Movatterモバイル変換


[0]ホーム

URL:


CN116821071A - File tracing method and device, nonvolatile storage medium and electronic equipment - Google Patents

File tracing method and device, nonvolatile storage medium and electronic equipment
Download PDF

Info

Publication number
CN116821071A
CN116821071ACN202311099386.1ACN202311099386ACN116821071ACN 116821071 ACN116821071 ACN 116821071ACN 202311099386 ACN202311099386 ACN 202311099386ACN 116821071 ACN116821071 ACN 116821071A
Authority
CN
China
Prior art keywords
window
title
current active
file
target
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202311099386.1A
Other languages
Chinese (zh)
Other versions
CN116821071B (en
Inventor
李继国
杜高
王峰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Eetrust Technology Co ltd
Original Assignee
Eetrust Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Eetrust Technology Co ltdfiledCriticalEetrust Technology Co ltd
Priority to CN202311099386.1ApriorityCriticalpatent/CN116821071B/en
Publication of CN116821071ApublicationCriticalpatent/CN116821071A/en
Application grantedgrantedCritical
Publication of CN116821071BpublicationCriticalpatent/CN116821071B/en
Activelegal-statusCriticalCurrent
Anticipated expirationlegal-statusCritical

Links

Classifications

Landscapes

Abstract

The application discloses a method and a device for tracing a file, a nonvolatile storage medium and electronic equipment. Wherein the method comprises the following steps: detecting a current active document window title and a current active window title; setting target mark information in a target process to which a logic source document window belongs under the condition that the current active window title is detected as a target title; determining whether the logical source document window title is the same as the current active document window title under the condition that the current active window title is detected not to be the target title and under the condition that target mark information exists in the target process; and under the condition that the title of the logic source document window is different from the title of the current active window, determining the traceability relationship between the source file corresponding to the logic source document window and the target file corresponding to the current active document window. The method solves the technical problem that the position of the source file cannot be accurately determined due to tracing the stored file by using a hook technology and a plug-in technology.

