Storage device encryption method and system and medium

Abstract

The invention relates to the technical field of storage device encryption, in particular to a storage device encryption method and system and a medium, and the method comprises the steps: obtaining a storage request sent by a client, selecting a corresponding encryption algorithm according to a data type and an encryption level in the storage request, carrying out the first-layer encryption of data, and carrying out the encryption of the data through employing a symmetric encryption algorithm, the ciphertext is generated, the disguising device is used for disguising a traditional DLC drive control program and a program instruction used for normally driving DLC equipment, the ciphertext disguising the traditional DLC drive control program can have an excellent disguising effect, the hiding effect of the ciphertext is greatly improved, a storage hard disk is made to leave a hard disk interface unit in a physical mode, and the storage hard disk interface unit can be used for normally driving the DLC equipment. And the data is directly disconnected from the computer, so that the security and reliability of the data can be further improved.

Description

Technical Field

[0001] The present invention relates to the technical field of storage device encryption, and in particular to a storage device encryption method, system and medium. Background Art

[0002] As we all know, with the rapid development of information technology, data security issues are becoming increasingly prominent. As an important carrier of data, the security of storage devices is of vital importance. However, traditional storage device encryption methods often have defects such as low encryption strength and vulnerability to attacks, which cannot meet the growing data security needs. Therefore, it is necessary to propose a solution to this technical problem. Summary of the invention

[0003] 1. Technical issues to be solved

[0004] In view of the deficiencies in the prior art, the present invention provides a storage device encryption method, system and medium, which improve the security and reliability of data through multi-level encryption technology.

[0005] (II) Technical solution

[0006] To achieve the above object, the present invention provides the following technical solution: a storage device encryption method, comprising the following steps:

[0007] Step 1: Get the storage request sent by the client and select the corresponding encryption algorithm according to the data type and encryption level in the storage request;

[0008] Step 2: Perform the first layer of encryption on the data, use the symmetric encryption algorithm to encrypt the data and generate ciphertext;

[0009] Step 3: Control the output end of the telescopic device to move the storage hard disk, so that the storage hard disk leaves the hard disk interface device, and directly disconnects the data from the computer;

[0010] Step 4: Use an encryption algorithm to encrypt the DLC drive control program for controlling the telescopic device to generate a drive ciphertext;

[0011] Step 5: Use an asymmetric encryption algorithm to encrypt the driver ciphertext to generate the second layer of ciphertext;

[0012] Step 6: The second-layer ciphertext is stored in a storage device of the computer, and disguised as a traditional DLC drive control program by using a disguiser, which is used to normally drive the program instructions of the DLC device;

[0013] Step 7: Read the second layer ciphertext disguised as program instructions from the storage device as needed, and perform reverse decryption operations. First, use an asymmetric decryption algorithm to decrypt the second layer ciphertext to obtain the drive ciphertext, and then use the encryption algorithm to decrypt the drive ciphertext, so as to control the output end of the telescopic device to move the storage hard disk and insert it into the hard disk interface. The computer obtains the storage hard disk data, and then uses the symmetric encryption algorithm to decrypt the storage hard disk ciphertext to obtain the data.

[0014] The present invention also provides a storage device encryption system, including a data encryption module, a disguiser module, a DLC module, a telescopic device, a hard disk interface, an encryption algorithm selection module and a data storage module, wherein the data encryption module is responsible for performing data encryption and decryption operations, the encryption algorithm selection module selects a corresponding encryption algorithm according to the data type and the encryption level, the data storage module is responsible for storing ciphertext in the storage device and reading the ciphertext, the DLC module is used to run program instructions to drive the DLC device, and the disguiser module is used to disguise the second layer of ciphertext into a program instruction to drive the DLC device.

[0015] The present invention also provides a storage device encryption medium, including a control device, a telescopic device, a storage hard disk and a hard disk interface, wherein the storage hard disk is installed at the output end of the telescopic device, the storage hard disk is aligned with the hard disk interface, and the control device is used to control the telescopic device.

[0016] Furthermore, the present invention is improved in that the control device implements the storage device encryption method when executed.

[0017] Furthermore, the present invention is improved in that the storage hard disk is a hard disk, a flash disk or an SD card.

[0018] Furthermore, the present invention is improved in that the telescopic device is an electric telescopic rod, a hydraulic rod or a cylinder.

