TWI662436B - Method and system for managing computer sequences - Google Patents

Abstract

A computer program management method and system are proposed. The method is mainly executed in a terminal device subject to security control. A monitoring program executed in the terminal device monitors a computer program running in the terminal device according to a program safety data. The operation of the computer program does not comply with the program safety data, that is, an abnormal message is generated, so the abnormal message is transmitted to the security device, and the security device reports to the control center, and the terminal device can block the abnormal computer according to the abnormal message program.

Description

   Computer program management method and system   

The invention relates to a computer technology management technology, in particular to a computer energy sequence management method and system for performing notification when an abnormal computer program is detected.

In a security system that emphasizes security, any hazard can have serious consequences. In addition to the traditional personal security, home security and security on various facilities, which rely on the security system, the security system needs to prevent any threats to information security.

However, security systems based on computer systems may still face information security vulnerabilities, such as leakage of security data caused by improper human operations or virus infection, making the information security protection measures of the security system even more important.

In order to prevent the system from being abnormal due to security issues, and if the security system is threatened by security threats, it will cause greater harm. The disclosure of the present invention proposes a computer program management method, which mainly operates on terminal devices subject to security control. The terminal device is connected to a security device, the security device executes a master monitoring program, the terminal device executes a slave monitoring program, and the monitoring program monitors multiple computer programs executed in the terminal device according to a program safety data.

In one embodiment, when it is determined that the operation of a computer program in the terminal device does not conform to the program safety data, an abnormal message is generated, and the abnormal message is transmitted to a main monitoring program executed by the security device to execute a notification. Such as reporting to a control centre.

According to an embodiment, the security device may be a digital surveillance video recorder (DVR). When receiving the abnormal message, a camera may be activated to record live images. For terminal devices, internal programs can block computer programs determined to be abnormal based on abnormal messages. The program safety data is a computer program safety list for the corresponding terminal device, and the program safety data may be a safe operating condition for each computer program.

In one embodiment, the method operates in a computer program management system. The system is mainly a client-side security device connected to the control center, where a main monitoring program is executed, and a terminal device is connected to the security device by a communication connection. One from the monitoring program. After the monitoring program is executed by a processor of the terminal device, the computer program management method described above is executed.

In order to further understand the technology, methods and effects adopted by the present invention to achieve the intended purpose, please refer to the following detailed description and drawings of the present invention. It is believed that the purpose, features and characteristics of the present invention can be deepened and specific It is understood, however, the drawings are provided for reference and description only, and are not intended to limit the present invention.

10‧‧‧Internet

101,103‧‧‧security device

102,104‧‧‧Terminals

105‧‧‧Terminal Management Platform

12‧‧‧ Control Center

20‧‧‧Internet

22‧‧‧ Digital Surveillance Video Recorder

221‧‧‧Master monitoring program

222‧‧‧Control unit

223‧‧‧Network Unit

224‧‧‧Port

225‧‧‧I / O Unit

226‧‧‧Camera

24‧‧‧Terminal device

241‧‧‧ From the monitoring program

Steps S301 ~ S311‧‧‧ Computer program management process

Steps S401 ~ S413‧‧‧ Computer program management process

FIG. 1 shows an embodiment architecture diagram of a computer program management system of the present invention; FIG. 2 shows an embodiment diagram of a client device of a computer program management system of the present invention; FIG. 3 shows one of the flowchart embodiment diagrams of a computer program management method of the present invention; FIG. 4 shows the second embodiment of the flowchart of the computer program management method of the present invention.

The design of the security system usually has a control center, which is mainly used to manage the security equipment of each client. When receiving an exception notification, it can implement different security measures according to the security level of the incident, including instructing the operation of the client device and sending personnel to On-site processing. The client generally includes various security devices, such as the security host and various sensors, digital video recorders (DVRs) and cameras, or the security device is connected to the client's other terminal devices to perform control, such as Access control equipment, computer equipment, point of sale / service (POS) in the store, Kiosk, and even ATMs provided by bankers. In the computer program management system provided by the present invention, the master monitoring program executed on the security device and the slave monitoring program executed on the terminal device are further covered.

FIG. 1 is a structural diagram of an embodiment of a computer program management system according to the present invention.