Description

File tracing method and device, nonvolatile storage medium and electronic equipment
Technical Field
The application relates to the field of data security, in particular to a method and a device for tracing a file, a nonvolatile storage medium and electronic equipment.
Background
In a data security system, when processing related operations performed on a file by a user, capturing a source file corresponding to a stored file, and performing related encryption and security measures such as screen watermarking on the stored file, wherein a hook technology and a plug-in technology are generally adopted, but the following problems exist in the processing process of the technologies: 1. when the hook technology is used, the problem that a certain type of stored file cannot accurately locate a corresponding source file exists, for example, in the case of opening a plurality of files, the problem that the stability of running related application programs or operating systems is reduced and the problem that the use is forbidden in a system of a specific environment can be caused when the opened read-only file is stored as an operation, the txt text file is stored as an operation and the like; 2. when the plug-in technology is used, the functional coverage is incomplete, part of text processing software does not support plug-ins, or only newer version software supports the related plug-in technology.
In view of the above problems, no effective solution has been proposed at present.
Disclosure of Invention
The embodiment of the application provides a method and a device for tracing a file, a nonvolatile storage medium and electronic equipment, which at least solve the technical problem that the position of a source file cannot be accurately determined due to tracing the stored file by using a hook technology and a plug-in technology.
According to an aspect of the embodiment of the present application, there is provided a tracing method for a file, including: detecting a current active document window title and a current active window title, and archiving the current active document window title as a logical source document window title, wherein the current active window is a child window of the current active document window; setting target mark information in a target process to which a logic source document window belongs under the condition that the current active window title is detected as a target title; determining whether the logical source document window title is the same as the current active document window title under the condition that the current active window title is detected not to be the target title and under the condition that target mark information exists in the target process; and under the condition that the title of the logic source document window is different from the title of the current active window, determining the traceability relationship of the source file corresponding to the logic source document window and the target file corresponding to the current active document window according to the file handle table in the target process.
Optionally, detecting the current active document window title and the current active window title includes: acquiring a first handle corresponding to a current active document window through a first preset function in a preset application program interface; acquiring the content of the current active document window title through the first handle; determining a first character set corresponding to the current active document window title according to the content of the current active document window title; detecting whether a first character set at a first moment is the same as a first character set at a second moment within a preset duration, wherein the first moment is the current moment, and the second moment is the previous moment which is a preset time interval with the first moment; acquiring a second handle corresponding to the current active window through a second preset function in a preset application program interface; acquiring the content of the current active window title through the second handle; determining a second character set corresponding to the current active window title according to the content of the current active window title; and detecting whether the second character set at the third moment is the same as the second character set at the fourth moment within the preset duration, wherein the third moment is the current moment, and the fourth moment is the previous moment which is a preset time interval with the first moment.
Optionally, in the case that the title of the logical source document window is the same as the title of the current active window, the source file corresponding to the logical source document window and the target file corresponding to the current active document window are the same files.
Optionally, in the case that the logical source document window title is not the same as the current active window title, the target mark information in the target process is removed.
Optionally, the target title is a title with target information, where the target information includes at least: information is stored.
Optionally, the file handle table includes: the method comprises the steps of associating a logical source document window title with a current active document window title, first path information of a source file corresponding to the logical source document window, and second path information of a target file corresponding to the current active document window.
Optionally, under the condition that the title of the logic source document window is different from the title of the current active window, determining, according to the file handle table in the target process, a tracing relationship between the source file corresponding to the logic source document window and the target file corresponding to the current active document window includes: determining the position of a source file corresponding to a logic source file window according to the first path information; and determining the storage position of the target file corresponding to the current active document window according to the second path information.
According to still another aspect of the embodiment of the present application, there is further provided a tracing apparatus for a file, including: the detection module is used for detecting the current active document window title and the current active window title, and archiving the current active document window title as a logic source document window title, wherein the current active window is a child window of the current active document window; the setting module is used for setting target mark information in a target process to which the logic source document window belongs under the condition that the current active window title is detected as a target title; the first determining module is used for determining whether the title of the logic source document window is the same as the title of the current active document window or not under the condition that the current active window is detected not to be the target title and the condition that target mark information exists in the target process; and the second determining module is used for determining the tracing relation of the source file corresponding to the logic source file window and the target file corresponding to the current active file window according to the file handle table in the target process under the condition that the title of the logic source file window is different from the title of the current active window.
According to still another aspect of the embodiment of the present application, there is further provided a nonvolatile storage medium, where the storage medium includes a stored program, and when the program runs, the device where the storage medium is controlled to execute the above method for tracing a file.
