---
title: Performance optimization and scalability
description: Introduction to load balancing, caching, asynchronous tasks, file chunking, deduplication, clustering, containerization, and SOA service architecture.
slug: performance-scalability
lang: en
category: Architecture And Storage
category_order: 7
order: 3
keywords:
  - performance
  - Scalability
  - load balancing
  - cache
---

# Performance optimization and scalability

### Performance optimization

Performance monitoring:

Real-time performance monitoring, including transcoding speed, cache hit rate and response time, and automatic clearing of the queue and retry processing when errors occur. Notify operation and maintenance personnel via SMS of serious errors.

Resource adjustment:

Based on monitoring results and load conditions, preview and transcoding resources are dynamically adjusted to ensure high performance and availability.

Integration testing

Performance test:

Conduct performance tests that simulate a large number of concurrent preview and transcoding requests to evaluate how the system performs under heavy load.

office family files

Babel supports online preview of files from the Microsoft office family and WPS. To ensure the display accuracy of office files, especially word files, Babel provides two ways to preview office files:

Use the office transcoding module running on the Windows server to transcode the file and preview it (default).

A window server needs to be deployed to generate preview files.

It can open and preview word files and ppt files quite accurately with Microsoft Office or WPS.

Supports using BabelViewer to annotate, discuss, circle, and compare versions of files.

You can use the "Zhichao AI" document assistant function.

Because there are no layout or font problems with Excel files, they are previewed using the preview function of the online office.

All preview files can have embedded watermarks and can be saved as watermarked PDF files.

Use the preview function of the online office running on the Linux server to provide online preview of office and wps files.

For users who can only use Linux and do not have high requirements for the accuracy of the word file preview format.

*Due to differences in system fonts, online office parsing, etc., the online office in the Linux system cannot perfectly display the layout of the word file at 1:1. There will be slight differences in aspects such as bullet numbering, paragraph height, paging, and the position of inserted graphics.

Because there are no layout or font problems with Excel files, they are previewed using the preview function of the online office.

Word and ppt files opened using the online office preview function will no longer support the annotation function of the Babel previewer.

The document assistant function of "Zhichao AI" is not supported.

All preview files can have embedded watermarks and can be saved as watermarked PDF files.
Taking into account the performance of the browser and the efficiency of the server, there will be a certain file size limit for online preview of office files. Files exceeding this limit cannot be previewed online. Private cloud users can customize these limits, but it is not recommended to increase them too high.

The maximum previewable file size of Word (Document) documents is 200MB.

The maximum preview size of PPT (slideshow) documents is 200MB.

The maximum preview size of Excel (table) documents is 50MB.

Pictures and graphics files

Babel supports online preview of most image files, including psd, gif family, jpg family, bmp family, png, raw family (part), arw, tif, TIFF, dicom, ico and other files. It also supports the dicom format commonly used in medical graphics. And thanks to Babel's powerful image processing technology, Babel can preview ultra-high-resolution large pictures online in a 1:1 manner (optional component), annotate and discuss the pictures, and Babel supports reading the metadata of the photos.

Image formats such as PSD, RAW, and BMP require automatic transcoding by the server before they can be previewed.

Under normal circumstances (the large image display module is not turned on) large images with a resolution exceeding 4K will be processed by the server into a size and format that is convenient for web page display. After turning on the large image display module, the server will cut the large image into several small pieces and load them into 1:1 displays, which will consume a lot of server resources.

Pictures with transparent backgrounds such as PNG can also show transparency in BabelBird, and the background can be changed.

The BabelBird system will read image metadata information for search, query, and sorting. This information includes: resolution, size, shooting equipment, shooting time, shooting location.

All previewable image formats will generate thumbnails for quick search in file list display and waterfall flow mode display.

All image formats support annotation discussion, circle drawing and version comparison in BabelViewer.

If the watermark function is turned on, the server will preprocess the previewed image and embed the watermark in the image.

All image files can be saved as watermarked PDF files.

BabelBird can also well support online preview of vector graphics, including but not limited to ai, dwg, dcm, dxf, dwt, pdf, eps, svg, idml, indd... and other vector graphics formats. More importantly, Babel can open documents in these formats in vector rendering, which means that such graphics can be enlarged dozens of times in Babel without blurring or distortion.

AI, eps, ind and other files need to be automatically transcoded by the server before they can be previewed.
Displayed in vector format, supporting changing background color.

The graphics will not be distorted or blurred after enlargement.

Other features are the same as images. It also supports embedding watermarks, saving as watermarked PDF, annotating discussions in BabelViewer, circle drawing and version comparison, and generating file list previews.

3D and CAD files

Thanks to BabelViewer's support for 3D formats, we support online preview of dae, 3ds, abc, fbx, mtl, obj, ply, stl, x3d and other 3D graphics by default, and support annotation discussions in 3D space.

Currently, BabelBird Previewer only supports single file 3D graphics. If the file has plug-in files such as plug-in skin, it will only be able to load the model itself.

3D files currently do not support generating previews, but custom development is supported if there is a need for this.

3D files can be rotated, enlarged, reduced, and split in the Babel Previewer, and annotation discussion points can be established. The system will remember the viewport when the annotation was created. Clicking an annotation will automatically rotate to the perspective when the annotation was created.

If you need to support professional formats such as Revit, Solidworks, 3DMax, etc., private deployment users can choose to access third-party 3D online display and transcoding plug-ins (such as Autodesk viewer), which will incur related fees.

Previewing 3D files on mobile devices is currently not supported. Only supports previewing 3D files on web pages and clients.

- Babel supports preview of CAD files. Such as: dwg, dwt, dxf formats. Currently on the public cloud, Babel provides powerful CAD preview services to professional and enterprise version users. Private users who want to preview CAD files need to purchase the corresponding CAD transcoding service privatization authorization.

Babel CAD preview supports CAD version R12-2021.

CAD files can generate preview thumbnails for file list and waterfall mode.

Compatible with Tianzheng full professional T20V7 version.

Supports previewing and annotating CAD files in browsers, clients, and mobile terminals.

Supports drawing browsing above 100Mbps.

Layer open/hide/multi-select/select all.

Layout switching, view pan, zoom, change background color, eagle eye view.

Audio and video transcoding

Without using a transcoding server

BabelBird can directly play video files that support the HTML5 standard online without the need for transcoding services.

The supported formats are as follows:

- Video file formats

MP4: MPEG-4 Part 14, supports H.264 encoding. Almost all browsers support this format.
WebM: A format developed by Google that uses VP8 or VP9 encoding and can be played in most modern browsers

Ogg: Open media format, using Vorbis encoding, can be played in most modern browsers.

- Audio file formats

MP3: MPEG-1 or MPEG-2 Audio Layer III, can be played in almost all browsers.

AAC: Advanced Audio Coding, can be played in most modern browsers.

Ogg: Open media format, using Vorbis encoding, can be played in most modern browsers.

WAV: Waveform Audio File Format, can be played in almost all browsers, but the file size is large and not suitable for playing on the Internet.

- Compatibility

Video compatibility

Audio compatibility

When using a transcoding server

If you need to use BabelBird to manage and query a large number of video materials, you need to build a dedicated video transcoding server and purchase the corresponding video transcoding module authorization. (Currently this service only supports private deployment users)

BabelBird video transcoding module uses FFmpeg solution. FFmpeg supports more than 40 encodings such as MPEG, DivX, MPEG4, AC3, DV, FLV, etc., and more than 90 decodings such as AVI, MPEG, OGG, Matroska, ASF, etc. FFmpeg supports more than 280 types of codecs, covering almost all common audio and video encoding formats, and can decode almost all audio and video.

- Hardware configuration required for video transcoding server

Video transcoding is a service that consumes considerable computing resources and requires a dedicated physical machine to perform the transcoding operation. At the same time, server performance requirements are related to the type, duration and bit rate of the video that needs to be transcoded.

Based on the daily conversion of 50 hours of HDR 4K video (using CUDA) to 1080P H.264 AC3 MP4, the required server hardware configuration is as follows:


| Server type | Configuration requirements | Operating system | Server purpose | Notes |
| --- | --- | --- | --- | --- |
| Video transcoding server | Xeon Intel-E5-2630v3CPU*2 64G memory 2TB SSD hard drive + Nvidia Tesla M4 4G graphics card | Linux | Video transcoding server | Using GPU (CUDA) |
The transcoding time required varies depending on the video bit rate. Under normal circumstances, it takes 8 seconds to transcode a 100-second 2K video into 1080P MP4 (using the hardware configuration above). If there are many videos being transcoded at the same time, the server will perform multi-thread queuing processing.

After using the transcoding server, the video file can be played after the transcoding is completed, and the thumbnails can be viewed in the file list.

## Security

### Secure architecture

- Security is key to business! Babel prioritizes security from product design to architecture construction and server management, and includes many important security features. You can control the access behavior of each file and each member, add file watermarks, view access logs, classify important files into archives, and set encryption levels and security policies for files and departments... This series of measures can protect important digital assets to the greatest extent. At the same time, BabelBird uses EV SSL certification with the highest security level, bank-level encrypted transmission, and distributed backup in multiple computer rooms to ensure that your data is safe and worry-free. These measures have enabled BabelBird to obtain QUALYS security A+ certification, and we also have ISO27001 information security quality system certification.
Since its launch, BabelBird has implemented full-link encrypted transmission and storage from uploading, downloading, to disk. With detailed processing of rights management and file management, as well as risk analysis and corresponding functional response strategies encountered in various usage scenarios, BabelBird has become one of the most secure enterprise network disks on the market.

Figure: Babel bird data transmission link

- Firewall, bastion host, VPN, SSL... In terms of transmission and server deployment architecture, we have more and more means to ensure the data security of the system. However, according to our many years of experience in providing enterprise security services, 80% of data breaches often originate from insider leaks and management chaos. Even if the system is physically isolated, there is no way to eliminate the risk of data leakage. Babel has considered this from the beginning of product design, providing a variety of safety designs and functions from the perspectives of management, personnel and equipment. A variety of optional settings and solutions are also provided at the contradiction between ease of use and security. Ensure data security as much as possible from the product structure and usage logic. Significantly eliminate the risk of data leakage due to insider negligence or sabotage.

### User Authentication and Authorization (SSO)

Own user system

Babel Free User System Authentication Types


| Account type | Verification method | Remarks |
| --- | --- | --- |
| Email | Password, verification code | Public cloud needs to be bound to a mobile phone number for verification |
| Mobile phone number (global) | Password, verification code | The private cloud needs to be connected to the SMS sending platform |
| User ID | Password | Only supported by private clouds. If you forget your password, it can only be reset by the administrator. When logging in for the first time, you will be asked to forcefully reset the password |
| WeChat | Scan code, APP jump (mobile) | Only supported by public cloud, need to bind mobile phone number for verification |

Babel supports a mix of authentication types.

Multi-factor authentication (MFA) could be mandated to improve security

Hybrid authentication:

When using single sign-on (SSO), it supports using your own user system and SSO at the same time. Users can choose to log in using their own credentials or log in through SSO (such as using corporate WeChat to scan the QR code to log in or using the account password to log in).

Single Sign-On (SSO) integration

Single Sign-On (SSO) integration is a key feature in enterprise network disk products. It allows users to access multiple different applications and services after one authentication, improving user experience and security.

Babel supports OAuth2.0, CAS and other methods to integrate single sign-on, and has been actually used in docking with various systems.
Supported SSO standards and protocols

BabelBird Enterprise Drive supports a variety of SSO standards and protocols, including but not limited to the following:

ADFS integration:

Babel supports integration with Active Directory Federation Services (ADFS), which makes Windows Authentication-based SSO possible. This integration allows users within the enterprise to log in using their Windows credentials.

AD domain controller integration:

Babel also supports integration with an enterprise's local Active Directory (AD) domain controller. This allows internal enterprise users to log in using their local domain credentials.

Enterprise WeChat integration:

BabelBird supports docking with corporate WeChat, which allows companies to directly use corporate WeChat accounts to scan QR codes to authenticate and log in. And you can simultaneously import WeChat's organizational structure and users, use Enterprise WeChat to send notifications, and access BabelBird in the workbench.

DingTalk integration:

BabelBird supports docking with DingTalk, which allows enterprises to directly use DingTalk accounts to scan and authenticate login. You can also import DingTalk's organizational structure and users simultaneously, use DingTalk to send notifications, and access BabelBird in the DingTalk workbench.

Feishu integration:

BabelBird supports docking with Feishu, which allows enterprises to directly use Feishu accounts to scan and authenticate login. You can also import Feishu's organizational structure and users simultaneously, use Feishu to send notifications, and access BabelBird in the Feishu workbench.

Integrated documentation:

The integration of AD Domain Control, Enterprise WeChat, DingTalk, Feishu, and Zhiyuan OA has been embedded in the privatized version of BabelBird. After purchasing the corresponding modules, users only need to configure them according to the corresponding documents before they can be used. For relevant configuration documents, please consult BabelBird customer service personnel.

Third-party SSO integration:

If your organization uses a third-party SSO provider (such as Okta, OneLogin, Auth0, Qianfan, Panwei, etc.), we also support product integration with these providers. This means that external users can log in with SSO through these vendors' products. But this requires secondary development and a certain fee.

Third-party own user system integration

We understand that many organizations may have their own user systems at the same time, so our SSO integration supports hybrid authentication:

Hybrid authentication:

Our system allows users to choose between logging in using their own credentials or using SSO. This provides maximum flexibility to adapt to different user needs.

User mapping and synchronization:

We ensure that user accounts in our own user system are synchronized with user accounts in SSO. This means that a user's attributes and permissions remain consistent across the system.
Security and authorization

We pay great attention to the enforcement of security and authorization policies to ensure that only authorized users have access to resources:

Authentication strategy:

We support flexible authentication strategies, including advanced options like multi-factor authentication (MFA). This helps ensure that the user's identity is properly verified.

Authorization and access control:

We allow administrators to configure and manage user access rights, including authorization of files and resources. This ensures that only authorized users have access to sensitive data. Users imported from other platforms will only have the initial permissions of their department (default is department member). Administrators can uniformly change the initial permission scope of imported users by customizing the "department member" role permissions.

### User experience

We focus on user experience and strive to provide a seamless login experience:

Login page:

Our login page is clear and intuitive, giving users the option to choose different login methods. Users can choose to log in using SSO or log in with their own credentials. At the same time, we also support using the user's own login page for single sign-on system (such as the ADFS system authentication page)

Single point of logout:

If the connected single sign-on system (SSO) supports single logout, we can also support single logout, which means that users can log out in any connected application, and the system will automatically log out of sessions in other applications.

Access control list (ACL) design

### Overview

In BabelBird Enterprise Drive, permission management is a core component to ensure the security and accessibility of files and resources. ACL (Access Control List) is used to define the access rights of users and roles to resources in different departments. This chapter will introduce our ACL design in detail, including role management, user assignment, role permissions and change management.

role management

Role definition:

We allow administrators to customize roles. Each role represents a set of permissions. There are 32 optional combinations of permissions to form a role.

Each role should have a clear name and description so administrators and users understand its functionality.

Permission assignment:

Each role is assigned specific permissions, which determine the role's ability to operate within the department.

Permissions should be carefully chosen to ensure that users have the necessary permissions but are not over-authorized.

User management

User role assignment:

Each user can be assigned one or more roles, which determine the user's permissions in different departments.