This figure shows that a control center 12 is connected to various end security devices via the network 10, or can be connected by a dedicated line to connect, for example, the security device 101 and the terminal device 102 controlled by the security device 101, and the other end includes the security device 103 and the controlled Terminal device 104, which may belong to a terminal management platform 105. For example, the endpoint information server (POS), which is commonly found in stores, may be owned by its owner through another dedicated connection, or may have another POS management platform management.

Among them, the security devices 101 and 103 are devices connected between the control center 12 and the terminal devices 102 and 104, and can be, for example, a security host, the aforementioned digital surveillance video recorder, and a network gateway. The control center 12 is a security center, which can connect and manage multiple security devices.

The computer program management method provided by the present invention is operated in the control center 12, the security devices 101, 103, and the terminal devices 102, 104. Referring to FIG. 2, the embodiment of the client device of the computer program management system of the present invention is illustrated.

This illustration shows a client device. The embodiment shows a digital surveillance video recorder 22 and a terminal device 24. The digital surveillance video recorder 22 mainly uses the camera 226 to record the image of the monitored site. In addition to recording and storing, it can also be transmitted over the network. 20 teleports to the control center on the other end.

According to the embodiment, the main circuit blocks in the digital surveillance video recorder 22 include a control unit 222 for processing internal signals of the device, a network unit 223, a port 224, and an input / output unit 225 electrically connected to the control unit 222. The network unit 223 in the digital surveillance video recorder 22 processes data packets transmitted to and from the external network 20. In the embodiment of the digital surveillance video recorder 22, it mainly transmits image signals. The connection port 224 of the digital surveillance video recorder 22 often adopts a serial communication port to connect the controlled terminal device 24, such as industrial-standard communication connection technology such as RS-232. The advantage of this type of communication connection technology is that it does not use the specifications of the data network, is not easily invaded and destroyed, and data cannot be retrieved from the outside, but the actual implementation is not limited to this type of communication connection. The I / O unit 225 of the digital surveillance video camera 22 is used to connect one or more cameras 226 to perform signal control transmission and image reception.

According to the embodiment of the computer program management method of the present invention, the memory in the digital surveillance video recorder 22 carries a master monitoring program 221, and after the processor executes the main monitoring program 221, the slave monitoring program 241 executed by the terminal device 24 is secure. Message channel communication. During operation, the master monitoring program 221 can obtain the monitoring results from the slave monitoring program 241 at regular intervals, or the slave monitoring program 241 can actively send the monitoring results to the master monitoring program 221 through the secure message channel.

In the embodiment of the present invention, the terminal device 24 is connected to the security device by a communication connection. The digital surveillance video recorder 22 of this example is executed by the monitoring program 241 through a processor of the terminal device 24, as shown in FIG. 3 The embodiment procedure of the computer program management method.

Step S301 shows that before executing the general operation of the computer program management, the system defines a program safety data, such as a computer program safety list (or white list), which defines the computer program during the normal operation of the terminal device, such as the program of the resident receiver. , The program of the regular report security device, the program of the regular system repair, the hibernation and startup program in the device, etc. The safe operating conditions of each computer program can be further defined. The safe operating conditions described herein can define a safe operating range according to the properties of each computer program, which can prevent the computer program from being infected by a virus and causing abnormal operating conditions, such as Computer programs generally occupy only 10% of the processor's computing power and suddenly rise to 60%; or computer programs that abnormally occupy the data bandwidth can be judged as abnormal under the conditions of safe operation. The program safety data can be uniformly managed by the control center. According to the form and requirements of the terminal devices of each client, the program safety data can be formulated, and the program safety data can be distributed to each security device and can be transferred to each terminal device.

Step S303 describes the execution of the master monitoring program by the security device and the execution of the slave monitoring program by the terminal device. Then, in step S305, the execution of the monitoring program by the slave monitoring program monitors the inside of the terminal device from the monitoring program according to the program safety data corresponding to the terminal device. Multiple computer programs are executed, such as step S307, to determine whether there are abnormal computer programs. After comparing the program safety data, including comparing the computer program safety list or a safe operating condition of each computer program, if there is no abnormality (No), repeat step S305.

When it is found that the computer program executed in the terminal device has a computer program that is not listed in the computer program safety list, or it is determined that the computer program is on the computer program safety list but does not meet the safe operating conditions recorded in the program safety data, it is judged as Abnormal (Yes), that is, step S309 is executed to generate an abnormal message from the monitoring program, including driving the control program in the terminal device to block the computer program judged to be abnormal, or the control program in the terminal device to suspend the service corresponding to this program. Further to step S311, the embodiment may include generating a message to the control center when the abnormal monitoring message is received by the main monitoring program of the security device.

