Patent ID: 7814552
Filing Date: 2010-10-12
Classification: G06F,H04L

Abstract:
1. An encryption system, comprising a server end and least one of user's ends; the encryption system is operative to record the whole writable action by the user's ends, and encrypt writable files by the user's ends to avoid information overflow from an entrusted network; the encryption system comprising: the server end for receiving and delivering information, organizing and managing information, storing a secure set and using records of the user's ends, and updating function to surely set data at the user's ends; and database of the server end, for providing one space to store data of the server end and other input data, and directly accessing the stored data; a managing interface module, for providing an managing interface to a system operator directly to request and manage the server; an active directory module, for receiving information of company members and department groups, and for restoring database of the server end through Lightweight Directory Access Protocol (LDAP); an interface of delivering and receiving information of the user's ends, for receiving information from the user's ends, restoring information into database of the server end, and delivering information from the server end; the user's ends, which are used for receiving transmitted information, writing an ordinary file and a secure file to encrypt the information by using a single machine through the secure set, the user's ends at least comprising: a database of the user's ends, for providing one space to store data of the user's ends and input data to directly access the data; a code function module, which is a protection mechanism to avoid unauthorized outflow of information from the user's ends, for examining difference between the ordinary file and the secure file through the secure set; an interface module of the user's ends, which is an interface used for reading a writable file after acquiring the secure set, encrypting the writable file to produce a secure file by using an encryption key; after sending the secure file to an output storage equipment, the interface module of the user's ends requests the code function module to pass the secure file; a delivering data module, for delivering the secure file to the output storage equipment when the secure file passes said code function module, and delivering the encryption key to database of the server; an external accessing data module, for recording the secure file on recording medium after receiving the secure file by the output storage equipment; and a delivering and receiving data interface of the user's ends, for receiving information of the server end, restoring into database of the user's ends, and delivering information from the user's ends.