Fingerprint mobile hard disk and data management method thereof

Abstract

The invention discloses a fingerprint mobile hard disk and a data management method thereof in the technical field of fingerprint mobile hard disks. The fingerprint mobile hard disk comprises a fingerprint module, a DDR (Double Data Rate), an SSD (Solid State Disk) controller and a FLASH array, a plurality of firmware are arranged in the SSD controller, the FLASH array is divided into a plurality of mutually independent physical spaces, and the firmware is associated with the physical spaces in a one-to-one correspondence manner; the fingerprint module is used for identifying fingerprints and outputting corresponding fingerprint encryption identification codes according to different fingerprints, and the SSD controller is used for receiving the fingerprint encryption identification codes, loading corresponding firmware and accessing FLASH in a corresponding associated physical space in the FLASH array through the firmware. According to the fingerprint mobile hard disk, the data of different users are stored in different FLASH, so that the isolation of the user data is physically realized, and the data privacy and data security requirements of the users are met.

Description

Technical Field

[0001] The present invention relates to the technical field of fingerprint mobile hard disks, and in particular to a fingerprint mobile hard disk and a data management method thereof. Background Art

[0002] With the continuous progress of the information age, information confidentiality measures are particularly important. If you are not careful, there will be leaks, which will have serious adverse consequences for individuals and enterprises. Therefore, the emergence of encrypted SSD solid state drives is particularly important. There are many types of existing encrypted SSD solid state drives. The encryption method of SSD solid state drives on the market is generally fingerprint unlocking, that is, obtaining access rights by identifying fingerprints.

[0003] Currently, there are two main security solutions for fingerprint mobile hard drives: 1. Multiple fingerprint users share the solid-state storage area, that is, any user who passes the fingerprint authentication can access the stored data; for the solution of multiple fingerprint users sharing the storage area, although this solution implements that only users who pass the fingerprint authentication can access the data, the storage area is shared between different users, there is no data privacy, and the data security is low.

[0004] 2. Software isolation solution: each user can only access his own storage area; multiple fingerprint users use software means to achieve data software isolation between users who have passed fingerprint authentication, but the software isolation solution can be cracked by software means to achieve unauthorized data access, with low data privacy and low data security. Summary of the invention

[0005] The present application solves the problems of low data privacy and low data security in the prior art by providing a fingerprint mobile hard disk and a data management method thereof, and physically realizes the isolation of user data, thereby meeting the user's data privacy and data security requirements.

[0006] The embodiment of the present application provides a fingerprint mobile hard disk, including: a fingerprint module, a DDR, an SSD controller and a FLASH array, wherein the SSD controller is provided with a plurality of firmwares, the FLASH array is divided into a plurality of mutually independent physical spaces, and the firmwares are associated with the physical spaces in a one-to-one correspondence; The fingerprint module is used to identify fingerprints and output corresponding fingerprint encryption identification codes according to different fingerprints. The DDR is used to cache data inside the SSD controller to achieve processing acceleration. The SSD controller is used to receive the fingerprint encryption identification code and load the corresponding firmware, and access the corresponding FLASHs in the physical space in the FLASH array through the firmware.

[0007] The beneficial effect of the above embodiment is that the FLASH array of the fingerprint mobile hard disk is physically divided into n different physical spaces (Physical Space) through pre-configuration; assuming that the fingerprint identification code of user i is code i, then this fingerprint hard disk has a set of logical mappings (code i-FW i- Physical Space i). The fingerprint module is responsible for fingerprint identification, and identifies the fingerprints of different users as different fingerprint encryption identification codes code i. The SSD controller loads a specific firmware (FW i) through the fingerprint encryption identification code. FW i can only access the FLASH in Physical Space i in the FLASH array. The data of different users of the fingerprint mobile hard disk is stored in different FLASHs, which physically implements the isolation of user data and meets the user's data privacy and data security requirements.

[0008] Based on the above embodiments, the present application can be further improved as follows: In one of the embodiments of the present application, the SSD controller includes an interface unit, a firmware unit and a FLASH controller. The interface unit is used to connect to a host computer and perform data exchange. The firmware unit includes a plurality of firmwares. The firmware is used to call the corresponding FLASH in the physical space through the FLASH controller.

[0009] In one of the embodiments of the present application, the fingerprint module model is GF3956; the SSD controller model is DSS510.

