CN105631355B - A data processing method and device - Google Patents

Abstract

The embodiment of the present invention provides a data processing method and device, wherein the method specifically includes: before displaying the current webpage, judging whether the current webpage conforms to the preset protection rules; when the current webpage conforms to the preset protection rules, displaying the current webpage, and simultaneously displaying watermark content on the current webpage. The embodiment of the present invention can not only increase the protection of the page content, but also act as a deterrent to leakers; thus, the embodiment of the present invention can effectively prevent the sensitive data involved in the current web page from being leaked through the browser, thus improving the current Web page and browser security.

Description

A data processing method and device

technical field

The invention relates to the technical field of computer security, in particular to a data processing method and a data processing device.

Background technique

A browser refers to a software that can display the content of HTML (HyperText Mark-up Language, HyperText Mark-up Language) files on a web server or file system, and allow users to interact with these files. The web browser interacts with the web server mainly through HTTP (HyperText Transfer Protocol) and acquires web pages, these web pages are specified by URL (Uniform Resource Locator, Uniform Resource Locator), and the file format is usually HTML.

With the rapid popularization of the Internet, LAN has become an indispensable part of enterprise development. However, while bringing convenience to enterprises, LANs also face various attacks and threats, such as confidentiality leakage, data loss, network abuse, identity fraud, and illegal intrusion. For example, for the local area networks of banks, military industry and other enterprises, there are inevitably some confidential data in the web pages browsed by the internal user terminals through the browser. If these confidential data are leaked through the browser, it will bring great security risks. .

However, traditional browsers are rarely able to monitor and process their own security, and need to rely on third-party anti-virus software to protect the browser. Since it needs to interact with other software, it needs to open many browser interfaces To third-party programs, and many unsafe programs can also use these interfaces, causing browser information and operations to be easily hijacked, resulting in potential insecurity in the use of browsers by user terminals in the LAN.

Contents of the invention

In view of the above problems, the present invention is proposed to provide a data processing method and a data processing device that overcome the above problems or at least partially solve the above problems.

According to one aspect of the present invention, a data processing method is provided, including:

Before displaying the current webpage, judging whether the current webpage complies with preset protection rules;

When the current webpage conforms to the preset protection rule, the current webpage is displayed, and at the same time, the watermark content is displayed on the current webpage.

Optionally, before the step of judging whether the current webpage complies with preset protection rules, the method further includes:

During the process of starting the browser, drawing a first window and a second window positioned on the first window;

Then the step of displaying the current webpage and displaying the watermark content on the current webpage at the same time includes:

displaying the current webpage through the first window;

The transparency of the second window is controlled to a value less than 100%, and the watermark content is displayed through the second window.

Optionally, the step of displaying the current webpage while displaying the watermark content on the current webpage includes:

After embedding the watermark content into the current webpage, display the current webpage.

Optionally, the step of judging whether the current webpage complies with preset protection rules includes:

Matching the page content of the current webpage with the first preset protection rule, and if the matching result is a successful match, then determining that the current webpage conforms to the preset protection rule; or

Search in the URL collection according to the page address of the current webpage, and if the search is hit, then determine that the current webpage complies with the preset protection rules; or

Extracting the protection identifier from the header information corresponding to the current webpage, and judging whether the current webpage complies with the preset protection rules according to the protection identifier.

Optionally, if the method is applied to a local area network, the preset protection rule is a rule preset by the administrator of the local area network through the server, and the server sends the preset protection rule to the browser client.

Optionally, the watermark content is generated through the following steps:

The watermark content is generated according to at least one of the current user's account, the current user's login time, the current time, and the current user's corresponding enterprise identifier.

Optionally, the method also includes:

displaying the current webpage when the current webpage does not comply with the preset protection rules;

Control the transparency of the second window to 100%.

Optionally, the method also includes:

receiving a user's operation event on the current webpage through the second window;

passing the operation event to the first window through the second window, so that the first window responds to the operation event.

According to another aspect of the present invention, a data processing device is provided, comprising:

A judging module, used to judge whether the current webpage complies with preset protection rules before displaying the current webpage; and

The first display module is configured to display the current webpage and display watermark content on the current webpage when the current webpage conforms to preset protection rules.

Optionally, the device also includes:

A drawing module, used to draw a first window and a second window above the first window during the process of starting the browser before the judging module judges whether the current web page complies with preset protection rules;

Then the first display module includes:

A first display submodule, configured to display the current webpage through the first window; and

The second display submodule controls the transparency of the second window to be less than 100%, and displays the watermark content through the second window.

