Data read-write control method and device

Abstract

The invention provides a data read-write control method and device. The data read-write safety can be improved. The method comprises the following steps: a control device sends first control information to a storage device in a first time period, wherein the first control information is used for controlling a read-write channel of the storage device to be in a conducting state in a second time period; and the control device performs data reading and / or data writing operation on the storage device in the second time period based on the first control information.

Description

Data reading and writing control method and device Technical Field

[0001] The present application relates to the field of control technology, and more specifically, to a data reading and writing control method and device. Background Art

[0002] To increase data read and write speeds and storage capacity, systems on a chip (SoC) are often paired with high-speed, high-capacity off-chip memory. This off-chip memory can include memory chips that don't retain data after powering off and / or memory chips that retain data after powering off.

[0003] However, if the off-chip memory includes memory chips that retain data after power is removed, attackers can easily access or modify the data stored in the off-chip memory because the data remains in the off-chip memory after power is removed. Therefore, if the SOC rereads the modified data, it will be misled by the modified data, thus compromising data read and write security.

[0004] Summary of the Invention

[0005] The present application provides a data reading and writing control method and device, which can improve the security of data reading and writing.

[0006] In a first aspect, the present application provides a data read and write control method, which may include: a control device sends first control information to a storage device within a first time period, and the first control information is used to control the read and write channel of the storage device to be in an on state within a second time period, and the first time period is used for the control device to transmit control information with the storage device, and the second time period is used for the control device to transmit data with the storage device; the control device performs data read and / or data write operations on the storage device within the second time period based on the first control information.

[0007] It should be noted that the data reading and / or data writing described in this application can be simply referred to as data reading and writing.

[0008] Using the data read and write control method provided in the embodiment of the present application, the control device controls the read and write channels of the storage device to be in an on state within a second time period through first control information, that is, obtains the authority to perform data read and write operations on the storage device within the second time period. In this way, the control device can only read data and / or write data to the storage device within the authorized second time period, thereby improving the security of data reading and writing.

[0009] Optionally, the present application does not limit the duration of the first time period and the second time period. That is, the duration of the first time period and the second time period can be equal or different.

[0010] For example, to ensure continuous use, the duration of the first time period may be shorter than the duration of the second time period.

[0011] In a possible implementation, the start time of the second time period is later than the start time of the first time period.

[0012] In one possible implementation, the method further includes: the control device sends second control information to the storage device within a third time period, the second control information is used to control the read / write channel to be in an on state within a fourth time period, the third time period is used for the control device to transmit control information with the storage device, and the fourth time period is used for the control device to transmit data with the storage device; the control device performs data reading and / or data writing operations on the storage device within the fourth time period based on the second control information.

[0013] That is, the first time period and the third time period are used for the control device to transmit control information to the storage device, and the first time period is different from the third time period. The second time period and the fourth time period are used for the control device to transmit control information to the storage device, and the second time period is different from the fourth time period.

[0014] Optionally, the first time period and the third time period may partially overlap or not overlap at all, which is not limited in the embodiment of the present application.

[0015] In a possible implementation, the method further includes: the control device stopping the data reading and / or data writing operations on the storage device from the end moment of the second time period.

[0016] Using the data read and write control method provided in the embodiments of the present application, the control device can only transmit data during the time period authorized by the control information. From the end of the authorized time period, the control device no longer has permission to perform data read and write operations on the storage device. In other words, from the end of the second time period, the control device is prohibited (or blocked) from performing data read and / or data write operations on the storage device. Therefore, data read and write security is higher.

[0017] In a possible implementation, the first control information is encrypted with a session key. Before the control device sends the first control information to the storage device within the first time period, the method further includes: the control device performs key negotiation with the storage device to obtain the session key.

[0018] By adopting the data read and write control method provided in the embodiment of the present application, session data (such as first control information and second control information) between the control device and the storage device is encrypted using a session key, which can improve the security during data transmission.

[0019] In a possible implementation, the control device performs key negotiation with the storage device to obtain the session key, including: the control device performs key negotiation with the storage device based on a preset symmetric key to obtain the session key.

[0020] Using the data reading and writing control method provided in the embodiment of the present application, the control device and the storage device perform key negotiation through a preset symmetric key to obtain a session key. In this way, if the session key is lost due to power failure of the control device or the storage device or other reasons, the session key can be directly regenerated based on the symmetric key without having to re-acquire the symmetric key, which can improve the efficiency of data transmission.

[0021] In one possible implementation, each session key and / or each control information (such as the first control information) is stored in a register (or storage unit) within the control device when the control device is powered on. During data reading and writing, the control device can directly retrieve the session keys and / or each control information from the register (or storage unit). Furthermore, the control device can back up each session key and each control information in a dedicated storage area (or dedicated memory). When the control device is powered off, the session keys and / or each control information stored in the flash memory / register are erased or released, at which point the control device can directly read the session keys and / or each control information from the dedicated storage area (or dedicated memory).

[0022] In a second aspect, the present application also provides a data read and write control method, which may include: the storage device receives first control information from the control device within a first time period, the first control information is used to control the read and write channel of the storage device to be in an on state within a second time period, the first time period is used for the control device to transmit control information to the storage device, and the second time period is used for the control device to transmit data to the storage device; the storage device controls the read and write switch to be in an open state within the second time period based on the first control information.

[0023] It should be noted that the data reading and / or data writing described in this application can be simply referred to as data reading and writing.

[0024] Using the data read and write control method provided in the embodiment of the present application, the control device controls the read and write channels of the storage device to be in an on state within a second time period through first control information, that is, obtains the authority to perform data read and write operations on the storage device within the second time period. In this way, the control device can only read data and / or write data to the storage device within the authorized second time period, thereby improving the security of data reading and writing.

[0025] Optionally, the present application does not limit the duration of the first time period and the second time period. That is, the duration of the first time period and the second time period can be equal or different.

[0026] For example, to ensure continuous use, the duration of the first time period may be shorter than the duration of the second time period.

[0027] In a possible implementation, the start time of the second time period is later than the start time of the first time period.