According to still another aspect of the embodiment of the present application, there is also provided an electronic device including: the system comprises a memory and a processor, wherein the processor is used for running a program stored in the memory, and the trace method of the file is executed when the program runs.
In the embodiment of the application, the current active document window title and the current active window title are detected, and the current active document window title is used as a logical source document window title to be archived, wherein the current active window is a child window of the current active document window; setting target mark information in a target process to which a logic source document window belongs under the condition that the current active window title is detected as a target title; determining whether the logical source document window title is the same as the current active document window title under the condition that the current active window title is detected not to be the target title and under the condition that target mark information exists in the target process; under the condition that the title of the logic source file window is different from the title of the current active window, the tracing relation of the source file corresponding to the logic source file window and the target file corresponding to the current active file window is determined according to the file handle table in the target process, and under the condition that the title of the current active window is detected to be not the title of the target, and under the condition that target mark information exists in the target process, whether the title of the logic source file window is the same as the title of the current active file window is determined, under the condition that the title of the logic source file window is different from the title of the current active window, the tracing relation of the source file corresponding to the logic source file window and the target file corresponding to the current active file window is determined according to the file handle table in the target process, so that the aim of determining the tracing relation between the additionally stored file and the corresponding source file is fulfilled, the technical effect of accurately determining the position of the source file is achieved, and the technical problem that the position of the additionally stored file cannot be accurately determined due to tracing the additionally stored file by using a hook technology and an inserting technology is solved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this specification, illustrate embodiments of the application and together with the description serve to explain the application and do not constitute a limitation on the application. In the drawings:
FIG. 1 is a flow chart of a method for tracing a file according to an embodiment of the application;
FIG. 2 is a flow chart of another method of tracing a document according to an embodiment of the application;
fig. 3 is a block diagram of a tracing device for a document according to an embodiment of the present application;
fig. 4 is a block diagram of a hardware structure of a computer terminal (or electronic device) of a document tracing method according to an embodiment of the present application.
Detailed Description
In order that those skilled in the art will better understand the present application, a technical solution in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present application, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present application without making any inventive effort, shall fall within the scope of the present application.
It should be noted that the terms "first," "second," and the like in the description and the claims of the present application and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the application described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
According to an embodiment of the present application, there is provided a method embodiment of a method for tracing a file, it should be noted that the steps illustrated in the flowchart of the drawings may be performed in a computer system such as a set of computer executable instructions, and that although a logical order is illustrated in the flowchart, in some cases the steps illustrated or described may be performed in an order different from that illustrated herein.
Fig. 1 is a flowchart of a method for tracing a file according to an embodiment of the present application, as shown in fig. 1, the method includes the following steps:
step S102, detecting a current active document window title and a current active window title, and archiving the current active document window title as a logical source document window title, wherein the current active window is a child window of the current active document window.
Optionally, the current active document window is, for example, a word window in an active state at the current moment, and the current active window is a child window of the word window, for example, a "new" window, "an" option "window," a "save as" window, and the like in the word window.
And establishing and starting the monitoring front active document window and the current active window, and extracting the current active document window title and the current active window title in real time.
Step S104, setting target mark information in a target process to which the logic source document window belongs in the case that the current active window title is detected as the target title.
According to other alternative embodiments of the present application, in the case where the current active window is detected as being entitled "save as" or "save file", the target flag information is set in the target process to which the logical source document window belongs.
The tag information of the "save as" operation is the file name and file format used when saving the file. Such information may assist the user in identifying and locating saved files, as well as determining the type and storage location of the files. In performing the "save as" operation, the user may select the name of the file and the saved directory, and may select the format of the file, such as a text file (.txt), a Word document (.docx), a PDF file (.pdf), and the like. The tag information may also include attributes of the creation date, modification date, and file size of the file.
Step S106, in the case that the current active window title is detected not to be the target title, and in the case that the target mark information exists in the target process, determining whether the logical source document window title is the same as the current active document window title.
If it is detected that the current active window title is not "save as" or "save file", it is determined whether the target mark information set in step S104 exists in the target process, and if the target mark information exists in the target process, it is determined whether the logical source document window title is the same as the current active document window title.
Step S108, under the condition that the title of the logic source document window is different from the title of the current active window, determining the traceability relationship between the source file corresponding to the logic source document window and the target file corresponding to the current active document window according to the file handle table in the target process.
