Hard disk encryption method, hard disk encryption equipment and image forming device
By identifying the hard disk type and encrypting it, the problem of low security of sensitive information in the hard disk is solved, and efficient security protection of hard disk data is achieved.
Patent Information
- Application Number
- CN202411390179.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-30
- Publication Date
- 2025-01-14
AI Technical Summary
Sensitive information stored in the hard disk is easily maliciously attacked when it is not encrypted, resulting in reduced data security.
By identifying the type of hard disk connected to the image forming device and performing primary or secondary encryption processing according to the type, the data security of the hard disk is improved. The specific steps include identifying the hard disk model and sector information, determining whether the hard disk has been encrypted, and if it is a non-encrypted hard disk, performing the first-level encryption process, and providing prompt information for the second-level encryption process for users to choose.
It effectively improves the security of hard disk data, prevents data and files from being stolen, enhances the security of hard disk, and especially performs primary encryption processing on non-encrypted secure hard disks, and performs secondary encryption processing when necessary to further protect data.
Smart Images
Figure CN119312419A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of image forming devices, and in particular to a hard disk encryption method, a hard disk encryption device and an image forming device. Background Art
[0002] As one of the external devices of the image forming device, the hard disk can store data and increase printing efficiency. The hard disk may store sensitive information such as personal identity information, commercial confidential documents, legal documents, etc. Therefore, if the data or files in the hard disk are not encrypted, they are vulnerable to malicious attacks or information leakage, which reduces data security. Summary of the invention
[0003] In view of this, the present application provides a hard disk encryption method, a hard disk encryption device and an image forming device, which can identify the type of hard disk connected to the image forming device and encrypt the hard disk to improve the data security of the hard disk.
[0004] In a first aspect, an embodiment of the present invention provides a hard disk encryption method, which is applied to an image forming device, comprising:
[0005] Identifying the type of a target hard disk connected to the image forming device;
[0006] When the type of the target hard disk is identified as a first-level encrypted secure hard disk that has undergone first-level encryption processing, a prompt message is displayed as to whether to perform second-level encryption processing on the target hard disk;
[0007] When it is identified that the type of the target hard disk is a non-encrypted secure hard disk, a first-level encryption process is performed on the target hard disk, and the prompt information is displayed.
[0008] In a possible implementation, the identifying the type of the target hard disk connected to the image forming device includes:
[0009] In response to the access information of the target hard disk, reading the model information and sector information of the target hard disk;
[0010] The type of the target hard disk is identified according to the model information and the sector information.
[0011] In a possible implementation manner, the identifying the type of the target hard disk according to the model information and the sector information includes:
[0012] Identifying whether the sector information is encrypted information;
[0013] If it is identified that the sector information is not encrypted information and the sector information contains preset target data, the model information of the target hard disk is matched with a pre-stored hard disk model authentication list;
[0014] If the match is consistent, the type of the target hard disk is a non-encrypted secure hard disk.
[0015] In a possible implementation manner, the identifying the type of the target hard disk according to the model information and the sector information further includes:
[0016] If it is identified that the sector information is encrypted information, determining whether the decrypted sector information contains preset target data;
[0017] If the decrypted sector information contains the preset target data, the type of the target hard disk is a first-level encrypted secure hard disk that has undergone first-level encryption processing.
[0018] In a possible implementation, when the type of the target hard disk is identified as a non-encrypted secure hard disk, performing a first-level encryption process on the target hard disk includes:
[0019] The target partition of the target hard disk is encrypted at the first level by using the first partition encryption method of the MBR primary partition boot record or the second partition encryption method of the GPT global unique identifier partition table.
[0020] In a possible implementation, after the prompt message for performing secondary encryption on the target hard disk is displayed, the method further includes:
[0021] In response to a confirmation instruction of the prompt information, secondary encryption processing is performed on the target file in the target hard disk.
[0022] In a possible implementation, the method further includes:
[0023] When it is identified that the type of the target hard disk is a non-secure hard disk, a prompt message is displayed indicating that the target hard disk does not match the authentication of the image forming apparatus and whether to forcibly use the target hard disk.
