Storage device access system, method, device and medium for stealth demonstration

Abstract

The present application discloses a storage device access system, method, device and medium for stealing demonstration, which mainly relates to the field of stealing demonstration technology, and is used to solve the problem that the existing stealing demonstration equipment cannot be used for stealing demonstration on a computer that only supports dedicated USB flash drive access. It includes: a stealing demonstration device, including a security chip and a storage chip, wherein the security chip has a built-in instruction transmission module that supports the first protocol transmission and an instruction parsing module that performs preset first protocol instruction parsing; when the stealing demonstration device is ready on the computer side; the stealing demonstration software reads the computer-side file, and after selecting the computer-side file, adds the computer-side file to the first protocol data write instruction, and sends the first protocol data write instruction to the stealing demonstration device, and then writes it into the storage chip; it is also used to send the first protocol data read instruction to the stealing demonstration device, and then read the corresponding data in the storage chip, and then transmit it to the computer side.

Description

Technical Field

[0001] The present application relates to the field of storage device access technology, and in particular to a storage device access system, method, device and medium for stealth demonstration. Background Art

[0002] At present, international competition is fierce, and the confidentiality situation is becoming more and more severe. It is more and more important to improve the confidentiality awareness of the public and civil servants. The espionage demonstration equipment can make the experiencer understand the current espionage methods very intuitively, deeply understand the key points of confidentiality work, and enhance confidentiality awareness.

[0003] At present, there are many types of stealing demonstration devices, and the information security focuses they target are also different. For storage media (storage data) management technology, the stealing demonstration devices are mainly: implanting a Trojan program in a USB device, and after the USB device with the Trojan program is connected to the computer, the Trojan program is automatically implanted in the computer, and at the same time, the Trojan implantation stealing demonstration animation is played on the computer to achieve security warnings for users. By programming the Trojan in the flash memory location of the USB device and combining it with the stealing demonstration animation, users can be warned not to use USB devices purchased through abnormal channels, achieving the effect of security warnings.

[0004] However, there are computers that only support dedicated USB flash drives. That is, when the computer recognizes the USBMSC (USB Mass Storage Class) protocol data in the storage device, it will start the storage medium management system to identify whether it is a dedicated USB flash drive. If it is not a dedicated USB flash drive, it will be intercepted. That is, the existing computer that only supports dedicated USB flash drives does not support external storage devices (secret stealing demonstration devices) implanted with Trojan programs, and thus cannot achieve secret stealing demonstration. Therefore, there is an urgent need for a storage device access system, method, device and medium for secret stealing demonstration to solve the problem that the existing secret stealing demonstration storage device cannot be used for secret stealing demonstration on a computer that only supports dedicated USB flash drives. Summary of the invention

[0005] In view of the above-mentioned deficiencies in the prior art, the present application provides a storage device access system, method, device and medium for secret theft demonstration to solve the problem that the existing secret theft demonstration equipment cannot perform secret theft demonstration on a computer that only supports dedicated USB flash drive access.

[0006] In a first aspect, the present application provides a storage device access system for stealing secrets demonstration, the system comprising: a stealing secrets demonstration device, comprising a security chip and a storage chip, wherein the security chip has a built-in instruction transmission module supporting first protocol transmission, and an instruction parsing module for parsing preset first protocol instructions; wherein the first protocol is a HID protocol or a serial port protocol, and the preset first protocol instructions at least include: a first protocol data write instruction, a first protocol data read instruction; when the stealing secrets demonstration device is inserted into a computer, the device standard request instruction is uploaded to the computer through the instruction transmission module; wherein the device standard request instruction is the stealing secrets demonstration device information, and includes support information for the first protocol; after the computer detects the support information for the first protocol, it determines that the stealing secrets demonstration device has been stolen. The device type of the secret-stealing demonstration device is the first device, and the driver corresponding to the first protocol is loaded. After the driver corresponding to the first protocol is loaded, the secret-stealing demonstration device is ready on the computer side; the secret-stealing demonstration software is set in the computer side, and has a preset first protocol instruction for reading computer-side files. After selecting the computer-side file, the computer-side file is added to the first protocol data write instruction, and the first protocol data write instruction is sent to the secret-stealing demonstration device, and then the computer-side file is obtained by parsing it through the instruction parsing module and written into the storage chip; it is also used to send the first protocol data read instruction to the secret-stealing demonstration device, and then the data corresponding to the first protocol data read instruction in the storage chip is parsed by the instruction parsing module, and then transmitted to the computer side.

