Abstract: A data processing system in an off-line status includes a BIOS device and at least one processor. The BIOS device is for calculating a current system time. The at least one processor executes an operating system. The operating system includes a time logging driver resident in a driver layer of the operating system and an application layer start/end time recording process resident in an application layer of the operating system. The time logging driver records a driver start time and a driver end time. The application layer start/end time recording process records an application layer start time and an application layer end time. The data processing system of the invention, according to the application layer start time, the application layer end time, the driver start time and the driver end time, adjusts the current system time to prevent the current system time from being tampered.

Abstract: A system and a method are for securing a protected host. A secure channel server receives a plurality of first packets transmitted over a first network, and analyzes the plurality of first packets to obtain an analysis information. The plurality of first packets include a plurality of encrypted second packets encrypted by a terminal data processing apparatus with a certificate issued by the secure channel server. The plurality of encrypted second packets relate to an application process executed by the terminal data processing apparatus and judged as a secure process. The plurality of first packets are selectively decrypted with the certificate according to the analysis information into a plurality of decrypted first packets. The secure channel server redirects, according to a selected redirection rule, the decrypted first packets or the first packets selectively via a second network to the protected host.

Abstract: A data processing system and a data processing method are capable of separating application processes. The data processing system of the invention includes a data storage device and at least one processor. When a user operates the at least one processor to execute an application process to access a designated file from the data storage device through a file control module residing in a kernel mode of an operating system, the file control module compares a user account of the user and M rules and M characteristics of the application process with a plurality of execution space setting data previously stored to obtain an authority data, where M is a natural number. The file control module selectively returns the designated file to the application process in accordance with the authority data.