Storage information security control method, device, system and communication module
By integrating the detection unit in the communication module, real-time monitoring of the memory security status and implementing preservation measures, the problems of cumbersome operations and poor stability in the prior art are solved, and efficient and simple memory information security control is achieved.
Patent Information
- Application Number
- CN202010698692.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2020-07-20
- Publication Date
- 2025-04-11
- Estimated Expiration
- 2040-07-20
AI Technical Summary
The existing memory information security control methods are cumbersome to operate, have poor stability, and lack security monitoring and verification mechanisms.
By integrating the detection unit in the communication module, the security status of the memory is monitored in real time. If a non-secure status is detected, a safeguarding measure execution request is sent to the user terminal, and the user can choose to execute or automatically execute the corresponding memory safeguarding measure.
It realizes simplified operation of memory information security control, improves system stability, and has remote control and security verification functions, improving information security protection performance.
Smart Images

Figure CN113961981B_ABST
Abstract
Description
Technical Field
[0001] The present disclosure relates to the field of information security technology, and in particular to a storage information security control method, device, system and communication module. Background Art
[0002] The development of the Internet of Things cannot be separated from the support of big data, and in the future people will pay more and more attention to the instructions brought by data. The collection, storage and analysis of big data cannot be separated from memory. However, the big data often refers to the core information of users, including test data, growth data, market data, etc. Once these data are mastered, the advantages and disadvantages of users can be understood. Therefore, in the era of the Internet of Things, data security is becoming more and more important. In the future, data security will not only be valued by enterprises and other organizations, but more and more individuals will have private databases, and each family may have its own home network disk. The existing data security solutions either modify the system configuration, add background processes, implant soft probes, etc., or destroy the memory by high voltage and save the data in the second memory. Both methods can ensure data security to a certain extent, but the first method is too troublesome to operate, has high requirements for computer and hardware configuration, and the stability is affected by the system itself; the second method is too extreme and does not have security monitoring, security verification and other mechanisms.
[0003] It can be seen that the existing storage information security control method has technical problems such as overly complicated operation and poor stability. Summary of the invention
[0004] In view of this, the embodiments of the present disclosure provide a storage information security control method, device, system and communication module, which at least partially solve the problems existing in the prior art.
[0005] In a first aspect, an embodiment of the present disclosure provides a memory information security control method, which is applied to a communication module, wherein the communication module is respectively connected to a computer and a user terminal for communication, and the computer is provided with a memory and a detection unit for detecting the security status of the memory, and the detection unit is connected to the communication module for communication; the method comprises:
[0006] Receiving current state information of the memory sent by the detection unit;
[0007] Determining whether the memory is in a non-secure state according to the current state information of the memory;
[0008] If it is determined that the memory is in an unsafe state, obtaining corresponding memory security measures according to current state information of the memory;
[0009] Sending a request for executing the memory security measure to the user terminal;
[0010] If an execution instruction returned by the user terminal based on the execution request is received, the memory protection measure is executed.
[0011] According to a specific implementation of the embodiment of the present disclosure, after the step of sending the execution request of the memory preservation measure to the user terminal, the method further includes at least one of the following:
[0012] If a non-execution instruction returned by the user terminal based on the execution request is received, the memory preservation measure is not executed;
[0013] If the execution instruction returned by the user terminal based on the execution request is not received, the memory protection measure is automatically executed.
[0014] According to a specific implementation of the embodiment of the present disclosure, the step of judging whether the memory is in a non-secure state according to the current state information of the memory includes:
[0015] If the current state information of the memory includes target state information, determining that the memory is in an unsafe state, wherein the target state information includes transmission data abnormality information, abnormal intrusion information, or sensor data abnormality information;
[0016] The step of acquiring corresponding storage security measures according to the current status information of the storage includes any one of the following:
[0017] If the current state information of the memory is abnormal data transmission information, determining that the memory protection measure is to lock the memory;
[0018] If the current state information of the memory is abnormal intrusion information, determining that the memory protection measure is to shut down the power supply of the memory;
[0019] If the current state information of the memory is sensor data abnormality information, it is determined that the memory protection measure is to destroy the memory by high voltage.
