Protection device, method and storage medium for a mobile hard disk

Abstract

The present disclosure provides a protection device, method and storage medium of a mobile hard disk, belonging to the technical field of data storage encryption. The protection device comprises: an interface unit for connecting with a computer and a mobile hard disk respectively; a storage unit for storing the correspondence between the identification of the mobile hard disk, the biological feature data and the key; a biological feature detection unit for obtaining the biological feature data; a processing unit connected with the interface unit, the storage unit and the biological feature detection unit respectively, the processing unit for obtaining the first key corresponding to the identification and the biological feature data of the mobile hard disk, and obtaining the second key from the electronic key; generating the first encryption key based on the first key and the second key; and decrypting the partition table information of the mobile hard disk by using the first encryption key, so that the computer can access the mobile hard disk. The present disclosure can improve the protection of the mobile hard disk.

Description

Technical Field

[0001] This disclosure belongs to the field of data storage encryption technology, and specifically relates to a protection device, method and storage medium for a portable hard drive. Background Technology

[0002] With the rapid development of electronic information technology, mobile storage devices are being used more and more frequently. As a large-capacity storage medium for data storage and backup, the security of portable hard drives is receiving increasing attention, thus giving rise to the demand for protection of portable hard drives.

[0003] In related technologies, encryption of portable hard drives is usually achieved in the following way: user identity information is identified, and access to the portable hard drive partition is only allowed after successful identification. During access, a key bound to the user identity information is obtained to encrypt the data on the portable hard drive. The user identity information is used as the key or a random number triggered by the user identity information is used as the key. The user identity information and the key are bound and stored in the encryption device.

[0004] This method of encrypting external hard drives has low security. Summary of the Invention

[0005] This disclosure provides a protection device, method, and storage medium for portable hard drives, which can improve the protection of portable hard drives. The technical solution is as follows:

[0006] On one hand, a protection device for a portable hard drive is provided. The protection device includes: an interface unit for connecting to a computer and a first portable hard drive respectively; a storage unit for storing the correspondence between the portable hard drive's identifier, biometric data, and a key; a biometric detection unit for acquiring the first biometric data; and a processing unit connected to the interface unit, the storage unit, and the biometric detection unit respectively. The processing unit is used to acquire, according to the correspondence in the storage unit, the identifier of the first portable hard drive and the first key corresponding to the first biometric data, and to acquire a second key from an electronic key; to generate a first encryption key based on the first key and the second key; and to decrypt the partition table information of the first portable hard drive using the first encryption key, so that the computer can access the first portable hard drive.

[0007] Optionally, the processing unit is configured to generate the first encryption key by performing a parity-even combination operation on the first key and the second key to obtain the first encryption key.

[0008] Optionally, the processing unit is further configured to: calculate a first digest value of the first encryption key; compare the calculated first digest value with a digest value stored in the storage unit; and when a digest value identical to the first digest value exists in the storage unit, decrypt the partition table information of the first portable hard drive using the first encryption key.

[0009] Optionally, the interface unit is further configured to connect to the computer and the second portable hard drive; the biometric detection unit is further configured to acquire second biometric data; the protection device further includes a random number generator connected to the processing unit for generating random numbers; the processing unit is configured to use the random number as a second encryption key; calculate the digest value of the second encryption key and store the digest value of the second encryption key in the storage unit; obtain a third key and a fourth key based on the second encryption key; store the identifier of the second portable hard drive, the second biometric data, and the third key in the storage unit, and store the fourth key in the electronic key; and encrypt the partition table information of the second portable hard drive using the second encryption key.

[0010] Optionally, obtaining the third and fourth keys based on the second encryption key includes: performing a parity-even split operation on the second encryption key to obtain the third and fourth keys.

[0011] Optionally, the processing unit is further configured to perform at least one of the following: receiving user data sent by the computer, encrypting the user data using the first encryption key, and storing the encrypted user data in the first portable hard drive; decrypting the user data in the first portable hard drive and transmitting the decrypted user data to the computer; and receiving control information sent by the computer and forwarding the control information to the first portable hard drive.

