WO2016145680A1

WO2016145680A1 - Data storage method and device

Info

Publication number: WO2016145680A1
Application number: PCT/CN2015/075602
Authority: WO
Inventors: 李家侃; 袁刚; 黄瑞; 林荣辉
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-03-13
Filing date: 2015-03-31
Publication date: 2016-09-22
Also published as: CN104657681B; CN104657681A

Abstract

Provided in present application are a data storage method and device. The method comprises: upon receiving data to be stored, determining a security level identifier of the data to be stored, and storing the data to be stored in a system corresponding to the security level identifier. It can be seen that the present application can determine different security level identifiers for different data, and store different data to systems with different security levels according to different security level identifiers, thereby providing protection of different security levels to different data.

Description

Data storage method and device

The present application claims priority to Chinese Patent Application No. 201510111847.1, entitled "A Data Storage Method and Apparatus", which is incorporated herein by reference. .

Technical field

The present application relates to the field of data storage technologies, and in particular, to a data storage method and apparatus based on multiple systems.

Background technique

Data security is an important part of information technology. One specific embodiment is that electronic devices such as PCs, PADs, or mobile phones receive various types of data. Different types of data require different levels of security protection. Therefore, how to provide different levels of protection for these data is a technical problem that needs to be solved.

Summary of the invention

In view of this, the present invention provides a data storage method and apparatus for providing different levels of security for different types of data. To achieve the object, the technical solution provided by the present invention is as follows:

A data storage method comprising:

After receiving the data to be stored, determining a security level identifier of the data to be stored;

The data to be stored is saved in a system corresponding to the security level identifier.

Optionally, in the foregoing data storage method, the saving the data to be stored in a system corresponding to the security level identifier includes:

When the system corresponding to the security level identifier is a system, the data to be stored is saved in the system;

When the system corresponding to the security level identifier is two systems, the brief information of the data to be stored is generated, and the brief information and the data to be stored are separately stored in the two systems.

Optionally, in the foregoing data storage method, the generating brief information about the to-be-stored data includes:

Copying the identifier of the data to be stored and part of the data in the data to be stored, and obtaining brief information.

Optionally, in the foregoing data storage method, the determining a security level identifier of the to-be-stored data includes:

Determining, by the user, the security level identifier as the security level identifier of the data to be stored;

or,

Determining a security level identifier of the to-be-stored data according to a preset determination rule.

Optionally, the foregoing data storage method, the determining the security level identifier of the to-be-stored data according to the preset determining rule includes:

Obtaining a plurality of elements included in the preset determination rule and a first element value of each element, determining a second element value corresponding to the to-be-stored data of each of the elements, and comparing the first of each of the elements The element value and the second element value are obtained as comparison results;

Using the logical connection relationship included in the preset determination rule, logically determining each of the comparison results to obtain a determination result;

The security level identifier corresponding to the determination result is determined as the security level identifier of the to-be-stored data.

The application also provides a data storage device, including:

a level determining unit, configured to determine a security level identifier of the to-be-stored data after receiving the data to be stored;

And a data storage unit, configured to save the to-be-stored data in a system corresponding to the security level identifier.

Optionally, in the data storage device, the data storage unit includes:

a first storage subunit, configured to save the to-be-stored data in the system when the system corresponding to the security level identifier is a system;

a second storage subunit, configured to generate brief information of the to-be-stored data when the system corresponding to the security level identifier is two systems, and separately obtain the brief information and the to-be-stored data Saved in the two systems.

Optionally, in the foregoing data storage device, the second storage subunit that generates the brief information of the to-be-stored data includes:

And a second storage subunit, configured to copy the identifier of the data to be stored and part of data in the data to be stored, to obtain brief information.

Optionally, in the foregoing data storage device, the level determining unit includes:

a first level determining subunit, configured to determine a security level identifier input by the user as a security level identifier of the to-be-stored data;

The second level determining subunit is configured to determine a security level identifier of the to-be-stored data according to a preset determining rule.

Optionally, in the foregoing data storage device, the second level determining subunit includes:

An element comparison result obtaining sub-unit, configured to acquire a plurality of elements included in the preset determination rule and a first element value of each element, and determine a second element value corresponding to the to-be-stored data of each of the elements, Comparing the first element value and the second element value of each of the elements to obtain a comparison result;

The logical judgment result obtaining sub-unit is configured to perform logical judgment on each of the comparison results by using the logical connection relationship included in the preset determination rule to obtain a judgment result;

The security level identifier determining sub-unit is configured to determine the security level identifier corresponding to the determination result as the security level identifier of the to-be-stored data.