[0020] According to a specific implementation of the embodiment of the present disclosure, the step of executing the memory preservation measure includes any one of the following:
[0021] If the memory protection measure is to lock the memory, sending a transmission port closing instruction to the computer so that the computer closes the data transmission port of the memory;
[0022] If the memory preservation measure is to turn off the power supply of the memory, output a high level to a transistor in the computer connected to the relay power supply of the memory, so that the transistor disconnects the relay power supply of the memory;
[0023] If the memory preservation measure is to damage the memory with high voltage, a pulse signal is sent to the switching power chip of the computer so that the switching power chip outputs a high-voltage pulse signal through a high-voltage power supply circuit to damage the memory.
[0024] According to a specific implementation of the embodiment of the present disclosure, after the step of determining whether the memory is in a non-secure state, the method further includes:
[0025] An alarm instruction is sent to an alarm device connected to the communication module so that the alarm device outputs alarm information.
[0026] In a second aspect, an embodiment of the present disclosure provides a communication module, wherein the communication module is respectively connected to a computer and a user terminal for communication, wherein the computer is provided with a memory and a detection unit for monitoring the security status of the memory, and the detection unit is connected to the communication module for communication; the communication module comprises:
[0027] A receiving module, used for receiving the current state information of the memory sent by the detection unit;
[0028] A judging module, used for judging whether the memory is in a non-safe state according to the current state information of the memory;
[0029] An acquisition module, configured to acquire corresponding storage security measures according to current status information of the storage if it is determined that the storage is in an unsafe state;
[0030] A sending module, used for sending an execution request of the memory security measure to the user terminal;
[0031] The execution module is configured to execute the memory preservation measure if an execution instruction returned by the user terminal based on the execution request is received.
[0032] In a third aspect, an embodiment of the present disclosure provides a communication module, including a communication unit and a controller, wherein the controller is respectively connected to a computer and a user terminal through the communication unit, the computer is provided with a memory and a detection unit for monitoring the security status of the memory, and the controller is connected to the detection unit through the communication unit; wherein,
[0033] The communication unit is used to receive the current state information of the memory sent by the detection unit;
[0034] The controller is used to determine whether the memory is in a non-safe state according to the current state information of the memory;
[0035] The controller is used to obtain corresponding memory security measures according to current state information of the memory if it is determined that the memory is in an unsafe state;
[0036] The communication unit sends a request for executing the storage security measure to the user terminal;
[0037] The controller is configured to execute the memory preservation measure if receiving an execution instruction returned by the user terminal based on the execution request.
[0038] According to a specific implementation method of an embodiment of the present disclosure, the communication unit includes a 5G cellular communication unit and a Wi-Fi 6 communication unit.
[0039] In a third aspect, an embodiment of the present disclosure further provides a storage information security control system, comprising a communication module, a computer and a user terminal, wherein the communication module is communicatively connected to the computer and the user terminal respectively, the computer is provided with a storage and a detection unit for monitoring the security status of the storage, and the detection unit is communicatively connected to the communication module; wherein the communication module is used to:
[0040] Receiving current state information of the memory sent by the detection unit;
[0041] Determining whether the memory is in a non-secure state according to the current state information of the memory;
[0042] If it is determined that the memory is in an unsafe state, obtaining corresponding memory security measures according to current state information of the memory;
[0043] Sending a request for executing the memory security measure to the user terminal;
[0044] If an execution instruction returned by the user terminal based on the execution request is received, the memory protection measure is executed.
[0045] According to a specific implementation of the embodiment of the present disclosure, the computer further includes a transistor and a relay power supply, the relay power supply is electrically connected to the memory, the transistor is electrically connected to the relay power supply, and the transistor is electrically connected to the communication module, and the communication module is further used for outputting a high level to the transistor connected to the relay power supply of the memory in the computer if the memory preservation measure is to turn off the power supply of the memory, so that the transistor disconnects the relay power supply of the memory; and / or,
[0046] The computer also includes a switching power supply chip and a high-voltage power supply circuit. The communication module is also used to send a pulse signal to the switching power supply chip of the computer, so that the switching power supply chip outputs a high-voltage pulse signal through the high-voltage power supply circuit to damage the memory.
