Virus detection and killing method, electronic equipment and virus detection and killing system

Abstract

The present application discloses a virus detection method, electronic device and virus detection system, the method comprising: when a mobile storage device is connected to a first electronic device, determining whether the mobile storage device has a first digital signature, wherein the presence of the first digital signature indicates that the corresponding mobile storage device has been subjected to a virus detection operation; if so, performing a verification operation on the data status of the mobile storage device based on a second digital signature associated with the first digital signature obtained from a server and the first digital signature in the mobile storage device; if the verification operation passes, not performing a virus detection operation on the mobile storage device. The method can avoid performing a virus detection operation on the mobile storage device while ensuring safety, thereby saving time for the virus detection operation.

Description

Technical Field

[0001] The present application relates to the field of verification in the process of virus disinfection of a device, and in particular to a virus detection and killing method, an electronic device and a virus detection and killing system. Background Art

[0002] Antivirus operation is an important barrier to ensure data security on electronic devices such as computers. When a mobile storage device is connected to an electronic device, the antivirus software usually scans it for viruses first and then reports the results of the virus scan to let the user know whether it is safe to access the mobile storage device.

[0003] The antivirus software has two scanning modes: quick scan and full scan. The quick scan is to scan the key parts of the system, which is faster; the full scan is to scan all files on electronic devices such as computers, which is slower. For mobile storage devices, virus scans are performed every time they are inserted into electronic devices, which causes users to wait too long, seriously affecting the plug-and-play experience of users on mobile devices. Summary of the invention

[0004] A computer virus disinfection method according to an embodiment of the present application includes:

[0005] When a mobile storage device is connected to a first electronic device, determining whether the mobile storage device has a first digital signature, wherein the first digital signature indicates that the corresponding mobile storage device has been subjected to a virus disinfection operation, and the first digital signature is generated based on relevant information of the virus disinfection operation;

[0006] If yes, then based on the acquired second digital signature associated with the first digital signature in the server and the first digital signature in the mobile storage device, verify the data status of the mobile storage device, wherein the second digital signature is formed based on the original content of the first digital signature;

[0007] If the verification operation is passed, no virus disinfection operation is performed on the mobile storage device.

[0008] Optionally, the method further comprises:

[0009] When it is determined that the mobile storage device does not have the first digital signature, performing a virus disinfection operation on the mobile storage device;

[0010] generating the first digital signature;

[0011] The first digital signature is stored in the mobile storage device and stored in the server to form the second digital signature.

[0012] Optionally, generating the first digital signature includes:

[0013] The first digital signature is generated based on multiple sub-information related to the antivirus operation, wherein the sub-information includes at least one of the following: antivirus software information, detection information, disk information of the mobile storage device, and signature information related to the previous antivirus operation.

[0014] Optionally, the method further comprises:

[0015] Determining identification information of the mobile storage device;

[0016] determining an encryption algorithm for encrypting the first digital signature;

[0017] The identification information and relevant information of the encryption algorithm are added to the generated first digital signature.

[0018] Optionally, the verifying operation on the data status of the mobile storage device based on the acquired second digital signature associated with the first digital signature in the server and the first digital signature in the mobile storage device includes:

[0019] Obtaining from the server a second digital signature stored therein;

[0020] Comparing the second digital signature with the first digital signature stored in the mobile storage device, including comparing the sub-information in the second digital signature with the corresponding sub-information in the first digital signature,

[0021] Based on the comparison result, it is determined whether the data state of the mobile storage device has changed.

[0022] Optionally, the sub-information in the first digital signature includes disk information of the mobile storage device, and the disk information includes at least one of the following: disk serial number, partition table information, directory index cluster, capacity information, access information and modification time;

[0023] Accordingly, determining whether the data state of the mobile storage device has changed based on the comparison result includes:

[0024] At least based on the comparison result corresponding to the disk information, it is determined whether the disk information of the mobile storage device has changed.

[0025] Optionally, the method further comprises:

[0026] Encrypting the first digital signature using the public key of the encryption algorithm;

[0027] The encrypted first digital signature is sent to the server, so that the server verifies the data integrity of the first digital signature using the private key of the encryption algorithm.

[0028] The present application also provides an electronic device, including:

[0029] a determination module configured to determine, when the mobile storage device is connected to the electronic device, whether the mobile storage device has a first digital signature, wherein the presence of the first digital signature indicates that the corresponding mobile storage device has undergone a virus disinfection operation, and the first digital signature is generated based on relevant information of the virus disinfection operation;

[0030] A processing module is configured to, if there is a first digital signature in the mobile storage device, verify the data status of the mobile storage device based on a second digital signature associated with the first digital signature obtained in the server and the first digital signature in the mobile storage device; if the verification operation passes, it is allowed not to perform antivirus operation on the mobile storage device, wherein the second digital signature is formed based on the original content of the first digital signature.