[0010] The present application embodiment provides a data management method for the aforementioned fingerprint mobile hard disk, comprising the following steps: S1: Fingerprint configuration: The user enters the fingerprint through the host computer to generate a corresponding fingerprint identification code, and the SSD controller assigns the corresponding firmware to the fingerprint identification code according to the configuration file, and the firmware is associated with the corresponding physical space; S2: The user inserts the fingerprint mobile hard disk, triggering fingerprint recognition, and the SSD controller jumps to the Boot Code; S3: Boot Code requests the fingerprint module to identify the user's fingerprint as the corresponding fingerprint identification code; S4: After receiving the fingerprint identification code code i, the SSD controller detects and matches the corresponding firmware information FW i through the information in the corresponding configuration file, and jumps to the corresponding firmware FW i; S5: The user accesses the corresponding physical space according to the corresponding firmware.

[0011] In one embodiment of the present application, the configuration file includes a user number, a fingerprint identification code, and information on the size of the corresponding usage space.

[0012] In one embodiment of the present application, the step S1 is specifically as follows: S1.1: The host computer receives a fingerprint configuration request initiated by the user, and accordingly calls the fingerprint module through the SSD controller to complete fingerprint recognition and obtain a fingerprint recognition code; S1.2: The host computer reads the configuration file and writes the fingerprint identification code into the corresponding user position of the configuration file; S1.3: The host computer sends the configuration file with the fingerprint identification code to the SSD controller, and the SSD controller mounts the fingerprint identification code with the corresponding firmware; S1.4: The host computer obtains the fingerprint identification code mounting status information sent by the SSD controller, and if the mounting is successful, it feedbacks that the user fingerprint setting is completed.

[0013] In one embodiment of the present application, in step S4, if the SSD controller does not obtain the corresponding fingerprint identification code or the fingerprint identification code does not match the corresponding firmware, then return to step S3.

[0014] One or more technical solutions provided in the embodiments of the present application have at least the following technical effects or advantages: 1. This fingerprint mobile hard disk is pre-configured and the firmware divides the FLASH array into several physically isolated physical spaces, eliminating the possibility of unauthorized access to data through software; 2. This fingerprint mobile hard disk achieves physical isolation by defining the mapping relationship between fingerprint identification code (code i), firmware (FW i), and FLASH physical space (Physical Space i); through the means of physical isolation, data privacy and data security between different fingerprint users are achieved; data privacy and data security are improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following is a brief introduction to the drawings required for the specific embodiments or the description of the prior art. In all the drawings, similar elements or parts are generally identified by similar reference numerals. In the drawings, the elements or parts are not necessarily drawn according to the actual scale.

[0016] Figure 1 This is a structural block diagram of a fingerprint mobile hard disk in an embodiment of the present application; Figure 2This is a schematic diagram of the logical mapping relationship in the embodiment of the present application; Figure 3 This is a flowchart of a data management method for a fingerprint mobile hard disk in an embodiment of the present application; Figure 4 A flowchart of the steps of fingerprint configuration in the embodiment of the present application; Figure 5 This is a flow chart of the steps for initializing the fingerprint mobile hard disk in the embodiment of the present application. DETAILED DESCRIPTION

[0017] The present invention is further explained below in conjunction with specific implementation methods. It should be understood that these implementation methods are only used to illustrate the present invention and are not used to limit the scope of the present invention. After reading the present invention, various equivalent forms of modifications to the present invention by those skilled in the art all fall within the scope defined by the claims attached to this application.

[0018] In the description of the present invention, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine different embodiments or examples described in the present invention and the features of different embodiments or examples without contradiction.

[0019] The embodiment of the present application solves the problems of low data privacy and low data security in the prior art by providing a fingerprint mobile hard disk and a data management method thereof, and physically implements the isolation of user data, thereby meeting the user's data privacy and data security requirements.