[0007] Furthermore, the stealth demonstration device information includes at least device type, VID, PID, device descriptor, and string descriptor.

[0008] Furthermore, the preset first protocol instruction also includes a device information acquisition instruction, and the security chip also includes a device information acquisition module, which is used to upload basic information of the theft demonstration device to the theft demonstration software after receiving the device information acquisition instruction issued by the theft demonstration software; wherein the basic information of the theft demonstration device includes at least: storage capacity, sector size.

[0009] Furthermore, the stealing demonstration software has a data selection interface for reading and displaying computer files, and by triggering a preset selection key on the data selection interface, a selected computer file is determined from a number of computer files.

[0010] Furthermore, the first protocol data write instruction includes an initial write sector address, and the instruction parsing module includes a write unit for reading the initial write sector address and the computer-side file in the first protocol data write instruction, and then writing the computer-side file to the storage chip starting from the initial write sector address; the first protocol data read instruction includes an initial read sector address, and the instruction parsing module includes a read unit for reading the initial read sector address and the number of sectors to be read continuously in the first protocol data read instruction, and then reading the storage data of the number of sectors to be read continuously in the storage chip starting from the initial read sector address.

[0011] In a second aspect, the present application provides a storage device access method for stealing demonstration, which is applied to a storage device access system for stealing demonstration, and the method includes: when the stealing demonstration device is inserted into a computer, uploading a device standard request instruction to the computer through an instruction transmission module in a security chip of the stealing demonstration device; wherein the device standard request instruction is the stealing demonstration device information, and includes support information of a first protocol; after detecting the support information of the first protocol, the computer determines that the device type of the stealing demonstration device is the first device, loads a driver corresponding to the first protocol, and after the driver corresponding to the first protocol is loaded, the stealing demonstration device is ready on the computer; reading the computer file through the stealing demonstration software set in the computer, after selecting the computer file, adding the computer file to the first protocol data write instruction, and sending the first protocol data write instruction to the stealing demonstration device, and then parsing the computer file through the instruction parsing module in the stealing demonstration device, and writing it into the storage chip; issuing the first protocol data read instruction to the stealing demonstration device through the stealing demonstration software, and then parsing the data corresponding to the first protocol data read instruction in the storage chip through the instruction parsing module, and then transmitting it to the computer.

[0012] Furthermore, after the stealing demonstration device is ready on the computer side, the method also includes: after receiving the device information acquisition instruction issued by the stealing demonstration software, uploading the basic information of the stealing demonstration device to the stealing demonstration software; wherein the basic information of the stealing demonstration device includes at least: storage capacity, sector size.

[0013] Furthermore, selecting a computer-side file specifically includes: reading and displaying the computer-side file through a data selection interface, and determining a selected computer-side file from a number of computer-side files by triggering a preset selection key on the data selection interface.

[0014] In a third aspect, the present application provides a storage device access device for secret-stealing demonstration, the device comprising: a processor; and a memory on which executable code is stored, and when the executable code is executed, the processor executes a storage device access method for secret-stealing demonstration as any one of the above items.

[0015] In a fourth aspect, the present application provides a non-volatile computer storage medium having computer instructions stored thereon, which when executed implement a storage device access method for secret-stealing demonstration as described above.

