A security authentication method for solid state hard disk and solid state hard disk

Abstract

The embodiment of the present application discloses a security authentication method for a solid-state hard disk and a solid-state hard disk. The method comprises: after detecting connection with a terminal device, obtaining the current time value corresponding to the clock data recorded locally to obtain a reference time value; generating at least two time values ​​of different sizes according to the reference time value; generating a verification reference value corresponding to each time value to obtain at least two verification reference values; if the verification actual value generated by the received terminal device is the same as one of the at least two verification reference values, then allowing the terminal device to access the solid-state hard disk.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of data storage, and in particular to a security authentication method for a solid-state hard disk and a solid-state hard disk. Background Art

[0002] With the deepening of informatization and the development of computer technology, security issues have become a common challenge faced by mankind in the information age, and information security issues have become a top priority. As a carrier of data, solid-state drives have also become a key target of attack and protection. If confidential data is stored in a solid-state drive, how to use it safely is an urgent problem to be solved. Summary of the invention

[0003] In order to solve any of the above technical problems, an embodiment of the present application provides a security authentication method for a solid state drive and a solid state drive.

[0004] In order to achieve the purpose of the embodiment of the present application, the embodiment of the present application provides a security authentication method for a solid state drive, including:

[0005] After detecting the connection with the terminal device, the current time value corresponding to the clock data recorded locally is obtained to obtain the reference time value;

[0006] Generate at least two time values ​​of different sizes according to the reference time value;

[0007] Generate a calibration reference value corresponding to each time value to obtain at least two calibration reference values;

[0008] If the received verification actual value generated by the terminal device is the same as one of the at least two verification reference values, the terminal device is allowed to access the solid state hard disk.

[0009] A storage medium stores a computer program, wherein the computer program is configured to execute the method described above when running.

[0010] An electronic device comprises a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the method described above.

[0011] A solid state hard disk is provided with the electronic device described above.

[0012] One of the above technical solutions has the following advantages or beneficial effects:

[0013] By generating at least two time values ​​for the solid-state drive to improve the matching degree with the time value of the terminal device, the probability of successful matching between the calibration reference value determined based on the time value and the actual verification value is increased, thereby ensuring the smooth progress of the security authentication operation.

[0014] Other features and advantages of the embodiments of the present application will be described in the subsequent description, and partly become apparent from the description, or can be understood by implementing the embodiments of the present application. The purpose and other advantages of the embodiments of the present application can be achieved and obtained by the structures specifically pointed out in the description, claims and drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The accompanying drawings are used to provide further understanding of the technical solutions of the embodiments of the present application and constitute a part of the specification. Together with the embodiments of the embodiments of the present application, they are used to explain the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions of the embodiments of the present application.

[0016] Figure 1 A flowchart of a security authentication method for a solid state drive provided in an embodiment of the present application;

[0017] Figure 2 An interactive diagram of a solid-state drive security authentication method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical solution and advantages of the embodiments of the present application more clear, the embodiments of the present application will be described in detail in conjunction with the accompanying drawings. It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other arbitrarily.

[0019] Figure 1 This is a flow chart of a security authentication method for a solid state drive provided in an embodiment of the present application. Figure 1 As shown, the method includes:

[0020] Step 101: after detecting the connection with the terminal device, obtain the current time value corresponding to the clock data recorded locally to obtain the reference time value;

[0021] In an exemplary embodiment, the clock data recorded locally may be clock data in a clock module of a solid state drive; or, the clock data may be clock data of a clock module of a terminal device.

[0022] The clock data of the clock module of the terminal device can be obtained by the following methods, including:

[0023] After establishing a connection with the terminal device, obtaining clock data of the terminal device from the terminal device;

[0024] The clock of the solid state drive is calibrated using the clock data of the terminal device, and the device is restarted to unify the time value for the accuracy of security authentication.

[0025] When connected to different terminal devices, since there are different clock data between the terminal devices, in order to reduce the number of corrections to the clock data in the solid-state drive and ensure the stability of the clock data of the solid-state drive itself, the embodiment of the present application provides the following solutions, including:

[0026] Obtaining a device identification of the terminal device;

[0027] Determining whether it is the first time to connect to the terminal device according to the device identification;

[0028] If it is the first time to connect with the terminal device, obtaining the clock data of the terminal device from the terminal device, and establishing a corresponding relationship between the device identification and the clock data;

[0029] If it is not the first time to connect with the terminal device, the clock data corresponding to the device identification is acquired according to the pre-stored correspondence between the device identification and the clock data.

[0030] It can be seen from the above method that the clock data of the terminal device can be obtained without modifying the clock module of the solid-state drive itself, which facilitates the implementation of security authentication operations.

[0031] Step 102: Generate at least two time values ​​of different sizes according to the reference time value;

[0032] In an exemplary embodiment, multiple time values ​​may be obtained by setting step values ​​of different sizes and calculating the current time value and the step value.