Allow one user to have different roles in different departments to accommodate diverse needs.

Association between users and departments:
Users should be associated with the departments they belong to so that appropriate permissions are automatically assigned based on department roles.

Users can only access the department in which they are located, and have roles that determine access rights within the department.

Whether you can access sub-departments is also determined by role permissions (roles have permissions to access sub-departments).

Role permission management

Role permission definition:

Each role has clearly defined permissions, including readable, writable, deleteable, shareable and other operations.

Roles can be added or deleted as needed.

Permission inheritance:

Our system supports inheritance of permissions. When a user is assigned to a role, they automatically inherit the permissions of that role.

This reduces the effort of manually assigning permissions while ensuring consistency.

Change management

Role permission changes:

When an administrator changes the permissions of a role, the permissions of all users with that role in the department also change accordingly.

We will log these changes in detail for auditing and troubleshooting purposes.

Permission audit:

Security administrators can regularly audit roles and user permissions to ensure the accuracy and security of authorization.

Permissions that are no longer needed should be canceled promptly.

security

Access control:

BabelBird Enterprise Drive's ACL system will strictly control user and role access to resources.

Only authorized users with a role in the department can access department files.

Departments are isolated from each other, and different confidentiality levels (department security policies) can be set to protect department files.

Audit and Monitoring:

All permission changes and role changes will leave log records. Convenient management and query.

Implement monitoring and auditing mechanisms to monitor permission changes and access activities to detect and respond to potential risks in a timely manner.

best practices

Principle of least privilege:

Follow the principle of least privilege, which means giving users and roles the minimum permissions required to reduce potential security risks.

Department files can use file access control to accurately increase the permissions of a certain member (or a certain role) and set the permission validity period.

Regular review:

Regularly review role and permission configurations to ensure system security and performance.

future expansion

Multi-tenant support:

Public cloud systems support multi-tenant control.

Private cloud considers extending the ACL system to a multi-tenant environment to support the needs of multiple customers or organizations.

Data encryption

Data transmission encryption (SSL/TLS)

encryption protocol

At BabelBird Enterprise Drive, we take the security of data transmission very seriously. In order to ensure that data is protected during transmission, we use the Secure Socket Layer (SSL) protocol to implement transmission encryption.

HTTPS:

We use the HTTPS protocol, which is a secure version of HTTP, to encrypt all data transfers.

HTTPS provides end-to-end data encryption through the TLS/SSL protocol, preventing third-party malicious users from intercepting or eavesdropping on transmitted data.

Certificate management

SHA-256 certificate:

Our SSL certificates are hashed with SHA-256, a powerful hashing algorithm that provides advanced security and integrity protection.

SHA-256 certificates are critical for verifying the server's identity and protecting data transfers.

Certificate update:

BabelBird Enterprise Drive will regularly update the SSL certificate to ensure the validity and security of the certificate.

We monitor certificate expiration dates and renew them in advance.

Data encryption

Data transmission encryption:

All data transmission between BabelBird Enterprise Drive and user terminals will be encrypted by TLS/SSL.

This includes user logins, file uploads and downloads, and the transmission of any sensitive data.

Data integrity protection:

TLS/SSL not only provides data encryption, but also verifies the integrity of the data during transmission to prevent data from being tampered with or damaged.

security

Strict encryption policy:

We follow strict encryption policies to ensure that all data transmissions pass through secure channels and cannot be accessed by unauthorized parties.
Protect user privacy:

Encryption of data transmission helps protect users' privacy and sensitive information, including personally identifiable information and confidential documents.

best practices

Security upgrade:

We will continue to monitor new security standards and best practices to ensure that the security of data transmission encryption is continuously improved.

Security audit:

We conduct regular security audits and vulnerability scans to ensure that our encryption mechanisms are not affected by potential threats.

Pictured: BabelBird receives A+ security verification from Qualys SSL Scan

Data storage encryption

### Overview

In BabelBird Enterprise Drive, we use advanced block encryption technology to ensure the security and integrity of files. We use chunked encryption to break files into small chunks, each chunk is hashed and then stored in an object storage system. This technology ensures that even if control of the server or the hard drive is compromised, the attacker cannot obtain the complete file contents.

Block encryption

File chunking:

Files uploaded to BabelBird Enterprise Drive will be divided into several small chunks (chunks).

The size of each tile can be configured based on system needs to balance performance and security.

Hash encryption:

Each small block is hashed, using a powerful hashing algorithm to ensure data integrity.

The hash value will be stored along with the stored chunk for subsequent verification.

Storage security

Object storage:

The encrypted small blocks will be stored in the object storage system of BabelBird Enterprise Drive to ensure high availability and data redundancy.

Unrecoverable encryption:

We use an irreversible hash encryption algorithm to ensure that the small blocks stored cannot be restored to the original file content to ensure the security of file storage.

Secure transmission:

Small pieces of data are also encrypted when transferred to the object storage system to prevent man-in-the-middle attacks.

File download

Temporary download link:

When a user needs to download a file, the authentication system will dynamically combine the chunks to form a temporary download link.

This link is unique and only valid for a short period of time for downloading. To download again, you need to regenerate the download link. This setting prevents files from being exposed by obtaining download links.

Download decryption:

When the user requests a download, BabelBird Enterprise Drive will decrypt the chunked data on the server side and then merge it into a complete file.

This ensures that the file will not be exposed to any unauthorized accessor even if the hard drive is illegally read while the file is being stored.

security

Data isolation:

Blocked encryption technology breaks data into small chunks, each of which is encrypted with an independent hash to prevent the entire file from being exposed.

Irreducibility:
The use of an irreversible hash algorithm ensures that the data is irreducible. Even if an attacker obtains a small piece of data, the original file cannot be restored due to missing data.

Prevent data leakage

Security audit log

### Overview

In BabelBird Enterprise Drive, we emphasize the traceability and security of data access and operations. In order to achieve this goal, we have established a powerful access log system to record historical access logs of the entire system. These logs include file uploads and downloads, permission changes, user discussion comments, file additions, deletions, modifications, approvals, and department changes. This chapter will introduce our security audit log system and role management in detail.

Access log function

Comprehensive logging:

Our log system records various access behaviors of the entire Babel Enterprise network disk, ensuring that every operation can be traced and audited.

Recorded operations include but are not limited to file management, authority control, user operations and department management.

For more information about BabelBird logs, please refer to: Logs and Reports chapter.

Default save time:

By default, we save complete access logs for 90 days.

This ensures that sufficient historical data is available for auditing and inspection.

Expandable storage time:

If needed, administrators can extend the retention period of access logs based on specific compliance requirements (supported only on privatized systems).

Third-party log management system

Integrated support:

BabelBird can connect to third-party log management systems to import access log data to external log platforms for further analysis and long-term storage.

Security administrator role

Security Officer:

Security officers have advanced permissions and can view and manage files of all departments at the front desk.

In the enterprise management background, the security officer has the following permissions:

Develop company security policy (exclusive authority).

Manage organizational structure.

Member management.

Permission management.

Security Auditor:

Security auditors can view and manage all department files from the front desk.

In the enterprise management backend, security auditors have the following permissions:

Review corporate security policies.

Review the organizational structure.

View member permissions.

View permission management.

View file access logs.

security

Data isolation:

Security audit log data is strictly isolated and only authorized administrators can access and manage them.

Confidentiality:

The roles of security security officers and security auditors are carefully designed. One is responsible for security policy and the other is responsible for security auditing. They supervise each other to ensure data confidentiality and compliance.

Expand

Automated alerts:
Supports automated alarm mechanism, and monitoring items can be added to promptly notify super administrators when abnormal activities are discovered.

The security audit log system of BabelBird Enterprise Drive, including functions, role management and security measures, ensures the traceability of data access and operations, and supports integration with third-party log management systems to further improve security and compliance.

Security review and testing

Penetration testing

Test delegate:

BabelBird Enterprise Drive will regularly conduct penetration tests by itself or entrust third-party organizations, such as NSFOCUS Technology, to conduct penetration tests to evaluate the security of the system.

The goal of penetration testing is to use cutting-edge attack techniques, mature hacker attack methods, and standard software testing techniques to test the security of the specified system and discover potential security vulnerabilities and risks.

Testing phase:

Penetration testing includes the following processes:

Information collection: Testers collect necessary information, such as IP addresses, DNS records, software version information, IP segments, and public information.

Penetration testing: Testers attempt to hack into networks and systems based on the results of the information gathering phase. If successful, normal permissions may be obtained.

Flaw Exploitation: A tester attempts to escalate privileges to gain full control of the system. If necessary, they may go back to the information-gathering phase and start over.

Collection of results: Testers classify and organize the problems discovered in previous stages, such as weaknesses and vulnerabilities, and display them in a centralized manner.

Threat analysis: Testers classify the threats found and analyze their potential impact.

Output report: Testers write intuitive penetration testing service reports based on the results of testing and analysis.

Main goals of penetration testing:

Discover security vulnerabilities and potential risks in systems.

Evaluate the security of the system, including authentication, access control, data protection, etc.

Provides suggestions for improvements to enhance the security of the system.

The results of the test will help us take appropriate measures to fix the problems found and improve the overall security of the system.

best practices

BabelBird Enterprise Drive will conduct regular penetration testing to maintain the security of the system.

Use a combination of automated tools and manual testing to increase the comprehensiveness and accuracy of penetration testing.

After the test is completed, make timely corrections based on the report to ensure the safety of the system.

future expansion

We will continue to evolve our penetration testing processes to adapt to evolving security threats.

Consider introducing advanced analysis tools to more deeply assess the security of your system.

Security vulnerability scanning
In order to maintain the security of BabelBird Enterprise Drive, we conduct security vulnerability scans regularly. This measure is designed to automatically detect potential security vulnerabilities in the system and problems that may lead to security threats. We rely on professional scanning tools (such as Qualys, Rapid7 InsightVM, OpenVAS) to ensure that the system continues to remain in a highly secure state.

Scanning process

Security vulnerability scanning includes the following key stages:

Regular scan:

We scan our systems for security vulnerabilities on a regular basis, usually at scheduled intervals.

Scanning tools automatically perform a series of tests to find potential vulnerabilities.

Scan target:

The targets of security vulnerability scanning include various aspects such as applications, operating systems, and network devices in the system.

Scanning ensures the overall security of the system.

Scan results:

Scanning tools will identify and report vulnerabilities found in the system.

The report will include the type of vulnerability, its severity, and possible remediation recommendations.

Fixes:

Based on the scan results, we take necessary remediation measures to address the discovered vulnerabilities and issues to ensure the security of the system.

BabelBird safety-related features

## Main functional modules

Data transfer module

The data transmission module is the core component of BabelBird Enterprise Drive and is responsible for managing the data transmission of upload, download, synchronization disk and mapping disk. This module uses a variety of technologies to ensure data security, reliability and efficiency.

### Technical features

File chunking:

The data transfer module uses file chunking technology to break large files into small chunks for more efficient transmission and storage. This not only helps reduce network traffic and server resource consumption, but also supports resumed downloads and incremental uploads and downloads.

Hash verification (second transmission):

Hash verification is used to ensure file integrity during data transfer. Each file block has a corresponding hash value, and the server and client verify these hashes against each other to detect any data corruption or tampering.

At the same time, if there is already a file with the same hash code in the storage system, the file does not need to be uploaded again. Realize the instant transmission function.

SSL transfer:

The data transmission module uses the SSL (Secure Sockets Layer) protocol to encrypt data transmission to ensure the confidentiality and security of data during transmission. This is critical for the transfer of sensitive corporate data.

Resume upload from breakpoint:

BabelBird Enterprise Drive supports breakpoint resumption, allowing users to continue uploading or downloading files from the last interrupted point without restarting the entire process if the transmission is interrupted. This saves time and bandwidth.

Incremental upload and download:
The data transfer module also supports incremental uploads and downloads, allowing users to transfer only chunks of files that have changed, rather than the entire file. This is useful in cases of large files and frequent synchronization.

### Advantages

Data integrity:

File chunking and hash verification ensure data integrity, reducing the risk of data corruption or tampering.

Data security:

SSL transmission provides end-to-end encryption of data, ensuring that data will not be snooped or stolen during transmission.

Efficiency:

Breakpoint resumption and incremental upload and download improve the efficiency of data transmission, saving time and bandwidth.

Save storage space:

Using file hash code technology, only one copy of a file with the same hash can be stored on disk. No matter how the file path or file name changes, or how many file copies there are in the network disk, the actual storage space of the file only occupies the capacity of one file. (deduplication storage)

High-speed upload:

Files with the same hash value do not need to be uploaded again. If you upload a file that already exists on the network disk, if the same hash value is detected, it will automatically be marked as uploaded successfully, and there is no need to upload it again.

The data transfer module is a key component of BabelBird Enterprise Drive. By adopting these technical features, it ensures that users can upload, download and synchronize their files safely and efficiently. The function of this module is to make BabelBird Enterprise Drive a reliable data management platform.

New module

The new module is mainly responsible for the creation of files, departments, projects, templates, and folders. In BabelBird, you can directly create new files to work without uploading files.

New file creation

Office files
BabelBird supports creating blank word documents, Excel documents, and PPT documents online.

Using the client to create a new document will open the corresponding components of the local office by default to create and edit documents.

Creating a new document on the web page will use online office to create and edit documents.

Office documents can be edited online (no need to install office) or edited locally using the client (edited using the office installed on your computer).

Online editing supports real-time collaborative editing by multiple people.

When you use the client to call the local office for editing, the document will automatically be locked for editing to prevent others from editing the document and causing conflicts.

Text code file

Babel Text Editor can create and open all text files online, such as RTF, TXT, HTML, MD, CSS...

For the convenience of customers, the public cloud version only supports creating new TXT and MD (markdown files). Private cloud users who need to create text files in other formats can ask for it to be opened.

The text editor is different from the online office in that it does not support collaborative editing, but text files can be edited online.

Mind maps and flow charts.

BabelBird comes with its own mind map module, which can create and edit mind map files online.

Mind map files are saved in KM format by default. It can also be exported to KM, TXT, MD, SVG, PNG, and Xmind formats.

BabelBird can also optionally support the creation of flow charts, but you need to purchase the corresponding module license (the non-standard version comes with it by default).

Other third-party modules.

Internet applications that comply with WebAPI can theoretically connect to BabelBird and create new files. BabelBird provides third-party application docking services.

Create from template

Many customers need to create a large number of folders with the same structure or create files from a specific template (such as a corporate PPT template). Babel supports creating folders and files from templates.

- Create templates.

People with department file management rights can create templates in the New menu.

After clicking Create Template, a template folder will be generated. The template folder is similar to an ordinary folder. You can drag files into the folder to upload, create new folders and departments.

The files uploaded in the root directory of the template folder become file templates, and the folders created in the template folder are folder templates. As shown below:

Figure: Displayed in the template folder

Figure: Displayed when creating a new template

- Create from templates.

Departments with permission to create files and folders can select a template when creating a new file to quickly create files or folders that are consistent with the template.

Create new departments and projects

Departments and projects can also be created using the New function.

- Create departments.
Departments can only be created under the root department of the enterprise file. The department file belongs to the enterprise, and the super administrator can see the root department and the entire file tree.

Users with sub-department management rights (default department manager role) can create sub-departments.

Department folders can add department members and complete department-level management.

Only members who join the department (department members) and members of the superior department who have the "View sub-department files" permission can access department files.

