CN110059488A - Security level identification management method and device - Google Patents

Abstract

The present invention proposes a method and a device for managing secret-level identification. The method includes: receiving a secret-related document approval request from a secret-related computer by a secret-level identification management center, the request carrying secret-related documents and information pending approval of secret-related documents, and providing the pending approval information to the console; Approval and approval instructions from the incoming, request the console to generate a unique file identifier for the confidential file; according to the encryption algorithm corresponding to the encryption level of the confidential file in the security attribute information of the confidential file, encrypt the confidential file, The secret-related file is hashed, and the result value of the hash operation and the file identification of the secret-related file are combined to form the identification index of the secret-related file, and the identification index is added to the header of the secret-related file to obtain the final secret-related file. . The invention enables the whole life cycle of the secret-related document to be effectively protected by the secret-level identification.

Description

Security level identification management method and device

technical field

The present invention relates to the technical field of file encryption, and in particular, to a method and device for managing a security level identification.

Background technique

In recent years, with the rapid development of Internet and multimedia technology, office automation and e-government systems have been widely used in state organs, enterprises and institutions. However, due to the characteristics of easy copying of electronic documents, its security has been challenged. In "Technical Requirements for Hierarchical Protection of Computer Information Systems Involving State Secrets", it is emphasized that information in secret-related information systems should have corresponding classification marks, which should be inseparable from the subject of information and cannot be tampered with. The secret-level identification is a kind of data that indicates the security level of the secret-related file. The secret-level identification and the corresponding secret-related file are bound by a specific technology to form a secret-level file together.

The secret-level identification is a digital entity bound to the secret-related file. It is closely related to the secret-related file entity. It encrypts the secret-related file protectively, records the attribute and status information of the file, and defines the operation object and operation behavior of the file. Access rights policy, record user identity and operation behavior in each file processing link, ensure that files are always in a safe and controllable state in all processes such as creation, editing, storage, modification, forwarding and viewing, and can be traced and audited Every detail of the use of the file can be safely and controllable throughout the life cycle of the confidential file.

SUMMARY OF THE INVENTION

The present invention proposes a method and a device for managing secret-level identification, so that the entire life cycle of secret-related documents can be effectively protected by the secret-level identification.

The technical scheme of the present invention is realized as follows:

A secret-level identification management method, the method includes:

The secret-level identification management center receives a secret-related document approval request from a secret-related computer, and the request carries secret-related documents and secret-related documents pending approval information. The secret-related document pending approval information includes: content attribute information of secret-related documents and security attribute information; provide the to-be-approved information to the console, so that it can be approved by an approver with approval authority specified by the console;

The secret-level identification management center receives the approval instruction sent by the console, and sends a secret-level identification generation request to the console, so that the console generates a unique file identification for the secret-related file, and the console generates the file identification of the secret-related file and Content attribute information and security attribute information are stored in the database of identification attributes of classified files;

The secret-level identification management center receives the file identification sent from the console, and encrypts the secret-related file according to the encryption algorithm corresponding to the secret-level of the secret-related file in the security attribute information of the secret-related file, and encrypts the encrypted secret-related file. Hash operation, combining the hash operation result value and the file identification of the secret-related file to form the identification index of the secret-related file, and adding the identification index to the header of the secret-related file to obtain the final secret-related file.

The adding the identification index before and after the header of the secret-related file and before obtaining the final secret-related file further includes:

Use preset digital signature algorithm and key to digitally sign confidential documents.

The adding the identification index to the header of the confidential file further includes:

The secret-level identification management center sends the identification index of the secret-related file to the secret-related computer, so that the secret-related computer can save the corresponding relationship between the file name and the identification index of the secret-related file, so that the secret-related computer can carry a secret-related file when it receives the input from the user. When accessing or using the file name, the corresponding identification index is found according to the file name, and the file identification is obtained from the identification index;

The secret-level identification management center receives a request for accessing or using secret-related files from a secret-related computer. The request carries the file identification and user identification, searches its own user information database according to the user identification, obtains the user secret level, and searches for secret-related files according to the file identification. Identify the attribute database and find the security attribute information of the confidential file;

The security level identification management center determines whether the user can access or use the confidential file according to the obtained security level of the user and the security attribute information of the confidential file. If so, decrypt and open it according to the security attribute information of the confidential file. Confidential documents.