According to a data processing method and device according to an embodiment of the present invention, when the current webpage conforms to the preset protection rules, the current webpage is displayed, and the watermark content is displayed on the current webpage at the same time; since the current webpage conforms to the preset protection rules The rule can indicate that there is sensitive data that needs to be protected in the current webpage. These sensitive data may involve user privacy, or may involve the core technology or confidential technology of the local area network. In this case, displaying the watermark content on the current webpage can When the page content of the web page is leaked, the corresponding leaker can be traced to the corresponding watermark content. Therefore, it can not only increase the protection of the page content, but also act as a deterrent to the leaker; thus, the embodiments of the present invention can Effectively prevent the sensitive data involved in the current web page from being leaked through the browser, thus improving the security of the current web page and the browser.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the specific embodiments of the present invention are enumerated below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the alternative embodiments. The drawings are only for purposes of illustrating alternative embodiments and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same parts. In the attached picture:

FIG. 1 shows a schematic flowchart of steps of a data processing method according to an embodiment of the present invention;

FIG. 2 shows a schematic flowchart of steps of a data processing method according to an embodiment of the present invention;

FIG. 3 shows a schematic flowchart of steps of a data processing method according to an embodiment of the present invention;

FIG. 4 shows a schematic flowchart of steps of a data processing method according to an embodiment of the present invention; and

Fig. 5 shows a schematic structural diagram of a data processing device according to an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

One of the core concepts of the embodiments of the present invention is to selectively display the watermark content on the current webpage according to whether the current webpage conforms to the preset protection rules, specifically, when the current webpage conforms to the preset protection rules, display The current webpage displays the watermark content on the current webpage at the same time; since the current webpage conforms to the preset protection rules, it can indicate that there are sensitive data that need to be protected in the current webpage, and these sensitive data may involve user privacy, and may also involve Core technology or confidential technology. In this case, displaying the watermark content on the current webpage can track the corresponding leaker through the corresponding watermark content when the page content of the current webpage is leaked. Therefore, it can not only increase the security of the page content protection, and can act as a deterrent to leakers; therefore, the embodiments of the present invention can effectively prevent the sensitive data involved in the current web page from being leaked through the browser, thereby improving the security of the current web page and the browser.

Referring to FIG. 1 , it shows a flow chart of the steps of a data processing method according to an embodiment of the present invention, which may specifically include the following steps:

Step 101, before displaying the current webpage, judge whether the current webpage complies with the preset protection rules;

The embodiment of the present invention can be applied to various page access scenarios, wherein the above-mentioned pages can be pages in various formats such as simple pages, WAP (Wireless Application Protocol, Wireless Application Protocol) and WWW (World Wide Web), The embodiment of the present invention does not limit the specific page and the specific format of the page.

The embodiments of the present invention can be applied to network environments such as wide area networks or local area networks, and can improve the security of a single user terminal in the wide area network, or can improve the security of multiple user terminals and the local area network in the local area network. Wherein, the above-mentioned user terminals may specifically include various terminals with page access capabilities, such as mobile phones, PCs (personal computers, personal computers), digital broadcast terminals, messaging devices, game consoles, tablet devices, medical devices, fitness devices, Personal digital assistants and more.

In particular, the embodiments of the present invention can be applied to local area networks such as enterprise networks, government networks, and campus networks; in the above local area networks, a user terminal refers to a terminal device installed with an operating system, and the user terminal can be connected to the local area network in a wired manner, or can be Connect to local area network wirelessly. In this way, according to whether the current webpage conforms to the preset protection rules, selectively displaying the watermark content on the current webpage of the user terminal in the local area network is a webpage operation of the user terminal in the local area network, so as to increase the protection of the page content.

In the embodiment of the present invention, the data processing flow can be executed by the browser. Specifically, the above data processing flow can be executed through the data processing device or data processing plug-in inside the browser, so that the webpage data that needs to be protected can be effectively prevented from being leaked through the browser. , which can improve browser security.

The embodiment of the present invention can provide the following judging scheme for judging whether the current webpage complies with the preset protection rules:

Judgment plan 1

Judgment scheme 1 may match the page content of the current webpage with the first preset protection rule, and if the matching result is a successful match, it is determined that the current webpage conforms to the preset protection rule.

