WO2014196701A1 - Apparatus and method for changing icon of security folder - Google Patents

Abstract

An apparatus for changing an icon of a security folder is disclosed. A storage unit stores and manages data identification information, which is control information, by a file system filter. When a folder configuring file in a file system is accessed, an identification unit identifies a target process and an access folder. A virtual folder configuring data generation unit generates a virtual folder configuring file buffer by copying a template file or merging a folder configuring file. When one request from among requests for reading, writing, and file-size-inquiring of a handle to be filtered is input, a handling unit determines, using information on an inner data buffer, whether the handle is to be virtualized, and processes the handle. When a virtual folder configuring file buffer is subjected to a writing operation, a data flushing unit flushes modification made by the writing operation to the folder configuring file.

Description

Device and method of changing icon in secure folder

The present invention relates to an apparatus and method for changing an icon of a secure folder, and more particularly, to an apparatus and method for changing an icon of a secure folder that can change an icon of the secure folder to be distinguishable from other folders.

The existing method of changing the folder icon of the Microsoft Windows operating system (hereinafter referred to as 'OS') is to change the folder icon using folder setting files such as Icon Overlay Handler (IOH) and Desktop.ini file.

First, IOH is an in-process Component Object Model (COM) object, implemented as a DLL. The IshellIconOverlayUdentifier interface is exposed to the outside, and this interface must provide three methods:

IShellIconOverlayIdentifier :: GetOverlayInfo

IShellIconOverlayIdentifier :: GetPriority

IShellIconOverlayIdentifier :: IsMemberOf.

IOH technology provides the ability to draw a separate icon over the icon of an existing file / folder. By adjusting the transparency of overlapping icons, you can overwrite completely different icons, or add additional images to existing icons. However, the IOH technology causes a race condition when multiple IOHs need to be applied to one file / folder so that only one icon is applied. Since one IOH object can set only one icon, it must support several IOH objects when it needs to support several icons. The maximum number of IOHs supported by the OS is limited to 15, and the maximum number of IOHs available is 13 except for the IOH that is basically used by the OS.

Next, Desktop.ini is a configuration file that can be used to specify folder icons, display delete notifications, and specify folder tooltips, and has 'system' and 'hidden' properties. You can change the icon by specifying the icon to be displayed when the folder is displayed in Desktop.ini. If multiple programs or users specify a folder icon, only the last modified information is reflected. That is, there is a drawback that you cannot specify multiple icons.

In this regard, Korean Patent Laid-Open No. 10-2008-7005814 (network connection and wireless status in the notification area) shows different images of icons to display different types / states of connections and different types of media connections. In addition, the present disclosure discloses a technology for transmitting network connection information through a single notification area icon. In addition, Korean Patent Laid-Open Publication No. 10-2010-0003584 (portable terminal and its operation control method) displays at least one icon corresponding to a terminal capable of short-range wireless communication and displays at least one icon displayed on the display unit. If is selected, a method of pairing with a terminal corresponding to the selected icon is performed, and changing and displaying a shape of the selected icon according to the capability of the paired terminal is disclosed.

An object of the present invention is to provide an apparatus and method for changing an icon of a secure folder that can dynamically change an icon of a specific folder only when a program is executed, and can prevent a folder icon from being changed due to an arbitrary modification of desktop.ini. There is.

Another technical problem to be solved by the present invention is to change the icon of a specific folder dynamically only when the program is executed, and to change the icon of a secure folder that can prevent the change of the folder icon according to an arbitrary modification of desktop.ini on a computer. A computer readable recording medium having recorded thereon a program for execution is provided.

A first embodiment of an apparatus for changing an icon of a secure folder according to the present invention for achieving the above technical problem comprises: a storage unit for storing and managing data identification information which is control information by a file system filter; An identification unit for identifying a target process and an access folder when access is made to a folder setting file in the file system; A virtual folder setting data generation unit for copying a template file or generating a virtual folder setting file buffer through a merge of the folder setting file; A handling unit configured to identify and process a virtualization target by using information of an internal data buffer when a request for any one of reading, writing, and file size inquiry is input to the filtering target handle; And a data flushing unit configured to flush the contents modified by the writing operation to the folder configuration file when a write operation is performed on the virtual folder configuration file buffer.