The file handle table is a data structure used in the operating system to manage open files, typically an array or linked list, with each element representing an open file. Each file handle contains metadata information of the file, such as file name, file type, file size, etc., and a read-write pointer of the file for recording the current read-write location of the file. The purpose of the file handle table is to track and manage all open files so that the operating system can quickly locate and access these files when needed. When an application opens a file, the operating system assigns a file handle and adds the file handle to the file handle table. When the application program reads and writes the file, the operating system can find the corresponding file according to the information in the file handle table and perform corresponding read and write operations. The file handle table is also used for realizing sharing and concurrent access of files. Multiple application programs can open the same file at the same time, each application program can have a file handle, and the file handles can be managed through a file handle table, so that concurrent access of the files is ensured not to conflict.
According to the steps, when the first window title is detected to be the target title, target mark information corresponding to the target operation is set in the target process to which the first window belongs, when the first window title is detected not to be the target title, and when the target mark information exists in the target process, whether the second window title corresponding to the first window title is the same as the second window title is determined, when the first window title is different from the second window title, the traceability relationship between the first file and the second file is determined according to the first window title and the second window title in the file handle table, and the aim of determining the traceability relationship between the file which is stored and the corresponding source file is achieved, so that the technical effect of accurately determining the position of the source file is achieved.
According to some optional embodiments of the application, detecting the current active document window title and the current active window title comprises: acquiring a first handle corresponding to a current active document window through a first preset function in a preset application program interface; acquiring the content of the current active document window title through the first handle; determining a first character set corresponding to the current active document window title according to the content of the current active document window title; detecting whether a first character set at a first moment is the same as a first character set at a second moment within a preset duration, wherein the first moment is the current moment, and the second moment is the previous moment which is a preset time interval with the first moment; acquiring a second handle corresponding to the current active window through a second preset function in a preset application program interface; acquiring the content of the current active window title through the second handle; determining a second character set corresponding to the current active window title according to the content of the current active window title; and detecting whether the second character set at the third moment is the same as the second character set at the fourth moment within the preset duration, wherein the third moment is the current moment, and the fourth moment is the previous moment which is a preset time interval with the first moment.
Alternatively, to obtain the current active document window title and the current active window title, the following steps may be used:
1. importing required libraries and modules:
```python
import win32gui
```
2. defining a callback function to enumerate all windows and find the title of the active window:
```python
def get_active_window_title():
active_window = win32gui.GetForegroundWindow()
window_title = win32gui.GetWindowText(active_window)
return window_title
```
3. invoking the function to obtain the title of the active window:
```python
title = get_active_window_title()
print(title)
```
according to other alternative embodiments of the present application, in the case where the logical source document window header is the same as the current active window header, the source file corresponding to the logical source document window is the same file as the destination file corresponding to the current active document window.
In some alternative embodiments of the present application, the target mark information in the target process is removed in the event that the logical source document window title is not the same as the current active window title.
Alternatively, one process may correspond to a plurality of already opened files. Each process has a file descriptor table in which information of the files that have been opened is stored. The file descriptor is a non-negative integer that uniquely identifies a file that has been opened. Through the file descriptor, the process can perform read-write operation on the opened file. Common file descriptors include standard input, standard output, and standard error output, with file descriptors being 0, 1, and 2, respectively. In addition, the process can also open other files through system call and obtain corresponding file descriptors. Thus, one process may correspond to multiple files that have been opened at the same time.
As some alternative embodiments of the present application, the target title is a title with target information, where the target information includes at least: information is stored.
Alternatively, the targets are entitled "save as", "save file", and the like.
In some alternative embodiments of the application, the file handle table includes: the method comprises the steps of associating a logical source document window title with a current active document window title, first path information of a source file corresponding to the logical source document window, and second path information of a target file corresponding to the current active document window.
As other optional embodiments of the present application, in the case that the title of the logical source document window is different from the title of the current active window, determining, according to the file handle table in the target process, a tracing relationship between the source file corresponding to the logical source document window and the target file corresponding to the current active document window, including the following steps: determining the position of a source file corresponding to a logic source file window according to the first path information; and determining the storage position of the target file corresponding to the current active document window according to the second path information.
Fig. 2 is a flowchart of another method for tracing a file according to an embodiment of the present application, as shown in fig. 2, the method includes the following steps:
step S202, detecting a first window title corresponding to a first window in an active state and a second window title corresponding to a second window, and archiving the first window title, wherein the second window is a child window of the first window.
In step S204, when the second window title is detected as the target title, setting target mark information corresponding to a target operation in a target process to which the first window belongs, where the target operation is an operation for making the first window title be the target title, and the target process includes: a file handle table, the file handle table comprising: the method comprises the steps of associating first file information with a first window title, wherein the first file is a file corresponding to the first window.
Step S206, when it is detected that the second window title is not the target title and when there is target mark information in the target process, determining whether the first window title is the same as a third window title corresponding to a third window, where the third window is a window in the target process that is archived before the first window, and the file handle table in the target process further includes: and the third file is a file corresponding to the third window.
