Intelligent card and U disk compound device and its access security improvement method based on bidirectional authentication mechanism

Abstract

The invention discloses an intelligence card, U disc complex equipment and method to improve the access security based on the bidirectional identification mechanism. The operation system 203 of intelligence card which is worked following the technical specifications of Java Card is mounted in intelligence card and U disc complex equipment, and the application program 301 which is used to control the read-write of flask disc and application program 112 which is used to complete the identification are run in the operation system 203 of intelligence card. The bidirectional identification based on the digital certificate is realized by three steps: (1)the generation and load of equipment certificate of intelligence card and U disc complex equipment, (2)the certificate of host computer is generated, (3)the bidirectional identification is realized between the host computers, intelligence card and U disc complex equipment. The access of ordinal U disc is not controlled any more. The bidirectional identification mechanism which is realized by the digital certificate can confirm the identity of intelligence card and U disc complex equipment, and it has perfect secrecy, and can satisfy the requirement of security for the special department.

Description

technical field [0001] The invention relates to the technical fields of information security, access control and USB storage, in particular to the technical field of bidirectional authentication mechanism based on digital certificates to improve the access security of smart card and U disk composite equipment. Background technique [0002] U disk is a mobile storage device with USB interface. Ordinary U disk is a transparent device without access control and identity authentication, so it is not suitable for users with high security requirements. [0003] At present, there are products on the market that use password and fingerprint recognition technology as an access control method to improve the security of U disk access. Among them, the password-protected U disk has poor security and is vulnerable to strong attacks such as password attack or dictionary attack. The security of U disk under the access control of fingerprint recognition is higher, but the usability is poor...

AI Technical Summary

Problems solved by technology

Among them, the password-protected U disk has poor security and is vulnerable to strong attacks such as password attacks or dictionary attacks.

U disks under fingerprint identification access control have high security, but poor usability, such as high error recognition rate, etc.

[0004] In addition, its integration with the existing IT framework is not good, and it is not easy to map identities and permissions

The most important thing is that these U disks do not have a two-way authentication mechanism. They are only used under access control, and their confidentiality is extremely poor. The need for authentication, etc.

Images