After obtaining the final secret-related document, it further includes:

The secret-level identification management center receives the security attribute information change request sent by the secret-related computer. The request carries the file identification of the secret-related file, the name of the security attribute to be updated, and the update value, and the file identification, the name of the security attribute to be updated, and the updated value. The value is provided to the console and approved by the approver with approval authority specified by the console;

The secret-level identification management center receives the approval instruction sent by the console, and returns the approval instruction to the secret-related computer. The corresponding security attribute information is found, and the corresponding security attribute information is updated according to the updated security attribute update value.

The method further includes: the secret-level identification management center records the flow attribute information and log attribute information of the secret-related file in a record corresponding to the file identification of the secret-related file in the secret-related file identification attribute database.

A security level identification management device, the device includes:

The approval processing module is used to receive a request for approval of a confidential document sent by a confidential computer, the request carrying the confidential document and the pending approval information of the confidential document, and the pending approval information of the confidential document includes: the content of the confidential document attribute information and security attribute information; provide the information to be approved to the console, so that it can be approved by an approver with approval authority specified by the console;

The identifier generation module is used to send a secret-level identifier generation request to the console after receiving the approval instruction sent by the console, so that the console can generate a unique file identifier for the secret-related file, and the console will generate a unique file identifier for the secret-related file. The file identification, content attribute information and security attribute information of the file are stored in the identification attribute database of secret-related files; after receiving the file identification sent from the console, according to the encryption level corresponding to the secret-level of the secret-related file in the security attribute information of the secret-related file Algorithm, encrypt the secret-related file, perform hash operation on the encrypted secret-related file, combine the hash operation result value and the file identification of the secret-related file to form the identification index of the secret-related file, and add the identification index to the Before the header of the confidential document, the final confidential document is obtained.

The identification generation module adds the identification index before and after the header of the secret-related file, and before obtaining the final secret-related file for further use,

Use preset digital signature algorithm and key to digitally sign confidential documents.

The identification generation module adds the identification index to the header of the secret-related file for further use,

Send the identification index of the secret-related file to the secret-related computer, so that the secret-related computer can save the corresponding relationship between the file name and the identification index of the secret-related file;

In addition, the device further includes an access and use processing module, which is used to receive a confidential file access or use request from a confidential computer. The request carries a file identifier and a user identifier, and searches its own user information database according to the user identifier, and obtains the request. User secret level, according to the file identification, look up the identification attribute database of the secret-related file, and find the security attribute information of the secret-related file; according to the obtained user's secret level and the security attribute information of the secret-related file, determine whether the user can access or use the secret-related file. Secret-related files, if possible, decrypt and open the secret-related files according to the security attribute information of the secret-related files. , find the corresponding identification index according to the file name, and obtain the file identification from the identification index.

The approval processing module is further used for,

Receive a security attribute information change request from a secret-related computer, the request carries the file identifier of the secret-related file, the name of the security attribute to be updated, and the update value, and provide the file identifier, the name of the security attribute to be updated, and the update value to the control. The approval is carried out by the approver with approval authority specified by the console; the approval instruction sent from the console is received, and the approval instruction is returned to the secret computer. The corresponding security attribute information is found in the confidential file identification attribute database, and the corresponding security attribute information is updated according to the updated security attribute update value.

The apparatus further includes a circulation and log attribute recording module, which is used to record the circulation attribute information and log attribute information of the secret-related file at the corresponding record of the file identification of the secret-related file in the secret-related file identification attribute database.

The invention enables the whole life cycle of the secret-related document to be effectively protected by the secret-level identification.

Description of drawings

FIG. 1 is a flowchart of a method for managing a security level identification provided by an embodiment of the present invention;

FIG. 2 is a flowchart of a method for generating and adding a secret level identifier of a secret-related file provided by an embodiment of the present application;

3 is a flowchart of a method for accessing or using a confidential file provided by an embodiment of the present invention;

4 is a flowchart of a method for updating security attribute information in an identification attribute of a confidential file provided by an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a security level identification management apparatus provided by an embodiment of the present invention.

Detailed ways

The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

Fig. 1 is the flow chart of the security level identification management method provided by the embodiment of the present invention, and its concrete steps are as follows:

Step 101: The secret-level identification management center receives a secret-related document approval request sent by a secret-related computer. The request carries secret-related documents and secret-related documents pending approval information. The secret-related document pending approval information includes: content attributes of secret-related documents information and security attribute information.

