Computer hard disk encryption and decryption method and device and medical equipment

Abstract

The embodiment of the invention provides a computer hard disk encryption and decryption method and device and medical equipment. The computer hard disk encryption and decryption method comprises the steps that inherent hardware information of a computer is obtained; when a first preset condition is met, triggering encryption processing on a hard disk of the computer according to the inherent hardware information; and when a second preset condition is met, triggering decryption processing on the hard disk of the computer according to the inherent hardware information. Therefore, under the condition that the computer equipment is not supported by the TPM, encryption and decryption of the hard disk can be achieved, the encryption and decryption process can be automatically carried out, manual operation of a user is not needed, and when the hard disk is moved out of the computer equipment, data in the hard disk cannot be decrypted and read.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of information security technology, and in particular to a computer hard disk encryption and decryption method, device, and medical equipment. Background Art

[0002] Hard disk is one of the most important storage devices of computer equipment. Some applications required for computer equipment to run and the data generated by them are stored on the hard disk. At present, encryption of local data hard disk has become a standard requirement in information-sensitive industries. By encrypting the hard disk, sensitive data can be prevented from being leaked when the equipment is stolen or repaired.

[0003] Currently, for Windows systems, there are tools such as Bitlocker to implement the encryption function of hard disk data. However, Bitlocker must be equipped with a Trusted Platform Module (TPM) chip. Summary of the invention

[0004] The embodiments of the present application provide a computer hard disk encryption and decryption method, device and medical equipment.

[0005] According to one aspect of an embodiment of the present application, a computer hard disk encryption and decryption method is provided, the method comprising:

[0006] Get the inherent hardware information of the computer;

[0007] When a first predetermined condition is met, triggering a process of encrypting the hard disk of the computer according to the inherent hardware information;

[0008] When a second predetermined condition is met, a process of decrypting the hard disk of the computer according to the inherent hardware information is triggered.

[0009] According to one aspect of an embodiment of the present application, a computer hard disk encryption and decryption device is provided, the device comprising:

[0010] An acquisition unit, which acquires inherent hardware information of the computer;

[0011] a processing unit, which triggers a process of encrypting the hard disk of the computer according to the inherent hardware information when a first predetermined condition is met;

[0012] When a second predetermined condition is met, a process of decrypting the hard disk of the computer according to the inherent hardware information is triggered.

[0013] According to one aspect of an embodiment of the present application, a storage medium storing a computer-readable program is provided, wherein the computer-readable program enables a computer to execute the computer hard disk encryption and decryption method described in the aforementioned aspect.

[0014] According to one aspect of an embodiment of the present application, a medical device is provided, comprising the computer hard disk encryption and decryption device described in the aforementioned aspect.

[0015] With reference to the following description and accompanying drawings, the specific implementation of the embodiment of the present application is disclosed in detail, indicating the way in which the principle of the embodiment of the present application can be adopted. It should be understood that the implementation of the present application is not limited in scope. Within the scope of the spirit and clauses of the attached claims, the implementation of the present application includes many changes, modifications and equivalents. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The included drawings are used to provide a further understanding of the embodiments of the present application, which constitute a part of the specification, are used to illustrate the implementation methods of the present application, and together with the text description, explain the principles of the present application. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other implementation methods can be obtained based on these drawings without creative work. In the drawings:

[0017] Figure 1 It is a schematic diagram of a computer hard disk encryption and decryption method according to an embodiment of the present application;

[0018] Figure 2 It is a schematic diagram of a computer hard disk encryption and decryption method according to an embodiment of the present application;

[0019] Figure 3 It is a schematic diagram of a computer hard disk encryption and decryption device according to an embodiment of the present application;

[0020] Figure 4 It is a schematic diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0021] With reference to the accompanying drawings, the foregoing and other features of the embodiments of the present application will become apparent through the following description. In the description and the accompanying drawings, specific embodiments of the present application are specifically disclosed, which show some embodiments in which the principles of the embodiments of the present application can be adopted. It should be understood that the present application is not limited to the described embodiments. On the contrary, the embodiments of the present application include all modifications, variations and equivalents that fall within the scope of the attached claims.

