Hard disk identity verification system

Abstract

The application relates to the computer technical field and discloses a hard disk identity verification system, which comprises a verification device and a master control device; the master control device is in an encrypted hard disk; the verification device is connected with the master control device in the encrypted hard disk through a cable; the verification device comprises a verification information acquisition unit and an acquisition management controller; the verification information acquisition unit is connected with the acquisition management controller and is used for acquiring user verification information and transmitting the user verification information to the acquisition management controller; the acquisition management controller is connected with the master control device and is used for sending the user verification information to the master control device; the master control device is used for acquiring preset verification information, comparing the user verification information with the preset verification information, determining an openable storage area in the storage space of the encrypted hard disk according to the user verification information if the comparison is successful, and opening the openable storage area. The application solves the problem that setting an identification module on each encrypted hard disk to verify the user identity leads to the limited use scene of the encrypted hard disk.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a hard disk identity verification system. Background Art

[0002] The density of information stored on storage media like hard drives is increasing. A data breach on a hard drive could result in the disclosure of a large amount of important information, necessitating encryption to protect the data on such media. Current hard drive encryption solutions include those based on fingerprint information and those based on both fingerprint and finger vein information. When a user wishes to access an encrypted hard drive, the encrypted drive first verifies the user's identity, requiring verification before the user can access the encrypted drive.

[0003] However, the aforementioned hard drive encryption solution requires an identification module installed on the encrypted hard drive to verify the user's identity. However, when the encrypted hard drive is placed in a location where fingers cannot reach, such as a host chassis or server chassis, the identification module has difficulty collecting user verification information and cannot verify the user's identity, limiting the use of encrypted hard drives.

[0004] Therefore, the related art has the problem that an identification module is set on each encrypted hard disk to verify the user identity, which leads to limited usage scenarios of the encrypted hard disk. Summary of the Invention

[0005] In view of this, the present invention provides a hard disk identity verification system to solve the problem that when a master control module is used to control a liquid cooling system to dissipate heat for a server, there is a communication delay between the server and the master control module, resulting in untimely cooling of the server.

[0006] In a first aspect, the present invention provides a hard disk identity verification system, the system comprising: a verification device and a main control device; the main control device is arranged in an encrypted hard disk; the verification device is connected to the main control device in the encrypted hard disk via a cable;

[0007] The verification device includes: a verification information collection unit and a collection management controller;

[0008] The verification information collection unit is connected to the collection management controller and is used to collect user verification information and transmit the user verification information to the collection management controller;

[0009] The acquisition management controller is connected to the main control device and is used to send user verification information to the main control device;

[0010] The main control device is used to obtain preset verification information, compare the user verification information with the preset verification information, and if the comparison is successful, determine the openable storage area in the storage space of the encrypted hard disk according to the preset verification information and open the openable storage area.

[0011] This embodiment provides a hard drive identity verification system in which the verification device is connected to the main control device in the encrypted hard drive via a cable, separating the verification device from the encrypted hard drive and avoiding restrictions on the encrypted hard drive's use cases. The verification device collects user verification information and transmits it to the main control device in the encrypted hard drive, which then performs identity verification. This solves the problem of requiring an identification module on each encrypted hard drive to verify user identity, which limits its use cases.

[0012] In an optional embodiment, the verification device further includes: a touch display unit;

[0013] The touch display unit is connected to the acquisition management controller and is used to obtain the password information input by the user and transmit the password information to the acquisition management controller, wherein the password information is included in the user verification information;

[0014] The acquisition management controller is used to send a first display instruction to the touch display unit to instruct the touch display unit to display a first prompt message when the user verification information fails to be compared with the preset verification information, or to send a second display instruction to the touch display unit to instruct the touch display unit to display a second prompt message when the main control device opens an openable storage area.

[0015] In this embodiment, the touch display unit is used to collect password information, thereby improving the accuracy of identity verification. The touch display unit is instructed to display the first prompt information or the second prompt information, so that the user can easily determine the identity verification result.

[0016] In an optional embodiment, the main control device includes: a verification controller and a hard disk management controller;

[0017] The verification controller is connected to the collection management controller and is used to obtain user verification information and verification library data, wherein the verification library data includes preset verification information and corresponding preset authority information;

[0018] The verification controller is connected to the hard disk management controller and is used to obtain first characteristic information from the user verification information and second characteristic information from the preset verification information, compare the first characteristic information with the second characteristic information, and if the comparison is successful, determine the user authority according to the preset authority information corresponding to the preset verification information, generate verification success information including the user authority, and send the verification success information to the hard disk management controller;

[0019] The hard disk management controller determines the user authority according to the verification success information, determines an openable storage area in the storage space according to the user authority, and opens the openable storage area.

[0020] In the embodiment, the first feature information is acquired from the user verification information, the second feature information is acquired from the preset verification information, the first feature information is compared with the second feature information, and identity verification is realized. In the case of successful verification, the hard disk management controller opens the openable storage area, and the user can perform data read / write operation.

[0021] In an optional embodiment, the verification controller is configured to send a comparison failure message to the collection management controller in the case that the comparison of the first feature information and the second feature information fails, wherein the comparison failure message is used to instruct the collection management controller to send a first display instruction to the touch display unit, so that the touch display unit displays first prompt information.

[0022] The verification controller is configured to send a comparison success message to the collection management controller in the case that the comparison of the first feature information and the second feature information succeeds and the master control device opens the openable storage area, wherein the comparison success message is used to instruct the collection management controller to send a second display instruction to the touch display unit, so that the touch display unit displays second prompt information.

[0023] In an optional embodiment, the encrypted hard disk further comprises a first memory and a second memory.

[0024] The verification controller is configured to send a migration request of the verification library data to the hard disk management controller.

[0025] The hard disk management controller is connected with the second memory, and is configured to copy the verification library data from the storage space of the encrypted hard disk to the second memory and transmit the verification library data from the second memory to the verification controller in the case that the migration request of the verification library data is received.

[0026] The verification controller is connected with the first memory, and is configured to receive the verification library data and save the verification library data to the first memory, wherein the first memory is used to provide the verification library data for the verification controller.