[0031] The embodiment of the present application also provides a computer virus antivirus system, comprising a first electronic device and a server connected to each other, wherein a first program is installed in the first electronic device;

[0032] The first electronic device is used to determine, through the first program, whether the mobile storage device has a first digital signature when the mobile storage device is connected to the first electronic device, wherein the presence of the first digital signature indicates that the corresponding mobile storage device has undergone a virus disinfection operation, and the first digital signature is generated based on relevant information of the virus disinfection operation;

[0033] If the mobile storage device has a first digital signature, the first electronic device sends an acquisition instruction to the server, and the server sends a stored second digital signature to the first electronic device, wherein the second digital signature is associated with the first digital signature and is formed based on the original content of the first digital signature;

[0034] The first electronic device is further used to verify the data status of the mobile storage device based on the second digital signature and the first digital signature obtained through the first program; if the verification operation passes, the mobile storage device is not disinfected.

[0035] Optionally, the virus detection and killing system further includes a second electronic device different from the first electronic device, the second electronic device is connected to the server, and the first program is installed on the second electronic device.

[0036] The method of the present application can reduce repeated antivirus operations on mobile storage devices while ensuring safety, thereby saving antivirus operation time and avoiding the phenomenon of affecting the plug-and-play experience of users on mobile storage devices such as mobile phones and mobile hard disks. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 A flowchart of a computer virus antivirus method according to an embodiment of the present application;

[0038] Figure 2 A flowchart of an embodiment of the virus disinfection method of the present application;

[0039] Figure 3 For the embodiments of this application Figure 1 A flowchart of an embodiment of step S200;

[0040] Figure 4 A schematic diagram of the interaction process between a first electronic device and a server in one embodiment of the present application;

[0041] Figure 5 A flowchart of a specific embodiment of the computer virus antivirus method of the present application embodiment;

[0042] Figure 6 Schematic diagram of the connection relationship between the electronic device of the embodiment of the present application and the mobile storage device and the server. DETAILED DESCRIPTION

[0043] Various aspects and features of the present application are described herein with reference to the accompanying drawings.

[0044] It should be understood that various modifications may be made to the embodiments of the present application. Therefore, the above description should not be considered as limiting, but only as an example of an embodiment. Other modifications within the scope and spirit of the present application will occur to those skilled in the art.

[0045] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments of the present application and, together with the general description of the present application given above and the detailed description of the embodiments given below, serve to explain the principles of the present application.

[0046] These and other characteristics of the present application will become apparent from the following description of a preferred form of embodiment given as a non-limiting example with reference to the accompanying drawings.

[0047] It should also be understood that although the present application has been described with reference to some specific examples, those skilled in the art will be able to readily implement many other equivalent forms of the present application.

[0048] The above and other aspects, features and advantages of the present application will become more apparent in view of the following detailed description when taken in conjunction with the accompanying drawings.

[0049] Specific embodiments of the present application are described hereinafter with reference to the accompanying drawings; however, it should be understood that the embodiments applied for are merely examples of the present application, which may be implemented in a variety of ways. Well-known and / or repeated functions and structures are not described in detail to avoid unnecessary or redundant details that obscure the present application. Therefore, the specific structural and functional details applied for herein are not intended to be limiting, but merely serve as a basis and representative basis for the claims to teach those skilled in the art to use the present application in a variety of ways with substantially any suitable detailed structure.

[0050] This specification may use the phrases "in one embodiment," "in another embodiment," "in yet another embodiment," or "in other embodiments," all of which may refer to one or more of the same or different embodiments according to the present application.

[0051] A computer virus disinfection method according to an embodiment of the present application can be applied to a first electronic device such as a computer to implement virus detection control on other devices connected to the first electronic device.

[0052] The method comprises the following steps: when a mobile storage device (such as a mobile phone, a mobile hard disk, etc.) is connected to a first electronic device, determining whether the mobile storage device has a first digital signature, and the first digital signature may include multiple types of data related to the antivirus operation on the mobile storage device. In addition, the presence of the first digital signature indicates that the corresponding mobile storage device has been subjected to the antivirus operation, while the absence of the first digital signature indicates that the corresponding mobile storage device has not been subjected to the antivirus operation. Further, the first electronic device needs to judge the mobile storage device connected thereto, and if it is determined that the mobile storage device has the first digital signature, then based on the second digital signature associated with the first digital signature in the acquired service end (such as the cloud or server) and the first digital signature in the mobile storage device, the data state of the mobile storage device is verified. The second digital signature may be a digital signature stored in the service end, which is associated with the first digital signature, such as the content of which may be the same as that of the first digital signature. When it is determined that the content of the first digital signature is the same or substantially the same as that of the second digital signature, it can be determined that the verification operation has passed and meets the requirements. When the verification operation is passed, the first electronic device does not perform antivirus operation on the mobile storage device, thereby effectively saving the time of antivirus operation while ensuring safety, and avoiding the phenomenon of affecting the user's plug-and-play experience of the mobile device.