[0020] The technical solution in the embodiment of the present application is to solve the above problems, and the overall idea is as follows: Example: like Figure 1-2 As shown, a fingerprint mobile hard disk includes: a fingerprint module, a DDR, an SSD controller and a FLASH array, wherein a plurality of firmwares (FW) are arranged in the SSD controller, and the FLASH array is divided into a plurality of mutually independent physical spaces (PhysicalSpace), and the firmwares are associated with the physical spaces in a one-to-one correspondence; The fingerprint module is used to identify fingerprints and output the corresponding fingerprint encryption identification code (code i) according to different fingerprints. DDR is used to cache the data inside the SSD controller to achieve processing acceleration. The SSD controller is used to receive the fingerprint encryption identification code (code i) and load the corresponding firmware (FW i). The firmware (FW i) is used to access the specific FLASH in the corresponding physical space (Pysical Space i) in the FLASH array. The logical mapping relationship is as follows: (code i)-(FW i)-(Physical Space i).

[0021] The SSD controller includes an interface unit, a firmware unit and a FLASH controller. The interface unit is used to connect to the host computer and exchange data. The firmware unit includes multiple firmwares. The firmware is used to call the corresponding physical space (Pysical Space i) in the FLASH array through the FLASH controller.

[0022] The data of different users of the fingerprint mobile hard disk are stored in different physical spaces in the FLASH array, which physically isolates the user data and meets the user's data privacy and data security requirements.

[0023] The firmware is the driver program running inside the SSD controller, and the physical space refers to the combination of several FLASHs in the FLASH array. Each firmware (driver program) can specify which FLASHs it can access. For example, firmware 1 can only access the first flash, and firmware 2 can only access the second flash.

[0024] Optionally, the available model of the fingerprint module is GF3956; the available model of the SSD controller is DSS510.

[0025] like Figure 3 As shown, a data management method for the aforementioned fingerprint mobile hard disk includes the following steps: S1: Fingerprint configuration: The user enters the fingerprint through the host computer and generates the corresponding fingerprint identification code. The SSD controller assigns the corresponding firmware to the fingerprint identification code according to the configuration file, and the firmware is associated with the corresponding physical space; The configuration file includes the user ID, fingerprint identification code, and corresponding information on the size of the space used. Figure 4 As shown, step S1 is specifically as follows: S1.1: The host computer receives the configuration fingerprint request initiated by the user, and accordingly calls the fingerprint module through the SSD controller to complete fingerprint recognition and obtain the fingerprint identification code; S1.2: The host computer reads the configuration file and writes the fingerprint identification code into the corresponding user position in the configuration file; S1.3: The host computer sends the configuration file with the fingerprint identification code to the SSD controller, and the SSD controller links the fingerprint identification code with the corresponding firmware; S1.4: The host computer obtains the fingerprint identification code attachment status information sent by the SSD controller. If the attachment is successful, it will feedback that the user's fingerprint setting is completed.

[0026] S2: Fingerprint input: The user inserts the fingerprint mobile hard disk, triggering fingerprint recognition, and the SSD controller jumps to BootCode (a program that is first executed after the chip is powered on. This program is responsible for initializing the system's hardware environment and loading the operating system or other applications); S3: Fingerprint identification: Boot Code requests the fingerprint module to identify the user's fingerprint as the corresponding fingerprint identification code; S4: Fingerprint verification: After the SSD controller receives the fingerprint identification code code i, it detects and matches the corresponding firmware information FW i through the information in the corresponding configuration file, and jumps to load the corresponding firmware FW i; if the SSD controller does not obtain the corresponding fingerprint identification code or the fingerprint identification code does not match the corresponding firmware, it returns to step S3.

[0027] S5: Storage space access: The user accesses the corresponding physical space PhysicalSpace i according to the corresponding loaded firmware FW i.

[0028] Among them, Figure 5 As shown in the figure, when the fingerprint mobile hard disk is used for the first time (initialization), the host computer configures how many users (User Number) use the fingerprint mobile hard disk, and how much space is allocated to each user (User) for storage (User Space[1..n]). The host computer will load these parameters into the configuration file, and after the host computer establishes a connection with the fingerprint mobile hard disk, it will start the configuration process and execute the configuration action: the fingerprint mobile hard disk allocates the corresponding firmware according to the user, and the corresponding FLASH space is mounted to the corresponding firmware according to the corresponding usage space User Space[1..n].

[0029] The specific implementation cases of the present invention are as follows: Take user A and user B as an example: User A pre-registers fingerprint A, and user B pre-registers fingerprint B. The fingerprint module recognizes fingerprint A as fingerprint identification code Code 1, and fingerprint B as Code 2. The SSD controller saves the relevant configuration information.