[0024] In a possible implementation, the method further includes: the non-secure hard disk includes a non-encrypted ordinary hard disk, and identifying the type of the target hard disk as a non-secure hard disk includes:
[0025] When the sector information of the target hard disk is not encryption information and the model information of the target hard disk does not match the pre-stored hard disk model authentication list, it is determined that the type of the target hard disk is a non-encrypted common hard disk.
[0026] In a second aspect, an embodiment of the present invention provides a hard disk encryption device, including:
[0027] A memory, a processor, and a hard disk encryption program stored in the memory and executable on the processor, wherein the hard disk encryption program implements the steps of the hard disk encryption method described in the first aspect when executed by the processor.
[0028] In a third aspect, an embodiment of the present invention provides an image forming device, comprising:
[0029] an identification module, used for identifying the type of a target hard disk connected to the image forming device;
[0030] A display module, for displaying a prompt message of whether to perform a secondary encryption process on the target hard disk when the type of the target hard disk is identified as a primary encrypted secure hard disk that has undergone a primary encryption process;
[0031] The processing module is used to perform a first-level encryption process on the target hard disk and display the prompt information when the target hard disk is identified as a non-encrypted secure hard disk.
[0032] In a fourth aspect, an embodiment of the present invention provides an electronic device, including:
[0033] at least one processor; and
[0034] at least one memory in communication with the processor, wherein:
[0035] The memory stores program instructions executable by the processor, and the processor calls the program instructions to execute the method described in the first aspect.
[0036] In a fifth aspect, an embodiment of the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and the computer instructions enable the computer to execute the method described in the first aspect.
[0037] In an embodiment of the present invention, the hard disk is encrypted by reading its status. When the hard disk type is a non-encrypted secure hard disk, the hard disk is encrypted at the first level and a prompt message for the second level encryption is displayed for the user to select, so as to further improve the security of the hard disk externally connected to the image forming device and prevent the data and files stored in the hard disk from being stolen. BRIEF DESCRIPTION OF THE DRAWINGS
[0038] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.
[0039] Figure 1A flowchart of a hard disk encryption method provided by an embodiment of the present invention;
[0040] Figure 2 A schematic diagram of the effect of encrypting EBR logical partition information provided by an embodiment of the present invention;
[0041] Figure 3 A schematic diagram of a master boot sector identification process provided by an embodiment of the present invention;
[0042] Figure 4 A schematic diagram of a hard disk operation mode provided by an embodiment of the present invention;
[0043] Figure 5 A schematic structural diagram of an image forming device provided by an embodiment of the present invention;
[0044] Figure 6 A structural schematic diagram of a hard disk encryption device provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0045] In order to better understand the technical solution of the present application, the embodiments of the present application are described in detail below with reference to the accompanying drawings.
[0046] It should be clear that the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.
[0047] The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit the present application. The singular forms "a", "said" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.
[0048] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.
[0049] In order to prevent data and files in a hard disk from being stolen, an embodiment of the present invention provides a hard disk encryption method, a hard disk encryption device and an image forming apparatus, which can improve the security of data and files stored in the hard disk. Figure 1 The following is a flowchart of a hard disk encryption method provided by an embodiment of the present invention. Figure 1 As shown in , the method includes:
[0050] Step 101 , identifying the type of a target hard disk connected to an image forming device.
[0051] The hard disk type is mainly used to indicate whether the target hard disk is a secure hard disk authenticated by the image forming device and whether the target hard disk is an encrypted hard disk. When the target hard disk is connected to the image forming device, the image forming device responds to the access information of the target hard disk and reads the model information and sector information of the target hard disk. Then, the type of the target hard disk is identified based on the model information and sector information.