In an optional embodiment of the present invention, the above-mentioned first preset protection rule may specifically include: a rule corresponding to at least one preset keyword, and the above-mentioned first preset protection rule may specifically include: The or (or) relationship between preset keywords can also be an and (and) relationship between preset keywords; and, the above-mentioned first preset protection rule can be described by a regular expression. The specific content and specific description methods of the configuration protection rules are not limited.

In another optional embodiment of the present invention, the aforementioned preset keywords may be located in the keyword set. The keyword set can be a set maintained by the server or control terminal of the LAN according to the security requirements of the LAN. The above-mentioned keyword set can specifically include: at least one preset keyword, and the above-mentioned preset keyword can be related to the core technology or confidentiality of the LAN. Technology related. Wherein, the control terminal can receive the preset keywords specified by the user, and can also automatically determine the corresponding preset keywords according to the security requirements of the local area network. be restricted.

Judgment plan 2

Judgment scheme 2 can search the URL collection according to the page address of the current webpage, and if the search is hit, it is determined that the current webpage complies with the preset protection rules.

The above URL collection can be a collection maintained by the server or control terminal of the LAN according to the security requirements of the LAN. The above URL collection can specifically include: at least one preset URL, and the page corresponding to the above preset URL may carry the core technology of the LAN or Sensitive data related to confidential technology. Wherein, the control terminal can receive the preset URL specified by the user, and can also automatically determine the corresponding preset URL according to the security requirements of the local area network. It can be understood that the embodiment of the present invention does not limit the specific preset URL in the above URL set.

In practical applications, the above-mentioned page address and preset URL can be described in the form of URL (Uniform Resource Locator, UniformResource Locator). It can be understood that the embodiment of the present invention does not limit the specific description form of the page address and preset URL.

Judgment option 3

Judgment scheme 3 may extract the protection identifier from the header information corresponding to the current webpage, and judge whether the current webpage complies with the preset protection rules according to the protection identifier.

In practical applications, the server can add the protection identifier of the webpage in the header (head) information of the HTML code of the webpage, and the protection identifier can be used to identify whether the webpage needs to be protected. For example, the value of the protection identifier can be 0 or 1, 0 indicates that the webpage is not a webpage that needs to be protected, 1 indicates that the webpage is a webpage that needs to be protected, and so on. In this way, after the client obtains the HTML code from the server, it can extract the protection identifier from the header information of the HTML code, and judge whether the current web page conforms to the preset protection rules according to the protection identifier. It can be understood that the above process of adding a protection identifier and extracting a protection identifier is just an example, and this embodiment of the present invention does not limit the specific process of adding a protection identifier and extracting a protection identifier.

In an optional embodiment of the present invention, when the method of the embodiment of the present invention is applied to a local area network, the preset protection rule may be a rule preset by the administrator of the local area network through the server, and the server will The preset protection rules are delivered to browser clients.

The judging scheme for judging whether the current web page conforms to the preset protection rules has been introduced in detail above. It can be understood that those skilled in the art can adopt one or a combination of the above judging schemes according to actual application requirements, or can also use other Judgment scheme, for example, the above-mentioned preset protection rules may also involve user rights, some users may have the right to not add watermark content, and some users do not have the right to not add watermark content, etc.

Step 102: When the current webpage conforms to the preset protection rules, display the current webpage and display watermark content on the current webpage.

The embodiment of the present invention displays the watermark content on the current web page while displaying the current web page, which can prevent the user from leaking the page content of the current web page by taking screenshots, taking photos, printing, etc. without displaying the watermark content.

In an optional embodiment of the present invention, the watermark content may be generated through the following steps: according to at least one of the current user's account, the current user's login time, the current time, and the current user's corresponding enterprise identifier, generate the Describe the watermark content. Assume that the above watermark content contains the account of the current user, and the account of the user can correspond to the only user in the local area network. In this way, when the page content of the current web page is leaked, the corresponding leaker can be traced through the corresponding watermark content. Alternatively, assuming that the above watermark content contains an enterprise logo, when the page content of the current web page is leaked, the corresponding leaked enterprise can be traced through the corresponding watermark content.

In another optional embodiment of the present invention, at least one of the current user's account, the current user's login time, the current time, and the current user's corresponding enterprise identifier can be used as the original content, and the original content can be encoded or Encryption processing to obtain the corresponding watermark content. Wherein, the above-mentioned watermark content can be in the form of text, two-dimensional code, bar code, etc., and when the watermark content is traced, the watermark content can be decoded or decrypted to obtain the corresponding original content. It can be understood that the embodiment of the present invention does not limit the specific original content, encoding or encryption algorithm, and expression form corresponding to the watermark content.