[0028] In one possible implementation, the method further includes: the storage device receives second control information from the control device within a third time period, the second control information is used to control the read / write channel to be in an on state within a fourth time period, the third time period is used for the control device to transmit control information to the storage device, and the fourth time period is used for the control device to transmit data to the storage device; the storage device controls the read / write channel to be in an on state within the fourth time period based on the second control information.

[0029] That is, the first time period and the third time period are used for the control device to transmit control information to the storage device, and the first time period is different from the third time period. The second time period and the fourth time period are used for the control device to transmit control information to the storage device, and the second time period is different from the fourth time period.

[0030] Optionally, the first time period and the third time period may partially overlap or not overlap at all, which is not limited in the embodiment of the present application.

[0031] In a possible implementation, the method further includes: the storage device controlling the read / write channel to be in a disconnected state from the end of the second time period.

[0032] Using the data read and write control method provided in the embodiments of the present application, the control device can only transmit data during the time period authorized by the control information. From the end of the authorized time period, the control device no longer has permission to perform data read and write operations on the storage device. In other words, from the end of the second time period, the control device is prohibited (or blocked) from performing data read and / or data write operations on the storage device. Therefore, data read and write security is higher.

[0033] In one possible implementation, the storage device controls the read-write channel to be in an on state during the second time period based on the first control information, including: the storage device authenticates the first control information to obtain an authentication result, the authentication result including authentication success or authentication failure; when the authentication result is authentication success, the storage device controls the read-write channel to be in an on state during the second time period.

[0034] With the data read and write control method provided in the embodiments of the present application, the storage device needs to authenticate the first control information. Only if the authentication is successful will the control device be granted permission to read and write data. If the authentication fails, the control device is prevented from reading and writing data. This can improve the security of data reading and writing.

[0035] In one possible implementation, the first control information is encrypted with a session key. Before the storage device authenticates the first control information and obtains an authentication result, the method further includes: the storage device decrypts the first control information based on the session key to obtain first initial control information; the storage device authenticates the first control information to obtain an authentication result, including: the storage device authenticates the first initial control information to obtain the authentication result.

[0036] In a possible implementation, before the storage device decrypts the first control information based on the session key to obtain the first initial control information, the method further includes: the storage device performing key negotiation with the control device to obtain the session key.

[0037] By adopting the data read and write control method provided in the embodiment of the present application, session data (such as first control information) between the control device and the storage device is encrypted using a session key, which can improve the security during data transmission.

[0038] In a possible implementation, the storage device performs key negotiation with the control device to obtain the session key, including: the storage device performs key negotiation with the control device based on a preset symmetric key to obtain the session key.

[0039] By adopting the data reading and writing control method provided in the embodiment of the present application, the control device and the storage device perform key negotiation through a preset symmetric key to obtain a session key. In this way, if the session key is lost due to power failure of the control device or the storage device or other reasons, the session key can be directly regenerated based on the symmetric key without having to re-acquire the symmetric key, which can improve the efficiency of data transmission.

[0040] In one possible implementation, each session key and / or each control information (such as the first control information) is stored in a register (or trigger) in the storage device when the storage device is powered on. During data reading and writing, the storage device can directly obtain each session key and / or each control information from the register (or trigger). In addition, the storage device can back up each session key and each control information in a persistent memory. When the storage device is powered off, the session keys and / or each control information stored in the trigger or register will be erased or released. At this time, the storage device can directly read each session key and / or each control information from the persistent memory.

[0041] In a third aspect, the present application also provides a data read and write control device, which may include: a sending module for sending first control information to a storage device within a first time period, the first control information being used to control the read and write channel of the storage device to be in an on state within a second time period, the first time period being used for the data read and write control device to transmit control information to the storage device, and the second time period being used for the data read and write control device to transmit data to the storage device; a read and write module for performing data read and / or data write operations on the storage device within the second time period based on the first control information.

[0042] In one possible implementation, the sending module can also be used to send second control information to the storage device within a third time period, and the second control information is used to control the read-write channel to be in an on state within a fourth time period. The third time period is used for the control device to transmit control information with the storage device, and the fourth time period is used for the control device to transmit data with the storage device; the read-write module is also used to perform data reading and / or data writing operations on the storage device within the fourth time period based on the second control information.

[0043] In a possible implementation, the read / write module is further configured to stop performing data reading and / or data writing operations on the storage device from the end of the second time period.

[0044] In one possible implementation, the first control information is encrypted with a session key, and the device also includes a key negotiation module; the key negotiation module is used to perform key negotiation with the storage device to obtain the session key before the sending module sends the first control information to the storage device within the first time period.

[0045] In a possible implementation, the key negotiation module is specifically configured to perform key negotiation with the storage device based on a preset symmetric key to obtain the session key.

[0046] In a fourth aspect, the present application also provides a data reading and writing device, which may include: a receiving module for receiving first control information from a control device within a first time period, the first control information being used to control the read and write channel of the data reading and writing device to be in an on state within a second time period, the first time period being used for the control device to transmit control information to the data reading and writing device, and the second time period being used for the control device to transmit data to the data reading and writing device; a control module for controlling the read and write channel to be in an on state within the second time period based on the first control information.

[0047] In one possible implementation, the receiving module is also used to receive second control information from the control device within a third time period, and the second control information is used to control the read-write channel to be in an on state within a fourth time period. The third time period is used for the control device to transmit control information with the data read-write device, and the fourth time period is used for the control device to transmit data with the data read-write device; the control module is also used to control the read-write channel to be in an on state within the fourth time period based on the second control information.

[0048] In a possible implementation, the device further includes: the control module is further configured to control the read / write channel to be in a disconnected state from the end of the second time period.

[0049] In one possible implementation, the device also includes an authentication module; the authentication module is used to authenticate the first control information and obtain an authentication result, which includes authentication success or authentication failure; the control module is specifically used to control the read-write channel to be in an on state during the second time period when the authentication result is authentication success.

[0050] In one possible implementation, the first control information is encrypted with a session key, and the device further includes: a decryption module; the decryption module is used to authenticate the first control information by the authentication module, and before obtaining the authentication result, decrypt the first control information based on the session key to obtain the first initial control information; the authentication module is specifically used to authenticate the first initial control information and obtain the authentication result.

[0051] In one possible implementation, the device further includes: a key negotiation module; the key negotiation module is used to perform key negotiation with the control device to obtain the session key before the decryption module decrypts the first control information based on the session key to obtain the first initial control information.