Department members have basic permissions determined by their role in the department.

You can use file permission management to manage permissions on files (folders).

- Project.

Users can create projects under department folders in personal files or corporate files.

Projects can invite project team members across departments and companies, and even non-registered users from outside the company.

Anyone with personal files can create personal projects. To create a project user role under a department, you need the "Create Folder/Project" permission.

Support for creating subprojects in project folders.

The parent of the project folder must be a department or a project, which means that departments cannot be created under ordinary folders.

The project creator is the project administrator by default. The project can be transferred, and the project administrator can be transferred to other members and other departments.

The permissions of members within the project are specified when the project is created. The project is relatively an independent shared folder.

Create a new normal folder

- Create folders under personal files.

Users can create any folders under their personal files and manage them by themselves.

- Create folders under corporate files

Folders need to be created in departments under enterprise files (all folders belong to departments).

Users with the "Create Folder/Project" role in their department can create folders.

As long as the user whose role has the "Create Folder/Project" permission can create subfolders in any ordinary folder in the department.

File management

### Introduction

The file management module is one of the core functions of BabelBird Enterprise Drive. It is used for users to manage and operate files and folders, and pushes different file lists to users according to their permissions. It is also the main interface for users to use the network disk. This module provides a wide range of features to meet the file management and organization needs of business users.

### Technical features

A. File access and organization

- Paging loading technology:

The file management module uses paging loading technology, and the server-side database performs file sorting and query operations, and returns the file list to the front desk for paging loading. Such a file list can load hundreds of thousands of rows of data in pages, ensuring that users can efficiently load and browse large numbers of files without affecting performance and user experience.
- Tree display file list:

Babel supports tree-like display of file lists, making the organizational structure of files more intuitive and allowing users to easily navigate and manage folders.

- Permission control:

Depending on the user's permissions, the file management module will dynamically display appropriate list items. The file list content seen by different users varies according to different permissions. to ensure that only authorized users can view, edit, or delete specific files and folders.

B. File sorting and quick operations

-Multidimensional sorting:

Supports multi-dimensional sorting, users can sort by different dimensions such as file name, latest version, file size, etc.

- File name sorting:

Unlike most network disk applications, Babel File Name Sorting supports multi-digit sorting in order, so that files whose file names contain numerical numbers can be sorted accurately. (Most network disk file names are sorted only by the first letter, such as: 1, 2, 10, 3, 4, but in BabelBird, the order can be correctly displayed as: 1, 2, 3, 4, 10)

- Custom global sorting:

Users can customize the sorting method suitable for their own global use in the settings. At the same time, the system will remember the sorting method selected by the user in the folder last time, and the next time the folder is opened, it will also be displayed according to the previous sorting.

C. Document display and detailed management

- List mode and waterfall flow mode can be switched:

Supports browsing folders in list mode, and can switch to waterfall flow mode for preview.

Supports waterfall flow mode browsing of folders (file thumbnails), making file browsing smoother and more intuitive.

Folders with many pictures will be automatically adapted to display in waterfall flow mode.

- File details page:

Each file and folder has a detailed details page. Users can manage file information, add file comments, view file access logs, collect statistics on file access, and generate reports.

The file details page can also manage file versions.

- Comment area:

Each file or folder has its own comment area, which supports user comments and @mentions of other users to promote team collaboration and feedback.

- File association:

Supports file associated files, allowing users to establish connections between related files for easier access to related information.

- File attention reminder:

Users can remind people who have permission to view files to pay attention to files or folders to ensure that important files are not ignored.

D. Advanced search and filtering

- Advanced search

BabelBird supports advanced search function, which can conduct advanced search based on keywords, full-text content, time, file format, uploader, search scope, search type and other dimensions.

- Search

BabelBird also supports full-text search, which can search for keywords in the file content.
You can also use file name search and tag search to find the corresponding file.

The search results can be searched again or filtered by filtering

- Filter function:

You can filter based on file tags, types, file description keywords, size, version, uploader, photo metadata, etc. to quickly locate the required files.

- File tags and categories:

Users can tag files to better organize and categorize them.

Labels can be managed uniformly by the enterprise to ensure that labels comply with specifications.

Tag shortcuts can be added to the left column.

### Common file management functions

A. File transfer and operations

- Upload and download files:

Users can upload and download files, ensuring flexible transfer of data.

Supports dragging and uploading folders to facilitate the transfer of large batches of files.

The browser supports folder packaging download (less than 100 files or folders less than 500MB in size)

The client supports direct download of folders (transfer list)

- Creation of files and folders:

Users can create new files and folders of various types, and also support creating new files or folders from templates to improve work efficiency.

- File copy and move:

Users can copy and move files or folders to organize files easily.

Supports copying files or folders to specified directories for file backup and management.

- Document archiving:

Users can archive documents into an archive for long-term preservation and retrieval.

- File pinned to top:

Personal files support pinning files or folders to the top for quick access to important files.

Department or project administrators can pin portal files or project files to facilitate department members and project members to quickly access important files.

- Create file or folder shortcuts:

Users can create shortcuts to files or folders for quick access.

-Upload new version:

Users can upload a new version of a file, and the system will automatically detect files with duplicate names and provide the option of uploading a new version or renaming the file.

Click the Upload new version button to directly upload a new version.

- Print files as watermarked PDF:

When watermarking is turned on, the file can be printed as a watermarked PDF file to ensure the security and confidentiality of the file.

- Lock files:

When files are edited using the client, they are automatically locked to prevent conflicts.

Users can also manually lock files in the file list to prevent editing and conflicts by other users.

- File preview:

Supports preview of most files to quickly view file contents. To learn more, check out the Preview and Transcoding chapter.

- File list display thumbnails:
The file management module can display thumbnails of files in the file list, making file browsing more intuitive.

- Batch file upload and download:

BabelBird provides a client-specific upload and download module, which supports the upload and download of batch files, and also provides a list display of transferred files.

- View file details and version management:

BabelBird has a dedicated file details interface. In the file details, you can add file descriptions, view basic file information, and view metadata for image files. You can also view file logs, file access and usage, and manage file versions in the details.

B. File security and permission control

- File access control:

Department administrators or project administrators can set file access control to precisely control the access permissions of each file or folder for each user or a certain role.

File access control takes precedence over members' department role permissions. For example, if a department member role has editing permissions on a certain file, but the department administrator uses file access control to change the member's permissions on the file to "invisible", the member will not be able to access the file.

- File sharing:

Supports sharing files and folders, allowing users to set detailed access permissions to control file access.

- File snapshot sharing:
For those who only want to share the current version, users can create a snapshot share of the file. The snapshot share will not be changed by updates to the file content and will maintain the version when the snapshot was created.

Version management

### Version Management Overview

Version management is one of the important functions of BabelBird Enterprise Drive. It allows users to track and manage different versions of files, ensuring that file history and updates can be retained and viewed. Babel's version management function is very powerful and supports multiple update methods as well as version rollback and viewing.

### Technical implementation

Version management uses file blocking and incremental saving techniques to store file versions. This means that each change to a file generates a new version that stores only the changed data blocks, reducing storage requirements and increasing efficiency. Enterprise administrators can set the number and storage time of file versions in the enterprise console to control version management policies.

The version management feature enables users to flexibly manage file versions to ensure file integrity, history, and security. Version management is a core function of BabelBird Enterprise Drive, aiming to provide excellent user experience and data security.

### Version update method

Babel allows users to update file versions in a variety of ways, including:

- Manually upload new version:

Users can right-click the file and select Upload New Version to manually upload the new file and save it as a new version of the file.

- Detection of files with the same name:

When uploading, Babel can detect files with the same file name, and users can choose to upload the new file as a new version of the existing file.

- Client editing and saving:

If a user edits a file using the client and saves it, Babel will save the changes as a new version of the file.

- Online editing and saving:

If the user edits the file using the online editing function on the web page and saves it, a new version will also be generated.

- Sync folder editing:

The Babel client will monitor the synchronized folder for updates. Editing or overwriting files in the synchronized folder and saving them will generate a new version.

- Map disk editing:

Edit the file in the mapped disk and save it. The updated file will also be saved as a new version.

### Version management function

The Babel version management module has the following functions:

- Version rollback:

In the file version list, users can choose to set the old version as the current version to implement version rollback.

- Version download:

Users can choose to download version history to access previous file versions.

- Version preview:

The version management module allows users to preview an old version of a file when clicking on it to see the content of that version.

- Version comparison:
When previewing files in the Babel Previewer, you can select the file comparison function, which supports selecting old and new versions for comparison.

- Version log:

Users can add logs to each file version to record important information and change history of the version.

### Enterprise Control

The version management function of BabelBird Enterprise Drive allows enterprise administrators to make advanced settings in the enterprise console to meet the specific needs of the enterprise. Enterprise administrators can set the number and retention time of file versions based on company policies and compliance requirements to meet the needs of different file types and departments.

Such a version management system ensures the data consistency and traceability of files, as well as the integrity of user data. At the same time, it has strong protection against viruses such as ransomware that change the readability of files, because ransomware changes files and requires updated files, and the updated files will form a new version. Users only need to roll back the version to get the files before the attack.

Search

### Search module overview

The search module of BabelBird Enterprise Drive is a key function. It is developed based on powerful Elasticsearch technology and database query technology, and is designed to provide efficient, accurate and comprehensive document search functions. The search module not only supports full-text search, but also searches the description, comments and file names of documents to meet the search needs of different users.

### Search with permission judgment

Babel's search module not only has a powerful search function, but also uses advanced permission management technology to dynamically determine user permissions to ensure that users can only see files within their permissions. The search results are dynamically generated based on the user's permissions, which means that among the files shared by the user, only the files that the user has permission to view will be searched. This is a critical technology, especially in enterprise environments where permissions can change at any time.

### Technical basis

- Elasticsearch:

Elasticsearch is an open source search engine known for its efficient distributed architecture and powerful full-text search capabilities. Babel uses Elasticsearch as its core search engine to support full-text search and advanced query capabilities.

- Database query:

In addition to Elasticsearch, the search module also utilizes database query technology to search the metadata and tag information of documents to provide more comprehensive search results.

- Document analysis:

The search module uses text extraction technology to extract text information from various types of files. This extracted text information is used for search engine indexing and querying. Keyword extraction.

- Word segmentation optimization:
BabelBird has done a lot of word segmentation optimization work, especially for Chinese vocabulary, to improve the word segmentation accuracy and performance of search engines. The optimization of Chinese word segmentation plays a key role in the accuracy of search results.

### Search function

The Babel search module includes the following main functions:

- Full text search:

Users can perform full-text searches to find textual content within documents to find files related to keywords.

- Document description and comment search:

The search module supports searching for descriptions and comments added to Babel documents by users, making it easier for users to find specific information.

- File name search:

Users can perform precise file name searches to find specific files.

- Tag search:

Tag search, query, and classification display are available

- Advanced search

BabelBird supports advanced search function, which can conduct advanced search based on keywords, full-text content, time, file format, uploader, search scope, search type and other dimensions.

### Performance optimization

The search module has high requirements on server performance. Therefore, for users with private deployment, it is recommended to deploy the search module on an independent virtual machine or server to reduce the performance consumption of other modules.

### Future development

Future versions of Babel will continue to improve the search module and combine AI technology, such as ChatGPT, to implement question-and-answer chat dialogue search of document content, providing users with a more intelligent search experience. At present, the AI-based document analysis and customer service system "Zhichao AI" has been launched. For details, please refer to the Zhichao AI chapter.

The continuous improvement of the search module will help users find the files and information they need more quickly and accurately. After the introduction of the AI ​​system, users can obtain information in the form of questions and answers, and can cross the contents of multiple documents to draw complete conclusions, which can greatly improve production efficiency and work efficiency.

office online editing

### Overview of online editing module

BabelBird Enterprise Drive has been an official partner of OnlyOffice for many years. The online editing module of BabelBird Enterprise Drive is developed based on OnlyOffice technology and optimizes the loading and display of Chinese fonts. Babel Online Editor supports a variety of document formats, including Microsoft Office (Word, Excel, PPT) and WPS Office.

Details of the cooperation between BabelBird and OnlyOffice can be found on the official website of OnlyOffice:

https://www.onlyoffice.com

### Technical basis

The technical basis of the online editing module includes:

- OnlyOffice Editor:
OnlyOffice is a powerful online office suite that supports online editing of multiple document formats. BabelBird integrates it into the network disk system to provide a high-quality online editing experience.

- Chinese font optimization:

In order to overcome the lack of Chinese font loading efficiency in OnlyOffice, BabelBird has been optimized and uses font localization technology to greatly improve the loading and display speed of Chinese fonts, thus improving the user experience.

- Document lock:

BabelBird supports both client editing and online editing, which means that in order to prevent file version conflicts, files must be locked when being edited online and cannot be edited on the client side, and files must be locked when being edited on the client side and cannot be edited online.

### Main functions

BabelBird’s online editing module includes the following main features:

- Multi-format support:

Users can edit and view documents in Microsoft Office (Word, Excel, PPT) and WPS Office formats online.

- Co-edit:

The online editing module supports multiple users to collaboratively edit documents at the same time. Users can view the changes of other users in real time and edit documents together. This collaborative editing feature is great for team collaboration.

- compatibility:

BabelBird's online editing module is compatible with Microsoft Office and can restore the Office layout and fonts on web pages. Ensure good compatibility of document layout and format when opened in different editors.

- Open API:

BabelBird opens the API of the online editor, allowing other enterprise software to call the API and integrate the online editing function into other applications.

### user experience

The goal of the online editing module is to provide a user-friendly and smooth online editing experience. Users can directly open the document that needs to be edited in the network disk, and save it immediately after editing without leaving the network disk interface. This seamless integration improves user efficiency and makes editing documents more convenient.

At the same time, BabelBird permission configuration supports "online editing only", which means that some users can only edit documents online but cannot download and obtain documents.

### Enterprise collaboration

The BabelBird online editing module is not only suitable for individual users, but also provides a collaborative office platform for enterprises. Team members can edit documents together, share ideas, and work more efficiently through real-time collaboration.

### Open API

BabelBird Online Editor API allows enterprises to integrate online editing functions into their own software or third-party software, allowing enterprises to fully utilize online editing capabilities.

### Other online editors

BabelBird Standard Edition also integrates other online editors for online editing and creation of MD files, TXT files and even mind maps (such as brain maps). At the same time, BabelBird can also integrate other online editing systems that support HTML5 by connecting to third-party APIs, such as Microsoft Office 365 or Kingsoft's web office (WPS).

- Comes with text editor for online editing.

The text editor that comes with BabelBird can edit and preview text files such as TXT, MD, RTF, etc. It can also edit code files such as CSS, JS, JSP... to facilitate users to quickly create document records.

- Comes with a mind map (mind map) editor.

BabelBird comes with its own mind map module, which can create and edit mind map files online.

Mind map files are saved in KM format by default. It can also be exported to KM, TXT, MD, SVG, PNG, and Xmind formats.

BabelBird can also optionally support the creation of flow charts, but you need to purchase the corresponding module license (the non-standard version comes with it by default).

Client editing

### Client editing overview

BabelBird Enterprise Drive provides powerful client-side editing functions. Users can easily call local editing software to edit cloud documents. After editing and saving, the files will be automatically uploaded to the cloud. This feature not only improves user convenience, but also helps avoid file version conflicts, thereby improving work efficiency.
Right-click on the file to be edited in the client file list and select Edit to open client editing.