[0027] In the embodiment, the verification library data is migrated to the first memory, and the verification library data is provided for the verification controller through the first memory, so that the identity verification efficiency of the verification controller is improved.

[0028] In an optional embodiment, the verification device comprises a first verification interface, and the encrypted hard disk comprises a second verification interface.

[0029] One end of the cable is connected with the first verification interface, and the other end of the cable is connected with the second verification interface.

[0030] The collection management controller and the verification controller are connected through the first verification interface, the second verification interface and the cable.

[0031] The main control device supplies power to the verification device through the first verification interface, the second verification interface and the cable.

[0032] In an optional embodiment, the storage space of the encrypted hard disk includes a public storage area and a permission-restricted storage area;

[0033] The hard disk management controller determines the open storage areas in the storage space based on user permissions, including:

[0034] Determine the operable sub-area corresponding to the user authority in the authority restriction storage area;

[0035] The public storage area and the operable sub-area are used as open storage areas.

[0036] In an optional embodiment, the storage space of the encrypted hard disk includes a verification library data storage area; the verification library data storage area is used to store verification library data;

[0037] The verification device further includes: a touch display unit; the touch display unit is connected to the collection management controller;

[0038] The touch display unit is used to obtain the verification database data update instruction and send the verification database data update instruction to the acquisition management controller;

[0039] The acquisition management controller is used to obtain the verification library update data when receiving the verification library data update instruction, package the verification library update data to obtain an update data packet, and send the update data packet to the verification controller;

[0040] Upon receiving the update data packet, the verification controller parses the update data packet to obtain the verification library update data, saves the verification library update data to the first memory, and sends a verification library data update request to the hard disk management controller;

[0041] When receiving the verification library data update request, the hard disk management controller determines whether the verification library data can be updated. If so, it obtains the verification library update data from the first memory and updates the verification library data stored in the verification library data storage area according to the verification library update data.

[0042] In an optional embodiment, the storage space of the encrypted hard disk includes a verification library data storage area and a backup area; the verification library data storage area is used to store verification library data;

[0043] The collection management controller is used to obtain the update personnel information and verification database update data of the verification database update personnel when obtaining the verification database data update instruction, and send the update personnel information and verification database update data to the verification controller;

[0044] The verification controller is used to obtain the updater verification information from the verification database data and compare the updater information with the updater verification information. If the comparison is successful, a data backup request is generated and the data backup request and the verification database update data are sent to the hard disk management controller;

[0045] The hard disk management controller is used to generate a snapshot of the verification library data after receiving a data backup request, back up the snapshot and the verification information of the update personnel in the verification library data to the backup area, and save the index value of the backup area. After the backup is completed, the verification library data stored in the verification library data storage area is updated according to the verification library update data;

[0046] In the event of an update failure, the hard disk management controller is used to obtain the updater verification information and snapshot according to the index value, and send the updater verification information to the verification controller;

[0047] The verification controller is used to obtain new updater information and compare the new updater information with the updater verification information. If the comparison is successful, a successful response is fed back to the hard disk management controller.

[0048] The hard disk management controller is used for restoring the verification library data stored in the verification library data storage area according to the snapshot when receiving a successful response and a data recovery instruction.

[0049] In this embodiment, before updating the verification database, the updater's verification information and the current verification database snapshot are backed up. If the backup fails, the verification database may be damaged. The identity of the updater can be verified again based on the backed-up updater's verification information, and the previous verification database can be restored based on the snapshot to ensure the normal use of the encrypted hard disk.

[0050] In an optional embodiment, the verification device includes: an expansion interface;

[0051] The expansion interface is used to connect to a mobile storage device that stores updated data of the verification library and transmit the updated data of the verification library to the acquisition management controller;

[0052] And / or, the extended interface is used to connect to the user information collection module, obtain user information from the user information collection module, and transmit the user information to the collection management controller, wherein the user information is included in the user verification information.

[0053] In this embodiment, an expandable interface is provided in the verification device to facilitate expansion of system functions, thereby improving the functions and application scope of the system.

[0054] In an optional embodiment, the verification information collection unit includes: an image collection module, a fingerprint collection module and a card information collection module;

[0055] The image acquisition module is connected to the acquisition management controller and is used to obtain image information and transmit the image information to the acquisition management controller, wherein the image information is included in the user verification information;

[0056] The fingerprint collection module is connected to the collection management controller and is used to obtain fingerprint information and transmit the fingerprint information to the collection management controller, wherein the fingerprint information is included in the user verification information;

[0057] The card information collection module is connected to the collection management controller and is used to obtain the card storage information and transmit the card storage information to the collection management controller, wherein the card storage information is included in the user verification information.

[0058] In this embodiment, the image acquisition module, fingerprint acquisition module and card information acquisition module are integrated in the verification information acquisition unit to collect image information, fingerprint information and card storage information, making it convenient to verify the user identity using multiple identity verification methods. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the specific embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0060] Figure 1 is a structural diagram of a hard disk identity verification system according to an embodiment of the present invention;

[0061] Figure 2 is a schematic diagram of the detailed structure of a hard disk identity verification system according to an embodiment of the present invention;

[0062] Figure 3 is a schematic diagram of a circuit board of a verification device according to an embodiment of the present invention;

[0063] Figure 4 is a schematic diagram of a detailed structure of an encrypted hard disk according to an embodiment of the present invention;

[0064] Figure 5 is a flowchart of verifying user identity according to an embodiment of the present invention.

[0065] Figure 6 is a flowchart of migrating verification database data according to an embodiment of the present invention;

[0066] Figure 7 is a flow chart of updating verification database data according to an embodiment of the present invention;

[0067] Figure 8is a schematic diagram of the appearance of a verification device according to an embodiment of the present invention; DETAILED DESCRIPTION

[0068] To make the purpose, technical solutions, and advantages of the embodiments of the present invention more clear, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making creative efforts shall fall within the scope of protection of the present invention.