Step S208, under the condition that the first window title is different from the third window title, determining the traceability relationship of the first file and the third file according to the first window title and the third window title in the file handle table.
Optionally, the first file information at least includes first path information corresponding to the first file; the third file information at least comprises second path information corresponding to the third file.
Optionally, under the condition that the first window title is different from the third window title, determining a traceability relationship between the first file and the third file according to the first window title and the third window title in the file handle table, including the following steps: determining a position stored in a first file corresponding to a first window title according to the first path information; and determining the storage position of a third file corresponding to the third window title according to the first path information.
Fig. 3 is a block diagram of a tracing device for a document according to an embodiment of the present application, as shown in fig. 3, the device includes:
the detecting module 30 is configured to detect a current active document window title and a current active window title, and archive the current active document window title as a logical source document window title, where the current active window is a child window of the current active document window.
Optionally, the current active document window is, for example, a word window in an active state at the current moment, and the current active window is a child window of the word window, for example, a "new" window, "an" option "window," a "save as" window, and the like in the word window.
And establishing and starting the monitoring front active document window and the current active window, and extracting the current active document window title and the current active window title in real time.
The setting module 32 is configured to set target mark information in a target process to which the logical source document window belongs, in a case where it is detected that the current active window title is the target title.
According to other alternative embodiments of the present application, in the case where the current active window is detected as being entitled "save as" or "save file", the target flag information is set in the target process to which the logical source document window belongs.
The tag information of the "save as" operation is the file name and file format used when saving the file. Such information may assist the user in identifying and locating saved files, as well as determining the type and storage location of the files. In performing the "save as" operation, the user may select the name of the file and the saved directory, and may select the format of the file, such as a text file (.txt), a Word document (.docx), a PDF file (.pdf), and the like. The tag information may also include attributes of the creation date, modification date, and file size of the file.
The first determining module 34 is configured to determine, in a case where it is detected that the current active window title is not the target title, and in a case where there is target mark information in the target process, whether the logical source document window title is the same as the current active document window title.
If it is detected that the current active window title is not "save as" or "save file", it is determined whether the target mark information set in step S104 exists in the target process, and if the target mark information exists in the target process, it is determined whether the logical source document window title is the same as the current active document window title.
The second determining module 36 is configured to determine, according to the file handle table in the target process, a traceability relationship between a source file corresponding to the logical source file window and a target file corresponding to the current active file window when the logical source file window title is different from the current active window title.
The file handle table is a data structure used in the operating system to manage open files, typically an array or linked list, with each element representing an open file. Each file handle contains metadata information of the file, such as file name, file type, file size, etc., and a read-write pointer of the file for recording the current read-write location of the file. The purpose of the file handle table is to track and manage all open files so that the operating system can quickly locate and access these files when needed. When an application opens a file, the operating system assigns a file handle and adds the file handle to the file handle table. When the application program reads and writes the file, the operating system can find the corresponding file according to the information in the file handle table and perform corresponding read and write operations. The file handle table is also used for realizing sharing and concurrent access of files. Multiple application programs can open the same file at the same time, each application program can have a file handle, and the file handles can be managed through a file handle table, so that concurrent access of the files is ensured not to conflict.
According to the device, the object mark information corresponding to the object operation is set in the object process to which the first window belongs when the first window title is detected as the object title, whether the second window title corresponding to the first window title is identical to the second window title is determined when the first window title is not the object title and the object mark information exists in the object process, and the tracing relation between the first file and the second file is determined according to the first window title and the second window title in the file handle table when the first window title is not identical to the second window title, so that the aim of determining the tracing relation between the file which is additionally stored and the corresponding source file is fulfilled, and the technical effect of accurately determining the position of the source file is achieved.
Note that each module in fig. 3 may be a program module (for example, a set of program instructions for implementing a specific function), or may be a hardware module, and for the latter, it may be represented by the following form, but is not limited thereto: the expression forms of the modules are all a processor, or the functions of the modules are realized by one processor.
It should be noted that, the preferred implementation manner of the embodiment shown in fig. 3 may refer to the related description of the embodiment shown in fig. 1, which is not repeated herein.
Fig. 4 shows a block diagram of a hardware structure of a computer terminal (or mobile device) for implementing a tracing method of a file. As shown in fig. 4, the computer terminal 40 (or mobile device 40) may include one or more (shown as 402a, 402b, … …,402 n) processors 402 (the processors 402 may include, but are not limited to, a microprocessor MCU or a processing device such as a programmable logic device FPGA), a memory 404 for storing data, and a transmission module 406 for communication functions. In addition, the method may further include: a display, an input/output interface (I/O interface), a Universal Serial BUS (USB) port (which may be included as one of the ports of the BUS), a network interface, a power supply, and/or a camera. It will be appreciated by those of ordinary skill in the art that the configuration shown in fig. 4 is merely illustrative and is not intended to limit the configuration of the electronic device described above. For example, the computer terminal 40 may also include more or fewer components than shown in FIG. 4, or have a different configuration than shown in FIG. 4.
