Method and device for safely accessing USB (Universal Serial Bus) equipment

Abstract

The invention discloses a method and a device for safely accessing a USB (Universal Serial Bus) device. The method comprises the following steps: authenticating a ukey corresponding to the USB device; under the condition that the ukey authentication corresponding to the USB equipment passes, receiving selection input of a user to the first USB interface; in response to the selection input, determining a target first USB interface on the host, and controlling the USB equipment to access the target first USB interface, so that the USB equipment is safely accessed to the host; wherein the target first USB interface is a first USB interface expected to be accessed by the USB equipment. According to the method and the device, ukey authentication is performed on the USB equipment expected to be accessed, and the USB equipment can be allowed to be accessed to the host under the condition that the USB equipment passes authentication, so that the unallowed USB equipment is prevented from being accessed to the host, a USB interface of the host is not completely disabled, and the influence on the performance of an operating system of the host is avoided.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a method and apparatus for securely accessing a USB device. Background Art

[0002] In some occasions with high security requirements, in order to prevent data leakage, virus transmission or unauthorized device access, measures such as blocking USB ports are taken, which can effectively protect the security of systems and data and prevent potential security risks. In addition, in some commercial environments, blocking USB ports can also help companies manage and monitor employees' device use to ensure information security and confidentiality of corporate data.

[0003] In the prior art, the commonly used management methods of USB interfaces mainly include: first, hiding partitions: entering the registry through the device, hiding the partitions by modifying the key value, so that when the USB flash drive is inserted, the USB flash drive device cannot be seen in My Computer; second, disabling the USB port: if the user has used the USB storage device, the USB flash drive letter can be hidden by changing the registry (REGEDIT) subkey; third, prohibiting disk permissions: in the group policy (run: gpedit.msc) computer configuration - administrative templates - system - removable storage access, prohibit various permissions of removable disks; fourth, Bios modification: directly disable USB in the motherboard BIOS, and then add a password to the BIOS, the specific situation depends on the BIOS version; fifth, protect data security by encrypting USB data, and only authorized users can decrypt and access data.

[0004] However, among the existing USB interface management methods, the method of hiding partitions only hides the USB flash drive and cannot achieve a true shielding effect; the method of disabling USB ports can only shield used devices, and new devices can also be used when plugged in; the method of prohibiting disk permissions cannot completely filter all devices; the method of modifying the Bios will completely disable the USB interface, causing the USB mouse and keyboard to not work properly; the method of blocking the encryption layer requires encryption and decryption during data transmission, which will cause system performance to degrade. Summary of the invention

[0005] The present application provides a USB interface blocking device, aiming to solve the problems in the above-mentioned background technology.

[0006] In a first aspect, a method for securely accessing a USB device is provided, characterized in that first USB interfaces on a host are respectively connected to the same USB management device through connection cables with physical locks, so that the first USB interfaces connected to the USB management device are all in a blocked state; wherein the USB interfaces on the host are all the first USB interfaces;

[0007] The USB management device provides a plurality of second USB interfaces to the outside, and the second USB interfaces are used for accessing USB devices;

[0008] The method for securely accessing a USB device comprises:

[0009] Authenticate the ukey corresponding to the USB device;

[0010] When the ukey authentication corresponding to the USB device passes, receiving a user's selection input for the first USB interface;

[0011] In response to the selection input, a target first USB interface on the host is determined, and the USB device is controlled to access the target first USB interface so that the USB device can safely access the host; wherein the target first USB interface is the first USB interface that the USB device expects to access.

[0012] In the above scheme, optionally, after authenticating the ukey corresponding to the USB device, the method includes:

[0013] In the case that the ukey authentication corresponding to the USB device fails, the USB device is denied access to the USB management device, so that the USB device cannot access the host.

[0014] In the above solution, optionally, after the USB device is securely connected to the host, the method further includes:

[0015] Monitor and record the data read and write operations of the USB device to obtain a log file of the USB device;

[0016] For any data read and write operation of the USB device, judging the data read and write operation of the USB device based on the sensitivity rule;

[0017] In the case where the data reading and writing operation is a sensitive operation, the sensitive operation is recorded to obtain a sensitive file of the USB device.

[0018] In the above solution, optionally, after monitoring and recording the data read and write operations of the USB device to obtain the log file of the USB device, the method further includes:

[0019] The log files are analyzed to obtain high-risk log files and low-risk log files, and the high-risk log files and the low-risk log files are classified and stored.