[0053] The method is described in more detail below with reference to the accompanying drawings. Figure 1 Flow chart of the computer virus disinfection method according to the embodiment of the present application, as shown in FIG. Figure 1 Shown and combined Figure 5 , the method comprises the following steps:

[0054] S100, when a mobile storage device is connected to a first electronic device, determining whether the mobile storage device has a first digital signature, wherein the first digital signature indicates that the corresponding mobile storage device has undergone a virus disinfection operation, and the first digital signature is generated based on relevant information of the virus disinfection operation.

[0055] A mobile storage device can be a device with a storage device, such as a mobile phone, tablet, mobile hard disk, USB flash drive, etc., which can be electrically connected to an electronic device such as a computer. For the security of data, an electronic device can determine whether the mobile storage device is a secure device when it detects that a mobile storage device is connected to it.

[0056] When the mobile storage device is connected to the first electronic device, the first electronic device determines whether the mobile storage device has the first digital signature. The first digital signature is generated based on the relevant information of the antivirus operation, so the first digital signature includes the relevant information of the antivirus operation on the mobile storage device, such as the information related to the memory generated after the antivirus operation on the memory of the mobile storage device, and the specific information of the antivirus operation itself, such as the antivirus report, antivirus software information, etc.

[0057] If the mobile storage device has the first digital signature, it indicates that the mobile storage device has been disinfected, thereby generating the first digital signature. If the mobile storage device does not have the first digital signature, it indicates that the mobile storage device has not been disinfected, and may be electrically connected to the first electronic device for the first time.

[0058] S200: If yes, then based on the second digital signature associated with the first digital signature obtained in the server and the first digital signature in the mobile storage device, a verification operation is performed on the data status of the mobile storage device, wherein the second digital signature is formed based on the original content of the first digital signature.

[0059] Specifically, the second digital signature is stored in a server, such as a server in the cloud, and the second digital signature is associated with the first digital signature, and the second digital signature is formed based on the original content of the first digital signature. For the original content of the first digital signature, if the first electronic device determines that the mobile storage device is safe after performing virus disinfection on the mobile storage device, it generates a corresponding first digital signature, and relative to the next time the mobile storage device is connected to the first electronic device, the content of the generated first digital signature can be considered as the original content.

[0060] The second digital signature is generated based on the original content, and of course the content of the generated second digital signature will be the same as the original content or the same in main content, including the specific content of the second digital signature being the same as the specific content of the first digital signature, or the main content of the second digital signature being consistent with the main content of the first digital signature.

[0061] The first electronic device can obtain the second digital signature from the server through the network, and then obtain the first digital signature from the electrically connected mobile storage device to perform a data status verification operation of the mobile storage device.

[0062] The verification operation may be a verification of whether the mobile storage device has been disinfected again. The verification operation can verify whether the data in the mobile storage device has changed, whether the mobile storage device has been disinfected, and if it has been disinfected, whether the data in the mobile storage device has changed after the disinfection operation. The above-mentioned various complex situations of the mobile storage device can all be determined through the verification operation.

[0063] Regarding the above-mentioned verification operation, if the first electronic device determines that the mobile storage device has the first digital signature, it can be determined that the mobile storage device has been subjected to an antivirus operation. However, it is still necessary to determine whether the data in the mobile storage device has changed. This can be done by comparing the specific sub-information in the first digital signature with the specific sub-information in the corresponding second digital signature, such as comparing the disk information in the first digital signature with the disk information in the corresponding second digital signature. If the contents recorded in the two are the same, it indicates that the mobile storage device has undergone an antivirus operation, and the data in the mobile storage device has not changed since the last antivirus operation.

[0064] Of course, in the process of actually comparing the first digital signature with the second digital signature, a preset requirement that matches can be constructed according to actual needs, for example, the preset requirement can be a requirement that the main content of the first digital signature is exactly the same as the main content of the second digital signature, or that all the contents of the first digital signature are the same as all the contents of the second digital signature, etc. If the preset requirements are met, it can be determined that the verification operation is passed, otherwise it is determined that the verification has not passed.

[0065] S300: If the verification operation passes, no virus disinfection operation is performed on the mobile storage device.

[0066] If the verification operation passes, it indicates that the first electronic device determines that the electrically connected mobile storage device is safe and will not cause damage to itself or other devices, and no antivirus operation is required. While ensuring data security, a large amount of antivirus time is saved. Of course, if the verification operation fails, the mobile storage device needs to be antivirused to ensure the security of the data and the entire environment.