[0052] In a possible implementation manner, the key negotiation module is specifically configured to perform key negotiation with the control device based on a preset symmetric key to obtain the session key.

[0053] In a fifth aspect, the present application further provides a data read / write control device, which may include a controller and a communication interface, the controller and the communication interface being coupled. The communication interface is configured to input data (e.g., data to be written to a storage device) and / or output data (e.g., data read from a storage device) to the controller; the controller is configured to execute a computer program or instructions to cause the device to implement the method described in the first aspect or various possible implementations thereof.

[0054] In a possible implementation, the data read and write control device may specifically be the control device described in the first aspect or various possible implementations thereof.

[0055] In a sixth aspect, the present application also provides a data reading and writing device, which may include a controller, a storage area and a read-write channel, the storage area and the read-write channel are coupled, and the controller is used to control the read-write channel to be in an on state or a closed state.

[0056] It should be noted that when the controller controls the read-write channel to be in the on state, the control device can read and write data to the storage area through the read-write channel; conversely, when the controller controls the read-write channel to be in the off state, the control device cannot read and write data to the storage area through the read-write channel, that is, it does not have the authority to read and write data to the storage area through the read-write channel.

[0057] In a possible implementation, the data reading and writing device may specifically be the storage device described in the above second aspect or various possible implementations thereof.

[0058] In a seventh aspect, the present application also provides a computer-readable storage medium for storing a computer program, characterized in that the computer program includes instructions for implementing the methods described in the above aspects or any possible implementation thereof.

[0059] In an eighth aspect, the present application also provides a computer program product, which includes instructions, characterized in that when the instructions are executed on a computer or a processor, the computer or the processor implements the methods described in the above aspects or any possible implementation thereof.

[0060] The data read and write control device, data read and write device, computer storage medium and computer program product provided in this application are all used to execute the data read and write control method provided above. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the data read and write control method provided above, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] FIG1 provides a schematic block diagram of a data read-write control system 100 according to an embodiment of the present application;

[0062] FIG2 provides a schematic diagram of an application scenario of an embodiment of the present application;

[0063] FIG3 provides a schematic diagram of another application scenario of an embodiment of the present application;

[0064] FIG4 provides a schematic flow chart of a data read and write control method 200 according to an embodiment of the present application;

[0065] FIG5 provides a schematic block diagram of a data read and write control device 300 according to an embodiment of the present application;

[0066] FIG6 provides a schematic block diagram of a data read and write control device 400 according to an embodiment of the present application;

[0067] FIG7 provides a schematic block diagram of a data reading and writing device 500 provided in an embodiment of the present application;

[0068] FIG8 provides a schematic block diagram of a data reading and writing device 600 provided in an embodiment of the present application. DETAILED DESCRIPTION

[0069] The technical solution in this application will be described below in conjunction with the drawings in this application.

[0070] The terms "first," "second," and the like in the description, embodiments, claims, and drawings of this application are used solely for descriptive purposes and are not to be construed as indicating or implying relative importance or order. Furthermore, the terms "including," "having," and any variations thereof are intended to cover non-exclusive inclusions, such as, for example, inclusion of a series of steps or units. A method, system, product, or apparatus is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0071] It should be understood that in this application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships can exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0072] First, please refer to Figure 1, which shows a schematic block diagram of a data read and write control system 100 provided in an embodiment of the present application. The system 100 may include a control device 110 and a storage device 120, wherein the control device 110 can perform data read and write operations on the storage device 120.

[0073] In a possible implementation, the storage device 120 may include storage particles that can retain data after power is off, such as persistent memory.

[0074] Optionally, the system 100 can be applied to a variety of application scenarios, which is not limited in the embodiments of the present application.

[0075] In a possible implementation, the system 100 may be used in a terminal.

[0076] Optionally, the terminal described in this application may be a means of transportation or an intelligent device. Specifically, the terminal may be a motor vehicle (such as an unmanned vehicle, an intelligent vehicle, an electric vehicle, a digital vehicle, etc.), an unmanned aerial vehicle, a rail vehicle, a bicycle, a traffic light, etc. The terminal may also be a mobile phone, a tablet computer, a laptop computer, a personal digital assistant, a point of sale terminal, an augmented reality device, a virtual reality device, a wearable device, etc.

[0077] For example, taking the system 100 for a mobile phone as an example, Figure 2 shows a schematic diagram of an application scenario provided by an embodiment of the present application. As shown in Figure 2, the control device 110 can be a system on a chip (system on a chip) SOC, and correspondingly, the storage device 120 can be an off-chip memory of the SOC.

[0078] In another possible implementation, the system 100 can be used on the cloud side.

[0079] For example, taking the system 100 used in the cloud side as an example, Figure 3 shows another application scenario provided by an embodiment of the present application. As shown in Figure 3, the control device 110 can be a chiplet, and correspondingly, the storage device 120 can be an external memory of the chiplet.

[0080] FIG4 illustrates a data read / write control method 200 provided in an embodiment of the present application. This method 200 can be used in the system 100 described in FIG1 . As shown in FIG4 , this method 200 may include the following steps. It should be noted that the following steps may be performed in various orders and / or concurrently, and are not limited to the order shown in FIG4 .

[0081] S201. The control device sends first control information to the storage device within a first time period, and the first control information is used to control the read and write channels of the storage device to be in an on state within a second time period. The first time period is used for the control device to transmit control information with the storage device, and the second time period is used for the control device to transmit data with the storage device.

[0082] It should be noted that the data reading and / or data writing described in this application can be simply referred to as data reading and writing.

[0083] Optionally, the present application does not limit the duration of the first time period and the second time period. That is, the duration of the first time period and the second time period can be equal or different.

[0084] For example, to ensure continuous use, the duration of the first time period may be shorter than the duration of the second time period.

[0085] In a possible implementation, the start time of the second time period is later than the start time of the first time period.

[0086] In one possible implementation, the first control information may be encrypted with a session key. That is, the control device and the storage device may encrypt and decrypt the conversation based on the session key, thereby improving the security of the conversation between the control device and the storage device.

[0087] Optionally, the control device and the storage device may both store their respective session keys.

