Data protection method, device and electronic equipment

Abstract

The present application provides a data protection method, device and electronic device, the method comprising: identifying a removable storage medium connected to a terminal device, the removable storage medium being divided into at least one block group; loading a partition table of the removable storage medium; encrypting the partition configuration information corresponding to the target block group, obtaining the encrypted partition configuration information corresponding to the target block group; updating the partition configuration information in the target partition subtable corresponding to the target block group in the partition table based on the encrypted partition configuration information. By adopting the above data protection method, device and electronic device, the problems of low encryption efficiency and high encryption cost when encrypting the removable storage medium are solved.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a data protection method, device and electronic device. Background Art

[0002] With the continuous development of Internet technology, more and more enterprises and government agencies have built network working environments and communicate and transfer files through the network. However, when the communication information includes confidential information or the network environment is unavailable and data cannot be transmitted through the network environment, it is necessary to save this data in local removable storage media and transmit confidential information or urgent data through removable storage media. However, once the removable storage medium is lost or stolen, these confidential information or urgent data are very likely to be extracted, resulting in information leakage. Therefore, it is necessary to encrypt the data on the removable storage medium to ensure data security.

[0003] At present, when encrypting data stored in a removable storage medium, the stored data is usually directly encrypted, or the removable storage medium to be encrypted is placed in a physical box and the physical box is encrypted by a fingerprint lock or a password lock. However, when the data to be encrypted is large, directly encrypting the target data will result in a long encryption time and low encryption efficiency. When protecting data by encrypting the physical box, not only is the process cumbersome, but also requires additional physical confidentiality equipment, resulting in low encryption efficiency and high encryption cost. Summary of the invention

[0004] In view of this, the purpose of the present application is to provide a data protection method, device and electronic device, which can encrypt the partition configuration information in the partition table of a removable storage medium, thereby solving the problems of low encryption efficiency and high encryption cost when encrypting removable storage devices.

[0005] In a first aspect, an embodiment of the present application provides a data protection method, including:

[0006] identifying a removable storage medium connected to a terminal device, wherein the removable storage medium is divided into at least one block group;

[0007] Loading a partition table of a removable storage medium, the partition table comprising at least one partition sub-table, each partition sub-table recording partition configuration information of a corresponding block group;

[0008] Encrypting the partition configuration information corresponding to the target block group to obtain the encrypted partition configuration information corresponding to the target block group;

[0009] The partition configuration information in the target partition sub-table corresponding to the target block group in the partition table is updated based on the encrypted partition configuration information.

[0010] Optionally, the partition configuration information includes configuration parameters corresponding to multiple configuration information items; wherein, the partition configuration information corresponding to the target block group is encrypted, and the step of obtaining the encrypted partition configuration information corresponding to the target block group includes: encrypting the configuration parameters in the target configuration information items of the target partition sub-table corresponding to the target block group to obtain the encrypted configuration parameters corresponding to the target block group.

[0011] Optionally, the step of updating the partition configuration information in the target partition subtable corresponding to the target block group in the partition table based on the encrypted partition configuration information includes: for the target block group, updating the configuration parameters in the target configuration information item of the target partition subtable based on the encrypted configuration parameters.

[0012] Optionally, the step of encrypting the configuration parameters in the target configuration information items of the target partition subtable corresponding to the target block group to obtain the encrypted configuration parameters corresponding to the target block group includes: receiving a parameter selection instruction for selecting the target configuration parameters issued by the terminal device, the parameter selection instruction carrying the item identifier of the target configuration information item to which the target configuration parameter belongs and the table identifier of the target partition subtable to which the target configuration information item belongs; selecting the target partition subtable indicated by the table identifier from at least one partition subtable; selecting the target configuration information item indicated by the item identifier from the target partition subtable; and encrypting the configuration parameters corresponding to the target configuration information items to obtain the encrypted configuration parameters of the target block group corresponding to the target partition subtable.

[0013] Optionally, the step of receiving a parameter selection instruction for selecting a target configuration parameter issued by a terminal device includes: creating a command input window; and inputting the parameter selection instruction for selecting the target configuration parameter in the created command input window.

[0014] Optionally, the step of receiving a parameter selection instruction for selecting a target configuration parameter issued by a terminal device includes: displaying a configuration interface for a removable storage medium, the configuration interface including multiple partition icons, each partition icon corresponding to a partition sub-table; receiving a first selection operation on a target partition icon among the multiple partition icons; in response to the first selection operation, displaying multiple configuration information items of the target partition sub-table corresponding to the target partition icon; and in response to a second selection operation on a target configuration information item among the multiple configuration information items, generating a parameter selection instruction for selecting the target configuration parameter.

