Secure data processing method and system

• US 20150341351A1
• Filed: 09/17/2013
• Published: 11/26/2015
• Est. Priority Date: 11/26/2012
• Status: Active Grant

• Current Assignee: Beijing Qihu Technology Co. Ltd. (360 Security Technology, Inc.)
• Original Assignee: Beijing Qihu Technology Co. Ltd. (360 Security Technology, Inc.)
• Inventors: Zhang, Jiazhu
• Granted Patent: US 10,084,777 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The invention discloses a secure data processing method and system, wherein the secure data processing method comprises the following steps of: a security control server receiving a data upload request from a terminal, and obtaining a file feature, an identification code of the terminal and a directory path of a file with the file feature in the terminal comprised in the data upload request; the security control server judging whether the terminal is a trustable machine and/or judging whether the directory path is a credit directory according to the identification code and/or the directory path, and if the terminal is a trustable machine and/or the directory path is a credit directory, adding the uploaded file feature into a security database, or otherwise, not adding it into the security database; the trustable machine is a terminal in which data is considered as secure data. The invention further provides a secure data processing system implementing the foregoing method. The secure data processing method and system can improve the update efficiency of the secure data.

Claims

1. A secure data processing method, comprising the following steps of:

a security control server receiving a data upload request from a terminal, and obtaining a file feature, an identification code of the terminal and a directory path of a file with the file feature in the terminal comprised in the data upload request;

the security control server judging whether the terminal is a trustable machine and/or judging whether the directory path is a credit directory according to the identification code and/or the directory path, and if the terminal is a trustable machine and/or the directory path is a credit directory, adding the uploaded file feature into a security database, or otherwise, not adding it into the security database;

wherein the trustable machine is a terminal in which data is considered as secure data.

2. The secure data processing method as claimed in claim 1, wherein the security control server judging whether the terminal is a trustable machine according to the identification code comprises:

comparing the identification code with an identification code of a trustable machine pre-stored in the security control server, and if identical, determining that the terminal is a trustable machine, or otherwise, determining that the terminal is not a trustable machine.

3. The secure data processing method as claimed in claim 1, wherein the judging whether the directory path is a credit directory comprises:

comparing the directory path with a credit directory pre-stored in the security control server, and if identical, determining that the directory path is a credit directory, or otherwise, determining that it is not a credit directory.

4. The secure data processing method as claimed in claim 1, wherein the method further comprises:

identifying the security of file feature information uploaded by other terminals employing file features added into the security database.

5. The secure data processing method as claimed in claim 1, wherein the secure data processing method is implemented in an enterprise intranet.

6. The secure data processing method as claimed in claim 5, wherein the communication of the terminal with the security control server is accomplished through the get or post request of the http protocol.

7. A secure data processing system disposed in a security control server, comprising at least one processor to execute a plurality of modules comprising:

an information obtaining module configured to receive a data upload request from a terminal, and obtain a file feature, an identification code of the terminal and a directory path of a file with the file feature in the terminal comprised in the data upload request;

a security information identification module configured to judge whether the terminal is a trustable machine and/or judge whether the directory path is a credit directory according to the identification code and/or the directory path, and if the terminal is a trustable machine and/or the directory path is a credit directory, add the uploaded file feature into a security database, or otherwise, not add it into the security database, wherein the trustable machine is a terminal in which data is considered as secure data.

8. The secure data processing system as claimed in claim 7, wherein the security information identification module comprises:

a trustable machine judging sub-module configured to compare the identification code with an identification code of a trustable machine pre-stored in the security control server, and if identical, determine that the terminal is a trustable machine, or otherwise, determine that the terminal is not a trustable machine.

9. The secure data processing system as claimed in claim 7, wherein the security information identification module comprises:

a credit directory judging sub-module configured to compare the directory path with a credit directory pre-stored in the security control server, and if identical, determine that the directory path is a credit directory, or otherwise, determine that it is not a credit directory.

10. The secure data processing system as claimed in claim 7, wherein the system further comprises:

an identification comparison module configured to identify the security of file feature information uploaded by other terminals employing file features added into the security database.

11. The secure data processing system as claimed in claim 7, wherein the system further comprises:

a communication module configured to accomplish communication of the terminal with the security control server through the get or post request of the http protocol.

12. (canceled)

13. A non-transitory computer readable medium having instructions stored thereon that, when executed by at least one processor, cause the at least one processor to perform a secure data processing method, which comprises the steps of:

a security control server receiving a data upload request from a terminal, and obtaining a file feature, an identification code of the terminal and a directory path of a file with the file feature in the terminal comprised in the data upload request;

the security control server judging whether the terminal is a trustable machine and/or judging whether the directory path is a credit directory according to the identification code and/or the directory path, and if the terminal is a trustable machine and/or the directory path is a credit directory, adding the uploaded file feature into a security database, or otherwise, not adding it into the security database;

wherein the trustable machine is a terminal in which data is considered as secure data.