[0016] Those skilled in the art can understand that the present application has at least the following beneficial effects:

[0017] The security chip in the stealing demonstration device of the present application has a built-in instruction transmission module that supports the transmission of the first protocol and an instruction parsing module that performs the parsing of the preset first protocol instructions; wherein, the first protocol is the HID (Human Interface Device) protocol or the serial port protocol, that is, the present application uses a non-standard (non-USB MSC protocol) USB storage protocol, reads and writes the stealing demonstration device in the stealing demonstration device through a customized method such as the HID protocol or the serial port protocol, and then cooperates with the stealing demonstration software to perform file management. Since the HID protocol or the serial port protocol will not trigger the startup of the storage medium management system, the stealing demonstration device involved in the present application is not restricted by the storage medium management system, and can avoid the process of starting the storage medium management system to identify whether it is a dedicated U disk, and directly access the computer end through the driver corresponding to the first protocol, and then use the stealing demonstration software corresponding to the stealing demonstration device to transmit the data of the computer end (only supports the computer end of the dedicated U disk access) to the stealing demonstration device, or obtain the data stolen by the stealing demonstration device on other computer ends through the stealing demonstration software. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Some embodiments of the present disclosure are described below with reference to the accompanying drawings, in which:

[0019] Figure 1 It is a schematic diagram of the internal structure of a storage device access system for secret theft demonstration provided in an embodiment of the present application.

[0020] Figure 2 It is a flow chart of a storage device access method for stealing demonstration provided in an embodiment of the present application.

[0021] Figure 3 It is a schematic diagram of the internal structure of a storage device access device for secret theft demonstration provided in an embodiment of the present application.

[0022] Description of reference numerals:

[0023] 100. Secret-stealing demonstration device; 110. Security chip; 111. Instruction transmission module; 112. Instruction parsing module; 120. Storage chip; 200. Computer terminal; 210. Driver program; 220. Secret-stealing demonstration software. DETAILED DESCRIPTION

[0024] It should be understood by those skilled in the art that the embodiments described below are only preferred embodiments of the present disclosure, and do not mean that the present disclosure can only be implemented through the preferred embodiments. The preferred embodiments are only used to explain the technical principles of the present disclosure, and are not used to limit the protection scope of the present disclosure. Based on the preferred embodiments provided by the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work should still fall within the protection scope of the present disclosure.

[0025] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0026] The technical solution proposed in the embodiments of the present application is described in detail below with reference to the accompanying drawings.

[0027] Figure 1 A storage device access system for stealing demonstration is provided in an embodiment of the present application. Figure 1 As shown, the system provided in the embodiment of the present application mainly includes:

[0028] The stealing demonstration device 100 includes a security chip 110 and a storage chip 120 .

[0029] The security chip 110 has a built-in instruction transmission module 111 supporting the first protocol transmission and an instruction parsing module 112 parsing preset first protocol instructions.

[0030] It should be noted that in order to avoid the USB MSC protocol triggering the startup storage medium management system to identify whether it is a dedicated USB flash drive, the first protocol in this application is the HID protocol or the serial port protocol. The preset first protocol instruction at least includes: a first protocol data write instruction and a first protocol data read instruction. In addition, the specific content of the preset first protocol instruction can be implemented by the existing protocol customization technology, and this application does not limit this.

[0031] Specifically, the security chip 110 is responsible for parsing the first protocol, reading and writing storage particles, and other operations. Its main function is to convert the received preset first protocol instructions into corresponding operations, and then return the operation results to the host. In addition, the security chip 110 has a built-in national secret algorithm, which can realize functions such as secure storage of data. The storage chip 120 is a storage medium for data and is responsible for storing data.

[0032] When the stealing demonstration device 100 is inserted into the computer terminal 200 , the device standard request instruction is uploaded to the computer terminal 200 through the instruction transmission module 111 .

[0033] The device standard request instruction is the information of the stealing demonstration device 100 and includes the support information of the first protocol. Specifically, the information of the stealing demonstration device 100 may at least include the device type, VID, PID, device descriptor, and string descriptor.

[0034] After detecting the support information of the first protocol, the computer terminal 200 determines that the device type of the stealing demonstration device 100 is the first device, and loads the driver 210 corresponding to the first protocol. After the driver 210 corresponding to the first protocol is loaded, the stealing demonstration device 100 is ready on the computer terminal 200.

[0035] As an example, when the first protocol is the HID protocol, a driver 210 corresponding to the HID protocol is loaded.