[0020] In a second aspect, a device for securely accessing a USB device is provided, wherein the device comprises:

[0021] Authentication module, used to authenticate the ukey corresponding to the USB device;

[0022] A receiving module, configured to receive a user's selection input for a first USB interface when the ukey authentication corresponding to the USB device passes;

[0023] A control module is used to determine a target first USB interface on the host in response to the selection input, and control the USB device to access the target first USB interface so that the USB device can safely access the host; wherein the target first USB interface is the first USB interface that the USB device expects to access.

[0024] In the above solution, optionally, the device further includes:

[0025] The access rejection module is used to reject the USB device from accessing the USB management device when the ukey authentication corresponding to the USB device fails, so that the USB device cannot access the host.

[0026] In the above solution, optionally, the device further includes:

[0027] A monitoring and recording module, used for monitoring and recording the data reading and writing operations of the USB device, and obtaining a log file of the USB device;

[0028] A judgment module, configured to judge the data read and write operation of the USB device based on a sensitivity rule for any data read and write operation of the USB device;

[0029] The recording module is used to record the sensitive operation when the data reading and writing operation is a sensitive operation, so as to obtain the sensitive file of the USB device.

[0030] In the above solution, optionally, the device further includes:

[0031] The storage module is used to analyze the log files to obtain high-risk log files and low-risk log files, and classify and store the high-risk log files and the low-risk log files.

[0032] In a third aspect, a device for securely accessing a USB device is provided, wherein the device comprises a USB management device and at least one connection line with a physical lock;

[0033] The number of the connection lines with physical locks is equal to the number of the first USB interfaces on the host and corresponds one to one, one end of the connection line with the physical lock is connected to the first USB interface corresponding to it, and the other end of the connection line with the physical lock is connected to the USB management device;

[0034] The USB management device provides a plurality of second USB interfaces externally, and the second USB interfaces are used for accessing USB devices.

[0035] In the above solution, optionally, the USB management device includes a USB plug, a USB socket and a USB unlocking key;

[0036] The USB socket is symmetrically provided with locking grooves on both sides, and the locking grooves are provided with spring pieces integrally formed with the USB socket;

[0037] The front end of the USB unlocking key is symmetrically provided with grooves on both sides, and the positions of the grooves and the spring pieces are symmetrical;

[0038] The USB plug and the device are both inserted into the USB socket, and the USB unlocking key is located on the top of the USB plug;

[0039] Both sides of the top front end of the USB plug are integrally formed with bayonet holes, and the bayonet holes are symmetrically positioned with the spring pieces.

[0040] Compared with the prior art, this application has at least the following beneficial effects:

[0041] Based on further analysis and research of the existing technical problems, this application recognizes that the existing USB interface management methods either fail to achieve the effect of truly shielding the U disk, or completely disable the USB interface, and even cause the problem of system performance degradation. This application provides a method for securely accessing a USB device, which includes: authenticating the ukey corresponding to the USB device; when the ukey corresponding to the USB device passes the authentication, receiving the user's selection input for the first USB interface; in response to the selection input, determining the target first USB interface on the host, and controlling the USB device to access the target first USB interface, so that the USB device can safely access the host; wherein the target first USB interface is the first USB interface that the USB device expects to access. This application performs ukey authentication on the USB device that is expected to access, and only allows the USB device to access the host when the USB device passes the authentication, thereby preventing unauthorized USB devices from accessing the host, and does not completely disable the USB interface of the host, thereby avoiding the impact on the performance of the host operating system. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 A flowchart of a method for securely accessing a USB device is provided in accordance with an embodiment of the present application. DETAILED DESCRIPTION

[0043] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0044] In the description of this application: unless otherwise specified, "plurality" means two or more. The terms "first", "second", "third", etc. in this application are intended to distinguish the objects referred to, and do not have special meanings in terms of technical connotations (for example, they should not be understood as emphasizing the importance or order, etc.). Expressions such as "including", "comprising", "having", etc. also mean "not limited to" (certain units, components, materials, steps, etc.).