[0047] In the memory information security control scheme in the embodiment of the present disclosure, the communication module used is respectively connected to the computer and the user terminal in communication, and the computer is provided with a memory and a detection unit for detecting the security status of the memory, and the detection unit is connected to the communication module in communication. The method includes: receiving the current status information of the memory sent by the detection unit; judging whether the memory is in an unsafe state according to the current status information of the memory; if the memory is judged to be in an unsafe state, obtaining the corresponding memory preservation measures according to the current status information of the memory; sending an execution request of the memory preservation measures to the user terminal; if an execution instruction returned by the user terminal based on the execution request is received, the memory preservation measures are executed. Through the scheme of the present disclosure, the communication module and the computer are used to cooperate to complete the memory information security control in the computer, the control logic is simple and clear, remote control is supported, there is no dependence on the computer system, and the memory information security protection performance is improved. BRIEF DESCRIPTION OF THE DRAWINGS
[0048] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.
[0049] Figure 1 A flowchart of a storage information security control method provided by an embodiment of the present disclosure;
[0050] Figure 2 A schematic diagram of the structure of a storage information security control system provided by an embodiment of the present disclosure;
[0051] Figure 3 A flowchart of another storage information security control method provided by an embodiment of the present disclosure;
[0052] Figure 4 A partial interactive schematic diagram of another storage information security control method provided by an embodiment of the present disclosure;
[0053] Figure 5 A partial interactive schematic diagram of a storage information security control method provided by an embodiment of the present disclosure;
[0054] Figure 6A schematic diagram of the structure of a storage information security control device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION
[0055] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.
[0056] The following describes the embodiments of the present disclosure through specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.
[0057] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein may be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein may be implemented independently of any other aspect, and two or more of these aspects may be combined in various ways. For example, any number of aspects described herein may be used to implement the device and / or practice the method. In addition, other structures and / or functionalities other than one or more of the aspects described herein may be used to implement this device and / or practice this method.
[0058] It should also be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present disclosure. The drawings only show components related to the present disclosure rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.
[0059] Additionally, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects described may be practiced without these specific details.
[0060] See also Figure 1, is a flow chart of a memory information security control method provided by an embodiment of the present disclosure. The provided memory information security control method is applied to a communication module, and is used to detect the memory in a computer connected to the communication module for communication, and the memory involved includes but is not limited to the hard disk of the computer. Figure 2 As shown, the communication module is connected to the computer and the user terminal respectively, the computer is provided with a memory and a detection unit for detecting the security status of the memory, and the detection unit is connected to the communication module. In addition, the communication module is also connected to the user terminal and the execution unit in the computer, and is used to send request information or alarm information to the user terminal, or control the execution unit to execute corresponding security measures. Figure 1 As shown, the method mainly comprises the following steps:
[0061] S101, receiving current state information of the memory sent by the detection unit;
[0062] The memory information security control method provided in this embodiment is applied to the communication module. The communication module integrates a communication unit and a controller. The communication unit performs the peer function of data transmission, and the controller can perform data processing and instruction transmission and reception. Optionally, the communication module can be an Internet of Things communication module, which integrates the data transmission function of the communication module and the Wi-Fi6 communication unit, and can provide a data transmission path for computers and user terminals, and can also serve as a controller to process information and control peripheral units.
[0063] The memory in the computer to be detected is provided with a corresponding detection unit, which realizes the safety detection of the memory by reading the computer system data or receiving the trigger information of the safety trigger device in the system. The detection unit collects the current state information of the memory, including the state information of data transmission, the state information of accessing the memory, the state information of the sensor set on the housing of the computer where the memory is located, etc.
[0064] Among them, the status information of transmitted data is used to detect whether the information transmitted to the memory contains sensitive data that is prohibited from being transmitted. If it contains sensitive data that is prohibited from being transmitted, the status information is displayed as abnormal transmission data information. The status information of accessing the memory is used to detect whether the user normally enters the account and password to access the memory data, or whether it is an abnormal intrusion user such as a hacker. If there are continuous errors in the account and password or hacker intrusion, the status information is displayed as abnormal access data information. Sensors such as pressure sensors and / or acceleration sensors are set in the computer where the memory is located. The pressure sensor can be set in the computer housing. When the computer is not moved or unpacked, the data of the acceleration sensor and the pressure sensor are normal. If the computer is moved or the housing is unpacked, the corresponding acceleration sensor or pressure sensor will collect abnormal data to feedback that the computer has been moved or the computer housing has been unpacked.
[0065] The detection unit can periodically collect the status information of the memory and send the status information of the memory to the communication module in real time.
[0066] In this embodiment, the communication module may include a communication unit and a controller. The communication unit is used to implement the communication function of data transmission and reception, receive the status information sent by the detection unit, and hand it over to the controller for subsequent processing.