[0019] (III) Beneficial effects

[0020] Compared with the prior art, the present invention provides a storage device encryption method, system and medium, which have the following beneficial effects:

[0021] The storage device encryption method, system and medium improve the security and reliability of data through multi-level encryption technology. At the same time, the corresponding encryption algorithm is selected according to the data type and encryption level to realize a flexible encryption strategy. By using a disguiser to disguise as a traditional DLC drive control program, the program instructions for normally driving the DLC device can make the ciphertext disguised as the traditional DLC drive control program have an excellent camouflage effect, which greatly improves the hiding effect of the ciphertext. By physically making the storage hard disk leave the hard disk interface, the data is directly disconnected from the computer, which can further improve the security and reliability of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 The structure of the present invention is shown in FIG. Figure 1 ;

[0023] Figure 2 The structure of the present invention is shown in FIG. Figure 2 .

[0024] In the figure: 1. telescopic device; 2. storage hard disk; 3. hard disk interface. DETAILED DESCRIPTION

[0025] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0026] See also Figure 1-2 The present invention is a storage device encryption method, comprising the following steps:

[0027] Step 1: Get the storage request sent by the client and select the corresponding encryption algorithm according to the data type and encryption level in the storage request;

[0028] Step 2: Perform the first layer of encryption on the data, use the symmetric encryption algorithm to encrypt the data and generate ciphertext;

[0029] Step 3: Control the output end of the telescopic device 1 to move the storage hard disk 2, so that the storage hard disk 2 leaves the hard disk interface 3, and directly disconnects the data from the computer;

[0030] Step 4: Use an encryption algorithm to encrypt the DLC drive control program that controls the telescopic device 1 to generate a drive ciphertext;

[0031] Step 5: Use an asymmetric encryption algorithm to encrypt the driver ciphertext to generate the second layer of ciphertext;

[0032] Step 6: The second-layer ciphertext is stored in a storage device of the computer, and disguised as a traditional DLC drive control program by using a disguiser, which is used to normally drive the program instructions of the DLC device;

[0033] Step 7: Read the second layer ciphertext disguised as program instructions from the storage device as needed, and perform reverse decryption operations. First, use an asymmetric decryption algorithm to decrypt the second layer ciphertext to obtain the drive ciphertext, and then use the encryption algorithm to decrypt the drive ciphertext, so as to control the output end of the telescopic device 1 to move the storage hard disk 2 and insert it into the hard disk interface 3. The computer obtains the data of the storage hard disk 2, and then uses the symmetric encryption algorithm to decrypt the ciphertext of the storage hard disk 2 to obtain the data.

[0034] The present invention also provides a storage device encryption system, including a data encryption module, a disguiser module, a DLC module, a telescopic device 1, a hard disk interface 3, an encryption algorithm selection module and a data storage module, wherein the data encryption module is responsible for performing data encryption and decryption operations, the encryption algorithm selection module selects a corresponding encryption algorithm according to the data type and the encryption level, the data storage module is responsible for storing ciphertext in the storage device and reading the ciphertext, the DLC module is used to run program instructions to drive the DLC device, and the disguiser module is used to disguise the second layer of ciphertext into a program instruction to drive the DLC device.

[0035] The present invention also provides a storage device encryption medium, including a control device, a telescopic device 1, a storage hard disk 2 and a hard disk interface 3, wherein the storage hard disk 2 is installed at the output end of the telescopic device 1, the storage hard disk 2 is aligned with the hard disk interface 3, and the control device is used to control the telescopic device 1.

[0036] In this solution, the control device implements the storage device encryption method when executed.

[0037] In this solution, the storage hard disk 2 is a hard disk, a flash disk or an SD card.

[0038] In this solution, the telescopic device 1 is an electric telescopic rod, a hydraulic rod or a cylinder, which has stable and reliable linear motion, so that the storage hard disk 2 can be reliably inserted into or removed from the hard disk interface 3.