[0045] In one embodiment, Figure 1 As shown, a method for securely accessing a USB device is provided, characterized in that the first USB interfaces on the host are respectively connected to the same USB management device through connection cables with physical locks, so that the first USB interfaces connected to the USB management device are all in a blocked state; wherein the USB interfaces on the host are all the first USB interfaces;

[0046] The USB management device provides a plurality of second USB interfaces to the outside, and the second USB interfaces are used for accessing USB devices;

[0047] The method for securely accessing a USB device comprises:

[0048] Authenticate the ukey corresponding to the USB device;

[0049] When the ukey authentication corresponding to the USB device passes, receiving a user's selection input for the first USB interface;

[0050] In response to the selection input, a target first USB interface on the host is determined, and the USB device is controlled to access the target first USB interface so that the USB device can safely access the host; wherein the target first USB interface is the first USB interface that the USB device expects to access.

[0051] In this embodiment, after authenticating the ukey corresponding to the USB device, the method includes:

[0052] In the case that the ukey authentication corresponding to the USB device fails, the USB device is denied access to the USB management device, so that the USB device cannot access the host.

[0053] In this embodiment, after the USB device is securely connected to the host, the method further includes:

[0054] Monitor and record the data read and write operations of the USB device to obtain a log file of the USB device;

[0055] For any data read and write operation of the USB device, judging the data read and write operation of the USB device based on the sensitivity rule;

[0056] In the case where the data reading and writing operation is a sensitive operation, the sensitive operation is recorded to obtain a sensitive file of the USB device.

[0057] In this embodiment, after the data read and write operations of the USB device are monitored and recorded to obtain a log file of the USB device, the method further includes:

[0058] The log files are analyzed to obtain high-risk log files and low-risk log files, and the high-risk log files and the low-risk log files are classified and stored.

[0059] In one embodiment, a device for securely accessing a USB device is provided, wherein the device comprises:

[0060] Authentication module, used to authenticate the ukey corresponding to the USB device;

[0061] A receiving module, configured to receive a user's selection input for a first USB interface when the ukey authentication corresponding to the USB device passes;

[0062] A control module is used to determine a target first USB interface on the host in response to the selection input, and control the USB device to access the target first USB interface so that the USB device can safely access the host; wherein the target first USB interface is the first USB interface that the USB device expects to access.

[0063] In this embodiment, the device further includes:

[0064] The access rejection module is used to reject the USB device from accessing the USB management device when the ukey authentication corresponding to the USB device fails, so that the USB device cannot access the host.

[0065] In this embodiment, the device further includes:

[0066] A monitoring and recording module, used for monitoring and recording the data reading and writing operations of the USB device, and obtaining a log file of the USB device;

[0067] A judgment module, configured to judge the data read and write operation of the USB device based on a sensitivity rule for any data read and write operation of the USB device;

[0068] The recording module is used to record the sensitive operation when the data reading and writing operation is a sensitive operation, so as to obtain the sensitive file of the USB device.

[0069] In this embodiment, the device further includes:

[0070] The storage module is used to analyze the log files to obtain high-risk log files and low-risk log files, and classify and store the high-risk log files and the low-risk log files.

[0071] In one embodiment, a device for securely accessing a USB device is provided, characterized in that the device includes a USB management device and at least one connection line with a physical lock;

[0072] The number of the connection lines with physical locks is equal to the number of the first USB interfaces on the host and corresponds one to one, one end of the connection line with the physical lock is connected to the first USB interface corresponding to it, and the other end of the connection line with the physical lock is connected to the USB management device;

[0073] The USB management device provides a plurality of second USB interfaces externally, and the second USB interfaces are used for accessing USB devices.

[0074] In this embodiment, the USB management device includes a USB plug, a USB socket and a USB unlocking key;

[0075] The USB socket is symmetrically provided with locking grooves on both sides, and the locking grooves are provided with spring pieces integrally formed with the USB socket;

[0076] The front end of the USB unlocking key is symmetrically provided with grooves on both sides, and the positions of the grooves and the spring pieces are symmetrical;

[0077] The USB plug and the device are both inserted into the USB socket, and the USB unlocking key is located on the top of the USB plug;

[0078] Both sides of the top front end of the USB plug are integrally formed with bayonet holes, and the bayonet holes are symmetrically positioned with the spring pieces.

