CN1475919B - Data storage security method - Google Patents

Abstract

The invention relates to a data storage security method, which is applied to a computer and a data storage device, wherein the computer accesses data of the data storage device through a driving program, and the security method comprises the following steps: providing data to be stored; the operating system of the computer provides a data storage request to the data storage device, wherein the data storage request comprises an original storage position; the driver program performs a storage location transformation operation through a preset encryption value according to the data storage request, so as to obtain an actual storage location; and the driver writes the data to be stored into the data storage device according to the actual storage position.

Description

Data storage confidentiality method

technical field

The invention relates to a data storage security method, in particular to a data storage security method applied to a computer and a data storage device.

Background technique

With the rapid development of the information industry, many intangible knowledge and information have been digitized and exist in the form of digital information, such as various data files produced by enterprises, which should belong to the private assets of enterprises and be subject to use. limits. Therefore, companies try their best to prevent such digital information belonging to the company's assets from being misappropriated by employees or outsiders. Therefore, how to protect digital information is a topic that is getting more and more attention in today's era of knowledge economy. .

However, the data stored in the hard disk (Hard Disk Drive) is a major loophole in data security. It can be clearly seen from the existing data access flow chart shown in FIG. 1 that the read and write requests (read/ write request) is to further complete the action of accessing data (Access Data) on the hard disk 12 through the processing of a driver 11 (driver, such as IDE driver). In the current personal computer environment, as long as anyone gets a hard disk, he can use any personal computer with its corresponding driver installed to read the data stored in it. The design of the removable hard disk is more convenient for users to exchange data, so the situation of data being stolen and abused is very serious, and how to restrict data from being read arbitrarily through a simple mechanism is the key to the development of the present invention. main purpose.

Contents of the invention

The present invention is a data storage security method, which is applied to a computer and a data storage device. The computer accesses the data storage device through a driver program. The security method includes the following steps: providing a data; the operating system of the computer proposes a data storage request to the data storage device, and the data storage request includes an original storage location; the driver performs a storage location with a default encryption value according to the data storage request transform operation to obtain an actual storage location; and the driver program writes the data to be stored into the data storage device according to the actual storage location.

According to the above idea, the data storage security method also includes the following steps: the computer proposes a data read request to the data storage device, and the data read request includes the original storage location; The storage location conversion operation is performed according to the request to obtain the actual storage location; and the driver program reads the data to be stored from the data storage device according to the actual storage location.

According to above-mentioned design, this data storage device in the data storage security method is an integrated drive electronic equipment interface hard disk (IDE Hard Disk).

According to the above idea, in the data storage security method, the operating system of the computer records the original storage location in a file allocation table.

According to the above idea, the storage location transformation operation in the data storage security method is to obtain the actual storage location by shifting the original storage location by a preset encryption value.

According to the idea above, the default encryption value in the data storage security method is set when the driver is installed.

According to the above idea, the data storage device in the data storage security method is a rewritable optical disc drive.

According to the idea above, the data storage device in the data storage security method is a floppy disk drive.

According to the above idea, in the data storage security method, the operating system of the computer records the original storage location in a file allocation table, and takes out the original storage location from the file allocation table and puts it into the data read request .

The present invention is a data storage security method, which is applied to a computer and a data storage device. The computer accesses the data storage device through a driver program. The security method includes the following steps: providing a Data; the operating system of the computer proposes a data storage request to the data storage device, and the data storage request includes an original storage location; the driver program performs a storage location conversion operation according to the data storage request, and then obtains an actual storage location. location, and the storage location conversion operation is to obtain the actual storage location by shifting the original storage location by a preset encryption value; and the driver program writes the data to be stored into the data storage device according to the actual storage location.

Further illustrate the present invention below in conjunction with accompanying drawing.

Description of drawings

FIG. 1 is a flow chart of data access to a conventional hard disk.

FIG. 2( a ) is a schematic diagram of data access of a data storage security method developed in the hardware environment of computers and data storage devices according to the present invention.

Fig. 2(b), (c) is a schematic flow chart of steps in a preferred embodiment of the present invention.

Fig. 3 is the function definition table of the Input/Output Supervisor Layer Driver (Input/Output Supervisor Layer Driver) developed by Microsoft to cooperate with its operating system.

Detailed ways

Fig. 2 (a) is the data access schematic diagram of a data storage security method that the present invention develops in the hardware environment of computer and data storage device, when the operating system 20 running on the computer sends a data read and write request (read /write request), a driver 21 according to the present invention will perform a first storage location transformation operation 22 on an original storage location contained in the data read and write request according to the read/write request, and then obtain an actual storage location , and the driver program 21 performs data access to the data storage device 23 according to the actual storage location.

The detailed steps are described below with an example. First, the driver program developed by the present invention is installed on a computer and a data storage device (such as an IDE interface hard disk), and during the installation process, the driver program can be provided to the installer. Enter a default encryption value and save it.

