An information storage device, an authentication method and system for the information storage device.

Abstract

The application discloses an information storage device, an authentication method and system of the information storage device, and the device comprises an information area, an issuing area, a password area and a dynamic verification area; the information area and the password area are unidirectionally connected, and the rest areas are mutually isolated. The authentication method of the information storage device comprises the following steps: when the device is inserted into a PC end, a mobile phone number stored in the dynamic verification area is acquired, and a verification code acquisition request is sent to a cloud end based on the mobile phone number; a verification code input by a user is verified, and when the verification code is verified, dynamic verification information stored in the dynamic verification area is acquired, and the dynamic verification information is sent to the mobile phone number; the dynamic verification information input by the user is verified, and when the dynamic verification information is verified, an information reading option is returned for the user to select; and according to a selection instruction triggered by the user based on the information reading option, corresponding feedback information is returned.

Description

Technical Field

[0001] This invention relates to the field of device authentication technology, and more specifically, to an information storage device, an authentication method for the information storage device, and a system thereof. Background Technology

[0002] Currently, portable storage devices have become common devices for users to exchange data due to their ability to provide large storage space and their portability. Common portable storage devices include portable hard drives and portable flash drives. Portable storage devices generally connect to computers via interfaces such as USB or 1394.

[0003] Data files saved by users to removable storage devices may be confidential. For security reasons, these files need to be encrypted and stored in an encrypted partition on the removable storage device. The difference between the encrypted partition and the public partition is that data stored in the encrypted partition cannot be arbitrarily deleted. Currently, there are two encryption / decryption schemes: software encryption / decryption and hardware encryption / decryption. With software encryption / decryption, since data in the public partition of the removable storage device can be freely modified, and passwords and keys must be securely stored, both passwords and keys must be stored in the encrypted partition. Obviously, this storage method means that once the password is cracked, the key in the encrypted partition will also be obtained. Furthermore, when someone steals data from the encrypted partition, they can also steal the key. As long as the password can be cracked, the decrypted data file can be obtained through the key. Therefore, this storage method results in low data security.

[0004] Therefore, a new information storage device and an authentication method for information storage devices are needed. Summary of the Invention

[0005] This invention proposes an information storage device, an authentication method for the information storage device, and a system to solve the problem of how to authenticate storage devices.

[0006] To address the above problems, according to one aspect of the present invention, an information storage device is provided, the device comprising: an information area, an issuance area, a password area, and a dynamic verification area; the information area and the password area are unidirectionally connected, and the other areas are isolated from each other;

[0007] The information area stores the encrypted business number information; the issuance area stores the device ID information and user identity information; the password area stores the static password information set by the user; and the dynamic verification area stores the static mobile phone number and dynamic verification information.

[0008] Preferably, the information area and the issuance area are composed of HDD or FLASH, the password area and the dynamic verification area are encryption chips, and the entire device is connected to a PC device via USB.

[0009] According to another aspect of the present invention, an authentication method based on an information storage device as described above is provided, the method comprising:

[0010] When the device is plugged into the PC, it obtains the mobile phone number stored in the dynamic verification area and sends a verification code retrieval request to the cloud based on the mobile phone number.

[0011] The system verifies the verification code entered by the user, and when the verification code is successfully verified, it retrieves the dynamic verification information stored in the dynamic verification area and sends the dynamic verification information to the mobile phone number.

[0012] The system validates the dynamic verification information entered by the user, and when the dynamic verification information passes the validation, it returns information reading options for the user to select.

[0013] Based on the user's selection command triggered by the information reading options, return the corresponding feedback information.

[0014] Preferably, the method further includes:

[0015] When the dynamic verification information passes verification, the dynamic verification information stored in the dynamic verification area is updated and synchronized to the cloud.