FIG. 4 illustrates a flowchart of an embodiment of a computer program management method using a digital surveillance video recorder as a security device.

In this process, after the terminal device executes the slave monitoring program, such as step S401, the program monitoring is performed in a resident manner, such as step S403. The monitoring method is mainly to perform comparison of the program safety data, such as step S405, to determine whether there is any Unknown computer programs listed in the computer program safety list in the program safety data, or there are computer programs in the list that do not meet the set safe operating conditions.

When it is judged that there is no abnormal program that does not match the program safety data (No), repeat step S401, otherwise, judge that there is an abnormal program (Yes), that is, execute step S407 to generate an abnormal message, and run the main monitoring program of the digital surveillance video recorder from the terminal device Obtain an abnormal message from the monitoring program in step S409, start the recording program of the digital surveillance video recorder, and start a camera to record the image.

After that, the image recording may be archived as described in step S411, or may be notified to the control center according to the abnormal message according to step S413. In another embodiment, if the terminal device itself is also connected to the terminal management platform to which it belongs, the related abnormal information may also be notified to the terminal management platform.

According to the computer program management method and system disclosed in the disclosure, the method mainly operates on terminal devices subject to security control. The system includes a terminal device set on the client and the connected security device. The security device executes a main monitoring program. The terminal The device executes a slave monitoring program, and the slave monitoring program monitors a plurality of computer programs executed in the terminal device according to a procedure safety data. It needs to be mentioned that the program safety data can be set up with different computer program safety lists for various terminal devices, or added with the safe operating conditions of each program.

However, the above is only the preferred and feasible embodiment of the present invention, and therefore does not limit the scope of the patent of the present invention. Therefore, the equivalent structural changes made by using the description and the illustrated content of the present invention are included in the present invention in the same way. Within the scope, joint Chen Ming.

Claims (8)

A computer program management method includes: monitoring a plurality of computer programs executed in a teller machine by a monitoring program executed on a teller machine according to a program safety data, wherein the program safety data records a computer program safety list corresponding to the teller machine, And a safe operating condition corresponding to each computer program, which is used to define multiple computer programs during the normal operation of the teller machine, and to determine whether there are unknown computer programs not listed in the computer program safety list; when judging the teller machine The operation of any computer program does not conform to the safety data of the program, that is, an abnormal message is generated; and the abnormal message is transmitted to a main monitoring program executed by a security device to perform a notification. The computer program management method according to claim 1, wherein the teller machine is a device controlled by the security device, and the teller machine is connected to the security device by a communication connection. The computer program management method according to claim 2, wherein the security device is a digital surveillance video recorder, and when receiving the abnormal message, a camera is started to record images. The computer program management method according to claim 3, wherein the security device is notified to a control center. The computer program management method according to claim 4, wherein the program safety data is formulated by the control center, and the program safety data is distributed to the security device and / or the teller machine. The computer program management method according to claim 1, wherein the teller machine blocks the computer program determined to be abnormal according to the abnormal message. A computer program management system includes: a security device connected to a control center, where a master monitoring program is executed; a teller machine, connected to the security device by a communication connection, wherein a slave monitoring program is executed, and the slave monitoring program and the A safety message channel is established between the master monitoring program via the communication connection, and the slave monitoring program is executed by a processor of the teller machine, and the following steps are performed: a. According to a procedure safety data, the slave monitoring program monitors the inside of the teller machine. A plurality of computer programs executed, wherein the program safety data records a computer program safety list corresponding to the ATM and a safe operating condition corresponding to each computer program, and is used to define the multiple computer programs during the normal operation of the ATM, and To determine whether there are unknown computer programs not listed in the computer program safety list; b. When it is determined that a computer program operation in the teller machine does not comply with the program safety data, an abnormal message is generated; c. The abnormal message is transmitted To the main monitoring program executed by the security device to execute a notification; and d. The cabinet Blocking unit according to the abnormality determination of the abnormal message is a computer program. The computer program management system according to claim 7, wherein the security device is a digital surveillance video recorder, and when receiving the abnormal message, a camera is started to record images.