In addition, those skilled in the art can control the distribution of watermark content in the current webpage according to actual application requirements. For example, the above watermark content can be distributed only near the sensitive data of the current webpage, or the above watermark content can be distributed throughout the current webpage. The embodiment of the present invention does not limit the specific distribution of the above watermark content.

Embodiments of the present invention can provide the following display scheme for displaying the current webpage and displaying watermark content on the current webpage at the same time:

Show Scenario 1

In the display scheme 1, before the step of judging whether the current web page conforms to the preset protection rules, the method may further include: drawing a first window and a window located between the first window during the process of starting the browser on the second window;

Then the step 102 of displaying the current webpage and displaying the watermark content on the current webpage may specifically include:

displaying the current webpage through the first window;

The transparency of the second window is controlled to a value less than 100%, and the watermark content is displayed through the second window.

In display scheme 1, the current web page can be displayed through the first window, and the watermark content can be displayed through the second window; wherein, the second window can be located above the first window, and when the watermark content needs to be displayed, the second window can be The transparency of the second window is controlled to a value less than 100%. For example, the transparency of the second window can be controlled to a value such as 95%, 90%, etc. The embodiment of the present invention does not limit the transparency of the second window when displaying the watermark content.

Display Scheme 1 displays the watermark content through the second window above the first window, since it does not involve the modification of the HTML code of the web page, it can reduce the complexity of displaying the watermark content and reduce the amount of computation required for the display of the watermark content and computing resources.

Show Scenario 2

In display scheme 2, the step 102 of displaying the current webpage and displaying the watermark content on the current webpage may specifically include: displaying the current webpage after embedding the watermark content in the current webpage.

Display scheme 2 can embed the watermark content into the current webpage by modifying the code of the webpage. Specifically, the DIV (Division) technology in CSS (Cascading Style Sheets) can be used to embed the content into the current webpage. It can be understood that the embodiment of the present invention does not limit the specific process of embedding the watermark content into the current webpage.

The technical solutions for displaying the current webpage and displaying the watermark content on the current webpage are described in detail above through the display scheme 1-display scheme 2. It can be understood that those skilled in the art can use the display method according to actual application requirements Describe the current webpage, and display other technical solutions of the watermark content on the current webpage at the same time, the embodiment of the present invention does not limit the specific display solution.

To sum up, since the current webpage conforms to the preset protection rules in the embodiment of the present invention, it may indicate that there are sensitive data that need to be protected in the current webpage. These sensitive data may involve user privacy, or may involve the core technology or confidential technology of the local area network. In this case, displaying the watermark content on the current webpage can track the corresponding leaker through the corresponding watermark content when the page content of the current webpage is leaked. Therefore, it can not only increase the protection of the page content, but also can protect the leaker It acts as a deterrent; therefore, the embodiments of the present invention can effectively prevent the sensitive data involved in the current webpage from being leaked through the browser, thus improving the security of the current webpage and the browser.

Referring to FIG. 2 , it shows a flow chart of the steps of a data processing method according to an embodiment of the present invention, which may specifically include the following steps:

Step 201, during the process of starting the browser, draw a first window and a second window located above the first window;

Step 202, before displaying the current webpage, judge whether the current webpage complies with the preset protection rules;

Step 203, when the current webpage complies with preset protection rules, display the current webpage through the first window;

Step 204 , while displaying the current web page through the first window, control the transparency of the second window to a value less than 100%, and display the watermark content through the second window.

Compared with the embodiment shown in FIG. 1 , this embodiment describes the process from starting the browser to displaying the current webpage, wherein the initial transparency of the second window can be a first preset value, and, in the current webpage When the preset protection rules are met, the transparency of the second window can be controlled to a second preset value less than 100%, wherein the above-mentioned first preset value and the above-mentioned second preset value can be the same or different values For example, the above-mentioned first preset value may be 100%, and the above-mentioned second preset value may be 90%. The embodiment of the present invention does not limit the specific values of the above-mentioned first preset value and the above-mentioned second preset value.

In an optional embodiment of the present invention, the method may further include: displaying the current webpage when the current webpage does not meet the preset protection rules; controlling the transparency of the second window to 100% . When the transparency of the second window is 100%, it can present a completely transparent effect, so the normal display of the current webpage may not be affected.