[0016] Preferably, the return of corresponding feedback information based on the user's selection instruction triggered by the information reading option includes:

[0017] When a user selects to read locally stored information, the information area is triggered to send the encrypted ID of the storage to the cloud in order to obtain detailed information returned by the cloud based on the encrypted ID;

[0018] When a user selects to read all cloud information corresponding to the device identity, the password area is triggered to verify the first password entered by the user, and to determine whether the first password is consistent with the stored static password information. If they are consistent, the issuing area is triggered to send the device ID information and user identity information to the cloud, so that the cloud returns all cloud information corresponding to the device ID information and user identity information.

[0019] Preferably, the method further includes:

[0020] When a user inputs a command to delete locally stored information or download all cloud information, the password area is triggered to verify the second password entered by the user. It is then determined whether the second password matches the stored static password information. If they match, the locally stored information is deleted or all cloud information is downloaded.

[0021] According to another aspect of the present invention, an authentication system based on the information storage device described above is provided, the system comprising:

[0022] The verification code request sending unit is used to obtain the mobile phone number stored in the dynamic verification area when the device is plugged into the PC, and send a verification code retrieval request to the cloud based on the mobile phone number;

[0023] The verification code verification unit is used to verify the verification code entered by the user, and when the verification code is successfully verified, to obtain the dynamic verification information stored in the dynamic verification area and send the dynamic verification information to the mobile phone number.

[0024] The dynamic verification information verification unit is used to verify the dynamic verification information input by the user, and when the dynamic verification information is verified successfully, it returns the information reading option for the user to select.

[0025] The information feedback unit is used to return corresponding feedback information based on the selection instruction triggered by the user based on the information reading option.

[0026] Preferably, the system further includes:

[0027] The dynamic verification information update unit is used to update the dynamic verification information stored in the dynamic verification area and synchronize it to the cloud when the dynamic verification information passes the verification.

[0028] Preferably, the information feedback unit returns corresponding feedback information based on the user's selection instruction triggered by the information reading option, including:

[0029] When a user selects to read locally stored information, the information area is triggered to send the encrypted ID of the storage to the cloud in order to obtain detailed information returned by the cloud based on the encrypted ID;

[0030] When a user selects to read all cloud information corresponding to the device identity, the password area is triggered to verify the first password entered by the user, and to determine whether the first password is consistent with the stored static password information. If they are consistent, the issuing area is triggered to send the device ID information and user identity information to the cloud, so that the cloud returns all cloud information corresponding to the device ID information and user identity information.

[0031] Preferably, the information feedback unit further includes:

[0032] When a user inputs a command to delete locally stored information or download all cloud information, the password area is triggered to verify the second password entered by the user. It is then determined whether the second password matches the stored static password information. If they match, the locally stored information is deleted or all cloud information is downloaded.

[0033] This invention provides an information storage device, comprising: an information area, an issuance area, a password area, and a dynamic verification area; the information area and the password area are unidirectionally connected, while the other areas are isolated from each other; wherein, the information area is used to store encrypted business number information; the issuance area is used to store device ID information and user identity information; the password area is used to store static password information set by the user; and the dynamic verification area is used to store static mobile phone numbers and dynamic verification information. This invention also provides an authentication method and system based on the aforementioned information storage device, comprising: when the device is plugged into a PC, obtaining the mobile phone number stored in the dynamic verification area, and sending a verification code retrieval request to the cloud based on the mobile phone number; verifying the verification code entered by the user, and when the verification code is successfully verified, obtaining the dynamic verification information stored in the dynamic verification area, and sending the dynamic verification information to the mobile phone number; verifying the dynamic verification information entered by the user, and when the dynamic verification information is successfully verified, returning an information reading option for the user to select; and returning corresponding feedback information according to the selection instruction triggered by the user based on the information reading option. This invention uses hardware devices to isolate information stored in the cloud. The same identity information can be verified through multiple mobile phone numbers, and different passwords can be set. The dynamic verification area in the device dynamically stores and verifies each use, ensuring the security of device use. The business data information stored in the hardware device is not complete information; each piece is a message key, and the content of the information comes from the verification results in the cloud, further ensuring the secure use of enterprise data information. Attached Figure Description

