Solid state disk security protection method, solid state disk and electronic equipment

Abstract

The invention discloses a solid-state disk security protection method, a solid-state disk and electronic equipment. The method comprises the following steps: receiving to-be-written data, and storing the to-be-written data in a temporary data cache region; according to a local malicious data feature value library, judging whether the to-be-written data meets a security requirement or not; writing the to-be-written data into a normal data storage area under the condition that the to-be-written data is determined to meet the security requirement; and deleting the to-be-written data from the temporary data cache region under the condition that the to-be-written data does not meet the security requirement. According to the method, security detection is carried out on the to-be-written data by utilizing the local malicious data feature value library of the solid state disk, hard disk writing is only carried out on the data meeting the security requirement, the data security risk is identified at the bottommost layer of data security, and the malicious data is rejected, so that the security of user data is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of solid state hard disks, and in particular to a solid state hard disk security protection method, a solid state hard disk, and an electronic device. Background Art

[0002] Solid-state drives are widely used in computer systems, and corresponding data security solutions are crucial to protecting data assets. Solutions for solid-state drive data security include encryption, access control, integrity checking, and redundant backup. To cope with ubiquitous security risks and provide more comprehensive security protection is a direction that the solid-state drive field needs to continuously explore and progress. Summary of the invention

[0003] The present application provides a solid-state hard disk security protection method, a solid-state hard disk and an electronic device, which utilizes a malicious data feature value library local to the solid-state hard disk to perform security detection on the data to be written, and only writes data that meets the security requirements to the hard disk, identifies data security risks at the lowest level of data security and keeps malicious data out, thereby improving the security of user data and effectively ensuring the security of user data.

[0004] The embodiment of the present application provides a solid state hard disk security protection method, comprising: receiving data to be written and saving it to a temporary data cache area; judging whether the data to be written meets the security requirements according to a local malicious data feature value library; If it is determined that the security requirements are met, the data to be written is written into the normal data storage area; if it is determined that the security requirements are not met, the data to be written is deleted from the temporary data buffer area.

[0005] The embodiment of the present application also provides a solid state hard disk, comprising: a data access interface module, a security protection module, a first storage module and a second storage module; The data access interface module is configured to respond to a data write instruction from the outside, receive the data to be written and save it to the first storage module; The security protection module is configured to determine whether the data to be written meets the security requirements based on a local malicious data feature value library; if it is determined that the data to be written meets the security requirements, write the data to be written into the second storage module; if it is determined that the data to be written does not meet the security requirements, delete the data to be written from the first storage module.

[0006] The embodiment of the present application further provides an electronic device, comprising: one or more processors; a storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the solid-state hard disk security protection method as described in any embodiment of the present application.

[0007] Other features and advantages of the present application will be described in the following description, and partly become apparent from the description, or be understood by implementing the present application. Other advantages of the present application can be realized and obtained by the schemes described in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] The accompanying drawings are used to provide an understanding of the technical solution of the present application and constitute a part of the specification. Together with the embodiments of the present application, they are used to explain the technical solution of the present application and do not constitute a limitation on the technical solution of the present application.

[0009] Figure 1 This is a flow chart of a solid state hard disk security protection method in an embodiment of the present application; Figure 2 This is a flow chart of another solid state hard disk security protection method in an embodiment of the present application; Figure 3 This is a schematic diagram of the structure of a solid state hard disk in an embodiment of the present application. DETAILED DESCRIPTION

[0010] The present application describes multiple embodiments, but the description is exemplary rather than restrictive, and it is obvious to those skilled in the art that there may be more embodiments and implementations within the scope of the embodiments described in the present application. Although many possible feature combinations are shown in the drawings and discussed in the specific embodiments, many other combinations of the disclosed features are also possible. Unless specifically limited, any feature or element of any embodiment may be used in combination with any other feature or element in any other embodiment, or may replace any other feature or element in any other embodiment.

[0011] The present application includes and contemplates combinations of features and elements known to those of ordinary skill in the art. The embodiments, features and elements disclosed in the present application may also be combined with any conventional features or elements to form a unique invention scheme defined by the claims. Any features or elements of any embodiment may also be combined with features or elements from other invention schemes to form another unique invention scheme defined by the claims. Therefore, it should be understood that any feature shown and / or discussed in the present application may be implemented individually or in any appropriate combination. Therefore, except for the limitations made according to the attached claims and their equivalents, the embodiments are not subject to other restrictions. In addition, various modifications and changes may be made within the scope of protection of the attached claims.