[0088] Optionally, both the control device and the storage device can store the first control information.

[0089] Optionally, before S201, the method further includes: the control device encrypting the first initial control information based on the session key to obtain the first control information. In other words, the first control information is information obtained by encrypting the first initial control information.

[0090] Correspondingly, after S201, the method further includes: the storage device decrypting the first control information based on the session key to obtain the first initial control information.

[0091] Optionally, the control device and the storage device may obtain the session key in a variety of ways, which is not limited in the embodiments of the present application.

[0092] In a possible implementation, the control device and the storage device may be pre-configured with the session key when leaving the factory.

[0093] In another possible implementation, the control device and the storage device may perform key negotiation to obtain the session key.

[0094] It should be noted that the key negotiation described in the embodiment of the present application refers to the negotiation of the session key between the control device and the storage device through a handshake.

[0095] Optionally, the control device and the storage device may perform key negotiation using a preset symmetric key to obtain the session key; or may perform key negotiation using an asymmetric key to obtain the session key, which is not limited in this application.

[0096] Optionally, the preset symmetric key may be obtained by binding the control device and the storage device before leaving the factory.

[0097] Optionally, the control device and the storage device may perform key negotiation in a variety of ways, which is not limited in this application.

[0098] For example, the control device and the storage device can complete the key negotiation process through the following steps (1) to (15):

[0099] (1) The control device determines that it is the first power-on operation and starts the authentication and docking process.

[0100] (2) The control device generates a random number R_A.

[0101] (3) The control device encrypts the random number R_A using a preset symmetric key to obtain an encrypted random number M(R_A).

[0102] (4) The control device sends the M(R_A) to the address ADDR_A0 of the storage device; accordingly, the storage device receives the M(R_A) from the control device.

[0103] (5) The storage device generates a random number R_B.

[0104] (6) The storage device decrypts M(R_A) using the symmetric key to obtain R_A; appends R_B to R_A to obtain the combination number R_A+R_B; encrypts R_A+R_B using the symmetric key to obtain the encrypted combination number M(R_A+R_B); and finally saves M(R_A+R_B) to address ADDR_A1.

[0105] (7) The control device reads the M(R_A+R_B) from the address ADDR-A1 of the storage device.

[0106] (8) The control device decrypts M(R_A+R_B) using the symmetric key to obtain R_A+R_B.

[0107] (9) The control device determines whether the decrypted R_A is consistent with the locally generated R_A. If they are consistent, it determines that the decrypted R_B is correct.

[0108] (10) The control device encrypts R_B using the symmetric key to obtain an encrypted random number M(R_B).

[0109] (11) The control device sends the M(R_A) and the M(R_B) to the address ADDR_A2 of the storage device.

[0110] (12) When the address ADDR_A2 of the storage device receives the M(R_A) and the M(R_B), the storage device determines that the key negotiation is completed, and stores a key negotiation completion flag indicating the completion of the key negotiation into the address ADDR_A3.

[0111] (13) The control device reads the key negotiation completion flag from the address ADDR_A3 of the storage device, and determines that the key negotiation is completed based on the key negotiation completion flag.

[0112] (14) The control device decrypts the M(R_A) and the M(R_B) respectively to obtain the R_A and the R_B.

[0113] (15) The control device determines a session key based on R_A and R_B, such as using R_A+R_B as the session key.

[0114] S202. The storage device controls the read / write channel to be in an on state within the second time period based on the first control information.

[0115] It should be noted that when the read-write channel is in the on state, the control device can perform data read and write operations on the storage device through the read-write channel; conversely, when the read-write channel is in the off state, the control device cannot perform data read and write operations on the storage device through the read-write channel, that is, the control device's data read and write operations on the storage device through the read-write channel will be blocked.

[0116] In one possible implementation, S202 may include: the storage device authenticates the first control information to obtain an authentication result, which includes authentication success or authentication failure; when the authentication result is authentication success, the storage device controls the read-write channel to be in an on state within the second time period.

[0117] Optionally, the storage device may authenticate the first initial control information to obtain the authentication result.

[0118] Optionally, this application does not limit the specific content of the first control information.

[0119] In a possible implementation manner, the first control information may be a first value.

[0120] For example, if the first control information is control information sent by the control device for the first time, the first value may be a random value. Accordingly, when the storage device determines that the difference between the first value and the preset initial value is less than a first threshold, the authentication result is determined to be successful; otherwise, the authentication result is determined to be unsuccessful.

[0121] For example, if the first control information is not the control information sent for the first time by the control device, the first value may be greater than the second value, and the second value may be the control information sent by the control device for the previous time before sending the first control information; accordingly, when the storage device determines that the first value is greater than the second value, it determines that the authentication result is successful authentication; otherwise, it determines that the authentication result is failed authentication.

[0122] S203. The control device performs data reading and / or data writing operations on the storage device within the second time period based on the first control information.

[0123] Furthermore, the control device stops performing data reading and / or data writing operations on the storage device from the end of the second time period. In other words, the data reading and / or data writing operations on the storage device by the control device are prohibited (or blocked) from the end of the second time period.

[0124] Optionally, after the storage device successfully authenticates the first control information, before S203, the storage device may send feedback information to the control device, and the feedback information is used to feedback that the read and write channel is turned on; accordingly, S203 may include: the control device performs data read and write operations on the storage device within the second time period based on the first control information and the feedback information.

[0125] Optionally, the method 200 may also include: the control device sends second control information to the storage device within a third time period, the second control information is used to control the read / write channel to be in an on state within a fourth time period, the third time period is used for the control device to transmit control information with the storage device, and the fourth time period is used for the control device to transmit data with the storage device; the control device performs data reading and / or data writing operations on the storage device within the fourth time period based on the second control information.

[0126] That is, the first time period and the third time period are used for the control device to transmit control information to the storage device, and the first time period is different from the third time period. The second time period and the fourth time period are used for the control device to transmit control information to the storage device, and the second time period is different from the fourth time period.

[0127] Optionally, the first time period and the third time period may partially overlap or not overlap at all, which is not limited in the embodiment of the present application.

[0128] In a possible implementation, the data reading and writing control method between the control device and the storage device may include the following steps (a) to (h):

[0129] (a) The control device and the storage device are bound before leaving the factory to obtain a preset symmetric key.