[0034] Exemplary embodiments of the present invention can be more fully understood by referring to the following figures:

[0035] Figure 1 This is a schematic diagram of the structure of an information storage device 100 according to an embodiment of the present invention;

[0036] Figure 2 This is a structural diagram of an information storage device according to an embodiment of the present invention;

[0037] Figure 3 A flowchart of an authentication method 300 for an information storage device according to an embodiment of the present invention;

[0038] Figure 4 A schematic diagram illustrating the authentication process used for device operation according to an embodiment of the present invention;

[0039] Figure 5 This is a schematic diagram of the structure of an authentication system 500 for an information storage device according to an embodiment of the present invention. Detailed Implementation

[0040] Exemplary embodiments of the invention will now be described with reference to the accompanying drawings. However, the invention may be embodied in many different forms and is not limited to the embodiments described herein. These embodiments are provided to fully and completely disclose the invention and to fully convey its scope to those skilled in the art. The terminology used in the exemplary embodiments illustrated in the drawings is not intended to limit the invention. In the drawings, the same units / elements are referred to by the same reference numerals.

[0041] Unless otherwise stated, the terms used herein (including technical terms) have their common meaning as understood by one of ordinary skill in the art. Furthermore, it is understood that terms defined in commonly used dictionaries should be understood to have a meaning consistent with the context of their relevant field, and not to be interpreted as having an idealized or overly formal meaning.

[0042] Figure 1 This is a schematic diagram of the structure of an information storage device 100 according to an embodiment of the present invention. Figure 1 As shown, the information storage device 100 provided in this embodiment of the invention includes: an information area 101, an issuance area 102, a password area 103, and a dynamic verification area 104; the information area and the password area are unidirectionally connected, and the other areas are isolated from each other;

[0043] The information area stores the encrypted business number information; the issuance area stores the device ID information and user identity information; the password area stores the static password information set by the user; and the dynamic verification area stores the static mobile phone number and dynamic verification information.

[0044] Preferably, the information area and the issuance area are composed of HDD or FLASH, the password area and the dynamic verification area are encryption chips, and the entire device is connected to a PC device via USB.

[0045] Combination Figure 2As shown, in this invention, the information storage hardware device mainly consists of four areas: an information area (Area A), an issuance area (Area B), a password area (Area C), and a dynamic verification area (Area D). The information area and issuance area are composed of HDD / FLASH, while the password area and dynamic verification area are encryption chips. The entire hardware is connected to a PC device via USB. Only the password area and information area are unidirectionally connected; the other areas are isolated from each other. The issuance area stores device ID information and user identity information; the password area stores static password information set by the user; the information area stores encrypted business number information; and the dynamic verification area stores static mobile phone numbers and dynamic verification information. The device first uses initial software to write the hardware device ID information to the issuance area, then uses a discovery tool to write the enterprise identity information to the issuance area, the enterprise sets a static password and stores it in the password area, then writes the user's mobile phone number to the dynamic verification area, and sets initial dynamic verification information in the password area while simultaneously synchronizing it to the cloud.

[0046] Figure 3 This is a flowchart of an authentication method 300 for an information storage device according to an embodiment of the present invention. Figure 3 As shown, the authentication method 300 based on the information storage device described above, provided by this embodiment of the invention, isolates information stored in the cloud through hardware devices. The same identity information can be verified using multiple mobile phone numbers, and different passwords can be set. The dynamic verification area in the device dynamically stores and verifies each use, ensuring the security of device use. The business data information stored in the hardware device is not complete information; each piece is a message key, and the content of the information comes from the cloud verification results, further ensuring the secure use of enterprise data information. The authentication method 300 based on the information storage device described above, provided by this embodiment of the invention, begins at step 301. In step 301, when the device is plugged into a PC, the mobile phone number stored in the dynamic verification area is obtained, and a verification code retrieval request is sent to the cloud based on the mobile phone number.