[0022] In the embodiments of the present application, the terms "first", "second", etc. are used to distinguish different elements from the title, but do not represent the spatial arrangement or time sequence of these elements, etc., and these elements should not be limited by these terms. The term "and / or" includes any one and all combinations of one or more of the terms listed in association. The terms "comprise", "include", "have", etc. refer to the existence of the stated features, elements, components or components, but do not exclude the existence or addition of one or more other features, elements, components or components. In the present application, the words "connect", "connected", "coupled", etc. and the like involved in the embodiments are not limited to physical or mechanical connections, but may include electrical connections, whether directly or indirectly.

[0023] In the embodiments of the present application, the singular forms "a", "the", etc. include plural forms and should be broadly understood as "a kind" or "a type" rather than being limited to the meaning of "one"; in addition, the term "said" should be understood to include both singular and plural forms, unless the context clearly indicates otherwise. In addition, the term "according to" should be understood as "at least in part according to...", and the term "based on" should be understood as "at least in part based on...", unless the context clearly indicates otherwise.

[0024] Features described and / or shown for one embodiment may be used in one or more other embodiments in the same or similar manner, combined with features in other embodiments, or replace features in other embodiments. The term "includes / comprising" when used herein refers to the presence of a feature, an entirety, a step, or a component, but does not exclude the presence or addition of one or more other features, entireties, steps, or components.

[0025] In the currently common hard disk encryption methods, such as using the Bitlocker tool for encryption, the user is required to manually enter the hard disk password each time the computer is turned on. This operation is too cumbersome, especially for the hard disks of computer equipment in unattended computer rooms. This method is not suitable for encryption.

[0026] In addition, the Bitlocker tool encryption must be equipped with a TPM chip, which undoubtedly adds additional hardware costs. Moreover, the Bitlocker tool is only applicable to Windows systems and not to other operating systems.

[0027] In addition, when the computer device does not support TPM, the known encryption solution includes writing the preset key into the reserved space of the read-only memory ROM of the motherboard, but the implementation threshold of this solution is high; or the known encryption solution includes writing the preset key into an unencrypted partition of the hard disk, but this solution puts the key in a risky environment.

[0028] In response to at least one of the above problems, embodiments of the present application provide a computer hard disk encryption and decryption method, device, and medical equipment.

[0029] The following is a detailed description of the embodiments of the present application.

[0030] The present application embodiment provides a computer hard disk encryption and decryption method. Figure 1 Schematic diagram of a computer hard disk encryption method according to an embodiment of the present application. Figure 1 As shown, the method includes:

[0031] 101, obtaining the inherent hardware information of the computer;

[0032] 103, when a first predetermined condition is met, triggering a process of encrypting the hard disk of the computer according to the inherent hardware information;

[0033] When a second predetermined condition is met, a process of decrypting the hard disk of the computer according to the inherent hardware information is triggered.

[0034] In some embodiments, the computer includes but is not limited to a personal computer, a server, a cloud computer, a workstation, a laptop computer, and the like. The computer includes an operating system hard disk on which a computer operating system (computer management control program) is installed, and a data hard disk for storing other applications and data, and the operating system hard disk and the data hard disk are different hardware devices. The hard disk includes a serial advanced technology attachment (Serial Advanced Technology Attachment, SATA) hard disk, and may also include a hard disk or a U disk (USB disk, USB flash disk, referred to as U disk) supporting the SATA protocol, etc. The hard disk to be encrypted and decrypted in this application includes the data hard disk (hereinafter referred to as hard disk), and the data hard disk may be one or more.

[0035] In some embodiments, the computer operating system installed on the operating system hard disk may be Windows, Linux, Unix, etc., but the embodiments of the present application are not limited thereto. The computer mainboard may be installed with a TPM or may not be installed with a TPM.

