A security enhancement processing method for an embedded security module

Abstract

The present invention relates to the technical field of intelligent devices, and in particular to a security enhancement processing method for an embedded security module, comprising the following steps: Step 1: determining whether there is a transmission medium in the data transmission process, obtaining a data receiving path, and analyzing the security of the data sending source point; Step 2: when the data transmission adopts a medium transmission mode, establishing a data receiving intermediate storage space, and when the device enters a networked state, checking the data received in the intermediate storage space; Step 3: establishing a sensitive word library, comparing the content recorded in the sensitive word library with the content of the received data, and performing a pre-browse of the received data; the present invention provides a more targeted security enhancement processing method for the use of the embedded security module, and the method can distinguish the mode adopted in the data storage process, and respectively has strong transmission security with medium transmission and without medium transmission, has strong traceability for abnormal situations in the medium-free transmission, and has no security enhancement prevention in the prior art compared with the medium transmission.

Description

Technical Field

[0001] The present invention relates to the technical field of intelligent devices, and in particular to a security enhancement processing method for an embedded security module. Background Art

[0002] In the existing computer system architecture, access to any standard device is open, such as floppy disk drives, hard disk drives, PCI devices, and USB devices. The read and write methods and communication protocols of these devices are public, allowing any user to directly access these devices and read information directly from these devices. Due to this open architecture, some malicious attackers may obtain information stored in the computer or destroy this information by directly reading and writing these hardware devices. For example, an attacker can directly operate the hard disk drive through the underlying program to directly read data from the hard disk track sector. In this way, the data of the entire hard disk can be read and analyzed to extract the required information, or the entire hard disk data can be destroyed through a simple low-level formatting program.

[0003] Since this type of attack behavior does not depend on a specific operating system, any protection based on the operating system and its upper-level software cannot prevent this type of attack behavior. It can be seen that the embedded security module still has defects during use, resulting in data leakage during data transmission, or being invaded and carrying viruses to complete the transmission, affecting the security of user data transmission and usage experience. Summary of the invention

[0004] Technical issues solved

[0005] In view of the above-mentioned shortcomings of the prior art, the present invention provides a security enhancement processing method for an embedded security module, which solves the problem that malicious attackers obtain information stored in the computer by directly reading and writing these hardware devices, resulting in data leakage during data transmission, or being invaded and carrying viruses to complete the transmission, thereby affecting the security of user transmitted data and the user experience.

[0006] Technical Solution

[0007] To achieve the above objectives, the present invention is implemented through the following technical solutions:

[0008] In a first aspect, a security enhancement processing method for an embedded security module comprises the following steps:

[0009] Step 1: Determine whether there is a transmission medium in the data transmission process, obtain the data receiving path, and analyze the security of the data sending source;

[0010] Step 2: When data transmission is carried out in a medium transmission mode, a data receiving intermediate storage space is established. When the device enters the networking state, the data received in the intermediate storage space is checked;

[0011] Step 3: Establish a sensitive word library, compare the contents recorded in the sensitive word library with the received data content, and perform a pre-browse of the received data;

[0012] Step 4: When the detection result matches the sensitive word library, the receiving storage space is rejected to receive data. When the detection structure does not match the sensitive word library, the receiving data is released and the data content is obtained using the device;

[0013] Step 5: When data transmission is carried out in a medium-free transmission mode, the network access information of the data transmission source point is verified and checked. After confirmation, the use records within the authority of the transmission point are checked;

[0014] Step 6: Determine whether the data transmission source is safe;

[0015] Step 7: When the data transmission source is judged to be abnormal, the data is rejected, the historical data received by the device is retrieved and compared with the rejected data, and the received data with similar content to the rejected data is re-prompted as a risk item;

[0016] Step 8: When the data transmission source is judged to be safe, the receiving data is released and the data content is obtained using the device.

[0017] Furthermore, in the step Step 2, the data receiving storage space is provided with a receiving data processing priority. After receiving the data, when the device enters the networking state, the data in the storage space is checked one by one according to the priority.

[0018] Furthermore, in the step Step 3, the sensitive word library content is periodically updated by the user, and special sensitive word trigger area divisions are set according to the content of the transmitted data.

[0019] Furthermore, in the step Step 5, the contents of the data transmission source point usage record authority check include: data transmission frequency, transmission data attributes, transmission history performance and the data transmission source point IP direct network.

[0020] Furthermore, in the step Step 7, the user is prompted to confirm the similar suspicious data, and the user chooses to trust or not receive it.