[0047] In step 302, the verification code entered by the user is verified, and when the verification code is verified successfully, the dynamic verification information stored in the dynamic verification area is obtained and the dynamic verification information is sent to the mobile phone number.

[0048] In step 303, the dynamic verification information input by the user is verified, and when the dynamic verification information passes the verification, the information reading option is returned for the user to select.

[0049] Preferably, the method further includes:

[0050] When the dynamic verification information passes verification, the dynamic verification information stored in the dynamic verification area is updated and synchronized to the cloud.

[0051] Combination Figure 4 As shown, in this invention, when a user uses the device, they insert it into a PC, run the software to identify and read the mobile phone number in the dynamic verification area, request a verification code from the cloud, and after the user enters the verification code and passes verification, the cloud sends the stored dynamic verification information back to the mobile phone. After the user enters the verification code and passes verification, the software updates the dynamic verification information in the dynamic verification area and synchronizes it to the cloud. After successful dynamic verification, the user can choose to read the locally stored information or all the cloud information corresponding to the device's identity. Here, the cloud refers to the server.

[0052] In step 304, based on the selection instruction triggered by the user based on the information read options, the corresponding feedback information is returned.

[0053] Preferably, the return of corresponding feedback information based on the user's selection instruction triggered by the information reading option includes:

[0054] When a user selects to read locally stored information, the information area is triggered to send the encrypted ID of the storage to the cloud in order to obtain detailed information returned by the cloud based on the encrypted ID;

[0055] When a user selects to read all cloud information corresponding to the device identity, the password area is triggered to verify the first password entered by the user, and to determine whether the first password is consistent with the stored static password information. If they are consistent, the issuing area is triggered to send the device ID information and user identity information to the cloud, so that the cloud returns all cloud information corresponding to the device ID information and user identity information.

[0056] Preferably, the method further includes:

[0057] When a user inputs a command to delete locally stored information or download all cloud information, the password area is triggered to verify the second password entered by the user. It is then determined whether the second password matches the stored static password information. If they match, the locally stored information is deleted or all cloud information is downloaded.

[0058] Combination Figure 4 As shown, in this invention, after dynamic verification is successful, the user is prompted to choose whether to read local device information or all cloud information corresponding to the device identity. If the user chooses to read local device information, the software sends the information stored in the information area to the cloud through the control chip and returns detailed record information. If the user chooses to read all cloud information corresponding to the device identity, the user needs to enter the password stored in the password area. After successful verification, the issuance area information is transmitted to the cloud to obtain all information corresponding to the identity information.

[0059] After obtaining all cloud-based information corresponding to their identity information, users can select information to download. After clicking download, they need to enter their password information again for verification. If a user chooses to read locally stored information and then deletes it, they also need to enter their password information for verification. After successful verification, the corresponding information will be deleted.

[0060] In this invention, the use of the device requires dual verification through both verification code verification and dynamic verification information verification. Dynamic verification information is stored in a dynamic verification area and in the cloud. Upon successful verification, the device automatically updates the verification information and synchronizes it with the cloud. Querying business information within the device does not require password verification, but viewing all business information related to the user's identity requires password verification. Downloading information from the cloud to the device and deleting information from the device also require password verification. This invention, through hardware-based password verification and software-plus-hardware dynamic verification of peer information, ensures the secure storage and viewing of information within the device.

[0061] Figure 5 This is a schematic diagram of the structure of an authentication system 500 for an information storage device according to an embodiment of the present invention. Figure 5 As shown, the authentication system 500 based on the information storage device described above, provided in this embodiment of the invention, includes: a verification code request sending unit 501, a verification code verification form 502, a dynamic verification information verification unit 503, and an information feedback unit 504.

[0062] Preferably, the verification code request sending unit 501 is used to obtain the mobile phone number stored in the dynamic verification area when the device is plugged into the PC, and send a verification code retrieval request to the cloud based on the mobile phone number.