[0069] An embodiment of the present invention provides a hard drive identity verification system. The system comprises an external verification module and an encrypted hard drive. The system supports verification methods such as facial recognition, passwords, fingerprints, credit cards, and QR codes. It also includes an expansion interface that allows for expansion of other verification methods or wireless interfaces. In encryption mode, users can configure multiple verification methods. Only after verification is the encrypted hard drive's storage area released for user use. This addresses the issue of limited usage scenarios. Furthermore, a single verification module can be applied to multiple encrypted hard drives, reducing the redundancy of a single encrypted hard drive.

[0070] In this embodiment, a hard disk identity verification system is provided. Figure 1 As shown, the system includes: a verification device and a main control device; the main control device is set in the encrypted hard disk; the verification device is connected to the main control device in the encrypted hard disk through a cable;

[0071] The verification device includes: a verification information collection unit and a collection management controller;

[0072] The verification information collection unit is connected to the collection management controller and is used to collect user verification information and transmit the user verification information to the collection management controller;

[0073] The acquisition management controller is connected to the main control device and is used to send user verification information to the main control device;

[0074] The main control device is used to obtain preset verification information, compare the user verification information with the preset verification information, and if the comparison is successful, determine the openable storage area in the storage space of the encrypted hard disk according to the preset verification information and open the openable storage area.

[0075] Specifically, the encrypted hard disk has two modes: encryption mode and non-encryption mode. When the encrypted hard disk is in encryption mode, the user can configure multiple verification methods. Only users who pass the verification can operate the encrypted hard disk.

[0076] The hard drive identity verification system includes a verification device and a main control unit. The verification device is connected to the main control unit in the encrypted hard drive via a cable, collecting user verification information and transmitting it to the main control unit. The main control unit is located in the encrypted hard drive and performs identity verification based on the user verification information. Furthermore, the verification device is connected to the encrypted hard drive via a cable, making the verification module external, avoiding restrictions on the encrypted hard drive's usage scenarios. Furthermore, a single verification device can be used on multiple encrypted hard drives, reducing the redundancy of individual encrypted hard drives.

[0077] The verification device includes: a verification information collection unit and a collection management controller.

[0078] The verification information acquisition unit is connected to the acquisition management controller, and is used to collect user verification information and transmit the user verification information to the acquisition management controller. The verification information acquisition unit may include: various sensor modules, such as: face and QR code acquisition module, fingerprint acquisition module, card swiping module, etc. User verification information includes: face image, QR code image, fingerprint information, card storage information, etc. The verification information acquisition unit uses different bus interfaces to connect to the acquisition management controller according to different data stream sizes, and transmits each user's verification information to the acquisition management controller. For example: face image and QR code image are image data with a large amount of data, and the USB (Universal Serial Bus) bus is used to transmit the data to the acquisition management controller; the fingerprint information and card storage information have a small amount of data, and the UART (Universal Synchronous / Asynchronous Receiver / Transmitter) bus is used to transmit the data to the acquisition management controller.

[0079] The acquisition management controller is connected to the main control device and is used to send user verification information to the main control device. The sending process, for example, is: receiving user verification information transmitted by the verification information acquisition unit, and packaging the above user verification information into a fixed format. The packaged data is sent to the encrypted hard disk through the verification interface according to the agreed encryption protocol. In addition, the acquisition management controller can also realize the following functions, including: receiving touch command information from the touch screen display to perform different operations; sending the information to be displayed to the touch screen display for display; adapting to the expandable interface. The expandable interface uses a standard USB interface, which can mount different expansion modules for functional expansion of the external verification module.

[0080] The master control device is used to obtain preset verification information and compare the user verification information with the preset verification information. For example, the master control device receives user verification information packets sent by the acquisition management controller and extracts relevant feature information from them, including the distances and shapes between various organs in the facial image, the center point, triangulation points, starting points, end points, junctions, and intersections of ridges in the fingerprint image, QR code data, and card information. The user verification information is then compared with the preset verification information to determine whether a match exists. Because the system pre-stores the preset verification information and the corresponding user identity, if the comparison is successful, the user's corresponding identity can be determined based on the successfully matched preset verification information. Based on the user identity, the master control device can determine the accessible storage areas within the encrypted hard drive's storage space that the user has permission to operate and open these accessible storage areas. Furthermore, the master control device can also, upon successful verification, return a success message to the verification module and, based on the user identity, grant corresponding hard drive permissions, including read and write functions within the user's permission range. The master control device also receives command information from the configuration module and performs various configuration operations on the encrypted hard drive.

[0081] In addition, if the encrypted hard disk is in non-encrypted mode, any user can use the hard disk normally without identity verification.

[0082] This embodiment provides a hard drive identity verification system in which the verification device is connected to the main control device in the encrypted hard drive via a cable, separating the verification device from the encrypted hard drive and avoiding restrictions on the encrypted hard drive's use cases. The verification device collects user verification information and transmits it to the main control device in the encrypted hard drive, which then performs identity verification. This solves the problem of requiring an identification module on each encrypted hard drive to verify user identity, which limits its use cases.

[0083] In some optional embodiments, the verification device further comprises: a touch display unit;

[0084] The touch display unit is connected to the acquisition management controller and is used to obtain the password information input by the user and transmit the password information to the acquisition management controller, wherein the password information is included in the user verification information;

[0085] The acquisition management controller is used to send a first display instruction to the touch display unit to instruct the touch display unit to display a first prompt message when the user verification information fails to be compared with the preset verification information, or to send a second display instruction to the touch display unit to instruct the touch display unit to display a second prompt message when the main control device opens an openable storage area.

[0086] Specifically, the verification device further includes: a touch display unit, such as a touch display screen. Figure 2 As shown in FIG, the verification device is integrated with a touch screen. The touch screen includes two parts: a display interface and a touch interface. Figure 3 As shown, a 4-inch touchscreen display, for example, is connected to the acquisition management controller via screen tail cables, connectors, an RGB display interface (an image and video display interface for inputting the three primary colors red, green, and blue), and an I2C (Inter-Integrated Circuit) touch interface. The RGB display interface is used to transmit image and video signals. The RGB display interface and the I2C touch interface are integrated on the same FPC (flexible printed circuit) tail cable, which is plugged into the circuit board of the external module to implement the screen's touch and display functions.