[0130] (b) The control device and the storage device perform key negotiation based on the symmetric key to obtain a session key.

[0131] (c) The control device encrypts the first initial control information based on the session key to obtain first control information, where the first control information is used to control the read / write channel of the storage device to be in an on state during the second time period.

[0132] (d) The control device sends the first control information to the storage device within a first time period.

[0133] (e) The storage device performs decryption based on the session key to obtain the first initial control information.

[0134] (f) The storage device authenticates the first initial control information to obtain an authentication result, where the authentication result includes authentication success or authentication failure.

[0135] (g) When the authentication result is successful, the storage device controls the read / write channel to be in an on state during the second time period.

[0136] (h) The control device performs data reading and writing operations on the storage device within the second time period based on the first control information.

[0137] Optionally, after step (h), the method may further include the following steps (i) to (j):

[0138] (i) The storage device controls the read / write channel to be in a disconnected state from the end of the second time period.

[0139] (j) The control device stops performing data reading and writing operations on the storage device from the end of the second time period.

[0140] That is, from the end of the second time period, the control device no longer has the authority to perform read and write operations on the storage device, that is, the control device's read and write operations on the storage device will be blocked.

[0141] Optionally, the method may further include the following steps (k) to (r). It should be noted that steps (k) to (r) and steps (c) to (j) above are two independent data read and write control processes, and this application does not limit the execution order of the above two data read and write control processes.

[0142] (k) The control device encrypts the second initial control information based on the session key to obtain second control information, where the second control information is used to control the read and write channels of the storage device to be in an on state during a fourth time period.

[0143] (1) The control device sends the second control information to the storage device within a third time period.

[0144] (m) The storage device performs decryption based on the session key to obtain the second initial control information.

[0145] (n) The storage device authenticates the second initial control information to obtain an authentication result, where the authentication result includes authentication success or authentication failure.

[0146] (o) When the authentication result is successful, the storage device controls the read / write channel of the storage device to be in an on state during the fourth time period.

[0147] (p) The control device performs data reading and writing operations on the storage device within the fourth time period based on the second control information.

[0148] Optionally, after step (p), the method may further include the following steps (q) to (r):

[0149] (q) The storage device controls the read / write channel to be in a disconnected state from the end of the fourth time period.

[0150] (r) The control device stops performing data reading and writing operations on the storage device from the end time of the fourth time period.

[0151] 5 shows a schematic block diagram of a data read-write control device 300 according to an embodiment of the present application. As shown in FIG5 , the data read-write control device 300 may include a sending module 301 and a read-write module 302 .

[0152] Optionally, the data read and write control device 300 can be used in the above-mentioned system 100. Further, the data read and write control device 300 can be used in the control device 110 in the above-mentioned system 100, such as a virtual device formed by software executed by a processor or controller on the control device 110.

[0153] The sending module 301 is used to send first control information to the storage device within a first time period, and the first control information is used to control the read and write channel of the storage device to be in an on state within a second time period. The first time period is used for the data read and write control device to transmit control information with the storage device, and the second time period is used for the data read and write control device to transmit data with the storage device.

[0154] The read / write module 302 is configured to perform data reading and / or data writing operations on the storage device within the second time period based on the first control information.

[0155] In one possible implementation, the sending module 301 is further used to send second control information to the storage device within a third time period, the second control information is used to control the read-write channel to be in an on state within a fourth time period, the third time period is used for the control device to transmit control information with the storage device, and the fourth time period is used for the control device to transmit data with the storage device; the read-write module 302 is further used to perform data reading and / or data writing operations on the storage device within the fourth time period based on the second control information.

[0156] In a possible implementation, the sending module 301 is further configured to stop reading data from and / or writing data to the storage device from the end of the second time period.

[0157] Optionally, the first control information is encrypted with a session key, and the data read and write control device 300 may further include an encryption module 303 .

[0158] In a possible implementation, the encryption module 303 is further configured to encrypt the first initial control information based on the session key to obtain the first control information before the sending module 301 sends the first control information to the storage device within the first time period.

[0159] Optionally, the data read and write control device 300 may further include a key negotiation module 304 .

[0160] In a possible implementation, the first control information is encrypted with a session key, and the key negotiation module 304 is configured to perform key negotiation with the storage device to obtain the session key before the sending module 301 sends the first control information to the storage device within the first time period.

[0161] In a possible implementation, the key negotiation module 303 is specifically configured to perform key negotiation with the storage device based on a preset symmetric key to obtain the session key.

[0162] It should be noted that the information interaction, execution process, and other contents between the above-mentioned devices are based on the same concept as the method embodiment of the present application. Their specific functions and technical effects can be found in the method embodiment section and will not be described in detail here. In an optional example, the data read and write control device 300 can be specifically the control device in the embodiment of the above-mentioned method 200. The data read and write control device 300 can be used to execute the various processes and / or steps corresponding to the control device in the embodiment of the above-mentioned method 200. To avoid repetition, they will not be described in detail here.

[0163] One or more of the modules in the embodiment shown in FIG5 may be implemented by software, hardware, firmware, or a combination thereof. The software or firmware includes, but is not limited to, computer program instructions or codes, and may be executed by a hardware processor. The hardware includes, but is not limited to, various integrated circuits, such as a central processing unit (CPU), a digital signal processor (DSP), a field programmable gate array (FPGA), or an application-specific integrated circuit (ASIC).

[0164] Please refer to FIG. 6 , which shows a schematic block diagram of a data read and write control device 400 provided in an embodiment of the present application. The data read and write control device 400 may include a controller 401 and a communication interface 402 , and the controller 401 and the communication interface 402 are coupled.

[0165] In an optional example, those skilled in the art will appreciate that the data read and write control device 400 may be specifically the control device in the above-mentioned method 200, and the data read and write control device 400 may be the physical hardware structure of the data read and write control device 300. The data read and write control device 400 may be used to execute the various processes and / or steps corresponding to the control device in the embodiment of the above-mentioned method 200, and to avoid repetition, they are not described here.