[0033] Step 103: Generate a verification reference value corresponding to each time value to obtain at least two verification reference values;

[0034] Since there is a time delay in the transmission between the terminal device and the solid-state drive, there will be a certain difference between the current time value of the solid-state drive and the time value of the terminal device. At least two time values ​​are generated for the solid-state drive to improve the matching degree with the time value of the terminal device, so that the probability of successful matching between the calibration reference value determined based on the time value and the actual verification value is increased, thereby ensuring the smooth progress of normal security authentication operations.

[0035] The verification reference value may be determined based on the time value and the key.

[0036] When acquiring the clock data of the terminal device from the terminal device, the key corresponding to the terminal device may also be acquired, and then the time value and the key may be used to generate a verification reference value corresponding to each time value.

[0037] By obtaining the key used by each terminal device, the security of security authentication can be improved, and the problem of low security caused by the key used by each terminal device can be avoided.

[0038] In addition, the device identification can also be used as the processing object of the summary operation, that is: the time value and the device identification are combined, and the combined data is processed using the key to obtain the verification reference value corresponding to each time value, thereby further improving the difference in verification reference values ​​between different terminal devices.

[0039] Step 104: if the received verification actual value generated by the terminal device is the same as one of the at least two verification reference values, then allowing the terminal device to access the solid state drive;

[0040] The area allowed to be accessed may be a preset storage area of ​​the solid state drive, or the entire area of ​​the solid state drive.

[0041] The preset storage area may be determined according to different identities of users.

[0042] The method provided in the embodiment of the present application generates at least two time values ​​for the solid-state drive to improve the matching degree with the time value of the terminal device, so that the probability of successful matching between the calibration reference value determined based on the time value and the actual verification value is increased, thereby ensuring the smooth progress of normal security authentication operations and ensuring the success rate of security authentication operations.

[0043] The method provided in the embodiment of the present application is described below:

[0044] In an exemplary embodiment, after verifying that the actual value is the same as one of the at least two verification reference values, the method further comprises:

[0045] Determine the time value corresponding to the calibration reference value that matches the actual value of the calibration, and obtain the target time value;

[0046] According to the target time value, the clock data of the terminal device recorded locally is managed.

[0047] By using the target time value, the clock data of the terminal device recorded locally can be corrected, thereby ensuring the consistency of the clock data of the terminal device recorded locally with the clock data of the terminal device itself, and ensuring the normal progress of subsequent security authentication operations.

[0048] In an exemplary embodiment, managing the clock data of the terminal device recorded locally according to the target time value includes:

[0049] determining whether the target time value is the same as the reference time value;

[0050] If the target time value is different from the reference time value, calculating the difference between the target time value and the reference time value;

[0051] According to the difference, a correction operation is performed on the clock data of the terminal device.

[0052] If the target time value is the same as the reference time value, it means that the clock data recorded locally by the solid-state drive is the same as the clock data of the terminal device itself, and there is no need to correct the clock data recorded locally by the solid-state drive.

[0053] If the target time value is different from the reference time value, it means that there is a difference between the clock data locally recorded on the solid-state hard disk and the clock data of the terminal device itself, and the size of the difference is within the allowable range. By calculating the difference between the target time value and the reference time value, the time difference between the two can be obtained, and then the difference is used to correct the clock data locally recorded on the solid-state hard disk, thereby ensuring the consistency of the clock data of the two.

[0054] In an exemplary embodiment, the method further comprises:

[0055] If the actual verification value generated by the terminal device is different from any of the at least two verification reference values, it means that there is a large difference between the clock data locally recorded in the solid-state hard disk and the clock data of the terminal device itself and the size of the difference is already within the unallowable range, then the locally recorded clock data is initialized.

[0056] Specifically, the clock data may be reacquired from the terminal device, and the reacquired clock data may be updated as the clock data of the terminal device.

[0057] Figure 2 This is an interactive diagram of the security authentication method for a solid state drive provided in an embodiment of the present application. Figure 2 As shown, the method includes:

[0058] Step 200: after the solid state drive is connected to the terminal device, determine whether it is the first time to connect to the solid state drive;

[0059] If it is the first connection, first execute step 201 to step 205, and then execute step 206 to step 215;

[0060] If it is not the first connection, step 206 to step 215 are directly executed.

[0061] Step 201: The terminal device generates a random number as a subsequent key and saves it.

[0062] Step 202: The terminal device sends the time, host characteristic value and key to the solid state drive;

[0063] The time is a current value determined by a clock module of the terminal device, and the host characteristic value may be a device identifier, such as a MAC address.

[0064] Step 203: The solid state drive calibrates the module according to the received time to ensure consistency with the clock module of the terminal device.