In accordance with another aspect of the present invention, there is provided a device for changing a security folder icon according to the present invention, comprising: a storage unit storing and managing data identification information, which is control information, by a file system filter in a dynamic data structure; An identification unit for identifying whether to control the target process and the access folder when access to the folder setting file in the file system is made; A virtual folder setting file generation unit generating a virtual folder setting file through a method which is previously set when the target process and the access folder are identified as the control target by the identification unit; And a data flushing unit configured to flush the contents modified by the writing operation to the existing folder setting file when a write operation is performed on the virtual folder setting file.

In accordance with another aspect of the present invention, there is provided a method of changing an icon of a secure folder according to an embodiment of the present invention. Identifying a target process and an access folder when access to the file is made; (b) creating a virtual folder configuration file buffer by copying a template file or by merging the folder configuration file; (c) identifying and processing a virtualization target using information of an internal data buffer when any one of a read, write, and file size inquiry is input to the filtering target handle; And (d) flushing the contents modified by the write operation to the folder configuration file when a write operation is performed on the virtual folder configuration file buffer.

According to a second embodiment of a method of changing an icon of a secure folder according to the present invention for achieving the above technical problem, an icon changing method performed by an icon changing apparatus of a secure folder includes: (a) a folder setting file in a file system; Identifying whether to control the target process and the access folder when access is made to the target process and the access folder; (b) if the target process and the access folder are identified as the control target, generating a virtual folder setting file through a method previously set; And (c) when a write operation is performed on the virtual folder configuration file, flushing the contents modified by the write operation to an existing folder configuration file.

The computer-readable medium according to the present invention for achieving the above another technical problem records a program for executing any one of the above methods in a computer.

According to the apparatus and method for changing an icon of a secure folder according to the present invention, an icon of a specific folder can be dynamically changed only when a program is executed, and a change of a folder icon according to modification of an arbitrary folder setting file can be blocked. Furthermore, the final state of the folder setting file can be preserved regardless of the program operation or stop state.

1 is a view showing a basic structure for changing a conventional icon,

2 is a diagram illustrating a file bypass algorithm based on a file system filter in which a method of changing an icon of a secure folder according to the present invention is implemented;

3 is a block diagram showing the configuration of an apparatus for changing an icon of a secure folder according to an embodiment of the present invention;

4 is a diagram illustrating a state in which data identification information is stored as a dynamic data structure according to an embodiment of the present invention;

5 is a diagram illustrating a process of generating identification information about a process of accessing a desktop.ini file according to an embodiment of the present invention;

6 illustrates a process of generating a virtual data buffer according to an embodiment of the present invention;

7 is a diagram illustrating an API control process related to read / write / file size of a desktop.ini file according to an embodiment of the present invention;

8 is a diagram illustrating a process of storing an original desktop.ini file when a close file I / O request is generated and identical to identification information stored in a data table according to an embodiment of the present invention;

9 is a block diagram showing the configuration of an apparatus for changing an icon of a secure folder according to another embodiment of the present invention;

10 is a view showing a state in which data identification information is stored in a dynamic data structure according to another embodiment of the present invention;

11 is a diagram illustrating a process of generating identification information for a process of accessing a desktop.ini file according to another embodiment of the present invention;

12 illustrates a process of generating a virtual data buffer according to another embodiment of the present invention;

FIG. 13 is a diagram illustrating a process of storing an original desktop.ini file when the close file I / O request is generated or when the process is the same as identification information stored in a data table according to another embodiment of the present invention.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the apparatus and method for changing the icon of the secure folder according to the present invention.

Both the existing IOH and the technology using the folder configuration file (e.g. Desktop.ini), the techniques for specifying the icon of the folder described above, cannot specify duplicate icons for a single folder, especially for IOH. It has a disadvantage that is difficult to do. Accordingly, the apparatus and method for changing an icon of a secure folder according to the present invention process virtual desktop.ini data in a user level application based on a file system filter technology as shown in FIG. 2. I suggest two ways to do this.

Referring to FIG. 1, which shows a basic structure of a conventional icon change, the explorer checks whether a desktop.ini file exists in a folder when the folder is displayed on the screen, and checks the information in the file if the file exists. The information is retrieved and displayed on the screen.

3 is a block diagram showing the configuration of an icon change apparatus 100 of a secure folder according to an embodiment of the present invention. Referring to FIG. 3, the icon change apparatus 100 of the secure folder according to the present invention includes a storage unit 110, an identification unit 120, a virtual desktop.ini data generation unit 130, a handling unit 140, and data. The flushing unit 150 is included.