It should be noted that the one or more processors 402 and/or other data processing circuits described above may be referred to herein generally as "data processing circuits. The data processing circuit may be embodied in whole or in part in software, hardware, firmware, or any other combination. Furthermore, the data processing circuitry may be a single stand-alone processing module, or incorporated, in whole or in part, into any of the other elements in the computer terminal 40 (or mobile device). As referred to in embodiments of the application, the data processing circuit acts as a processor control (e.g., selection of the path of the variable resistor termination connected to the interface).
The memory 404 may be used to store software programs and modules of application software, such as program instructions/data storage devices corresponding to the method for tracing a file in the embodiment of the present application, and the processor 402 executes the software programs and modules stored in the memory 404, thereby executing various functional applications and data processing, that is, implementing the method for tracing a file. Memory 404 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, memory 404 may further include memory located remotely from processor 402, which may be connected to computer terminal 40 via a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.
The transmission module 406 is used to receive or transmit data via a network. The specific examples of the network described above may include a wireless network provided by a communication provider of the computer terminal 40. In one example, the transmission module 406 includes a network adapter (Network Interface Controller, NIC) that can connect to other network devices through a base station to communicate with the internet. In one example, the transmission module 406 may be a Radio Frequency (RF) module for communicating with the internet wirelessly.
The display may be, for example, a touch screen type Liquid Crystal Display (LCD) that may enable a user to interact with a user interface of the computer terminal 40 (or mobile device).
It should be noted here that, in some alternative embodiments, the computer device (or the electronic device) shown in fig. 4 may include hardware elements (including circuits), software elements (including computer code stored on a computer readable medium), or a combination of both hardware elements and software elements. It should be noted that fig. 4 is only one example of a specific example, and is intended to illustrate the types of components that may be present in the computer device (or electronic device) described above.
It should be noted that, the electronic device shown in fig. 4 is used for executing the tracing method of the file shown in fig. 1, so the explanation related to the executing method of the command is also applicable to the electronic device, and will not be repeated here.
The embodiment of the application also provides a nonvolatile storage medium, which comprises a stored program, wherein the program controls equipment where the storage medium is located to execute the method for tracing the file when running.
The nonvolatile storage medium executes a program of the following functions: detecting a current active document window title and a current active window title, and archiving the current active document window title as a logical source document window title, wherein the current active window is a child window of the current active document window; setting target mark information in a target process to which a logic source document window belongs under the condition that the current active window title is detected as a target title; determining whether the logical source document window title is the same as the current active document window title under the condition that the current active window title is detected not to be the target title and under the condition that target mark information exists in the target process; and under the condition that the title of the logic source document window is different from the title of the current active window, determining the traceability relationship of the source file corresponding to the logic source document window and the target file corresponding to the current active document window according to the file handle table in the target process.
The embodiment of the application also provides electronic equipment, which comprises: the system comprises a memory and a processor, wherein the processor is used for running a program stored in the memory, and the trace method of the file is executed when the program runs.
The processor is configured to execute a program that performs the following functions: detecting a current active document window title and a current active window title, and archiving the current active document window title as a logical source document window title, wherein the current active window is a child window of the current active document window; setting target mark information in a target process to which a logic source document window belongs under the condition that the current active window title is detected as a target title; determining whether the logical source document window title is the same as the current active document window title under the condition that the current active window title is detected not to be the target title and under the condition that target mark information exists in the target process; and under the condition that the title of the logic source document window is different from the title of the current active window, determining the traceability relationship of the source file corresponding to the logic source document window and the target file corresponding to the current active document window according to the file handle table in the target process.
The foregoing embodiment numbers of the present application are merely for the purpose of description, and do not represent the advantages or disadvantages of the embodiments.
In the foregoing embodiments of the present application, the descriptions of the embodiments are emphasized, and for a portion of this disclosure that is not described in detail in this embodiment, reference is made to the related descriptions of other embodiments.
In the several embodiments provided in the present application, it should be understood that the disclosed technology may be implemented in other manners. The above-described embodiments of the apparatus are merely exemplary, and the division of the units, for example, may be a logic function division, and may be implemented in another manner, for example, a plurality of units or components may be combined or may be integrated into another system, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be through some interfaces, units or modules, or may be in electrical or other forms.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
In addition, each functional unit in the embodiments of the present application may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional units.
The integrated units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application may be embodied in essence or a part contributing to the related art or all or part of the technical solution, in the form of a software product stored in a storage medium, including several instructions for causing a computer device (which may be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method according to the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a removable hard disk, a magnetic disk, or an optical disk, or other various media capable of storing program codes.
The foregoing is merely a preferred embodiment of the present application and it should be noted that modifications and adaptations to those skilled in the art may be made without departing from the principles of the present application, which are intended to be comprehended within the scope of the present application.