[0166] The communication interface 402 is used to input data (such as data to be written to the storage device) to the controller 401 and / or output data (such as data read from the storage device) from the controller 401; the controller 401 is used to run computer programs or instructions to enable the data read and write control device 400 to implement the method described in the above-mentioned method 200 embodiment.

[0167] The controller 401 in the embodiment of the present application includes, but is not limited to, a central processing unit (CPU), a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), an off-the-shelf programmable gate array (FPGA), discrete gate or transistor logic devices, or discrete hardware components. A general-purpose processor may be a microprocessor, a microcontroller, or any conventional processor.

[0168] For example, the controller 401 is used to send first control information to the storage device within a first time period, the first control information is used to control the read and write channel of the storage device to be in an on state within a second time period, the first time period is used for the data read and write control device to transmit control information to the storage device, and the second time period is used for the data read and write control device to transmit data to the storage device; based on the first control information, data reading and / or data writing operations are performed on the storage device through the communication interface 402 within the second time period.

[0169] Optionally, the data read and write control device 400 may further include a memory 403 .

[0170] The memory 403 may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. The non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct RAMbus RAM (DR RAM).

[0171] Specifically, the memory 403 is used to store program codes and instructions of the data read and write control device 400. Optionally, the memory 403 is also used to store data obtained by the controller 401 during execution of the above method 200 embodiment, such as session keys and various control information (such as first control information).

[0172] Optionally, the memory 403 may be a separate device or integrated into the controller 401 .

[0173] It should be noted that FIG6 merely illustrates a simplified design of the data read / write control device 400. In actual applications, the data read / write control device 400 may further include other necessary components, including but not limited to any number of communication interfaces, processors, controllers, memories, etc., and all data read / write control devices 400 that can implement the present application are within the scope of protection of the present application.

[0174] For example, the data read and write control device 400 may also include an encryption component (or encryption engine), which is coupled to the controller 401. The encryption component is used to encrypt the first initial control information to obtain the first control information. That is, the encryption process does not need to be implemented by the controller through software, but is implemented by the hardware encryption component.

[0175] For example, the data read and write control device 400 also includes a random number generator, which is coupled to the controller 401. The random number generator is used to generate random numbers for key negotiation. That is, the random number generation process does not need to be implemented by the controller through software, but is implemented by a hardware random number generator.

[0176] In one possible design, the data read / write control device 400 may be a chip device. Optionally, the chip device may further include one or more memories for storing computer-executable instructions. When the chip device is running, the processor may execute the computer-executable instructions stored in the memory to enable the chip device to perform the above-mentioned command transmission method.

[0177] Optionally, the chip device may be a field programmable gate array, a dedicated integrated chip, a system chip, a central processing unit, a network processor, a digital signal processing circuit, a microcontroller, or a programmable controller or other integrated chips for realizing relevant functions.

[0178] 7 shows a schematic block diagram of a data reading and writing device 500 according to an embodiment of the present application. The data reading and writing device 500 may include: a receiving module 501 and a control module 502 .

[0179] Optionally, the data reading and writing device 500 can be used in the above-mentioned system 100. Further, the data reading and writing device 500 can be used in the storage device 120 in the above-mentioned system 100, such as a virtual device formed by software executed by a processor or controller on the storage device 120.

[0180] The receiving module 501 is used to receive first control information from the control device within a first time period, and the first control information is used to control the read and write channel of the data read and write device to be in an on state within a second time period. The first time period is used for the control device to transmit control information to the data read and write device, and the second time period is used for the control device to transmit data to the data read and write device.

[0181] The control module 502 is configured to control the read / write channel to be in an on state during the second time period based on the first control information.

[0182] In one possible implementation, the receiving module 501 is also used to receive second control information from the control device within a third time period, the second control information is used to control the read-write channel to be in an on state within a fourth time period, the third time period is used for the control device to transmit control information with the data read-write device, and the fourth time period is used for the control device to transmit data with the data read-write device; the control module 502 is also used to control the read-write channel to be in an on state within the fourth time period based on the second control information.

[0183] In a possible implementation, the receiving module 501 is further configured to control the read / write channel to be in a disconnected state from the end of the second time period.

[0184] Optionally, the data reading and writing device 500 may further include an authentication module 503 .

[0185] In one possible implementation, the authentication module 503 is used to authenticate the first control information and obtain an authentication result, which includes authentication success or authentication failure; the control module 502 is specifically used to control the read-write channel to be in an on state during the second time period when the authentication result is authentication success.

[0186] Optionally, the data reading and writing device 500 may further include a decryption module 504 .

[0187] In one possible implementation, the first control information is encrypted with a session key, and the decryption module 504 is used to authenticate the first control information in the authentication module 503, and before obtaining the authentication result, decrypt the first control information based on the session key to obtain the first initial control information; the authentication module 503 is specifically used to authenticate the first initial control information and obtain the authentication result.

[0188] Optionally, the data reading and writing device 500 may further include a key negotiation module 505 .

[0189] In a possible implementation, the key negotiation module 505 is configured to perform key negotiation with the control device to obtain the session key before the decryption module decrypts the first control information based on the session key.

[0190] In a possible implementation, the key negotiation module 505 is specifically configured to perform key negotiation with the control device based on a preset symmetric key to obtain the session key.

[0191] Optionally, one or more of the receiving module 501, the control module 502, the authentication module 503, the decryption module 504 and the key negotiation module 505 in the data reading and writing device 500 can be implemented using a high-security mechanism to ensure the security of data reading and writing.

[0192] Optionally, the above-mentioned high-security mechanism includes but is not limited to: using a dedicated high-security encryption and decryption engine to encrypt and decrypt important internal registers and combinational logic; or performing double backup of various keys and / or control information (such as the first control information) (i.e., backing up in registers and persistent memory areas respectively) to prevent attacks.

[0193] It should be noted that the information interaction, execution process, etc. between the above-mentioned devices are based on the same concept as the embodiment of the method of the present application. Their specific functions and technical effects can be found in the embodiment of the method, and will not be repeated here. In an optional example, the data reading and writing device 500 can be specifically the storage device in the embodiment of the above-mentioned method 200. The data reading and writing device 500 can be used to execute the various processes and / or steps corresponding to the storage device in the above-mentioned method 200. To avoid repetition, they will not be repeated here.

