Method, device, computer equipment, and storage medium for testing TCG Storage protocol data reading

Abstract

The present invention relates to a method, device, computer device, and storage medium for testing TCGStorage protocol data reading. The method comprises: invoking anyone's authority to establish a session, then reading the default credentials of the hard disk device owner's authority; establishing a session with the hard disk device owner's authority; setting the credentials of the hard disk device owner's authority; saving customized encryption information to a data storage table to obtain saved information; locking the hard disk and then restarting the hard disk; invoking anyone's authority to establish a session, then reading the saved information to obtain read information; determining whether the read information is consistent with the saved information; if so, prompting for a password to be entered to obtain the entered password; establishing a session with the hard disk device owner's authority; if the session is successfully established, i.e., the entered password is verified, the hard disk is unlocked. The present invention is simple to test, does not require the installation of an operating system, and is fully automatic, thereby improving test efficiency.

Description

Technical Field

[0001] The present invention relates to the field of solid-state drive storage technology, and in particular to a method, device, computer equipment, and storage medium for testing TCG Storage protocol data reading. Background Art

[0002] As users' awareness of information security protection increases, their requirements for information security protection are also getting higher and higher. Most computer platforms on the market support encryption functions, one of which is implemented based on the TCG Storage (Trusted Computing Group Storage) protocol.

[0003] The current common testing method is: 1. Install the operating system; 2. Reboot, enter the BIOS, and set the hard drive password; 3. Reboot the system; 4. When prompted to enter the password for verification; 5. Enter the password; 6. After verification, boot the operating system. This method requires purchasing a platform that supports TCG Storage protocol encryption, increasing testing costs. Furthermore, because this method requires installing the operating system and requires manual steps, testing takes a long time and is inefficient. Summary of the Invention

[0004] The purpose of the present invention is to overcome the deficiencies of the prior art and provide a method, apparatus, computer equipment, and storage medium for testing TCG Storage protocol data reading.

[0005] In order to solve the above technical problems, the present invention adopts the following technical solutions:

[0006] The method for testing TCG Storage protocol data reading includes the following steps:

[0007] Call anyone to establish a session, and then read the default credentials of the hard disk device owner's permission;

[0008] Establish a session with hard disk device owner permissions based on the default credentials of hard disk device owner permissions;

[0009] Set the hard disk device owner permission credentials based on the hard disk device owner permission session;

[0010] Store the hard disk device owner's permission credentials to the hard disk, and then save the customized encryption information to the data storage table to obtain the saved information;

[0011] Lock the hard disk and then restart the hard disk;

[0012] Call anyone's permission to establish a session, and then read the saved information to obtain the read information;

[0013] Determine whether the read information is consistent with the saved information;

[0014] If so, the system prompts for a password to obtain the entered password;

[0015] A session with the hard disk device owner's authority is established based on the password entered;

[0016] If the session is established successfully, that is, the entered password is verified, the hard drive is unlocked.

[0017] A further technical solution is: the default credentials refer to the credentials used to establish a session using the hard disk device owner's authority before a password is set.

[0018] Its further technical solution is: in the step of establishing a session with hard disk device owner authority based on the default credentials of the hard disk device owner authority, when no password is set, the default credentials of the hard disk device owner authority are used to establish a session with hard disk device owner authority; when the password is set, the set password is used to establish a session with hard disk device owner authority.

[0019] A further technical solution is: in the step of setting the credentials of the hard disk device owner's authority according to the session of the hard disk device owner's authority, the credentials of the hard disk device owner's authority are a set password.

[0020] A device for testing TCG Storage protocol data reading includes: a first calling and reading unit, a first establishing unit, a setting unit, a saving unit, a locking and restarting unit, a second calling and reading unit, a judgment unit, a prompt obtaining unit, a second establishing unit, and a verification and unlocking unit;

[0021] The first calling and reading unit is used to call anyone's authority to establish a session, and then read the default credentials of the hard disk device owner's authority;

[0022] The first establishing unit is configured to establish a session with the hard disk device owner authority according to the default credentials of the hard disk device owner authority;

[0023] The setting unit is used to set the hard disk device owner authority credentials according to the hard disk device owner authority session;

[0024] The storage unit is used to store the credentials of the hard disk device owner's authority in the hard disk, and then save the customized encryption information in the data storage table to obtain the saved information;

[0025] The locking and restarting unit is used to lock the hard disk and then restart the hard disk;

[0026] The second calling and reading unit is used to call anyone with authority to establish a session, and then read the saved information to obtain the read information;

[0027] The judging unit is configured to judge whether the read information is consistent with the stored information;

[0028] The prompt obtaining unit is used to establish a session with hard disk device owner authority according to the input password;

[0029] The second establishing unit is configured to establish a session with the hard disk device owner authority according to the input password;

[0030] The verification and unlocking unit is used to unlock the hard disk if the session is successfully established, that is, the input password is verified.