[0036] In some embodiments, operations 101 and 103 may be viewed as program instructions (eg, binary codes) stored in an operating system hard disk, or stored in other electronic devices that can communicate with the computer, but the embodiments of the present application are not limited thereto.

[0037] In some embodiments, the inherent hardware information of a computer refers to the inherent hardware information of the computer where the hard disk to be encrypted or decrypted is located. The inherent hardware information is the specific information of the computer and can uniquely identify the computer. In other words, the inherent hardware information of different computers is different. Among them, the inherent hardware information includes: at least one of the motherboard media access control (MAC) address, network card identification information, motherboard identification information, central processing unit identification information, and graphics processing unit identification information. For example, the identification information includes a serial number or a universally unique identifier (Universally Unique Identifier, UUID), etc., and the embodiments of the present application are not limited to this.

[0038] In some embodiments, the instructions for obtaining the inherent hardware information of the computer can refer to related technologies. For example, for UUID, it can be obtained by setting the instruction "wmic csproduct get UUID" in Windows system and by setting the instruction "dmidecode -s system -uuid" in Linux system. Examples are not given here one by one.

[0039] In some embodiments, in 101, inherent hardware information of one or more (M, M is an integer greater than 1) types of computers can be obtained, including: trying to obtain the inherent hardware information of a computer, and successfully obtaining the inherent hardware information of the computer; or, trying to obtain the inherent hardware information of a computer, and when the inherent hardware information of the computer cannot be successfully obtained, trying to obtain the inherent hardware information of the next computer, until the inherent hardware information of N (N is an integer greater than or equal to 1) types of computers is successfully obtained; or trying to obtain the inherent hardware information of a computer, and when the inherent hardware information of the computer is successfully obtained, trying to obtain the inherent hardware information of the next computer, until the inherent hardware information of M computers is successfully obtained, wherein, when obtaining the inherent hardware information of M computers, the acquisition order can be predetermined as needed, and the embodiments of the present application are not limited to this.

[0040] In some embodiments, obtaining the inherent hardware information of a computer includes: sending a request instruction to the computer to obtain the inherent hardware information of the computer, and receiving the inherent hardware information of the computer returned by the computer (indicating that the inherent hardware information of the computer has been successfully obtained). When a preset error code (for example, FFFFFFFFFF) is received, it indicates that the inherent hardware information of the computer for the request instruction cannot be successfully obtained.

[0041] For example, obtaining the inherent hardware information of a computer: since not all manufacturers provide UUID, if an error code is received after issuing a request instruction to obtain the motherboard UUID, it is determined that the UUID cannot be successfully obtained, then a request instruction to obtain the motherboard MAC address is issued again, and the motherboard MAC address is received back.

[0042] For example, to obtain the inherent hardware information of a computer: a request instruction to obtain the motherboard UUID may be issued, and the returned motherboard UUID may be received.

[0043] For example, to obtain the inherent hardware information of various computers: a request instruction to obtain the motherboard serial number can be issued, and the motherboard serial number can be received back, and then an instruction to obtain the motherboard MAC address can be issued, and the motherboard MAC address can be received back. Examples are not given one by one here.

[0044] In some embodiments, a key can be generated based on the inherent hardware information, wherein when the inherent hardware information of a computer is obtained, the inherent hardware information of the computer is directly used as the key, or, when the inherent hardware information of a computer is obtained, multiple keys are generated based on the inherent hardware information of the computer, or, when the inherent hardware information of multiple computers is obtained, the inherent hardware information of the multiple (M) types of calculations can be used as M keys respectively, or, when the inherent hardware information of multiple computers is obtained, a custom algorithm can be used to generate one or more keys based on the inherent hardware information of the multiple computers, for example, the total string after the inherent hardware information of the multiple computers is connected in the order of acquisition is used as the key, or, the inherent hardware information of the multiple computers can be operated, and the operation can be, for example, the addition, subtraction, multiplication, etc. of multiple strings, and the operation result is used as the key, or, for example, the operation can be to replace the substring of another inherent hardware information with a substring of one inherent hardware information, and the string after the substring of the other inherent hardware information is replaced is used as the key, etc. Examples are not given one by one here, and the embodiments of the present application are not limited to this.