As can be seen from the above, the present invention has the following beneficial effects:

The data storage method provided by the present invention first determines the security level identifier of the data to be stored after receiving the data to be stored, and then saves the to-be-stored data in a system corresponding to the security level identifier. It can be seen that the present invention can determine different security level identifiers for different data, and store different data to different security level systems according to different security level identifiers, thereby providing different security levels for different data protection.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can obtain other drawings according to the provided drawings without any creative work.

FIG. 1 is a flowchart of a data storage method according to an embodiment of the present invention;

2 is a flowchart of a data storage method according to another embodiment of the present invention;

3 is a schematic structural diagram of a data storage device according to an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a data storage device according to another embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In order to improve the security of data, one way is to use encryption. Based on this idea, different data is used, and different encryption algorithms are used. However, this method requires an encryption process and consumes a certain amount of computing resources. The present invention does not adopt this method, but utilizes multiple systems installed by the electronic device itself. That is to say, the electronic device to which the present invention is applied needs to be installed with multiple systems, and different systems are configured with different levels of security modules to provide different levels of security protection for the data. The inventive idea of the present invention is to use different systems to perform different types of storage for different types of data.

Referring to FIG. 1 , a flow of a data storage method according to an embodiment of the present invention is shown, which specifically includes the following steps:

Step S101: After receiving the data to be stored, determine a security level identifier of the to-be-stored data.

The electronic device can receive various types of data, such as mails, text documents, and the like, and the data needs to be stored in the electronic device, and can be referred to as data to be stored. After the electronic device receives the data to be stored, the corresponding security level identifier is determined for the data to be stored.

It should be noted that the security level identifier corresponds to the storage mode, that is, if the security level identifier of the data to be stored is different, it is stored in the system in different storage manners. The storage mode refers to how to use the multiple systems in the electronic device to store related information of the data to be stored. Specifically, one can select a separate system to store data. Of course, the security level identifier can be selected according to the security level, that is, when the security level identifier is high, a more secure system is used, and secondly, not all cases can be selected. The system stores data, but in some cases, selects a single system storage Data, in other cases, select multiple systems to store data, as described below.

Step S102: Save the to-be-stored data in a system corresponding to the security level identifier.

Wherein, as described above, the system is a system with different levels of protection functions, and after determining the system to be stored according to the security level identifier, the data to be stored can be saved in the determined system.

The data storage method provided in this embodiment first determines the security level identifier of the data to be stored after receiving the data to be stored, and then saves the to-be-stored data in a system corresponding to the security level identifier. . It can be seen that, in this embodiment, different types of storage can be provided for data according to the security level identifier, and the storage manners are different, and can be stored in systems of different security levels, thereby providing different levels of protection for different data.

For the storage method described above, two specific implementation manners are listed, and the second type is preferably used. This avoids the new problem caused by using only one system to store data separately, that is, resource waste and inconvenient data viewing. Specifically, the electronic device is in a system of multiple systems by default. If the data to be viewed is all in other systems, the electronic device must be switched from the current system to another system, and after viewing. Switching back to the original system not only causes the resource overhead of the switching system, but also causes a poor user experience for viewing delays. Also, when the viewed data is non-critical, this switching is less necessary.

For convenience of description, the electronic device includes two systems as an example, and the two systems are respectively called an ordinary system and a security system. The electronic device is in the normal system by default. If the first one of the above storage methods is used, only one system is used to store data regardless of the security level identifier of the data. For example, the data to be stored is a major conference notification, and It is stored in the security system. For major conferences, the topic content of the conference is more important, and it can be secured in the security system. However, if the user only wants to check the time and place of the conference, he still needs to switch to the security system, which will bring the above problems. . Therefore, preferably, as shown in FIG. 2, step S102 in the above embodiment may be specifically implemented by:

Step S201: When the system corresponding to the security level identifier is a system, save the to-be-stored data in the system.

Step S202: When the system corresponding to the security level identifier is two systems, generate brief information of the data to be stored, and save the brief information and the data to be stored in the two systems.

Specifically, when the correspondence between the security level identifier and the system is set in advance, the system corresponding to some security level identifiers may be set to one, and the system corresponding to some security level identifiers may be set to two, of course, in a pair. In the relationship of one, it is also necessary to comply with the system in which the high-level identification system corresponds to a high security level. For example, the security level is identified as three types, that is, a high privacy level, a medium privacy level, and a low privacy level. The electronic device includes a common system and a security system, wherein the system corresponding to the high privacy level is a security system, and the system corresponding to the privacy level. For two, the system corresponding to the low privacy level is a normal system.

Further, when the system corresponding to the security level identifier is two, the data to be stored may be stored in a system with a higher security level to ensure data security, and brief information is generated for the data to be stored, and the brief information is generated. Stored in a system with a lower security level for easy viewing by users.