[0067] S102, judging whether the memory is in a non-secure state according to the current state information of the memory;
[0068] After receiving the current state information of the memory, the controller of the communication module determines whether the memory is in a safe state or an unsafe state according to the state information. Specifically, the method of determining whether it is in an unsafe state is mainly to determine whether the current state information of the memory contains abnormal information.
[0069] S103, if it is determined that the memory is in an unsafe state, obtaining corresponding memory security measures according to current state information of the memory;
[0070] If the communication module determines that the memory is currently in an unsafe state, it needs to first determine the memory protection measures corresponding to the unsafe state.
[0071] According to a specific implementation of the embodiment of the present disclosure, the step of judging whether the memory is in a non-secure state according to the current state information of the memory includes:
[0072] If the current state information of the memory includes target state information, determining that the memory is in an unsafe state, wherein the target state information includes transmission data abnormality information, abnormal intrusion information, or sensor data abnormality information;
[0073] The step of acquiring corresponding storage security measures according to the current status information of the storage includes any one of the following:
[0074] If the current state information of the memory is abnormal data transmission information, determining that the memory protection measure is to lock the memory;
[0075] If the current state information of the memory is abnormal intrusion information, determining that the memory protection measure is to shut down the power supply of the memory;
[0076] If the current state information of the memory is sensor data abnormality information, it is determined that the memory protection measure is to destroy the memory by high voltage.
[0077] This embodiment further limits the determination of unsafe status and the selection of memory protection measures. Specifically, for the memory status information that is an unsafe status of transmitting abnormal data information, the corresponding memory protection measure is to lock the memory to stop the data from being transmitted. For abnormal intrusion information detected, the corresponding memory is to turn off the power supply of the memory to prohibit hackers from intruding and accessing. For abnormal sensor data information, the corresponding memory protection measure is to destroy the memory with high voltage to prevent others from maliciously unpacking and stealing data.
[0078] S104, sending a request for executing the memory security measure to the user terminal;
[0079] After determining the memory security measure corresponding to the current non-secure state according to the above steps, the communication module needs to apply for executing the determined memory security measure to protect the information security of the memory and prevent it from being stolen.
[0080] The communication module is connected to the user terminal and is configured with a higher decision priority for the user terminal. That is, after determining the storage security measures in the current non-secure state, the communication module first sends an execution request to the user terminal to request the execution of the storage security measures. The execution request sent may include the current state information of the storage or the determined storage security measures.
[0081] The communication module gives priority to the user terminal to make the decision on the execution of the storage security measures, and the user terminal bound to the storage makes the selection. In this way, the user of the user terminal can know in time that the storage is in an unsafe state and can actively choose to execute the storage security measures.
[0082] S105: If an execution instruction returned by the user terminal based on the execution request is received, the memory protection measure is executed.
[0083] If the communication module receives an execution instruction returned by the user terminal, it can execute the storage protection measure according to the user's instruction.
[0084] Of course, according to another specific implementation of the embodiment of the present disclosure, after the step of sending the execution request of the memory preservation measure to the user terminal, the method may further include at least one of the following:
[0085] If a non-execution instruction returned by the user terminal based on the execution request is received, the memory preservation measure is not executed;
[0086] If the execution instruction returned by the user terminal based on the execution request is not received, the memory protection measure is automatically executed.
[0087] In this embodiment, in the case where the user does not provide feedback, in order to protect the information security of the memory, the communication module with a lower priority than the user terminal directly decides and executes the memory preservation measure.
[0088] Also, in the case of non-execution instructions reported by users, it may be that the user disassembles the computer housing or forgets the login password, resulting in an unsafe state of abnormal access. At this time, since the decision priority of the user terminal is higher, the determined memory protection measures are not executed according to the non-execution instructions.
[0089] On the basis of the above implementation, according to a specific implementation of the embodiment of the present disclosure, the step of executing the memory preservation measure includes any one of the following:
[0090] If the memory protection measure is to lock the memory, sending a transmission port closing instruction to the computer so that the computer closes the data transmission port of the memory;
[0091] If the memory preservation measure is to turn off the power supply of the memory, output a high level to a transistor in the computer connected to the relay power supply of the memory, so that the transistor disconnects the relay power supply of the memory;
[0092] If the memory preservation measure is to damage the memory with high voltage, a pulse signal is sent to the switching power chip of the computer so that the switching power chip outputs a high-voltage pulse signal through a high-voltage power supply circuit to damage the memory.