Referring to FIG. 3 , it shows a flow chart of steps of a data processing method according to an embodiment of the present invention, which may specifically include the following steps:

Step 301. During the process of starting the browser, draw a first window and a second window above the first window;

Step 302, before displaying the current webpage, judge whether the current webpage complies with the preset protection rules;

Step 303, when the current webpage complies with preset protection rules, display the current webpage through the first window;

Step 304, while displaying the current web page through the first window, control the transparency of the second window to a value less than 100%, and display the watermark content through the second window;

With respect to the embodiment shown in Figure 2, the method of this embodiment may also include:

Step 305, receiving the user's operation event on the current web page through the second window;

Step 306: Transmit the operation event to the first window through the second window, so that the first window responds to the operation event.

For operating systems such as Windows, usually only one top-mounted window can capture the operation event, but in the embodiment of the present invention, the second window is located above the first window, so in the embodiment of the present invention, the second window can capture the operation event. event, and the first window cannot directly capture the operation event. In practical applications, the above operation events may specifically include: keyboard events and/or mouse events.

In view of the above situation, in this embodiment, the operation event may be transmitted to the first window through the second window, so that the first window can normally respond to the operation event.

In an application example of the present invention, the operation event can be delivered to the first window through the LRESULT SendMessage (HWND hWnd, UINTMsg, WPARAM wParam, LPARAM IParam) function; wherein, hWnd is used to represent the handle of the first window, and Msg uses To represent the operation event message being sent, wParam is used to specify additional message-specific information, and IParam is used to specify additional message-specific information. It can be understood that the embodiment of the present invention does not limit the specific process of transferring the operation event to the first window through the second window.

Referring to FIG. 4 , it shows a flow chart of the steps of a data processing method according to an embodiment of the present invention, which may specifically include the following steps:

Step 401, before displaying the current webpage, judge whether the current webpage complies with the preset protection rules;

Step 402, when the current webpage conforms to the preset protection rules, display the current webpage, and display the watermark content on the current webpage at the same time;

Step 403: When the current webpage conforms to the preset protection rule and a preset operation request for the current webpage is monitored, reject the preset operation request.

With respect to the embodiment shown in Figure 1, this embodiment can also reject the preset operation request for the current webpage when the current webpage conforms to the preset protection rules; These sensitive data may involve user privacy, and may also involve the core technology or confidential technology of the local area network. Therefore, the embodiment of the present invention can effectively prevent the sensitive data involved in the current webpage from being leaked through the browser, so it can improve the security of the current webpage and Browser security.

In an optional embodiment of the present invention, the preset operation request may specifically include at least one of the following requests: a request for copying and/or pasting; a request for screenshots; a request for printing ; requests for upload and/or download; and requests for right-click menu operations.

Among them, requests for copying and/or pasting, screenshots, printing, right-click menu operations, and downloads can effectively prevent webpage data to be protected from being leaked through the browser ; The request for uploading can effectively prevent the data of the user terminal in the LAN from leaking through the browser.

The embodiment of the present invention can provide the following monitoring solution for monitoring the preset operation request for the current webpage:

Monitoring Program 1

The monitoring solution 1 can be applied to the monitoring of the preset operations performed by the browser, and the operation control device or the operation control plug-in used to execute the control flow of the webpage operation can take over the operation of the browser.

Specifically, the above-mentioned operation control device or the operation control plug-in may register a callback function corresponding to a preset operation request event in the browser, and receive an occurrence notification of the registered preset operation request event through the callback function. Wherein, after the browser obtains the above-mentioned registered preset operation request event, it can call back the registrant (operation control device or operation control plug-in) through the interface provided by the above-mentioned callback function, so that the registrant can know the registered preset operation request event happened.

Monitoring Program 2

The monitoring solution 2 can be applied to the monitoring of preset operations executed by the browser, and can also be applied to the monitoring of preset operations executed by non-browsers (such as the printing operation executed by the operating system).

Monitoring solution 2 can establish a hook to monitor preset operation requests for the current web page. In practical applications, a hook processing routine hooked to a preset operation request may be created to intercept an API (Application Programming Interface, Application Program Interface) corresponding to the preset operation request.