[0079] In one embodiment, a USB interface blocking device is provided, characterized in that the device comprises a housing, a plurality of USB blocking units and a plurality of USB sockets arranged on the housing, and an electronic circuit board arranged in the housing, wherein the USB blocking unit is used to block the USB interface of a device to be blocked, and the USB socket is used for inserting a USB device;

[0080] The USB blocking unit comprises a connecting wire and a USB blocking device, one end of the connecting wire is connected to the electronic circuit board, the other end of the connecting wire is magnetically connected to the USB blocking device, and the USB blocking device is plugged and matched with the USB interface of the device to be blocked;

[0081] The USB blocker includes a USB plug, a USB female socket and a USB unlocking key;

[0082] The USB socket is symmetrically provided with locking grooves on both sides, and the locking grooves are provided with spring pieces integrally formed with the USB socket;

[0083] The USB plug and the device are both inserted into the USB socket, and the USB unlocking key is located at the top of the USB plug.

[0084] In this embodiment, both sides of the top front end of the USB plug are integrally connected with bayonet holes, and the bayonet holes are symmetrically positioned with the spring piece.

[0085] In this embodiment, grooves are symmetrically provided on both sides of the front end of the USB unlocking key, and the positions of the grooves and the springs are symmetrical.

[0086] In this embodiment, an identifier is provided on the USB socket, and the identifiers on different USB sockets are different.

[0087] In this embodiment, a controller and a verification module connected to the controller are integrated on the electronic circuit board, and the verification module is used to verify the USB device inserted into the USB port.

[0088] In this embodiment, the verification module is a ukey verification module;

[0089] The device is equipped with a ukey. When the USB device is connected to the device, the ukey of the device is connected first, and then the USB device is connected.

[0090] In this embodiment, a storage module is also integrated on the electronic circuit board, and the storage module is connected to the controller.

[0091] In this embodiment, a reading chip is provided on the USB socket, and the reading chip is connected to the controller. The reading chip is used to read the data reading and writing operations performed by the USB device inserted into the USB socket, and store the read data reading and writing operations in the storage module.

[0092] This embodiment provides a USB interface blocking device, including a shell, a plurality of USB blocking units and a plurality of USB sockets arranged on the shell, and an electronic circuit board arranged in the shell, wherein the USB blocking unit is used to block the USB interface of the device to be blocked, and the USB socket is used for inserting the USB device; the USB blocking unit includes a connecting line and a USB blocker, one end of the connecting line is connected to the electronic circuit board, and the other end of the connecting line is magnetically connected to the USB blocker, and the USB blocker is plugged and matched with the USB interface of the device to be blocked; the USB blocker includes a USB plug, a USB socket and a USB unlocking key; lock grooves are symmetrically provided on both sides of the USB socket, and a spring piece integrally formed with the USB socket is provided in the lock groove; the USB plug and the device are both inserted into the USB socket, and the USB unlocking key is located at the top of the USB plug. Among them, the USB plug is locked by the cooperation of the bayonet and the shrapnel formed on both sides of the top front end of the USB plug, and the USB unlocking key is inserted into the USB socket to drive the shrapnel to rebound and unlock the USB plug, which effectively improves the blocking reliability of the USB interface and realizes complete shielding of the USB flash drive when it is necessary to shield the USB flash drive; the USB interface will not be completely disabled, and at the same time, the impact on system performance is avoided.

[0093] In one embodiment, a USB interface blocking device is provided. This embodiment is improved in combination with the existing problems of the prior art, and adopts physical-level blocking and software-level monitoring to achieve USB device hardware isolation and identity authentication. The possible harm caused by USB devices is isolated from the hardware aspect. If the USB port needs to be used, we have a special USB interface and interface detection. When accessing the device, a dedicated ukey is also required. The ukey must be inserted first, and then the USB device can be inserted to start verification. Only after the verification is completed can the host be connected. To use this device, you first need to connect all the USB ports of the host to the USB blocking device, and the data cable interface adopts a magnetic suction and buckle method. If it is forcibly unplugged, the lock will still remain in it, which physically reduces the possibility of direct access to the host.

[0094] In this embodiment, in terms of hardware: the USB blocking data cable adopts a magnetic and buckle design. By adding a mechanical device to the connector, a specific button needs to be pressed to unplug the connector from the port, thereby preventing accidental unplugging and forced unplugging. A built-in buzzer alarm device will generate an alarm to remind you if there is an incorrect operation or an unsafe device is detected. Use ukey verification. When using this USB blocking device to access other USB devices, you need to connect the ukey first, and then connect other USB devices such as a mouse, keyboard, and USB flash drive.

