-01-04 | 北京金山安全管理系统技术有限公司 | A kind of application layer and method and system of driving layer communication in windows system |
| CN106534380A (en)* | 2016-12-30 | 2017-03-22 | 郑州云海信息技术有限公司 | Virtual platform file management method and system |
| CN110134339A (en)* | 2019-05-22 | 2019-08-16 | 北京明朝万达科技股份有限公司 | A kind of data guard method and system based on file virtual disk |
| Publication number | Publication date |
|---|---|
| WO2010006514A1 (en) | 2010-01-21 |
| CN101334823B (en) | 2010-07-07 |
| Publication | Publication Date | Title |
|---|---|---|
| EP3278539B1 (en) | Shared workspaces with selective content item synchronization | |
| CN103034453B (en) | Method and device for managing persistent data of pre-installed applications in virtual machine instances | |
| JP2008537255A (en) | System and method for peer-to-peer synchronization of files | |
| WO2019119850A1 (en) | Application software deployment method and device, and virtual machine | |
| CN104281484B (en) | A kind of virtual machine migration method and device | |
| CN103761168B (en) | It is a kind of that the method for carrying backup virtual machine is wrapping with based on nfs | |
| CN105359088A (en) | Method for Optimizing Provisioning Time Using Dynamically Generated Virtual Disk Contents | |
| JP2013109630A (en) | Document management device, control method thereof and program | |
| TWI516978B (en) | Management of security modes applied to execution of applications in a computer device | |
| CN111988292B (en) | A method, device and system for accessing the Internet by an intranet terminal | |
| CN103037008A (en) | Authority management method and system of synchronous network disk | |
| WO2019149184A1 (en) | Virtual machine disk space reclamation method and system | |
| CN101334823A (en) | A method and device for virtualizing files | |
| CN111684437B (en) | Staggered update key-value storage system ordered by time sequence | |
| CN113420306B (en) | Resource sharing method, device, computing equipment and computer readable storage medium | |
| CN115480910A (en) | Multi-cluster resource management method and device and electronic equipment | |
| US9075635B1 (en) | Systems and methods for merging virtual layers | |
| CN113721841A (en) | Data access method, device, equipment and storage medium | |
| CN105550018A (en) | Method for creating virtual machine in cloud computing system | |
| JP6733300B2 (en) | Information processing apparatus and information processing system | |
| CN115297107A (en) | Data transmission control method and related equipment | |
| JP4858879B2 (en) | File processing apparatus file processing method and file processing program | |
| KR101028150B1 (en) | File management apparatus, method, and program of the client terminal recording medium | |
| US20240146828A1 (en) | Reverse forwarded connections | |
| CN118035965B (en) | Method and device for collaborative use of graphics processor computing power by multiple users |
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| ASS | Succession or assignment of patent right | Owner name:CHENGDU CITY HUAWEI SAIMENTEKE SCIENCE CO., LTD. Free format text:FORMER OWNER: HUAWEI TECHNOLOGY CO., LTD. Effective date:20090424 | |
| C41 | Transfer of patent application or patent right or utility model | ||
| TA01 | Transfer of patent application right | Effective date of registration:20090424 Address after:Qingshui River District, Chengdu high tech Zone, Sichuan Province, China: 611731 Applicant after:CHENGDU HUAWEI SYMANTEC TECHNOLOGIES Co.,Ltd. Address before:Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen Province, China: 518129 Applicant before:HUAWEI TECHNOLOGIES Co.,Ltd. | |
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| C56 | Change in the name or address of the patentee | Owner name:HUAWEI DIGITAL TECHNOLOGY (CHENGDU) CO., LTD. Free format text:FORMER NAME: CHENGDU HUAWEI SYMANTEC TECHNOLOGIES CO., LTD. | |
| CP01 | Change in the name or title of a patent holder | Address after:611731 Chengdu high tech Zone, Sichuan, West Park, Qingshui River Patentee after:HUAWEI DIGITAL TECHNOLOGIES (CHENG DU) Co.,Ltd. Address before:611731 Chengdu high tech Zone, Sichuan, West Park, Qingshui River Patentee before:CHENGDU HUAWEI SYMANTEC TECHNOLOGIES Co.,Ltd. | |
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right | Effective date of registration:20211228 Address after:518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen Patentee after:HUAWEI TECHNOLOGIES Co.,Ltd. Address before:611731 Qingshui River District, Chengdu hi tech Zone, Sichuan, China Patentee before:HUAWEI DIGITAL TECHNOLOGIES (CHENG DU) Co.,Ltd. Effective date of registration:20211228 Address after:450046 Floor 9, building 1, Zhengshang Boya Plaza, Longzihu wisdom Island, Zhengdong New Area, Zhengzhou City, Henan Province Patentee after:xFusion Digital Technologies Co., Ltd. Address before:518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen Patentee before:HUAWEI TECHNOLOGIES Co.,Ltd. |