[0093] This implementation mode specifically limits the execution of various storage security measures.
[0094] First, for the measure of locking the memory, the communication module can directly send a transmission port closing instruction to the computer, and the computer can close the data transmission port of the memory according to the instruction, stop data transmission to the computer, and realize memory locking.
[0095] Secondly, the measure of shutting down the memory power supply requires the communication module to cooperate with the relay power supply and transistor in the computer. The communication module directly outputs a high level to the transistor, and the transistor disconnects the relay power supply, that is, shutting down the power supply of the memory.
[0096] Third, measures against high voltage damage to memory require the communication module to cooperate with the switching power supply chip and high-voltage power supply circuit in the computer. The communication module first sends a PMW pulse signal to the switching power supply chip of the computer, and then outputs high voltage through the high-voltage power supply circuit, that is, the boost-type DC-DC converter, transformer and large capacitor to generate a high-voltage pulse of up to 600V to damage the memory and avoid information leakage.
[0097] All of the above storage security measures can be run automatically. If the user needs to repair the system, he can output a control command to shut down the automatic execution function of the above security measures in advance.
[0098] In addition, according to another specific implementation of the embodiment of the present disclosure, after the step of determining whether the memory is in a non-secure state, the method may further include:
[0099] An alarm instruction is sent to an alarm device connected to the communication module so that the alarm device outputs alarm information.
[0100] This embodiment adds an alarm module. The communication module can send alarm information to the associated user terminal, and can also send alarm instructions to other alarms connected to the communication module, such as smart home alarms, so that these alarms sound an alarm to prompt users within the corresponding range to know that the memory is in an unsafe state, so as to avoid leakage of memory information, and further improve the reliability of memory information security control.
[0101] A specific implementation method will be provided below to explain the implementation process of the storage information security control method provided by the present application. Figures 2 to 3 As shown, the communication module is connected to the memory and detection unit, the user terminal and the execution unit in the computer. Figures 2 to 4As shown, the detection unit of the memory completes information security detection through the computer system, sensors, and the data monitoring function of the system itself. Specifically, it includes: completing security monitoring in the authentication stage through the password set by the computer system; monitoring data transmission security through this system, mainly monitoring sensitive information transmission and large-scale data transmission; and detecting the security of system equipment through sensors, among which the acceleration sensor can detect the vibration information of the equipment, and the pressure sensor is placed between the equipment chassis cover and the chassis to monitor the disassembly behavior. If there is severe vibration or disassembly behavior, the information will be notified to the user device or other networked devices through the communication module.
[0102] like Figure 2 As shown, the communication module mainly has three functions: data transmission, network alarm, and controller. Data transmission can rely on the internal 5G cellular communication unit and Wi-Fi6 communication unit, and its high bandwidth and high speed characteristics enable the storage device to efficiently access data; cellular communication can be used for remote transmission; Wi-Fi can be used to realize self-organizing networking between home devices or industrial equipment, which is convenient for communication, data transmission and security between devices; network alarm can send SMS alarms to users, and can also trigger the Internet of Things system itself and networked voice devices to alarm at the same time; the controller is the core processor of this system, which judges the detection information transmitted by the information security detection unit, controls the operation of the information security processing unit, mainly provides it with trigger signals or control signals, and receives feedback signals from the information security processing unit to form an automatic control system.
[0103] like Figure 5 As shown in the figure, the execution unit, as the execution subject to ensure the security of the memory information, receives the signal sent by the detection unit through the communication module and is also controlled by the communication module. Figure 3 and Figure 5 As shown. During the authentication phase, if there are more than three password errors (including common passwords and random passwords), the memory will be locked; when encountering hacker intrusion that cannot be resisted, the information security monitoring unit sends a signal to the communication module, and the communication module outputs a high level to turn on the N-type metal oxide transistor (N-Metal-Oxide-Semiconductor, NMOS), and uses the NMOS tube to disconnect the relay power supply. The relay path is disconnected and the hard disk power supply can be turned off; when encountering an intruder who forcibly dismantles the device, the information security monitoring unit senses the signal changes of the pressure sensor and the acceleration sensor, and the communication module makes a judgment, through the battery and high-voltage power supply circuit inside the system, that is, the communication module outputs a PWM signal to the switching power supply chip, and uses the boost type DCDC, transformer and large capacitor to generate 600V high voltage. The maximum output of 600V high-voltage pulses can damage the memory to avoid information leakage. All security protections can be automatically operated. If the user needs to repair the system, he can output a control command to close the above protection functions in advance.