In an application example of the present invention, the above-mentioned hook processing routine may specifically include two modules: one is a hook server (Hook Server), generally in the form of EXE; the other is a hook driver (Hook Driver), generally a DLL ( Dynamic link library, Dynamic Link Library) form. The hook server is used to inject the hook driver into the target process, so that the hook driver works in the address space of the target process, and the hook driver is used for actual API interception work. In the embodiment of the present invention, the API corresponding to the preset operation request of the operating system (such as the API corresponding to the request for printing) is transferred to the hook function (usually realized by modifying the function entry address) by using the hook driver injected into the security detection process. ), so that the hook function can obtain the information that the API is executed, so as to complete the monitoring of the preset operation request for the current web page.

It can be understood that monitoring the preset operation request for the current webpage through the above two methods is only an application example of the present invention. be restricted.

In an optional embodiment of the present invention, the method of this embodiment may further include: when the current webpage conforms to the preset protection rule, judging whether the current user has the operation authority corresponding to the preset operation request; When the current user does not have the operation authority corresponding to the preset operation request, reject the preset operation request. In this optional embodiment, users with different identities can be given webpage operations corresponding to their identities through permission control, and unexecutable operation calls can be blocked, which can not only realize the division of labor and responsibility, but also reduce the complexity of webpage operation control.

In practical applications, the browser can obtain the current user's webpage operation authority from the server or control terminal in the LAN; and the above-mentioned server can maintain the mapping relationship between the user identity and the webpage operation authority to provide the browser with the current user's webpage operation authority. authority. For example, in an application example of the present invention, user identities can be set according to the organizational structure of the enterprise, assuming that user identities can include: first-level staff, second-level staff, third-level staff, fourth-level staff, and fifth-level staff , among them, the first-level staff are members of the board of directors, the second-level staff are the general manager, the third-level staff are department heads, the fourth-level staff are grassroots managers, and the fifth-level staff are ordinary staff, so the first-level staff can have all the webpage operations Permissions, second-level staff, third-level staff, and fourth-level staff may have partial webpage operation permissions, and fifth-level staff may not have any webpage operation permissions. It can be understood that the above-mentioned user identity and corresponding webpage operation authority are only examples. In fact, the embodiment of the present invention does not limit the specific mapping relationship between user identity and webpage operation authority.

For the method embodiment, for the sake of simple description, it is expressed as a series of action combinations, but those skilled in the art should know that the embodiment of the present invention is not limited by the described action order, because according to the embodiment of the present invention , certain steps may be performed in other order or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all optional embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

Referring to FIG. 5 , it shows a structural block diagram of a data processing device according to an embodiment of the present invention, which may specifically include the following modules:

A judging module 501, configured to judge whether the current webpage complies with preset protection rules before displaying the current webpage; and

The first display module 502 is configured to display the current webpage and display watermark content on the current webpage when the current webpage conforms to a preset protection rule.

In an optional embodiment of the present invention, the device may also include:

A drawing module, used to draw a first window and a second window above the first window during the process of starting the browser before the judging module judges whether the current web page complies with preset protection rules;

Then the first display module 502 may specifically include:

A first display submodule, configured to display the current webpage through the first window; and

The second display submodule controls the transparency of the second window to be less than 100%, and displays the watermark content through the second window.

In another optional embodiment of the present invention, the first display module 502 may specifically include:

The third display submodule is used to display the current webpage after embedding the watermark content into the current webpage.

In yet another optional embodiment of the present invention, the judging module 501 may specifically include:

The first judging submodule is used to match the page content of the current webpage with the first preset protection rule, and if the matching result is a successful match, then determine that the current webpage conforms to the preset protection rule; or

The second judging submodule is used to search the URL collection according to the page address of the current web page, and if the search hits, then determine that the current web page complies with the preset protection rules; or

The third judging sub-module is used to extract the protection identifier from the header information corresponding to the current webpage, and judge whether the current webpage complies with the preset protection rules according to the protection identifier.

In yet another optional embodiment of the present invention, the device can be applied to a local area network, and the preset protection rule can be a rule preset by the administrator of the local area network through the server, and the preset The protection rule is issued to the device located at the browser client.

In an optional embodiment of the present invention, the device may further include: a generating module for generating the watermark content;

The generating module may specifically include:

The generation sub-module is used to generate the watermark content according to at least one of the current user's account, the current user's login time, the current time, and the current user's corresponding enterprise identifier.

In another optional embodiment of the present invention, the device may also include:

A second display module, configured to display the current webpage when the current webpage does not meet the preset protection rules;

A control module, configured to control the transparency of the second window to 100%.