[0012] In addition, when describing representative embodiments, the specification may have presented the method and / or process as a specific sequence of steps. However, to the extent that the method or process does not rely on the specific order of the steps described herein, the method or process should not be limited to the steps of the specific order described. As will be understood by those of ordinary skill in the art, other sequences of steps are also possible. Therefore, the specific sequence of the steps set forth in the specification should not be interpreted as a limitation to the claims. In addition, the claims for the method and / or process should not be limited to the steps of performing them in the order written, and those skilled in the art can easily understand that these sequences can be changed and still remain within the spirit and scope of the embodiments of the present application.

[0013] Solid-state drives are widely used in computer systems as storage disks or system disks due to their higher stability, lower power consumption, and faster speed. The data security of solid-state drives has become one of the core of data security in computer systems. In some feasible solutions, data security is ensured by encrypting the incoming data. The internal program of the solid-state drive does not identify the incoming data stream, but only encrypts and stores it; when it is read externally, it is decrypted and transmitted. It can be seen that this method cannot solve the risk of data being tampered with by malicious data. After this risk occurs, the solid-state drive will still encrypt and store the data that has been maliciously tampered with, and perform normal read and write operations. In some feasible solutions, antivirus software is installed at the operating system level to provide security protection. The main function of antivirus software is to protect computers from viruses, malware, and other security threats. They achieve this goal by monitoring the operating status of the system and intercepting potential security risks; however, the antivirus software on the operating system is at risk of being forcibly closed and tampered with, resulting in the failure of normal data protection.

[0014] The present application embodiment provides a solid state hard disk security protection method, such as Figure 1 As shown, including: Step 110, receiving the data to be written and saving it to a temporary data buffer area; Step 120, judging whether the data to be written meets the security requirements according to the local malicious data feature value library; Step 130, when it is determined that the security requirements are met, writing the data to be written into a normal data storage area; Step 140: If it is determined that the data does not meet the security requirements, delete the data to be written from the temporary data buffer area.

[0015] It can be understood that in some exemplary embodiments, the method is applied to a solid-state drive, and the method is executed by an embedded software module on the solid-state drive, that is, the security detection step is automatically executed when data is written, is not controlled by the operating system, and cannot be selectively turned off by the user, thereby fundamentally avoiding malicious data from being written to the hard drive.

[0016] In some exemplary embodiments, the determining whether the data to be written meets the security requirements includes: The to-be-written data is obtained from the temporary data buffer area, and it is determined whether the obtained to-be-written data meets the security requirements.

[0017] In some exemplary embodiments, the malicious data feature value library includes feature values ​​of one or more of the following malicious data: viruses, worms, Trojans, spyware, ransomware, logic bombs, and adware. Optionally, the malicious data may also include other types, not limited to the aspects of the examples of this application.

[0018] The solid-state hard disk includes a temporary data buffer and a normal data storage area, and the two areas are isolated from each other. The temporary data buffer area is used for temporary caching of data, and is only stored in this area before the data to be written completes the security check. Even if there is a security risk in the data in this area, it will not pose a security risk to the data in the normal data storage area; the normal data storage area is used for the final non-volatile storage of data. It can be seen that by adopting the solution provided in the embodiment of the present application, only data that meets the security requirements can be finally written into the normal data storage area, and data with security risks only involves the isolated temporary data buffer area and is eventually deleted, which fully guarantees the data security of the normal data storage area.

[0019] In some exemplary embodiments, after the external device sends the data to be written to the solid state drive, the processing program on the solid state drive uses at least two processes to execute in parallel: one process executes step 110 to save the data to be written to the temporary data cache area, and the other process executes steps 120-150 to perform security checks and finally write to the normal data storage area and / or delete the temporary data cache area. For the external device, successful writing to the temporary data cache area is deemed to have been successfully written to the solid state drive, and does not affect its continuous writing speed.

[0020] In some exemplary embodiments, judging whether the data to be written meets the security requirements according to the local malicious data feature value library includes: The data to be written is scanned and compared according to the feature values ​​included in the local malicious data feature value library, and when it is determined that the data to be written includes any feature value in the malicious data feature value library, it is determined that the security requirement is not met.