The storage unit 110 stores and manages data identification information, which is control information, in a dynamic data structure by a file system filter. That is, a file system filter stores / manages control information in a dynamic data structure as shown in FIG.

The identification unit 120 identifies whether the target process and the access folder are controlled when access to the desktop.ini file in the file system is made. This process stores the handle of the desktop.ini file in the internal handle table, which requires filtering for only certain processes (or all processes). Here, the control target identifies a process (eg, an explorer, an office, etc.) that has accessed the desktop.ini file to determine whether to virtualize the desktop.ini. In addition, the identification method identifies the process by the name of the target process, and in the case of a file, identifies the file name. In particular, whether the process requires control is determined as a process to be controlled when the process is accessed to open the desktop.ini and display a folder icon. That is, when explorer.exe accesses desktop.ini, it is controlled. However, when explorer.exe accesses abc.docx, it is not controlled because desktop.ini is not accessed. Furthermore, when accessing desktop.ini from service.exe., It is not controlled because it is a process that requires no control.

Referring to FIG. 5, a process of generating identification information about a process of accessing a desktop.ini file can be seen. When an input or output I / O (I / O) request for the desktop.ini file is entered in any user-level process, the file system first processes the input / output (I / O) request. If an input / output (I / O) request processed by the file system is successful, the file system filter determines whether to control the generated or open input / output (I / O) request. To identify. That is, it identifies whether the called target process is included in the controlled process list, whether the file attempted to create or open is the desktop.ini file, or whether the folder to be created or opened is the virtualization target. Here, the virtualization target refers to a target to be virtualized, which means to change a folder icon. As a result, when it is confirmed as the control target, new data identification information is generated in the internal data table. The list of process to be controlled is pre-stored in the form of a file list. In this case, the list of processes to be controlled may be stored separately in the local database unit, and the list is loaded when the file system filter program is started. In addition, whether or not the folder being created or opened is a virtualization target is identified by a file path. For example, if the virtualization target folder is C: \ securefolder, accessing C: \ securefolder \ desktop.ini It is a target, but accessing C: \ normalfolder \ desktop.ini is not a target for virtualization.

The virtual desktop.ini data generation unit 130 generates virtual desktop.ini data by copying a template file or merging the desktop.ini file. In detail, the virtual desktop.ini data is generated in a unit of process or, when applied equally to all processes, uses a single buffer and is connected with data identification information. That is, referring to FIG. 6, the virtual desktop.ini data generation is generated by assigning a dynamic variable such as a path to a pre-created template or by using an icon based on information of an existing desktop.ini file. It can be created in two ways, replacing only the information necessary for identification and storing it.

The handling unit 140 reads or writes a file to be filtered, handles a file size query, or receives a file size change processing request. It handles functions for buffers and does not pass or receive information to the actual file system. If it is not a handle to be filtered, the file system filter does not work and passes the processing to the file system.

7 illustrates an API control process related to read / write / file size of the desktop.ini file. Referring to FIG. 7, when an I / O request related to read / write / file size is input, it is checked whether a handle of a file passed as an argument exists in an internal data table. At this time, since the handle that does not exist in the data table is not a virtualization target, the handle is transferred to a file system as it is. On the other hand, since the handle present in the data table is a virtualization target, the file system filter handles I / O processing and prevents file system calls from occurring. At this time, all the results processed by the file system filter use the buffer in the data table and exist only in memory (or temporary files).

When the data flushing unit 150 performs a write operation on the desktop.ini file buffer, the contents modified by the write operation are flushed or ignored by the original desktop.ini file. When a write operation occurs in the file to be controlled, the buffer to be written is stored in a data table. Therefore, the above-described buffer is a buffer of the original original, not a pre-prepared buffer to be virtualized, and is stored in a data table to store the original data when the control target file is closed.

8 illustrates a process of storing an original desktop.ini file when a close file I / O request occurs and is identical to identification information stored in a data table. Referring to FIG. 8, when a release request for a file occurs, it is checked whether a handle of the file passed as an argument exists in the data table. Handles that do not exist in the data table are not subject to virtualization, so pass them back to the file system. On the other hand, since the handle present in the data table is a virtualization target, the file system filter transfers the handle to the file system after completing the preprocessing. At this time, if the internal buffer is updated and the desktop.ini file information changed to the file system is processed to be flushed, writing to the file system is performed by the file system filter. . When this process is complete, the information about the handle is removed from the data table.