[0063] Preferably, the verification code verification unit 502 is used to verify the verification code entered by the user, and when the verification code is verified, to obtain the dynamic verification information stored in the dynamic verification area and send the dynamic verification information to the mobile phone number.

[0064] Preferably, the dynamic verification information verification unit 503 is used to verify the dynamic verification information input by the user, and when the dynamic verification information is verified, it returns an information reading option for the user to select.

[0065] Preferably, the information feedback unit 504 is used to return corresponding feedback information based on the selection instruction triggered by the user based on the information reading option.

[0066] Preferably, the system further includes:

[0067] The dynamic verification information update unit is used to update the dynamic verification information stored in the dynamic verification area and synchronize it to the cloud when the dynamic verification information passes the verification.

[0068] Preferably, the information feedback unit returns corresponding feedback information based on the user's selection instruction triggered by the information reading option, including:

[0069] When a user selects to read locally stored information, the information area is triggered to send the encrypted ID of the storage to the cloud in order to obtain detailed information returned by the cloud based on the encrypted ID;

[0070] When a user selects to read all cloud information corresponding to the device identity, the password area is triggered to verify the first password entered by the user, and to determine whether the first password is consistent with the stored static password information. If they are consistent, the issuing area is triggered to send the device ID information and user identity information to the cloud, so that the cloud returns all cloud information corresponding to the device ID information and user identity information.

[0071] Preferably, the information feedback unit further includes:

[0072] When a user inputs a command to delete locally stored information or download all cloud information, the password area is triggered to verify the second password entered by the user. It is then determined whether the second password matches the stored static password information. If they match, the locally stored information is deleted or all cloud information is downloaded.

[0073] The authentication system 500 of the information storage device in this embodiment corresponds to the authentication method 100 of the information storage device in another embodiment of this invention, and will not be described again here.

[0074] The present invention has been described with reference to a few embodiments. However, it will be apparent to those skilled in the art that other embodiments besides those disclosed above fall equivalently within the scope of the present invention.

[0075] Generally, all terms used in this invention are interpreted according to their ordinary meaning in the art, unless otherwise expressly defined herein. All references to “a / the / the [device, component, etc.]” ​​are openly interpreted as at least one instance of said device, component, etc., unless otherwise expressly stated. The steps of any method disclosed herein need not be performed in the exact order disclosed unless explicitly stated otherwise.

[0076] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0077] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0078] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0079] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0080] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that modifications or equivalent substitutions can still be made to the specific implementation of the present invention. Any modifications or equivalent substitutions that do not depart from the spirit and scope of the present invention should be covered within the protection scope of the present invention.

Claims

1. An information storage apparatus, characterized by comprising: The device comprises an information area, an issuing area, a password area and a dynamic verification area; the information area and the password area are in one-way communication, and the rest of the areas are isolated from each other; The information area is configured to store service number information after service encryption; the issuing area is configured to store device ID information and user identity information; the password area is configured to store a static password information set by a user; and the dynamic verification area is configured to store a static mobile phone number and dynamic verification information. When the device is inserted into a PC terminal, the mobile phone number stored in the dynamic verification area is obtained, and a verification code obtaining request is sent to the cloud based on the mobile phone number; The verification code input by the user is verified, and when the verification code is verified, the dynamic verification information stored in the dynamic verification area is obtained, and the dynamic verification information is sent to the mobile phone number; The dynamic verification information input by the user is verified, and when the dynamic verification information is verified, an information reading option is returned for the user to select; According to the selection instruction triggered by the user based on the information reading option, corresponding feedback information is returned. When the user selects to read the locally stored information, the information area sends the stored encrypted ID to the cloud to obtain detailed information returned by the cloud based on the encrypted ID; When the user selects to read all cloud information corresponding to the device identity, the password area verifies the first password input by the user, judges whether the first password is consistent with the stored static password information, and when they are consistent, the issuing area sends the device ID information and the user identity information to the cloud, so that the cloud returns all cloud information corresponding to the device ID information and the user identity information. The method further comprises: When a local storage information deletion instruction or all cloud information download instructions input by the user are received, the password area verifies the second password input by the user, judges whether the second password is consistent with the stored static password information, and when they are consistent, deletes the local storage information or downloads all cloud information. The information area and the issuing area are composed of HDD or FLASH, the password area and the dynamic verification area are encryption chips, and the whole device adopts a USB mode to access a PC device.