[0052] Whether the target hard disk is a secure hard disk can be determined based on the model information, and whether the target hard disk is an encrypted hard disk can be determined based on the sector information. Among them, a secure hard disk means that the target hard disk is a hard disk authenticated by the image forming device, which includes an encrypted secure hard disk (that is, the hard disk is encrypted and the hard disk is authenticated by the image forming device. Furthermore, the encrypted secure hard disk can be further divided into a first-level encrypted secure hard disk and a second-level encrypted secure hard disk, etc. according to the encryption level) and a non-encrypted secure hard disk (that is, the hard disk is not encrypted but the hard disk is authenticated by the image forming device). A non-secure hard disk, i.e., an ordinary hard disk, means that the target hard disk is not a hard disk authenticated by the image forming device, which includes an encrypted ordinary hard disk and a non-encrypted ordinary hard disk.
[0053] Step 102: When the type of the target hard disk is identified as a non-encrypted secure hard disk, a first-level encryption process is performed on the target hard disk, and a prompt message is displayed asking whether to perform a second-level encryption process on the target hard disk.
[0054] The image forming device can first identify whether the sector information is encrypted information. If the sector information is plain text data, the sector information is non-encrypted information. If the sector information is cipher text data, the sector information is encrypted information. When it is identified that the sector information is not encrypted information and the sector information contains preset target data, it means that the target hard disk is an unencrypted hard disk. Then, the model information of the target hard disk is matched with the pre-stored hard disk model certification list. The hard disk model certification list includes multiple certified hard disk model information. When the model information of the target hard disk is consistent with any certified hard disk model information in the hard disk certification list, it can be determined that the model information of the target hard disk is consistent with the hard disk model certification list, indicating that the target hard disk is the hard disk certified by the image forming device.
[0055] In some embodiments, the hard disk model certification list can also be stored in a server connected to the image forming device. The image forming device can send a hard disk certification list acquisition request to the server, and then the server sends the hard disk certification list to the image forming device, and the image forming device only caches the hard disk certification list, and deletes the cached hard disk model certification list after determining whether the model information of the target hard disk matches the hard disk model certification list. Alternatively, the image forming device sends the hard disk model information of the target hard disk to the connected server, and the server determines whether the model information of the target hard disk matches the hard disk model certification list, and feeds back the result of whether it matches to the image forming device.
[0056] Among them, the preset target data is used to determine whether the image forming device can completely read the sector information of the target hard disk. Specifically, the preset target data can be implemented in the form of the 511th byte and the 512th byte of the master boot sector data. The 511th byte (address 0x1 fe) and the 512th byte (address 0x1 ff) of the master boot sector data are the end marks of the master boot sector data. The values of the 511th byte and the 512th byte are 55 and AA respectively. Therefore, when the image forming device reads the 511th byte of the master boot sector data as 55 and the 512th byte as AA, it means that the master boot sector information is not encrypted, the image forming device can read the complete master boot sector data of the target hard disk, the image forming device can read the master boot sector of the target hard disk normally, and determine the partition address and size, and then can perform read and write operations on the target hard disk.
[0057] Therefore, when the sector information of the target hard disk is not encrypted information and the sector information contains preset target data, and the model information of the target hard disk matches the hard disk model certification list, it means that the type of the target hard disk is a non-encrypted secure hard disk. At this time, the target hard disk can be encrypted at the first level. Among them, the first-level encryption process can be implemented as a first partition encryption method using the master partition boot record (Master Boot Record, MBR). Or, the target partition of the target hard disk is encrypted at the first level using the second partition encryption method of the globally unique identifier partition table (GUID Partition Table, GPT). The image forming device can first identify whether the partition table structure of the target hard disk is MBR or GPT to select the corresponding encryption method. The target partition can be specifically implemented as a master boot sector. That is, the first-level encryption process is used to encrypt the master boot sector of the target hard disk. The partition description information of the target hard disk is stored in the master boot sector. Specifically, when the partition table structure of the target hard disk is MBR, MBR partition encryption can be used to encrypt the logical partition information of the extended boot record (Extended Boot Record, EBR) of the master partition table and the extended partition. When the partition table structure of the target hard disk is GPT, GPT partition encryption can be used to encrypt the protective MBR, the primary partition header, the partition table entry collection, the backup partition table entry collection and the backup partition header.