[0087] The touch display unit is connected to the acquisition management controller. Users can enter password information on the touch display unit, which then receives and transmits the password information to the acquisition management controller. The password information serves as a form of user verification information. Furthermore, users can use the touch display to interact with the encryption system. Long presses, single taps, or rapid taps correspond to different operations. These include configuring the encryption system's verification mode, setting passwords, uploading verification database data, and enabling or disabling encryption.

[0088] If the user verification information fails to compare with the preset verification information, i.e., if the user identity verification fails, the acquisition management controller sends a first display instruction to the touch display unit, instructing the touch display unit to display a first prompt message, such as "Identity Verification Failed." If the master control device releases the accessible storage area, i.e., if the user identity verification succeeds, the acquisition management controller sends a second display instruction to the touch display unit, instructing the touch display unit to display a second prompt message, such as "Identity Verification Successful." The touch display unit can also display verification prompts, verification results, encrypted hard drive status, etc.

[0089] In this embodiment, the touch display unit is used to collect password information, thereby improving the accuracy of identity verification. The touch display unit is instructed to display the first prompt information or the second prompt information, so that the user can easily determine the identity verification result.

[0090] In some optional implementations, the main control device includes: a verification controller and a hard disk management controller;

[0091] The verification controller is connected to the collection management controller and is used to obtain user verification information and verification library data, wherein the verification library data includes preset verification information and corresponding preset authority information;

[0092] The verification controller is connected to the hard disk management controller and is used to obtain first characteristic information from the user verification information and second characteristic information from the preset verification information, compare the first characteristic information with the second characteristic information, and if the comparison is successful, determine the user authority according to the preset authority information corresponding to the preset verification information, generate verification success information including the user authority, and send the verification success information to the hard disk management controller;

[0093] The hard disk management controller determines the user authority according to the verification success information, determines an openable storage area in the storage space according to the user authority, and opens the openable storage area.

[0094] Specifically, if Figure 2 As shown, the main control device includes: a verification controller and a hard disk management controller. The verification controller is connected to the acquisition management controller through a verification interface and a verification cable. Figure 4 As shown, the verification controller is connected to the verification interface via USB3 and to the hard disk management controller via USB4. Therefore, the verification controller needs to have at least two USB communication interfaces on the one hand, and a Double Data Rate Synchronous Dynamic Random Access Memory (DDRSM) interface on the other hand for external memory expansion to meet the larger cache requirements of the aforementioned services. The hard disk control manager and the verification controller exchange data via USB. During the interaction with the verification controller, the largest amount of data is the update of the verification library data. Therefore, considering the speed of verification library updates, the USB interface was selected here. However, general hard disk management controllers, such as SSD controllers, do not have USB interfaces. In this case, you can also choose to use the SPI (Serial Peripheral Interface) interface or UART port to exchange data with the verification controller, but the update time of a large-capacity verification library will be relatively long. This is determined based on specific needs.

[0095] Combine Figure 5To illustrate this embodiment, a user initially enters verification information. The collection management controller packages the verification information and sends it to the verification controller. The verification controller parses the user verification information and retrieves verification database data. The verification database data includes preset verification information and corresponding preset permission information. Before performing identity verification, the system caches the verification database data in memory 1 for easy access by the verification controller. The verification controller extracts verification information features, including obtaining first feature information from the user verification information and second feature information from the preset verification information. The verification controller compares the feature information with the verification database, including comparing the first feature information with the second feature information. The verification controller determines whether the comparison is successful. If so, it determines the user's permissions based on the preset permission information corresponding to the preset verification information, generates a verification success message containing the user's permissions, and sends the verification success message to the hard disk management controller. The hard disk management controller then responds with access permissions, including determining the user's permissions based on the verification success message, determining a releasable storage area in the storage space based on the user's permissions, and releasing the releasable storage area.

[0096] In this embodiment, the first characteristic information is obtained from the user verification information, and the second characteristic information is obtained from the preset verification information. The first characteristic information and the second characteristic information are compared to achieve identity verification. If the verification is successful, the hard disk management controller opens the available storage area to facilitate data reading and writing operations by the user.

[0097] In some optional embodiments, the verification controller is configured to send a comparison failure message to the acquisition management controller when the comparison between the first characteristic information and the second characteristic information fails, wherein the comparison failure message is configured to instruct the acquisition management controller to send a first display instruction to the touch display unit so that the touch display unit displays the first prompt information;

[0098] The verification controller is used to send a comparison success message to the acquisition management controller when the first characteristic information is successfully compared with the second characteristic information and the main control device opens the openable storage area, wherein the comparison success message is used to instruct the acquisition management controller to send a second display instruction to the touch display unit, so that the touch display unit displays the second prompt information.

[0099] Specifically, combined Figure 5 To illustrate this embodiment, the verification controller performs a comparison between the feature information and the verification library, including: comparing the first feature information with the second feature information. If the comparison fails, the touch display unit needs to display on the screen: verification failed. The steps include: the verification controller sends a comparison failure message to the acquisition management controller, instructing the acquisition management controller to send a first display instruction to the touch display unit, so that the touch display unit displays a first prompt information, the first prompt information is, for example: verification failed.

[0100] If the comparison is successful, the verification controller determines the user's permissions based on the preset permission information corresponding to the preset verification information, generates verification success information containing the user's permissions, and sends the verification success information to the hard disk management controller. The hard disk management controller opens the response access permissions, including: determining the user's permissions based on the verification success information, determining an openable storage area in the storage space based on the user's permissions, and opening the openable storage area. Afterwards, it is necessary to cause the touch display unit to display "Verification Success" on the screen. The steps include: the verification controller sends a comparison success message to the acquisition management controller, instructing the acquisition management controller to send a second display instruction to the touch display unit, causing the touch display unit to display a second prompt message, such as "Verification Success".

[0101] In some optional implementations, the encrypted hard disk further includes: a first memory and a second memory;

[0102] The verification controller is used to send a request to move verification database data to the hard disk management controller;

[0103] The hard disk management controller is connected to the second memory and is used to copy the verification library data from the storage space of the encrypted hard disk to the second memory when receiving a verification library data migration request, and transmit the verification library data from the second memory to the verification controller;

[0104] The verification controller is connected to the first memory, and is used to receive the verification library data and save the verification library data to the first memory, wherein the first memory is used to provide the verification library data to the verification controller.