[0045] It can be seen from the above embodiments that a key is generated based on the inherent hardware information of the computer to encrypt and decrypt the hard disk, so that the hard disk can be bound to a specific computer. This means that when the hard disk is separated from the computer, the hard disk cannot be decrypted because the inherent hardware information of the computer cannot be obtained. That is, when the hard disk is removed from the computer device, the data in the hard disk will not be decrypted and read. In addition, multiple keys are generated based on the inherent hardware information of the computer, which helps to enhance the reliability of the encryption and decryption technology and facilitate key management.

[0046] In some embodiments, the method may further include: 102, writing the acquired inherent hardware information (or the generated key) into the memory cache of the computer; that is, the key will not be written into the hard disk or the motherboard ROM, but will be temporarily written into the memory cache of the computer. After the key is read from the memory cache in the encryption or decryption step, the key in the memory cache can be cleared, thereby further protecting the security of the key, avoiding key leakage, and the implementation is simple.

[0047] The encryption and decryption processes are described below.

[0048] In some embodiments, when a first predetermined condition is met, a process of encrypting the hard disk of the computer according to the inherent hardware information is triggered. For example, the first predetermined condition may be to initialize the computer, that is, when the computer is initialized, the inherent hardware information of the computer is obtained, triggering the process of encrypting the hard disk of the computer according to the inherent hardware information; wherein, after the inherent hardware information is obtained, that is, written into the memory cache, a key may be generated according to the fixed hardware information according to the aforementioned method, and the hard disk of the computer may be encrypted according to the generated key. For example, the generated key may be used to encrypt the hard disk according to the Advanced Encryption Standard (AES) algorithm, but the embodiments of the present application are not limited thereto, and other encryption algorithms are also applicable to the embodiments of the present application. In addition, when it is necessary to encrypt multiple (K, K is an integer greater than 1) hard disks, the same key and the same encryption algorithm can be used to encrypt each hard disk separately, but the embodiments of the present application are not limited to this. For example, when obtaining multiple (M) types of inherent hardware information, M keys can be generated. Assuming M=K, M keys are used to encrypt K hard disks respectively. Different hard disks use different encryption keys. The correspondence between hard disks and keys can be determined as needed. For example, the serial numbers of each hard disk are obtained in turn, and encryption keys are allocated in order from small to large serial numbers. The order of allocation can be the order in which the inherent hardware information is obtained, and examples are not given one by one here.

[0049] In some embodiments, the instruction of the above encryption method "obtaining the inherent hardware information of the computer and encrypting the hard disk of the computer according to the inherent hardware information" can be written into the computer initialization setting program, so that when the computer is initialized, the encryption method is automatically called (triggered) to encrypt the hard disk, but the embodiment of the present application is not limited to this. Alternatively, when the hard disk is decrypted and put into use, when no user operates the computer for a predetermined period of time, the instruction can be triggered to re-encrypt the hard disk.