[0058] In the embodiment of the present invention, for a target hard disk with an MBR partition structure, not only the MBR logical partition information is encrypted, but also the EBR logical partition information is encrypted, thereby enhancing the security of the master boot sector data. Figure 2 A schematic diagram of the effect of encrypting EBR logical partition information provided by an embodiment of the present invention. Figure 2 As shown in . After the MBR logical partition information is encrypted, if the EBR logical partition information is not encrypted, the EBR logical partition information can be found by searching for preset target data such as 55AA data. Then, the partition table information of an extended partition is obtained based on the EBR logical partition information. Based on the partition table information, the partition address and partition size of the extended partition can be determined. And the partition tables of other partitions can be found through the partition table information of the extended partition. Then, the encryption is cracked by tampering with the Extended partition table data. In the embodiment of the present invention, the EBR logical partition information is also encrypted. Therefore, after encryption, it is impossible to find any partition table information by searching for preset target data such as 55AA data, and thus it is impossible to determine the address and partition size of any partition.
[0059] When the master boot sector is encrypted, the address and size of each partition in the target hard disk cannot be determined without using the corresponding decryption algorithm. This ensures that after the target hard disk is connected to other devices, the partitions of the target hard disk cannot be properly identified without the corresponding decryption algorithm, thereby protecting the data stored in the target hard disk.
[0060] Step 103 , when it is identified that the type of the target hard disk is a first-level encrypted secure hard disk that has undergone first-level encryption processing, a prompt message is displayed indicating whether to perform second-level encryption processing on the target hard disk.
[0061] When the sector information of the target hard disk is encrypted information, the decryption algorithm corresponding to the above encryption method can be used to decrypt the sector information, thereby obtaining the decrypted sector information. Then, it is determined whether the decrypted sector information contains the preset target data. That is, it is determined whether the 511th byte of the master boot sector data of the decrypted sector information is 55 and whether the 512th byte is AA to determine whether the decrypted sector information contains the preset target data. If the decrypted sector information contains the preset target data, it means that the sector information of the target hard disk can be decrypted by the preset decryption algorithm, and then it means that the sector information of the target hard disk has undergone the above-mentioned first-level encryption processing. The premise of the first-level encryption processing is that the target hard disk is a secure hard disk authenticated by the image forming device. Therefore, when it is determined that the sector information of the target hard disk is encrypted information that has undergone the first-level encryption processing, it is not necessary to read the model information of the target hard disk to determine that the target hard disk is a secure hard disk. When the decrypted sector information contains the preset target data, it can be determined that the type of the target hard disk is a first-level encrypted secure hard disk that has undergone the first-level encryption processing.
[0062] Figure 3 A schematic diagram of a master boot sector identification process provided by an embodiment of the present invention. Figure 3 As shown in , this step includes:
[0063] Step 301, read the first 512 bytes of master boot sector data of the target hard disk.
[0064] Step 302, determine whether the data of the 511th byte and the 512th byte are 55 and AA respectively. If yes, execute step 303. If no, execute step 304.
[0065] Step 303: determine that the target hard disk is a non-encrypted secure hard disk.
[0066] If the 511th byte data and the 512th byte data of the master boot sector data are read as 55 and AA, it means that the master boot sector data is unencrypted plain text data. Therefore, the target hard disk is a non-encrypted hard disk.
[0067] Step 304, determine whether the data of the 511th byte and the 512th byte of the decrypted master boot sector data is 55AA. If yes, execute step 305. If not, execute step 306.
[0068] Step 305: determine whether the target hard disk is a first-level encrypted secure hard disk that has undergone first-level encryption processing.
[0069] When the 511th and 512th bytes of the master boot sector data are not 55 and AA, but are decrypted using the preset decryption algorithm to be 55 and AA, it means that the target hard disk has undergone the above-mentioned first-level encryption processing. Therefore, the target hard disk is a first-level encrypted secure hard disk.
[0070] Step 306: determine whether the target hard disk is an encrypted common hard disk, that is, a non-secure hard disk.