[0012] Optionally, the protection device further includes: a display unit connected to the processing unit for displaying the working status of the protection device; and / or a voice unit connected to the processing unit for providing voice broadcast of the operation of the protection device.

[0013] On the other hand, a method for protecting a portable hard drive is provided, the method comprising: obtaining an identifier of a first portable hard drive and first biometric data; obtaining a first key corresponding to the identifier of the first portable hard drive and the first biometric data according to the correspondence between the identifier of the portable hard drive, the biometric data and the key; obtaining a second key from an electronic key; generating a first encryption key based on the first key and the second key; and decrypting the partition table information of the first portable hard drive using the first encryption key, so that a computer can access the first portable hard drive.

[0014] Optionally, generating the first encryption key based on the first key and the second key includes: performing a parity-even combination operation on the first key and the second key to obtain the first encryption key.

[0015] Optionally, the protection method further includes at least one of the following: receiving user data sent by a computer, encrypting the user data using the first encryption key, and storing the encrypted user data in the first portable hard drive; decrypting the user data in the first portable hard drive and transmitting the decrypted user data to the computer; and receiving control information sent by the computer and forwarding the control information to the first portable hard drive.

[0016] Optionally, the protection method further includes: obtaining the identifier of the second portable hard drive and the second biometric data; generating a random number as a second encryption key; calculating and storing the digest value of the second encryption key; obtaining a third key and a fourth key based on the second encryption key; storing the correspondence between the identifier of the second portable hard drive, the second biometric data, and the third key; storing the fourth key in an electronic key; and encrypting the partition table information of the second portable hard drive using the second encryption key.

[0017] Optionally, obtaining the third and fourth keys based on the second encryption key includes: performing a parity-even split operation on the second encryption key to obtain the third and fourth keys.

[0018] On the other hand, a computer-readable storage medium is provided for storing at least one computer program for executing any of the foregoing protection methods.

[0019] The beneficial effects of the technical solutions provided in this disclosure include at least the following:

[0020] In this embodiment, the processing unit obtains the identifier of the first portable hard drive and the first key corresponding to the first biometric data, as well as the second key from the electronic key, based on the correspondence in the storage unit. The first key is stored in the storage unit, and the second key is stored in the electronic key. When needed, a first encryption key is generated based on the first and second keys. The encryption key is stored separately in two parts, which improves the security of the encryption key and thus enhances the protection of the portable hard drive. Attached Figure Description

[0021] To more clearly illustrate the technical solutions in the embodiments of this disclosure, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this disclosure. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0022] Figure 1 This is a structural block diagram of a protective device for a portable hard drive provided in an embodiment of this disclosure;

[0023] Figure 2 This is a structural block diagram of another mobile hard drive protection device provided in an embodiment of this disclosure;

[0024] Figure 3 This is a flowchart of a method for protecting a portable hard drive provided in an embodiment of this disclosure;

[0025] Figure 4 This is a flowchart of a mobile hard drive registration process according to an embodiment of this disclosure. Detailed Implementation

[0026] To make the objectives, technical solutions, and advantages of this disclosure clearer, the embodiments of this disclosure will be described in further detail below with reference to the accompanying drawings.

[0027] Figure 1 This is a block diagram of a protection device for a portable hard drive provided in an embodiment of this disclosure. See also... Figure 1 The protection device 10 includes: an interface unit 11, a storage unit 12, a biometric detection unit 13, and a processing unit 14.

[0028] Interface unit 11 is used to connect to both a computer and a first portable hard drive. Storage unit 12 is used to store the correspondence between the portable hard drive's identifier, biometric data, and a key. Biometric detection unit 13 is used to acquire the first biometric data. Processing unit 14 is connected to interface unit 11, storage unit 12, and biometric detection unit 13. Processing unit 14 is used to acquire, based on the correspondence in storage unit 12, the first key corresponding to the first portable hard drive's identifier and the first biometric data, and to acquire a second key from an electronic key; generate a first encryption key based on the first and second keys; and decrypt the partition table information of the first portable hard drive using the first encryption key, so that the computer can access the first portable hard drive.