[0065] Step 204: The solid state drive saves the host characteristic value.

[0066] Step 205: The solid state drive stores the key.

[0067] Step 206: The terminal device uses the preset key to calculate the current time and the host value to obtain the actual verification value h;

[0068] The current time is in minutes.

[0069] Step 207: The terminal device sends the host characteristic value and verifies the actual value h.

[0070] Step 208: The solid state drive obtains the corresponding key according to the host characteristic value.

[0071] Step 209: The solid state drive generates five groups of time values ​​based on the current time of the solid state drive, and calculates a verification reference value H corresponding to each group of time values;

[0072] Taking the current time as t as an example, the verification reference value determined based on the current time t is H0; the verification reference value determined based on 1 minute after the current time is H1, the verification reference value determined based on 2 minutes after the current time is H2, the verification reference value determined based on 1 minute before the current time is H1', ​​and the verification reference value determined based on 2 minutes before the current time is H2'.

[0073] Step 210, the solid state drive determines whether the actual verification value is equal to one of the five verification reference values;

[0074] If no, execute step 211; if yes, execute steps 212 to 215.

[0075] Step 211: The solid state hard disk denies access by the terminal device and is in a locked state.

[0076] Step 212: The solid state hard disk allows access by the terminal device and is in an unlocked state.

[0077] Step 213, determining whether the actual verification value h is equal to the verification reference value determined based on the current time of the hard disk;

[0078] If yes, execute step 214; otherwise, execute step 215.

[0079] Step 214: The solid state drive does not calibrate the clock.

[0080] Step 215, calibrating the hard disk clock module, includes:

[0081] If h = H2', the hard disk time is reduced by 2 minutes;

[0082] If h = H1', ​​the hard disk time is reduced by 1 minute;

[0083] If h = H1, the hard disk time is increased by 1 minute;

[0084] If h=H2, the hard disk time is increased by 2 minutes.

[0085] In summary, the method provided in the embodiment of the present application uses time values ​​to generate multiple verification reference values ​​to reduce the problem of verification failure caused by time differences caused by delays and other reasons, thereby ensuring the smooth progress of security authentication operations.

[0086] An embodiment of the present application provides a storage medium, in which a computer program is stored, wherein the computer program is configured to execute any of the methods described above when running.

[0087] An embodiment of the present application provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute any of the methods described above.

[0088] An embodiment of the present application provides a solid state drive provided with the electronic device described above.

[0089] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all components may be implemented as software executed by a processor, such as a digital signal processor or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those of ordinary skill in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

Claims

1. A security authentication method for a solid state drive, comprising: After detecting the connection with the terminal device, the current time value corresponding to the clock data recorded locally is obtained to obtain the reference time value; According to the reference time value, at least two time values ​​of different sizes are generated by using set step values ​​of different sizes; Generate a calibration reference value corresponding to each time value to obtain at least two calibration reference values; If the received verification actual value generated by the terminal device is the same as one of the at least two verification reference values, allowing the terminal device to access the solid state drive; The reference time value corresponding to the terminal device is obtained in the following manner, including: Obtaining a device identification of the terminal device; Determining whether it is the first time to connect to the terminal device according to the device identification; If it is the first time to connect with the terminal device, obtaining the clock data of the terminal device from the terminal device, and establishing a corresponding relationship between the device identification and the clock data; If it is not the first time to connect with the terminal device, acquiring the clock data corresponding to the device identifier according to the pre-stored correspondence between the device identifier and the clock data; When the clock data of the terminal device is obtained from the terminal device, the key corresponding to the terminal device is also obtained; wherein the verification reference value corresponding to each time value is generated by using the time value and the key.

2. The method according to claim 1, characterized in that: The reference time value is a time value determined according to clock data of the terminal device.

3. The method according to claim 1, characterized in that The method further comprises: After the verification actual value is identical to one of the at least two verification reference values, determining a time value corresponding to the calibration reference value matching the verification actual value to obtain a target time value; According to the target time value, the clock data of the terminal device recorded locally is managed.

4. The method according to claim 3, characterized in that The managing the clock data of the terminal device recorded locally according to the target time value includes: determining whether the target time value is the same as the reference time value; If the target time value is different from the reference time value, calculating the difference between the target time value and the reference time value; According to the difference, a correction operation is performed on the clock data of the terminal device.

5. The method according to claim 1, characterized in that The method further comprises: If the received actual verification value generated by the terminal device is different from any of the at least two verification reference values, the locally recorded clock data is initialized.

6. A storage medium, characterized in that: The storage medium stores a computer program, wherein the computer program is configured to execute the method according to any one of claims 1 to 5 when executed.

7. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to run the computer program to perform the method according to any one of claims 1 to 5.

8. A solid state hard disk, characterized in that: An electronic device as claimed in claim 7 is provided.

Images