[0036] The stealing demonstration software 220 is set in the computer end 200, and has a preset first protocol instruction for reading the computer end 200 file. After selecting the computer end 200 file, the computer end 200 file is added to the first protocol data write instruction, and the first protocol data write instruction is sent to the stealing demonstration device 100, and then the computer end 200 file is obtained by parsing through the instruction parsing module 112, and written into the storage chip 120; it is also used to send the first protocol data read instruction to the stealing demonstration device 100, and then the data corresponding to the first protocol data read instruction in the storage chip 120 is parsed by the instruction parsing module 112, and then transmitted to the computer end 200.

[0037] It should be noted that, since the base storage device protocol (USB MSC protocol) is not used, the operating system does not consider the stealing demonstration device 100 to be a storage device, and therefore will not automatically mount the storage device to the operating system, nor can the operating system's own resource manager read and write the device. Therefore, the stealing demonstration software 220 is required to write the files in the stolen computer to the stealing demonstration device 100.

[0038] In addition, in order to facilitate determining the storage location of the data stored in the storage chip 120, or obtaining the specific location of the data in the storage chip 120. The preset first protocol instruction also includes a device information acquisition instruction, and the security chip 110 also includes a device information acquisition module, which is used to upload the basic information of the theft demonstration device 100 to the theft demonstration software 220 after receiving the device information acquisition instruction issued by the theft demonstration software 220. The basic information of the theft demonstration device 100 at least includes: storage capacity and sector size.

[0039] As mentioned above, the stealing demonstration software 220 selects the computer-side 200 file, which can be specifically as follows: reading and displaying the computer-side 200 file through the data selection interface existing in the stealing demonstration software 220, and determining the selected computer-side 200 file from a number of computer-side 200 files by triggering a preset selection key on the data selection interface.

[0040] In addition, the first protocol data write instruction includes an initial write sector address. As mentioned above, the computer end 200 file is obtained by parsing through the instruction parsing module 112 and written into the storage chip 120, which can be specifically:

[0041] The initial write sector address and the computer end 200 file in the first protocol data write instruction are read by the write unit in the instruction parsing module 112, and then the computer end 200 file is written to the storage chip 120 starting from the initial write sector address.

[0042] It should be noted that during the demonstration process, when opened on the stolen computer, the theft demonstration software 220 can read the specified file on the stolen computer and write it into the theft demonstration device 100 through the first protocol data write instruction corresponding to the theft demonstration device 100.

[0043] In addition, the first protocol data read instruction includes an initial read sector address. As mentioned above, the data corresponding to the first protocol data read instruction in the storage chip 120 is parsed by the instruction parsing module 112, which can be specifically as follows: the initial read sector address and the number of sectors to be read continuously in the first protocol data read instruction are read by the reading unit in the instruction parsing module 112, and then the storage data of the number of sectors to be read continuously starting from the initial read sector address in the storage chip 120 is read.

[0044] It should be noted that the above demonstration process is: connecting the secret-stealing demonstration device 100 to an ordinary computer, and running the secret-stealing demonstration software 220 on the ordinary computer. The software will automatically read the just-stolen file through the first protocol data reading instruction and store it on the ordinary computer.

[0045] Through the above two processes, the present application can also realize the ferrying of data from computer A (computer end 200 that only supports dedicated USB flash drive access) equipped with a storage medium management system to ordinary computer B.

[0046] In addition, the present application embodiment also provides a storage device access method for stealing demonstration, such as Figure 2 As shown, the method provided in the embodiment of the present application mainly includes the following steps:

[0047] Step 310: After the secret stealing demonstration device is inserted into the computer, the device standard request instruction is uploaded to the computer through the instruction transmission module in the security chip of the secret stealing demonstration device.

[0048] The device standard request instruction is the stealing demonstration device information and includes the support information of the first protocol.

[0049] Step 320: After detecting the support information of the first protocol, the computer determines that the device type of the stealing demonstration device is the first device, loads the driver corresponding to the first protocol, and after the driver corresponding to the first protocol is loaded, the stealing demonstration device is ready on the computer.

