A USB port data security protection method and system

Abstract

The application discloses a USB port data security protection method and system, and relates to the technical field of information security, which comprises the following steps: starting a target device, wherein the target device comprises a plurality of USB ports; scanning all devices connected to the plurality of USB ports through BIOS to obtain a plurality of device types; recording a plurality of USB ports corresponding to specified device types in the plurality of device types as a plurality of specified USB ports, and recording other USB ports as a plurality of unspecified USB ports; judging whether a USB protection function is turned on or not, if yes, closing the connection between the plurality of unspecified USB ports and the target device, and if not, using the plurality of USB ports. The application solves the technical problem that the USB protection function is incompatible and inconvenient to use in the prior art, and achieves the technical effects of expanding the application range of the USB protection function and improving the convenience.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and in particular to a method and system for protecting USB port data security. Background Technology

[0002] USB is an external bus standard used in computer systems, characterized by high data transfer efficiency, high scalability, and ease of use. Due to its widespread use, USB has become a common method for illegal data theft in information security incidents.

[0003] Currently, to address USB information security issues, some technicians utilize the Smart USB Protection function to detect inserted USB devices, disable storage devices, and allow the use of keyboards and mice. However, this function cannot be applied under Linux systems. Other technicians utilize the USB Individual Disable function, which uses the built-in USB controller to configure and disable USB ports, allowing only a few designated USB ports to be used for mice and keyboards, while other USB ports are unusable. However, this function introduces inconvenience, requiring users to remember which USB ports are configured to be used.

[0004] Existing USB port information protection functions suffer from technical problems such as limited application systems and low ease of use. Summary of the Invention

[0005] The purpose of this application is to provide a USB port data security protection method and system to address the technical problems of existing USB port information protection functions, such as limited application systems and low ease of use.

[0006] In view of the above problems, this application provides a method and system for protecting USB port data security.

[0007] In a first aspect, this application provides a method for protecting USB port data security, the method comprising: starting a target device, wherein the target device includes a plurality of USB ports;

[0008] The BIOS scans all devices connected to the multiple USB ports to obtain multiple device types.

[0009] Record several USB ports corresponding to a specified device type among the multiple device types as several specified USB ports, and treat the other USB ports as several unspecified USB ports;

[0010] Determine whether the USB protection function is enabled. If yes, close the connection between the unspecified USB ports and the target device. If no, use the multiple USB ports.

[0011] Secondly, this application also provides a USB port data security protection system for performing a USB port data security protection method as described in the first aspect, wherein the system includes: a device startup module for starting a target device, wherein the target device includes multiple USB ports;

[0012] The device type acquisition module is used to scan all devices connected to the multiple USB ports through the BIOS to obtain multiple device types;

[0013] The designated port recording module is used to record several USB ports corresponding to a designated device type among the multiple device types, as several designated USB ports, and other USB ports as several unspecified USB ports;

[0014] The port protection module is used to determine whether the USB protection function is enabled. If it is enabled, the connection between the plurality of unspecified USB ports and the target device is closed; otherwise, the plurality of USB ports are used.

[0015] Thirdly, this application also provides an electronic device, which includes a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, it implements the steps of the method in the first aspect.

[0016] Fourthly, this application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps of the method in the first aspect.

[0017] One or more technical solutions provided in this application have at least the following technical effects or advantages:

[0018] The technical solution provided in this application involves scanning all devices connected to multiple USB ports via the BIOS of a device with multiple USB ports. This process identifies multiple device types, records several USB ports corresponding to specific device types as designated USB ports, and treats the remaining USB ports as undesignated USB ports. The system then determines whether USB protection is enabled. If enabled, the connection to the undesignated USB ports is closed; otherwise, the connection to the devices remains open. This application establishes a novel USB port protection method. By using the BIOS to detect the types of devices connected to multiple USB ports in real time and recording the USB ports connected to specific device types as designated USB ports, the information connection to other USB ports is disconnected, achieving information security protection and preventing data theft and other information security issues. This method is applicable to various operating systems, and when repeatedly enabling and disabling USB protection, there is no need to remember designated USB ports for using the mouse, keyboard, etc., resulting in greater convenience. This significantly improves the applicability and ease of use of USB port protection.

[0019] The above description is only an overview of the technical solution of this application. In order to better understand the technical means of this application and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this application more obvious and understandable, the following are specific embodiments of this application. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely exemplary. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0021] Figure 1 A flowchart illustrating a USB port data security protection method provided in this application embodiment;

[0022] Figure 2 A logical diagram illustrating a USB port data security protection method provided in an embodiment of this application;

[0023] Figure 3 A schematic diagram of a USB port data security protection system provided in this application embodiment;

[0024] Figure 4 This is a schematic diagram of the structure of an exemplary electronic device of this application.