[0050] In some embodiments, when a second predetermined condition is met, a process of decrypting the hard disk of the computer according to the inherent hardware information is triggered. For example, the second predetermined condition may be restarting the computer, that is, when the computer is restarted, the inherent hardware information of the computer is obtained, triggering a process of decrypting the hard disk of the computer according to the inherent hardware information. Among them, after the inherent hardware information is obtained, that is, written into the memory cache, a key can be generated according to the fixed hardware information according to the aforementioned method, the key can be read from the memory cache (the key can be cleared from the memory cache after reading the key), and the hard disk is decrypted according to the decryption algorithm corresponding to the encryption algorithm. If the decryption is successful, it means that the key is correct, and the hard disk can be loaded and used. If the decryption fails, it means that the key is wrong. In addition, when it is necessary to decrypt multiple (K) hard disks, the same key read from the memory cache and the same encryption algorithm can be used to decrypt each hard disk separately, but the embodiments of the present application are not limited to this. For example, when obtaining multiple (M) types of inherent hardware information, M keys can be generated. Assuming M=K, M keys are used to decrypt K hard disks separately. Different hard disks use different keys for decryption. The correspondence between hard disks and keys is as described above and will not be repeated here.

[0051] That is to say, in the embodiment of the present application, the same key can be used for encryption and decryption at the same time, that is, the hard disk of the present application adopts symmetric encryption, also known as single-key encryption; encryption and decryption use the encryption algorithm (decryption algorithm) with the same key.

[0052] In some embodiments, the instruction of the above-mentioned decryption method "obtaining the inherent hardware information of the computer, and decrypting the hard disk of the computer according to the inherent hardware information" can be written into the computer restart (or power-on) program, so that when the computer restarts, the decryption method is automatically called (triggered) to decrypt the hard disk. Thus, when the computer is restarted, the hard disk is automatically decrypted, and there is no need to enter the hard disk password every time, which is convenient to operate.

[0053] Figure 2 Schematic diagram of the computer encryption and decryption method of the embodiment of the present application. Figure 2 As shown, the method includes:

[0054] 201, when initializing and setting the computer, obtaining inherent hardware information of the computer;

[0055] 202, storing the inherent hardware information in a memory cache;

[0056] 203, encrypting the hard disk of the computer according to the inherent hardware information; clearing the inherent hardware information written in the memory cache;

[0057] 204, when the computer is restarted (including powered on), obtaining inherent hardware information of the computer;

[0058] 205, storing the inherent hardware information in a memory cache;

[0059] 206, decrypting the hard disk of the computer according to the inherent hardware information read from the memory cache; clearing the inherent hardware information written in the memory cache;

[0060] 207, load and use the hard disk when decryption is successful.

[0061] It is worth noting that the above Figure 2 The embodiments of the present application are only schematically described, but the present application is not limited thereto. For example, the execution order of the various operations can be appropriately adjusted, and other operations can be added or some operations can be reduced. Those skilled in the art can make appropriate modifications based on the above content, and are not limited to the above appended Figure 2 For example, steps 201-203 and 204-207 can be executed independently. After step 207 is executed, if the computer is restarted (including powering on), steps 204-207 are repeated.

[0062] The above embodiments are merely exemplary of the embodiments of the present application, but the present application is not limited thereto, and appropriate modifications may be made based on the above embodiments. For example, the above embodiments may be used alone, or one or more of the above embodiments may be combined.

[0063] The present application also provides a computer hard disk encryption and decryption device. Figure 3 Schematic diagram of a computer hard disk encryption and decryption device according to an embodiment of the present application. Figure 3 As shown, the device comprises:

[0064] An acquisition unit 301, which acquires inherent hardware information of a computer;

[0065] The processing unit 302 triggers the encryption of the hard disk of the computer according to the inherent hardware information when a first predetermined condition is met; and triggers the decryption of the hard disk of the computer according to the inherent hardware information when a second predetermined condition is met.

[0066] In some embodiments, the implementation of the acquisition unit 301 and the processing unit 302 may refer to the aforementioned embodiments and will not be repeated here.

[0067] For example, the processing unit 302 generates a key according to the inherent hardware information, and encrypts or decrypts the hard disk of the computer according to the key.

[0068] In some embodiments, when the computer is initially set up, the acquisition unit 301 acquires the inherent hardware information of the computer, and the processing unit 302 triggers a process of encrypting the hard disk of the computer according to the inherent hardware information;

[0069] In some embodiments, when the computer is restarted, the acquisition unit 301 acquires the inherent hardware information of the computer, and the processing unit 302 triggers a process of decrypting the hard disk of the computer according to the inherent hardware information.