The implementation principle of client-side editing determines that as long as there is a local editing program, all types of files can be edited on the client-side.

### Technical implementation

Implementation technologies for client-side editing functions include:

- Client integration:

Both BabelBird's Win client and Mac client support the calling of local editing software, which allows users to open and edit cloud files directly in local software.

- Cache management:

Client-side editing uses caching technology to cache the files that need to be edited from the cloud to the local computer and call local applications to open them. When the system detects that the file being edited has been updated, it uploads the updated file as a new version. Good cache management technology can save users' local disk space while ensuring efficiency. Users can also manually clear the file cache in the Babel right-click menu.

- File status detection:

Before client-side editing, the system checks the status of the file, including whether the file is locked by another user. This helps prevent multiple people from editing the same file at the same time and avoid version conflicts.

- Automatic locking and unlocking:

When a user starts editing a file, the system automatically locks the file to ensure that other users cannot edit the same file at the same time. After editing is completed, the file will be automatically unlocked, a new version will be generated, and the modified file will be uploaded to the cloud.

- Version conflict handling:

Despite the locking mechanism, file version conflicts may occur under certain circumstances, such as network problems or when the file has not been edited for a long time. BabelBird provides a conflict handling interface, allowing users to compare and choose whether to use the cloud version or the local version as the current version. Regardless of the user's choice, the system will ensure that the unselected version will also be uploaded to the cloud as a historical version to prevent data loss.

### Main functions

The main functions of the client editing function include:

- Local editing:

Users can cache the file locally by clicking the local edit button and edit it using the local default application.

Babel theoretically supports local editing of all files as long as there is a corresponding local application.

- Automatic lock:

Files are automatically locked while editing to prevent other users from editing at the same time, thus avoiding version conflicts.

- Automatically unlock:

After editing is completed and the app is closed, the file will be automatically unlocked, a new version will be generated, and the modified file will be uploaded to the cloud.

- Version control:

All edited and uploaded files will generate new versions so that users can view and restore previous versions at any time.

### User experience
Client-side editing capabilities provide an excellent user experience. Users can edit in the local editor without having to download the file, edit it and then upload it. At the same time, file formats that do not support online editing or online preview can also be opened for editing or preview through client editing. This improves editing efficiency and workflow smoothness.

### Technical Challenges

The technical challenges of client-side editing capabilities lie in detecting the status of files, automatically locking and unlocking, and handling conflicting file versions. The system needs to accurately determine whether a file is being edited by another user, while also providing user-friendly solutions when conflicts occur. These challenges require a combination of user experience and data integrity. Babel client editor is one of the few functional modules in the industry that can handle these problems well.

Share and send out

### Sharing function

BabelBird Enterprise Drive provides a variety of flexible sharing methods, including invitation sharing and link sharing, to meet the different needs of users.

- Invite to share:

Invite sharing is a way to share a file or folder with specific people. Features are as follows:

Identity verification: Invitees need to undergo identity verification. They can log in through their Babel account or receive a verification code to confirm their identity.

Each invitee can independently manage permissions and set the permission validity period. This means that for the same invitation sharing, different invitees can set different access rights.

Permission control: Sharers can customize sharing permissions, including viewing, editing, downloading, etc. This helps to provide granular control over what is shared.

Approval mechanism: If the user does not have sharing permissions, the sharing operation needs to be approved to ensure that only authorized personnel can share files.

- Link sharing:

Link sharing allows users to create a public link for others to access a file or folder. Features are as follows:

Allow anonymous access: Sharers can choose whether to allow anonymous access. If the anonymous access option is turned off, visitors will need to have a Babel account to access.

Snapshot sharing: In snapshot sharing mode, the content shared is the current version at the time of sharing. Even if the file content is updated, the content shared by the snapshot will not change.

Password protection: Users can set a password to ensure that only those who know the password can access the shared link.

Validity period: Link sharing can set a validity period to ensure that the file will not be made public permanently. Once the validity period expires, the shared link will automatically expire.

- Custom settings:

In the enterprise console, administrators can customize sharing permissions, set sharing behavior by department (support or prohibit sharing), set sharing rules by file (prohibit sharing of high-confidence files), and turn off the external sharing function of the entire enterprise.

- Share log:
All sharing behaviors and external access behaviors have independent logs, and each shared access log can be queried. You can know who accessed a shared file or folder when, and updated versions of shared files will alert users.

- Unified management and sharing:

Department administrators can uniformly view and manage all shared files in the entire department. Shared personal files can also be uniformly viewed and managed in the "My Shared Files" column to ensure that no omitted shares will be leaked without knowledge.

### Outbound function (send files)

The outgoing function is a way to send files to other users via email or mobile phone number for direct downloading. Outgoing is different from sharing. It is only used for the recipient to download outgoing files without configuring permissions. Features are as follows:

Send files: Users can use the outgoing function to send files to other users' email addresses or mobile phone numbers so that they can download and use them directly.

The file sending function can also send files to internal users. There will be a notification when the file is received. Click the notification to download or transfer the file.

No permissions required: Outsourcing does not require configuration permissions and can be used as long as the user has sharing and download permissions.

Email or SMS sending: Outsourcing can send file links via email or SMS to ensure that the recipient can easily obtain the files.

Quick download: The recipient can directly download the file by clicking on the link, which is simple and convenient.

### User Controls and Enterprise Policies

Users' sharing permissions can be controlled by enterprise administrators to ensure that file sharing and outgoing files are strictly managed. In addition, enterprise administrators can also customize sharing rules and permissions through the enterprise console to adapt to different enterprise needs.

- Security

Sharing and outgoing functions are subject to strict security controls to protect corporate files from being accessed by unauthorized personnel. Administrators can flexibly configure sharing and outgoing permissions and rules according to the enterprise's security policy.

### Flexibility and convenience

Sharing and outsourcing functions provide enterprises with flexibility and convenience, meeting the needs of different users and scenarios. Users can choose the most suitable sharing method according to specific situations to better manage and share files.

Previewer, annotations, and discussions
In order to allow users to more conveniently preview files and conduct collaborative discussions while previewing files to improve collaboration efficiency, Babel has developed BabelViewer. Most file formats that can be previewed on Babel can be opened with the previewer. Babel Previewer can not only preview files, but also communicate with collaborators on file content through hand-drawing, text discussion, voice (only mobile APP supports the creation of voice annotations) and other methods. At the same time, BabelBird Previewer also supports version comparison, switching versions to view different version annotations, annotation management, approval management and other functions.

### Technical architecture

- Use canvas development and multi-layer technology

The previewer is developed based on Html5 Canvas technology and uses multi-layer technology to add annotation and hand-drawing layers on top of the file preview layer. It does not affect the file content but allows for annotation discussion and real-time hand-drawing.

Real-time collaboration module

The real-time collaboration module of the previewer ensures that the annotation discussions and hand-drawings of multiple users are displayed in real time when previewing files, which means that users can discuss issues with documents or design manuscripts while annotating.

- Annotation point coordinate system positioning

The Babel previewer uses coordinate system positioning to ensure that the annotation points are in the same position under different resolution screens and different browser sizes.

### Applicable file types

BabelBird Previewer can open most pictures and office documents, PDF documents and vector graphics files. For specific supported file types, please refer to the File Types Supported for Online Preview in the Preview and Transcoding chapter.

### Previewer type

- Multi-page document previewer

Supports preview of multi-page documents, such as word, PPT, PDF and other formats. For multi-page documents, it provides functions such as table of contents, zooming in, and page rotation that are suitable for multi-page documents.

- Image previewer

Designed for better preview images. It has functions such as eagle eye, zoom in and out, display original proportion, rotation, etc.

Right-click to copy the image to the clipboard, making it easy to paste the image directly in WeChat or email.

For images with transparency such as PNG, you can change the image background.

- Graphic previewer

Designed to preview vector graphic files such as CAD, SVG, single-page PDF, etc., it supports eagle eye, layered display, background change, mouse dragging area enlargement, and vector enlargement. You can switch the encoding mode for SVG files.

- 3D previewer

In order to preview the 3D file design, you can rotate, zoom in and out the 3D file with the mouse wheel, explode the image, and support annotation in 3D space.

### Comment type

- Text discussion area

Text discussion areas can be created in any area of the preview file (double-click to create text discussion comments).
Collaborators of the file who have permission to view comments can see the comments and participate in the discussion.

The annotation content is displayed in real time, and a text annotation discussion area is equivalent to a group chat for the annotation content.

Supports inserting attachments for discussion, and also supports @ and other chat functions.

You can set the visibility of comments, such as: only visible to company members, visible to everyone, and only visible to the commenter himself.

- Text annotation

Text annotation can add annotations to document content or photos.

- Selected text annotation

For documents with text, such as word and PDF, you can select a piece of text for annotation.

- Special symbol insertion

For manuscripts with special needs, revision symbols or welding marks (such as CAD drawings) can be inserted

- Create graphic annotations

It also supports the use of graphic frame selection annotations, supporting rectangles, ellipses and arrows.

- Voice annotation

The Babel mobile device APP can create voice annotations. Voice annotations can be viewed (listened to) on web pages and clients, but cannot be created.

- Hand-drawn annotations

Supports real-time drawing on manuscripts or documents. Participants can see the drawn lines in real time and mark the artist's nickname.

### Function module

- Comment management module

You can manage created comments and comment status, check other versions of comments, and switch to the corresponding version

- Review workspace

Babel can use comments during document review and display review-related panels, allowing reviewers to convey review information more accurately and conveniently.

- Eagle Eye

Eagle Eye can display the area of the image viewport when the image is zoomed in.

- Version comparison

Babel Previewer supports file comparison function and can also compare different versions of files.

- File directory

For files with directories (word, pdf), BabelBird also supports displaying the file directory during preview.

Document review
BabelBird Enterprise Drive provides a powerful document review function, designed to help users efficiently manage the document approval and revision process. Document review is a collaborative work process that allows users to initiate a document review, invite reviewers to view the document, provide comments and suggestions, and ultimately determine whether the document requires modification or approval.

### Main features

- Multi-document review: Supports review of multiple documents at the same time. Users can initiate review of multiple documents at one time to ensure an efficient review and approval process.

- File Lock: Files will be automatically locked during the review process to prevent other users from editing or uploading new versions, ensuring that the file content will not be changed during the review process.

- File preview and comments: Reviewers can add comments and fill in review comments when previewing the file to provide detailed feedback. This helps to better understand the file content and provide targeted recommendations.

- Review process: Users can choose different review processes, including freely defining the review process, using a preset review process, or restricting the use of specific review processes. This allows different departments to choose the appropriate approval process based on their needs.

- Multi-stage approval: The approval process supports multiple stages, and one or more approvers can be set for each stage. Users can define a pass ratio, for example, if 50% of approvers pass, a certain stage can be passed.

- Invite external reviewers: Users can invite external members (via email or mobile phone number) to participate in document review to obtain more feedback from different perspectives, such as inviting external experts during thesis defense.

- Approval report: After each document review, an approval report will be generated to record the review opinions of participants at each stage for tracking and analysis of the approval results.

- Review signature: supports inserting a signature on the manuscript after the review is completed and downloading it as a PDF.

- My Review Column: Users can view and manage all stages of all review documents related to themselves in the "My Review" column, including initiated reviews and invited reviews.

### Technical architecture

The implementation of the document review function involves the following technologies and modules:

- Review process definition: Different review processes are defined in the background, including stage setting, approver selection, passing ratio setting, etc. These processes are available to front-end users for selection.

- Department-specific approval processes: Different departments can choose different approval processes and choose to freely define, preset or limit specific approval processes as needed.

- Multi-stage approval: Multi-stage approval can be achieved, and each stage has different approval requirements, including the selection of approvers and the passing ratio. You can also set whether a certain stage can be skipped.

- Invitation of external approvers: Supports inviting external members to participate in document review by email or mobile phone number.
- Approval reports: Generate approval reports to record review opinions at each stage for tracking and analysis of approval results.

### Advantages of document review

The document review function helps users efficiently manage the document approval and revision process to ensure the accuracy and compliance of document content. Users can use document reviews to ensure documents have been adequately reviewed and discussed to meet their work needs and compliance requirements. The introduction of this feature increases the depth of file collaboration and management, providing users with more powerful file collaboration tools.

Permission management

Permission management of BabelBird Enterprise Drive is one of its core functions. It runs through the entire system to ensure that users can access and manage files safely and compliantly. The Babel permission system includes two main aspects: role permissions and file permissions.

### Role permissions

- Define roles: Babel allows you to define different roles within the enterprise. Each role can include a specific set of permissions to control users' access and operations in department folders. These roles can be created based on department management needs, such as "Department Administrator", "Department Member", etc.

- Department role permissions: Each department member can be assigned different access permissions based on their roles in different departments. This means that users can have different levels of permissions in different departments.

- Flexible management: Babel's role permissions support multiple department roles, and the same role can be used in different departments at the same time. After the permission content of a role is changed, the permissions of members using the same role will also be changed accordingly.

- Permission combination: Babel bird role permissions support the combination of more than 30 optional permissions to achieve refined user permission control. These permissions cover various access and operation behaviors, such as preview, upload, download, edit, etc.

- List of optional permissions for roles:

### File permissions

- Custom permissions: File permissions can also be customized in the background, and users can choose specific permission types and names. These custom file permissions will be used for file sharing, project management, and file permission control.

- File access control: File access control allows department members to set specific access permissions on files and folders to override department role permissions. This means that the access behavior of a certain file or folder in the department can be more precisely controlled. File access control only applies to department members and project members.

- High priority: File access control permissions have a higher priority. If file access control is set, it will override the member's department role permissions or project permissions. Users can set file access permissions as needed.

- Department File and Folder Control: Users can enable file access control for department files and folders to control access to specific files or folders.
- Validity period: File access control can set a validity period. After the validity period, the constraints of file access control will become invalid. For example, if a department member who does not have file editing permissions is given the editing permissions for the file, the validity period is 3 days. After 3 days, the permissions granted by the file access control will expire, and the department members' permissions on the files will become the permissions of the member role.

### Summary

The permission management of BabelBird Enterprise Drive is a comprehensive system that can meet the specific needs of different departments and projects of the enterprise. Role permissions and file permissions work together to ensure that users have precise control over file access and operations. This feature helps improve security, compliance and productivity.

sync

### Overview

- File synchronization is one of the most popular functions of BabelBird Enterprise Drive. It allows users to synchronize any local folder to the cloud or any cloud folder to the local, achieving real-time synchronization of cloud and local files. This section contains the following key functions:

Synchronization management: Babel supports the creation of multiple synchronizations and can manage them uniformly in the synchronization management list.

Multiplayer collaboration: Babel Sync is designed for multiplayer collaboration. It automatically locks files to prevent conflicts caused by multiple people editing at the same time, and also has a conflict handling mechanism and version management.

Consistent with permissions: BabelBird Sync will determine the user's permissions. Users without download permission will not download files due to synchronization, ensuring the consistency and closed loop of permissions. This means that users can set which folders can be synchronized through permissions.

Multiple synchronization types: Babel supports multiple synchronization types, and users can choose the appropriate synchronization method according to specific needs:

Two-way synchronization: the cloud and local folders keep the content consistent, and modifications on either side will be synchronized to the other side.

