# US 2014/0195825 A1 · Method and system for running encrypted files > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0195825 A1 - Document ID: US20140195825A1 - Status: Published application - Kind: A1 - Application number: 14/040,537 - Filed: 2013-09-27 - Published: 2014-07-10 - Earliest claimed: 2012-07-19 - Assignees: Tencent Technology (Shenzhen) Company Limited - Applicants: Tencent Technology (Shenzhen) Company Limited - Inventors: Danhua LI, I - Web page: https://patentgrep.com/patent/US20140195825A1 ## CPC - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - G06F 21/00: Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 2221/2107: File encryption - G06F 2221/2143: Clearing memory, e.g. to prevent the data from being stolen - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A computer-implemented method for running an encrypted file and system are provided, where the method includes the following steps: receiving a file running instruction; invoking an encrypted target file according to the file running instruction, and performing memory-based decryption on the encrypted target file according to key information corresponding to the encrypted target file; and running the encrypted target file on which the memory-based decryption is performed. ## Claims ### Claim 1 A computer-implemented method for running an encrypted file, comprising: at a computer having one or more processors and memory for storing programs to be executed by the one or more processors: receiving a file running instruction; invoking an encrypted target file according to the file running instruction, and performing memory-based decryption on the encrypted target file according to key information corresponding to the encrypted target file; and running the encrypted target file on which the memory-based decryption is performed. ### Claim 2 (depends on 1) The method according to claim 1, before the step of receiving a file running instruction, further comprising: receiving a file encryption instruction, encrypting a file to be encrypted to obtain the encrypted target file, generating the key information corresponding to the encrypted target file, and storing the key information and the corresponding encrypted target file. ### Claim 3 (depends on 2) The method according to claim 2, after the step of obtaining the encrypted target file, further comprising: deleting the file to be encrypted. ### Claim 4 (depends on 2) The method according to claim 2, wherein: the key information and the encrypted targeted file are locally stored or stored in a server, and the key information and the encrypted target file are combined and stored into a unified file. ### Claim 5 (depends on 2) The method according to claim 2, wherein: the key information and the encrypted targeted file are locally stored or stored in a server, and the key information and the encrypted target file are respectively stored as separate files. ### Claim 6 (depends on 2) The method according to claim 2, wherein: the key information is locally stored and the encrypted targeted file is stored in a server. ### Claim 7 (depends on 2) The method according to claim 2, wherein: the key information is stored in a server and the encrypted targeted file is locally stored. ### Claim 8 (depends on 1) The method according to claim 1, before the step of receiving a file running instruction, further comprising: receiving an identity authentication instruction, and obtaining an encrypted target file list corresponding to the authenticated identity after the identity authentication succeeds. ### Claim 9 (depends on 8) The method according to claim 8, wherein the identity authentication is performed through one of a numeric password, a facial image, fingerprint information, or audio data of a user. ### Claim 10 (depends on 1) The method according to claim 1, further comprising: automatically and directly clearing memory data corresponding to the encrypted target file after running when an instruction of closing the encrypted target file after running is received. ### Claim 11 (depends on 10) The method according to claim 10, when the instruction of closing the encrypted target file after running is received, further comprising: invoking the key information to encrypt the encrypted target file after running. ### Claim 12 (depends on 1) The method according to claim 1, further comprising: when an instruction of closing the encrypted target file after running is received, giving a prompt about whether to clear memory data, and clearing memory data corresponding to the encrypted target file after running when an instruction of clearing the memory data is received. ### Claim 13 (depends on 12) The method according to claim 12, when the instruction of closing the encrypted target file after running is received, further comprising: invoking the key information to encrypt the encrypted target file after running. ### Claim 14 A computer system for running an encrypted file, comprising: one or more processors; memory; and one or more program units stored in the memory and to be executed by the one or more processors, the one or more program units including: a running instruction receiving unit, configured to receive a file running instruction; and a file running unit, configured to invoke an encrypted target file according to the running instruction, perform memory-based decryption on the encrypted target file according to key information corresponding to the encrypted target file, and run the encrypted target file on which the memory-based decryption is performed. ### Claim 15 (depends on 14) The computer system according to claim 14, wherein the one or more program units further include: an encryption instruction running unit, configured to receive a file encryption instruction, encrypt a file to be encrypted to obtain the encrypted target file, and generate the key information corresponding to the encrypted target file; and a storage unit, configured to store the key information and the corresponding encrypted target file. ### Claim 16 (depends on 15) The computer system according to claim 15, wherein: the encryption instruction running unit is further configured to: after obtaining the encrypted target file, delete the file to be encrypted. ### Claim 17 (depends on 15) The computer system according to claim 15, wherein: the storage unit comprises a first storage unit set locally and a second storage unit set in a server, and the key information is stored in the first storage unit and the encrypted file information is stored in the second storage unit, or the key information is stored in the second storage unit and the encrypted file information is stored in the first storage unit. ### Claim 18 (depends on 15) The computer system according to claim 15, further comprising: an identity authentication unit, configured to receive an identity authentication instruction, and perform authentication on a login identity; and a file list obtaining unit, configured to obtain an encrypted target file list corresponding to the authenticated identity after the identity authentication unit succeeds in the authentication. ### Claim 19 A computer readable storage medium storing one or more programs, the one or more programs comprising instruction which, when executed by a device, cause the device to: receive a file running instruction; invoke an encrypted target file according to the file running instruction, and perform memory-based decryption on the encrypted target file according to key information corresponding to the encrypted target file; and run the encrypted target file on which the memory-based decryption is performed. ### Claim 20 (depends on 19) The computer readable storage medium of claim 19, including instructions which cause the device to: before receiving a file running instruction, receive a file encryption instruction, encrypt a file to be encrypted to obtain the encrypted target file, generate the key information corresponding to the encrypted target file, and store the key information and the corresponding encrypted target file.