[0021] In a second aspect, a method for enhancing security of an embedded security module usage status includes the following steps:

[0022] S1: Establish a data transmission channel, obtain data packet attributes, and analyze the data packet attributes;

[0023] S2: When the data transmission channel is a medium transmission, the device transmission environment is safe, and the target receiving data starts to be transmitted through the medium;

[0024] S3: When the data transmission channel is a medium transmission, if there are vulnerabilities or viruses in the transmission environment of the device, the vulnerability of the device should be repaired and the virus should be checked and eliminated before transmission;

[0025] S4: Determine the time required for data storage and the receiving and storing method according to the attributes of the transmission data packet;

[0026] S5: Set up a data transmission process security program, encrypt and convert the transmitted data, and transmit the final data ciphertext;

[0027] S6: Perform logical inspection on the received data during transmission through the transmission channel, monitor the real-time rate of the data transmission process, and form a monitoring data report file;

[0028] S7: The user analyzes the monitoring data report file, analyzes the properties of the target transmission data packet, and re-checks the transmission data packet with abnormal characteristics.

[0029] Furthermore, the device environment is safe when using the medium data transmission state in step S2, and the transmission channel vulnerability and virus carrying in the abnormal detection item in step S3 are used as a common basis.

[0030] Furthermore, in step S5, the data transmission process guarantee procedure includes power supply voltage Glitch, voltage, frequency, and temperature monitoring.

[0031] Furthermore, the logical inspection in step S6 is set as the data transmission content sequence in the data transmission path, and the monitoring report file content includes data transmission rate, data transmission usage time, and transmission data size format attributes.

[0032] Furthermore, in the step S7, the first reference for the data anomaly feature is set to the data transmission rate, and the step is triggered and executed according to the monitoring data report file after the data packet transmission and reception process has completed the reception state without any anomaly.

[0033] Beneficial Effects

[0034] Compared with the known public technology, the technical solution provided by the present invention has the following beneficial effects:

[0035] 1. The present invention provides a more targeted security enhancement processing method for the use of embedded security modules. The method can distinguish the methods used in the data storage process, and has strong transmission security for media transmission and non-media transmission respectively. It has strong traceability for abnormal situations in non-media transmission, and has enhanced security prevention compared to media transmission, which is not available in the prior art.

[0036] 2. The present invention can perform security confirmation before data transmission when the embedded security module is running to provide security for data transmission, thereby providing data security for the initial state of the data transmission process, thereby reducing the probability of abnormal situations occurring during the data transmission process. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the drawings required for use in the embodiments or the prior art description are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0038] Figure 1 A schematic diagram of a process flow of a security enhancement processing method for an embedded security module;

[0039] Figure 2 A schematic flow chart of a method for enhancing security in the use status of an embedded security module;

[0040] Figure 3 This is a schematic diagram showing the transmission process rate of target A in the present invention;

[0041] Figure 4 This is a schematic diagram showing the transmission rate of target B in the present invention;

[0042] Figure 5 A schematic diagram showing various formats of files included in the data packets of the example target A and the example target B in the present invention. DETAILED DESCRIPTION

[0043] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings in the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0044] The present invention will be further described below in conjunction with the embodiments.

[0045] Example 1

[0046] A security enhancement processing method for an embedded security module in this embodiment is as follows: Figure 1 As shown, the following steps are included:

[0047] Step 1: Determine whether there is a transmission medium in the data transmission process, obtain the data receiving path, and analyze the security of the data sending source;

[0048] Step 2: When data transmission is carried out in a medium transmission mode, a data receiving intermediate storage space is established. When the device enters the networking state, the data received in the intermediate storage space is checked;

[0049] Step 3: Establish a sensitive word library, compare the contents recorded in the sensitive word library with the received data content, and perform a pre-browse of the received data;

[0050] Step 4: When the detection result matches the sensitive word library, the receiving storage space is rejected to receive data. When the detection structure does not match the sensitive word library, the receiving data is released and the data content is obtained using the device;

[0051] Step 5: When data transmission is carried out in a medium-free transmission mode, the network access information of the data transmission source point is verified and checked. After confirmation, the use records within the authority of the transmission point are checked;

[0052] Step 6: Determine whether the data transmission source is safe;

[0053] Step 7: When the data transmission source is judged to be abnormal, the data is rejected, the historical data received by the device is retrieved and compared with the rejected data, and the received data with similar content to the rejected data is re-prompted as a risk item;

[0054] Step 8: When the data transmission source is judged to be safe, the receiving data is released and the data content is obtained using the device.