[0025] Explanation of reference numerals in the attached drawings: Device startup module 11, Connected device type acquisition module 12, Specified port recording module 13, Port protection module 14, Electronic device 300, Memory 301, Processor 302, Communication interface 303, Bus architecture 304. Detailed Implementation

[0026] This application provides a USB port data security protection method and system to address the technical problems of existing USB port information protection functions, such as limited application systems and low ease of use.

[0027] The acquisition, storage, use, and processing of data in this application all comply with the relevant provisions of national laws and regulations.

[0028] The technical solutions of this application will now be clearly and completely described with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. It should be understood that this application is not limited to the exemplary embodiments described herein. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application. It should also be noted that, for ease of description, only the parts related to this application are shown in the accompanying drawings, not all of them.

[0029] Example 1

[0030] like Figure 1 As shown, this application provides a method for protecting USB port data security, the method comprising:

[0031] S100: Start the target device, wherein the target device includes multiple USB ports;

[0032] Figure 2 This application provides a possible logical schematic diagram of a method according to an embodiment, such as... Figure 1 and Figure 2 As shown in the embodiments of this application, the target device is a computer device that requires the use of USB port protection functionality. The target device includes multiple USB ports to provide bus connections with different external devices, such as mice, keyboards, hard drives, and USB flash drives. For example, the target device includes four USB ports.

[0033] It should be noted that the target device may be an operating system of various types, depending on whether it can implement the method provided in the embodiments of this application. For example, the operating system of the target device is a Windows system or a Linux system.

[0034] S200: Scan all devices connected to the multiple USB ports via the BIOS to obtain multiple device types;

[0035] Specifically, when starting and using the target device, it is necessary to connect external devices through multiple USB ports to use the target device. After connecting external devices, the BIOS scans the device types of all devices connected to the multiple USB ports to obtain multiple device types.

[0036] The BIOS (Basic Input Output System) is a set of programs embedded in a ROM chip on the motherboard of the target device. It stores the most important basic input and output programs of the computer device, the power-on self-test program, and the system startup program. It can read and write specific information about system settings from CMOS. Its main function is to provide the computer with the lowest level and most direct hardware settings and control.

[0037] S300: Record several USB ports corresponding to a specified device type among the multiple device types, as several specified USB ports, and treat the other USB ports as several unspecified USB ports;

[0038] Specifically, based on the multiple device types, the USB ports connected to the specified device type are recorded as several specified USB ports. Meanwhile, the other USB ports within the multiple specified USB ports are recorded as several unspecified USB ports. It can be understood that the several unspecified USB ports include USB ports not connected to the specified device type and USB ports not connected to any device.

[0039] In a preferred embodiment of this application, the specified device types include mouse and keyboard, while other device types are unspecified and may pose information security risks through the USB port.

[0040] S400: Determine whether the USB protection function is enabled. If yes, close the connection between the plurality of unspecified USB ports and the target device. If no, use the plurality of USB ports.

[0041] Step S400 in the method provided in this application embodiment includes:

[0042] S410: The BIOS notifies the EC to disable the connection between the plurality of unspecified USB ports and the target device.

[0043] Specifically, it determines whether the USB protection function of the current target device is enabled, and this USB protection function can be turned off or on by the user.

[0044] If so, the BIOS will notify the EC to close the connection between the aforementioned unspecified USB ports and the target device. The EC (Embedded controller) is a microcontroller chip used to handle and control functions such as power-on, charging, and USB port control.

[0045] After disconnecting several unspecified USB ports from the target device, these unspecified USB ports cannot be used to connect to or be used with the target device. This prevents the storage device from connecting to the target device through unspecified USB ports, thus avoiding information security risks and protecting USB port information.

[0046] If not, USB protection is not currently enabled. Use all multiple USB ports for the target device application, for example, in a secure information environment.

[0047] Optionally, if the target device includes a chip or functional module that can individually control the information connection between multiple USB ports and the target device, the connection between several unspecified USB ports and the target device can be turned off or on by notifying the chip or functional module through the BIOS to set the status bits of several unspecified USB ports. These unspecified USB ports cannot be used, thereby protecting the information of the USB ports and safeguarding the data security within the target device.

[0048] In summary, the USB port data security protection method provided in this application has the following technical effects:

[0049] This application establishes a novel USB port protection method. It uses the BIOS to detect the types of devices connected to multiple USB ports in real time, records the USB port connected to a specified device type as the designated USB port, and disconnects the information connection between other undesignated USB ports and the devices. This achieves information security protection and prevents information security issues such as data theft. This method is applicable to various operating systems, and when repeatedly turning the USB protection function on and off, there is no need to remember the designated USB port for using the mouse, keyboard, etc., resulting in greater convenience. This achieves the technical effect of improving the applicability and ease of use of the USB port protection function.