[0104] The memory is mainly used for data storage and data flow monitoring. All data transmission records will be reported to the detection unit in log form.
[0105] In the memory information security control method in the above-mentioned embodiment of the present disclosure, the communication module used is respectively connected to the computer and the user terminal, the computer is provided with a memory and a detection unit for detecting the security status of the memory, and the detection unit is connected to the communication module. By using the communication module and the computer to cooperate to complete the memory information security control in the computer, the control logic is simple and clear, supports remote control, has no dependence on the computer system, and improves the memory information security protection performance.
[0106] Corresponding to the above method embodiment, see Figure 6 The embodiment of the present disclosure also provides a communication module, which is similar to the method embodiment described above, wherein the communication module is respectively connected to the computer and the user terminal for communication, and the computer is provided with a memory and a detection unit for monitoring the security status of the memory, and the detection unit is connected to the communication module for communication. Figure 6 As shown, the communication module 60 mainly includes:
[0107] The receiving module 601 is used to receive the current state information of the memory sent by the detection unit;
[0108] A determination module 602 is used to determine whether the memory is in a non-secure state according to the current state information of the memory;
[0109] An acquisition module 603 is used to acquire corresponding storage security measures according to current status information of the storage if it is determined that the storage is in an unsafe state;
[0110] A sending module 604, configured to send an execution request of the memory security measure to the user terminal;
[0111] The execution module 605 is configured to execute the memory preservation measure if an execution instruction returned by the user terminal based on the execution request is received.
[0112] In addition, the embodiment of the present disclosure provides another communication module, including a communication unit and a controller, wherein the controller is respectively connected to a computer and a user terminal through the communication unit, the computer is provided with a memory and a detection unit for monitoring the security status of the memory, and the controller is connected to the detection unit through the communication unit; wherein,
[0113] The communication unit is used to receive the current state information of the memory sent by the detection unit;
[0114] The controller is used to determine whether the memory is in a non-safe state according to the current state information of the memory;
[0115] The controller is used to obtain corresponding memory security measures according to current state information of the memory if it is determined that the memory is in an unsafe state;
[0116] The communication unit sends a request for executing the storage security measure to the user terminal;
[0117] The controller is configured to execute the memory preservation measure if receiving an execution instruction returned by the user terminal based on the execution request.
[0118] According to a specific implementation method of an embodiment of the present disclosure, the communication unit includes a 5G cellular communication unit and a Wi-Fi 6 communication unit.
[0119] Continue to see Figure 2 The embodiment of the present disclosure further provides a storage information security control system, comprising a communication module, a computer and a user terminal, wherein the communication module is respectively connected to the computer and the user terminal in communication, the computer is provided with a storage and a detection unit for monitoring the security status of the storage, and the detection unit is connected to the communication module in communication; wherein the communication module is used to:
[0120] Receiving current state information of the memory sent by the detection unit;
[0121] Determining whether the memory is in a non-secure state according to the current state information of the memory;
[0122] If it is determined that the memory is in an unsafe state, obtaining corresponding memory security measures according to current state information of the memory;
[0123] Sending a request for executing the memory security measure to the user terminal;
[0124] If an execution instruction returned by the user terminal based on the execution request is received, the memory protection measure is executed.
[0125] According to a specific implementation of the embodiment of the present disclosure, the computer further includes a transistor and a relay power supply, the relay power supply is electrically connected to the memory, the transistor is electrically connected to the relay power supply, and the transistor is electrically connected to the communication module, and the communication module is further used for outputting a high level to the transistor connected to the relay power supply of the memory in the computer if the memory preservation measure is to turn off the power supply of the memory, so that the transistor disconnects the relay power supply of the memory; and / or,
[0126] The computer also includes a switching power supply chip and a high-voltage power supply circuit. The communication module is also used to send a pulse signal to the switching power supply chip of the computer, so that the switching power supply chip outputs a high-voltage pulse signal through the high-voltage power supply circuit to damage the memory.
[0127] The specific implementation process of the communication modules and systems provided in the above embodiments can be found in the contents of the above method embodiments, and parts not described in detail in this embodiment will not be repeated here.