One-way upward synchronization: local updates will be synchronized to the cloud, but cloud updates will not affect the local.

One-way downward synchronization: Cloud updates will be synchronized to the local, but local updates will not affect the cloud.

- Powerful technical advantages: BabelBird's enterprise network disk synchronization function has a number of technical advantages to ensure performance and stability:

Support large-scale folders: Babel supports folder synchronization of up to 200,000 files.

File editing lock: When editing a synchronized file, the file will be automatically locked to prevent conflicts caused by multiple edits.

Conflict handling mechanism: For editing conflicts on the same file, Babel provides a conflict handling mechanism to ensure the integrity of the file version.

Version management: The file synchronization function and version management work together to ensure that local folders will not be overwritten and lose content due to misoperations and other reasons. Even if a file conflict occurs, the two conflicting versions of the files will be saved.

Error handling in asynchronous situations: The file synchronization function also includes error handling and repair in asynchronous situations.
### How to use

- Turn on synchronization: right-click the local folder and select BabelBird - Sync the folder.

- Select synchronization method: Users can choose the appropriate synchronization method during synchronization, including one-way synchronization, two-way synchronization, etc.

- Permission configuration: Through permission configuration, users can implement more customized synchronization methods and restrict file deletion or other operations as needed.

- Multi-person collaboration: Under multi-person collaboration, files will be automatically locked when editing to avoid conflicts caused by multiple people editing at the same time. The conflict handling mechanism ensures the consistency of file versions.

- Version management: The file synchronization function supports version management, and users can view previous file versions and restore them.

### Summary

The file synchronization function of BabelBird Enterprise Drive is an excellent tool that can achieve real-time synchronization of cloud and local files. Technical advantages such as multiple synchronization methods, permission configuration, multi-person collaboration, and version management ensure high performance, stability, and security.

virtual map disk

### Overview

- Virtual mapped disk: BabelBird Enterprise Drive introduces the virtual mapped disk function, which provides a way to seamlessly connect cloud files. You can access the mapped disk in Windows Explorer or Mac Finder just like accessing a local disk, thereby achieving an easy access to cloud files.

- Technical implementation: BabelBird Virtual Mapping Disk uses a technical solution similar to OneDrive and iCloud. It creates a virtual disk in the operating system and maps cloud files to the user's local computer, making these files visible in the user's file browser.

### Main features

- Local access to cloud files: The virtual mapped disk allows users to access files and folders in their Babel Enterprise network disk through tools such as local file explorer or Finder.

- No local storage occupation: Unlike traditional file synchronization methods, virtual mapped disks do not actually store cloud files on the user's local disk, so they do not occupy local storage space. Files are cached or downloaded only when needed.

- Online access: Virtual mapped disks require a network connection to access cloud files. The file icon is actually just a link to the cloud file, so you need to be online to view and operate these files, and the permissions are the same as those in the cloud.

- Transparent operation: Users can operate files in the virtual mapped disk just like local files, including opening, copying, pasting, deleting and other operations.

- Automatic synchronization: File changes will be automatically synchronized to the cloud, thereby maintaining the consistency of the cloud files and the files in the virtual mapped disk.
- Associated files: When you open a file with an associated file in the BabelBird mapping disk, the associated file will be automatically loaded, achieving the same effect as opening a file in a local folder. For example: opening a DWG (AutoCAD file) containing a large number of reference files, or an Excel chart associated with other files.

### Technical advantages (compared to WebDAV and SMB)

- Permission consistency: Unlike WebDAV or SMB mounting (which must use permission rules compatible with WebDAV or SMB), BabelBird mapping disks are implemented by directly calling the underlying file system of the operating system, which can achieve permission control consistent with BabelBird. (For example: you can only preview but not download or save as.) In WebDAV and SMB, only the view permission is actually read-only. As long as the file is visible, the user can open and obtain the file in read-only mode, losing control of the file.
- Higher performance: The Babel mapping disk directly corresponds to the Babel server-related interfaces. There is no forwarding and intermediate processing links. You can directly obtain the file list provided by the server and open the folder virtually, so it can provide higher performance, and there will be no lag when opening the file list and checking files. Using WebDAV, you can only open a folder to temporarily load a list. If the number of folder files exceeds a certain number (related to device performance and network speed, usually more than 300), severe freezes and slow access will occur. WebDAV does not support very large folders using object storage systems.

- More secure: Babel mapping disk can determine the folders and files in the folders that everyone can view based on permissions. People with different permissions can see different contents when viewing the same folder. SMB and WebDAV currently cannot do this. At the same time, Babel's files are encrypted and stored in object storage in blocks. However, if the files are encrypted and stored in blocks, using WebDAV, you need to decrypt the files in order to obtain the file list. This means that products that support WebDAV either do not store data encrypted, or the performance of WebDAV is extremely poor and the number of files exceeds a certain range and is unavailable.

- Controllability: Unlike WebDAV and SMB that use third-party software to mount, the Babel mapping disk is a self-developed drive. It has controllability over the drive's operation, menu, running mode, and function implementation, and is responsible for product quality and user experience consistency. There will be more functional expansions in the future.

- Mainstream enterprise-level solutions: Whether it is Microsoft's OneDrive, Google's Google Drive, Apple's iCloud, BOX's BOX Drive, or domestic mainstream Internet enterprise network disk manufacturers, they all use solutions similar to Babel's mapping disks, rather than simply accessing WebDAV (to access WebDAV, you only need to make protocols compatible and open for access, and it is simple to implement. Why do mainstream enterprise-level manufacturers spend a lot of energy to develop their own mapping disks?). The main application scenarios of WebDAV are individuals or small teams that do not need to make complex permission judgments, store encryption, and open all files. The main usage scenario of SMB is also open file sharing (plain text storage) for individuals and small teams.

### Application scenarios

Virtual mapped disks are suitable for users who need to frequently access cloud files but do not want to change their local disk usage habits or occupy local storage space. This function allows users to access cloud files just like local files, and access network disks in other applications just like opening local folders, without changing usage habits, and facilitates file management and use.

File management
BabelBird Enterprise Drive provides a powerful file management module for unified management and archiving of enterprise files. This module is designed to help businesses better organize and retain critical files while ensuring they are secure and accessible.

### Main features

- Archivist: Babel allows the super administrator to designate one or more company members as archivists. Archivists are responsible for managing archived documents and archives.

- Archive: Archived files are stored in the root directory of the archive. Archives are corporate libraries of materials used to retain and manage documents over the long term.

- Reading room: Archivists can create a reading room and move files from the root directory of the archive into the reading room. Only then can other company members borrow these documents.

- Borrowing permissions: The reading room can choose different borrowing methods, including public, borrowing required, open to departments only, borrowing within departments only, etc. When borrowing a file, you can set the permission level, such as reading only, copying, downloading, and specify the borrowing time.

- File archiving: Archived files cannot be changed, ensuring the integrity and credibility of the files. This is important for long-term retention of legal and compliance documents.

- Archive search: The archive has an independent search function, and only files in the archive will be searched. Users can quickly find the archive files they need.

- File privacy: Non-public files without borrowing permission will not display preview images to ensure file privacy.

### Technical architecture

The Archives Management module uses the following key technologies and modules:

- Archive administrator permissions: Super administrators can designate company members as archive administrators, allowing them to manage archives and reading rooms.

- Reading Room Settings: Archivists can create reading rooms and configure different borrowing permissions and accessibility options.

- Archiving and retention: Once a document is archived, it needs to ensure that its contents cannot be changed. This requires technical measures to protect file integrity.

- Independent search: The archive has an independent search engine for searching files in the archive to ensure that users can quickly find the files they need.

### Advantages of file management

The archive management module helps enterprises better manage the archiving and retention of documents. Through archives, reading rooms, and different borrowing permissions, enterprises can ensure that documents are retained long-term, managed in an orderly manner, and can meet compliance and legal requirements. This module can also be used as a knowledge base to help enterprises save important information and knowledge.

Logs and reports
The log and report system of BabelBird Enterprise Drive provides comprehensive file usage management, monitoring, auditing and accountability functions. This module is designed to provide business managers and users with insights into file activity, access, and system usage to support compliance and security requirements.

### Main features

- File log: Each file and folder has an independent log, which records various operations in the life cycle of the file in detail, including creation, reading, modification, renaming, sharing, deletion, permission changes, etc. This even includes anonymous sharing operations and the IP address of the visitor. These logs can be exported as Excel reports for auditing and monitoring.

- File access statistics: The file details page provides statistics on the number of file comments, downloads, opens, number of visitors, and visitors.

- Folder list: You can export the list of files and sub-files in the folder as an EXCEl file for auditing and management.

- Document Review Record Report: Document review operations are also recorded as reports to support auditing of document reviews.

- Department logs and reports: Department administrators can view the usage logs of the entire department, including detailed file access logs, statistics on the number of uploaded files, the number of sub-departments created, or the number of projects. In addition, department administrators can count and manage files shared by the entire department and files with changed permissions.

- Enterprise-level management: Enterprise administrators and security auditors can view the usage behavior of the entire enterprise, including logs and reports of various departments, and there are also two columns, access logs and statistical analysis, to uniformly view and manage the usage behavior of the entire enterprise. This helps maintain corporate compliance and security.

Access log: The access log records the usage log of the entire enterprise network disk, including every operation of the user on the network disk. Administrators can conduct detailed queries and export reports.

Statistical analysis: Provides statistical analysis chart tools, allowing administrators to view the usage activity of different departments, the number of files, the ranking of active files, statistics of new files, statistics of the number of uploaded files, and traffic usage statistics.

### Technical architecture

- Logging: The system needs to record detailed logs of each operation, including operation type, timestamp, executor, target file, IP address and other information.

- Report generation: Administrators are able to generate reports from log data, usually in Excel format, for auditing and monitoring.

- Data analysis tools: Statistical analysis tools are used to analyze and visualize data to help administrators better understand system usage.

- Log interface: Babel supports exporting log data through the interface to use third-party log management and analysis tools.

### Advantages of logs and reports
Logging and reporting systems help enterprises achieve the following goals:

- Compliance: Help enterprises comply with regulations and internal policies and ensure compliance of document operations.

- Security Auditing: Provides auditing capabilities that allow enterprises to inspect and monitor file access and operations to identify potential risks.

- Performance optimization: Through statistical analysis, it helps enterprises understand the performance bottlenecks of the system and take appropriate improvement measures.

- User behavior monitoring: allows business managers to understand employee behavior, including file access and operations, to ensure data security and confidentiality.

- Decision support: Help business managers make more informed decisions through data analysis, including resource allocation and document management.

The log and report system is an important part of BabelBird Enterprise Drive, which provides comprehensive file usage management and monitoring functions to support the compliance and security needs of enterprises.

Updates and notifications

### Dynamic column

- Overview: The dynamic column of BabelBird Enterprise Drive is an information flow used to display files and user dynamic information related to you. It provides a real-time overview of your work and helps you track your colleagues' activities, including file changes, annotations, comments, etc.

- Real-time information flow: The dynamic column presents the collaborative activities of you and your team in the form of real-time information flow, helping you to understand what is happening in the team in a timely manner.

- Convenient interaction: Through the dynamic column, you can directly access files related to you, reply to comments, interact with colleagues, and complete collaboration tasks in a more convenient way.

- Dynamic search: You can search dynamic historical content and locate related dynamic items more accurately.

### Notification section

- Notification system: The notification system of BabelBird Enterprise Drive is used to send various reminders and notifications related to you. These notifications can be communicated to you in a variety of ways, including email notifications, mobile application notifications, desktop notifications, etc.

- Notification types: The notification system covers a variety of notification types, such as @mentions of you, file update notifications, approval requests, file authorization requests, etc. This helps you stay on top of your various workflows.

### Personalization

- Information type settings: Users can customize which updates and notification types they receive in the settings according to their own needs to ensure that the information is accurate and targeted.

### Application scenarios

The dynamic column and notification column help users understand important developments and notifications at work, improve collaboration efficiency, and enable users to respond more quickly to colleagues' collaboration requests, reply to comments, and track file changes.
The dynamic and notification columns of BabelBird Enterprise Drive are key collaboration tools. They provide a real-time overview of collaboration and various notifications, allowing users to collaborate with their teams more effectively and maintain an understanding of the work process. These features help improve collaboration efficiency and ensure important information is not overlooked.

discussion group

### Overview

- Discussion group function: BabelBird Enterprise Drive creates discussion groups for each department and project, which serve as a group chat space for internal members of the department or project. Discussion groups allow members to post text and images, conduct discussions, and share attachments.

- Member interaction: The discussion group provides a convenient platform for members to communicate, collaborate and discuss project-related matters with each other, thereby enhancing teamwork and information sharing.

### Main functions

- Information publishing: Discussion group members can publish text messages and pictures to achieve real-time discussion and communication.

- Attachment sharing: Members can easily share attachments such as documents, forms, and other files for sharing and discussion.

- Visibility: Information posted in the discussion group is visible to all members of the department or project to which it belongs, ensuring information sharing.

### Application scenarios

Discussion groups are suitable for information exchange and discussion within departments and between project teams. They facilitate real-time collaboration and help solve problems, share insights, and track progress.

### Summary

Discussion groups provide a convenient collaboration platform for department and project members to share information, discuss matters, and work together. These discussion groups help enhance internal communication and increase the efficiency and productivity of your team.

workbench

### Overview
- Workbench function: BabelBird's workbench is a personalized interface that allows users to display commonly used folders, work content, and various information on one interface in the form of cards. Each card directly presents content and can be manipulated. Users can freely adjust the position and sorting of cards as needed.

- Personalization: The workbench provides multiple alternative cards. Users can freely select the cards that need to be added to the workbench and customize them according to their own needs. This enables users to get information and functionality relevant to their work on one page.

### Main functions

- Card display: Each card represents a different type of information or work content, such as recently accessed files, uploaded files, followed files, shared files, annotated files, tag clouds, etc.

- Custom Charts: Users can customize charts or cards to add specific projects, folders, or other information to the workbench to meet their unique needs.

- Card sorting: Users can sort cards by dragging and dropping so that the most important or frequently used information is at the front.

### Application scenarios

Workbench is suitable for situations where users need to centrally manage and access information and resources related to their work. Users can place frequently used files and projects on the workbench to improve work efficiency.

Enterprise management backend (enterprise console)

The BabelBird Enterprise Console centralizes the administrator's functions for managing the entire enterprise. Enterprise administrators can configure various options of the enterprise network disk in the enterprise console, turn on or off the required functional modules, set the organizational structure, customize roles and permissions, manage members, set watermarks, set department security policies, IP access policies, bind accounts and mac addresses, monitor network disk usage...

### Main columns

- Enterprise configuration: Comprehensive management of enterprise network disk configuration items, such as space allocation, whether personal files are allowed, allowed file upload size, historical version validity period or number of historical versions, various administrator assignments, changing logo and login background, prohibiting or enabling external sharing, and whether to accept email notifications. Various enterprise configuration options can be found in the enterprise configuration column.

- Organizational structure: Unified management and maintenance of the enterprise's organizational structure and departments. Ability to view departments and management departments in a tree view. View department members, allocate department space, create sub-departments, set department security policies...

- Permission management: Create roles and change role permissions, and manage custom file permissions.
- Member management: You can search and filter the member accounts of the entire enterprise, add new members, import members in batches, assign member departments and roles, view and manage the information and usage of each member in detail, handover when members leave, add, delete, modify and check member accounts, allocate and limit member space and traffic.