[0070] In some embodiments, the acquisition unit 301 also writes the acquired inherent hardware information into the memory cache of the computer; and the processing unit 302 encrypts or decrypts the hard disk of the computer according to the inherent hardware information stored in the memory cache and clears the inherent hardware information written in the memory cache.

[0071] The above embodiments are merely exemplary of the embodiments of the present application, but the present application is not limited thereto, and appropriate modifications may be made based on the above embodiments. For example, the above embodiments may be used alone, or one or more of the above embodiments may be combined.

[0072] An embodiment of the present application provides an electronic device, Figure 4 is a schematic diagram of an electronic device according to an embodiment of the present application. Figure 4 As shown, the electronic device 400 may include: at least one interface (not shown in the figure), a processor (eg, a central processing unit (CPU)) 401 , and a memory 402 ; the memory 402 is coupled to the processor 401 .

[0073] In some embodiments, the functions of the acquisition unit and the processing unit described in the above embodiments may be integrated into the processor 401. For example, the processor 401 may be configured to: acquire the inherent hardware information of the computer; when a first predetermined condition is met, trigger the process of encrypting the hard disk of the computer according to the inherent hardware information; when a second predetermined condition is met, trigger the process of decrypting the hard disk of the computer according to the inherent hardware information.

[0074] Alternatively, the acquisition unit and the processing unit may be configured as a chip connected to the processor 401 , and the functions of the acquisition unit and the processing unit may be implemented through the control of the processor 401 .

[0075] It is worth noting that the electronic device 400 may also include Figure 4 For components not shown, reference may be made to the prior art.

[0076] In the embodiment of the present application, the processor 401 is sometimes also referred to as a controller or an operation control, and may include a microprocessor or other processor devices and / or logic devices.

[0077] In some embodiments, the memory 402 can store various data; in addition, it also stores a computer hard disk encryption and decryption program 403, and executes the program 403 under the control of the processor 401.

[0078] In some embodiments, the electronic device may be, for example, a personal computer, a server, a cloud computer, a workstation, a laptop computer, a mobile terminal, etc.; however, the embodiments of the present application are not limited thereto; for example, the electronic device may be a computer with an operating system hard disk and a data hard disk installed, then the processor 401 may be the processor of the computer, and the memory 402 may be an operating system hard disk, for storing a computer hard disk encryption and decryption program 403, and executing the program 403 under the control of the processor 401 to achieve encryption and decryption of the hard disk (data hard disk) of the electronic device. Alternatively, for example, the electronic device may be another electronic device that can communicate with a computer (target computer) with an operating system hard disk and a data hard disk installed, and executing the program 403 under the control of the processor 401, and sending instructions of the program 403 to the target computer through the communication module to achieve encryption and decryption of the hard disk of the target computer.

[0079] The embodiment of the present application also provides a computer readable program, wherein when the program is executed in an electronic device, the program causes the electronic device to perform the computer hard disk encryption and decryption method of the embodiment. The computer readable program may be included in a computer initialization setting program (encryption part) and / or in a computer restart (startup) program (decryption part), and the embodiment of the present application is not limited to this.

[0080] An embodiment of the present application also provides a storage medium storing a computer-readable program, wherein the computer-readable program enables an electronic device to execute the computer hard disk encryption and decryption method of the embodiment.

[0081] An embodiment of the present application also provides a medical device. The medical device described herein includes but is not limited to a computed tomography (CT) device, a magnetic resonance imaging (MRI) device, a C-arm imaging device, a positron emission tomography (PET) device, a single photon emission computed tomography (SPECT) device, an ultrasound device, an X-ray imaging device, or any other suitable medical device.