[0067] The specific verification operation can be the above-mentioned comparison operation, and the preset requirements for whether it is passed can be configured according to actual needs, for example, the content of the first digital signature and the second digital signature is the same, or the part of the content in the first digital signature is the same as the corresponding part of the content in the second digital signature, then the verification operation is passed. This can indicate that the mobile storage device has been subjected to a virus disinfection operation after the last connection, and the data in the mobile storage device has not changed after the virus disinfection operation. Of course, when the mobile storage device is electrically connected to the first electronic device, the verification operation may also fail. For example, the content of the first digital signature and the second digital signature are different, especially the main sub-information is different, such as the disk information in the first digital signature is different from the disk information of the corresponding second digital signature, which indicates that after the mobile storage device has undergone a virus disinfection operation and generated the first digital signature, the original first digital signature has also changed due to the change of the data in the disk, for example, due to the change of the disk information. Since the second digital signature is stored on the server, it is generated based on the original content of the first digital signature. When the disk information in the second digital signature is compared with the disk information in the changed first digital signature, it can be determined that the two disk information contents are different.

[0068] Furthermore, if the verification operation is passed, the first electronic device may not perform virus disinfection on the mobile storage device, thereby reducing the time of repeated virus disinfection on the mobile storage device while ensuring safety, and avoiding the phenomenon of affecting the plug-and-play experience of mobile storage devices such as mobile phones and mobile hard disks.

[0069] In addition, when the mobile storage device is electrically connected to the first electronic device, a verification operation fails. For example, the mobile storage device has not been subjected to a virus disinfection operation, and / or after the mobile storage device has been subjected to a virus disinfection operation, the data therein has changed, causing the content of the original first digital signature to change, and then the verification operation fails when the above-mentioned comparison operation is performed. In this regard, the first electronic device can perform a virus disinfection operation on the mobile storage device again, and regenerate the first digital signature, send the regenerated first digital signature to the server, re-form the associated second digital signature, and replace the old version of the second digital signature previously stored by the server with the re-formed second digital signature.

[0070] For this situation, in one embodiment of the present application, Figure 2 Shown and combined Figure 4 , the method further comprises the following steps:

[0071] S400: When it is determined that the mobile storage device does not have the first digital signature, perform a virus disinfection operation on the mobile storage device.

[0072] If the mobile storage device does not have the first digital signature, it indicates that the mobile storage device has not been connected to the first electronic device or other second electronic devices and has not been anti-virus operated before, and the current connection is the first connection. The absence of the first digital signature also indicates that the first electronic device has not performed an anti-virus operation on the mobile storage device. In this embodiment, when it is determined that the mobile storage device does not store the first digital signature, an anti-virus operation on the mobile storage device is initiated, which can be specifically performed by anti-virus software.

[0073] S500: Generate the first digital signature.

[0074] During the virus disinfection process, the first electronic device may generate the first digital signature based on the data related to the virus disinfection operation, the relevant information of the mobile storage device itself, and / or the relevant operation information of the first digital signature. This allows the generated first digital signature to include the data related to the virus disinfection operation, the relevant information of the mobile storage device itself, and / or the relevant operation information of the first digital signature.

[0075] In addition, the data structure of the first digital signature may be of various types, for example, a collection of multiple information units of different types, or a single data body, etc. The corresponding construction may be performed according to actual needs.

[0076] S600, storing the first digital signature in the mobile storage device, and storing it in the server to form the second digital signature.

[0077] The first electronic device stores the generated first digital signature in the mobile storage device, so that if the mobile storage device is connected to the first electronic device or other second electronic device again, the first electronic device or other second electronic device can detect the first digital signature and use the first digital signature to compare with the second digital signature to determine whether the data status of the mobile storage device can pass the verification operation.

[0078] Here, combined Figure 6Specifically, the second electronic device is similar to the first electronic device and can form an antivirus alliance with the first electronic device, such as antivirus software that can mutually recognize antivirus operations can be installed to perform similar antivirus operations. For example, when the mobile storage device is electrically connected to the second electronic device, the second electronic device can also verify the first digital signature in the mobile storage device, including verifying whether it has the first digital signature. If it has the first digital signature, the first digital signature is compared with the obtained second digital signature to determine whether the contents of the two are the same. This allows the mobile storage device to be processed by the first electronic device as described above, regardless of whether it is connected to any device in the antivirus alliance, and can also reduce the time for repeated antivirus operations on the mobile storage device.

[0079] In addition, the first electronic device may also send the first digital signature to the server to form a second digital signature. The second digital signature may be stored on the server (such as a server), and when used, the first electronic device may obtain it from the server.

[0080] In one embodiment of the present application, generating the first digital signature includes: generating the first digital signature based on multiple sub-information related to the antivirus operation, wherein the sub-information includes at least one of the following: antivirus software information, detection information, disk information of the mobile storage device, and signature information related to the previous antivirus operation.