[0021] In some exemplary embodiments, the solid-state drive further includes: a feature library storage area for storing the malicious data feature value library. The feature value library updates the feature values ​​included according to the set rules, including: full update or incremental update, etc., and is not limited to a specific update method. Among them, the feature values ​​included in the malicious data feature value library are also called malicious data feature values.

[0022] In some exemplary embodiments, step 130 further includes: after successfully writing the data into the normal data storage area, deleting the data to be written in the temporary data buffer area.

[0023] In some exemplary embodiments, the method further comprises: Step 150, according to the set cache cleaning time, delete the data in the temporary data cache area that meets the cleaning conditions.

[0024] The cache cleaning time set includes: the set cleaning interval arrival time, or the hard disk power off time, or other specific event occurrence time, and the specific event is not limited. The cleaning condition includes: the writing time is greater than the set time threshold, or other aspects, without limiting the special aspects.

[0025] It can be seen that the data in the temporary cache area can be deleted immediately after being written to the normal storage area, or it can be deleted independently by other processes, which can be flexibly selected according to needs.

[0026] In some exemplary embodiments, step 140 further includes: generating data security warning information and sending it to a set receiving end.

[0027] Wherein, the set receiving end includes: an information indication module in an operating system or a solid state hard disk.

[0028] It is understandable that when the receiving end is set differently, the corresponding data security warning information format and / or content is also different, and the corresponding settings are sufficient. The operating system performs warning notification and / or log recording according to the received data security warning information; the information indication module indicates the current security risk according to the received data security warning information. For example, the information indication module is an indicator light, and the data security warning information is an indicator light trigger signal, which can trigger the indicator light to turn on accordingly.

[0029] It can be known that some executable file viruses are based on the principle of adding a malicious code or instruction set to the target program by modifying a normal file or program. During the modification process, the original program data of the target program will be tampered with and need to be saved in a solid-state hard disk so as to trigger the execution of the malicious code or execution under set circumstances to achieve its malicious destruction / intrusion purpose. Using the solution provided by the embodiment of the present application, these data containing malicious codes or instructions after being tampered with cannot pass the security detection and will be prevented from being written to the normal storage area, thereby achieving the purpose of keeping such tampered data out. Among them, its security detection uses the feature values ​​in the malicious data feature value library to scan and match the data to be written to identify the malicious / tampered data included.

[0030] The present application also provides a solid state hard disk security protection method, such as Figure 2 As shown, including: Step 210: Save the received data to be written to the isolation area (temporary cache area) Step 220, performing a security scan on the data to be written according to the malicious data feature value library; Step 230, determining whether any malicious data characteristic value exists; if so, executing step 240; if not, executing step 250; Step 240, deleting the data to be written in the isolation area, and sending a data security warning message to the operating system; Step 250, writing the data to be written into the normal data storage area.

[0031] The present application also provides a solid state hard disk. Figure 3 As shown, including: Data access interface module 310, security protection module 320, first storage module 330 and second storage module 340; The data access interface module 310 is configured to respond to a data write instruction from the outside, receive the data to be written and save it to the first storage module; The security protection module 320 is configured to determine whether the data to be written meets the security requirements based on the local malicious data feature value library; if it is determined that the data to be written meets the security requirements, write the data to be written into the second storage module 340; if it is determined that the data to be written does not meet the security requirements, delete the data to be written from the first storage module 330.

[0032] In some exemplary embodiments, the security protection module 320 is configured to obtain the data to be written from the first storage module 330 and determine whether the obtained data to be written meets the security requirements.

[0033] In some exemplary embodiments, the data access interface module 310 is further configured to return a write success response to the sender of the data write instruction after the data to be written is successfully written into the first storage module 330; and / or, The data access interface module 310 is also configured to send data security warning information to a set receiving end when the security protection module 320 determines that the data to be written does not meet the security requirements.

[0034] In some exemplary embodiments, the external system that sends the data write instruction includes an operating system, or a host, or may be other external systems or hardware modules that interact with the solid state drive to read and write data, without limitation to any particular aspect.

[0035] In some exemplary embodiments, the set receiving end includes: an external operating system, or an information indication module in a solid state drive.

[0036] In some exemplary embodiments, the solid state drive further includes: an information indication module 350; The security protection module 320 is further configured to trigger the information indication module 350 to indicate an alarm message when it is determined that the data to be written does not meet the security requirements.

[0037] In some exemplary embodiments, the information indication module 350 is configured to display the data security warning information, which may be displayed by indicator lights or by numbers or letters, without being limited to a specific aspect.