[0194] One or more of the modules in the embodiment shown in FIG7 may be implemented by software, hardware, firmware, or a combination thereof. The software or firmware includes, but is not limited to, computer program instructions or codes, and may be executed by a hardware processor. The hardware includes, but is not limited to, various integrated circuits, such as a CPU, DSP, FPGA, or ASIC.

[0195] Please refer to Figure 8, which shows a schematic block diagram of a data reading and writing device 600 provided in an embodiment of the present application. The data reading and writing device 600 may include a sub-control system 601, a storage area 602 and a read-write channel 603. The storage area 602 and the read-write channel 603 are coupled, and the sub-control system 601 is used to control the read-write channel 603 to be in an on state or a closed state.

[0196] It should be noted that when the sub-control system 601 controls the read-write channel 603 to be in the on state, the control device can perform data read and write operations on the storage area 602 through the read-write channel 603; conversely, when the sub-control system 601 controls the read-write channel 603 to be in the off state, the control device cannot perform data read and write operations on the storage area 602 through the read-write channel 603, that is, the data read and write operations performed by the control device on the storage area 602 through the read-write channel 603 will be prohibited (or blocked).

[0197] In an optional example, those skilled in the art can understand that the data reading and writing device 600 can be specifically the storage device in the above-mentioned method 200, and the data reading and writing device 600 can be the physical hardware structure of the data reading and writing device 500. The data reading and writing device 600 can be used to execute the various processes and / or steps corresponding to the storage device in the embodiment of the above-mentioned method 200. To avoid repetition, they will not be repeated here.

[0198] The sub-control system 601 is used to receive first control information from the control device within a first time period, and the first control information is used to control the read and write channel of the data read and write device to be in an on state within a second time period. The first time period is used for the control device to transmit control information to the data read and write device, and the second time period is used for the control device to transmit data to the data read and write device; based on the first control information, the read and write channel 603 is controlled to be in an on state within the second time period.

[0199] Optionally, the sub-control system 601 may include a read-write controller, which is used to control the on / off state of the read-write channel 603 .

[0200] Optionally, the storage area 602 may be a non-volatile storage area, such as a persistent storage area.

[0201] In one possible implementation, the sub-control system 601 is also used to receive second control information from the control device within a third time period, and the second control information is used to control the read-write channel to be in an on state within a fourth time period. The third time period is used for the control device to transmit control information to the storage device, and the fourth time period is used for the control device to transmit data to the storage device; based on the second control information, the read-write channel 603 is controlled to be in an on state within the fourth time period.

[0202] In a possible implementation, the sub-control system 601 is further configured to control the read / write channel 603 to be in a disconnected state from the end of the second time period.

[0203] In one possible implementation, the sub-control system 601 is specifically used to authenticate the first control information and obtain an authentication result, which includes authentication success or authentication failure; when the authentication result is authentication success, the read-write channel 603 is controlled to be in an on state during the second time period.

[0204] Optionally, the sub-control system 601 may include an authenticator, which is used to authenticate the first control information.

[0205] In one possible implementation, the first control information is encrypted with a session key, and the sub-control system 601 is also used to decrypt the first control information based on the session key to obtain the first initial control information before authenticating the first control information and obtaining the authentication result; the sub-control system 601 is specifically used to authenticate the first initial control information and obtain the authentication result.

[0206] Optionally, the sub-control system 601 may include a decryptor, which is used to decrypt the first control information based on the session key to obtain the first initial control information.

[0207] In a possible implementation, the sub-control system 601 is further configured to perform key negotiation with the control device to obtain the session key before decrypting the first control information based on the session key to obtain the first initial control information.

[0208] Optionally, the sub-control system 601 may include a key negotiator, and the key negotiator is used to perform key negotiation with the control device to obtain the session key.

[0209] In a possible implementation, the sub-control system 601 is specifically configured to perform key negotiation with the control device based on a preset symmetric key to obtain the session key.

[0210] Optionally, the sub-control system 601 in the data reading and writing device 600 can be implemented using a high-security mechanism to ensure the security of data reading and writing.

[0211] Optionally, the above-mentioned high-security mechanism includes but is not limited to: using a dedicated high-security encryption and decryption engine to encrypt and decrypt important internal registers and combinational logic; or performing double backup of various keys and / or control information (such as the first control information) (i.e., backing up in registers and persistent memory areas respectively) to prevent attacks.

[0212] In one possible implementation, each session key and / or each control information (such as the first control information) is stored in a register (or trigger) in the sub-control system 601 when the sub-control system 601 is powered on. During data reading and writing, each session key and / or each control information can be directly obtained from the register (or trigger). At the same time, the sub-control system 601 can back up each session key and each control information and store them in a persistent memory (i.e., storage area 602). When the sub-control system 601 is powered off, the session keys and / or each control information stored in the register (or trigger) are erased or released, and the sub-control system 601 can then read each session key and / or each control information from the persistent memory.

[0213] In one possible design, the data reading and writing device 600 may be a chip device. Optionally, the chip device may further include one or more memories for storing computer-executable instructions. When the chip device is running, the processor may execute the computer-executable instructions stored in the memory to enable the chip device to perform the above-mentioned command transmission method.

[0214] Optionally, the chip device may be a field programmable gate array, a dedicated integrated chip, a system chip, a central processing unit, a network processor, a digital signal processing circuit, a microcontroller, or a programmable controller or other integrated chips for realizing relevant functions.

[0215] It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0216] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0217] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0218] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0219] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0220] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0221] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0222] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in the present application should be included in the scope of protection of the present application. Therefore, the scope of protection of the present application should be based on the scope of protection of the claims.

Claims

1. A data read and write control method, characterized in that: include: The control device sends first control information to the storage device during a first time period, the first control information being used to control a read / write channel of the storage device to be in an on state during a second time period, the first time period being used for the control device to transmit control information to the storage device, and the second time period being used for the control device to transmit data to the storage device; The control device performs a data reading and / or data writing operation on the storage device within the second time period based on the first control information.

2. The method according to claim 1, characterized in that The method further comprises: The control device sends second control information to the storage device within a third time period, the second control information being used to control the read / write channel to be in an on state within a fourth time period, the third time period being used for the control device to transmit control information to the storage device, and the fourth time period being used for the control device to transmit data to the storage device; The control device performs a data reading and / or data writing operation on the storage device within the fourth time period based on the second control information.