[0050] Step 330, read the computer-side file through the theft demonstration software set in the computer side, after selecting the computer-side file, add the computer-side file to the first protocol data write instruction, and send the first protocol data write instruction to the theft demonstration device, and then parse the computer-side file through the instruction parsing module in the theft demonstration device and write it into the storage chip.

[0051] Among them, after the stealing demonstration device is ready on the computer side, the method may also include:

[0052] After receiving the device information acquisition instruction issued by the stealing demonstration software, upload the basic information of the stealing demonstration device to the stealing demonstration software.

[0053] It should be noted that the basic information of the secret-stealing demonstration device includes at least: storage capacity and sector size.

[0054] Among them, select the computer file, which can be:

[0055] Through the data selection interface, the computer-side files are read and displayed, and by triggering the preset selection key on the data selection interface, the selected computer-side file is determined from a number of computer-side files.

[0056] Step 340: send a first protocol data read instruction to the secret theft demonstration software to the secret theft demonstration device, and then parse the data corresponding to the first protocol data read instruction in the storage chip through the instruction parsing module, and then transmit it to the computer end.

[0057] The above is a method embodiment of the present application. Based on the same inventive concept, the present application embodiment also provides a storage device access device for stealing demonstration. Figure 3 As shown, the device includes: a processor; and a memory on which executable codes are stored. When the executable codes are executed, the processor executes a storage device access method for stealth demonstration as described in the above embodiment.

[0058] Specifically, when the stealing demonstration device is inserted into the computer, the server uploads the device standard request instruction to the computer through the instruction transmission module in the security chip of the stealing demonstration device; wherein, the device standard request instruction is the stealing demonstration device information, and includes the support information of the first protocol; after detecting the support information of the first protocol, the computer determines that the device type of the stealing demonstration device is the first device, loads the driver corresponding to the first protocol, and after the driver corresponding to the first protocol is loaded, the stealing demonstration device is ready on the computer; the stealing demonstration software set in the computer reads the computer file, and after selecting the computer file, the computer file is added to the first protocol data write instruction, and the first protocol data write instruction is sent to the stealing demonstration device, and then the computer file is obtained by parsing through the instruction parsing module in the stealing demonstration device, and written into the storage chip; the first protocol data read instruction is sent to the stealing demonstration device through the stealing demonstration software, and then the data corresponding to the first protocol data read instruction in the storage chip is parsed by the instruction parsing module, and then transmitted to the computer.

[0059] In addition, an embodiment of the present application further provides a non-volatile computer storage medium on which executable instructions are stored. When the executable instructions are executed, a storage device access method for stealing demonstration as described above is implemented.

[0060] So far, the technical solutions of the present disclosure have been described in combination with the above multiple embodiments, but it is easy for those skilled in the art to understand that the protection scope of the present disclosure is not limited to these specific embodiments. Without departing from the technical principles of the present disclosure, those skilled in the art can split and combine the technical solutions in the above-mentioned various embodiments, and can also make equivalent changes or replacements to the relevant technical features. Any changes, equivalent replacements, improvements, etc. made within the technical concept and / or technical principle of the present disclosure will fall within the protection scope of the present disclosure.

Claims

1. A storage device access system for stealing demonstration, characterized in that: The system comprises: The secret stealing demonstration device comprises a security chip and a storage chip, wherein the security chip has a built-in instruction transmission module supporting first protocol transmission and an instruction parsing module for parsing preset first protocol instructions; wherein the first protocol is a HID protocol or a serial port protocol, and the preset first protocol instructions at least include: a first protocol data writing instruction and a first protocol data reading instruction; When the stealing demonstration device is inserted into the computer, the device standard request instruction is uploaded to the computer through the instruction transmission module; wherein the device standard request instruction is the stealing demonstration device information and includes the support information of the first protocol; After detecting the support information of the first protocol, the computer determines that the device type of the stealing demonstration device is the first device, loads the driver corresponding to the first protocol, and after the driver corresponding to the first protocol is loaded, the stealing demonstration device is ready on the computer; The stealing demonstration software is set in the computer terminal, and has a preset first protocol instruction, which is used to read the computer terminal file. After selecting the computer terminal file, the computer terminal file is added to the first protocol data write instruction, and the first protocol data write instruction is sent to the stealing demonstration device, and then the computer terminal file is obtained by parsing through the instruction parsing module and written into the storage chip; it is also used to send the first protocol data read instruction to the stealing demonstration device, and then the data corresponding to the first protocol data read instruction in the storage chip is parsed by the instruction parsing module, and then transmitted to the computer terminal; Among them, the stealing demonstration software has a data selection interface for reading and displaying computer files. By triggering the preset selection key on the data selection interface, the selected computer file is determined from several computer files.