The method for generating the brief information may be: copying the identifier of the data to be stored and part of the data in the data to be stored, and obtaining brief information. Specifically, the data to be stored may be a mail, a text document, or the like. At this time, the identifier of the data to be stored refers to the subject of the mail and the name of the text document. Part of the data to be stored may be represented by a scale, which may be a default value or may be set by a user. For example, the user is provided with a setting interface, and the user selects a scale value in the setting interface, such as 10%, 20%, and the like. In addition, if the data to be stored has a digest, the digest can also generate brief information. Of course, the brief information may also be other content, or include other content, and is not limited to the identifier, partial data, and abstract in the embodiment.

According to the foregoing technical solution, when the system corresponding to the security level identifier is two systems, brief information of the data to be stored can be generated, and the brief information and the data to be stored are separately stored in different systems. In this way, the security of the data can be ensured, and the user can view it conveniently, and avoid the resource overhead caused by frequently switching the system.

When the user chooses to view the brief information, the user directly displays the information to the user in the current system without switching the system. If the user wants to continue to view more comprehensive content after viewing the brief information, the user switches to all. The system to store data to be saved.

In addition, the specific implementation manner of determining the security level identifier of the data to be stored in the step S101 in the foregoing embodiment may be: determining the security level identifier input by the user as the security level identifier of the data to be stored; or determining according to the preset. A rule determines a security level identifier of the data to be stored.

First, after receiving the data to be stored, the user may be provided with a selection interface, where the interface includes multiple security level identifiers set in advance, such as a high privacy level, a medium privacy level, and a low privacy level, and the user may directly The data selection security level identifier; secondly, the device automatically sets a security level identifier for the data to be stored, specifically:

Obtaining a plurality of elements included in the preset determination rule and a first element value of each element, determining a second element value corresponding to the to-be-stored data of each of the elements, and comparing the first of each of the elements The element value and the second element value are used to obtain a comparison result; using the logical connection relationship included in the preset determination rule, logically determining each of the comparison results to obtain a determination result; and the security corresponding to the determination result The level identifier is determined as the security level identifier of the data to be stored. The determining rule may be set by the user, that is, the user separately sets the first element value and the logical connection relationship of the element in the determining rule, and the logical connection relationship in the determining rule includes: “or” and “and”.

The predetermined determination rule may include a plurality of elements, and each element has a corresponding preset element value (the element value is referred to as a first element value for convenience of description), and each element has a logical connection relationship therebetween. Therefore, when the security level identifier is set for the received data by using the determining rule, firstly, according to the determining rule, which elements are needed to be matched, respectively, and each element is determined to have a value corresponding to the data to be stored (for convenience of description, The element value is called the first element value), then the second element value is compared with the first element value to obtain a comparison result, and finally, the logical comparison between the elements is logically determined according to the logical connection relationship between the elements. According to the judgment result, the security level identifier is determined.

For example, the determining rule is: a keyword and a receiving period, and the determining rule includes two elements, namely a keyword and a receiving period, and the first element value of the keyword is “important meeting”, and the first element of the receiving period The value is "AM 9:00 to AM 11:00", and the logical connection relationship between the elements is "AND", and the logical level is YES, and the corresponding security level is identified as "high privacy level". Therefore, when receiving the data to be stored, the keyword is obtained in the identifier of the data to be stored, for example, the received data to be stored is an email, and the keyword obtained in the subject of the email includes an “important conference”. And the received time point is AM 10:00, it can be seen that the second element value of the keyword matches the first element value, and the second element value of the receiving period matches the first element value, and therefore, the final logical judgment result To be sure, the message will be set to "high privacy level".

In the above logical determination process, if the determination result is no, the data to be stored may be set as the default security level identifier, or the user may be provided with a selection interface, which is manually selected by the user. The security level identifier should be.

The data to be stored is saved according to the above embodiment. For example, the data to be stored is a conference notification, the conference time and location are stored in a common system, and the entire content of the conference notification is stored in the security system. If the user wants to view the time and place of the meeting, the time and place can be directly displayed in the normal system. When the user wants to continue viewing, he can switch to the security system after clicking and obtain all the data for display.

The data storage device provided by the embodiment of the present invention is described below. It should be noted that the following description of the data storage device can refer to the above data storage method, which is not described below.

Referring to FIG. 3, it shows a structure of a data storage device according to an embodiment of the present invention, which specifically includes: a level determining unit 100 and a data storage unit 200; wherein:

The level determining unit 100 is configured to determine a security level identifier of the to-be-stored data after receiving the data to be stored;

The data storage unit 200 is configured to save the to-be-stored data in a system corresponding to the security level identifier.

According to the above technical solution, the data storage device provided in this embodiment may determine the security level identifier corresponding to the data to be stored, and save the data to be stored in a system corresponding to the security level identifier thereof, thereby being different types. The data to be stored provides different ways of storing.