[0055] like Figure 1 As shown, in the step Step2, the data receiving storage space is set with a receiving data processing priority. After receiving the data, when the device enters the networking state, the data in the storage space is checked one by one according to the priority.

[0056] Through this setting, the received transmission data can be detected and processed in an orderly manner, and there will be no situation where data cross-processing causes program disorder, thereby further achieving the effect of improving the efficiency of receiving data processing.

[0057] like Figure 1As shown, in the step Step 3, the sensitive word library content is periodically updated by the user, and special sensitive word trigger area divisions are set according to the content of the transmitted data.

[0058] This setting effectively improves the accuracy of the method of the present invention in detecting the transmitted data.

[0059] like Figure 1 As shown, in the step Step 5, the contents to be checked within the data transmission source point usage record authority include: data transmission frequency, transmission data attributes, transmission history performance and the data transmission source point IP direct network.

[0060] This setting provides clear instructions for the data source troubleshooting target in Step 5, and provides a clear basis for the data source troubleshooting work.

[0061] like Figure 1 As shown, in the step Step 7, the user is prompted to confirm the similar suspicious data, and the user chooses to trust or not receive it.

[0062] This setting is provided at the user's specific operation level. The user can confirm it by himself according to the actual situation and personal needs, making the method more user-friendly and in line with the user's usage habits.

[0063] Example 2

[0064] In a specific implementation level, the present invention provides a method for enhancing security of the use status of an embedded security module, comprising the following steps:

[0065] S1: Establish a data transmission channel, obtain data packet attributes, and analyze the data packet attributes;

[0066] S2: When the data transmission channel is a medium transmission, the device transmission environment is safe, and the target receiving data starts to be transmitted through the medium;

[0067] S3: When the data transmission channel is a medium transmission, if there are vulnerabilities or viruses in the transmission environment of the device, the vulnerability of the device should be repaired and the virus should be checked and eliminated before transmission;

[0068] S4: Determine the time required for data storage and the receiving and storing method according to the attributes of the transmission data packet;

[0069] S5: Set up a data transmission process security program, encrypt and convert the transmitted data, and transmit the final data ciphertext;

[0070] S6: Perform logical inspection on the received data during transmission through the transmission channel, monitor the real-time rate of the data transmission process, and form a monitoring data report file;

[0071] S7: The user analyzes the monitoring data report file, analyzes the properties of the target transmission data packet, and re-checks the transmission data packet with abnormal characteristics.

[0072] like Figure 2 As shown, in step S2, the device environment is safe when there is medium data transmission, and the transmission channel vulnerability and virus carrying in the abnormal detection item in step S3 are used as a common basis.

[0073] like Figure 2 As shown, in step S5, the data transmission process guarantee procedure includes power supply voltage Glitch, voltage, frequency, and temperature monitoring.

[0074] This configuration effectively makes up for the deficiencies in the prior art of embedded security modules, making the embedded security modules more capable of coping with abnormal situations during data transmission.

[0075] like Figure 2 As shown, the logical inspection in step S6 is set as the data transmission content sequence in the data transmission path, and the monitoring report file content includes data transmission rate, data transmission usage time, and transmission data size format attributes.

[0076] Through this setting, the content of the report recorded in the report file is clarified, providing users and embedded security modules with a more comprehensive judgment reference.

[0077] like Figure 2 As shown, in step S7, the first reference for the data anomaly feature is set to the data transmission rate, and the step is triggered and executed according to the monitoring data report file after the data packet transmission and receiving process has completed the receiving state without any anomaly.

[0078] The setting of setting the data transmission rate as the first reference object of the data abnormality feature can effectively improve the efficiency of the embedded security module in judging abnormalities of the transmitted data and shorten the inspection time.

[0079] Example 3

[0080] like Figure 3 , 4 and 5, there are Figure 5 It can be seen that there is no Zip format file in the transmission target A, while the transmission target B contains a Zip format file. Abnormal transmission rate occurred in the transmission process of both. Since there is no Zip format file in A and B contains a Zip format file, it can be preliminarily determined that the abnormal rate in B may be caused by the influence of the Zip file. Therefore, the abnormal rate in A can be confirmed as an abnormality.

[0081] In summary, the present invention provides a more targeted security enhancement processing method for the use of embedded security modules. The method can distinguish the data storage process, and has strong transmission security with media transmission and without media transmission. It has strong traceability for abnormal situations in without media transmission, and has security enhancement prevention compared with media transmission, which is not available in the prior art.