[0029] In this embodiment, the processing unit obtains the identifier of the first portable hard drive and the first key corresponding to the first biometric data, as well as the second key from the electronic key, based on the correspondence in the storage unit. The first key is stored in the storage unit, and the second key is stored in the electronic key. When needed, a first encryption key is generated based on the first and second keys. The encryption key is stored separately in two parts, which improves the security of the encryption key and thus enhances the protection of the portable hard drive.

[0030] Figure 2 This is a block diagram of another portable hard drive protection device provided in this disclosure embodiment. See also... Figure 2 The protection device 20 includes an interface unit 21, a storage unit 22, a biometric detection unit 23, and a processing unit 24. The interface unit 21 is used to connect to both a computer and a first portable hard drive. The storage unit 22 stores the correspondence between the portable hard drive's identifier, biometric data, and a key. The biometric detection unit 23 acquires the first biometric data. The processing unit 24 is connected to the interface unit 21, the storage unit 22, and the biometric detection unit 23. The processing unit 24 is used to acquire, based on the correspondence in the storage unit 22, the first key corresponding to the first portable hard drive's identifier and the first biometric data, and to acquire a second key from an electronic key; to generate a first encryption key based on the first and second keys; and to decrypt the partition table information of the first portable hard drive using the first encryption key, thereby enabling the computer to access the first portable hard drive.

[0031] In some examples, interface unit 21 includes at least two interfaces. One interface is used to connect to a computer, and the other interface is used to connect to a portable hard drive. Exemplarily, the interface is a Universal Serial Bus (USB) interface.

[0032] Storage unit 22 includes a read-write memory that supports reading and writing by processing unit 24. In some examples, storage unit 22 includes flash memory or random access memory (RAM), etc.

[0033] In some examples, the correspondence between the portable hard drive's identifier, biometric data, and key includes at least one set of correspondences. Each set includes a portable hard drive's identifier, a set of biometric data, and a key, and there is a correspondence between the portable hard drive's identifier, biometric data, and key within each set.

[0034] When the mapping relationship includes multiple groups, the identifiers of the portable hard drives in different groups are different. When multiple portable hard drive identifiers exist, the protection device protects multiple portable hard drives. When the mapping relationship includes multiple groups, the biometric data in different groups can be the same or different. In this way, the same user can use multiple portable hard drives.

[0035] In some examples, the mapping between the external hard drive's identifier, biometric data, and key is implemented using a mapping table. For example, this mapping is implemented in the form of Table 1.

[0036] Table 1

[0037] External hard drive label A1 Biometric data b1 Key c1 The external hard drive's label A2 Biometric data b2 key c2 External hard drive label A3 Biometric data b2 Key c3

[0038] In other examples, the correspondence between the hard drive's identifier, biometric data, and key is implemented using arrays, such as {a1, b1, c1}, {a2, b2, c2}, {a3, b2, c3}, etc.

[0039] In other examples, the correspondence between the portable hard drive's identifier, biometric data, and key includes at least one portable hard drive identifier and a key, as well as biometric data, with a correspondence between the portable hard drive's identifier and key, and the biometric data stored separately. For example, this correspondence is implemented in the form of Tables 2 and 3.

[0040] Table 2

[0041] External hard drive label A1 Key c1 The external hard drive's label A2 key c2 External hard drive label A3 Key c3

[0042] Table 3

[0043] Biometric data b1 Biometric data b2 Biometric data b3

[0044] In some examples, the identifier of the first external hard drive includes the external hard drive's serial number. This disclosure does not limit this, as long as it can uniquely identify the external hard drive.

[0045] In some examples, the first biometric data includes at least one of facial information, iris information, and fingerprint information.