[0081] Specifically and again combined Figure 5 , the first digital signature may include information related to the antivirus operation, and the process of generating the first digital signature may be generated based on multiple sub-information related to the antivirus operation, wherein the sub-information may be information on the antivirus operation in multiple different aspects. Specifically, the sub-information may include at least one of the following: antivirus software information, detection and killing information, disk information of the mobile storage device, and signature information related to the previous antivirus operation. Among them, the antivirus software information may be relevant information of the antivirus software used by the first electronic device and / or the mobile storage device, such as software name, antivirus engine information, virus library version information, etc.; the detection and killing information may include the virus detection and killing time, detection and killing results, and / or security disposal plan in the mobile storage device; the disk information may include disk serial number, partition table information, directory index cluster, available and used capacity, last access time and / or modification time, etc.; the signature information related to the previous antivirus operation is the digital signature of the last antivirus operation on the mobile storage device (which may be referred to as the third digital signature). The generated first digital signature may include the above sub-information, so that when comparing the first digital signature and the second digital signature, a specific comparison may be performed based on the above sub-information.

[0082] In one embodiment of the present application, the method further includes:

[0083] Determining identification information of the mobile storage device;

[0084] determining an encryption algorithm for encrypting the first digital signature;

[0085] The identification information and relevant information of the encryption algorithm are added to the generated first digital signature.

[0086] Specifically, the identification information may be an ID number of a mobile storage device. The mobile storage device may send the ID number to the electronic device according to an instruction of the first electronic device, and the first electronic device may also actively read the ID number from the memory.

[0087] When the first electronic device sends the first digital signature to the server, it may encrypt the first digital signature using an encryption algorithm, such as using a public key of the encryption algorithm to encrypt the first digital signature.

[0088] After determining the identification information and the encryption algorithm, the first electronic device can add the identification information and the related information of the encryption algorithm to the first digital signature. After adding, the first digital signature can be sent to the server, so that the server can determine the identity of the first electronic device based on the first digital signature, and then determine multiple sub-information related to the antivirus operation of the first electronic device.

[0089] In addition, before sending the first digital signature to the server, other information may be added to the first digital signature, such as the digital signature, generation / upload time, etc. The digital signature corresponds to the ID number of the mobile storage device, thereby ensuring the correctness of the ID number of the mobile storage device. The generation / upload time can verify the correctness of the time when the first digital signature is sent to the server. In addition, in the process of encrypting the first digital signature using the public key of the encryption algorithm, the public key of the encryption algorithm can also verify the data integrity of the first digital signature, thereby ensuring that the first digital signature sent to the server is safe and reliable.

[0090] In one embodiment of the present application, based on the second digital signature associated with the first digital signature in the server and the first digital signature in the mobile storage device, the data status of the mobile storage device is verified, such as Figure 3 As shown, including:

[0091] S210, obtaining a second digital signature stored in the server from the server;

[0092] S220, comparing the second digital signature with the first digital signature stored in the mobile storage device, including comparing the sub-information in the second digital signature with the corresponding sub-information in the first digital signature,

[0093] S230: Based on the comparison result, determine whether the data status of the mobile storage device changes.

[0094] Specifically, the first electronic device can obtain the second digital signature stored in it from the server through the network, and the second digital signature is associated with the first digital signature. The first electronic device can compare the first digital signature with the second digital signature, including comparing the sub-information therein, and the sub-information includes at least one of the following: anti-virus software information, anti-virus information, disk information of the mobile storage device, and signature information related to the previous anti-virus operation. Therefore, when performing the comparison operation, the above-mentioned sub-information in the first digital signature can be compared with the above-mentioned sub-information in the corresponding second digital signature in turn.

[0095] If the sub-information in the first digital signature is the same as the sub-information in the second digital signature, or part of the important sub-information is the same, this will indicate that the data state of the mobile storage device has not changed after the antivirus operation, so the antivirus operation can be stopped to save the antivirus time. Of course, if after the comparison operation, the sub-information in the first digital signature is not the same as the sub-information in the second digital signature, or part of the important sub-information is not the same, it can be determined that the data state of the mobile storage device has changed, and it is necessary to perform an antivirus operation again to ensure the safety of the system environment. For example, if the main sub-information in the first digital signature is different from the main sub-information in the corresponding second digital signature, such as the disk information in the first digital signature is different from the disk information in the corresponding second digital signature, it indicates that after the mobile storage device has undergone an antivirus operation and generated the first digital signature, the original first digital signature has also changed (the disk information has changed) due to the change in the data in the disk. Since the second digital signature is stored on the server, it is generated based on the original content of the first digital signature. When the disk information in the second digital signature is compared with the disk information in the changed first digital signature, it can be determined that the two disk information contents are different. Thereby verifying that the data status of the mobile storage device has changed.