[0031] A further technical solution is: the default credentials refer to the credentials used to establish a session using the hard disk device owner's authority before a password is set.

[0032] Its further technical solution is: in the first establishment unit, when the password is not set, the default credentials of the hard disk device owner's authority are used to establish a session with the hard disk device owner's authority; when the password is set, the set password is used to establish a session with the hard disk device owner's authority.

[0033] A further technical solution is: in the setting unit, the credential of the hard disk device owner's authority is a setting password.

[0034] A computer device includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, it implements the method for testing TCG Storage protocol reading data as described above.

[0035] A storage medium stores a computer program, wherein the computer program includes program instructions, and when the program instructions are executed by a processor, the method for testing TCG Storage protocol reading data as described above can be implemented.

[0036] Compared with the prior art, the present invention has the following advantages: the TCG Storage protocol is verified through test scripts to correctly read data storage table data using anyone's permissions. The test process is simple, no operating system installation is required, and the test is fully automatic, which improves test efficiency and saves test costs.

[0037] The present invention will be further described below with reference to the accompanying drawings and specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0039] Figure 1 A flowchart of a method for testing TCG Storage protocol data reading provided by an embodiment of the present invention;

[0040] Figure 2 A schematic block diagram of an apparatus for testing TCG Storage protocol data reading provided by an embodiment of the present invention;

[0041] Figure 3 A schematic block diagram of a computer device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0042] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0043] It will be understood that when used in this specification and the appended claims, the terms “comprises” and “comprising” indicate the presence of described features, integers, steps, operations, elements and / or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof.

[0044] It should also be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the present invention. As used in the specification and appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms unless the context clearly indicates otherwise.

[0045] It should be further understood that the term "and / or" used in the present description and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.

[0046] The TCG Storage protocol defines multiple permissions. To perform TCG Storage protocol operations, such as reading or setting information in tables related to the TCG Storage protocol, you need to establish a session with certain permissions. These permissions must be specified when establishing a session. The following describes two of these permissions:

[0047] Anybody permission: This permission does not require a password or credentials to establish a session. This means that anyone can use this permission to establish a session because no password or credentials are required. However, for data security reasons, this permission generally only allows read operations and does not allow modification of settings.

[0048] SID permission: This permission represents the owner of the hard drive device and allows operations such as setting passwords, decryption, and unlocking. After setting a password for the hard drive in the BIOS of a computer that supports TCG Storage protocol encryption, the TCGStorage program running in the BIOS will record encryption-related information in the data storage table according to the BIOS's customized method, but the password will not be included. This is so that after booting the computer, the BIOS can read the information recorded in the data storage table through the TCG Storage program to identify whether the hard drive is encrypted. If it is encrypted, it will prompt you to enter the password to complete the subsequent decryption and authentication process. Since a session must be established to complete the decryption authentication operation, the permissions to be used must be specified when establishing a session. The TCG Storage protocol defines multiple permissions. Some permissions require a password or credentials to establish a session, such as the "hard disk device owner" permission (SID) defined in the protocol. Some permissions do not require a password or credentials to establish a session, for example: the Anybody permission defined in the protocol (which can be understood as: since no password or credentials are required, anyone can use this permission) allows different operations. Since the Anybody permission does not require a password or credentials, anyone can use it. For the sake of data security, this permission generally only has read operations and does not have operations to modify settings.

[0049] Among them, the boot process of a computer that uses the TCG Storage protocol to implement encryption is as follows: if the hard disk password is unknown or not set, first use the Anybody permission to establish a session, because the Anybody permission does not require credentials. By establishing a session with the Anybody permission, you can read the data in the data storage table, thereby obtaining information related to encryption (such as whether it is encrypted). If encryption is recognized, the user is prompted to enter the password to complete the verification. The program will use the entered password as a credential to use a higher permission (such as SID permission, which represents the owner of the hard disk device. The protocol defines that this permission can perform password setting, decryption and unlocking operations) to establish a session to complete the verification, and then unlock the hard disk; if the hard disk encryption is not recognized, there is no need to prompt for a password and the verification is skipped.