[0128] In summary, the storage information security control method, device, system and communication module provided by the above embodiments of the present disclosure mainly have the following advantages:
[0129] First, this solution can be used directly or indirectly for computer hard disks, including but not limited to hard disks. The judgment logic is simple, the control logic is clear, and the implementation difficulty is relatively low.
[0130] Secondly, the system has more functions. The subject of system control can be the user or the communication module, and it supports remote control. Information security issues are transmitted to users through the communication module, and users can remotely execute security measures for storage. It also has cloud storage function and is a feasible and practical IoT device. Most existing technical solutions do not support remote control and equipment security monitoring, and do not support 5G+Wi-Fi cloud storage and self-organizing network solutions.
[0131] Third, it uses fewer system components and has no system dependency, making the system more compatible and less expensive, and can upgrade the security of servers, home computers, commercial computers and other equipment.
[0132] Fourthly, the boost power supply self-destructing memory provided is more intelligent. It outputs PWM signal through the communication module, adjusts the duty cycle of the boost power chip to upgrade the battery voltage or 12V power supply to high voltage. The boost power chip has a transformer with a transformation ratio of 1:80, and finally outputs high voltage. The input source of the boost power chip is the 12V input source of the battery or adapter. The voltage can be adjusted by adjusting the duty cycle, which is suitable for various types of memory. However, most of the existing technical solutions adopt a single power supply method, and do not have a voltage regulation function, and cannot cause irreversible damage to some memories. In special circumstances, there is still a risk of data leakage.
[0133] It should be noted that the computer-readable medium disclosed above may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, device or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, in which a computer-readable program code is carried. This propagated data signal may take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. The computer readable signal medium may also be any computer readable medium other than a computer readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.
[0134] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.
[0135] The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device can implement the solution provided by the method embodiment.
[0136] Alternatively, the computer-readable medium carries one or more programs, and when the one or more programs are executed by the electronic device, the electronic device can implement the solution provided by the above method embodiment.
[0137] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages, or a combination thereof, including object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).
[0138] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.
[0139] The units involved in the embodiments described in the present disclosure may be implemented by software or hardware, wherein the name of a unit does not, in some cases, limit the unit itself.
[0140] It should be understood that various parts of the present disclosure may be implemented in hardware, software, firmware, or a combination thereof.
[0141] The above is only a specific implementation of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present disclosure should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be based on the protection scope of the claims.
Claims
1. A storage information security control method, characterized in that: Applied to a communication module, the communication module is respectively connected to a computer and a user terminal, the computer is provided with a memory and a detection unit for detecting the security status of the memory, the detection unit is connected to the communication module; the method comprises: Receiving current state information of the memory sent by the detection unit; Determining whether the memory is in a non-secure state according to the current state information of the memory; If it is determined that the memory is in an unsafe state, obtaining corresponding memory security measures according to current state information of the memory; Sending a request for executing the memory security measure to the user terminal; If an execution instruction returned by the user terminal based on the execution request is received, the memory protection measure is executed; the step of judging whether the memory is in a non-secure state according to the current state information of the memory includes: If the current state information of the memory includes target state information, the memory is determined to be in an unsafe state, wherein the target state information includes sensor data abnormality information, wherein the sensor includes a pressure sensor and / or an acceleration sensor arranged in the computer.
2. The method according to claim 1, characterized in that After the step of sending the execution request of the memory security measure to the user terminal, the method further includes at least one of the following: If a non-execution instruction returned by the user terminal based on the execution request is received, the memory preservation measure is not executed; If the execution instruction returned by the user terminal based on the execution request is not received, the memory protection measure is automatically executed.
3. The method according to claim 1 or 2, characterized in that: The target status information also includes transmission data abnormality information or abnormal intrusion information; The step of acquiring corresponding storage security measures according to the current status information of the storage includes any one of the following: If the current state information of the memory is abnormal data transmission information, determining that the memory protection measure is to lock the memory; If the current state information of the memory is abnormal intrusion information, determining that the memory protection measure is to shut down the power supply of the memory; If the current state information of the memory is sensor data abnormality information, it is determined that the memory protection measure is to destroy the memory by high voltage.