[0015] Optionally, it also includes: in response to the first selection operation, creating a content display window, displaying the content stored in the target block group corresponding to the selected target partition icon in the content display window, wherein the content displayed in the content display window varies with the selected target partition icon.

[0016] Optionally, a target file provided only to a target vehicle is stored in a target block group of a removable storage medium, which also includes: in a configuration interface, the target partition icon is displayed distinctively, and the target partition sub-table corresponding to the partition icon is the partition sub-table corresponding to the target block group storing the target file.

[0017] Optionally, after updating the partition configuration information in the target partition subtable corresponding to the target block group in the partition table based on the encrypted partition configuration information, it also includes: loading at least one block group of the removable storage medium, and displaying the block group identifiers corresponding to each block group, and distinguishing and displaying the block group identifiers corresponding to the target block group.

[0018] Optionally, the step of loading the partition table of the removable storage medium includes: loading a boot block of the removable storage medium to obtain the partition table of the removable storage medium.

[0019] Optionally, the partition configuration information corresponding to the target block group is encrypted, and the step of obtaining the encrypted partition configuration information corresponding to the target block group includes: obtaining target characteristic information used for encryption, the target characteristic information being identification information used to indicate a receiving object of the removable storage medium; encrypting the partition configuration information and target characteristic information corresponding to the target block group, and obtaining the encrypted partition configuration information corresponding to the target block group.

[0020] Optionally, the receiving object includes at least one of the following items: a target vehicle for receiving storage content in a removable storage medium, a user having ownership and / or use rights of the target vehicle, and the identification information includes at least one of the following items: a unique identification code of the target vehicle, a user identification for characterizing the user.

[0021] In a second aspect, an embodiment of the present application further provides a data protection device, the device comprising:

[0022] An identification module identifies a removable storage medium connected to a terminal device, wherein the removable storage medium is divided into at least one block group;

[0023] An information loading module is used to load a partition table of a removable storage medium, wherein the partition table includes at least one partition sub-table, and each partition sub-table records partition configuration information of a corresponding block group;

[0024] An encryption module encrypts the partition configuration information corresponding to the target block group to obtain the encrypted partition configuration information corresponding to the target block group;

[0025] The updating module updates the partition configuration information in the target partition sub-table corresponding to the target block group in the partition table based on the encrypted partition configuration information.

[0026] In a third aspect, an embodiment of the present application further provides an electronic device, comprising: a processor, a memory and a bus, wherein the memory stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor and the memory communicate through the bus, and when the machine-readable instructions are executed by the processor, the steps of the data protection method as described above are performed.

[0027] The embodiments of the present application bring the following beneficial effects:

[0028] A data protection method, device and electronic device provided in the embodiments of the present application can encrypt partition configuration information in a partition table of a removable storage medium. The amount of encrypted data is small and there is no need to add a physical box with a password protection function. Compared with the data protection method in the prior art, the problem of low encryption efficiency and high encryption cost when encrypting removable storage devices is solved.

[0029] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0031] Figure 1 A flow chart of a data protection method provided by an embodiment of the present application is shown;

[0032] Figure 2 A schematic diagram of the storage structure of a removable storage medium provided in an embodiment of the present application is shown;

[0033] Figure 3 A schematic diagram showing configuration information items of a partition sub-table provided in an embodiment of the present application is shown;

[0034] Figure 4 A schematic diagram of the structure of a data protection device provided in an embodiment of the present application is shown;

[0035] Figure 5 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0036] To make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. The components of the embodiments of the present application usually described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the application claimed for protection, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, each other embodiment obtained by those skilled in the art without making creative work belongs to the scope of protection of the present application.

[0037] It is worth noting that before the present application was filed, with the continuous development of Internet technology, more and more enterprises and government agencies have built network working environments and communicated and transferred files through the network. However, when the communication information includes confidential information or the network environment is unavailable and data cannot be transmitted through the network environment, it is necessary to store these data in a local removable storage medium and transmit confidential information or emergency data through the removable storage medium. However, once the removable storage medium is lost or stolen, these confidential information or emergency data are very likely to be extracted, resulting in information leakage. Therefore, it is necessary to encrypt the data on the removable storage medium to ensure data security. At present, when encrypting data stored in a removable storage medium, it is usually used to directly encrypt the stored data, or to place the removable storage medium to be encrypted in a physical box, and encrypt the physical box by means of a fingerprint lock or a password lock. However, when the data to be encrypted is large, directly encrypting the target data will result in long encryption time and low encryption efficiency. When protecting data by encrypting the physical box, not only is the process cumbersome, but it also requires additional physical security equipment, resulting in low encryption efficiency and high encryption cost.