2. The apparatus of claim 1, wherein, The method comprises:

3. An authentication method based on the information storage device according to any one of claims 1 to 2, characterized by, When the device is inserted into a PC terminal, the mobile phone number stored in the dynamic verification area is obtained, and a verification code obtaining request is sent to the cloud based on the mobile phone number; The verification code input by the user is verified, and when the verification code is verified, the dynamic verification information stored in the dynamic verification area is obtained, and the dynamic verification information is sent to the mobile phone number; The dynamic verification information input by the user is verified, and when the dynamic verification information is verified, an information reading option is returned for the user to select; According to the selection instruction triggered by the user based on the information reading option, corresponding feedback information is returned. The method further comprises:

4. The method of claim 3, wherein, When the dynamic verification information is verified, the dynamic verification information stored in the dynamic verification area is updated and synchronized to the cloud. The method further comprises:

5. The method of claim 3, wherein, ​ When the user selects to read the locally stored information, the information area is triggered to send the stored encrypted ID to the cloud to obtain detailed information returned by the cloud based on the encrypted ID; When the user selects to read all cloud information corresponding to the device identity, the password area is triggered to verify a first password input by the user, to determine whether the first password is consistent with the stored static password information, and when consistent, the issuing area is triggered to send the device ID information and the user identity information to the cloud, so that the cloud returns all cloud information corresponding to the device ID information and the user identity information.

6. The method of claim 5, wherein, The method further comprises: When receiving a locally stored information deletion instruction or all cloud information download instruction input by the user, the password area is triggered to verify a second password input by the user, to determine whether the second password is consistent with the stored static password information, and when consistent, the locally stored information is deleted or all cloud information is downloaded.

7. An authentication system based on the information storage device according to any one of claims 1 to 2, characterized by, The system comprises: The verification code request sending unit is configured to obtain a mobile phone number stored in the dynamic verification area when the device is inserted into the PC end, and send a verification code obtaining request to the cloud based on the mobile phone number; The verification code verification unit is configured to verify the verification code input by the user, and when the verification code verification is passed, obtain the dynamic verification information stored in the dynamic verification area, and send the dynamic verification information to the mobile phone number; The dynamic verification information verification unit is configured to verify the dynamic verification information input by the user, and when the dynamic verification information verification is passed, return an information reading option for the user to select; The information feedback unit is configured to return corresponding feedback information according to a selection instruction triggered by the user based on the information reading option.

8. The system of claim 7, wherein, The system further comprises: The dynamic verification information updating unit is configured to update the dynamic verification information stored in the dynamic verification area when the dynamic verification information verification is passed, and synchronize to the cloud.

9. The system of claim 7, wherein, The information feedback unit returns corresponding feedback information according to a selection instruction triggered by the user based on the information reading option, which comprises: When the user selects to read the locally stored information, the information area is triggered to send the stored encrypted ID to the cloud to obtain detailed information returned by the cloud based on the encrypted ID; When the user selects to read all cloud information corresponding to the device identity, the password area is triggered to verify a first password input by the user, to determine whether the first password is consistent with the stored static password information, and when consistent, the issuing area is triggered to send the device ID information and the user identity information to the cloud, so that the cloud returns all cloud information corresponding to the device ID information and the user identity information.

10. The system of claim 9, wherein, The information feedback unit further comprises: When receiving a locally stored information deletion instruction or all cloud information download instruction input by the user, the password area is triggered to verify a second password input by the user, to determine whether the second password is consistent with the stored static password information, and when consistent, the locally stored information is deleted or all cloud information is downloaded.

Images