And when the computer operation process that driver program of the present invention is installed, produce a data to be stored (such as a data file) and need to be stored in the data storage device, the operating system running on the computer just sends data storage device (such as an IDE interface) Hard disk) puts forward a data storage request, and the data storage request includes an original storage location, and the operating system of the computer can record the original storage location in a file allocation table (File Allocation Table, referred to as FAT). Then, the driver program performs a storage location conversion operation according to the data storage request, and then obtains an actual storage location. The storage location conversion operation can be a specific algorithm performed by using a preset encryption value. For example, the storage location conversion operation can be obtained by shifting the original storage location by a preset encryption value to obtain the actual storage location. That is, the driver will finally use the The converted actual storage location is used to write the data to be stored (for example, a data file) into the data storage device.

Therefore, when the operating system running on the computer wants to read the above data and proposes a data read request to the data storage device, it needs to take out the original storage location from the file allocation table and put it into the data read request, and the drive The program then performs the above-mentioned storage location conversion calculation according to the original storage location in the data read request and the preset encryption value, and then obtains the actual storage location, so that the driver can automatically store the data according to the actual storage location read from the data storage device. The flow diagram of the above steps is shown in Fig. 2(b) and (c).

In addition, in order to provide flexibility in use, when the data storage operation is in progress, the driver can display a prompt for the user to choose, that is, whether the data currently to be stored should be stored in a confidential manner, and if so, then It can be stored according to the above method, if not, it can be stored in a general existing way, so that the unencrypted data can still be read by other personal computers with corresponding drivers installed without having the correct default encryption value.

Therefore, in the personal computer environment using the method of the present invention, anyone gets the hard disk that carries out data security with the method of the present invention, unless utilizing the personal computer that the corresponding driver program of correct default encryption value is installed on it to read its Otherwise, the data will not be able to be read correctly. Through the mechanism of the present invention, the user can effectively and easily restrict the data files stored in the data storage device from being read arbitrarily, and then develop the main idea of the present invention. Purpose.

Fig. 3 is the function definition table of the input/output management layer driver program (Input/Output Supervisor Layer Driver) that cooperates its operating system operation that Microsoft formulates, and wherein the higher the level number, represents that this level is closer to the hardware end, and the present invention The technical means can be completed at any level, but the closer to the hardware level, the better, because it can reduce the possibility of being intercepted. Taking the IDEminiport driver developed by the applicant for the hard disk as an example, it is set on the 21st layer.

In summary, in addition to the hard disk, the data storage device of the present invention can be a rewritable non-volatile storage device, a rewritable optical disk drive or a floppy disk drive, as long as the driver program on the device uses this The technical means disclosed in the invention can effectively prevent data from being arbitrarily stolen.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the implementation scope of the present invention; that is, all equivalent changes and modifications made according to the scope of the claims of the present invention are covered by the patent scope of the present invention. It will be apparent to those skilled in the art that various modifications and changes can be made in the present invention without departing from the spirit and scope of the invention. Therefore, it is meant that the present invention covers the improvements and changes of the present invention if they fall within the scope of the appended claims and their equivalents.

Claims (10)

1. a data storing time slot scrambling is applied on a computer and the data memory device, and this computer expert crosses the access that a driver comes this data memory device is carried out data, and this time slot scrambling comprises the following step:

Provide one to treat storage data;

The operating system of this computer proposes a data storing request to this data memory device, includes an original storage location in this data storing request;

This driver carries out a storage location transform operation and preset secret value by one, and then obtains a physical holding of the stock position according to this data storing request; And

This driver treats that with this storage data writes in this data memory device according to this physical holding of the stock position.

2. data storing time slot scrambling as claimed in claim 1 wherein also includes the following step:

This computer proposes a data read request to this data memory device, and includes this original storage location in this data read request;

This driver is according to this data read request, and carries out this storage location transform operation by this default secret value, and then obtains this physical holding of the stock position; And

This driver is according to this physical holding of the stock position and this is treated that storage data reads in this data memory device.

3. data storing time slot scrambling as claimed in claim 1 is characterized in that this data memory device is an ide interface hard disk.

4. data storing time slot scrambling as claimed in claim 1, the operating system that it is characterized in that this computer are that this original storage location is recorded in the file allocation table.

5. data storing time slot scrambling as claimed in claim 4 is characterized in that this memory location transform operation is that this original storage location displacement should be preset secret value and obtained this physical holding of the stock position.

6. data storing time slot scrambling as claimed in claim 5 is characterized in that this default secret value is to set when this driver is installed.

7. data storing time slot scrambling as claimed in claim 1 is characterized in that this data memory device is an erasable optical disk driver.

8. data storing time slot scrambling as claimed in claim 1 is characterized in that this data memory device is a floppy disk.

9. data storing time slot scrambling as claimed in claim 2, the operating system that it is characterized in that this computer is that this original storage location is recorded in the file allocation table, and should take out and put into this data read request by original storage location from this document allocation table.

10. a data storing time slot scrambling is applied on a computer and the data memory device, and this computer expert crosses the access that a driver comes this data memory device is carried out data, and this time slot scrambling comprises the following step:

Provide one to treat storage data;

The operating system of this computer proposes a data storing request to this data memory device, includes an original storage location in this data storing request;

This driver carries out a storage location transform operation according to this data storing request, and then obtains a physical holding of the stock position, and this storage location transform operation is that this original storage location displacement one default secret value is obtained this physical holding of the stock position; And

This driver treats that with this storage data writes in this data memory device according to this physical holding of the stock position.

Images