[0046] When the first biometric data includes facial information or iris information, the biometric detection unit 23 includes a camera for acquiring facial information or iris information and sending the acquired facial information or iris information to the processing unit 24. When the first biometric data includes fingerprint information, the biometric detection unit 23 includes a fingerprint detection module for acquiring fingerprint information and sending the acquired fingerprint information to the processing unit 24.

[0047] When processing unit 24 receives the first biometric data, it retrieves the identifier of the first portable hard drive and the first key corresponding to the first biometric data based on the correspondence in storage unit 22. In some examples, processing unit 24 uses the identifier of the first portable hard drive and the first biometric data as indexes to search for the key corresponding to the identifier of the first portable hard drive and the first biometric data in the correspondence as the first key. In other examples, processing unit 24 uses the identifier of the first portable hard drive as an index to search for the key corresponding to the identifier of the first portable hard drive in the correspondence as the first key.

[0048] Optionally, the processing unit 24 verifies the first biometric data to check if it exists in the corresponding relationship in the storage unit 22. In some examples, when the verification is successful (i.e., the first biometric data can be found in the storage unit 22), the key corresponding to the identifier of the first portable hard drive is then searched as the first key. In other examples, when the verification fails (i.e., the first biometric data cannot be found in the storage unit 22), the first key cannot be found in the corresponding relationship in the storage unit 22, and the computer cannot access the first portable hard drive.

[0049] In some examples, the protection device includes an electronic key insertion interface for connecting an electronic key, or includes a near-field communication unit, such as a near-field communication (NFC) module, for interacting with the electronic key to obtain a second key from the electronic key.

[0050] The electronic key is a separate device, such as a mobile terminal, that the user carries with them and uses only to store the key.

[0051] Optionally, the processing unit 24 is configured to generate a first encryption key by performing a parity-even combination operation on the first key and the second key. Here, the parity-even combination operation means representing the first key and the second key respectively using binary data, treating the bits of the first key as odd bits and the bits of the second key as even bits, and merging them into a new data block as the first encryption key.

[0052] The advantage of using parity-even combination operation is that the algorithm is simple and easy to implement, and it effectively improves the security of encrypted key storage.

[0053] Optionally, storage unit 22 also stores a digest value of at least one encryption key. This digest value is generated during the registration process of the portable hard drive. See below for the registration process.

[0054] The processing unit 24 calculates the first digest value of the first encryption key and compares the calculated first digest value with the digest value stored in the storage unit 22. When there is a digest value in the storage unit 22 that is the same as the first digest value, the first encryption key is used to decrypt the partition table information of the first portable hard drive.

[0055] After generating the first encryption key, its digest value is compared to add another layer of verification, further improving the security of the encryption key.

[0056] In some examples, processing unit 24 includes a processing chip, such as a ZYNQ (a scalable processing platform from Xilinx) chip. This chip module has high integration and stability. The chip includes a Processing System (PS) and Programmable Logic (PL). The PS implements flow control, and the PL implements encryption / decryption algorithms. The PS and PL communicate through an Advanced eXtensible Interface (AXI) to allow the PS to invoke the encryption / decryption algorithms. Interface unit 21, storage unit 22, and biometric detection unit 23 are respectively connected to the PS of the ZYNQ chip to realize the PS's flow control over interface unit 21, storage unit 22, and biometric detection unit 23. Interface unit 21 is connected to the PS of the ZYNQ chip through a Universal Serial Bus (USB) interface, storage unit 22 is connected to the PS of the ZYNQ chip through a Serial Peripheral Interface (SPI), and biometric detection unit 23 is connected to the PS of the ZYNQ chip through a Universal Asynchronous Receiver Transmitter (UART) interface.

[0057] In some examples, the processing unit 24 further includes a clock circuit and a power supply circuit. The clock circuit may use a 50MHz crystal oscillator to provide clock input to the processing chip. The power supply circuit can be charged after being connected to a computer via the interface unit 21, or it can power the processing chip. Exemplarily, the power supply circuit includes a 5V DC output circuit.