4. The method according to claim 3, characterized in that The step of executing the memory protection measure includes any one of the following: If the memory protection measure is to lock the memory, sending a transmission port closing instruction to the computer so that the computer closes the data transmission port of the memory; If the memory preservation measure is to turn off the power supply of the memory, output a high level to a transistor in the computer connected to the relay power supply of the memory, so that the transistor disconnects the relay power supply of the memory; If the memory preservation measure is to damage the memory with high voltage, a pulse signal is sent to the switching power chip of the computer so that the switching power chip outputs a high-voltage pulse signal through a high-voltage power supply circuit to damage the memory.
5. The method according to claim 1, characterized in that After the step of determining whether the memory is in a non-secure state, the method further includes: An alarm instruction is sent to an alarm device connected to the communication module so that the alarm device outputs alarm information.
6. A communication module, characterized in that: The communication module is connected to the computer and the user terminal respectively, the computer is provided with a memory and a detection unit for monitoring the security status of the memory, and the detection unit is connected to the communication module; the communication module includes: A receiving module, used for receiving the current state information of the memory sent by the detection unit; A judging module, used for judging whether the memory is in a non-safe state according to the current state information of the memory; An acquisition module, configured to acquire corresponding storage security measures according to current status information of the storage if it is determined that the storage is in an unsafe state; A sending module, used for sending an execution request of the memory security measure to the user terminal; an execution module, configured to execute the memory preservation measure upon receiving an execution instruction returned by the user terminal based on the execution request; The judgment module is specifically used for: If the current state information of the memory includes target state information, the memory is determined to be in an unsafe state, wherein the target state information includes sensor data abnormality information, wherein the sensor includes a pressure sensor and / or an acceleration sensor arranged in the computer.
7. A communication module, characterized in that: It comprises a communication unit and a controller, wherein the controller is connected to a computer and a user terminal through the communication unit, the computer is provided with a memory and a detection unit for monitoring the security status of the memory, and the controller is connected to the detection unit through the communication unit; wherein, The communication unit is used to receive the current state information of the memory sent by the detection unit; The controller is used to determine whether the memory is in a non-safe state according to the current state information of the memory; The controller is used to obtain corresponding memory security measures according to current state information of the memory if it is determined that the memory is in an unsafe state; The communication unit sends a request for executing the storage security measure to the user terminal; The controller is configured to execute the memory preservation measure if receiving an execution instruction returned by the user terminal based on the execution request; The determining, according to the current state information of the memory, whether the memory is in a non-secure state comprises: If the current state information of the memory includes target state information, the memory is determined to be in an unsafe state, wherein the target state information includes sensor data abnormality information, wherein the sensor includes a pressure sensor and / or an acceleration sensor arranged in the computer.
8. The communication module according to claim 7, characterized in that: The communication unit includes a 5G cellular communication unit and a Wi-Fi6 communication unit.
9. A storage information security control system, characterized in that: The invention comprises a communication module, a computer and a user terminal, wherein the communication module is respectively connected to the computer and the user terminal in communication, the computer is provided with a memory and a detection unit for monitoring the safety status of the memory, and the detection unit is connected to the communication module in communication; wherein the communication module is used for: Receiving current state information of the memory sent by the detection unit; Determining whether the memory is in a non-secure state according to the current state information of the memory; If it is determined that the memory is in an unsafe state, obtaining corresponding memory security measures according to current state information of the memory; Sending a request for executing the memory security measure to the user terminal; If an execution instruction returned by the user terminal based on the execution request is received, executing the memory preservation measure; The step of determining whether the memory is in a non-secure state according to the current state information of the memory includes: If the current state information of the memory includes target state information, the memory is determined to be in an unsafe state, wherein the target state information includes sensor data abnormality information, wherein the sensor includes a pressure sensor and / or an acceleration sensor arranged in the computer.
10. The system according to claim 9, characterized in that The computer further includes a transistor and a relay power supply, wherein the relay power supply is electrically connected to the memory, the transistor is electrically connected to the relay power supply, and the transistor is electrically connected to the communication module, and the communication module is further used for outputting a high level to the transistor connected to the relay power supply of the memory in the computer if the memory preservation measure is to turn off the power supply of the memory, so that the transistor disconnects the relay power supply of the memory; and / or, The computer also includes a switching power supply chip and a high-voltage power supply circuit. The communication module is also used to send a pulse signal to the switching power supply chip of the computer, so that the switching power supply chip outputs a high-voltage pulse signal through the high-voltage power supply circuit to damage the memory.
Citation Information
Patent Citations
KR1018735640000B1