In another optional embodiment of the present invention, the device may also include:

A receiving module, configured to receive a user's operation event on the current webpage through the second window;

A transfer module, configured to transfer the operation event to the first window through the second window, so that the first window responds to the operation event.

As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not specific to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline this disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the invention are sometimes grouped together in a single embodiment, figure, or its description. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method or method so disclosed may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments described herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement some or all functions of some or all components in the data processing method and device according to the embodiments of the present invention. The present invention can also be implemented as an apparatus or an apparatus program (for example, a computer program and a computer program product) for performing a part or all of the methods described herein. Such a program for realizing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet platform, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names.

The invention discloses A1. A data processing method, comprising:

Before displaying the current webpage, judging whether the current webpage complies with preset protection rules;

When the current webpage conforms to the preset protection rule, the current webpage is displayed, and at the same time, the watermark content is displayed on the current webpage.

A2. The method as described in A1, before the step of judging whether the current web page complies with the preset protection rules, the method also includes:

During the process of starting the browser, drawing a first window and a second window positioned on the first window;

Then the step of displaying the current webpage and displaying the watermark content on the current webpage at the same time includes:

displaying the current webpage through the first window;

The transparency of the second window is controlled to a value less than 100%, and the watermark content is displayed through the second window.

A3, the method as described in A1, the step of displaying the current webpage and displaying the watermark content on the current webpage at the same time includes:

After embedding the watermark content into the current webpage, display the current webpage.

A4. The method described in any one of A1 to A3, the step of judging whether the current webpage complies with the preset protection rules includes:

Matching the page content of the current webpage with the first preset protection rule, and if the matching result is a successful match, then determining that the current webpage conforms to the preset protection rule; or

Search in the URL collection according to the page address of the current webpage, and if the search is hit, then determine that the current webpage complies with the preset protection rules; or

Extracting the protection identifier from the header information corresponding to the current webpage, and judging whether the current webpage complies with the preset protection rules according to the protection identifier.

A5. The method described in any one of A1 to A3, if the method is applied to a local area network, then the preset protection rule is a rule preset by the administrator of the local area network through the server, and the preset protection rule is set by the server The rules are delivered to the browser client.

A6. The method described in any one of A1 to A3, generating the watermark content through the following steps:

The watermark content is generated according to at least one of the current user's account, the current user's login time, the current time, and the current user's corresponding enterprise identifier.

A7, the method as described in A2, described method also comprises:

displaying the current webpage when the current webpage does not comply with the preset protection rules;

Control the transparency of the second window to 100%.

A8, the method as described in A2 or A7, said method also includes:

receiving a user's operation event on the current webpage through the second window;

passing the operation event to the first window through the second window, so that the first window responds to the operation event.

The invention discloses B9, a data processing device, comprising:

A judging module, used to judge whether the current webpage complies with preset protection rules before displaying the current webpage; and

The first display module is configured to display the current webpage and display watermark content on the current webpage when the current webpage conforms to preset protection rules.

B10, the device as described in B9, said device also includes:

A drawing module, used to draw a first window and a second window above the first window during the process of starting the browser before the judging module judges whether the current web page complies with preset protection rules;

Then the first display module includes:

A first display submodule, configured to display the current webpage through the first window; and

The second display submodule controls the transparency of the second window to be less than 100%, and displays the watermark content through the second window.

B11. The device as described in B9, the first display module includes:

The third display submodule is used to display the current webpage after embedding the watermark content into the current webpage.

B12. The device as described in any one of B9 to B11, the judgment module includes:

The first judging submodule is used to match the page content of the current webpage with the first preset protection rule, and if the matching result is a successful match, then determine that the current webpage conforms to the preset protection rule; or

The second judging submodule is used to search the URL collection according to the page address of the current web page, and if the search hits, then determine that the current web page complies with the preset protection rules; or

The third judging sub-module is used to extract the protection identifier from the header information corresponding to the current webpage, and judge whether the current webpage complies with the preset protection rules according to the protection identifier.

B13, the device as described in any one of B9 to B11, the device is applied to a local area network, then the preset protection rule is a rule preset by the administrator of the local area network through the server, and the preset protection rule is set by the server The rule is issued to the device located at the browser client.

B14. The device according to any one of B9 to B11, the device further comprising: a generation module for generating the watermark content;

The generating module includes:

The generation sub-module is used to generate the watermark content according to at least one of the current user's account, the current user's login time, the current time, and the current user's corresponding enterprise identifier.