[0039] In this embodiment, a storage request sent by a client is obtained, and a corresponding encryption algorithm is selected according to the data type and encryption level in the storage request, a first layer of encryption is performed on the data, a symmetric encryption algorithm is used to encrypt the data, a ciphertext is generated, the output end of the telescopic device 1 is controlled to move the storage hard disk 2, the storage hard disk 2 leaves the hard disk interface 3, and the data is directly disconnected from the computer, the DLC drive control program for controlling the telescopic device 1 is encrypted using an encryption algorithm to generate a drive ciphertext, the drive ciphertext is encrypted using an asymmetric encryption algorithm to generate a second layer of ciphertext, the second layer of ciphertext is stored in a storage device of the computer, and a disguiser is used to disguise it as a traditional DLC drive control program for normally driving the program instructions of the DLC device, the second layer of ciphertext disguised as a program instruction by the disguiser is read from the storage device as needed, and a reverse decryption operation is performed, firstly the second layer of ciphertext is encrypted using an asymmetric decryption algorithm The ciphertext is decrypted to obtain the driving ciphertext, and then the encryption algorithm is used to decrypt the driving ciphertext, so as to control the output end of the telescopic device 1 to move the storage hard disk 2 and insert it into the hard disk interface 3, the computer obtains the data of the storage hard disk 2, and then uses the symmetric encryption algorithm to decrypt the ciphertext of the storage hard disk 2, so as to obtain the data. Through the multi-level encryption technology, the security and reliability of the data are improved. At the same time, the corresponding encryption algorithm is selected according to the data type and the encryption level, and a flexible encryption strategy is realized. By using a disguiser to disguise as a traditional DLC drive control program, the program instructions for normally driving the DLC device can make the ciphertext disguised as the traditional DLC drive control program have an excellent camouflage effect, which greatly improves the hiding effect of the ciphertext. By physically making the storage hard disk 2 leave the hard disk interface 3, the data is directly disconnected from the computer, which can further improve the security and reliability of the data.

[0040] Example 1: Enterprise-level data protection: A multinational company has a large amount of data involving intellectual property, trade secrets, and personal privacy. It needs to ensure the security of this data to prevent unauthorized access and data leakage.

[0041] Data classification and encryption level setting: Enterprise IT departments classify data into multiple categories based on their importance and set corresponding encryption levels for each category. For example, product design drawings and source code may be set to the highest level, while daily operation reports may be set to the intermediate level. When employees upload data through the internal network, the system automatically identifies the data type and selects the appropriate encryption algorithm for the first layer of symmetric encryption based on the preset encryption level. After the encryption is completed, the telescopic device removes the storage hard disk from the hard disk interface to achieve physical disconnection. The DLC driver control program that controls the telescopic device is encrypted to generate a driver ciphertext, and then asymmetric encryption is used to generate the second layer of ciphertext. The second layer of ciphertext is disguised as a regular DLC driver and stored in the enterprise server. When an authenticated user needs to access the data, the system first extracts the disguised second layer of ciphertext from the server, uses an asymmetric decryption algorithm to restore the driver ciphertext, and then decrypts it to obtain the original DLC driver control program. At this time, the telescopic device reinserts the storage hard disk into the hard disk interface to complete the physical connection of the data. Finally, the system uses a symmetric decryption algorithm to decrypt the data on the storage hard disk for user access.

[0042] It combines symmetric and asymmetric encryption to provide a higher level of data protection. It increases data security by physically disconnecting the data through the telescopic device. It automatically selects the encryption level according to the data type and sensitivity to meet the security requirements of different data. It ensures that only authenticated users can access the data, which enhances the security of the system.

[0043] Example 2: Personal privacy protection. A freelancer needs to protect his personal privacy data, including family photos, financial records, and personal notes.

[0044] The user manually selects data files through a graphical interface and sets different encryption levels for them. For example, family photos can be set to intermediate, while financial records may be set to high. The user uploads the data through a dedicated application, and the application selects the appropriate encryption algorithm based on the set encryption level for the first layer of symmetric encryption. After the encryption is completed, the telescopic device removes the storage hard disk from the hard disk interface to achieve physical disconnection. The DLC driver control program that controls the telescopic device is encrypted to generate a driver ciphertext, and then asymmetric encryption is used to generate a second layer of ciphertext. The second layer of ciphertext is disguised as a regular DLC driver and stored in the user's local storage device or cloud storage. When the user needs to access the data, the application enters a password or biometric authentication through the application, and the application extracts the disguised second layer of ciphertext from the storage device, uses an asymmetric decryption algorithm to restore the driver ciphertext, and then decrypts it to obtain the original DLC driver control program. At this time, the telescopic device reinserts the storage hard disk into the hard disk interface to complete the physical connection of the data. Finally, the application uses a symmetric decryption algorithm to decrypt the data on the storage hard disk for user access.

[0045] The process of data encryption and decryption is simplified through a graphical interface and dedicated applications. Users can set the encryption level of data to meet different security requirements. Supports multiple authentication methods such as passwords and biometrics to improve the security of data access. The physical disconnection of data is achieved through the telescopic device, which increases the security of data.