[0038] Based on this, an embodiment of the present application provides a data protection method to improve the encryption efficiency when encrypting removable storage media and reduce encryption costs.

[0039] See also Figure 1 , Figure 1 This is a flow chart of a data protection method provided by an embodiment of the present application. Figure 1 As shown, the data protection method provided in the embodiment of the present application includes:

[0040] Step S101, identifying a removable storage medium connected to a terminal device. The removable storage medium is divided into at least one block group.

[0041] In this step, the terminal device may refer to a device capable of identifying a removable storage medium, and the terminal device is used to encrypt the removable storage medium.

[0042] As an example, the terminal device may be a mobile terminal device or a fixed terminal device.

[0043] Exemplarily, the terminal device includes, but is not limited to, any one of the following items: a mobile phone, a tablet computer, a desktop computer, a notebook computer, and a car computer.

[0044] The removable storage medium may refer to a carrier for storing data. Exemplarily, the removable storage medium includes, but is not limited to, any one of the following items: a USB flash drive, a mobile hard disk, a floppy disk, an optical disk, and a memory card.

[0045] A block group may refer to a storage area in a removable storage medium. A block group is used to store data, such as multimedia files. A block group may be understood as a partition. A hard disk in a home computer is divided into multiple partitions. For example, the C drive and the D drive are different partitions.

[0046] Refer to the following Figure 2 To introduce the storage structure of removable storage media.

[0047] Figure 2 The storage structure diagram of the removable storage medium provided in the embodiment of the present application is shown. It should be understood that Figure 2 The storage structure of the removable storage medium shown is only an example and the present application is not limited thereto.

[0048] like Figure 2 As shown, the removable storage medium is divided into multiple areas, including a primary boot block, block group one, block group two, block group three, block group four and a secondary boot block, wherein the primary boot block stores a boot program and a partition table, the boot program may refer to a program for booting an operating system, the partition table is used to record identification information of the block group, the partition table includes partition sub-table one, partition sub-table two, partition sub-table three and partition sub-table four, and block group one to block group four are multiple different partitions for storing data.

[0049] Partition sub-table one corresponds to block group one, and partition sub-table one is used to record the identification information of block group one. Partition sub-table two corresponds to block group two, and partition sub-table two is used to record the identification information of block group two. Partition sub-table three corresponds to block group three, and partition sub-table three is used to record the identification information of block group three. Partition sub-table four corresponds to block group four, and partition sub-table four is used to record the identification information of block group four.

[0050] The secondary boot block is a backup of the primary boot block. The storage content in the secondary boot block is the same as that of the primary boot block. When an abnormality occurs in the primary boot block, the data in the primary boot block can be restored through the backup in the secondary boot block.

[0051] Step S102: loading the partition table of the removable storage medium.

[0052] In this step, the partition table is stored in the master boot block and is used to record the configuration information of the block group. The partition table includes at least one partition sub-table, and each partition sub-table records the partition configuration information of a corresponding block group. It can be understood that the removable storage medium is divided into several block groups, and there are several partition sub-tables corresponding to them.

[0053] The partition sub-table may refer to a table that records partition configuration information of a single block group, and the partition sub-table records a plurality of partition configuration information.

[0054] In an optional embodiment, executing step S102 includes: loading a boot block of the removable storage medium to obtain a partition table of the removable storage medium.

[0055] In an embodiment of the present application, after the removable storage medium is identified, the master boot block of the removable storage medium is loaded. Since the master boot block includes a partition table, the partition table can be directly obtained, and then the partition configuration information in the partition table is encrypted.

[0056] It can be seen that what is loaded is the boot block of the removable storage medium, and there is no need to load the data stored in the entire removable storage medium. It can be understood that completing the encryption process by loading the boot block can improve the encryption efficiency.

[0057] Step S103, encrypting the partition configuration information corresponding to the target block group to obtain the encrypted partition configuration information corresponding to the target block group.

[0058] In this step, the partition configuration information may refer to information for identifying a block group, and the partition configuration information includes configuration parameters corresponding to a plurality of configuration information items.

[0059] Refer to the following Figure 3 To introduce the configuration information items in the partition subtable.

[0060] Figure 3 Schematic diagram showing configuration information items of a partition sub-table provided in an embodiment of the present application. It should be understood that Figure 3 The partition sub-table shown is only an example, and the present application is not limited thereto.

[0061] like Figure 3As shown in the figure, the partition subtable records multiple configuration information items, including: active partition u8boot_ind, partition starting head number u8 head, partition starting sector number u8sector, partition starting cylinder number u8 cyl, partition format u8 sys_ind, end head number u8end_head, end sector number u8 end_sector, end cylinder number u8end_cyl, partition starting relative sector number u32 start_sect, partition total sector number u32 nr_sects. Each configuration information item has corresponding configuration parameters.