[0071] If the 511th and 512th bytes of the master boot sector data are not 55AA, and are not 55AA after being decrypted using the preset decryption algorithm, it means that the target hard disk uses an encryption method different from the above-mentioned first-level encryption process. Therefore, it can be determined that the target hard disk does not belong to the hard disk bound to the image forming device and is a non-secure hard disk.
[0072] Although the above-mentioned first-level encryption process makes it impossible for other devices to recognize it by encrypting the sector information, some professionals can still locate the partition position by searching for key data other than 55AA, and then tamper with the sector information so that other devices can normally recognize the hard disk partition without using the preset decryption algorithm, resulting in the failure of the protection of the first-level encryption process. Therefore, after determining that the target hard disk has undergone the first-level encryption process, a prompt message can be displayed to indicate whether to perform the second-level encryption process, so that the user can perform the second-level encryption process on the target hard disk according to the needs. Among them, when displaying the prompt message, the image forming device can also display whether to provide a confirmation option and a rejection option corresponding to the second-level encryption process of the hard disk. When the user needs the second-level encryption process to protect the target file stored in the target hard disk, the confirmation option can be selected. At this time, the image forming device receives the confirmation instruction for the prompt message and starts to perform the second-level encryption process on the target file in the target hard disk. When the user does not need the second-level encryption process, the rejection option can be selected, and the image forming device does not perform the second-level encryption process on the target hard disk.
[0073] Among them, the secondary encryption process is used to encrypt the target file stored in the target hard disk, thereby further improving the security of the hard disk. Even if the primary encryption process is cracked, the secondary encryption process can still be used to protect the target file stored in the target hard disk from being stolen. Specifically, the target file can be encrypted using a corresponding file encryption algorithm. For example, the AES256 encryption algorithm of OpenSS l is used.
[0074] Among them, if the target file is encrypted using an encryption algorithm, the read and write performance of the hard disk will be affected. When the read and write performance is greatly reduced due to the use of the encryption algorithm, it will affect the user experience. Therefore, it is necessary to test the read and write performance in advance. Specifically, taking the AES256 encryption algorithm of OpenSS l as an example, the results of the hard disk read and write rate test are shown in Table 1-1.
[0075]
[0076] Table 1-1
[0077] Among them, solution 1 is: the plaintext data at position A is read from the target hard disk and then encrypted, and the encrypted ciphertext data is written to position B of the target hard disk.
[0078] Solution 2 is: read the ciphertext data at position B of the target hard disk and decrypt it, and write the decrypted plaintext data to position C of the target hard disk.
[0079] Solution 3 is: read the plaintext data at position A in the target hard disk and write it to position D in the target hard disk.
[0080] From the above content, it can be seen that in the scenario of continuously reading and writing 1GiB data in 4K block size, the read and write rate when using the encryption algorithm is 86% of that when not using the encryption algorithm. The read and write rate is not significantly reduced within the controllable range, and the user experience is not seriously affected. Therefore, the method of encrypting the target file in the target hard disk using secondary encryption processing is feasible.
[0081] In some embodiments, when the model information of the target hard disk does not match the pre-stored hard disk model certification list, the target hard disk can be determined to be a non-secure hard disk. When the target hard disk is identified as a non-secure hard disk, a prompt message can be displayed indicating that the target hard disk does not match the image forming device certification, and whether to force the target hard disk to be used. Among them, it is necessary to first determine whether the sector information of the target hard disk has undergone an encryption process different from the above-mentioned primary encryption process. If the sector information of the target hard disk can be normally recognized by the image forming device, it means that the sector information of the target hard disk has not been encrypted. That is, the 511th byte of the master boot sector data is 55, and the 512th byte is AA. At this time, a prompt message can be displayed indicating whether the target hard disk does not match the image forming device certification, and whether to force the target hard disk to be used. Among them, forced use means that the image forming device only supports the reading and writing of data on the target hard disk, and does not provide the encryption function of the primary encryption process or the secondary encryption process. When displaying the prompt message of whether to force the use of the target hard disk, the corresponding confirmation option and the rejection option can be displayed. When the user selects the confirmation option, the image forming device performs read and write operations on the target hard disk, and the user can use the target hard disk to store data and read data stored in the target hard disk. When the user selects the reject option, the image forming apparatus does not perform read and write operations on the target hard disk, and treats the target hard disk as an unrecognized device. The user cannot write new data in the target hard disk or read data stored in the target hard disk.