[0096] In one embodiment of the present application, the sub-information in the first digital signature includes disk information of the mobile storage device, and the disk information includes at least one of the following: disk serial number, partition table information, directory index cluster, capacity information, access information and modification time;

[0097] Accordingly, determining whether the data state of the mobile storage device has changed based on the comparison result includes:

[0098] At least based on the comparison result corresponding to the disk information, it is determined whether the disk information of the mobile storage device has changed.

[0099] Specifically, the disk information is an important sub-information in the first digital signature, which can fully reflect whether the data in the mobile storage device has changed after the antivirus operation has been performed. For example, when the mobile storage device is first connected to the first electronic device, the disk serial number, partition table information, directory index cluster, capacity information, access information and modification time are determined, and the corresponding first digital signature is stored in the mobile storage device, and the corresponding second digital signature is also stored in the server. If the data of the mobile storage device changes during the subsequent use, its disk information will change, and this process may cause a poisoning reaction. The first electronic device can start the antivirus operation on the mobile storage device according to the result of the change in the disk information. Of course, if the disk information has not changed, it indicates that the data in the mobile storage device has not changed during use, such as no new data writing and modification operations. Therefore, the mobile storage device can no longer be disinfected.

[0100] In one embodiment of the present application, the method further includes:

[0101] Encrypting the first digital signature using the public key of the encryption algorithm;

[0102] The encrypted first digital signature is sent to the server, so that the server verifies the data integrity of the first digital signature using the private key of the encryption algorithm.

[0103] Specifically, the first electronic device may verify the integrity of the first digital signature when sending the first digital signature to the server, and the server may also verify the integrity of the first digital signature when receiving the first digital signature.

[0104] When sending the first digital signature, the first electronic device can encrypt the first digital signature using the public key of the encryption algorithm that is compatible with the first digital signature, thereby ensuring security during transmission. After receiving the encrypted first digital signature, the server can verify the data integrity of the first digital signature using the private key of the encryption algorithm, thereby ensuring the accuracy of the received first digital signature.

[0105] The embodiment of the present application further provides an electronic device, which corresponds to the first electronic device mentioned above. Figure 6 As shown, including:

[0106] A determination module is configured to determine whether a mobile storage device has a first digital signature when the mobile storage device is connected to an electronic device, wherein the first digital signature indicates that the corresponding mobile storage device has undergone a virus disinfection operation, and the first digital signature is generated based on relevant information of the virus disinfection operation.

[0107] Specifically, a mobile storage device can be a device with a storage device, such as a mobile phone, a tablet, a mobile hard disk, a USB flash drive, etc., which can be electrically connected to an electronic device such as a computer. For the security of data, an electronic device can determine whether the mobile storage device is a secure device when it detects that a mobile storage device is connected to it.

[0108] When the mobile storage device is connected to the electronic device, the determination module determines whether the mobile storage device has a first digital signature. The first digital signature includes relevant information of the antivirus operation on the mobile storage device, such as information related to the memory generated after the antivirus operation on the memory of the mobile storage device, and specific information of the antivirus operation itself, such as antivirus report, antivirus software information, etc.

[0109] If the mobile storage device has the first digital signature, it indicates that the mobile storage device has been disinfected, thereby generating the first digital signature. If the mobile storage device does not have the first digital signature, it indicates that the mobile storage device has not been disinfected, and may be electrically connected to the electronic device for the first time.

[0110] A processing module is configured to, if there is a first digital signature in the mobile storage device, verify the data status of the mobile storage device based on a second digital signature associated with the first digital signature obtained in the server and the first digital signature in the mobile storage device; if the verification operation passes, no antivirus operation is performed on the mobile storage device, wherein the second digital signature is formed based on the original content of the first digital signature.

[0111] Specifically, the second digital signature is stored in a server, such as a server in the cloud, and the second digital signature is associated with the first digital signature, including that the specific content of the second digital signature is the same as the specific content of the first digital signature, or the main content of the second digital signature is consistent with the main content of the first digital signature.

[0112] The processing module can obtain the second digital signature from the server through the network, and then obtain the first digital signature from the electrically connected mobile storage device to perform a verification operation on the data status of the mobile storage device.

[0113] The verification operation may be a verification of whether the mobile storage device has been disinfected again. The verification operation can verify whether the data in the mobile storage device has changed, whether the mobile storage device has been disinfected, and if it has been disinfected, whether the data in the mobile storage device has changed after the disinfection operation. The above-mentioned various complex situations of the mobile storage device can all be determined through the verification operation.

[0114] The specific implementation process of the verification operation can be that the processing module compares the first digital signature and the second digital signature obtained, and if they meet the preset requirements, it can be determined that the verification operation is passed, otherwise it is determined that the verification is not passed. For example, if the content of the first digital signature is the same as the second digital signature, it meets the preset requirements.