[0062] In an optional embodiment, executing step S103 includes: encrypting the configuration parameters in the target configuration information item of the target partition sub-table corresponding to the target block group to obtain the encrypted configuration parameters corresponding to the target block group.

[0063] Here, the block group storing the target file is determined as the target block group. The target file may refer to a file that can only be read by the target receiving object, and the target file is a protected file. Since the target file is stored in the target block group, if the partition configuration information of the target block group is changed before the terminal device loads the removable storage medium, the terminal device can be prevented from loading the target block group, thereby achieving the effect of protecting the target file.

[0064] Among them, there are multiple configuration information items in the target partition sub-table corresponding to the target block group. Only by changing the configuration parameters of one of the configuration information items can the terminal device be unable to load the target block group of the removable storage medium. Here, the partition format configuration information item can be selected as the target configuration information item, and the configuration parameters of the partition format can be encrypted to achieve protection of the target file.

[0065] It can be seen that the present application only needs to encrypt the configuration parameters corresponding to a configuration information item of the target partition sub-table corresponding to the target block group to achieve the protection of the target file. There is no need to add a physical box with a password protection function, nor is there any need to encrypt all target files. This shortens the encryption time, improves the encryption efficiency, and reduces the encryption cost.

[0066] In an optional embodiment, the step of encrypting the configuration parameters in the target configuration information items of the target partition subtable corresponding to the target block group to obtain the encrypted configuration parameters corresponding to the target block group includes: receiving a parameter selection instruction for selecting the target configuration parameters issued by a terminal device; selecting a target partition subtable indicated by a table identifier from at least one partition subtable; selecting a target configuration information item indicated by an item identifier from the target partition subtable; and encrypting the configuration parameters corresponding to the target configuration information items to obtain the encrypted configuration parameters of the target block group corresponding to the target partition subtable.

[0067] Here, the parameter selection instruction may refer to an operation instruction input by the user. The parameter selection instruction is used to determine the target partition subtable and the target configuration information item. The parameter selection instruction carries the item identifier of the target configuration information item to which the target configuration parameter belongs and the table identifier of the target partition subtable to which the target configuration information item belongs.

[0068] The item identifier of the target configuration information item may refer to the name of the target configuration information item.

[0069] The table identifier of the target partition sub-table may refer to the name or number of the target partition sub-table.

[0070] It can be seen that when the target file is stored in multiple block groups, the present application can quickly obtain multiple target block groups by directly inputting parameter selection instructions to encrypt the partition information corresponding to these target block groups. Only qualified receiving objects can load the target block groups, thereby protecting the target file.

[0071] In an optional embodiment, the step of receiving a parameter selection instruction for selecting a target configuration parameter issued by a terminal device includes: creating a command input window; and inputting the parameter selection instruction for selecting the target configuration parameter in the created command input window.

[0072] Here, the command input window may refer to an input window for parameter selection instructions.

[0073] In an embodiment of the present application, a parameter selection instruction can be directly input through a command input window, and based on the item identifier and table identifier in the parameter selection instruction, the corresponding target partition subtable and target configuration information item are selected.

[0074] In an optional embodiment, the step of receiving a parameter selection instruction for selecting a target configuration parameter issued by a terminal device includes: displaying a configuration interface for a removable storage medium, the configuration interface including multiple partition icons, each partition icon corresponding to a partition sub-table; receiving a first selection operation on a target partition icon among the multiple partition icons; in response to the first selection operation, displaying multiple configuration information items of the target partition sub-table corresponding to the target partition icon; and in response to a second selection operation on a target configuration information item among the multiple configuration information items, generating a parameter selection instruction for selecting the target configuration parameter.

[0075] Here, the configuration interface may refer to a user operation interface, and the configuration interface is used to determine a target partition sub-table and a target configuration information item by clicking an interface icon.

[0076] The first selection operation may refer to a point-and-select operation on the configuration interface, and the first selection operation is used to determine a target partition sub-table.

[0077] The second selection operation may refer to a click operation on the configuration interface, and the second selection operation is used to determine a target configuration information item.

[0078] It can be seen that by visualizing the parameter selection instruction and displaying the partition sub-table and the configuration information items as icons, the parameter selection instruction can be quickly generated through simple operations of the user.

[0079] In an optional embodiment, it also includes: in response to the first selection operation, a content display window is created, and the content stored in the target block group corresponding to the selected target partition icon is displayed in the content display window, wherein the content displayed in the content display window varies with the selected target partition icon.

[0080] Here, the content display window may refer to a display interface of a computer, and the content display window is used to display the content stored in the selected target partition.