Claims (10)

CN202311099386.1A2023-08-292023-08-29File tracing method and device, nonvolatile storage medium and electronic equipmentActiveCN116821071B (en)

Priority Applications (1)

Application NumberPriority DateFiling DateTitle
CN202311099386.1ACN116821071B (en)2023-08-292023-08-29File tracing method and device, nonvolatile storage medium and electronic equipment

Applications Claiming Priority (1)

Application NumberPriority DateFiling DateTitle
CN202311099386.1ACN116821071B (en)2023-08-292023-08-29File tracing method and device, nonvolatile storage medium and electronic equipment

Publications (2)

Publication NumberPublication Date
CN116821071Atrue CN116821071A (en)2023-09-29
CN116821071B CN116821071B (en)2023-12-22

Family

ID=88120652

Family Applications (1)

Application NumberTitlePriority DateFiling Date
CN202311099386.1AActiveCN116821071B (en)2023-08-292023-08-29File tracing method and device, nonvolatile storage medium and electronic equipment

Country Status (1)

CountryLink
CN (1)CN116821071B (en)

Citations (6)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
US20080005693A1 (en)*2006-06-302008-01-03Microsoft CorporationWindow Grouping
CN101840471A (en)*2010-03-122010-09-22成都市华为赛门铁克科技有限公司Document right control method and device
CN109002483A (en)*2018-06-222018-12-14平安科技(深圳)有限公司Document management method, device, computer equipment and storage medium
CN115329050A (en)*2022-10-122022-11-11北京金堤科技有限公司Information tracing method and device, storage medium and electronic equipment
CN115408590A (en)*2022-10-312022-11-29北京亿赛通科技发展有限责任公司Document tracking and tracing method, device and system
CN115543152A (en)*2022-11-162022-12-30北京时代亿信科技股份有限公司Method and device for determining file state

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
US20080005693A1 (en)*2006-06-302008-01-03Microsoft CorporationWindow Grouping
CN101840471A (en)*2010-03-122010-09-22成都市华为赛门铁克科技有限公司Document right control method and device
CN109002483A (en)*2018-06-222018-12-14平安科技(深圳)有限公司Document management method, device, computer equipment and storage medium
CN115329050A (en)*2022-10-122022-11-11北京金堤科技有限公司Information tracing method and device, storage medium and electronic equipment
CN115408590A (en)*2022-10-312022-11-29北京亿赛通科技发展有限责任公司Document tracking and tracing method, device and system
CN115543152A (en)*2022-11-162022-12-30北京时代亿信科技股份有限公司Method and device for determining file state

Also Published As

Publication numberPublication date
CN116821071B (en)2023-12-22

Similar Documents

PublicationPublication DateTitle
CN110162525A (en)Read/write conflict solution, device and storage medium based on B+ tree
CN107133165B (en)Browser compatibility detection method and device
CN109614203B (en) An Android application cloud data forensic analysis system and method based on application data simulation
CN111342992B (en) Method and system for processing equipment information change records
CN110351715A (en)AT command processing method, terminal adapter and computer readable storage medium
CN114691602A (en)Data import method and device, computer equipment and storage medium
CN110187872A (en) A BIOS development method, system, electronic equipment, and storage medium
CN116821071B (en)File tracing method and device, nonvolatile storage medium and electronic equipment
CN112883250A (en)Method and device for generating embedded point identification and embedded point method
CN113595762B (en)Network card configuration storage method and device
CN117650937A (en)Task permission verification method and device, nonvolatile storage medium and electronic equipment
CN111352917A (en)Information input method and device, electronic equipment and storage medium
CN114356674B (en)Card opening method, card opening device and computer readable storage medium
US20220342849A1 (en)System and method for managing a plurality of data storage devices
CN113378525A (en)PDF document paragraph presentation method, device, storage medium and equipment
CN115033298A (en) A method and system for multi-scenario adaptation of interface resources of industrial Internet equipment
CN103428397A (en)Image information processing method and device
CN108595206B (en)Finance and tax software management method and device
CN114416560A (en)Program crash analysis aggregation method and system
CN108415814B (en)Method for automatically recording field change, application server and computer readable storage medium
CN114297367A (en)Document information pushing method, system, server, terminal device and storage medium
CN112422400A (en)Content recommendation method and device and computer equipment
US20190012103A1 (en)Virtual removable memory component
CN111813474A (en)Multi-language display method and device and electronic equipment
CN112068851B (en) Method and device for dynamically configuring and running system ROM files of electronic equipment

Legal Events

DateCodeTitleDescription
PB01Publication
PB01Publication
SE01Entry into force of request for substantive examination
SE01Entry into force of request for substantive examination
GR01Patent grant
GR01Patent grant

[8]ページ先頭

©2009-2025 Movatter.jp