[0095] In this embodiment, software: if there is an erroneous operation, a log will be generated. Serious erroneous operations, such as plugging and unplugging devices, will generate a buzzer alarm. Different storage is performed according to different logs. The log storage will be saved on the local USB blocking device. The administrator can view it by logging in to the background address of the device. If the company needs it, we also provide a dedicated log storage server for centralized management of the device status and log records. In addition, there is a special detection mechanism at the USB interface. A handshake negotiation will be performed between the USB device and the host to determine the device's power demand and the power supply that the host can provide. This ensures that the device can safely obtain the required power and avoid damage to the device or host. The USB interface detects the data packet sent by the connected device to confirm the identity and type of the device. This helps to determine whether the device complies with the USB specification, as well as information such as the data transfer rate required by the device. The USB device has a built-in authentication chip for communicating with the host and verifying the compliance of the device. This helps prevent the connection of illegal devices and ensures the safety and compatibility of the device. This can help prevent the connection of illegal devices. It is used to detect whether the inserted device is compliant. After the inspection is completed, there is a selection button on the device to select which USB interface corresponding to the host to connect to, which can effectively avoid the intrusion of illegal devices. There is a special USB interface for USB flash drives, with a built-in intrusion detection system that can detect malicious code or Trojan programs.

[0096] When in use, all USB ports on the host need to be connected to the USB blocking device. External devices that need to be connected to the host need to be connected to the USB blocking device first, and special sockets are reserved for these devices. After passing layers of authentication, the user can use buttons on the USB blocking device to manually select which interface of the host to connect to, and finally the device can be connected to the host.

[0097] If you illegally unplug the cable connecting the host to the USB blocking device, then because it uses a magnetic cable and the lock uses a snap-on design, it will be impossible to unplug it. After unplugging the cable, the lock will still remain in the device, making it impossible to insert other devices. A special key is required to unplug it.

[0098] In this embodiment, the software implementation includes: there is a chip function on the lock head, authorizing the correspondence and authorization relationship between this U port and the cable to prevent the system from being unable to recognize due to line disorder;

[0099] Detailed records of host operations, USB disk reading and writing, execution results, etc. Monitor and record operation tracks and operation logs. File copying out and copying in are divided into two areas, and the copying out area is writable. The copying in area is read-only, and both the copying out and copying in files must pass the audit.

[0100] AI is used for log analysis to classify high-risk, medium-risk and low-risk logs for storage, and different alarms are adopted. In addition, there is an independently developed system to prevent others from easily finding system vulnerabilities.

[0101] This embodiment can completely prevent the direct connection of devices such as USB flash drives to the host from a physical aspect. The USB uses a special lock and a magnetic cable to block, which greatly reduces the possibility of forcibly connecting the device to the host. Each interface has a unique identifier to prevent data disorder caused by random line connections.

[0102] Ukey verification is required when accessing the device. Each USB blocking device is configured with a unique ukey. When accessing the device, you need to connect the ukey first, and then connect the device. This can prevent other illegal persons from using the USB flash drive to read and write data. Each USB device is equipped with a unique ukey, which is an encryption chip. When the user wants to access the USB device, he first needs to insert the ukey and verify it. The matching verification with the ukey is achieved through the background code. Once the ukey verification is successful, the system will identify the USB device corresponding to the ukey, allowing the user to access the device normally for data reading and writing operations. If the correct ukey verification is not passed, the system will reject unverified USB device access, thereby effectively preventing illegal persons from using USB flash drives for data reading and writing operations.

[0103] The USB port has a special chip that can record the data read and write operations performed by the user using this USB drive, and issue an alarm or log record based on the sensitivity of the operation. A special embedded chip is embedded in the circuit board of the USB drive to monitor and record data read and write operations. This chip has a processor, memory, and related interface circuits. The chip can determine whether each operation is sensitive based on the set sensitivity rules. For example, keywords of sensitive files, specific file paths, or file types can be set for judgment. The chip will record all read and write operations in the internal memory to form a log file. This log file can be read when needed for auditing or tracking data operations.

[0104] This embodiment uses a magnetic and buckle design to enable the device to be connected to the host more securely, avoiding the possibility of unauthorized connection. This design not only provides physical protection, but also improves the overall security of the host, ensuring that the connection between the device and the host is safe and reliable.

[0105] The unique identifier at the interface of this embodiment ensures the accuracy of data transmission and avoids the possibility of data confusion and wrong connection. This design enhances the efficiency and effectiveness of the business process and ensures the integrity and accuracy of data transmission.

[0106] This embodiment uses ukey verification to authenticate the operator and prevent illegal personnel from operating the device. This design further strengthens physical security, ensuring that only authorized personnel can operate the device, reducing the risk of illegal access and attack on the device.