[0105] Specifically, if Figure 4 As shown, the encrypted hard drive also includes: Memory 1 (first memory) and Memory 2 (second memory). The verification controller is used to compare user verification information with pre-set verification information in the verification database. To improve comparison efficiency, this embodiment now moves the verification database data to the first memory, allowing the verification controller to access the verification database data in real time. The verification controller is connected to the first memory via a DDR interface, and the hard disk management controller is connected to the second memory via a DDR interface.

[0106] Combine Figure 6 The process of moving the verification database data to the first memory in this embodiment is described. Start; Initialization: The verification controller requests to move the verification database to the verification controller memory, including: the verification controller sends a request to move the verification database data to the hard disk management controller;

[0107] The hard disk management controller is connected to the second memory and is configured to, upon receiving a request to move the verification library data, copy the verification library data from the storage space of the encrypted hard disk to the second memory and transmit the verification library data from the second memory to the verification controller. Determining whether the hard disk management controller allows the verification library to be moved includes: upon receiving the request to move the verification library data, if the hard disk management controller does not allow the movement, re-execute the step "Initialization: Verification controller requests to move the verification library to verification controller memory"; if the movement is allowed, the hard disk management controller copies the verification library data and sends the verification library to the verification controller, including: copying the verification library data from the storage space of the encrypted hard disk to the second memory and transmitting the verification library data from the second memory to the verification controller. Dumping the verification library to the verification controller memory includes: the verification controller receiving the verification library data and saving the verification library data to the first memory.

[0108] In this embodiment, the verification database data is moved to the first memory, and the verification database data is provided to the verification controller through the first memory, thereby improving the identity verification efficiency of the verification controller.

[0109] In some optional embodiments, the verification device includes a first verification interface, and the encrypted hard disk includes a second verification interface;

[0110] One end of the cable is connected to the first verification interface, and the other end is connected to the second verification interface;

[0111] The collection management controller and the verification controller are connected via a first verification interface, a second verification interface and a cable;

[0112] The main control device supplies power to the verification device through the first verification interface, the second verification interface and the cable.

[0113] Specifically, if Figure 2 As shown, the verification device includes a verification interface denoted as a first verification interface, and the encrypted hard disk includes a verification interface denoted as a second verification interface. One end of the verification cable is connected to the first verification interface, and the other end is connected to the second verification interface.

[0114] The acquisition management controller is connected to the first verification interface via USB1. Figure 4 As shown, the verification controller is connected to the second verification interface via USB3. The acquisition management controller is connected to the verification controller via the first and second verification interfaces and a cable. The first verification interface of the verification device is connected to the second verification interface of the encrypted hard drive via a verification cable, regardless of whether the encrypted hard drive is used in the server chassis.

[0115] In addition, the verification interface includes a power supply and a communication interface for the verification device. The main control device supplies power to the verification device through the first verification interface, the second verification interface, and the cable.

[0116] In some optional implementations, the storage space of the encrypted hard disk includes a public storage area and a permission-restricted storage area;

[0117] The hard disk management controller determines the open storage areas in the storage space based on user permissions, including:

[0118] Determine the operable sub-area corresponding to the user authority in the authority restriction storage area;

[0119] The public storage area and the operable sub-area are used as open storage areas.

[0120] Specifically, if Figure 2 As shown in the figure, the encrypted hard disk contains hard disk storage space, and the hard disk storage space contains the verification library storage area. Figure 4 As shown, the hard drive verification controller connects to the hard drive storage space via a flash memory interface. The storage space is partitioned into: a verification library storage area, a public storage area, a permission-restricted area, and other areas. The verification library storage area is used to store user verification library data and is not accessible to the host interface. The permission-restricted area grants permissions based on the user's verified permissions.

[0121] The hard disk management controller determines the operable sub-areas corresponding to user permissions within the permission-restricted storage area. The public storage area is open to all authenticated users. The hard disk management controller considers the public storage area and the operable sub-areas as open storage areas.

[0122] In some optional implementations, the storage space of the encrypted hard disk includes a verification library data storage area; the verification library data storage area is used to store verification library data;

[0123] The verification device further includes: a touch display unit; the touch display unit is connected to the collection management controller;

[0124] The touch display unit is used to obtain the verification database data update instruction and send the verification database data update instruction to the acquisition management controller;

[0125] The acquisition management controller is used to obtain the verification library update data when receiving the verification library data update instruction, package the verification library update data to obtain an update data packet, and send the update data packet to the verification controller;

[0126] Upon receiving the update data packet, the verification controller parses the update data packet to obtain the verification library update data, saves the verification library update data to the first memory, and sends a verification library data update request to the hard disk management controller;

[0127] When receiving the verification library data update request, the hard disk management controller determines whether the verification library data can be updated. If so, it obtains the verification library update data from the first memory and updates the verification library data stored in the verification library data storage area according to the verification library update data.

[0128] Specifically, if Figure 4 As shown, the storage space partition includes: the verification library storage area, that is, the verification library data storage area. Figure 2 As shown, the verification device also includes: a touch screen, namely a touch display unit, which is connected to the collection management controller.

[0129] Combine Figure 7 The process for updating verification database data in this embodiment is described below. The user begins by long-pressing the touchscreen to access the administrator login interface. Entering the administrator password accesses the settings interface. The user selects which verification database to update. After selecting Update, the touchscreen display unit receives the verification database data update instruction and sends it to the acquisition management controller.

[0130] The acquisition management controller is used to obtain the verification library update data when receiving the verification library data update instruction. For example, the acquisition management controller reads the verification library, i.e., the verification library update data, from a USB flash drive. The acquisition management controller packages the verification library update data into an update data packet and sends the update data packet to the verification controller.

[0131] Packing data into the verification controller DDR includes: upon receiving the update data packet, the verification controller parses the update data packet to obtain the verification database update data, and saves the verification database update data to the first memory. Thereafter, the verification controller sends a verification database data update request to the hard disk management controller.