- Tag management: unified management of tags used by enterprises, adding tags and classifying tags to facilitate users to select tags.

- File configuration: Add an optional process for file approval and manage the already added approval process. It also has a file blacklist function that can prevent specific types of files from being uploaded.

- Corporate notifications: Create corporate notifications, manage historical corporate notification lists, and send corporate notifications.

- Group management: Create and manage groups. When sharing files in the frontend, you can choose which group to share them with.

- Watermark settings: manage document watermark types, adjust watermark parameters, and set watermark display range.

- Access log: Manage and query all access records of the entire enterprise network disk. Log reports can be exported.

- IP policy list: The upload and download behavior of corporate files can be managed through IP policies. For example: downloading files is prohibited in a certain IP range, and you can download files by returning to a certain IP range.

- Mac address binding: You can bind the user account to the mac address of a specific device, so that the account can only be used on the device bound to the mac address. You can also create a mac address pool.

- Statistical analysis: Statistically analyze the usage of network disk. Including system activity, file number statistics, active files, number of new files within a period of time, number of uploads per month, and traffic usage.

- Workbench push: Set the default display card of the workbench.

- System configuration (private deployment version only): configure the mail server, bind third-party SSO authentication, and set the third-party authentication login method.

- Third-party account synchronization (private deployment version only): Set the third-party account synchronization time and query the third-party account synchronization record.

- Optional modules (private deployment version only): Select the functional modules that the enterprise needs to display and turn off some functional modules.

- Monitoring and warning: Set warnings for abnormal behavior, and notify administrators when abnormal behavior occurs (for example: users delete files in large numbers)

- Transfer file configuration: The configuration of the data ferry system allows data ferrying between multiple sets of BabelBirds. Configure the receiving port and sending port of data.

API

The Babel API module is responsible for Babel's open API. Private cloud users can apply for and open a developer account for free on the enterprise console, obtain the developer ID, key and token, and set the callback URL.
Callback URL setting rules: http://customer domain name /public/babelAuthResult.do

For example: http://testqiyeban.babel.cc/public/babelAuthResult.do

Setting path: Enterprise Console - Enterprise Configuration - Developer Account

Visit the following link to get the latest API documentation:

https://www.babel.cc/p/api-integration.do

Third Party Login (SSO)

Babel supports the integration of third-party login (SSO) platforms to achieve single sign-on and unified login. And Babel supports the integration of multiple third-party login platforms. For example: You can scan the QR code to log in via corporate WeChat, log in with your OA account and password, or scan the QR code to log in to DingTalk.

SSO integration is divided into two modules. Third-party authorized login and third-party organizational structure synchronization. Among them, third-party authorized login allows multiple sources to authorize login. However, in order to prevent user account conflicts, third-party organizational structure synchronization only allows synchronization of one source. For example: the organizational structure of the OA system is synchronized, but SSO login of OA and Enterprise WeChat is supported (the organizational structures of OA and Enterprise WeChat need to use the same userID)

For more information about third-party login of BabelBird, please refer to the User Authentication and Authorization (SSO) chapter

Data ferry

Babel Data Ferry supports Babel birds deployed in secret areas and Babel birds deployed in non-confidential areas to transfer data to each other in a secure and approved manner. To achieve data exchange between confidential and non-confidential areas under corporate supervision.

For detailed information about BabelBird Data Ferry, please refer to the BabelBird Data Ferry chapter.

Zhichao AI

Zhichao AI is the AI platform of BabelBird Enterprise Drive, including three main modules: Zhichao AI customer service, Zhichao AI knowledge base, and Zhichao AI document assistant. These modules combine large model APIs and custom training to meet the enterprise's intelligent customer service, file content analysis and question answering needs.

### The three main modules of Zhichao AI

- Zhichao AI customer service: This module serves as the AI customer service of the enterprise. BabelBird Enterprise Drive itself also uses this module to answer the problems encountered by users when using BabelBird Enterprise Drive. We also open this service to corporate customers. Companies can provide product manuals, FAQs, customer service documents and other materials to Zhichao AI for learning and fine-tuning to meet corporate customer service needs. Enterprises can also embed Zhichao AI's code blocks into their websites to quickly establish an external intelligent customer service system. Zhichao AI customer service can significantly reduce customer service costs and save time and resources.
- Zhichao AI Document Assistant: This module is used to answer questions about a single document. By analyzing the document content, Zhichao AI can answer various questions about the document content, from summarizing to revealing key findings. Users can ask questions to the AI ​​instead of having to read lengthy documents themselves, improving work efficiency.

- Zhichao AI knowledge base: This module allows companies to customize their own AI assistants. The Zhichao AI team will help prepare training sets and adjust parameters based on the company's data, thereby establishing an exclusive AI model that can provide answers within the scope of permissions for people with different permissions on BabelBird. It can be used as a corporate knowledge base assistant in the form of questions and answers.

### Technical Solutions

- Answer questions intelligently: Zhichao AI uses large models and custom training to ensure accuracy. It also uses small models to assist the work of large models, reducing problems such as talking nonsense, pretending not to understand, or leaking secrets. In addition, Zhichao AI follows BabelBird’s authority management mechanism to ensure that users can only obtain answers within their authority.

- Automatic learning: Zhichao AI can accumulate knowledge by studying the files provided by users and provide users with more accurate answers. All documents participating in training are specified and agreed to by the user to ensure data privacy and compliance.

### Advantages

- Reduced customer service costs: Zhichao AI customer service can significantly reduce the customer service costs of enterprises. There is no need to train personnel on a large scale, and AI can provide answers at any time.

- Quick question answering: Zhichao AI can answer users' questions instantly, improving work efficiency.

- Document content analysis: Zhichao AI Document Assistant can quickly analyze document content to help users quickly obtain information without reading the entire document.

- Customized AI assistant: Enterprises can customize exclusive AI assistants for Zhichao AI knowledge base according to their own needs to meet specific knowledge management and question answering needs.

- Permission management: Zhichao AI can provide answers within different ranges based on user permissions to ensure data security and compliance.

Automate tasks

Facing the growing number of digital assets, the traditional manual file management model can no longer meet the demand for efficient circulation. The "automated task" engine launched by BabelBird aims to hand over tedious and repetitive file processing actions to the system background for automatic execution. By establishing a "self-organizing and self-standardizing" intelligent circulation system, the cost of manual intervention is significantly reduced, allowing the team to focus on core business creation.

Automated tasks are included in the standard version and users do not need to purchase it separately.

Core operating mechanism:

Flexible permission-driven: Relying on the platform's extremely fine-grained permission management system, users with corresponding permissions on the target network disk or folder can independently configure, turn on or off specific automation tasks as needed.
Multi-task flow concatenation (Workflow): Automated tasks do not run in isolation and support the free combination of multiple rules to form a workflow. For example: after a file is uploaded, the system can first trigger "automatic rename" to standardize the file name, and then immediately trigger "automatic sorting" to archive it to the relevant directory, achieving multiple steps in one go.

Continuously expanding capability matrix: The automation engine is highly scalable. In addition to the existing basic functions, the platform will continue to access more automated processing nodes to meet increasingly complex business scenarios.

Currently supported core tasks (including but not limited to):

Automatic renaming: Unify and standardize naming according to preset rules (such as keyword replacement, case conversion).

Automatic organization and cleaning: Automatically classify archived files based on trigger conditions, or clean up space regularly based on policies.

Automatic PDF conversion and signature: Automatically generate a PDF copy of the source file, or stamp the company signature in the cloud.

Create folders in batches: Generate a standard business directory tree with one click by importing data templates (such as Excel).

### Multi-task collaboration and execution flow weight

In complex business scenarios, multiple automated tasks are often configured in one folder. In order to ensure the logical rigor and security of data processing, a strict automated processing sequence is preset at the bottom of the system.

The specific execution weight (the higher the value, the priority for execution) is as follows:

Automatically clean folders (weight 10): highest system priority. If there are qualified cleaning tasks, they will be executed first to avoid investing subsequent computing power in invalid data that will be discarded.
Automatic decompression (weight 9): Prioritize the release of packaged assets for subsequent circulation.

Automatic renaming (weight 8): Priority is given to completing the standardization and unification of naming before files enter classification and archiving.

Automatic format conversion category (weight 7): Prioritize conversion tasks such as transferring PDF, pictures or audio and video formats.

Automatic sorting/sorting (weight 6): Executed as the end node of the flow. This means that core pre-standardization operations such as cleaning, renaming and format conversion have been completed before files are moved and classified.

Automatically clean files (Auto Clean)

### Function Overview

In daily cross-department collaboration or project cycle management, a large amount of temporary data, process files or short-term circulation materials are often inevitably generated in the enterprise network disk. The **"Automatically Clean Files"** function is designed to provide enterprises with automated storage space optimization and directory slimming solutions. Through this function, the system can automatically delete redundant files in specified folders according to specific rules set by the user, keeping the project directory clean for a long time and releasing high-value storage resources.

### Core operation and configuration rules

This module uses a strict logical rule engine to perform file cleaning actions to ensure the accuracy and efficiency of data processing:

Target directory locking: The task configuration needs to explicitly specify the target folder to which the rule applies. Users can choose to apply the rules only to newly entered files in the folder, or to apply the rules to historical files that already exist in the directory at the same time.

Multi-dimensional rule triggering: Supports precise filtering and elimination of files based on specific rules. Common determination rules can cover file types (such as temporary files with specific suffixes), life cycles (such as files entering a directory for more than a specified number of days), and other dimensions to achieve highly customized cleaning strategies.

Workflow collaboration: As the end link of complete automated circulation, automatic cleaning can be seamlessly connected with other tasks. For example, after the "automatic conversion to PDF" task is completed, the system can immediately trigger the "automatic cleaning" rule to uniformly clean the original draft files, leaving only the standardized final version.

### Permissions and data security control

Since the cleaning task involves the sensitive operation of file deletion, this function relies heavily on Babel's extremely fine-grained permission management system:

Configuration permissions: Only collaboration members with corresponding advanced permissions (such as management and deletion permissions) for the folder can create or modify automatic cleanup tasks to prevent data loss caused by unauthorized operations from the source.

Senseless and safe execution: Cleaning tasks are performed silently in the background to reduce interference with user front-end operations. At the same time, the company's established data compliance and recycle bin retention policies are strictly followed to ensure the absolute security of data assets.
### Typical business application scenarios

Design and R&D projects: In architectural design or scientific research management, working software often automatically generates a large number of backup or cache files (such as .bak or temporary rendering files). By configuring automatic cleaning tasks, you can set up automatic identification and deletion of useless files with specific suffixes on a regular basis to keep core drawings and literature catalogs pure.

Public data exchange area: For the "temporary transfer station" or "temporary sharing area" set up within the enterprise, automatic cleaning tasks based on the time dimension (such as "automatic cleaning after 7 days of retention") can be configured to achieve self-organization and self-purification of public spaces and reduce operation and maintenance management costs.

Auto Rename

### Function Overview

In business scenarios involving multi-party collaboration and multi-frequency data collection, due to differences in operator habits, file naming often lacks unified standards, which brings great trouble to subsequent retrieval, archiving and auditing. The **"Auto Rename"** function allows the system to automatically rename files uploaded to a specified folder according to highly customized preset rules. This mechanism effectively eliminates naming confusion caused by human factors and ensures that enterprise data assets meet the standards as soon as they are stored in the database.

### Scope of application and permission control

Permission-driven: The enabling of this function strictly relies on the user's operation permissions. As long as the user has "upload" and "rename" permissions on the target folder (covering various folders such as personal, department, project or material library), the automatic renaming task can be configured for it.

Traceability processing: The rules not only apply to newly uploaded files, users can also choose to apply traceability to historical files that already exist in the target directory and all its subfolders. To ensure system performance and execution stability, the upper limit for batch source traceability renaming is 5,000 files at a time.

### Core rule engine and configuration dimensions

Babel provides a highly flexible visual rule splicing engine. Users can add multiple naming rules and sort the rules freely by dragging and dropping. The configuration interface provides real-time changing "sample file names" throughout the entire process to help users visually preview the overlay results of renaming rules.

The rules engine supports the following multi-dimensional named elements:

Standard attribute variables: Supports extraction and insertion of system-level variables, including file uploader, file person in charge, parent folder name, and upload time.

Multimedia metadata (Metadata): For files in specific formats such as images, the system can deeply analyze and extract their underlying metadata as the basis for naming, such as shooting date, camera manufacturer/model, lens model, size, and DPI/DPCM and other parameters.
Custom text and continuous numbering: Users can freely insert custom text content. In terms of numbering mechanism, unlike traditional single batch renaming, automatic renaming has state memory (continuity). The system will automatically read the last number in the target list that meets the rules to ensure that files uploaded across batches and time periods can achieve seamless continuation of serial numbers. Users can accurately set the starting value, incremental value and specific digits of the number.

### Refined pruning and anti-conflict mechanism of original names

In addition to adding new prefixes/suffixes, the system also supports deep structural cleaning of the original names of files:

Name pruning and replacement: You can perform "replace specific content" and "delete specified content" operations on the original file name. In addition, it also provides a one-click "Delete Characters" function to accurately remove redundant spaces, numbers, quotation marks, dashes and underlines in file names.

Mandatory anti-collision protection: If the user chooses to completely delete the "original file name" in the rule (that is, the original name is not retained when uploading), in order to avoid the risk of files with the same name overwriting each other, the system will force and automatically add a "numbering" rule to the rule chain.

Date logical mutual exclusion: When calling date class variables, the user can check "Replace the date detected in the file name". To prevent logical conflicts, in a single rename task, the replacement instruction is only allowed to be checked once by a certain time variable (such as "upload time" or "shooting time").

### Global formatted output control

After completing the splicing of rule variables, the system supports unified formatting specifications on the output end:

Case standardization: Supports one-click conversion of assembled file names into uppercase, lowercase, all uppercase or all lowercase to meet the visual specifications of different companies.

Uniform word separation: Supports the uniform insertion of standardized separators (such as spaces, underscores or dashes) between each naming rule module to further improve the machine-readable and human-readable experience of file names.

Auto to PDF

### Function Overview

In business links such as cross-enterprise collaboration, external data distribution, and project finalization and archiving, the PDF format has become a standard document exchange medium due to its consistency in cross-device display and anti-tampering properties. BabelBird's "Auto-to-PDF" function aims to establish an automated file format standardization channel. After configuring this task, when a file is added to the selected target directory, the system will silently trigger the conversion engine in the background to automatically convert it into a standard PDF file. This capability greatly eliminates the inefficient labor of manually exporting PDFs one by one, ensuring the standardization of data external output and internal archiving.

### Execution logic and boundary conditions
In order to ensure the efficient operation of the underlying computing resources of the platform and the safe and controllable flow of enterprise data, the following execution logic and boundary restrictions are set for the automatic conversion task:

Scope and traceability processing: This task can be overridden downwards and supports checking to apply to files in the target directory and all subfolders. In addition, the rules also support traceability to historical data and can be applied to existing files in the directory. However, to ensure execution stability, the number of files processed in a single traceability process is strictly limited to 5,000.

System performance protection mechanism: In order to prevent extremely large source files from occupying computing power for a long time during the conversion process and causing the task queue to be blocked, the system has a built-in file size threshold, that is, large files exceeding 30MB will not trigger the automatic conversion mechanism.