[0082] In some embodiments, under the premise that the target hard disk is a non-secure hard disk, if the sector information of the target hard disk has undergone an encryption process different from the above-mentioned first-level encryption process, the image forming device cannot decrypt the sector information, and then determines that the type of the target hard disk is an encrypted non-secure hard disk, that is, an encrypted ordinary hard disk. At this time, a prompt message indicating that the target hard disk is unavailable can be displayed to prompt the user that the target hard disk cannot be read and written.
[0083] In some embodiments, for a secure hard disk, the image forming device will prompt a prompt message when it is connected, asking whether to perform secondary encryption processing. When the user refuses, the target hard disk can be encrypted at any time based on actual needs. And, the target hard disk that has been encrypted at the secondary level can be switched back to primary encryption at any time. For the scenario where the target hard disk switches from secondary encryption back to primary encryption, the image forming device can decrypt the stored target file that has been processed with secondary encryption. Among them, the encryption and decryption process of the target file will occupy additional storage space of the target hard disk. Therefore, a part of the storage space of the image forming device can be divided into a conversion partition. The conversion partition is used to mount and save temporary encrypted data during the encryption process, and to save temporary decrypted data during the decryption process. Optionally, the conversion partition can occupy 10% of the total storage space of the target hard disk.
[0084] In some embodiments, there may be a scenario where the user needs to connect a target hard disk that has undergone primary encryption or secondary encryption to other image forming devices for use. In this case, the target hard disk needs to be switched from a primary encrypted hard disk or a secondary encrypted hard disk to a non-encrypted hard disk. If the target hard disk is a primary encrypted secure hard disk that has undergone primary encryption, the image forming device decrypts the sector information of the target hard disk using an MBR decryption algorithm or a GPT decryption algorithm to obtain the decrypted sector information. The decrypted sector information is then used to rewrite the primary encrypted sector information of the target hard disk. If the target hard disk is a secondary encrypted secure hard disk that has undergone secondary encryption, the image forming device first decrypts the target file in the target hard disk that has undergone secondary encryption, and then decrypts and rewrites the primary encrypted sector information.
[0085] In some embodiments, the image forming apparatus may switch to a safe mode when reading and writing an encrypted secure hard disk, performing secondary encryption on a primary encrypted secure hard disk, and decrypting an encrypted secure hard disk. Reading and writing an encrypted secure hard disk, performing secondary encryption on a primary encrypted secure hard disk, and decrypting an encrypted secure hard disk are completed in safe mode. Reading and writing operations on a non-encrypted hard disk may be performed in non-safe mode.
[0086] Figure 4 A schematic diagram of a hard disk operation mode provided by an embodiment of the present invention. Figure 4 As shown in , after the image forming device identifies the target hard disk, it uses the corresponding security mode or non-security mode to read and write the target hard disk according to whether the master boot sector data is encrypted. Specifically, if only the master boot sector data of the target hard disk is encrypted, it means that the encryption state of the target hard disk is the first-level encryption state. If the master boot sector data and the file data stored in the target hard disk are also encrypted, it means that the encryption state of the target hard disk is the second-level encryption state. The image forming device reads and writes the target hard disk in the first-level encryption state and the second-level encryption state in the security mode. If the master boot sector data is not encrypted, the encryption state of the target hard disk is the unencrypted state. The image forming device reads and writes the target hard disk in the non-security state.
[0087] Corresponding to the above hard disk encryption method, an embodiment of the present invention provides an image forming device. Figure 5 FIG. 1 is a schematic diagram of the structure of an image forming device provided by an embodiment of the present invention. Figure 5 As shown in , the image forming apparatus includes: a recognition module 501 , a display module 502 and a processing module 503 .