[0082] As an example, after a medical institution uses a medical device to scan, the scanned data can be stored in a hard disk; the hard disk can be located in the medical device, in a server outside the medical device, in an independent medical image storage system (such as PACS, Picture Archiving and Communication System) and / or a medical imaging workstation. The workstation can be set up locally in the medical device, that is, the medical imaging workstation is set up near the medical device, and the two can be located together in the scanning room, imaging department or the same hospital.

[0083] For example, the medical device may include the aforementioned computer hard disk encryption and decryption device 300 or electronic device 400. The medical device may also be connected to a separate computer device, or may be connected to a computer device on the Internet cloud, which is connected to the medical device via the Internet. The computer hard disk encryption and decryption method may also be implemented independently or jointly by the aforementioned medical device, a computer device connected to the medical device, and a computer device connected to the Internet cloud. The embodiments of the present application are not limited to this.

[0084] The embodiments of the present application provide a computer hard disk encryption and decryption method, apparatus, and medical equipment, which obtain the inherent hardware information of the computer; when a first predetermined condition is met, trigger the process of encrypting the computer's hard disk according to the inherent hardware information; when a second predetermined condition is met, trigger the process of decrypting the computer's hard disk according to the inherent hardware information, thereby, when the computer device does not have TPM support, the encryption and decryption of the hard disk can be implemented, and the encryption and decryption process can be performed automatically without manual operation by the user, and when the hard disk is removed from the computer device, the data in the hard disk will not be decrypted and read.

[0085] Among them, a key is generated according to the inherent hardware information of the computer to encrypt and decrypt the hard disk, so that the hard disk can be bound to a specific computer, which means that when the hard disk is separated from the computer, the inherent hardware information of the computer cannot be obtained, so the hard disk cannot be decrypted, that is, when the hard disk is removed from the computer device, the data in the hard disk will not be decrypted and read. And generating multiple keys according to the inherent hardware information of the computer helps to enhance the reliability of encryption and decryption technology and facilitate key management.

[0086] In addition, the key will not be written to the hard disk or motherboard ROM, but will be temporarily written to the computer's memory cache. After the key is read from the memory cache in the encryption or decryption step, the data in the memory cache will be cleared, thereby further protecting the security of the key and avoiding key leakage, and the implementation is simple.

[0087] In addition, the instruction of the above-mentioned decryption method "obtaining the inherent hardware information of the computer and decrypting the hard disk of the computer according to the inherent hardware information" can be written into the computer restart (boot) program, so that when the computer is restarted, the decryption method is automatically called (triggered) to decrypt the hard disk. Thus, when the computer is restarted, the hard disk is automatically decrypted, and there is no need to enter the hard disk password every time, which is convenient to operate.

[0088] The above devices and methods of the present application can be implemented by hardware, or by hardware combined with software. The present application relates to such a computer-readable program, which, when executed by a logic component, enables the logic component to implement the above-mentioned devices or components, or enables the logic component to implement the various methods or steps described above. The present application also relates to a storage medium for storing the above program, such as a hard disk, a magnetic disk, an optical disk, a DVD, a flash memory, etc.

[0089] The method / device described in conjunction with the embodiments of the present application may be directly embodied as hardware, a software module executed by a processor, or a combination of the two. For example, one or more of the functional block diagrams shown in the figure and / or one or more combinations of the functional block diagrams may correspond to various software modules of the computer program flow or to various hardware modules. These software modules may correspond to the various steps shown in the figure, respectively. These hardware modules may be implemented by solidifying these software modules, for example, using a field programmable gate array (FPGA).

[0090] The software module may be located in a RAM memory, a flash memory, a ROM memory, an EPROM memory, an EEPROM memory, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. A storage medium may be coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium; or the storage medium may be an integral part of the processor. The processor and the storage medium may be located in an ASIC. The software module may be stored in a memory of a mobile terminal or in a memory card that can be inserted into the mobile terminal. For example, if a device (such as a mobile terminal) uses a large-capacity MEGA-SIM card or a large-capacity flash memory device, the software module may be stored in the MEGA-SIM card or the large-capacity flash memory device.

