Computer data protecting method

Abstract

This computer data protection method of the present invention requires a user to enter a correct password for modifying any data. If wrong passwords are typed, this method forbids modification of any program modules. Further, if any program module is detected having unauthenticated modification, that program module is deleted and an original image of that program module is loaded to recover normal operation of the operation system. Additionally, a common password is also provided in the protection method. Some special function can use this common password to pass the detection of this method to perform any modification.

1 . A computer data protecting method for protecting a computer system, said method comprising: 
 designing a monitor program with a common password for an operation system, wherein said monitor program monitors a plurality of program modules of said operating system;    after said operating system is installed, said monitor program allows a user to assign a user password;    asking said user to enter said user passwords when any modification/addition/deletion action is performed onto said program modules of said operating system; and    if said user passwords is missing, said monitor program forbids any modification/addition/deletion action to be performed onto said program modules.    
   
   
       2 . The method of  claim 1 , wherein said method further comprises arranging a special identification number to said computer system.  
   
   
       3 . The method of  claim 2 , wherein said computer can be traced through said special identification number when said computer is connected to Internet.  
   
   
       4 . The method of  claim 1 , wherein said method further comprises if said monitor program detects said program modules having unauthenticated modification, said monitor program deletes said program modules and loads the backup images of said program modules so as to recover said computer back to normal operation.  
   
   
       5 . The method of  claim 1 , wherein said method further comprises when said monitor program detects any modification/addition/deletion action with a common password, said modification/addition/deletion action is performed onto said program modules of said operating system.  
   
   
       6 . The method of  claim 1 , wherein said method further comprises spreading a copy function destroying virus with said common password in a recording digital media.  
   
   
       7 . The method of  claim 1 , wherein said method further comprises spreading a browse function destroying virus with said common password to a unauthenticated browser.  
   
   
       8 . The method of  claim 1 , wherein said monitor program scans the contents of said program modules periodically so as to detect if said program modules have unauthenticated modification.  
   
   
       9 . The method of  claim 1 , wherein said monitor program detects if said program modules have unauthenticated modification whenever said computer is started and before said operating system is loaded.  
   
   
       10 . The method of  claim 1 , wherein said monitor program intercepts a call from a file operation interface of said operating system, so as to detect when said program modules have been performed with any modification/addition/deletion action.  
   
   
       11 . The method of  claim 1 , wherein said monitor program determines if any modification/addition/deletion action by inspecting the file lengths of said program modules.  
   
   
       12 . The method of  claim 1 , wherein said monitor program determines if any modification/addition/deletion action occurs by inspecting the modification time of said program modules in comparison with the previously-authenticated modification time of said program modules.  
   
   
       13 . The method of  claim 1 , wherein said monitor program computes an index via a Hash function with respect to said program modules.  
   
   
       14 . The method of  claim 1 , wherein said monitor program are designed in advance with respect to different kinds of said operating system.  
   
   
       15 . An computer data protection method, comprising: 
 recording image files of a plurality of program modules in an operating system, wherein said operating system has a common password;    allowing a user to assign a user password;    monitoring if said program modules are modified and said modified action does not have said common password;    asking said user to enter said user password;    if said user passwords is missing, then the modification of said program modules is forbidden; and    when it is detected that said program modules have unauthenticated modification, said program modules that are not authentically modified are deleted, and replaced with said legal image files of said program modules, so as to revoke said operating system back to normal operation.    
   
   
       16 . The computer data protection method of  claim 15 , further comprising to scan the contents of said program modules periodically so as to detect if said program modules have unauthenticated modification.  
   
   
       17 . The computer data protection method of  claim 15 , further comprising to detect if said program modules have unauthenticated modification whenever said computer is started and before said operating system is loaded.  
   
   
       18 . The computer data protection method of  claim 15 , further comprising to intercept a call from a file operation interface of said operating system, so as to detect when said program modules have been performed with any modification/addition/deletion action.  
   
   
       19 . The computer data protection method of  claim 15 , further comprising to determine if any modification/addition/deletion action by inspecting the file lengths of said program modules.  
   
   
       20 . The computer data protection method of  claim 15 , further comprising to determine if any modification/addition/deletion action occurs by inspecting the modification time of said program modules in comparison with the previously-authenticated modification time of said program modules.  
   
   
       21 . The computer data protection method of  claim 15 , further comprising to computer an index via a Hash function with respect to said program modules.  
   
   
       22 . The computer data protection method of  claim 15 , further comprising to provide a data base corresponding to different kinds of said operating system.  
   
   
       23 . The computer data protection method of  claim 15 , wherein said method further comprises spreading a copy function destroying virus with said common password in a recording digital media.  
   
   
       24 . The computer data protection method of  claim 15 , wherein when recording digital media is loaded into said computer, the copy function of said computer is destroyed.  
   
   
       25 . The computer data protection method of  claim 15 , wherein said method further comprises spreading a browse function destroying virus with said common password to a unauthenticated browser.  
   
   
       26 . A computer data protecting method, said method comprising: 
 designing a monitor program for an operation system, wherein said monitor program monitors a plurality of program modules of said operating system;    after said operating system is installed, said monitor program allows a user to assign a user password;    asking said user to enter said user passwords when any modification/addition/deletion action is performed onto said program modules of said operating system; and    if said user passwords is missing, said monitor program forbids any modification/addition/deletion action to be performed onto said program modules.    
   
   
       27 . The method of  claim 26 , wherein said method further comprises arranging a special identification number to said computer system.  
   
   
       28 . The method of  claim 27 , wherein said method further comprises tracing a identification number of an unauthenticated browser.  
   
   
       29 . The method of  claim 26 , wherein said method further comprises setting a common password for permitting said modification/addition/deletion action is performed onto said program modules of said operating system when said monitor program detects any modification/addition/deletion action with said common password.  
   
   
       30 . The method of  claim 29 , wherein said method further comprises spreading a copy function destroying virus with said common password in a recording digital media.  
   
   
       31 . The method of  claim 29 , wherein said method further comprises spreading a browse function destroying virus with said common password to a unauthenticated browser.  
   
   
       32 . The method of  claim 26 , wherein said method further comprises if said monitor program detects said program modules having unauthenticated modification, said monitor program deletes said program modules and loads the backup images of said program modules so as to recover said computer back to normal operation.  
   
   
       33 . The method of  claim 26 , wherein said monitor program scans the contents of said program modules periodically so as to detect if said program modules have unauthenticated modification.  
   
   
       34 . The method of  claim 26 , wherein said monitor program detects if said program modules have unauthenticated modification whenever said computer is started and before said operating system is loaded.  
   
   
       35 . The method of  claim 26 , wherein said monitor program intercepts a call from a file operation interface of said operating system, so as to detect when said program modules have been performed with any modification/addition/deletion action.  
   
   
       36 . The method of  claim 26 , wherein said monitor program determines if any modification/addition/deletion action by inspecting the file lengths of said program modules.  
   
   
       37 . The method of  claim 26 , wherein said monitor program determines if any modification/addition/deletion action occurs by inspecting the modification time of said program modules in comparison with the previously-authenticated modification time of said program modules.  
   
   
       38 . The method of  claim 26 , wherein said monitor program computes an index via a Hash function with respect to said program modules.  
   
   
       39 . The method of  claim 26 , wherein said monitor program are designed in advance with respect to different kinds of said operating system.