[0050] As shown in the boot process described above, if the hard drive has been encrypted, and the host BIOS uses the Anybody permission to establish a session during boot, if the saved information in the data storage table is lost or incorrectly read, the host BIOS will not be able to recognize that the hard drive is encrypted, resulting in data loading failure and inability to enter the operating system normally. In order to ensure that the hard drive is compatible with computers encrypted using the TCG Storage protocol and not affect user experience, it is necessary to verify that the Anybody permission can correctly read the data in the data storage table.

[0051] See also Figures 1 to 3 The specific embodiment shown, wherein see Figure 1 As shown, the present invention discloses a method for testing TCG Storage protocol reading data, comprising the following steps:

[0052] S1, calls anyone's permission to establish a session, and then reads the default credentials of the hard disk device owner's permission;

[0053] Among them, the Anybody permission is generally a read-only operation, and the TCGStorage configuration table cannot be set or modified. However, if the password is unknown or not set, it can be used to establish a session and then read the default credentials of the hard disk device owner's permission.

[0054] S2, establishing a session with the hard disk device owner authority according to the default credentials of the hard disk device owner authority;

[0055] The default credentials refer to the credentials used to establish a session using the hard disk device owner's authority before a password is set.

[0056] Among them, in step S2, when the password is not set, the default credentials of the hard disk device owner permissions are used to establish a session with the hard disk device owner permissions; when the password is set, the default credentials can no longer be used to establish a session with the hard disk device owner permissions, and only the set password can be used to establish a session with the hard disk device owner permissions.

[0057] S3, setting the hard disk device owner permission credentials according to the hard disk device owner permission session;

[0058] In step S3, the credential for the hard disk device owner permission is the setup password. In practice, step S3 involves the BIOS using the user's setup password as the credential for the hard disk device owner permission. For example, if the setup password is "TCGPWD," the credential for the hard disk device owner permission is "TCGPWD."

[0059] S4, storing the credentials of the hard disk device owner's authority in the hard disk, and then saving the customized encryption information in the data storage table to obtain the saved information;

[0060] The encryption-related information is stored in the data storage table according to the BIOS customization method. For example, the customized encryption information is "Locked".

[0061] S5, lock the hard disk and then restart the hard disk;

[0062] Among them, the TCG Storage configuration table in the hard disk is modified, and the firmware in the hard disk locks the hard disk. After locking, the operating system cannot be started.

[0063] S6, call anyone's permission to establish a session, and then read the saved information to obtain the read information;

[0064] The BIOS parses the saved information in a customized manner to obtain the read information.

[0065] S7, judging whether the read information is consistent with the saved information; if not, the verification fails.

[0066] Among them, if the custom encryption information written in step S4 is "Locked", then the content read in step S6 is also "Locked". As long as the read content information is consistent, the BIOS will parse the meaning of the content information as "Locked" according to its custom method, and can recognize that the hard disk has been encrypted.

[0067] If the read content information is inconsistent, for example, the read content information is not "Locked", then it will not be recognized that the hard disk has been encrypted, and the test result is verification failure.

[0068] S8, if yes, prompting for password input to obtain the input password;

[0069] In this embodiment, the password entered is the same as the above-mentioned set password, namely "TCGPWD".

[0070] S9, establishing a session with the hard disk device owner's authority according to the entered password;

[0071] S10: If the session is successfully established, that is, the entered password is verified, the hard disk is unlocked.

[0072] In this embodiment, the hardware requirements adopted are:

[0073] Computer to be tested: Desktop computer with ASUS Z590 motherboard; Note: For the computer to be tested, the present invention requires the use of a desktop computer, and the specific model is not mandatory. A desktop computer with ASUS Z590 motherboard is preferably used as the computer to be tested; SSD to be tested: SSD that supports PCIe and NVMe protocols;

[0074] Software requirements:

[0075] Operating system: Windows 10; Test software: Ulink DriveMaster 8NVMe; Test script: Customized DriveMaster test script.

[0076] The present invention uses a test script to verify that the TCG Storage protocol uses any user's permissions to correctly read the data storage table data. The test process is simple, no operating system installation is required, and the test is fully automatic, which improves test efficiency and saves test costs.