Automatic release of storage space: For the specific business scenario of "only keeping the final PDF", users can check the "Delete original file after successful conversion" option in the task configuration interface. After turning on this policy, the system will automatically clean up the original files after confirming that the PDF copy is generated correctly, thereby greatly optimizing the utilization of network disk storage space.

### Extensive format compatibility matrix

Babel's automatic conversion engine has powerful multi-format parsing capabilities and supports automatic dumping of mainstream business documents in 32 different industries into PDF. Users can choose to perform conversion on "all supported files", or use the drop-down menu to accurately select the extensions they need to convert by category. The specific supported format matrix is as follows:

Document typesetting: fully compatible with source files generated by mainstream office and publishing software, including doc, docx, ppt, pptx, wps, epub, dpt, indd, rtf, docm and pptm.

Pictures and images: Supports rendering and conversion of mainstream bitmaps, digital negatives and medical image formats, covering jpg, bmp, jpeg, jpg2, png, psd, tif, tiff, raw, cr2, dcm and heic.

Graphics and engineering drawings: Deeply adapted to vector and CAD drawing conversion in the fields of design and construction engineering. Supported formats include ai, svg, eps, dwg, dwt and dxf.

Auto Organize

### Function Overview
With the accumulation of collaborative data in the platform, how to keep the underlying "any folder synchronization" architecture and permission control directory clean has become the key to enterprise digital asset management. The **"Automatically organize files"** function allows the system to automatically classify and route files to the corresponding target directory according to preset time periods or content characteristics. This function ensures that massive documents are highly structured during the circulation process and avoids the lag and errors of manual archiving.

### Flexible triggering mechanism and scope

Users can enter the configuration through the "Task" option in the right-click menu of the folder or the automated task list panel on the left. The configuration covers the following triggering and action rules:

Event-driven (default): When a file is uploaded or moved to a specified trigger folder, the system responds immediately and starts organizing actions.

Period-driven: Suitable for centralized data archiving scenarios. The system can uniformly perform file sorting according to a fixed period (for example, set to 23:00 every day).

Historical traceability: Rules can be applied to new files and all subfolders, or you can check "Apply to existing files" to batch trace the historical inventory data. To ensure the stability of the system, traceability processing shall not exceed 5,000 files at a time.

### Core intelligent sorting rule engine

The system provides three highly customized classification rules to meet data archiving needs in different dimensions:

1. Structured archiving based on time dimension (classified by month/year)
The system can automatically create corresponding subfolders (such as "2025", "2025-10") according to the corresponding year or month when files are added to the network disk and move related files into .

The same as when classifying by year or month, the system has the intelligence to create files on demand. If no files are generated within a specific period (such as a certain month), the system will not redundantly create empty folders for that month.

2. Content-based intelligent routing (categorized by keywords)

Based on specific keywords contained in the file name, the system automatically distributes and moves files to preset destination folders.

Format recognition: File extensions (such as "jpg") can also be configured as keywords to achieve targeted aggregation of specific types of materials.

Multi-line parallel routing: Users can continuously add multiple routing rules through the "Add Keyword Classification" button. It not only supports distributing files containing different keywords to different directories, but also supports pointing multiple keyword tasks to the same target folder.

Anti-duplication and priority control: Keyword matching is strictly processed in the order set by the task. For example, when the file name is "123ABC final draft.jpg", if the first rule in the keyword list is "123" and the second rule is "final draft", then the file will give priority to matching the rule of "123" and execute the move. The system has built-in anti-repetition detection. Each keyword is only allowed to be entered once. Repeated entry will trigger the "Please re-enter" error interception.

Same-name conflict resolution: During the process of moving and organizing files, if a file with the same name is encountered in the target folder, the system will automatically append a number to the file name to ensure that the data is not accidentally overwritten.

Create signature (E-Sign)

### Business scenarios and function overview

In key links such as contract approval, drawing countersigning, and business compliance transfer, digital signatures with anti-tampering properties are the core node for opening up the closed loop of online collaboration. Traditional cross-system signing is often accompanied by cumbersome file downloads and format conversions. The **"Create Signature"** function launched by BabelBird allows users to stamp and sign documents directly in the cloud disk workflow. The engine supports multiple mainstream file types to directly load printed signatures, and supports one-click export of signed files to standard PDF format, ensuring the security, compliance and non-tamperability of digital assets from the source.

### Signature asset library and personalized configuration

The system provides users with a highly integrated digital signature management console to ensure the unified precipitation and rapid recall of electronic signature assets:

Multi-signature collection: In the "Signature Settings" module, users can call the terminal to "add a handwritten signature" online, or directly "upload signature image files" (such as PNG materials with transparent channels) to meet different levels of signing compliance requirements.

Corporate seal management: In the "Stamp Settings" module, corporate users can upload business-specific electronic official seals or compliance seal images as needed.

Default priority status: For users who have multiple signature assets, the system supports one-click "setting a specific signature or stamp as currently used" (default signature). In the subsequent document preview and circulation interface, the system will give priority to calling this default signature, which greatly improves the signing efficiency in high-frequency approval scenarios.

### Intelligent adaptive interaction and immersive guidance system

In order to take into account the display limits of different hardware terminals and lower the user's learning threshold, the signature configuration center adopts a multi-breakpoint intelligent responsive interface architecture and deeply embeds multi-language operation guides:

Widescreen workstation mode (window width ≥ 1120px): When the user operates on a desktop widescreen device, the system not only retains the standard signature configuration panel on the left, but also automatically expands an independent video teaching area on the right. This area will automatically load and play the tutorial on how to use the signature in a loop without any sense (it will replay after a 3-second pause), providing users with an immersive experience of "learning and matching at the same time."

Compact focus mode (window width < 1100px): When on a narrow screen or mobile window, the system will intelligently collapse the video playback area on the right to maximize the visual focus of the core signature setting area. At the same time, the system provides a "How to use signature?" entry at the bottom of the interface, and users can click to trigger a full-screen tutorial playback.

International bilingual support: Considering the collaboration needs of multinational enterprises, the system has a built-in localized teaching video library. In addition to the exclusive Chinese tutorials played in the Chinese language environment, all other multi-language versions match and play standard English tutorials by default to ensure barrier-free implementation for global business teams.

Batch Create Folders

### Function Overview and Business Value
In business scenarios involving multi-project concurrency or enterprise department structure adjustment, manually establishing complex standard directory trees one by one not only consumes a lot of operation time, but also easily leads to directory hierarchy confusion or non-standard naming due to human oversight. The **"Batch Creation Folder"** function provided by Babel allows users to directly drive the generation of cloud directories through external structured data (such as Excel, CSV, TXT text). This function can instantly transform a standardized business directory template into a network disk folder array that can be implemented, greatly improving the efficiency of initial file creation during the startup phase of large-scale projects.

### Large-scale generation of standard directory arrays

This module has powerful data analysis capabilities and manual fault-tolerant intervention mechanism:

High concurrency support: The system supports importing files in xls, xlsx, csv or txt format and quickly reading directory lists according to newline character rules. The upper limit of a single batch processing task is up to 5,000 lines, which meets the generation needs of most enterprise-level data structures.

Visual pre-review and dynamic intervention: Before the batch creation is officially executed, the system will complete the data analysis and visually render the folder list and hierarchical relationship to be generated in the interface. In this preview session, users can directly perform instant modification actions such as "create subfolder", "rename" or "delete" on a specific preset directory through the right mouse button or floating menu. This "review before building" mechanism ensures that the final directory tree is absolutely aligned with business needs.

### "One-click deployment" of project-level folders and permissions

When the target path is set to the root directory of the department folder or personal folder, the system supports the creation of a more advanced **"Project Folder"**. This model is deeply integrated with the underlying permission management system of BabelBird to realize the synchronization of directory construction and member permission configuration:

Exclusive standard template: To batch generate project folders, you need to download and use the system's exclusive template to import data. If the uploaded non-standard file does not meet the parsing format, the system will strictly intercept it and prompt you to re-upload it.

Project role and permission preset: The template not only standardizes the "project folder name", but also supports the direct association of the account system to preset "project leader" and "project member".

Assignment of person in charge: The filled in person in charge ID (supports mobile phone number, email address or specific work ID format) must be a registered company member; if this field is left blank or the filled in identity cannot be verified, the system will follow the security principle and set the operator of the currently created task as the project leader by default.
Automatic member invitation and empowerment: Users can batch enter multiple project members in the template by separating them with commas. After the project directory is generated, the system will automatically send invitation notifications to these members and grant them basic "upload and download" default permissions, completely eliminating the cumbersome one-by-one authorization operations after file creation.

### Real-time status monitoring and intelligent fault tolerance mechanism

When executing large-scale creation tasks, the system background will process it robustly in the form of a queue, and provide a full range of process monitoring and exception repair closed loops on the front end:

Global progress tracking: During the creation process, the list node will update its execution status in real time (smooth transition from the circle animation representing ongoing execution to the confirmation check state representing success). The global status of the task will also clearly flow from "Creating" to "Complete".

Accurate exception attribution and retry: After all tasks are executed, a clear summary of the results will be output at the top of the system (such as "A total of XXX folders were created, and X failed"). Users can check the "Failed to Create File List" with one click. The system will accurately classify the failure reasons as system-level conflicts such as "the file name contains characters that are not allowed" or "a folder with the same name already exists". For these abnormal entries, users can not only find out the cause, but also click the green "Retry" button directly on the interface to trigger secondary creation, which greatly reduces the resistance to batch operation and maintenance.

Document control project

The document control project is an industry application independent module of BabelBird (needs to be purchased separately). The BabelBird document control project solves the problem of process management (DCC) and automation of document control standards in the engineering design industry. It improves the work efficiency of a large number of document control personnel and also reduces the possibility of human errors.

### Scope of use

Industries or businesses that need to strictly manage every document sent. Every document sent to a customer is sent by a specific person (document control personnel). Every time a document is sent, there is a sending document that can be checked, and the sending content can be clearly managed. Through the sending order number, you can check the specific information and files of each file sent to the recipient. At the same time, you can query whether the recipient has received the message and whether the sent content has been rejected. And the delivery order can be used as a voucher.

### Problems that need to be solved
At present, the document control process of many enterprises is basically manual, and the files are stored in the EDMS system or locally on the computer of the document control personnel. Rely on folder classification to manage documents. Each time a file is sent, a folder is manually created and the folder is named according to the file name specification. After the file is sent by email, the sent file is placed in the folder and the TRANSMITTAL (file sending order) of this sending is attached. Each send will generate a folder and corresponding TRANSMITTAL. The manual operation of these tasks is quite cumbersome. In addition to sorting out files, you also need to manually fill in the document delivery form each time, manually write the delivery order number according to the rules, and manually check it in the future, which is extremely inefficient.

### BabelBird Solution

- New document control project types can be created. This means that different projects can set different TRANSMITTAL (sending order) rules to generate different sending orders and sending order numbers. Different projects can also manage different recipients (recipient companies)

- You can set the file recipient for each project and manage the file recipients in a unified manner.

- Documents in document control projects support the sending function, and the sending function supports multiple selections. After selecting a file or folder to send, the recipient can receive the download link and TRANSMITTAL of the sent file via email. And the file downloaded through the download link is the version when sent.

- Each file sent is the current version of the file. File upgrade will form a new version number, which will be displayed on the delivery note.

- After the file is sent, the TRANSMITTAL and TRANSMITTAL NO. will be automatically generated according to the preset rules.

- You can manage and query the TRANSMITTAL (delivery order), and export the delivery order to PDF.

Instructions for use of the BabelBird Cultural Control Project:

### Basic introduction

The BabelBird document control management system is based on the BabelBird enterprise private cloud version and adds a document control management module to realize the automation of document control work.

The way of document control management is to establish a "document control project". Document control projects are special projects customized for document control needs and are managed on a project-by-project basis.

- Establish document control projects

After logging in to the system, click "New" - "New Project" in the department where you want to create a document control project

*Projects can only be created in the root directory (enterprise files) or department root directory

Example: Establish a document control project under the document control department of HQSM

Click New Project, and the project type selection interface will appear.

Select "Create Document Control Management Project"

At this time, the project initialization selection interface appears.
Fill in the initialization information according to the requirements of the project

Each item is introduced as follows:

- Project leader

- Manage, transfer projects, modify project permissions and basic information. Cannot be empty. TRANSMITTAL can be deleted

- Project Secretary

- The project cannot be transferred, other people in charge of the same project can have multiple people, and can be empty. TRANSMITTAL can be deleted

- Document control staff

- Can send files to recipients. Other permissions are configurable, can be for multiple people, and can be empty. After selecting a person, click the permission selection drop-down box on the right to modify member permissions in batches (as shown in the figure).

- other members

- There is no option to send files. Others are the same as ordinary members of ordinary projects. The permissions are configurable and can be empty.

- Version number rules

As shown in the figure, if the prefix is HQSM, the first version of the file is HQSM A, the second version is HQSM B and so on.

- Basic information

- The filled-in basic information will be displayed in the TRANSMITTA header.

- As shown in the picture: The red circle is the basic information to be filled in.

- Recipient information

- The recipient information determines the options when sending and the TRANSMITTA number of the sent file.

- The recipient's name refers to the recipient's name in the system. Generally, the recipient's company abbreviation is filled in, such as MCC.

- You can add multiple mailboxes. After adding multiple mailboxes, you can send files and TRANSMITTA to multiple mailbox addresses in one send.

- ATTN can be entered at will and will also be displayed on TRANSMITTA

- The waybill number rule is actually the automatic generation rule of the TRANSMITTA number. Different recipients can generate different waybill numbers. Therefore, different waybill number rules need to be set at each recipient.

- The rules customization interface is as follows:

- The 3 columns are the three components of the TRANSMITTAL number. If the required TRANSMITTA number requires more codes to form, you can also click the + sign to add more columns.

- Example:

- Select to enter text in the first column, a text input box will pop up, enter "HQSM-"

- Select the encoding rule in the second column as 1-2-3 numerical sequence

- Select text input in the third column and enter "-2020"

- Click the plus sign to add a column and select the alphabetical order of a-b-c

- The TRANSMITTAL number generated when sending for the first time is: HQSM-1-2020a

- The TRANSMITTAL number generated for the second transmission is: HQSM-2-2020b

- After selecting letters as numbers for more than 26 numbers, the next version of the z number automatically becomes a1
- If the project has multiple recipients, you can also click to add them. (After the project is established, you can also add or delete recipients in the project management interface.

- After completing these fillings, click "Add Project" to complete the new project.

- You can see the newly created document control project in the file list of the created project path, click to enter

- Document control management projects are different from ordinary projects. A button for document control management is added to the top bar of the project homepage.

- Among them, the "Sending Order List" can query all TRANSMITTA issued by the project, and the management project can manage the project.

- Upload files

Click on the newly created document control project to enter the project page.

Just drag and drop the files you want to upload into the project to upload the files. Of course, you can also use the synchronization function to upload and download just like using ordinary folders.

- Send files

Select the file to be sent (multiple selections are supported), then right-click and select "Send File" to display the file sending interface.

*The maximum number of files sent at a time is 2,000 (including folders). If the project requires all files to be sent, it is recommended to send them in a compressed package.

The recipient can drop down to select the recipient and ATTN filled in during project initialization.

You can fill in any other email address for CC, or you can leave it blank.