[0132] If the hard disk management controller does not allow the verification library data to be updated, the verification controller resends a verification library data update request to the hard disk management controller. If the hard disk management controller allows the verification library data to be updated, the verification controller obtains the verification library update data from the first memory and transmits the verification library update data to the hard disk management controller. The hard disk management controller updates the verification library data stored in the verification library data storage area according to the verification library update data.

[0133] In addition, after the verification library data is updated, the verification controller can send an update success message to the acquisition management controller, and the acquisition management controller controls the touch display unit to display that the verification library is updated successfully; end.

[0134] In some optional implementations, the storage space of the encrypted hard disk includes a verification library data storage area and a backup area; the verification library data storage area is used to store verification library data;

[0135] The collection management controller is used to obtain the update personnel information and verification database update data of the verification database update personnel when obtaining the verification database data update instruction, and send the update personnel information and verification database update data to the verification controller;

[0136] The verification controller is used to obtain the updater verification information from the verification database data and compare the updater information with the updater verification information. If the comparison is successful, a data backup request is generated and the data backup request and the verification database update data are sent to the hard disk management controller;

[0137] The hard disk management controller is used to generate a snapshot of the verification library data after receiving a data backup request, back up the snapshot and the verification information of the update personnel in the verification library data to the backup area, and save the index value of the backup area. After the backup is completed, the verification library data stored in the verification library data storage area is updated according to the verification library update data;

[0138] In the event of an update failure, the hard disk management controller is used to obtain the updater verification information and snapshot according to the index value, and send the updater verification information to the verification controller;

[0139] The verification controller is used to obtain new updater information and compare the new updater information with the updater verification information. If the comparison is successful, a successful response is fed back to the hard disk management controller.

[0140] The hard disk management controller is used for restoring the verification library data stored in the verification library data storage area according to the snapshot when receiving a successful response and a data recovery instruction.

[0141] Specifically, the verification database updater issues a verification database data update instruction to the collection management controller, for example, by long pressing the touch display unit to enter the administrator login interface and issuing the verification database data update instruction through the administrator login interface. In addition, the verification database updater sends the updater information to the collection management controller.

[0142] When receiving a verification database data update instruction, the collection management controller obtains the update personnel information and verification database update data of the verification database updater. For example, the collection management controller reads the verification database, i.e., the verification database update data, from a USB flash drive. The update personnel information and verification database update data are sent to the verification controller.

[0143] The verification controller obtains the updater's verification information from the verification database and compares it with the updater's verification information. If the comparison is successful, it determines that the operation target is the verification database updater and generates a data backup request, instructing the hard disk management controller to back up the updater's verification information and the current verification database snapshot before updating the verification database, and save the index information. The data backup request and the verification database update data are then sent to the hard disk management controller.

[0144] After receiving the data backup request, the hard disk management controller generates a snapshot of the verification library data, backs up the snapshot and the updated personnel verification information in the verification library data to the backup area, and saves the index value of the backup area. After the backup is completed, the verification library data stored in the verification library data storage area is updated according to the verification library update data.

[0145] If the backup fails, the original verification database may be damaged, data may be lost, or it may be unreadable, making it impossible to complete identity authentication. The hard disk management controller obtains the updater verification information and snapshot based on the index information and sends the updater verification information to the verification controller.

[0146] The verification controller compares the new updater information with the updater verification information and verifies the identity of the updater again. If the verification is successful, a success response is fed back to the hard disk management controller.

[0147] When the hard disk management controller receives a successful response and data recovery instruction, it restores the verification library data stored in the verification library data storage area according to the snapshot, first restores the original identity verification function, and then the update personnel issues an instruction to determine whether to update the verification library data again.

[0148] In this embodiment, before updating the verification database, the updater's verification information and the current verification database snapshot are backed up. If the backup fails, the verification database may be damaged. The identity of the updater can be verified again based on the backed-up updater's verification information, and the previous verification database can be restored based on the snapshot to ensure the normal use of the encrypted hard disk.

[0149] In some optional embodiments, the verification device includes: an expansion interface;

[0150] The expansion interface is used to connect to a mobile storage device that stores updated data of the verification library and transmit the updated data of the verification library to the acquisition management controller;

[0151] And / or, the extended interface is used to connect to the user information collection module, obtain user information from the user information collection module, and transmit the user information to the collection management controller, wherein the user information is included in the user verification information.

[0152] Specifically, if Figure 2 As shown, the verification device includes an expandable interface. Figure 3 As shown, the verification device includes an expansion interface, and the acquisition management controller is connected to the expansion interface via USB2.

[0153] The expandable interface uses a standard USB port for uploading verification database data. Mobile storage devices such as USB flash drives and external hard drives can be used to write verification database updates to the mobile storage device. Connect the mobile storage device to the expansion interface, and the acquisition management controller retrieves the verification database updates from the mobile storage device through the expansion interface.

[0154] In addition, the expandable interface allows for functional expansion and connection to user information collection modules, such as the wireless function module, the facial 3D structured light verification module, and the vein information acquisition module. The expansion interface is used to obtain user information from the user information collection module and transmit the user information to the collection management controller for subsequent identity verification.

[0155] Taking the expandable interface connected to the vein information acquisition module as an example, the vein information acquisition module includes a vein recognition area and is composed of an image processor, a touch sensor switch, an infrared light source, and a camera. When the touch sensor switch senses the user's finger placed on the finger vein recognition area, it generates a feedback signal that is transmitted to the infrared light source, activating it to emit infrared light. The infrared light emitted by the infrared light source includes a first band of infrared light and a second band of infrared light. The first band of infrared light has a wavelength of 910nm to 940nm, and the second band of infrared light has a wavelength of 750nm to 770nm. The image processor controls the filter switch to activate and filter the infrared light emitted by the infrared light source. For example, it first filters out the first band of infrared light, allowing only the second band of infrared light to pass through. The camera captures the first target finger vein image and transmits it to the image processor. The image processor then controls the filter switch to filter out the second band of infrared light, allowing only the first band of infrared light to pass through. The camera captures the second finger vein image and transmits it to the image processor. The image processor analyzes and processes the first target finger vein image and the second target finger vein image to complete finger vein recognition and obtain vein information of the user.