2. The storage device access system for stealing demonstration according to claim 1, characterized in that: The stealth demonstration device information includes at least the device type, VID, PID, device descriptor, and string descriptor.

3. The storage device access system for stealing demonstration according to claim 1, characterized in that: The preset first protocol instruction also includes a device information acquisition instruction, and the security chip also includes a device information acquisition module. It is used to upload the basic information of the theft demonstration device to the theft demonstration software after receiving the device information acquisition instruction issued by the theft demonstration software; wherein the basic information of the theft demonstration device at least includes: storage capacity and sector size.

4. The storage device access system for stealing demonstration according to claim 1, characterized in that: The first protocol data write instruction includes an initial write sector address, and the instruction parsing module includes a write unit. Used to read the initial write sector address and the computer-side file in the first protocol data write instruction, and then write the computer-side file to the storage chip starting from the initial write sector address; The first protocol data read instruction includes an initial read sector address, and the instruction parsing module includes a reading unit. It is used to read the initial read sector address and the number of sectors to be read continuously in the first protocol data read instruction, and then read the storage data of the number of sectors to be read continuously starting from the initial read sector address in the storage chip.

5. A storage device access method for stealing secrets demonstration, applied to the storage device access system for stealing secrets demonstration according to claim 1, characterized in that: The method comprises: When the stealing demonstration device is inserted into the computer, the device standard request instruction is uploaded to the computer through the instruction transmission module in the security chip of the stealing demonstration device; wherein the device standard request instruction is the stealing demonstration device information and includes the support information of the first protocol; After detecting the support information of the first protocol, the computer determines that the device type of the stealing demonstration device is the first device, loads the driver corresponding to the first protocol, and after the driver corresponding to the first protocol is loaded, the stealing demonstration device is ready on the computer; The computer-side file is read by the stealing demonstration software set in the computer-side. After the computer-side file is selected, the computer-side file is added to the first protocol data writing instruction, and the first protocol data writing instruction is sent to the stealing demonstration device, and then the computer-side file is obtained by parsing through the instruction parsing module in the stealing demonstration device, and written into the storage chip; Among them, select the computer files, including: Through the data selection interface, the computer-side file is read and displayed, and the selected computer-side file is determined from a number of computer-side files by triggering the preset selection key on the data selection interface; The first protocol data read instruction is sent to the secret theft demonstration software to the secret theft demonstration device, and then the data corresponding to the first protocol data read instruction in the storage chip is parsed by the instruction parsing module, and then transmitted to the computer end.

6. The storage device access method for stealing demonstration according to claim 5, characterized in that: After the stealing demonstration device is ready on the computer, the method further includes: After receiving the device information acquisition instruction issued by the stealing demonstration software, the basic information of the stealing demonstration device is uploaded to the stealing demonstration software; wherein the basic information of the stealing demonstration device at least includes: storage capacity and sector size.

7. A storage device access device for stealing secrets demonstration, characterized in that: The device comprises: processor; and a memory having executable codes stored thereon, which, when the executable codes are executed, enable the processor to execute a storage device access method for stealing demonstration as described in any one of claims 5-6.

8. A non-volatile computer storage medium, characterized in that: Computer instructions are stored thereon, and when the computer instructions are executed, the storage device access method for stealing demonstration as described in any one of claims 5-6 is implemented.

Images