[0058] Optionally, the processing unit 24 is also used to receive user data sent by the computer, encrypt the user data using the first encryption key, and store the encrypted user data in the first portable hard drive.

[0059] Optionally, the processing unit 24 is also used to decrypt the user data in the first portable hard drive and transfer the decrypted user data to the computer.

[0060] In the embodiments disclosed herein, the encryption and decryption algorithms may be Advanced Encryption Standard (AES) or SM4, etc., and this disclosure does not limit them.

[0061] Optionally, the processing unit 24 is also used to receive control information sent by the computer and forward the control information to the first mobile hard drive.

[0062] In this embodiment of the present disclosure, the processing unit 24 receives a data frame sent by a computer, parses the data frame, and distinguishes whether the data frame is user data or control information sent by the computer according to the frame type field in the data frame protocol format. The frame type field carries indication information. When the indication information is a first value, it indicates that the data frame is user data sent by the computer. When the indication information is a second value, it indicates that the data frame is control information sent by the computer.

[0063] The processing unit 24 performs layered processing on the information transmitted between the computer and the first mobile hard drive, encrypting and decrypting user data with high security requirements, and directly forwarding control information with low security requirements, thereby improving the security of data storage and the data transmission rate.

[0064] In this embodiment, the correspondence between the portable hard drive's identifier, biometric data, and key, as well as the key itself, is generated and stored in the corresponding device during the portable hard drive's registration process. The registration process for a second portable hard drive is described below using this as an example. This second portable hard drive can be the same as the first portable hard drive, or it can be a different portable hard drive.

[0065] Interface unit 21 is also used to connect to a computer and a second portable hard drive. Biometric detection unit 23 is also used to acquire second biometric data. The protection device also includes a random number generator 25, connected to processing unit 24, for generating random numbers. Processing unit 24 is used to use the random number as a second encryption key; calculate the digest value of the second encryption key and store the digest value of the second encryption key in storage unit 22; obtain a third key and a fourth key based on the second encryption key; store the identifier of the second portable hard drive, the second biometric data, and the third key in storage unit 22 respectively, and store the fourth key in an electronic key; and encrypt the partition table information of the second portable hard drive using the second encryption key.

[0066] Here, the correspondence between the identifier of the second portable hard drive, the second biometric data, and the third key constitutes the correspondence between the identifier of the portable hard drive, the biometric data, and the key.

[0067] In this embodiment, the processing unit is further configured to obtain the identifier of the second portable hard drive through the interface unit 21. When the identifier of the second portable hard drive is not present in the storage unit 22, the processing unit obtains the second biometric data through the biometric detection unit 23. This allows for the differentiation between registered and unregistered portable hard drives, enabling the execution of a registration process for unregistered portable hard drives.

[0068] In this embodiment of the disclosure, the second biometric data and the first biometric data can be the same biometric data or different biometric data.

[0069] Optionally, the processing unit 24 is configured to obtain the third key and the fourth key in the following manner: by performing a parity-even splitting operation on the second encryption key. Here, the parity-even splitting operation refers to representing the second encryption key in binary data, splitting the binary data according to the parity positions of the bits, using the bit string at the odd bit positions as the third key, and using the bit string at the even bit positions as the fourth key.

[0070] In embodiments of this disclosure, after the partition table information of the second portable hard drive is encrypted, each logical disk of the second portable hard drive becomes inaccessible. When the processing unit 24 includes a ZYNQ chip, the random number generator 25 is connected to the PS of the ZYNQ chip via a UART interface.

[0071] When registering the second portable hard drive, the processing unit uses the second encryption key to perform a parity-even split operation to obtain a third and a fourth key. The identifier of the second portable hard drive, the second biometric data, and the third key are stored correspondingly in the storage unit, while the fourth key is stored in the electronic key. Dividing the encryption key into two keys, one stored in the storage unit of the protection device and the other in the external electronic key, increases the security of the encryption key. Simultaneously, the digest value of the second encryption key is calculated, providing a digest value comparison verification during the use of the portable hard drive, thus enhancing the protection of the portable hard drive.