Step 102: The security-level identification management center provides the information to be approved to the console, so that it can be approved by an approver with approval authority specified in the console.

Step 103: The secret-level identification management center receives the approval instruction sent by the console, and sends a secret-level identification generation request to the console, so that the console can generate a unique file identification for the secret-related file, and the console generates the secret-level identification for the secret-related file. The file identification, content attribute information and security attribute information are stored in the identification attribute database of classified files.

Step 104: The secret-level identification management center receives the file identification sent from the console, and encrypts the secret-related file according to the encryption algorithm corresponding to the secret level of the secret-related file in the security attribute information of the secret-related file, and encrypts the encrypted secret-related file. Hash operation is performed on the secret file, the hash operation result value and the file identifier of the secret file are combined to form the identification index of the secret file, and the identification index is added before the header of the secret file to obtain the final secret file.

FIG. 2 is a flowchart of a method for generating and adding a secret level identification of a secret-related file provided by an embodiment of the present application, and the specific steps are as follows:

Step 201: The user creates a secret-related file on the secret-related computer installed with the terminal agent.

The terminal agent is a software module specially dealing with matters related to confidential documents.

The identity information of secret-level users who can perform operations related to secret-related files is pre-stored on the secret-related computer. Before logging in to the secret-related computer, secret-level users need to perform identity verification.

The confidential file at this time is just an unencrypted ordinary file.

Step 202: After the secret-related file is created, the terminal agent sends a secret-related file approval request to the secret-level identification management center, and the request carries the secret-related file, pending approval information of the secret-related file, and a user ID.

The pending approval information of the secret-related file includes: content attribute information and security attribute information of the secret-related file.

The content attribute information includes: an indication that the file is ciphertext, the file creator, the file creation time, and the file validity period and other information.

The security attribute information includes: the security level of the file, the security level of the user or terminal accessing the file, the access and usage authority of the user or/and the terminal to the file (such as: read, write, print, download, etc., and read, write, print, download, etc. number of times) etc.

The secret level user assigns the secret level to the secret file according to the file content and the secret level of the user.

The secret-level user should encrypt the secret-related files and the information to be approved according to the default encryption, signature algorithm and key of the user's secret level, and then send it in the approval request of the secret-related file to ensure that the content of the secret-related file is consistent with the pending approval. Information security.

Step 203: The security level identification management center receives the approval request for confidential documents sent by the terminal agent, finds the corresponding user security level in the user information database according to the user ID in the request, and, according to the decryption algorithm corresponding to the user security level, interprets the secret level in the request. The secret-related files and the information to be approved are decrypted, and the integrity of the decrypted secret-related files is verified. After the verification is passed, the legality of the creator of the file is verified.

Step 204: After the secret-related file has passed the integrity check and the legal verification of the file creator, the secret-level identification management center determines to enter the secret-related file approval procedure, and provides the information to be approved to the console, and the approval authority specified by the console has the approval authority. Personnel proceed with approval.

Step 205: After the approval is passed, the console returns the approval approval instruction and the approved information (content attribute information and security attribute information) to the secret-level identification management center, and the secret-level identification management center sends a secret-level identification generation request to the console. The request includes: Approval and approval information for classified documents.

Step 206: after receiving the secret-level identification generation request, the console generates a unique file identification (File ID) for the secret-related file, and returns the File ID and the security attribute information of the secret-related file to the secret-level identification management center; , the console stores the content attribute information and security attribute information of the secret-related file in the secret-related file identification attribute database, and uses the File ID as an index.

Step 207: After receiving the File ID and the security attribute information of the secret-related file sent by the console, the secret-level identification management center encrypts the secret-related file according to the encryption algorithm corresponding to the secret level of the secret-related file, and encrypts the encrypted secret-related file. Hash operation is performed on the file, and the result value of the hash operation and the File ID of the confidential file are combined to form the identification index of the confidential file, and the identification index is added to the header of the confidential file, and then the preset digital signature algorithm and encryption are used. Digitally sign the secret-related file with the key to obtain the final secret-related file, save the digital signature algorithm and key to the corresponding record of the File ID in the secret-related file identification attribute database, and send the identification index of the secret-related file to the terminal agent , the terminal agent saves the correspondence between the file name and the identification index of the confidential file; at the same time, the confidential identification management center records the flow attribute information and log attribute information of the entire process in the corresponding record of the File ID in the identification attribute database of the confidential file.