[0088] The identification module 501 is used to identify the type of the target hard disk connected to the image forming device.
[0089] The display module 502 is used to display a prompt message indicating whether to perform secondary encryption processing on the target hard disk.
[0090] The processing module 503 is used to perform a first-level encryption process on the target hard disk when the target hard disk is identified as a non-encrypted secure hard disk.
[0091] Figure 5 The image forming apparatus provided in the illustrated embodiment can be used to implement the present invention. Figures 1 to 4 The technical solution of the method embodiment shown, its implementation principle and technical effects can be further referred to the relevant description in the method embodiment.
[0092] Figure 6 A structural diagram of a hard disk encryption device provided by an embodiment of the present invention is shown in FIG. Figure 6 As shown, the hard disk encryption device may include a memory, a processor, and a hard disk encryption program stored in the memory and executable on the processor. When the hard disk encryption program is executed by the processor, the hard disk encryption program of this specification is realized. Figures 1 to 4 The hard disk encryption method provided by the illustrated embodiment.
[0093] like Figure 6 As shown, the hard disk encryption device is in the form of a general computing device. The components of the hard disk encryption device may include but are not limited to: one or more processors 610, a communication interface 620 and a memory 630, and a communication bus 640 connecting different system components (including the memory 630, the communication interface 620 and the processor 610).
[0094] The communication bus 640 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor, or a local bus using any of a variety of bus structures. For example, these architectures include, but are not limited to, an Industry Standard Architecture (ISA) bus, a Micro Channel Architecture (MAC) bus, an enhanced ISA bus, a Video Electronics Standards Association (VESA) local bus, and a Peripheral Component Interconnection (PCI) bus.
[0095] The hard disk encryption device typically includes a variety of computer system readable media. These media can be any available media that can be accessed by the hard disk encryption device, including volatile and non-volatile media, removable and non-removable media.
[0096] The memory 630 may include a computer system readable medium in the form of a volatile memory, such as a random access memory (RAM) and / or a cache memory. The hard disk encryption device may further include other removable / non-removable, volatile / non-volatile computer system storage media. The memory 630 may include at least one program product having a set (e.g., at least one) of program modules, which are configured to perform the functions of each embodiment of the present specification.
[0097] A program / utility having a set (at least one) of program modules may be stored in memory 630, such program modules including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment. The program modules generally perform the functions and / or methods of the embodiments described in this specification.
[0098] The processor 610 executes various functional applications and data processing by running the programs stored in the memory 630, such as implementing the Figures 1 to 4 The hard disk encryption method provided by the illustrated embodiment.
[0099] The embodiment of the present specification provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, wherein the computer instructions enable the computer to execute the present specification. Figures 1 to 4 The hard disk encryption method provided by the illustrated embodiment.
[0100] The above-mentioned computer-readable storage medium can adopt any combination of one or more computer-readable media. The computer-readable medium can be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium can be, for example, - but not limited to - an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (Read Only Memory; hereinafter referred to as: ROM), an erasable programmable read-only memory (Erasab le Programmab le ReadOnly Memory; hereinafter referred to as: EPROM) or flash memory, optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this document, a computer-readable storage medium can be any tangible medium containing or storing a program, which can be used by an instruction execution system, device or device or used in combination with it.
[0101] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.
[0102] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of this specification. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, unless they are contradictory.
[0103] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of this specification, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.
[0104] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of this specification includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of this specification belong.
[0105] The word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrases "if it is determined" or "if (stated condition or event) is detected" may be interpreted as "when it is determined" or "in response to determining" or "when detecting (stated condition or event)" or "in response to detecting (stated condition or event)", depending on the context.
[0106] It should be noted that the devices involved in the embodiments of this specification may include but are not limited to personal computers (PCs), personal digital assistants (PDAs), wireless handheld devices, tablet computers, mobile phones, MP3 displays, MP4 displays, etc.
[0107] In the several embodiments provided in this specification, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.
[0108] In addition, each functional unit in each embodiment of this specification may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional units.