[0072] Optionally, the protection device further includes a display unit 26 and / or a voice unit 27. The display unit 26 is connected to the processing unit 24 and is used to display the operating status of the protection device. The voice unit 27 is connected to the processing unit 24 and is used to provide voice announcements regarding the operation of the protection device.

[0073] For example, the display unit 26 includes a liquid crystal display (LCD) or an organic light-emitting diode (OLED) display, etc. The voice unit 27 includes a speaker, etc.

[0074] When the processing unit 24 includes a ZYNQ chip, the display unit 26 is connected to the PS of the ZYNQ chip through an InterIntegrated Circuit (I2C) interface, and the voice unit 27 is connected to the PS of the ZYNQ chip through a General Purpose Input Output (GPIO) interface. The PS controls the voice unit 27 to perform voice broadcasts, such as voice prompts to collect biometric data.

[0075] Optionally, in this embodiment of the present disclosure, the protection device can also perform operations such as viewing or deleting the identifier of the portable hard drive stored in the storage unit 22 according to user operation instructions.

[0076] In some examples, after the interface unit 21 is connected to the computer, the processing unit 24 receives a viewing instruction to view the identifier of the portable hard drive in the protection device. The processing unit 24 then sends relevant information about the portable hard drive to the computer according to the viewing instruction, so that the relevant information is displayed on the computer. In some examples, the relevant information about the portable hard drive includes at least the identifier of the portable hard drive. Optionally, the relevant information about the portable hard drive may also include biometric data associated with the identifier of the portable hard drive. Here, association refers to the identifier and biometric data of portable hard drives belonging to the same correspondence.

[0077] In other examples, after the interface unit 21 is connected to the computer, the processing unit 24 receives a deletion instruction. The deletion instruction is used to indicate the deletion of the identifier of the portable hard drive or the corresponding relationship to which the identifier of the portable hard drive belongs, which is stored in the storage unit 22. The processing unit 24 deletes the corresponding identifier of the portable hard drive or the corresponding relationship to which the identifier of the portable hard drive belongs, which is stored in the storage unit 22 according to the deletion instruction.

[0078] In this embodiment, the processing unit obtains the identifier of the first portable hard drive and the first key corresponding to the first biometric data, as well as the second key from the electronic key, based on the correspondence in the storage unit. The first key is stored in the storage unit, and the second key is stored in the electronic key. When needed, a first encryption key is generated based on the first and second keys. The encryption key is stored separately in two parts, which improves the security of the encryption key and thus enhances the protection of the portable hard drive.

[0079] Furthermore, after generating the encryption key, the security of the encryption key is further improved by comparing the digest value of the encryption key.

[0080] In addition, the processing unit performs layered processing on the information transmitted between the computer and the external hard drive, encrypting and decrypting data with high security requirements, and directly forwarding control information with low security requirements, thereby improving the security of data storage and the data transmission rate.

[0081] Figure 3 This is a flowchart of a method for protecting a portable hard drive provided in an embodiment of this disclosure, as follows: Figure 3 As shown, the protection method includes:

[0082] Step 301: Obtain the identifier of the first portable hard drive and the first biometric data.

[0083] For information regarding the identification of the first portable hard drive and the relevant content of the first biometric data, please refer to [link / reference]. Figure 2 The illustrated embodiment is described in detail below.

[0084] Step 302: Based on the correspondence between the identifier of the portable hard drive, the biometric data, and the key, obtain the first key corresponding to the identifier of the first portable hard drive and the first biometric data.

[0085] For details regarding the correspondence between the external hard drive's identifier, biometric data, and key, please refer to [link / reference]. Figure 2 The illustrated embodiment is described in detail below.