[0081] In an embodiment of the present application, when a user selects a partition icon, the content stored in the block group corresponding to the partition icon will be displayed in the content display window. If the user reselects another partition icon, the displayed content in the content display window will change accordingly to display the content in the block group corresponding to the partition icon most recently selected by the user.

[0082] In an optional embodiment, a target file provided only to a target vehicle is stored in a target block group of a removable storage medium, which also includes: in a configuration interface, the target partition icon is displayed distinctively, and the target partition sub-table corresponding to the partition icon is the partition sub-table corresponding to the target block group storing the target file.

[0083] Here, the target file may refer to data to be protected.

[0084] In the embodiment of the present application, when the target file that can only be used by the target vehicle is stored in the removable storage medium, the manufacturer of the target vehicle needs to protect the target file. When the manufacturer of the target vehicle protects the target file through the terminal device, the target partition icon corresponding to the target block group where the target file is located can be displayed in a distinctive manner in the terminal device, prompting the manufacturer of the target vehicle to select the target partition icon to protect the target file in the target block group corresponding to the target partition icon.

[0085] In an optional embodiment, the target file includes at least one of the following items: at least one upgrade package for the target vehicle, at least one multimedia file provided by the manufacturer of the target vehicle, and / or the target block group includes one block group, all upgrade packages are stored in the same block group, and / or all multimedia files are stored in the same block group, and / or the target block group includes multiple block groups, each upgrade package is stored in a corresponding block group, and / or the multimedia file includes at least one of the following types: pictures, videos, audios, and each type of multimedia file is stored in a corresponding block group.

[0086] Here, the target file may be a variety of types of files, such as an upgrade package for upgrading the onboard software of the target vehicle, or a multimedia file, such as a picture, video, audio, etc. The target file may be stored in one block group, or the target file may be divided into several parts and stored in multiple different block groups.

[0087] In an optional embodiment, executing step S103 includes: obtaining target characteristic information for encryption; encrypting the partition configuration information and the target characteristic information corresponding to the target block group to obtain the encrypted partition configuration information corresponding to the target block group.

[0088] Here, the target characteristic information may refer to identification information, which is identification information used to indicate a receiving object of the removable storage medium.

[0089] The target characteristic information may be stored in a characteristic information table, which stores the correspondence between the characteristic information and the removable storage medium. Thus, when encrypting a removable storage medium, the target characteristic information corresponding to the removable storage medium may be obtained from the characteristic information table.

[0090] In the embodiment of the present application, the partition configuration information corresponding to the target block group and the target characteristic information can be combined according to the preset combination rule to obtain the information to be encrypted, and the information to be encrypted is encrypted using the preset encryption algorithm to obtain the encrypted partition configuration information corresponding to the target block group. The preset encryption algorithm can be a symmetric encryption algorithm or an asymmetric encryption algorithm. If an encryption key is used in the encryption process, the key can be input through the command input window during encryption.

[0091] The preset combination rule can be to combine each character in the partition configuration information and each character in the target feature information in sequence, or to combine them in a manner that the partition configuration information is in front and the target feature information is in the back, or to combine them in a manner that the target feature information is in front and the partition configuration information is in the back. Technical personnel in this field can determine the combination rule based on actual conditions, and this application does not limit it here.

[0092] In an optional embodiment, the receiving object includes at least one of the following items: a target vehicle for receiving storage content in a removable storage medium, a user having ownership and / or use rights of the target vehicle, and the identification information includes at least one of the following items: a unique identification code of the target vehicle, a user identification for characterizing the user.

[0093] Here, the receiving object may refer to an object that uses the removable storage medium, and the receiving object is used to receive data or files stored in the removable storage medium.

[0094] The unique identification code of the target vehicle may refer to the vehicle identification number (VIN) of the target vehicle.

[0095] The user identification includes at least one of the following items: the user's mobile phone number and the user's name.

[0096] Step S104: updating the partition configuration information in the target partition sub-table corresponding to the target block group in the partition table based on the encrypted partition configuration information.

[0097] In this step, the encrypted partition configuration information is updated to the partition configuration information in the target partition subtable in the partition table, so that the updated partition configuration information is different from the normal partition configuration information. When the terminal device loads the removable storage medium, the updated partition configuration information cannot be recognized, so that the terminal device cannot obtain the data stored in the target block group of the removable storage medium, thereby achieving the effect of protecting the data stored in the target block group.

[0098] In an optional embodiment, executing step S104 includes: for the target block group, updating the configuration parameters in the target configuration information item of the target partition sub-table based on the encrypted configuration parameters.