The secret-level identification is divided into two parts: identification index and identification attribute. The identification index follows the secret-related file and circulates in the secret-related system, while the complete identification attribute (including: content attribute, security attribute, circulation attribute and log attribute) is stored in the database. middle. Therefore, in order to read the identification attributes corresponding to the confidential files one-to-one, the identification index must be obtained first, and then the corresponding identification attribute in the identification attribute database of the confidential file must be searched according to the File ID in the identification index.

3 is a flowchart of a method for accessing or using a confidential file provided by an embodiment of the present invention, and the specific steps are as follows:

Step 301: The user logs in to the secret-related computer, inputs identity information for identity authentication, and the identity authentication is passed, and the user successfully logs in to the secret-related computer.

Step 302: The terminal agent of the secret-related computer receives the access or use request input by the user that carries the file name of a secret-related file, and the terminal agent, according to the file name, stores the correspondence between the file name and the identification index of each secret-related file. Find the corresponding identification index in the relationship, verify the integrity of the identification index, if the identification index is complete, obtain the File ID from the identification index, carry the File ID and user ID in the access or use request of the confidential file and send it to the confidential identification control center.

Step 303: The security level identification management center receives the confidential file access or use request sent by the terminal agent, parses out the File ID and the user ID, searches its own user information database according to the user ID, obtains the user security level, and searches for the confidential file according to the File ID. The file identification attribute database is used to find the identification attribute of the confidential file.

Step 304: The security level identification management center judges whether the user can access or use the secret-related file according to the obtained secret level of the user and the security attribute information in the identification attribute of the secret-related file; The content attribute information in the identification attribute determines whether the secret-related file is ciphertext. If it is ciphertext, decrypt and open the secret-related file according to the security attribute information in the identification attribute of the secret-related file for the user to access or use.

Step 305 : the secret-level identification management center updates the access or use times in the security attribute information of the secret-related file in the secret-related file identification attribute database, that is, decrements the access or use times by 1.

The identification attribute information in the secret-level identification can be dynamically changed, especially the circulation attribute information and log attribute information, which record the circulation process of secret-related files and the logs generated by users' operations on secret-related files. The process is constantly changing, and this part of the information is directly updated by the security level identification management center. If the security attribute information in the identification attribute of the confidential file needs to be changed, it must be approved by the approver, and can be updated only after the approval is passed.

4 is a flowchart of a method for updating security attribute information in an identification attribute of a confidential file provided by an embodiment of the present invention, and the specific steps are as follows:

Step 401: When the user needs to change any security attribute information in the identification attribute of the confidential file, the terminal agent sends a security attribute information change request to the confidential identification management center, and the request carries the File ID of the confidential file and the information to be updated. Security attribute name and update value.

Step 402: The security attribute information change request is received by the security level identification management center, and the FileID in the request, the name of the security attribute to be updated, and the updated value are provided to the console, and the approval personnel with the approval authority specified by the console conducts the approval.

Step 403: After the approval is passed, the console returns the approval instruction and the approval information to the security-level ID management center, and the security-level ID management center sends the approval instruction and the approval information to the terminal agent; at the same time, the console according to the File ID The corresponding record is found in the identification attribute database of the confidential file, and the corresponding security attribute information is updated according to the updated security attribute name and the updated value.

The beneficial technical effects of the present invention are as follows:

The invention can effectively manage the generation, addition and update of secret-level identification and the access and use of secret-related files, ensure the integrity of secret-level identification, and can correctly record the log information of secret-related file generation, use, circulation, update and deletion, etc. , so that the classified documents can be effectively protected by the classified identification in the whole life cycle.

5 is a schematic structural diagram of a security-level identification management device provided by an embodiment of the present invention, the device is located on a security-level identification management center, and the device mainly includes: an approval processing module 51 and an identification generation module 52, wherein:

The approval processing module 51 is configured to receive a request for approval of a secret-related document sent by a secret-related computer, the request carrying the secret-related document and the pending approval information of the secret-related document, and the pending approval information of the secret-related document includes: Content attribute information and security attribute information; provide the information to be approved to the console for approval by the approvers with approval authority specified by the console; send the approval instruction and approval information sent from the console to Identification generation module 52 .