[0086] Optionally, the identifier of the first portable hard drive is verified to determine whether it exists in the correspondence relationship. If the identifier of the first portable hard drive does not exist in the correspondence relationship, the first key cannot be obtained, and the first portable hard drive is considered not to be registered. If the identifier of the first portable hard drive exists in the correspondence relationship, the first key can be obtained.

[0087] Optionally, the first biometric data can be verified; the verification method is described in [reference needed]. Figure 2 The illustrated embodiment is described in detail below.

[0088] Step 303: Obtain the second key from the electronic key.

[0089] Step 304: Generate a first encryption key based on the first key and the second key.

[0090] Optionally, the first encryption key is generated by performing a parity-even combination operation on the first key and the second key.

[0091] Optionally, the correspondence between the portable hard drive's identifier, biometric data, and key also includes a digest value corresponding to the encryption key.

[0092] Optionally, the protection method further includes: calculating a first digest value of the first encryption key; comparing the calculated first digest value with a digest value in a corresponding relationship; and when a digest value identical to the first digest value exists, performing step 305. In other embodiments, step 305 can also be performed directly after the first encryption key is generated.

[0093] Step 305: Decrypt the partition table information of the first portable hard drive using the first encryption key, so that the computer can access the first portable hard drive.

[0094] Optionally, the protection method further includes at least one of the following:

[0095] Step 306: Receive user data sent by the computer, encrypt the user data using the first encryption key, and store the encrypted user data in the first external hard drive;

[0096] Step 307: Decrypt the user data in the first external hard drive and transfer the decrypted user data to the computer; and

[0097] Step 308: Receive control information sent by the computer and forward the control information to the first external hard drive.

[0098] In this embodiment of the disclosure, a first encryption key is generated based on a first key and a second key, which improves the security of the encryption key. In addition, the digest value of the encryption key is compared to further enhance the protection of the portable hard drive.

[0099] Optionally, the correspondence between the external hard drive's identifier, biometric data, and key can be configured according to... Figure 4 Generate using the method shown. Figure 4 The document demonstrates the registration process for an external hard drive, such as... Figure 4 As shown, the registration process for this portable hard drive includes:

[0100] Step 401: Obtain the identifier and second biometric data of the second portable hard drive.

[0101] Step 402: Generate a random number as the second encryption key.

[0102] Step 403: Calculate and store the digest value of the second encryption key.

[0103] Step 404: Obtain the third and fourth keys based on the second encryption key.

[0104] Optionally, the third and fourth keys are obtained by performing a parity-even split operation on the second encryption key.

[0105] Step 405: Store the correspondence between the identifier of the second portable hard drive, the second biometric data, and the third key.

[0106] Step 406: Store the fourth key in the electronic key.

[0107] Step 407: Encrypt the partition table information of the second portable hard drive using the second encryption key.

[0108] In this embodiment of the disclosure, the portable hard drive is registered upon initial connection, and the correspondence between the portable hard drive's identifier, biometric data, and key, as well as the digest value of the encryption key, is saved. Then, the partition table information of the portable hard drive is encrypted to complete the encryption of the portable hard drive, providing protection for the subsequent use of the portable hard drive.

[0109] It should be noted that the mobile hard drive protection method provided in the above embodiments is only illustrated by the division of the above steps. In actual applications, the above steps can be divided into different steps as needed. Furthermore, the mobile hard drive protection method and the mobile hard drive protection device embodiments provided in the above embodiments belong to the same concept, and their specific implementation process can be found in the method embodiments, which will not be repeated here.

[0110] The division of method steps in this embodiment is illustrative and is merely a logical functional division. In actual implementation, there may be other division methods.

[0111] This disclosure provides a computer-readable storage medium storing at least one line of program code, which is loaded and executed by a processor. Figure 3 The mobile hard drive protection method shown in the corresponding embodiment.

[0112] This disclosure provides a computer program product or computer program including computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the portable hard drive protection method provided in various optional implementations of the above aspects.

[0113] The above description is merely an optional embodiment of this disclosure and is not intended to limit this disclosure. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this disclosure should be included within the protection scope of this disclosure.