B15, the device as described in B10, said device also includes:

A second display module, configured to display the current webpage when the current webpage does not meet the preset protection rules;

A control module, configured to control the transparency of the second window to 100%.

B16. The device as described in B10 or B15, said device further comprising:

A receiving module, configured to receive a user's operation event on the current webpage through the second window;

A transfer module, configured to transfer the operation event to the first window through the second window, so that the first window responds to the operation event.

Claims (11)

1. a kind of data processing method, comprising:

Before showing current web page, judge whether the current web page meets preset safeguard rule, comprising: corresponding from current web page Header information in extract protection mark, and according to the protection identify judge whether current web page meets preset safeguard rule；

When the current web page meets preset safeguard rule, the current web page is shown, while showing on the current web page Show watermark content, comprising: after watermark content is embedded in current web page, show current web page；

Wherein, it is described judge the step of whether current web page meets preset safeguard rule before, the method also includes: During starting browser, first window and the second window on the first window are drawn；The then display The current web page, while the step of showing watermark content on the current web page, comprising: it is shown by the first window The current web page；It is the value less than 100% by the transparency control of second window, and is shown by second window Watermark content.

2. the method as described in claim 1, which is characterized in that described to judge whether the current web page meets preset protection rule Then the step of, further includes:

The content of pages of the current web page is matched with the first preset safeguard rule, if matching result is successful match, Then determine that the current web page meets preset safeguard rule；Or

Page address according to current web page is searched in network address set, if searching hit, it is determined that current web page meets Preset safeguard rule.

3. the method as described in claim 1, which is characterized in that the method is applied to local area network, then the preset protection rule It is then the administrator of local area network by the preset rule of server, is handed down to the preset safeguard rule by the server clear Look at device client.

4. the method as described in claim 1, which is characterized in that generate the watermark content as follows:

It is corresponded in enterprise's mark according to the account of active user, the login time of active user, current time and active user At least one generates the watermark content.

5. the method as described in claim 1, which is characterized in that the method also includes:

When the current web page does not meet preset safeguard rule, the current web page is shown；

It is 100% by the transparency control of second window.

6. the method as described in claim 2 or 5, which is characterized in that the method also includes:

By the second window reception user for the action event of the current web page；

The action event is passed into the first window by second window, so that described in first window response Action event.

7. a kind of data processing equipment, comprising:

Judgment module, for judging whether the current web page meets preset safeguard rule before showing current web page；It is described to sentence Disconnected module includes third judging submodule, for extracting protection mark from the corresponding header information of current web page, and according to institute It states protection mark and judges whether current web page meets preset safeguard rule；

And

First display module, for when the current web page meets preset safeguard rule, showing the current web page, while Watermark content is shown on the current web page；First display module, comprising:

Third display sub-module, for showing current web page after watermark content is embedded in current web page；

Drafting module, for opening before the judgment module judges whether the current web page meets preset safeguard rule During dynamic browser, first window and the second window on the first window are drawn；

Then first display module, comprising:

First display sub-module, for showing the current web page by the first window；And

The transparency control of second window is the value less than 100%, and passes through second window by the second display sub-module Mouth display watermark content.

8. device as claimed in claim 7, which is characterized in that the judgment module, further includes:

First judging submodule, for the content of pages of the current web page to be matched with the first preset safeguard rule, if Matching result is successful match, then determines that the current web page meets preset safeguard rule；Or

Second judgment submodule is searched in network address set for the page address according to current web page, if searching hit, Then determine that current web page meets preset safeguard rule.

9. device as claimed in claim 7, which is characterized in that described device is applied to local area network, then the preset protection rule The then rule preset by server for the administrator of local area network, is handed down to position for the preset safeguard rule by the server In the described device of browser client.

10. device as claimed in claim 7, which is characterized in that described device further include: for generating the watermark content Generation module；

The generation module, comprising:

Submodule is generated, for according to the account of active user, the login time of active user, current time and active user couple At least one of enterprise's mark is answered, the watermark content is generated.

11. device as claimed in claim 7, which is characterized in that described device further include:

Second display module, for showing the current web page when the current web page does not meet preset safeguard rule；

Control module, for being 100% by the transparency control of second window；

Receiving module, for the action event by the second window reception user for the current web page；

Transfer module, for the action event to be passed to the first window by second window, so that described One window responds the action event.