[0091] For one or more of the functional blocks described in the drawings and / or one or more combinations of functional blocks, it can be implemented as a general-purpose processor, digital signal processor (DSP), application-specific integrated circuit (ASIC), field programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware component or any appropriate combination thereof for performing the functions described in the present application. For one or more of the functional blocks described in the drawings and / or one or more combinations of functional blocks, it can also be implemented as a combination of computing devices, such as a combination of a DSP and a microprocessor, multiple microprocessors, one or more microprocessors in communication with a DSP, or any other such configuration.

[0092] The present application is described above in conjunction with specific implementation methods, but it should be clear to those skilled in the art that these descriptions are exemplary and are not intended to limit the scope of protection of the present application. Those skilled in the art can make various modifications and variations to the present application based on the principles of the present application, and these modifications and variations are also within the scope of the present application.

Claims

1. A computer hard disk encryption and decryption method, characterized in that: The method comprises: Get the inherent hardware information of the computer; When a first predetermined condition is met, triggering a process of encrypting the hard disk of the computer according to the inherent hardware information; When a second predetermined condition is met, a process of decrypting the hard disk of the computer according to the inherent hardware information is triggered.

2. The method according to claim 1, wherein: Encrypting or decrypting the hard disk of the computer according to the inherent hardware information includes: generating a key according to the inherent hardware information, and encrypting or decrypting the hard disk of the computer according to the key.

3. The method according to claim 1, wherein: When the first predetermined condition is met, triggering the process of encrypting the hard disk of the computer according to the inherent hardware information includes: triggering the process of encrypting the hard disk of the computer according to the inherent hardware information when the computer is initially set up; When the second predetermined condition is met, triggering the process of decrypting the hard disk of the computer according to the inherent hardware information includes: when the computer is restarted, triggering the process of decrypting the hard disk of the computer according to the inherent hardware information.

4. The method according to claim 1, wherein: The method further comprises: Writing the acquired inherent hardware information into the memory cache of the computer; and, encrypting or decrypting the hard disk of the computer according to the inherent hardware information stored in the memory cache; The inherent hardware information written in the memory cache is cleared.

5. The method according to claim 1, wherein: The inherent hardware information includes at least one of: a mainboard media access control (MAC) address, network card identification information, mainboard identification information, central processing unit identification information, and graphics processing unit identification information.

6. A computer hard disk encryption and decryption device, characterized in that: The device comprises: An acquisition unit, which acquires inherent hardware information of the computer; a processing unit, which triggers a process of encrypting the hard disk of the computer according to the inherent hardware information when a first predetermined condition is met; When a second predetermined condition is met, a process of decrypting the hard disk of the computer according to the inherent hardware information is triggered.

7. The device according to claim 6, wherein: The processing unit generates a key according to the inherent hardware information, and encrypts or decrypts the hard disk of the computer according to the key.

8. The device according to claim 6, wherein: When the computer is initially set up, the acquisition unit acquires the inherent hardware information of the computer, and the processing unit triggers a process of encrypting the hard disk of the computer according to the inherent hardware information; When the computer is restarted, the acquisition unit acquires the inherent hardware information of the computer, and the processing unit triggers a process of decrypting the hard disk of the computer according to the inherent hardware information.

9. The device according to claim 6, wherein: The acquisition unit also writes the acquired inherent hardware information into the memory cache of the computer; Furthermore, the processing unit encrypts or decrypts the hard disk of the computer according to the inherent hardware information stored in the memory cache; and clears the inherent hardware information written in the memory cache.

10. A storage medium storing a computer-readable program, characterized in that: The computer readable program enables a computer to execute the computer hard disk encryption and decryption method according to any one of claims 1 to 5.

11. A medical device, characterized in that: The medical equipment comprises the computer hard disk encryption and decryption device according to any one of claims 6 to 9.

Images