[0099] Here, the object of encryption is the configuration parameters corresponding to the target configuration information item, and the obtained configuration parameters are also encrypted. The encrypted configuration parameters replace the configuration parameters in the target configuration information item of the target partition subtable, so that the replaced configuration parameters cannot be recognized by the terminal device, and the data stored in the target block group of the removable storage medium cannot be obtained, thereby achieving the effect of protecting the data stored in the target block group.

[0100] In an optional embodiment, after executing step S104, the method further includes: loading at least one block group of the removable storage medium, and displaying the block group identifiers corresponding to each block group, and distinguishing and displaying the block group identifiers corresponding to the target block group.

[0101] Here, the block group identifier may refer to identification information of the block group, and the block group identifier is used to distinguish different block groups.

[0102] The block group identifier includes multiple ones, and the block group identifier includes but is not limited to at least one of the following items: a block group name, a block group icon, and a block group size.

[0103] Differential display may refer to different display modes. For example, the differential display may be to differentially display the block group icon of the target block group, to hide the block group identifier of the target block group, or to differentially display the block group name of the target block group, for example, using a special color.

[0104] In the embodiment of the present application, after the partition configuration information in the target partition sub-table corresponding to the target block group in the partition table is updated using the encrypted partition configuration information, it is necessary to verify whether the data in the target block group is successfully protected. Here, the partition configuration information of the target block group can be displayed as encrypted by adding a distinguishing mark to the block group identifier corresponding to the target block group.

[0105] It should be noted that after obtaining the encrypted partition configuration information, the encrypted partition configuration information can also be decrypted. The decryption method is as follows:

[0106] The boot block of the removable storage medium is loaded to obtain the partition table of the removable storage medium, and the partition table is parsed to obtain the partition configuration information corresponding to the partition table, wherein the following parsing process is performed on the partition table: identifying whether the content recorded in the partition table is encrypted, and if encrypted, decrypting the encrypted content, and determining the decrypted content as the partition configuration information corresponding to the partition table. After decrypting the partition configuration information in the partition table, the removable storage medium can be loaded, and the target file can be obtained from the removable storage medium.

[0107] Compared with the data protection method in the prior art, the present application can combine the partition configuration information in the partition table of the removable storage medium with the target feature information, and encrypt the combined data. Not only is the amount of encrypted data small and the encryption efficiency high, but there is no need to add a physical box, which solves the problem of low encryption efficiency and high encryption cost when using the prior art to encrypt removable storage devices.

[0108] Based on the same inventive concept, a data protection device corresponding to the data protection method is also provided in the embodiment of the present application. Since the principle of solving the problem by the device in the embodiment of the present application is similar to the above-mentioned data protection method in the embodiment of the present application, the implementation of the device can refer to the implementation of the method, and the repeated parts will not be repeated.

[0109] See also Figure 4 , Figure 4 This is a schematic diagram of the structure of a data protection device provided in an embodiment of the present application. Figure 4 As shown in , the data protection device 200 includes:

[0110] An identification module 201 identifies a removable storage medium connected to a terminal device, wherein the removable storage medium is divided into at least one block group;

[0111] An information loading module 202 is used to load a partition table of a removable storage medium, wherein the partition table includes at least one partition sub-table, and each partition sub-table records partition configuration information of a corresponding block group;

[0112] The encryption module 203 encrypts the partition configuration information corresponding to the target block group to obtain the encrypted partition configuration information corresponding to the target block group;

[0113] The updating module 204 updates the partition configuration information in the target partition sub-table corresponding to the target block group in the partition table based on the encrypted partition configuration information.

[0114] Optionally, the partition configuration information includes configuration parameters corresponding to multiple configuration information items; wherein the encryption module 203 is further used to: encrypt the configuration parameters in the target configuration information items of the target partition sub-table corresponding to the target block group to obtain the encrypted configuration parameters corresponding to the target block group.

[0115] Optionally, the updating module 204 is further configured to: update the configuration parameters in the target configuration information item of the target partition sub-table based on the encrypted configuration parameters for the target block group.

[0116] Optionally, the encryption module 203 is also used to: receive a parameter selection instruction for selecting a target configuration parameter issued by a terminal device, the parameter selection instruction carrying an item identifier of a target configuration information item to which the target configuration parameter belongs and a table identifier of a target partition subtable to which the target configuration information item belongs; select a target partition subtable indicated by the table identifier from at least one partition subtable; select a target configuration information item indicated by the item identifier from the target partition subtable; and encrypt the configuration parameters corresponding to the target configuration information item to obtain the encrypted configuration parameters of the target block group corresponding to the target partition subtable.

[0117] Optionally, the encryption module 203 is further used to: create a command input window; and input a parameter selection instruction for selecting a target configuration parameter in the created command input window.