[0082] At the same time, the present invention can perform security confirmation before data transmission during the process of the embedded security module running to provide security protection for data transmission, thereby providing data security for the initial state of the data transmission process, thereby reducing the probability of abnormal situations occurring during the data transmission process.

[0083] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements will not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A security enhancement processing method for an embedded security module, characterized in that: The method comprises: Step 1: Determine whether there is a transmission medium in the data transmission process, obtain the data receiving path, and analyze the security of the data sending source; Step 2: When data transmission is carried out in a medium transmission mode, a data receiving intermediate storage space is established. When the device enters the networking state, the data received in the intermediate storage space is checked; Step 3: Establish a sensitive word library, compare the contents recorded in the sensitive word library with the received data content, and perform a pre-browse of the received data; Step 4: When the detection result matches the sensitive word library, the receiving storage space is rejected to receive data. When the detection structure does not match the sensitive word library, the receiving data is released and the data content is obtained using the device; Step 5: When data transmission is carried out in a medium-free transmission mode, the network access information of the data transmission source point is verified and checked. After confirmation, the use records within the authority of the transmission point are checked; Step 6: Determine whether the data transmission source is safe; Step 7: When the data transmission source is judged to be abnormal, the data is rejected, the historical data received by the device is retrieved and compared with the rejected data, and the received data with similar content to the rejected data is re-prompted as a risk item; Step 8: When the data transmission source is judged to be safe, the receiving data is released and the data content is obtained using the device.

2. The method for enhancing security of an embedded security module according to claim 1, characterized in that: In the step Step 2, the data receiving storage space is set with a receiving data processing priority. After receiving the data, when the device enters the networking state, the data in the storage space is checked one by one according to the priority.

3. The method for enhancing security of an embedded security module according to claim 1, characterized in that: In the step Step 3, the user periodically records and updates the sensitive word library content, and sets the special sensitive word trigger area division according to the content of the transmitted data.

4. The method for enhancing security of an embedded security module according to claim 1, characterized in that: The contents of the data transmission source usage record authority check in Step 5 include: data transmission frequency, transmission data attributes, transmission history performance and the data transmission source IP direct network.

5. The method for enhancing security of an embedded security module according to claim 1, characterized in that: In the step 7, the user is prompted to confirm the similar suspicious data, and the user chooses to trust or not to receive it.

6. The method for enhancing security of an embedded security module according to claim 1 is provided with a method for enhancing security of an embedded security module in use, characterized in that: The following steps are involved: S1: Establish a data transmission channel, obtain data packet attributes, and analyze the data packet attributes; S2: When the data transmission channel is a medium transmission, the device transmission environment is safe, and the target receiving data starts to be transmitted through the medium; S3: When the data transmission channel is a medium transmission, if there are vulnerabilities or viruses in the transmission environment of the device, the vulnerability of the device is repaired and the virus is removed before transmission; S4: Determine the time required for data storage and the receiving and storing method according to the attributes of the transmission data packet; S5: Set up a data transmission process security program, encrypt and convert the transmitted data, and transmit the final data ciphertext; S6: Perform logical inspection on the received data during transmission through the transmission channel, monitor the real-time rate of the data transmission process, and form a monitoring data report file; S7: The user analyzes the monitoring data report file, analyzes the properties of the target transmission data packet, and re-checks the transmission data packet with abnormal characteristics.

7. The method for enhancing security of the use status of an embedded security module according to claim 6, characterized in that: In the step S2, the device environment is safe when there is medium data transmission, and the transmission channel vulnerability and virus carrying in the abnormal detection items in step S3 are used as a common basis.

8. The method for enhancing security of the use status of an embedded security module according to claim 6, characterized in that: In step S5, the data transmission process guarantee procedure includes power supply voltage Glitch, voltage, frequency and temperature monitoring.

9. The method for enhancing security of the use status of an embedded security module according to claim 6, characterized in that: The logical inspection in step S6 is set as the data transmission content sequence in the data transmission path, and the monitoring report file content includes data transmission rate, data transmission usage time and transmission data size format attributes.

10. The method for enhancing security of the use status of an embedded security module according to claim 6, characterized in that: In step S7, the first reference for the data anomaly feature is set to the data transmission rate, and the step is triggered and executed according to the monitoring data report file after the data packet transmission and reception process has completed the reception state without any anomaly.

Images