The selected submission file type will also be displayed in the generated TRANSMITTA

The file list lists the files to be sent this time.

The file name that the system wants to send TRANSMITTAL consists of file number + description. For example, if a file is named 1000+drawing.pdf, the file number displayed in TRANSMITTAL when sending is "1000" and the description is "drawing". If there is no + division in the file name of the sent file, the file number will display the file name. If the file name sent is "+drawing.jpg", the file number will not be displayed, and the description will be displayed as "drawing". Description can be changed midway.

The postscript will be displayed in the email received by the recipient and will not be displayed in TRANSMITTAL.

After filling in, click "Send File" and the system will automatically generate TRANSMITTAL and attach it as a link in the email and send it to the customer.

- Generate TRANSMITTAL

After successful sending, the system will pop up a prompt

Click View to view the TRANSMITTAL automatically generated for this send

Click Export to PDF to save the TRANSMITTAL as a PDF file

You can also view all TRANSMITTAL sent in the project in the TRANSMITTAL list
The TRANSMITTAL received by the recipient in the mailbox is consistent with the TRANSMITTAL.

- View TRANSMITTAL

Click on TRANSMITTAL list on the project homepage

Open the list to see and query all dispatch orders for this project.

Click on the delivery number to view details and download the PDF file of TRANSMITTAL

Acceptance means that the recipient has not opened the sent email. If the other party opens the email and accesses TRANSMITTAL, the receiving status will change to received.

- View sending records

Right-click on any file to view the sending record of the file and its corresponding TRANSMITTAL

## User interface

user interface design

Babel bird interface design concept

There are many functions integrated into the enterprise network disk. How to reasonably allocate function entrances to make it more convenient for users to actually use it? This is an issue that needs to be considered during interface design and interaction. Currently, there are two conflicting design concepts.


| Interface design concept | Advantages and disadvantages |
| --- | --- |
| Hide very commonly used functions to ensure a simple interface, reduce learning difficulty, make it easy to use, and provide a friendly first-time user experience. (Representative: 2C products such as Weiyun and Tencent Documents) | The learning curve is gentle at first and steep at the end. Users have a good experience during the first trial, but it is inconvenient for long-term use |
| The function entrance is explicit and the interface is complex, but the required functions can be found quickly. The interface is heavy, the learning cost is slightly high, and the first-time user experience is not friendly. (Represents: office, CAD and other professional software) | The learning curve is steep at the beginning and slow at the end. The user experience is complicated for the first time, but it is actually convenient for long-term use. Not good for marketing. |

Considering that enterprise network disk is a professional product for long-term use by enterprises, although the steep learning curve in the early stage is not conducive to marketing (the abandonment rate increases when users simply try it out), it is friendly to users who choose BabelBird for long-term use. After getting familiar with it, it can be used better and more organized. As a productivity tool, the convenience of daily use and reducing the probability of errors are more important. Therefore, BabelBird Enterprise Drive chose the second design concept:

As a professional product for enterprise scenarios, the complexity of getting started can be appropriately increased for the convenience of long-term daily use.

Interface design principles

User-friendliness:

On the premise of ensuring that the use of functions is given priority, user-friendliness is emphasized to ensure that users can easily use the enterprise network disk.

Consistency:

Maintain a consistent interface design to provide a consistent user experience.

Simplicity:

Use a simple design to reduce redundancy and complexity so that users can quickly understand the interface.
Availability:

Ensure that the functional modules are easy for users to find and have corresponding guidance, and can be used directly within 3 steps.

user interface elements

Web version (web)

It adopts the layout of left menu, right file list, and top functional partition. It is convenient for users to focus on the file list.

The left menu can be collapsed to display more file list content, providing an immersive experience.

In order to better manage files in a tree view, you can also open a tree view to manage files like Windows Explorer.

If there are a large number of image files in the folder, the waterfall preview mode can be automatically turned on to facilitate user viewing.

The left menu (shortcut) can be customized by users, making it easier for users to customize shortcut entries according to their daily usage habits.

All functional operations of files/folders are concentrated on the right click and are easy to find. Commonly used functions are displayed on the file list. At the same time, there are corresponding buttons in the file list bar to prevent user operations from being affected by the failure of the right mouse button.

Client (windows, mac, Kirin)

The client uses Electron and C++ for cross-platform development, which ensures style consistency and operation consistency. And there are also optimizations for each platform. The client also includes synchronization module, upload and download list and virtual mapping disk (cloud bridge) module.

The main operation interface continues the style and layout of the web version, but the layout has been improved based on the usage habits of local software and the unique modules of the client. The top functional partitions are concentrated in the left column to make the top display more concise.

The left column adds two client-specific function buttons and entrances: transmission and synchronization.

The file transfer module manages the synchronization process and upload and download tasks.

Shortcuts for synchronizing, uploading, and sending files are integrated on the right-click menu of Windows and MacOS system files, allowing users to quickly create synchronized and uploaded files (folders).

A virtual mapped disk is integrated on Windows and MacOS, allowing users to access cloud files just like a local hard drive.

Responsive design

Responsive design principles

Multi-device compatibility:

The user interface of BabelBird Enterprise Drive is designed to obtain the best experience on various devices, including desktops, mobile devices and tablets, to ensure that users can have a good experience on various devices anytime, anywhere.

Picture: BabelBird has been cross-platform since its birth.

Adaptive layout

User interface elements automatically adjust to screen size and orientation to ensure content visibility and usability.

Touch-friendliness:

Optimize touch interactions on mobile devices, including gesture controls, swiping, and zooming.

Image and media optimization:

Preloading, image transcoding to generate thumbnails, and media compression techniques are used to reduce page load times and bandwidth usage.
Mobile support

Web version mobile device optimization

Mobile interface design:

The BabelBird web version has an H5 page designed for mobile devices, as well as a mobile version of the promotional website and mobile version download interface for sharing links, and supports common touch gestures such as sliding, zooming and clicking.

Figure: Mobile device accessing Babel H5 page

Mobile APP:

In order to obtain a better user experience, BabelBird has developed a mobile-specific APP that supports Android and iOS systems.

In order to ensure good performance, BabelBird APP is developed as a native application.

The interaction, interface, and functional modules of the APP have all been redesigned to be suitable for access on mobile devices.

Figure: Mobile interface

Tablet optimization

The Babel iOS APP has a redesigned interface for the iPad to make it more suitable for working on a large screen.

## Performance optimization

Load balancing strategy

Separation of authentication and services

Separate authentication:
In order to improve the performance and security of the system, BabelBird Enterprise Drive adopts the strategy of separating authentication and core services. This means that the user's authentication request will be routed to a dedicated authentication server, and core service requests such as uploading, downloading, and query browsing will be routed to the corresponding core service server.

Request routing:

We use a load balancer to route requests to different servers based on the request type. This ensures that the authentication server does not become a performance bottleneck for core services and allows us to scale authentication and core services independently as needed.

Multiple server deployments for the same type of requests

Multi-server support:

BabelBird Enterprise Drive allows the same type of requests to be deployed on multiple servers to improve performance and availability. This multi-server support strategy ensures that even if one server fails, the other servers can still handle requests.

Requests are evenly distributed:

We use a load balancing algorithm to evenly distribute the same type of requests across multiple servers to avoid server overload and provide faster response times.

load balancer

Load balancer configuration:

We use professional load balancers to distribute and route requests. The load balancer sends requests to the appropriate server based on predetermined rules.

Monitoring and automatic failover:

The load balancer is equipped with monitoring features that can detect the health status of the server. If a server fails, the load balancer automatically routes requests to other available servers to ensure system continuity.

### Advantages

Performance improvements:

Load balancing strategies improve system performance, allowing requests to be processed in parallel on multiple servers, reducing the load on a single server.

High availability:

The deployment of multiple servers and automatic failover ensure the high availability of the system, and services can still be provided even in the event of a failure.

Scalability:

Load balancing strategies allow more servers to be added as needed to accommodate growing users and requests.

Cache management

File buffer management

File buffer settings:

In order to optimize performance and reduce the burden on CPU resources, BabelBird Enterprise Drive implements file buffer management. The decrypted files will be temporarily stored in the buffer to reduce repeated decryption operations.

LRU strategy:

We adopt the least recently used (LRU) policy to manage the file buffer. This means that the least frequently used files are cached, thus maintaining efficient buffer utilization.

File authentication buffer management

File authentication buffer:
Authentication checking for file access permissions is complex and time-consuming. Comprehensive authentication testing is required based on multiple factors such as the department, project, sharing, and confidentiality level of the file. In order to improve performance, we implemented file authentication buffering to cache the authentication results.

Expiration elimination mechanism:

The file authentication buffer adopts an expiration elimination mechanism. Each cache entry has a predetermined expiration time, and once this time is exceeded, the cache will be automatically evicted. This ensures freshness of cached data and reduces memory usage.

### Advantages

Performance optimization:

Cache management reduces the repeated execution of decryption operations and authentication checks, thereby improving system response speed and performance.

Resource saving:

By using the LRU policy and expiration mechanism, we effectively manage memory resources and avoid memory leaks and over-occupancy problems.

Quick response to complex authentication:

The file authentication buffer ensures fast response to complex authentication test results and reduces the pressure on the authentication service.

Data compression and transmission optimization

File chunking technology

File storage in chunks:

To optimize file transfer and storage, BabelBird Enterprise Drive uses file chunking technology. Large files are broken into smaller chunks and stored separately on the server. This helps improve file transfer efficiency and supports breakpoint resume downloads.

Parallel block request:

Chunked file storage allows the front end to make requests for multiple chunks in parallel when downloading a file. Once all chunks have been downloaded, the front-end assembles them into a complete file, significantly increasing download speeds.

File storage deduplication technology based on hash code

File deduplication:

BabelBird Enterprise Drive uses hash code-based file storage deduplication technology. When a user uploads a file, the file's hash code is calculated and compared with the hash code of an existing file. If the same hash code is found, the system will keep only one copy of the file, thus saving storage space.

Save storage space:

File deduplication technology effectively reduces storage redundancy, especially files that are frequently shared and transferred in enterprises, thereby reducing storage costs.

### Advantages

Transmission efficiency:

File chunking technology and parallel block requests speed up file transfers, especially for large files and high-bandwidth connections.

Storage savings:

File storage deduplication technology based on hash codes reduces storage requirements and maintenance costs.

User experience:

Fast file transfer and storage space savings improve user experience, providing more efficient file management and sharing.

Asynchronous task processing

Background asynchronous processing

Task time-consuming processing:

In order to handle tasks issued by the front desk that may be time-consuming or even cause HTTP requests to time out, BabelBird Enterprise Drive adopts a background asynchronous processing strategy. These tasks do not block the main HTTP request response, but are executed asynchronously in the background.

Improve response speed:

Background asynchronous processing ensures that the response speed of foreground requests is not affected by time-consuming tasks, improving user experience.

Configurable management of asynchronous tasks

Task queue:

In order to prevent server resource constraints, we have configured and managed asynchronous tasks. Asynchronous tasks can be configured as one or more processing queues, which can execute tasks independently. Task queues can be configured and managed based on task type and priority.

Message queue:

Another way to manage asynchronous tasks is to use message queues. BabelBird Enterprise Drive can be configured to use message queues to store and schedule asynchronous tasks. This mechanism ensures orderly execution and controllability of tasks.

Message processing mechanism:

Asynchronous tasks are controlled and executed through message processing mechanisms. After the task is added to the queue or message queue, it is processed and executed by a specialized processor.

### Advantages

Responsiveness:

Background asynchronous processing improves the system's response speed and avoids long waits.

Resource control:

Configurable management of asynchronous tasks allows effective control of server resources to prevent resource exhaustion.

Scalability:

The message queue and message processing mechanism provide system extensibility, and new asynchronous task types can be easily added.

## Scalability

Horizontal expansion

Cluster deployment:

BabelBird Enterprise Drive Business Server adopts a cluster deployment model, which allows us to easily expand the capacity and performance of the system. Multiple servers in a cluster work together to share load and provide high availability. This model allows us to add new nodes as needed to meet growing user and data needs. Private cloud deployment customers can also expand performance by adding virtual machines or physical servers to meet high concurrency requirements as their users grow. For more information about the scalability of Babel Cluster deployment, see the Distributed Deployment chapter.

Object storage system:

Babel's storage system uses object storage technology, which is very suitable for large-scale data storage and horizontal expansion. Object storage systems are highly scalable and can accommodate large amounts of data and automatically expand storage capacity by adding storage nodes when needed. For more information about the scalability of Babel object storage, see the self-built object storage chapter.

Load balancing:
We have implemented a load balancing strategy to ensure that user requests are evenly distributed to various nodes in the cluster to avoid single points of failure and provide faster response times.

Auto-scaling (public cloud):

Thanks to Alibaba Cloud ECS elastic computing service, our system is configured with an automatic scaling mechanism to automatically increase or decrease server nodes according to load conditions. This automatic scaling ensures system stability and performance.

vertical expansion

Hardware upgrade:

In addition to horizontal expansion, for private cloud users we can also perform vertical expansion, that is, upgrading server hardware to increase the performance and capacity of a single server. This is an effective solution in situations where more computing power or memory is required.

Database optimization:

We can also optimize the database system to improve performance by adjusting configurations, using higher performance hardware, or upgrading the database management system. These improvements provide better query performance and data processing capabilities.

Cache:

We use caching technology to speed up data access and reduce the load on databases and storage systems. Caching supports memory caching, CDN caching and other methods, and you can choose the most suitable caching strategy according to your needs.

Containerization and SOA service architecture

Docker containerization

Docker deployment:

We use Docker containerization technology to deploy various components and modules of BabelBird Enterprise Drive. This approach allows us to package each major module as an independent Docker container, providing greater flexibility and scalability.

Container orchestration:

We use container orchestration tools to manage and coordinate individual containers to ensure they work together to achieve high availability and resiliency.

Container image management:

BabelBird Enterprise Drive uses the container image warehouse to store and manage Docker images so that new container instances can be deployed at any time.

SOA service architecture

Service split:

We split the main functional modules of BabelBird Enterprise Drive into independent services, and each service is responsible for performing specific tasks or functions. This split improves the maintainability and scalability of the system.

API communication:

Services communicate through APIs, using compatible RESTful API protocols. This loosely coupled communication method allows services to be developed, tested, and deployed independently.

Standalone deployment:

Each service can be deployed and scaled independently, which means we can horizontally scale specific services based on demand without affecting the operation of other services.

Advantages of containerization and SOA service architecture

High availability:

Containerization and SOA service architecture provide high availability, allowing us to quickly restore services in the event of a failure.

flexibility:
Containerization allows us to easily deploy, upgrade and maintain each container, while SOA service architecture provides flexible modular development and deployment options.

Resource utilization:

We can allocate resources as needed to avoid resource waste and achieve higher resource utilization.

Fast delivery:

Containerization and SOA service architecture enable new features and improvements to be delivered to users faster. Private cloud users can also enjoy fast update and upgrade services that are comparable to public cloud systems.

Challenges of containerization and SOA service architecture

Complexity:

Managing multiple containers and services can introduce a level of complexity that requires appropriate management tools and strategies.

Monitoring and logging:

We use monitoring and logging tools to ensure the normal operation of containers and services, and to identify and solve problems in a timely manner. We are equipped with an automatic restart mechanism. If there is a problem with the service, the problematic module will be automatically restarted to ensure the smooth flow of the overall service.