The identifier generation module 52 is configured to send a secret-level identifier generation request to the console after receiving the approval approval instruction sent by the console, so that the console can generate a unique file identifier for the classified file, and the console will generate a unique file identifier for the classified file. The file identification, content attribute information and security attribute information of the confidential file are stored in the identification attribute database of the confidential file; after receiving the file identification sent from the console, according to the security attribute information of the confidential file, the security attribute information of the confidential file corresponds to the classification level of the confidential file. Encryption algorithm, encrypts secret-related files, performs hash operation on encrypted secret-related files, combines the hash operation result value and the file identification of secret-related files to form the identification index of secret-related files, and adds the identification index to the identification index. Before reaching the header of the confidential document, the final confidential document is obtained.

Wherein, the identification generation module 52 can further use the identification index to be further used to digitally sign the secret-involved file by using a preset digital signature algorithm and key before and after the header of the confidential-involved file and before the final confidential-involved file is obtained.

Wherein, the identification generation module 52 can be further used to add the identification index to the header of the secret-related file and send the identification index of the secret-related file to the secret-related computer, so that the secret-related computer can save the file name of the secret-related file and the identification index of the secret-related file. Correspondence;

Moreover, the device may further include an access and use processing module, which is used to receive a confidential file access or use request from a confidential computer. The request carries a file identifier and a user identifier, and searches its own user information database according to the user identifier, and obtains the request. User secret level, according to the file identification, look up the identification attribute database of the secret-related file, and find the security attribute information of the secret-related file; according to the obtained user's secret level and the security attribute information of the secret-related file, determine whether the user can access or use the secret-related file. Secret-related files, if possible, decrypt and open the secret-related files according to the security attribute information of the secret-related files. , find the corresponding identification index according to the file name, and obtain the file identification from the identification index.

Wherein, the approval processing module 51 can be further configured to receive a security attribute information change request sent by a secret-related computer, and the request carries the file identifier of the secret-related file, the name of the security attribute to be updated, and the update value, and the file identifier and the required The updated security attribute name and updated value are provided to the console, and approved by the approvers with approval authority specified by the console; the approval approval instruction sent by the console is received, and the approval approval instruction is returned to the secret computer. After approval, the corresponding security attribute information is found in the confidential file identification attribute database according to the file identification and the name of the security attribute to be updated, and the corresponding security attribute information is updated according to the updated security attribute update value.

Wherein, the device may further include a circulation and log attribute recording module, which is used to record the circulation attribute information and log attribute information of the secret-related file in the corresponding record of the file identification of the secret-related file in the secret-related file identification attribute database.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the present invention. within the scope of protection.

Claims (10)