[0156] In this embodiment, the steps of verifying the identity of the user in combination with various user verification information include steps A1 to A5.

[0157] Step A1, face image acquisition: Use the image acquisition module to obtain the user's image, and pass the image to the system's face monitoring model (MTCNN) for recognition to identify the face image.

[0158] Step A2, vein information acquisition: Use the vein information acquisition module to directly perform finger vein recognition on the patient to obtain vein information.

[0159] Step A3, other verification information collection and identification: use the fingerprint collection module to obtain fingerprint information; use the card information collection module to obtain card storage information; use the touch display unit to obtain password information, etc.

[0160] Step A4, Identity Verification: The facial image is processed through a face comparison model (MobileFaceNets) for facial recognition, matching the corresponding user with the preset verification information. The vein information is submitted to the system's biometric recognition system (Composition of Biometric Recognition System) for preprocessing, feature extraction, matching / decision making, and matching the corresponding user with the preset verification information. Other verification information is submitted to the system's other identity information recognition systems for preprocessing, feature extraction, matching / decision making, and matching the corresponding user with the preset verification information.

[0161] Step A5: It is concluded that the users matched by the above three methods adopt the principle of minority obeys majority. If two or three methods are matched successfully and the matched users are the same, the user verification is successful and the corresponding user rights of the user are obtained. Otherwise, the identity verification fails.

[0162] In this embodiment, an expandable interface is provided in the verification device to facilitate expansion of system functions, thereby improving the functions and application scope of the system.

[0163] In some optional embodiments, the verification information collection unit includes: an image collection module, a fingerprint collection module, and a card information collection module;

[0164] The image acquisition module is connected to the acquisition management controller and is used to obtain image information and transmit the image information to the acquisition management controller, wherein the image information is included in the user verification information;

[0165] The fingerprint collection module is connected to the collection management controller and is used to obtain fingerprint information and transmit the fingerprint information to the collection management controller, wherein the fingerprint information is included in the user verification information;

[0166] The card information collection module is connected to the collection management controller and is used to obtain the card storage information and transmit the card storage information to the collection management controller, wherein the card storage information is included in the user verification information.

[0167] Specifically, the user verification information includes: image information, fingerprint information and card storage information. Figure 2As shown, the verification information acquisition unit can perform face acquisition, password acquisition, fingerprint acquisition and QR code acquisition. The image acquisition module is for example: image acquisition camera module, the fingerprint acquisition module is for example: fingerprint acquisition module, the card information acquisition module is for example: card swiping module. Figure 3 As shown, the verification information collection unit includes: an image acquisition camera module, a fingerprint collection module and a card swiping module.

[0168] The image acquisition camera module connects to the acquisition management controller via module tail cables, connectors, and USB0. For example, the image acquisition camera module includes a lens, image sensor, peripheral circuit boards, and necessary mounting structures. The image acquisition camera module connects to the acquisition management controller via a USB communication interface and plugs into the circuit board interface of the external module via a tail cable. After capturing image information such as faces and QR codes, the module transmits the image information to the acquisition management controller via the USB communication interface, completing the image acquisition.

[0169] The fingerprint acquisition module is connected to the acquisition management controller via module tail cables, connectors, and UART0. The fingerprint acquisition module integrates a touch sensor and the necessary circuit boards. The external UART communication protocol interface is plugged into the circuit board interface of the external module via tail cables to collect fingerprint information and transmit it to the acquisition management controller.

[0170] The card swiping module, also known as the card information collection module, integrates a radio frequency coil, a card swiping chip, and the necessary circuit boards. It features an external UART communication protocol interface that plugs into the circuit board interface of an external module via a pigtail cable. This allows it to collect card information and transmit it to the collection and management controller. The card information collection module can access information stored on the card using near-field communication (NFC) technology.

[0171] The acquisition management controller packages and encrypts the information uploaded by the image acquisition module, fingerprint acquisition module and card information acquisition module and sends it to the verification controller. Figure 3 As shown, the acquisition management controller must have at least one RGB display interface, one I2C communication interface, three USB communication interfaces, and two UART communication interfaces. The acquisition management controller has one USB interface and is used in conjunction with a USB-Hub, a USB device used to expand USB interfaces. A single USB upstream interface can be expanded into multiple downstream interfaces, allowing a single host to connect to multiple devices simultaneously, achieving three-way USB functionality. These hardware interfaces enable data exchange between various modules and require sufficient data caching and processing capabilities.

[0172] In combination with the above embodiments, the appearance of the verification device can be determined, for example: Figure 8 As shown, the image acquisition camera module 1; 4-inch display touch screen 2; fingerprint collection area 3; card swiping area 4; expandable interface 5; verification interface 6; external verification module housing 7. The card swiping area 4 uses NFC technology to read the information stored in the card.

[0173] In this embodiment, the image acquisition module, fingerprint acquisition module and card information acquisition module are integrated in the verification information acquisition unit to collect image information, fingerprint information and card storage information, making it convenient to verify the user identity using multiple identity verification methods.

[0174] Although the embodiments of the present invention have been described with reference to the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention. Such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A hard disk identity verification system, characterized in that: The system includes: a verification device and a main control device; the main control device is set in the encrypted hard disk; the verification device is connected to the main control device in the encrypted hard disk through a cable; The verification device includes: a verification information collection unit and a collection management controller; The verification information collection unit is connected to the collection management controller and is used to collect user verification information and transmit the user verification information to the collection management controller; The acquisition management controller is connected to the main control device and is used to send the user verification information to the main control device; The main control device is used to obtain preset verification information, compare the user verification information with the preset verification information, and if the comparison is successful, determine an openable storage area in the storage space of the encrypted hard disk based on the preset verification information, and open the openable storage area; The main control device includes: a verification controller and a hard disk management controller; the encrypted hard disk includes: a first memory and a second memory; The verification controller is connected to the acquisition management controller and is used to obtain the user verification information and obtain verification library data, wherein the verification library data includes the preset verification information and corresponding preset authority information; The verification controller is used to send a request to move the verification library data to the hard disk management controller; The hard disk management controller is connected to the second memory and is used to determine whether the hard disk management controller allows the verification library to be moved when receiving the verification library data migration request; The verification controller is configured to resend a request to move the verification database data to the hard disk management controller if the hard disk management controller does not allow the verification database to be moved; The hard disk management controller is configured to copy the verification library data from the storage space of the encrypted hard disk to the second memory if the hard disk management controller allows the verification library to be moved, and transmit the verification library data from the second memory to the verification controller; The verification controller is connected to the first memory, and is used to receive the verification library data and save the verification library data to the first memory, wherein the first memory is used to provide the verification library data to the verification controller.