That is, when the desktop.ini file buffer is changed, the data flushing unit 150 executes a write operation to the desktop.ini file which is the original file when the handle is closed, or when the desktop.ini file buffer is changed, When it occurs, the write operation is executed to the original file, desktop.ini file.

 9 is a block diagram illustrating a configuration of an apparatus 200 for changing an icon of a secure folder according to another embodiment of the present invention. Referring to FIG. 9, the icon changing apparatus 200 of the secure folder according to the present invention may include a storage unit 210, an identification unit 220, a virtual desktop.ini file generation unit 230, and a data flushing unit 240. Include.

The storage unit 210 stores and manages data identification information, which is control information, in a dynamic data structure by a file system filter. That is, a file system filter stores / manages control information in a dynamic data structure as shown in FIG.

The identification unit 220 identifies whether the target process and the access folder are controlled when access to the desktop.ini file in the file system is made. Through this process, the virtual desktop.ini file information can be provided only for a specific process (or entire process), and the same for a specific folder (or entire folder).

Referring to FIG. 11, a process of generating identification information about a process of accessing a desktop.ini file can be seen. When a create or open input / output (I / O) request for the desktop.ini file is entered by any user-level process, the file system filter generates a create or open input / output (I / O) request that occurred. Identifies whether or not to control. That is, it identifies whether the called target process is included in the controlled process list, whether the file attempted to create or open is the desktop.ini file, or whether the folder to be created or opened is the virtualization target. As a result, the call is passed directly to the file system if it is not under control. On the other hand, if it is determined to be controlled, the path of the I / O (Input / Output) argument is repared to the path of the desktop.ini file existing in another location. If the file does not exist in the modified path, you can create a new desktop.ini file. In addition, new data identification information is generated in an internal data table.

The virtual desktop.ini file generator 230 generates a virtual data buffer through a predetermined method. The virtual desktop.ini file is created on a per-process basis, or when used equally for all processes, uses a single file and is associated with data identification information. Specifically, referring to FIG. 12, three examples of virtual file creation methods are given. First, create a desktop.ini file in a new location via the Windows API, or create a desktop.ini file by entering dynamic information such as a path in the desktop.ini template, or in a folder already under control. You can create desktop.ini file by changing folder icon information among existing desktop.ini file contents.

When the data flushing unit 150 performs a write operation on the virtual desktop.ini file, the content modified by the write operation is flushed or ignored by the original desktop.ini file. FIG. 13 illustrates a process of storing an original desktop.ini file when a close file I / O request is generated or when the process is terminated and is identical to identification information stored in a data table.

Referring to FIG. 13, when a release request for a file occurs, it is checked whether a handle of the file passed as an argument exists in the data table. Handles that do not exist in the data table are not subject to virtualization, so pass them back to the file system. On the other hand, since the handle present in the data table is a virtualization target, the file system filter transfers the handle to the file system after completing the preprocessing. At this time, if the virtual desktop.ini is updated and processed to flush the changed desktop.ini file information to the file system, the virtual desktop.ini file is overwritten with the actual desktop.ini file. When this process is complete, the information about the handle is removed from the data table.

That is, when the desktop.ini file buffer is changed, the data flushing unit 150 executes a write operation to the desktop.ini file which is the original file when the handle is closed, or when the desktop.ini file buffer is changed, When it occurs, the write operation is executed to the original file, desktop.ini file.

Therefore, the method for changing the icon of the secure folder according to the present invention can dynamically change the icon of a specific folder only when the program is executed, and block the change of the folder icon according to any modification of the desktop.ini file. Furthermore, the final state of the desktop.ini file can be preserved regardless of whether the program is running or stopped.

The invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and may also be implemented in the form of a carrier wave (transmission through the Internet). The computer-readable recording medium may also be distributed over computer systems connected through wired and wireless communication networks so that the computer-readable code may be stored and executed in a distributed manner.

Although the preferred embodiments of the present invention have been shown and described above, the present invention is not limited to the specific preferred embodiments described above, and the present invention belongs to the present invention without departing from the gist of the present invention as claimed in the claims. Various modifications can be made by those skilled in the art, and such changes are within the scope of the claims.