[0077] See also Figure 2 As shown, the present invention also discloses a device for testing TCG Storage protocol data reading, comprising: a first call reading unit 10, a first establishment unit 20, a setting unit 30, a storage unit 40, a locking and restarting unit 50, a second call reading unit 60, a judgment unit 70, a prompt obtaining unit 80, a second establishment unit 90, and a verification and unlocking unit 100;

[0078] The first calling and reading unit 10 is used to call anyone's authority to establish a session, and then read the default credentials of the hard disk device owner's authority;

[0079] The first establishing unit 20 is configured to establish a session with the hard disk device owner's authority based on the default credentials of the hard disk device owner's authority;

[0080] The setting unit 30 is used to set the hard disk device owner authority credentials according to the hard disk device owner authority session;

[0081] The storage unit 40 is used to store the credentials of the hard disk device owner's authority in the hard disk, and then save the customized encryption information in the data storage table to obtain the saved information;

[0082] The locking and restarting unit 50 is used to lock the hard disk and then restart the hard disk;

[0083] The second calling and reading unit 60 is used to call anyone's authority to establish a session, and then read the saved information to obtain the read information;

[0084] The judging unit 70 is used to judge whether the read information is consistent with the stored information;

[0085] The prompt obtaining unit 80 is used to establish a session with hard disk device owner authority according to the input password;

[0086] The second establishing unit 90 is configured to establish a session with the hard disk device owner's authority according to the input password;

[0087] The verification and unlocking unit 100 is used to unlock the hard disk if the session is successfully established, that is, the input password is verified.

[0088] The default credentials refer to the credentials used to establish a session using the hard disk device owner's authority before a password is set.

[0089] Among them, in the first establishing unit 20, when no password is set, the default credentials of the hard disk device owner authority are used to establish a session with the hard disk device owner authority; when the password is set, the set password is used to establish a session with the hard disk device owner authority.

[0090] Wherein, in the setting unit 30, the credential of the hard disk device owner authority is a setting password.

[0091] It should be noted that technicians in the relevant field can clearly understand that the specific implementation process of the above-mentioned device and each unit for testing TCG Storage protocol reading data can refer to the corresponding description in the aforementioned method embodiment. For the convenience and brevity of description, it will not be repeated here.

[0092] The above-mentioned device for testing TCG Storage protocol to read data can be implemented in the form of a computer program. The computer program can be used in the following ways: Figure 3 Runs on the computer equipment shown.

[0093] See also Figure 3 , Figure 3This is a schematic block diagram of a computer device provided in an embodiment of the present application. The computer device 500 can be a terminal or a server. The terminal can be a smart phone, tablet computer, laptop computer, desktop computer, personal digital assistant, wearable device, or other electronic device with communication capabilities. The server can be a standalone server or a server cluster consisting of multiple servers.

[0094] See Figure 3 The computer device 500 includes a processor 502 , a memory, and a network interface 505 connected via a system bus 501 , wherein the memory may include a non-volatile storage medium 503 and an internal memory 504 .

[0095] The non-volatile storage medium 503 can store an operating system 5031 and a computer program 5032. The computer program 5032 includes program instructions, which, when executed, can cause the processor 502 to execute a method for testing TCG Storage protocol data reading.

[0096] The processor 502 is used to provide computing and control capabilities to support the operation of the entire computer device 500.

[0097] The internal memory 504 provides an environment for the operation of the computer program 5032 in the non-volatile storage medium 503. When the computer program 5032 is executed by the processor 502, the processor 502 can execute a method for testing TCG Storage protocol data reading.

[0098] The network interface 505 is used to communicate with other devices through the network. Figure 3 The structure shown in the figure is merely a block diagram of a portion of the structure related to the solution of the present application, and does not constitute a limitation on the computer device 500 to which the solution of the present application is applied. The specific computer device 500 may include more or fewer components than shown in the figure, or combine certain components, or have a different component arrangement.

[0099] It should be understood that in the embodiment of the present application, the processor 502 may be a central processing unit (CPU), and the processor 502 may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc.

[0100] Those skilled in the art will appreciate that all or part of the steps in the method of the above-described embodiment can be implemented by instructing the relevant hardware through a computer program. The computer program includes program instructions, which can be stored in a storage medium that is computer-readable. The program instructions are executed by at least one processor in the computer system to implement the steps in the method of the above-described embodiment.

[0101] Therefore, the present invention also provides a storage medium. The storage medium may be a computer-readable storage medium. The storage medium stores a computer program, wherein the computer program includes program instructions, and when the program instructions are executed by a processor, the method for testing TCG Storage protocol reading data described above can be implemented.

[0102] The storage medium may be any computer-readable storage medium that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a magnetic disk, or an optical disk.