3. The method according to claim 1, characterized in that The method further comprises: The control device stops performing data reading and / or data writing operations on the storage device from the end moment of the second time period.

4. The method according to any one of claims 1 to 3, characterized in that The first control information is encrypted using a session key. Before the control device sends the first control information to the storage device within the first time period, the method further includes: The control device performs key negotiation with the storage device to obtain the session key.

5. The method according to claim 4, characterized in that The control device performs key negotiation with the storage device to obtain the session key, including: The control device and the storage device perform key negotiation based on a preset symmetric key to obtain the session key.

6. A data read and write control method, characterized in that: include: The storage device receives first control information from the control device during a first time period, the first control information being used to control a read / write channel of the storage device to be in an on state during a second time period, the first time period being used for the control device to transmit control information to the storage device, and the second time period being used for the control device to transmit data to the storage device; The storage device controls the read-write switch to be in an open state during the second time period based on the first control information.

7. The method according to claim 6, characterized in that The method further comprises: The storage device receives second control information from the control device during a third time period, the second control information being used to control the read / write channel to be in an on state during a fourth time period, the third time period being used for the control device to transmit control information to the storage device, and the fourth time period being used for the control device to transmit data to the storage device; The storage device controls the read / write channel to be in an on state within the fourth time period based on the second control information.

8. The method according to claim 6, characterized in that The method further comprises: The storage device controls the read / write channel to be in a disconnected state from the end of the second time period.

9. The method according to any one of claims 6 to 8, characterized in that The storage device controls the read / write channel to be in an on state during the second time period based on the first control information, including: The storage device authenticates the first control information to obtain an authentication result, where the authentication result includes authentication success or authentication failure; When the authentication result is successful, the storage device controls the read / write channel to be in an on state during the second time period.

10. The method according to claim 9, characterized in that The first control information is encrypted using a session key. Before the storage device authenticates the first control information and obtains an authentication result, the method further includes: The storage device decrypts the first control information based on the session key to obtain first initial control information; The storage device authenticates the first control information to obtain an authentication result, including: The storage device authenticates the first initial control information to obtain the authentication result.

11. The method according to claim 10, characterized in that Before the storage device decrypts the first control information based on the session key to obtain the first initial control information, the method further includes: The storage device performs key negotiation with the control device to obtain the session key.

12. The method according to claim 11, characterized in that The storage device performs key negotiation with the control device to obtain the session key, including: The storage device and the control device perform key negotiation based on a preset symmetric key to obtain the session key.

13. A data read and write control device, characterized in that: include: a sending module, configured to send first control information to the storage device within a first time period, the first control information being used to control a read / write channel of the storage device to be in an on state within a second time period, the first time period being used for the data read / write control device to transmit control information to the storage device, and the second time period being used for the data read / write control device to transmit data to the storage device; A read / write module is configured to perform data reading and / or data writing operations on the storage device within the second time period based on the first control information.

14. The device according to claim 13, characterized in that The sending module is further configured to send second control information to the storage device within a third time period, the second control information being used to control the read / write channel to be in an on state within a fourth time period, the third time period being used for the control device to transmit control information to the storage device, and the fourth time period being used for the control device to transmit data to the storage device; The read / write module is further configured to perform data reading and / or data writing operations on the storage device within the fourth time period based on the second control information.

15. The device according to claim 13, characterized in that The read / write module is further configured to stop reading data and / or writing data to the storage device from the end of the second time period.

16. The device according to any one of claims 13 to 15, characterized in that The first control information is encrypted with a session key, and the device further includes a key negotiation module; The key negotiation module is configured to perform key negotiation with the storage device to obtain the session key before the sending module sends the first control information to the storage device within the first time period.

17. The device according to claim 16, characterized in that The key negotiation module is specifically configured to perform key negotiation with the storage device based on a preset symmetric key to obtain the session key.

18. A data reading and writing device, characterized in that: include: a receiving module, configured to receive first control information from a control device within a first time period, the first control information being used to control a read / write channel of the data read / write device to be in an on state within a second time period, the first time period being used for the control device to transmit control information to the data read / write device, and the second time period being used for the control device to transmit data to the data read / write device; A control module is configured to control the read / write channel to be in an on state within the second time period based on the first control information.

19. The device according to claim 18, characterized in that The receiving module is further configured to receive second control information from the control device within a third time period, the second control information being used to control the read / write channel to be in an on state within a fourth time period, the third time period being used for the control device to transmit control information to the data read / write device, and the fourth time period being used for the control device to transmit data to the data read / write device; The control module is further configured to control the read / write channel to be in an on state within the fourth time period based on the second control information.

20. The device according to claim 18, characterized in that The device further comprises: The control module is further configured to control the read / write channel to be in a disconnected state from the end of the second time period.

21. The device according to any one of claims 18 to 20, characterized in that The device also includes an authentication module; The authentication module is used to authenticate the first control information and obtain an authentication result, wherein the authentication result includes authentication success or authentication failure; The control module is specifically configured to control the read / write channel to be in an on state within the second time period when the authentication result is successful.

22. The device according to claim 21, characterized in that The first control information is encrypted using a session key, and the apparatus further comprises: a decryption module; The decryption module is configured to decrypt the first control information based on the session key to obtain first initial control information before the authentication module authenticates the first control information and obtains an authentication result; The authentication module is specifically configured to authenticate the first initial control information to obtain the authentication result.

23. The device according to claim 22, characterized in that The device further includes: a key negotiation module; The key negotiation module is configured to perform key negotiation with the control device to obtain the session key before the decryption module decrypts the first control information based on the session key to obtain the first initial control information.

24. The device according to claim 23, characterized in that The key negotiation module is specifically configured to perform key negotiation with the control device based on a preset symmetric key to obtain the session key.

25. A computer-readable storage medium for storing a computer program, characterized in that: The computer program comprises instructions for implementing the method of any one of claims 1 to 12 above.

26. A computer program product comprising instructions, characterized in that: When the instructions are executed on a computer or a processor, the computer or the processor is caused to implement the method according to any one of claims 1 to 12.

Images