Claims (17)

A storage unit for storing and managing data identification information which is control information by a file system filter; An identification unit for identifying a target process and an access folder when access is made to a folder setting file in the file system; A virtual folder setting data generation unit for copying a template file or generating a virtual folder setting file buffer through a merge of the folder setting file; A handling unit configured to identify and process a virtualization target by using information of an internal data buffer when a request for any one of reading, writing, and file size inquiry is input to the filtering target handle; And And a data flusher configured to flush the contents modified by the write operation to the folder configuration file when a write operation is performed on the virtual folder configuration file buffer. The method of claim 1, The identification unit, When a create or open I / O request for the folder configuration file is input in any user level process, the file system processes the I / O request, and the file system filter identifies whether to be controlled for the create or open I / O request. Device for changing the icon of the secure folder, characterized in that. The method of claim 2, The method for identifying whether to control is based on whether or not the called target process is included in the list of controlled processes, whether the created or opened file is a folder setting file, or the created folder. At least one of a method according to whether or not to be virtualized, And when the generating or opening I / O request is a control target, the identification unit stores a handle of a folder setting file that requires filtering in the target process in an internal data table. The method of claim 1, The virtual folder setting data generating unit generates data by generating dynamic data by assigning a dynamic variable to the template or by replacing and storing information necessary for identifying the icon based on the information of the folder setting file. Icon change device. The method of claim 1, The handling unit checks whether a handle of the file exists in a data table when a read, write, or file size inquiry input / output request is input to the filtering target handle. If the handle does not exist in the data table, the handling unit transmits the input / output request to the file. And transmitting the input / output request to the file system filter if the handle exists in the data table. The method of claim 1, And the data flushing unit executes a write operation to the folder setting file which is an original file when the handle is closed when the folder setting file buffer is changed. The method of claim 1, And the data flushing unit executes a writing operation to the folder setting file which is an original file when a modification of the folder setting file buffer occurs at the end of a program. A storage unit for storing and managing data identification information, which is control information, by a file system filter in a dynamic data structure; An identification unit for identifying whether to control the target process and the access folder when access to the folder setting file in the file system is made; A virtual folder setting file generation unit generating a virtual folder setting file through a method which is previously set when the target process and the access folder are identified as the control target by the identification unit; And And a data flushing unit configured to flush the contents modified by the writing operation to an existing folder setting file when a write operation is performed on the virtual folder setting file. The method of claim 8, The identification unit, When a create or open I / O request for the folder setting file is input in an arbitrary user level process, the file system filter identifies whether to be controlled for the create or open I / O request. . The method of claim 9, The method of identifying whether the control target includes at least one of whether the called target process is included in the controlled target process list, whether the file created or opened is a folder setting file, or whether the folder created or opened is a virtualized target; Which one, If the create or open I / O request is a control target, modify a path among the I / O arguments to a folder setting path existing at another location, and if the folder setting file does not exist on the modified path, generate a new folder setting file, And a handle of the new folder setting file in an internal data table. The method of claim 8, The previously set method includes a method of generating a folder configuration file in a new location through the Windows API, a method of generating a folder configuration file by inputting dynamic information including a path in a folder configuration template, and a folder already present in the controlled folder. And a method for generating a folder setting file by changing and storing folder icon information among contents of the folder setting file. The method of claim 8, And the data flushing unit executes a write operation to the folder setting file which is an original file when the handle is closed when the folder setting file buffer is changed. The method of claim 8, And the data flushing unit executes a writing operation to the folder setting file which is an original file when a modification of the folder setting file buffer occurs at the end of a program. In the icon changing method performed by the icon changing device of the secure folder, (a) identifying a target process and an access folder if access is made to the folder configuration file in the file system; (b) creating a virtual folder configuration file buffer by copying a template file or by merging the folder configuration file; (c) identifying and processing a virtualization target using information of an internal data buffer when any one of a read, write, and file size inquiry is input to the filtering target handle; And (d) when the write operation is performed on the virtual folder configuration file buffer, flushing the contents modified by the write operation to the folder configuration file; . In the icon changing method performed by the icon changing device of the secure folder, (a) identifying whether to control the target process and the access folder when access is made to the folder setting file in the file system; (b) if the target process and the access folder are identified as the control target, generating a virtual folder setting file through a method previously set; And (c) if a write operation is performed on the virtual folder configuration file, flushing the content modified by the write operation to an existing folder configuration file. The method according to claim 14 or 15, (e) storing data identification information which is control information by a file system filter. A computer-readable recording medium having recorded thereon a program for executing the method of changing the icon of the secure folder according to claim 14 or 15.

Images