[0118] Optionally, the encryption module 203 is also used to: display a configuration interface for a removable storage medium, the configuration interface including multiple partition icons, each partition icon corresponding to a partition sub-table; receive a first selection operation on a target partition icon among the multiple partition icons; in response to the first selection operation, display multiple configuration information items of the target partition sub-table corresponding to the target partition icon; in response to a second selection operation on a target configuration information item among the multiple configuration information items, generate a parameter selection instruction for selecting a target configuration parameter.

[0119] Optionally, the encryption module 203 is also used to: in response to the first selection operation, create a content display window, and display the content stored in the target block group corresponding to the selected target partition icon in the content display window, wherein the content displayed in the content display window varies depending on the selected target partition icon.

[0120] Optionally, a target file provided only to a target vehicle is stored in a target block group of a removable storage medium, wherein the encryption module 203 is also used to: in a configuration interface, display the target partition icon distinctively, and the target partition sub-table corresponding to the partition icon is the partition sub-table corresponding to the target block group storing the target file.

[0121] Optionally, the data protection device 200 also includes a partition loading module (not shown in the figure), which is used to: load at least one block group of the removable storage medium, and display the block group identifier corresponding to each block group, and distinguish the block group identifier corresponding to the target block group.

[0122] Optionally, the information loading module 202 is further used to: load a boot block of the removable storage medium to obtain a partition table of the removable storage medium.

[0123] Optionally, the encryption module 203 is also used to: obtain target feature information for encryption, the target feature information being identification information for indicating a receiving object of the removable storage medium; encrypt the partition configuration information and target feature information corresponding to the target block group to obtain the encrypted partition configuration information corresponding to the target block group.

[0124] Optionally, the receiving object includes at least one of the following items: a target vehicle for receiving storage content in a removable storage medium, a user having ownership and / or use rights of the target vehicle, and the identification information includes at least one of the following items: a unique identification code of the target vehicle, a user identification for characterizing the user.

[0125] See also Figure 5, Figure 5 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 5 As shown in , the electronic device 300 includes a processor 310 , a memory 320 and a bus 330 .

[0126] The memory 320 stores machine-readable instructions executable by the processor 310. When the electronic device 300 is running, the processor 310 communicates with the memory 320 via the bus 330. When the machine-readable instructions are executed by the processor 310, the above-mentioned Figure 1 The steps of the data protection method in the method embodiment shown and the specific implementation methods can be found in the method embodiment, which will not be repeated here.

[0127] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0128] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

[0129] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0130] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0131] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a non-volatile computer-readable storage medium that is executable by a processor. Based on this understanding, the technical solution of the present application can essentially be embodied in the form of a software product, or in other words, the part that contributes to the prior art or the part of the technical solution. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0132] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present application, which are used to illustrate the technical solutions of the present application, rather than to limit them. The protection scope of the present application is not limited thereto. Although the present application is described in detail with reference to the above-mentioned embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-mentioned embodiments within the technical scope disclosed in the present application, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A data protection method, characterized in that: include: identifying a removable storage medium connected to a terminal device, wherein the removable storage medium is divided into at least one block group; Loading a partition table of the removable storage medium, the partition table comprising at least one partition sub-table, each partition sub-table recording partition configuration information of a corresponding block group; Encrypting the partition configuration information corresponding to the target block group to obtain the encrypted partition configuration information corresponding to the target block group; Update the partition configuration information in the target partition sub-table corresponding to the target block group in the partition table based on the encrypted partition configuration information; The partition configuration information includes configuration parameters corresponding to a plurality of configuration information items; The step of encrypting the partition configuration information corresponding to the target block group and obtaining the encrypted partition configuration information corresponding to the target block group includes: Encrypting the configuration parameters in the target configuration information item of the target partition sub-table corresponding to the target block group to obtain the encrypted configuration parameters corresponding to the target block group; The step of updating the partition configuration information in the target partition sub-table corresponding to the target block group in the partition table based on the encrypted partition configuration information includes: For the target block group, updating the configuration parameters in the target configuration information item of the target partition subtable based on the encrypted configuration parameters; The step of encrypting the configuration parameters in the target configuration information item of the target partition sub-table corresponding to the target block group to obtain the encrypted configuration parameters corresponding to the target block group includes: Receiving a parameter selection instruction for selecting a target configuration parameter issued by a terminal device, wherein the parameter selection instruction carries an item identifier of a target configuration information item to which the target configuration parameter belongs and a table identifier of a target partition subtable to which the target configuration information item belongs; Selecting a target partition sub-table indicated by the table identifier from the at least one partition sub-table; Selecting the target configuration information item indicated by the item identifier from the target partition sub-table; The configuration parameters corresponding to the target configuration information items are encrypted to obtain the encrypted configuration parameters of the target block group corresponding to the target partition sub-table.