[0103] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the composition and steps of each example according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0104] In the several embodiments provided herein, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the various units is merely a logical functional division, and actual implementation may employ other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be omitted or not implemented.

[0105] The steps in the methods of the embodiments of the present invention may be adjusted in order, combined, or deleted as needed. The units in the devices of the embodiments of the present invention may be combined, divided, or deleted as needed. Furthermore, the functional units in the various embodiments of the present invention may be integrated into a single processing unit, each unit may exist physically separately, or two or more units may be integrated into a single unit.

[0106] If this integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the existing technology, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes a number of instructions for causing a computer device (which can be a personal computer, terminal, or network device, etc.) to execute all or part of the steps of the method described in various embodiments of the present invention.

[0107] The above embodiments are preferred implementation schemes of the present invention. In addition, the present invention can also be implemented in other ways. Any obvious replacement without departing from the concept of the present technical solution is within the scope of protection of the present invention.

Claims

1. Test the method of reading data using the TCG Storage protocol, characterized in that: The following steps are involved: Call anyone to establish a session, and then read the default credentials of the hard disk device owner's permission; Establish a session with hard disk device owner permissions based on the default credentials of hard disk device owner permissions; Set the hard disk device owner permission credentials based on the hard disk device owner permission session; Store the hard disk device owner's permission credentials to the hard disk, and then save the customized encryption information to the data storage table to obtain the saved information; Lock the hard disk and then restart the hard disk; Call anyone's permission to establish a session, and then read the saved information to obtain the read information; Determine whether the read information is consistent with the saved information; If so, the system prompts for a password to obtain the entered password; A session with the hard disk device owner's authority is established based on the password entered; If the session is established successfully, that is, the entered password is verified, the hard drive is unlocked; In the step of establishing a session with hard disk device owner authority based on the default credentials of the hard disk device owner authority, when no password is set, the default credentials of the hard disk device owner authority are used to establish a session with hard disk device owner authority; when the password is set, the set password is used to establish a session with hard disk device owner authority.

2. The method for testing TCG Storage protocol reading data according to claim 1, characterized in that: The default credentials refer to credentials used to establish a session using the hard disk device owner's privileges before a password is set.

3. The method for testing TCG Storage protocol reading data according to claim 1, characterized in that: In the step of setting the credentials of the hard disk device owner authority according to the session of the hard disk device owner authority, the credentials of the hard disk device owner authority are a set password.

4. A device for testing TCG Storage protocol data reading, comprising: a first call and read unit, a first establishment unit, a setting unit, a storage unit, a locking and restarting unit, a second call and read unit, a judgment unit, a prompt obtaining unit, a second establishment unit, and a verification and unlocking unit; The first calling and reading unit is used to call anyone's authority to establish a session, and then read the default credentials of the hard disk device owner's authority; The first establishing unit is configured to establish a session with the hard disk device owner authority according to the default credentials of the hard disk device owner authority; The setting unit is used to set the hard disk device owner authority credentials according to the hard disk device owner authority session; The storage unit is used to store the credentials of the hard disk device owner's authority in the hard disk, and then save the customized encryption information in the data storage table to obtain the saved information; The locking and restarting unit is used to lock the hard disk and then restart the hard disk; The second calling and reading unit is used to call anyone with authority to establish a session, and then read the saved information to obtain the read information; The judging unit is configured to judge whether the read information is consistent with the stored information; The prompt obtaining unit is used to establish a session with hard disk device owner authority according to the input password; The second establishing unit is configured to establish a session with the hard disk device owner authority according to the input password; The verification and unlocking unit is used to unlock the hard disk if the session is successfully established, that is, the input password is verified; In the first establishing unit, when no password is set, the default credentials of the hard disk device owner authority are used to establish a session with the hard disk device owner authority; when the password is set, the set password is used to establish a session with the hard disk device owner authority.

5. The device for testing TCG Storage protocol data reading according to claim 4, characterized in that: The default credentials refer to credentials used to establish a session using the hard disk device owner's privileges before a password is set.

6. The device for testing TCG Storage protocol data reading according to claim 4, characterized in that: In the setting unit, the credential for the hard disk device owner authority is a setting password.

7. A computer device, characterized in that: The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the method for testing TCG Storage protocol and reading data according to any one of claims 1 to 3 when executing the computer program.

8. A storage medium, characterized in that: The storage medium stores a computer program, which includes program instructions. When the program instructions are executed by a processor, the method for testing TCGStorage protocol and reading data according to any one of claims 1 to 3 can be implemented.

Images