[0107] In this embodiment, the USB flash drive is strictly recorded, and the uploaded and downloaded data are strictly verified in a partitioning manner to ensure the integrity and security of the data. This design further protects the security of the device from the software aspect, prevents data from being tampered with or damaged, and ensures the stability and reliability of the device.

[0108] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

Claims

1. A method for securely accessing a USB device, characterized in that: The first USB interfaces on the host are all connected to the same USB management device through connection cables with physical locks, so that the first USB interfaces connected to the USB management device are all in a blocked state; wherein the USB interfaces on the host are all the first USB interfaces; The USB management device provides a plurality of second USB interfaces to the outside, and the second USB interfaces are used for accessing USB devices; The method for securely accessing a USB device comprises: Authenticate the ukey corresponding to the USB device; When the ukey authentication corresponding to the USB device passes, receiving a user's selection input for the first USB interface; In response to the selection input, a target first USB interface on the host is determined, and the USB device is controlled to access the target first USB interface so that the USB device can safely access the host; wherein the target first USB interface is the first USB interface that the USB device expects to access.

2. The method according to claim 1, characterized in that: After authenticating the ukey corresponding to the USB device, the method includes: In the case that the ukey authentication corresponding to the USB device fails, the USB device is denied access to the USB management device, so that the USB device cannot access the host.

3. The method according to claim 1, characterized in that After the USB device is securely connected to the host, the method further includes: Monitor and record the data read and write operations of the USB device to obtain a log file of the USB device; For any data read and write operation of the USB device, judging the data read and write operation of the USB device based on the sensitivity rule; In the case where the data reading and writing operation is a sensitive operation, the sensitive operation is recorded to obtain a sensitive file of the USB device.

4. The method according to claim 3, characterized in that After monitoring and recording the data read and write operations of the USB device to obtain the log file of the USB device, the method further includes: The log files are analyzed to obtain high-risk log files and low-risk log files, and the high-risk log files and the low-risk log files are classified and stored.

5. A device for securely accessing a USB device, characterized in that: The device comprises: Authentication module, used to authenticate the ukey corresponding to the USB device; A receiving module, configured to receive a user's selection input for a first USB interface when the ukey authentication corresponding to the USB device passes; A control module is used to determine a target first USB interface on a host in response to the selection input, and control the USB device to access the target first USB interface so that the USB device can safely access the host; wherein the target first USB interface is the first USB interface that the USB device expects to access.

6. The device according to claim 5, characterized in that The device also includes: The access rejection module is used to reject the USB device from accessing the USB management device when the ukey authentication corresponding to the USB device fails, so that the USB device cannot access the host.

7. The device according to claim 5, characterized in that The device also includes: A monitoring and recording module, used for monitoring and recording the data reading and writing operations of the USB device, and obtaining a log file of the USB device; A judgment module, configured to judge the data read and write operation of the USB device based on a sensitivity rule for any data read and write operation of the USB device; The recording module is used to record the sensitive operation when the data reading and writing operation is a sensitive operation, so as to obtain the sensitive file of the USB device.

8. The device according to claim 5, characterized in that The device also includes: The storage module is used to analyze the log files to obtain high-risk log files and low-risk log files, and classify and store the high-risk log files and the low-risk log files.

9. A device for securely accessing a USB device, characterized in that: The device includes a USB management device and at least one connecting line with a physical lock; The number of the connection lines with physical locks is equal to the number of the first USB interfaces on the host and corresponds one to one, one end of the connection line with the physical lock is connected to the first USB interface corresponding to it, and the other end of the connection line with the physical lock is connected to the USB management device; The USB management device provides a plurality of second USB interfaces externally, and the second USB interfaces are used for accessing USB devices.

10. The device according to claim 9, characterized in that The USB management device includes a USB plug, a USB socket and a USB unlocking key; The USB socket is symmetrically provided with locking grooves on both sides, and the locking grooves are provided with spring pieces integrally formed with the USB socket; The front end of the USB unlocking key is symmetrically provided with grooves on both sides, and the positions of the grooves and the spring pieces are symmetrical; The USB plug and the device are both inserted into the USB socket, and the USB unlocking key is located on the top of the USB plug; Both sides of the top front end of the USB plug are integrally formed with bayonet holes, and the bayonet holes are symmetrically positioned with the spring pieces.

Images