[0046] Example 3: Data protection of mobile devices. A business person who travels frequently needs to protect important data on his laptop and tablet computer, including work documents, customer information, and personal photos. A small telescopic device suitable for mobile devices, such as a miniature electric telescopic rod, is selected to meet the size requirements of laptops and tablet computers. The user manually selects data files through a dedicated application and sets different encryption levels for them. For example, work documents can be set to intermediate, while customer information may be set to advanced. The user uploads data through the application, and the application selects a suitable encryption algorithm for the first layer of symmetric encryption according to the set encryption level. After the encryption is completed, the telescopic device removes the storage hard disk from the hard disk interface to achieve physical disconnection. The DLC drive control program that controls the telescopic device is encrypted to generate a drive ciphertext, and then asymmetric encryption is used to generate a second layer of ciphertext. The second layer of ciphertext is disguised as a regular DLC driver and stored in the local storage or cloud storage of the mobile device. When the user needs to access the data, the application enters a password or biometric authentication through the application, and the application extracts the disguised second layer of ciphertext from the storage device, uses an asymmetric decryption algorithm to restore the drive ciphertext, and then decrypts to obtain the original DLC drive control program. At this point, the telescopic device reinserts the storage hard disk into the hard disk interface to complete the physical connection of the data. Finally, the application uses a symmetric decryption algorithm to decrypt the data on the storage hard disk for user access.

[0047] The small telescopic device is suitable for various mobile devices and is easy to carry. It combines symmetric encryption and asymmetric encryption to provide efficient encryption and decryption performance. It supports remote control of the telescopic device through applications, ensuring data security even when away from home. It supports multiple authentication methods such as passwords and biometrics, which improves the security of data access.

[0048] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A storage device encryption method, characterized in that: The following steps are involved: Step 1: Get the storage request sent by the client and select the corresponding encryption algorithm according to the data type and encryption level in the storage request; Step 2: Perform the first layer of encryption on the data, use the symmetric encryption algorithm to encrypt the data and generate ciphertext; Step 3: Control the output end of the telescopic device (1) to move the storage hard disk (2), so that the storage hard disk (2) leaves the hard disk interface (3), and directly disconnects the data from the computer; Step 4: using an encryption algorithm to encrypt the DLC drive control program for controlling the telescopic device (1) to generate a drive ciphertext; Step 5: Use an asymmetric encryption algorithm to encrypt the driver ciphertext to generate the second layer of ciphertext; Step 6: The second layer ciphertext is stored in a storage device of the computer, and disguised as a traditional DLC drive control program by using a disguiser, which is used to normally drive the program instructions of the DLC device; Step 7: Read the second layer ciphertext disguised as program instructions from the storage device as needed, and perform a reverse decryption operation. First, use an asymmetric decryption algorithm to decrypt the second layer ciphertext to obtain a drive ciphertext, and then use an encryption algorithm to decrypt the drive ciphertext, thereby controlling the output end of the telescopic device (1) to move the storage hard disk (2) and insert it into the hard disk interface (3). The computer obtains the data of the storage hard disk (2), and then uses a symmetric encryption algorithm to decrypt the ciphertext of the storage hard disk (2) to obtain the data.

2. A storage device encryption system, characterized in that: The invention comprises a data encryption module, a disguiser module, a DLC module, a telescopic device (1), a hard disk interface (3), an encryption algorithm selection module and a data storage module, wherein the data encryption module is responsible for performing data encryption and decryption operations, the encryption algorithm selection module selects a corresponding encryption algorithm according to the data type and the encryption level, the data storage module is responsible for storing ciphertext in a storage device and reading the ciphertext, the DLC module is used for running program instructions to drive the DLC device, and the disguiser module is used for disguising the second layer ciphertext as a program instruction to drive the DLC device.

3. A storage device encryption medium, characterized in that: The invention comprises a control device, a telescopic device (1), a storage hard disk (2) and a hard disk interface (3), wherein the storage hard disk (2) is installed at the output end of the telescopic device (1), the storage hard disk (2) is aligned with the hard disk interface (3), and the control device is used to control the telescopic device (1).

4. A storage device encryption medium according to claim 3, characterized in that: When executed, the control device implements the storage device encryption method as described in claim 1.

5. A storage device encryption medium according to claim 4, characterized in that: The storage hard disk (2) is a hard disk, a flash disk or an SD card.

6. A storage device encryption medium according to claim 5, characterized in that: The telescopic device (1) is an electric telescopic rod, a hydraulic rod or a cylinder.

Images