[0109] The above-mentioned integrated unit implemented in the form of a software functional unit can be stored in a computer-readable storage medium. The above-mentioned software functional unit is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a connector, or a network device, etc.) or a processor (Processor) to perform some steps of the method described in each embodiment of this specification. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory; hereinafter referred to as: ROM), random access memory (Random Access Memory; hereinafter referred to as: RAM), disk or optical disk and other media that can store program codes.
[0110] The above description is only a preferred embodiment of this specification and is not intended to limit this specification. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of this specification should be included in the scope of protection of this specification.
[0111] In this specification, the same or similar parts between the various embodiments can be referred to each other. In particular, for the device embodiment and the terminal embodiment, since they are basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description in the method embodiment.
Claims
1. A hard disk encryption method, characterized in that: Applicable to image forming devices, including: Identifying the type of a target hard disk connected to the image forming device; When the type of the target hard disk is identified as a first-level encrypted secure hard disk that has undergone first-level encryption processing, a prompt message is displayed as to whether to perform second-level encryption processing on the target hard disk; When it is identified that the type of the target hard disk is a non-encrypted secure hard disk, a first-level encryption process is performed on the target hard disk, and the prompt information is displayed.
2. The method according to claim 1, characterized in that The identifying the type of the target hard disk connected to the image forming device includes: In response to the access information of the target hard disk, reading the model information and sector information of the target hard disk; The type of the target hard disk is identified according to the model information and the sector information.
3. The method according to claim 2, characterized in that The step of identifying the type of the target hard disk according to the model information and the sector information includes: Identifying whether the sector information is encrypted information; If it is identified that the sector information is not encrypted information and the sector information contains preset target data, the model information of the target hard disk is matched with a pre-stored hard disk model authentication list; If the match is consistent, the type of the target hard disk is a non-encrypted secure hard disk.
4. The method according to claim 2, characterized in that: The step of identifying the type of the target hard disk according to the model information and the sector information further includes: If it is identified that the sector information is encrypted information, determining whether the decrypted sector information contains preset target data; If the decrypted sector information contains the preset target data, the type of the target hard disk is a first-level encrypted secure hard disk that has undergone first-level encryption processing.
5. The method according to claim 1 or 3, characterized in that: When the type of the target hard disk is identified as a non-encrypted secure hard disk, performing a first-level encryption process on the target hard disk includes: The target partition of the target hard disk is encrypted at the first level by using the first partition encryption method of the MBR primary partition boot record or the second partition encryption method of the GPT global unique identifier partition table.
6. The method according to claim 1 or 4, characterized in that: After the prompt message for performing secondary encryption processing on the target hard disk, the method further includes: In response to a confirmation instruction of the prompt information, secondary encryption processing is performed on the target file in the target hard disk.
7. The method according to claim 1, characterized in that The method further comprises: When it is identified that the type of the target hard disk is a non-secure hard disk, a prompt message is displayed indicating that the target hard disk does not match the authentication of the image forming apparatus and whether to forcibly use the target hard disk.
8. The method according to claim 7, characterized in that The non-secure hard disk includes a non-encrypted ordinary hard disk, and identifying the type of the target hard disk as a non-secure hard disk includes: When the sector information of the target hard disk is not encryption information and the model information of the target hard disk does not match the pre-stored hard disk model authentication list, it is determined that the type of the target hard disk is a non-encrypted common hard disk.
9. A hard disk encryption device, characterized in that: include: A memory, a processor, and a hard disk encryption program stored in the memory and executable on the processor, wherein the hard disk encryption program, when executed by the processor, implements the steps of the hard disk encryption method according to any one of claims 1 to 8.
10. An image forming device, characterized in that: include: an identification module, used for identifying the type of a target hard disk connected to the image forming device; A display module, for displaying a prompt message of whether to perform a secondary encryption process on the target hard disk when the type of the target hard disk is identified as a primary encrypted secure hard disk that has undergone a primary encryption process; The processing module is used to perform a first-level encryption process on the target hard disk and display the prompt information when the target hard disk is identified as a non-encrypted secure hard disk.