[0115] If the verification operation passes, it means that the electronic device determines that the electrically connected mobile storage device is safe and will not cause damage to itself or other devices, so it is not necessary to perform a virus disinfection operation on it. While ensuring data security, it also saves a lot of virus disinfection time. Of course, if the verification operation fails, it is necessary to perform a virus disinfection operation on the mobile storage device to ensure the security of the data and the entire environment.

[0116] The specific verification operation may be the above-mentioned comparison operation, and the preset requirement for whether the verification is passed may be configured according to actual needs, for example, if the content of the first digital signature and the second digital signature is the same, or if part of the content in the first digital signature is the same as the corresponding part of the content in the second digital signature, the verification operation is passed. This may indicate that the mobile storage device has been disinfected after the last connection, and the data in the mobile storage device has not changed after the disinfection operation.

[0117] Furthermore, if the verification operation is passed, the electronic device may not perform virus disinfection on the mobile storage device, thereby saving time for virus disinfection while ensuring safety. This allows users to determine whether to perform virus disinfection on the mobile storage device based on its actual safety, making it easier for users to operate the mobile storage device and avoiding the phenomenon of affecting the plug-and-play experience of users on mobile storage devices such as mobile phones and mobile hard disks.

[0118] Of course, when the mobile storage device is electrically connected to the electronic device, the verification operation may fail. For example, the mobile storage device has not been disinfected, and / or the data in the mobile storage device has changed after the disinfection operation, and the disinfection operation needs to be performed again to ensure safety.

[0119] In one embodiment of the present application, the processing module is further configured to:

[0120] When it is determined that the mobile storage device does not have the first digital signature, performing a virus disinfection operation on the mobile storage device;

[0121] generating the first digital signature;

[0122] The first digital signature is stored in the mobile storage device and stored in the server to form the second digital signature.

[0123] In one embodiment of the present application, the processing module is further configured to:

[0124] The first digital signature is generated based on multiple sub-information related to the antivirus operation, wherein the sub-information includes at least one of the following: antivirus software information, detection information, disk information of the mobile storage device, and signature information related to the previous antivirus operation.

[0125] In one embodiment of the present application, the processing module is further configured to:

[0126] Determining identification information of the mobile storage device;

[0127] determining an encryption algorithm for encrypting the first digital signature;

[0128] The identification information and relevant information of the encryption algorithm are added to the generated first digital signature.

[0129] In one embodiment of the present application, the processing module is further configured to:

[0130] Obtaining from the server a second digital signature stored therein;

[0131] Comparing the second digital signature with the first digital signature stored in the mobile storage device, including comparing the sub-information in the second digital signature with the corresponding sub-information in the first digital signature,

[0132] Based on the comparison result, it is determined whether the data state of the mobile storage device has changed.

[0133] In one embodiment of the present application, the sub-information in the first digital signature includes disk information of the mobile storage device, and the disk information includes at least one of the following: disk serial number, partition table information, directory index cluster, capacity information, access information and modification time;

[0134] Accordingly, the processing module is further configured as follows:

[0135] At least based on the comparison result corresponding to the disk information, it is determined whether the disk information of the mobile storage device has changed.

[0136] In one embodiment of the present application, an encryption module is also included, and the encryption module is configured as follows:

[0137] Encrypting the first digital signature using the public key of the encryption algorithm;

[0138] The encrypted first digital signature is sent to the server, so that the server verifies the data integrity of the first digital signature using the private key of the encryption algorithm.

[0139] The present application also provides a computer virus antivirus system. Figure 6 As shown, it includes a first electronic device and a server connected to each other as described above, wherein a first program is installed in the first electronic device, and the first program may be an anti-virus software program, such as an anti-virus software with an alliance nature. The first electronic device can use the anti-virus program to perform anti-virus operations on a mobile storage device connected thereto, and the first digital signature is generated based on relevant information of the anti-virus operation.

[0140] The first electronic device is used to determine whether the mobile storage device has a first digital signature through the first program when a mobile storage device is connected to the first electronic device, wherein the presence of the first digital signature indicates that the corresponding mobile storage device has been disinfected.

[0141] If the mobile storage device has a first digital signature, the first electronic device sends an acquisition instruction to the server, and the server sends a stored second digital signature to the first electronic device, wherein the second digital signature is associated with the first digital signature and is formed based on the original content of the first digital signature.

[0142] The first electronic device is further used to verify the data status of the mobile storage device based on the second digital signature and the first digital signature obtained through the first program; if the verification operation passes, the mobile storage device is not disinfected.

[0143] In one embodiment of the present application, the virus detection and killing system also includes a second electronic device different from the first electronic device, the second electronic device is connected to the server, and the second electronic device is installed with the first program. Specifically, the second electronic device is different from the first electronic device, and the same first program, such as an antivirus program, is also installed therein. Similarly, when the mobile storage device is connected to the second electronic device, the second electronic device can also perform similar actions as the first electronic device, including determining whether the storage device has the first digital signature through the first program, and if the mobile storage device has the first digital signature, the second electronic device sends an acquisition instruction to the server, and the server sends the stored second digital signature to the second electronic device. The second electronic device is further used to verify the data status of the mobile storage device based on the acquired second digital signature and the first digital signature through the first program; if the verification operation passes, it is allowed not to perform antivirus operations on the mobile storage device.