As shown in FIG. 4, the data storage unit 200 in the foregoing data storage device may specifically include:

The first storage subunit 201 is configured to save the to-be-stored data in the system when the system corresponding to the security level identifier is a system;

The second storage sub-unit 202 is configured to generate brief information of the to-be-stored data when the system corresponding to the security level identifier is two systems, and save the brief information and the to-be-stored data in the In the two systems.

In the above data storage device, the second storage subunit for generating the brief information of the data to be stored may be specifically a second storage subunit, that is, an identifier for copying the data to be stored and the to-be-reserved A portion of the data in the data is stored, and a second storage subunit of the brief information is obtained.

The level determining unit 100 in the foregoing data storage device may specifically include:

a first level determining subunit, configured to determine a security level identifier input by the user as the to-be-stored The security level identifier of the stored data;

The second level determining subunit in the foregoing data storage device may specifically include:

It should be noted that each embodiment in the specification is described in a progressive manner, and each embodiment focuses on differences from other embodiments, and the same similar parts between the embodiments are referred to each other. can.

It should also be noted that, in this context, relational terms such as first and second, etc. are used merely to distinguish one entity or operation from another entity or operation, without necessarily requiring or implying such entities or operations. There is any such actual relationship or order between them. Furthermore, the term "comprises" or "comprises" or "comprises" or any other variations thereof is intended to encompass a non-exclusive inclusion, such that a process, method, article, or device that comprises a plurality of elements includes not only those elements but also Other elements, or elements that are inherent to such a process, method, item, or device. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional elements in the process, method, article, or device that comprises the above described elements.

The above description of the disclosed embodiments enables those skilled in the art to make or use the invention. Various modifications to these embodiments are obvious to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the present invention is not to be limited to the embodiments shown herein, but the scope of the invention is to be accorded

Claims

A data storage method, comprising:

After receiving the data to be stored, determining a security level identifier of the data to be stored;

The data to be stored is saved in a system corresponding to the security level identifier.
The data storage method according to claim 1, wherein the saving the data to be stored in a system corresponding to the security level identifier comprises:

When the system corresponding to the security level identifier is a system, the data to be stored is saved in the system;

When the system corresponding to the security level identifier is two systems, the brief information of the data to be stored is generated, and the brief information and the data to be stored are separately stored in the two systems.
The data storage method according to claim 2, wherein the generating the brief information of the data to be stored comprises:

Copying the identifier of the data to be stored and part of the data in the data to be stored, and obtaining brief information.
The data storage method according to claim 1, wherein the determining the security level identifier of the data to be stored comprises:

Determining, by the user, the security level identifier as the security level identifier of the data to be stored;

or,

Determining a security level identifier of the to-be-stored data according to a preset determination rule.
The data storage method according to claim 4, wherein the determining the security level identifier of the data to be stored according to the preset determination rule comprises:

Obtaining a plurality of elements included in the preset determination rule and a first element value of each element, determining a second element value corresponding to the to-be-stored data of each of the elements, and comparing the first of each of the elements The element value and the second element value are obtained as comparison results;

Using the logical connection relationship included in the preset determination rule, logically determining each of the comparison results to obtain a determination result;

Determining, by the security level identifier corresponding to the determination result, the security level of the data to be stored Logo.
A data storage device, comprising:

a level determining unit, configured to determine a security level identifier of the to-be-stored data after receiving the data to be stored;

And a data storage unit, configured to save the to-be-stored data in a system corresponding to the security level identifier.
The data storage device of claim 6, wherein the data storage unit comprises:

a first storage subunit, configured to save the to-be-stored data in the system when the system corresponding to the security level identifier is a system;

a second storage subunit, configured to generate brief information of the to-be-stored data when the system corresponding to the security level identifier is two systems, and save the brief information and the to-be-stored data in the In both systems.
The data storage device according to claim 7, wherein the generating the second storage subunit of the brief information of the data to be stored comprises:

And a second storage subunit, configured to copy the identifier of the data to be stored and part of data in the data to be stored, to obtain brief information.
The data storage device according to claim 6, wherein the level determining unit comprises:

a first level determining subunit, configured to determine a security level identifier input by the user as a security level identifier of the to-be-stored data;

The second level determining subunit is configured to determine a security level identifier of the to-be-stored data according to a preset determining rule.
The data storage device according to claim 9, wherein the second level determining subunit comprises:

An element comparison result obtaining sub-unit, configured to acquire a plurality of elements included in the preset determination rule and a first element value of each element, and determine a second element value corresponding to the to-be-stored data of each of the elements, Comparing the first element value and the second element value of each of the elements to obtain a comparison result;

The logical judgment result obtaining sub-unit is configured to perform logical judgment on each of the comparison results by using the logical connection relationship included in the preset determination rule to obtain a judgment result;

The security level identifier determining sub-unit is configured to determine the security level identifier corresponding to the determination result as the security level identifier of the to-be-stored data.