[0050] Example 2

[0051] Based on the same inventive concept as the USB port data security protection method in the foregoing embodiments, such as Figure 3 As shown, this application also provides a USB port data security protection system, the system comprising:

[0052] Device startup module 11 is used to start a target device, wherein the target device includes multiple USB ports;

[0053] The device type acquisition module 12 is used to scan all devices connected to the multiple USB ports through the BIOS to obtain multiple device types;

[0054] The designated port recording module 13 is used to record several USB ports corresponding to a designated device type among the multiple device types, as several designated USB ports, and other USB ports as several undesignated USB ports;

[0055] The port protection module 14 is used to determine whether the USB protection function is enabled. If it is enabled, the connection between the plurality of unspecified USB ports and the target device is closed; otherwise, the plurality of USB ports are used.

[0056] Specifically, disabling the connection between the plurality of unspecified USB ports and the target device includes:

[0057] The BIOS notifies the EC to disable the connection between the specified number of unspecified USB ports and the target device.

[0058] The target device's operating system is either Windows or Linux.

[0059] The specified device types include mouse and keyboard.

[0060] Example 3

[0061] Based on the same inventive concept as the USB port data security protection method in the foregoing embodiments, such as Figure 4 As shown, this application also provides an electronic device 300, which includes a memory 301 and a processor 302. The memory 301 stores a computer program, and when the calculator program is executed by the processor 302, it implements the steps of a method of the embodiment.

[0062] The electronic device 300 includes a processor 302, a communication interface 303, and a memory 301. Optionally, the electronic device 300 may also include a bus architecture 304. The communication interface 303, processor 302, and memory 301 can be interconnected via the bus architecture 304; the bus architecture 304 can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus architecture 304 can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 4The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0063] Processor 302 may be a CPU, microprocessor, ASIC, or one or more integrated circuits used to control the execution of programs according to the present application.

[0064] Communication interface 303 uses any transceiver-like device for communicating with other devices or communication networks, such as Ethernet, radio access network (RAN), wireless local area network (WLAN), wired access network, etc.

[0065] Memory 301 may be ROM or other types of static storage devices capable of storing static information and instructions, RAM or other types of dynamic storage devices capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD ROM) or other optical disc storage, optical disc storage (including compressed optical discs, laser discs, optical discs, digital universal optical discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but not limited thereto. Memory may exist independently and be connected to the processor via bus architecture 304. Memory may also be integrated with the processor.

[0066] The memory 301 stores computer execution instructions for implementing the scheme of this application, and its execution is controlled by the processor 302. The processor 302 executes the computer execution instructions stored in the memory 301, thereby implementing the steps of the method in the above embodiment one of this application.

[0067] Example 4

[0068] Based on the same inventive concept as the USB port data security protection method in the foregoing embodiments, this application also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the method in Embodiment 1.

[0069] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Figure 1The USB port data security protection method and specific example in Embodiment 1 are also applicable to the USB port data security protection system of this embodiment. Through the foregoing detailed description of the USB port data security protection method, those skilled in the art can clearly understand the USB port data security protection system of this embodiment; therefore, for the sake of brevity, it will not be described in detail here. As for the apparatus disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple; relevant details can be found in the method section.

[0070] The above description of the disclosed embodiments enables those skilled in the art to make or use this application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this application. Therefore, this application is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for protecting data security at a USB port, characterized in that, The method includes: Power on the target device, wherein the target device includes multiple USB ports; The BIOS scans all devices connected to the multiple USB ports to obtain multiple device types. Record several USB ports corresponding to a specified device type among the multiple device types as several specified USB ports, and treat the other USB ports as several unspecified USB ports; Determine whether the USB protection function is enabled. If yes, close the connection between the plurality of unspecified USB ports and the target device. If no, use the plurality of USB ports. Disconnecting the plurality of unspecified USB ports from the target device includes: The BIOS notifies the EC to disable the connection between the several unspecified USB ports and the target device. The specified device types include mouse and keyboard.

2. The method according to claim 1, characterized in that, The target device's operating system is either Windows or Linux.

3. A USB port data security protection system, characterized in that, The system includes: A device startup module is used to start a target device, wherein the target device includes multiple USB ports; The device type acquisition module is used to scan all devices connected to the multiple USB ports through the BIOS to obtain multiple device types; The designated port recording module is used to record several USB ports corresponding to a designated device type among the multiple device types, as several designated USB ports, and other USB ports as several unspecified USB ports; The port protection module is used to determine whether the USB protection function is enabled. If it is enabled, the connection between the plurality of unspecified USB ports and the target device is closed; otherwise, the plurality of USB ports are used. Specifically, disabling the connection between the plurality of unspecified USB ports and the target device includes: The BIOS notifies the EC to disable the connection between the several unspecified USB ports and the target device. The specified device types include mouse and keyboard.

4. An electronic device, characterized in that, The electronic device includes a memory and a processor, wherein the memory stores a computer program, which, when executed by the processor, implements the steps of any of claims 1-2.

5. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of any one of claims 1-2.

Images