1. a method for managing secret-level identification, characterized in that the method comprises: The secret-level identification management center receives a secret-related document approval request from a secret-related computer, and the request carries secret-related documents and secret-related documents pending approval information. The secret-related document pending approval information includes: content attribute information of secret-related documents and security attribute information; provide the to-be-approved information to the console, so that it can be approved by an approver with approval authority specified by the console; The secret-level identification management center receives the approval instruction sent by the console, and sends a secret-level identification generation request to the console, so that the console generates a unique file identification for the secret-related file, and the console generates the file identification of the secret-related file and Content attribute information and security attribute information are stored in the database of identification attributes of classified files; The secret-level identification management center receives the file identification sent from the console, and encrypts the secret-related file according to the encryption algorithm corresponding to the secret-level of the secret-related file in the security attribute information of the secret-related file, and encrypts the encrypted secret-related file. Hash operation, combining the hash operation result value and the file identification of the secret-related file to form the identification index of the secret-related file, and adding the identification index to the header of the secret-related file to obtain the final secret-related file. 2. The method according to claim 1, wherein the adding the identification index before and after the header of the secret-related file and before obtaining the final secret-related file further comprises: Use preset digital signature algorithm and key to digitally sign confidential documents. 3. The method according to claim 1, wherein the adding the identification index to the header of the confidential file further comprises: The secret-level identification management center sends the identification index of the secret-related file to the secret-related computer, so that the secret-related computer can save the corresponding relationship between the file name and the identification index of the secret-related file, so that the secret-related computer can carry a secret-related file when it receives the input from the user. When accessing or using the file name, the corresponding identification index is found according to the file name, and the file identification is obtained from the identification index; The secret-level identification management center receives a request for accessing or using secret-related files from a secret-related computer. The request carries the file identification and user identification, searches its own user information database according to the user identification, obtains the user secret level, and searches for secret-related files according to the file identification. Identify the attribute database and find the security attribute information of the confidential file; The security level identification management center determines whether the user can access or use the confidential file according to the obtained security level of the user and the security attribute information of the confidential file. If so, decrypt and open it according to the security attribute information of the confidential file. Confidential documents. 4. The method according to claim 1, wherein after obtaining the final secret-related document, the method further comprises: The secret-level identification management center receives the security attribute information change request sent by the secret-related computer. The request carries the file identification of the secret-related file, the name of the security attribute to be updated, and the update value, and the file identification, the name of the security attribute to be updated, and the updated value. The value is provided to the console and approved by the approver with approval authority specified by the console; The secret-level identification management center receives the approval instruction sent by the console, and returns the approval instruction to the secret-related computer. The corresponding security attribute information is found, and the corresponding security attribute information is updated according to the updated security attribute update value. 5 . The method according to claim 1 , wherein the method further comprises: the secret-level identification management center records the flow attribute information and log attribute information of the secret-related file in the secret-related file identification attribute database of the secret-related file. 6 . The file ID corresponds to the record location. 6. A security level identification management device, characterized in that the device comprises: The approval processing module is used to receive a request for approval of a confidential document sent by a confidential computer, the request carrying the confidential document and the pending approval information of the confidential document, and the pending approval information of the confidential document includes: the content of the confidential document attribute information and security attribute information; provide the information to be approved to the console, so that it can be approved by an approver with approval authority specified by the console; The identifier generation module is used to send a secret-level identifier generation request to the console after receiving the approval instruction sent by the console, so that the console can generate a unique file identifier for the secret-related file, and the console will generate a unique file identifier for the secret-related file. The file identification, content attribute information and security attribute information of the file are stored in the identification attribute database of secret-related files; after receiving the file identification sent from the console, according to the encryption level corresponding to the secret-level of the secret-related file in the security attribute information of the secret-related file Algorithm, encrypt the secret-related file, perform hash operation on the encrypted secret-related file, combine the hash operation result value and the file identification of the secret-related file to form the identification index of the secret-related file, and add the identification index to the Before the header of the confidential document, the final confidential document is obtained. 7. The device according to claim 6, wherein the identification generation module is further used to add the identification index to the header of the secret-related file before and after obtaining the final secret-related file, Use preset digital signature algorithm and key to digitally sign confidential documents. 8. The device according to claim 6, wherein the identification generation module is further used for adding the identification index to the header of the secret-related file, Send the identification index of the secret-related file to the secret-related computer, so that the secret-related computer can save the corresponding relationship between the file name and the identification index of the secret-related file; In addition, the device further includes an access and use processing module, which is used to receive a confidential file access or use request from a confidential computer. The request carries a file identifier and a user identifier, and searches its own user information database according to the user identifier, and obtains the request. User secret level, according to the file identification, look up the identification attribute database of the secret-related file, and find the security attribute information of the secret-related file; according to the obtained user's secret level and the security attribute information of the secret-related file, determine whether the user can access or use the secret-related file. Secret-related files, if possible, decrypt and open the secret-related files according to the security attribute information of the secret-related files. , find the corresponding identification index according to the file name, and obtain the file identification from the identification index. 9. The apparatus according to claim 6, wherein the approval processing module is further configured to: Receive a security attribute information change request from a secret-related computer, the request carries the file identifier of the secret-related file, the name of the security attribute to be updated, and the update value, and provide the file identifier, the name of the security attribute to be updated, and the update value to the control. The approval is carried out by the approver with approval authority specified by the console; the approval instruction sent from the console is received, and the approval instruction is returned to the secret computer. The corresponding security attribute information is found in the confidential file identification attribute database, and the corresponding security attribute information is updated according to the updated security attribute update value. 10. The device according to claim 6, characterized in that, the device further comprises a circulation and log attribute recording module, which is used to record the circulation attribute information and log attribute information of the confidential file in the identification attribute database of the confidential file The file identifier of the confidential file corresponds to the record location.