[0144] The above embodiments are only exemplary embodiments of the present application and are not intended to limit the present application. The protection scope of the present application is defined by the claims. Those skilled in the art may make various modifications or equivalent substitutions to the present application within the essence and protection scope of the present application, and such modifications or equivalent substitutions shall also be deemed to fall within the protection scope of the present application.

Claims

1. A computer virus disinfection method, comprising: When a mobile storage device is connected to a first electronic device, determining whether the mobile storage device has a first digital signature, wherein the first digital signature indicates that the corresponding mobile storage device has been subjected to a virus disinfection operation, and the first digital signature is generated based on relevant information of the virus disinfection operation; If yes, then based on the acquired second digital signature associated with the first digital signature in the server and the first digital signature in the mobile storage device, verify the data status of the mobile storage device, wherein the second digital signature is formed based on the original content of the first digital signature; If the verification operation is passed, no virus disinfection operation is performed on the mobile storage device.

2. The method according to claim 1, further comprising: When it is determined that the mobile storage device does not have the first digital signature, performing a virus disinfection operation on the mobile storage device; generating the first digital signature; The first digital signature is stored in the mobile storage device and stored in the server to form the second digital signature.

3. The method according to claim 2, wherein generating the first digital signature comprises: The first digital signature is generated based on multiple sub-information related to the antivirus operation, wherein the sub-information includes at least one of the following: antivirus software information, detection information, disk information of the mobile storage device, and signature information related to the previous antivirus operation.

4. The method according to claim 2, further comprising: Determining identification information of the mobile storage device; determining an encryption algorithm for encrypting the first digital signature; The identification information and relevant information of the encryption algorithm are added to the generated first digital signature.

5. The method according to claim 1, wherein the verification operation on the data status of the mobile storage device based on the second digital signature associated with the first digital signature in the server and the first digital signature in the mobile storage device comprises: Obtaining from the server a second digital signature stored therein; Comparing the second digital signature with the first digital signature stored in the mobile storage device, including comparing the sub-information in the second digital signature with the corresponding sub-information in the first digital signature, Based on the comparison result, it is determined whether the data state of the mobile storage device has changed.

6. The method according to claim 5, wherein the sub-information in the first digital signature includes disk information of the mobile storage device, and the disk information includes at least one of the following: Disk serial number, partition table information, directory index cluster, capacity information, access information and modification time; Accordingly, determining whether the data state of the mobile storage device has changed based on the comparison result includes: At least based on the comparison result corresponding to the disk information, it is determined whether the disk information of the mobile storage device has changed.

7. The method according to claim 4, further comprising: Encrypting the first digital signature using the public key of the encryption algorithm; The encrypted first digital signature is sent to the server, so that the server verifies the data integrity of the first digital signature using the private key of the encryption algorithm.

8. An electronic device comprising: a determination module configured to determine, when the mobile storage device is connected to the electronic device, whether the mobile storage device has a first digital signature, wherein the presence of the first digital signature indicates that the corresponding mobile storage device has undergone a virus disinfection operation, and the first digital signature is generated based on relevant information of the virus disinfection operation; A processing module is configured to, if there is a first digital signature in the mobile storage device, verify the data status of the mobile storage device based on a second digital signature associated with the first digital signature obtained in the server and the first digital signature in the mobile storage device; if the verification operation passes, it is allowed not to perform antivirus operation on the mobile storage device, wherein the second digital signature is formed based on the original content of the first digital signature.

9. A computer virus killing system, comprising a first electronic device and a server connected to each other, wherein: A first program is installed in the first electronic device; The first electronic device is used to determine, through the first program, whether the mobile storage device has a first digital signature when the mobile storage device is connected to the first electronic device, wherein the presence of the first digital signature indicates that the corresponding mobile storage device has undergone a virus disinfection operation, and the first digital signature is generated based on relevant information of the virus disinfection operation; If the mobile storage device has a first digital signature, the first electronic device sends an acquisition instruction to the server, and the server sends a stored second digital signature to the first electronic device, wherein the second digital signature is associated with the first digital signature and is formed based on the original content of the first digital signature; The first electronic device is further used to verify the data status of the mobile storage device based on the second digital signature and the first digital signature obtained through the first program; if the verification operation passes, the mobile storage device is not disinfected.

10. The virus detection and killing system according to claim 9, further comprising a second electronic device different from the first electronic device, the second electronic device being connected to the server, and the first program being installed on the second electronic device.

Images