[0038] In some exemplary embodiments, the information indication module includes an indicator light, which indicates corresponding information according to one or more of the following parameters: color, blinking time interval, number of flashes, etc.

[0039] In some exemplary embodiments, the first storage module includes: DRAM or flash memory. In some exemplary embodiments, the second storage module includes: flash memory, including: Nand flash memory, 3D Nand flash memory or Nor flash memory, etc.

[0040] The first storage module is used to temporarily store write data, where the data is eventually written into the second storage module or deleted according to the corresponding situation, so it is also called a temporary data storage area; in contrast, the second storage module is a non-temporary data storage module in the solid-state drive, also known as a normal data storage area. It can be seen that in some exemplary embodiments, the first storage module and the second storage module are isolated from each other, which can ensure that even after malicious data is temporarily saved to the first storage module, it will not have an adverse effect on other secure data in the second storage module, fully ensuring the security of the data stored in the solid-state drive.

[0041] An embodiment of the present application also provides a computer system, comprising one or more solid state drives as described in any embodiment of the present application.

[0042] The present application also provides an electronic device, including: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the solid-state hard disk security protection method as described in any embodiment of the present application.

[0043] The solution provided by the embodiments of the present application performs the identification of malicious data locally on the solid-state drive, does not rely on the operating system or upper-layer security application software, and is performed at the lowest level of data security, thereby more comprehensively improving the security of user data. In some exemplary implementations, the embedded software module on the solid-state drive uses multi-threaded parallel execution of the relevant steps in the solid-state drive security protection method, which can ensure security without affecting the external data writing speed.

[0044] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all components may be implemented as software executed by a processor, such as a digital signal processor or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or transient medium). As is known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information, such as computer-readable instructions, data structures, program modules, or other data. Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

Claims

1. A solid state hard disk security protection method, characterized in that: include: Receive the data to be written and save it to the temporary data buffer area; Determining whether the data to be written meets security requirements based on a local malicious data feature value library; If it is determined that the security requirements are met, the data to be written is written into the normal data storage area; if it is determined that the security requirements are not met, the data to be written is deleted from the temporary data buffer area.

2. The solid state hard disk security protection method according to claim 1, characterized in that: The determining whether the data to be written meets the security requirements includes: The to-be-written data is obtained from the temporary data buffer area, and it is determined whether the obtained to-be-written data meets the security requirements.

3. The solid state hard disk security protection method according to claim 1, characterized in that: The malicious data feature value library includes the following one or more types of malicious data feature values: Viruses, worms, Trojans, spyware, ransomware, logic bombs, adware.

4. The solid state hard disk security protection method according to claim 3, characterized in that: The determining, based on the local malicious data feature value library, whether the data to be written meets the security requirements includes: The data to be written is scanned and compared according to the feature values ​​included in the local malicious data feature value library, and when it is determined that the data to be written includes any feature value in the malicious data feature value library, it is determined that the security requirement is not met.

5. The solid state hard disk security protection method according to any one of claims 1 to 4, characterized in that: The method further comprises: when it is determined that the data does not meet the security requirements, generating data security warning information and sending the information to a set receiving end.

6. A solid state hard disk, characterized in that: include: A data access interface module, a security protection module, a first storage module and a second storage module; The data access interface module is configured to respond to a data write instruction from the outside, receive the data to be written and save it to the first storage module; The security protection module is configured to determine whether the data to be written meets the security requirements based on a local malicious data feature value library; If it is determined that the security requirement is met, writing the data to be written into the second storage module; If it is determined that the data does not meet the security requirement, the to-be-written data is deleted from the first storage module.

7. The solid state drive according to claim 6, wherein: The security protection module is configured to obtain the data to be written from the first storage module, and determine whether the obtained data to be written meets the security requirements.

8. The solid state hard disk according to claim 6 or 7, characterized in that: The data access interface module is further configured to return a write success response to the sender of the data write instruction after the data to be written is successfully written into the first storage module; and / or, The data access interface module is also configured to send data security warning information to a set receiving end when the security protection module determines that the data to be written does not meet the security requirements.

9. The solid state drive according to claim 8, characterized in that: Also included: an information indication module; The security protection module is further configured to trigger the information indication module to indicate an alarm message when it is determined that the data to be written does not meet the security requirements.

10. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the solid-state hard disk security protection method as described in any one of claims 1-5.

Images