2. The system according to claim 1, wherein: The verification device further includes: a touch display unit; The touch display unit is connected to the acquisition management controller and is used to obtain password information input by the user and transmit the password information to the acquisition management controller, wherein the password information is included in the user verification information; The acquisition management controller is used to send a first display instruction to the touch display unit to instruct the touch display unit to display a first prompt message when the comparison between the user verification information and the preset verification information fails, or to send a second display instruction to the touch display unit to instruct the touch display unit to display a second prompt message when the main control device opens the openable storage area.

3. The system according to claim 2, characterized in that The verification controller is connected to the hard disk management controller, and is configured to obtain first feature information from the user verification information, obtain second feature information from the preset verification information, compare the first feature information with the second feature information, and if the comparison is successful, determine the user authority based on the preset authority information corresponding to the preset verification information, generate verification success information including the user authority, and send the verification success information to the hard disk management controller; The hard disk management controller determines the user authority according to the verification success information, determines the openable storage area in the storage space according to the user authority, and opens the openable storage area.

4. The system according to claim 3, characterized in that The verification controller is configured to send a comparison failure message to the acquisition management controller when the comparison between the first feature information and the second feature information fails, wherein the comparison failure message is configured to instruct the acquisition management controller to send a first display instruction to the touch display unit so that the touch display unit displays a first prompt message; The verification controller is used to send a comparison success message to the acquisition management controller when the first feature information is successfully compared with the second feature information and the main control device opens the openable storage area, wherein the comparison success message is used to instruct the acquisition management controller to send a second display instruction to the touch display unit, so that the touch display unit displays second prompt information.

5. The system according to claim 3, wherein: The verification device includes a first verification interface, and the encrypted hard disk includes a second verification interface; One end of the cable is connected to the first verification interface, and the other end is connected to the second verification interface; The acquisition management controller is connected to the verification controller via the first verification interface, the second verification interface and the cable; The main control device supplies power to the verification device through the first verification interface, the second verification interface, and the cable.

6. The system according to claim 3, wherein: The storage space of the encrypted hard disk includes a public storage area and a permission-restricted storage area; The hard disk management controller determines the openable storage area in the storage space according to the user authority, including: Determining an operable sub-area corresponding to the user authority in the authority restriction storage area; The public storage area and the operable sub-area are used as the openable storage area.

7. The system according to claim 1, wherein: The storage space of the encrypted hard disk includes a verification library data storage area; The verification library data storage area is used to store the verification library data; The verification device further includes: a touch display unit; the touch display unit is connected to the acquisition management controller; The touch display unit is used to obtain the verification database data update instruction and send the verification database data update instruction to the acquisition management controller; The acquisition management controller is used to obtain the verification library update data when receiving the verification library data update instruction, package the verification library update data to obtain an update data packet, and send the update data packet to the verification controller; Upon receiving the update data packet, the verification controller parses the update data packet to obtain the verification database update data, saves the verification database update data to the first memory, and sends a verification database data update request to the hard disk management controller; When the hard disk management controller receives the verification library data update request, it determines whether the verification library data can be updated. If so, it obtains the verification library update data from the first memory and updates the verification library data stored in the verification library data storage area according to the verification library update data.

8. The system according to claim 3, wherein: The storage space of the encrypted hard disk includes a verification library data storage area and a backup area; the verification library data storage area is used to store the verification library data; The acquisition management controller is used to obtain the update personnel information and the verification database update data of the verification database update personnel when obtaining the verification database data update instruction, and send the update personnel information and the verification database update data to the verification controller; The verification controller is used to obtain the updater verification information from the verification library data, and compare the updater information with the updater verification information. If the comparison is successful, a data backup request is generated, and the data backup request and the verification library update data are sent to the hard disk management controller; The hard disk management controller is configured to, after receiving the data backup request, generate a snapshot of the verification library data, back up the snapshot and the updater verification information in the verification library data to the backup area, and save the index value of the backup area; after the backup is completed, update the verification library data stored in the verification library data storage area according to the verification library update data; In the case of update failure, the hard disk management controller is used to obtain the updater verification information and the snapshot according to the index value, and send the updater verification information to the verification controller; The verification controller is used to obtain new updater information, compare the new updater information with the updater verification information, and if the comparison is successful, feed back a success response to the hard disk management controller; The hard disk management controller is configured to restore the verification library data stored in the verification library data storage area according to the snapshot when receiving the success response and the data recovery instruction.

9. The system according to claim 7, wherein: The verification device includes: an expansion interface; The expansion interface is used to connect to a mobile storage device that stores the updated data of the verification library, and transmit the updated data of the verification library to the acquisition management controller; And / or, the expansion interface is used to connect to a user information acquisition module, obtain user information from the user information acquisition module, and transmit the user information to the acquisition management controller, wherein the user information is included in the user verification information.

10. The system according to claim 1, wherein: The verification information collection unit includes: an image collection module, a fingerprint collection module and a card information collection module; The image acquisition module is connected to the acquisition management controller and is used to acquire image information and transmit the image information to the acquisition management controller, wherein the image information is included in the user verification information; The fingerprint collection module is connected to the collection management controller and is used to obtain fingerprint information and transmit the fingerprint information to the collection management controller, wherein the fingerprint information is included in the user verification information; The card information acquisition module is connected to the acquisition management controller and is used to obtain card storage information and transmit the card storage information to the acquisition management controller, wherein the card storage information is included in the user verification information.

Images