[0030] When user A inserts a hard disk into the device and logs in with a fingerprint, the fingerprint module recognizes fingerprint A as Code1. At this time, the SSD controller loads the corresponding firmware FW1 according to Code1. After the firmware FW1 runs normally, user A can only read and write the FLASH in Physical Space 1 in the FLASH array. Other Physical Spaces are physically isolated from user A.

[0031] After user A uses the hard disk, user B needs to unplug and plug in the hard disk and log in using fingerprint. The fingerprint module recognizes fingerprint B as Code2. At this time, the SSD controller loads the corresponding firmware FW2 according to Code2. After firmware FW2 runs normally, user B can only read and write the FLASH in Physical Space 2 in the FLASH array. Other Physical Spaces are physically isolated from user B.

[0032] The technical solutions in the above embodiments of the present application have at least the following technical effects or advantages: 1. This fingerprint mobile hard disk is pre-configured and the firmware divides the FLASH array into several physically isolated physical spaces, eliminating the possibility of unauthorized access to data through software; 2. This fingerprint mobile hard disk achieves physical isolation by defining the mapping relationship between fingerprint identification code (code i), firmware (FW i), and FLASH physical space (Physical Space i); through the means of physical isolation, data privacy and data security between different fingerprint users are achieved; data privacy and data security are improved.

[0033] Although the embodiments of the present invention have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present invention. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present invention.

Claims

1. A fingerprint mobile hard disk, characterized in that: include: A fingerprint module, a DDR, an SSD controller and a FLASH array, wherein the SSD controller is provided with a plurality of firmwares, the FLASH array is divided into a plurality of mutually independent physical spaces, and the firmwares are associated with the physical spaces in a one-to-one correspondence; The fingerprint module is used to identify fingerprints and output corresponding fingerprint encryption identification codes according to different fingerprints. The DDR is used to cache data inside the SSD controller. The SSD controller is used to receive the fingerprint encryption identification code and load the corresponding firmware, and the FLASH in the corresponding associated physical space in the FLASH array is accessed through the firmware.

2. The fingerprint mobile hard disk according to claim 1, characterized in that: The SSD controller includes an interface unit, a firmware unit and a FLASH controller. The interface unit is used to communicate with a host computer and perform data exchange. The firmware unit includes a plurality of firmwares. The firmwares are used to call the corresponding FLASH in the physical space through the FLASH controller.

3. The fingerprint mobile hard disk according to claim 1, characterized in that: The fingerprint module model is GF3956; the SSD controller model is DSS510.

4. A data management method for a fingerprint mobile hard disk as claimed in any one of claims 1 to 3, characterized in that: The following steps are involved: S1: Fingerprint configuration: The user enters the fingerprint through the host computer to generate a corresponding fingerprint identification code, and the SSD controller assigns the corresponding firmware to the fingerprint identification code according to the configuration file, and the firmware is associated with the corresponding physical space; S2: The user inserts the fingerprint mobile hard disk, triggering fingerprint recognition, and the SSD controller jumps to the Boot Code; S3: Boot Code requests the fingerprint module to identify the user's fingerprint as the corresponding fingerprint identification code; S4: After receiving the fingerprint identification code, the SSD controller detects and matches the corresponding firmware information by corresponding to the information in the configuration file, and jumps to the corresponding firmware; S5: The user accesses the corresponding physical space according to the corresponding firmware.

5. The data management method according to claim 4, characterized in that: The configuration file includes the user number, the fingerprint identification code, and the corresponding information of the size of the used space.

6. The data management method according to claim 4, characterized in that: The step S1 is specifically as follows: S1.1: The host computer receives a fingerprint configuration request initiated by the user, and accordingly calls the fingerprint module through the SSD controller to complete fingerprint recognition and obtain a fingerprint recognition code; S1.2: The host computer reads the configuration file and writes the fingerprint identification code into the corresponding user position of the configuration file; S1.3: The host computer sends the configuration file with the fingerprint identification code to the SSD controller, and the SSD controller mounts the fingerprint identification code with the corresponding firmware; S1.4: The host computer obtains the fingerprint identification code mounting status information sent by the SSD controller, and if the mounting is successful, it feedbacks that the user fingerprint setting is completed.

7. The data management method according to claim 4, characterized in that: In step S4, if the SSD controller does not obtain the corresponding fingerprint identification code or the fingerprint identification code does not match the corresponding firmware, the process returns to step S3.

Images