Claims

1. A protective device for a portable hard drive, characterized in that, The protective device includes: An interface unit is used to connect to both the computer and the first external hard drive. The storage unit is used to store the correspondence between the portable hard drive's identifier, biometric data, and key. A biometric detection unit is used to acquire first biometric data; The processing unit is connected to the interface unit, the storage unit, and the biometric detection unit, respectively. The processing unit is configured to: obtain the identifier of the first portable hard drive and the first key corresponding to the first biometric data according to the correspondence in the storage unit; interact with the electronic key via an electronic key insertion interface or a proximity communication unit to obtain a second key from the electronic key, the electronic key existing independently of the protection device; generate a first encryption key based on the first key and the second key; and decrypt the partition table information of the first portable hard drive using the first encryption key, so that the computer can access the first portable hard drive.

2. The protection device according to claim 1, characterized in that, The processing unit is configured to generate the first encryption key in the following manner: The first encryption key is obtained by performing a parity-even combination operation on the first key and the second key.

3. The protection device according to claim 1, characterized in that, The processing unit is also used for, Calculate the first digest value of the first encryption key; The calculated first digest value is compared with the digest value stored in the storage unit; When a digest value identical to the first digest value exists in the storage unit, the partition table information of the first portable hard drive is decrypted using the first encryption key.

4. The protection device according to claim 1, characterized in that, The interface unit is also used to connect to the computer and the second portable hard drive; The biometric detection unit is also used to acquire second biometric data; The protection device also includes a random number generator connected to the processing unit for generating random numbers; The processing unit is used to use the random number as a second encryption key; Calculate the digest value of the second encryption key and store the digest value of the second encryption key in the storage unit; A third key and a fourth key are obtained based on the second encryption key; the identifier of the second portable hard drive, the second biometric data, and the third key are stored in the storage unit, and the fourth key is stored in the electronic key; and the partition table information of the second portable hard drive is encrypted using the second encryption key.

5. The protective device according to any one of claims 1 to 4, characterized in that, The processing unit is further configured to perform at least one of the following: The system receives user data sent by the computer, encrypts the user data using the first encryption key, and stores the encrypted user data in the first portable hard drive. The user data in the first portable hard drive is decrypted, and the decrypted user data is transferred to the computer; and The system receives control information sent by the computer and forwards the control information to the first portable hard drive.

6. The protective device according to any one of claims 1 to 4, characterized in that, The protective device also includes: A display unit, connected to the processing unit, is used to display the working status of the protection device; And / or, A voice unit, connected to the processing unit, is used to provide voice announcements regarding the operation of the protection device.

7. A method for protecting a portable hard drive, characterized in that, The protection method is implemented based on the protection device as described in any one of claims 1 to 6, and the protection method includes: Obtain the identifier and first biometric data of the first portable hard drive; Based on the correspondence between the identifier of the portable hard drive, biometric data, and key, obtain the identifier of the first portable hard drive and the first key corresponding to the first biometric data; The second key is obtained by interacting with the electronic key through an electronic key insertion interface or a proximity communication module, the electronic key existing independently of the protection device; A first encryption key is generated based on the first key and the second key; The partition table information of the first portable hard drive is decrypted using the first encryption key, so that the computer can access the first portable hard drive.

8. The protection method according to claim 7, characterized in that, The step of generating a first encryption key based on the first key and the second key includes: The first encryption key is obtained by performing a parity-even combination operation on the first key and the second key.

9. The protection method according to claim 7, characterized in that, It also includes at least one of the following: The system receives user data sent by the computer, encrypts the user data using the first encryption key, and stores the encrypted user data in the first portable hard drive. The user data in the first external hard drive is decrypted, and the decrypted user data is transferred to the computer. as well as The system receives control information sent by the computer and forwards the control information to the first portable hard drive.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores at least one piece of program code, which is loaded by a processor to execute the protection method according to any one of claims 7 to 9.

Images