2. The method according to claim 1, characterized in that The step of receiving a parameter selection instruction issued by a terminal device for selecting a target configuration parameter includes: Create a command input window; In the created command input window, enter a parameter selection instruction for selecting target configuration parameters.

3. The method according to claim 1, characterized in that The step of receiving a parameter selection instruction issued by a terminal device for selecting a target configuration parameter includes: Displaying a configuration interface for the removable storage medium, the configuration interface including a plurality of partition icons, each partition icon corresponding to a partition sub-table; receiving a first selection operation on a target partition icon among the plurality of partition icons; In response to the first selection operation, displaying a plurality of configuration information items of the target partition sub-table corresponding to the target partition icon; In response to a second selection operation on a target configuration information item among the plurality of configuration information items, a parameter selection instruction for selecting a target configuration parameter is generated.

4. The method according to claim 3, characterized in that Also includes: In response to the first selection operation, a content display window is further created, in which the content stored in the target block group corresponding to the selected target partition icon is displayed. The content displayed in the content display window varies with the selected target partition icon.

5. The method according to claim 3, characterized in that: The target block group of the removable storage medium stores a target file provided only to the target vehicle. Among them, it also includes: In the configuration interface, the target partition icon is displayed distinctively, and the target partition sub-table corresponding to the partition icon is the partition sub-table corresponding to the target block group storing the target file.

6. The method according to claim 1, characterized in that After the partition configuration information in the target partition sub-table corresponding to the target block group in the partition table is updated based on the encrypted partition configuration information, the method further includes: At least one block group of the removable storage medium is loaded, and the block group identifiers corresponding to the block groups are displayed, and the block group identifiers corresponding to the target block group are displayed in a differentiated manner.

7. The method according to claim 1, characterized in that The step of loading the partition table of the removable storage medium comprises: The boot block of the removable storage medium is loaded to obtain a partition table of the removable storage medium.

8. The method according to claim 1, characterized in that The step of encrypting the partition configuration information corresponding to the target block group and obtaining the encrypted partition configuration information corresponding to the target block group includes: Acquire target characteristic information for encryption, wherein the target characteristic information is identification information for indicating a receiving object of the removable storage medium; The partition configuration information corresponding to the target block group and the target characteristic information are encrypted to obtain the encrypted partition configuration information corresponding to the target block group.

9. The method according to claim 8, characterized in that The receiving object includes at least one of the following items: a target vehicle for receiving the storage content in the removable storage medium, a user having ownership and / or use rights of the target vehicle, The identification information includes at least one of the following items: a unique identification code of the target vehicle, and a user identification used to characterize the user.

10. A data protection device, characterized in that: include: an identification module, identifying a removable storage medium connected to a terminal device, wherein the removable storage medium is divided into at least one block group; An information loading module, which loads a partition table of the removable storage medium, wherein the partition table includes at least one partition sub-table, and each partition sub-table records partition configuration information of a corresponding block group; An encryption module encrypts the partition configuration information corresponding to the target block group to obtain the encrypted partition configuration information corresponding to the target block group; An updating module, which updates the partition configuration information in the target partition sub-table corresponding to the target block group in the partition table based on the encrypted partition configuration information; The partition configuration information includes configuration parameters corresponding to a plurality of configuration information items; The encryption module is specifically used for: Encrypting the configuration parameters in the target configuration information item of the target partition sub-table corresponding to the target block group to obtain the encrypted configuration parameters corresponding to the target block group; The update module is specifically used for: For the target block group, updating the configuration parameters in the target configuration information item of the target partition subtable based on the encrypted configuration parameters; The encryption module, when encrypting the configuration parameters in the target configuration information item of the target partition sub-table corresponding to the target block group to obtain the encrypted configuration parameters corresponding to the target block group, is specifically used to: Receiving a parameter selection instruction for selecting a target configuration parameter issued by a terminal device, wherein the parameter selection instruction carries an item identifier of a target configuration information item to which the target configuration parameter belongs and a table identifier of a target partition subtable to which the target configuration information item belongs; Selecting a target partition sub-table indicated by the table identifier from the at least one partition sub-table; Selecting the target configuration information item indicated by the item identifier from the target partition sub-table; The configuration parameters corresponding to the target configuration information items are encrypted to obtain the encrypted configuration parameters of the target block group corresponding to the target partition sub-table.

11. An electronic device, characterized in that: include: A processor, a storage medium and a bus, wherein the storage medium stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor communicates with the storage medium via the bus, and the processor executes the machine-readable instructions to perform the steps of the data protection method as described in any one of claims 1 to 9.

Images