Soft destroying key for different security levels

Abstract

The invention belongs to the technical field of information security, and particularly relates to a soft destroying key oriented to different security levels, which is used for executing soft destroying key programs corresponding to data security levels aiming at data of different security levels. The soft key destroying program comprises mapping table destroying, key destroying, full-disk erasing and full-disk overwriting; the data of the storage module can be destroyed and erased under different application scenes, it is ensured that key destroying operation can be effectively executed under different security levels, the risk of data leakage is solved, meanwhile, the key destroying operation can be executed under the condition that the storage medium is not damaged, and therefore the storage cost of a user can be reduced.

Description

Technical Field

[0001] The invention belongs to the field of information security technology, and in particular relates to a soft-destruction key for different security levels. Background Art

[0002] With the rapid development of information technology, the security issues of electronic devices have become increasingly prominent. The traditional hard key destruction method has the problems of high cost and inconvenience in carrying, while the soft key destruction technology achieves the destruction of the device through software instructions. However, the existing soft key destruction technology still has deficiencies in flexibility. Therefore, a soft key destruction implementation method for soft keys of different security levels is needed to improve the flexibility and security of the device. Summary of the invention

[0003] In view of this, the present invention provides a soft key destruction for different security levels, which can achieve the destruction and erasure of data in the storage module in different application scenarios, ensure that the key destruction operation can be effectively performed under different security levels, and solve the risk of data leakage. At the same time, it can be performed without damaging the storage medium, so the storage cost of the user can be reduced.

[0004] The technical solution of the present invention:

[0005] A soft-destruction key for different security levels, wherein the soft-destruction key executes a soft-destruction key program corresponding to the data security level for data of different security levels;

[0006] The soft key destruction procedure includes destroying the mapping table, destroying the key, erasing the entire disk, and overwriting the entire disk;

[0007] The activation methods of the soft key destruction program include command destruction and automatic destruction;

[0008] The soft key destruction program is provided with status indications, which include: normal status, destruction in progress status and destruction end status.

[0009] Furthermore, the soft-destruction key includes a storage module, and the storage module burns the soft-destruction key program.

[0010] Furthermore, the command destruction is specifically as follows: the storage module executes data destruction of different security levels according to different instructions issued by the front-end Host / CPU;

[0011] The automatic destruction is specifically as follows: the storage module determines whether to execute data destruction by judging the level of a level signal sent by the front-end Host / CPU.

[0012] Furthermore, the soft-destruction key is provided with a working indicator light. When the soft-destruction key is in a normal state, the destruction state display pin outputs a low-level signal and the indicator light is always off.

[0013] When the destruction starts, the destruction status display pin outputs a 1Hz level jump signal and the indicator light flashes;

[0014] When the destruction is completed, the destruction status display pin outputs a high level signal and the indicator light is always on.

[0015] Furthermore, the soft-destruction key is used to perform full disk erasure and overwriting of all non-volatile Flash memories on the storage module.

[0016] Furthermore, the destruction mapping table is used to clear all logical mapping addresses.

[0017] Furthermore, the destruction key is used to:

[0018] When data encryption is enabled, the data received by the PCIe interface is encrypted by the main control hardware encryption module, and then the encrypted data is stored in the flash memory, and a key is generated. The soft key destruction program is used to delete the generated key.

[0019] Furthermore, full disk wipe is used to:

[0020] By applying high voltage to the Flash memory, the electrons in the storage cells of the Flash memory are released, so that the state of all its storage cells is 1.

[0021] Furthermore, full disk overwrite is used to write non-confidential data to a hard disk that previously stored sensitive data, specifically:

[0022] Overwriting hard disks storing sensitive data with meaningless data.

[0023] Furthermore, the execution of the soft destruction program includes the following steps:

[0024] S101: Solidify the corresponding soft key destruction program according to different requirements of the user for data security level;

[0025] S102: The hardware circuit supports the real-time detection of the destroy command and the destroy pin level. When the destroy command or the destroy pin is detected to be valid, it is further determined whether the destroy command is received or the destroy pin is pulled low.

[0026] S103: If it is determined that the destroy pin level is pulled low, then continue to determine how long the destroy pin level is at a low level. If the low level duration is less than 1s, it is determined as an error operation, and return to S102 to continue detecting the destroy command and the destroy pin level; if the low level duration is greater than or equal to 1s, it is determined to be executing the destroy program and entering the destroy process; if it is determined to be a destroy command, directly enter the destroy process.

[0027] S104: After entering the destruction program, the soft key destruction program solidified in S101 is automatically executed, and the current execution state of the soft key destruction program is determined according to the destruction state indication signal.

[0028] Beneficial effects of the present invention:

[0029] 1. The circuit is simple and reliable;

[0030] 2. According to different application scenarios, the destruction activation methods can be divided into two different types:

[0031] 3. Data destruction with different security levels can be performed. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0033] Figure 1 The present invention is a schematic diagram of a soft key destruction implementation process for different security levels. DETAILED DESCRIPTION

[0034] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0035] The following describes the embodiments of the present disclosure through specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.

[0036] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein can be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein can be implemented independently of any other aspect, and two or more of these aspects can be combined in various ways. For example, any number of aspects described herein can be used to implement the device and / or practice the method. In addition, other structures and / or functionalities other than one or more of the aspects described herein can be used to implement this device and / or practice this method.

[0037] It should also be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present disclosure. The illustrations only show components related to the present disclosure rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0038] Additionally, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects described may be practiced without these specific details.

[0039] In one embodiment of the present invention, a soft key destruction method for different security levels is proposed. Figure 1 , the soft-destruction key executes the soft-destruction key program corresponding to the data security level for data of different security levels;

[0040] The soft key destruction procedure includes destroying the mapping table, destroying the key, erasing the entire disk, and overwriting the entire disk;

[0041] The activation methods of the soft key destruction program include command destruction and automatic destruction;

[0042] The soft key destruction program is provided with status indications, which include: normal status, destruction in progress status and destruction end status.

[0043] In this embodiment, the soft-destruction key includes a storage module, and the storage module is burned with the soft-destruction key program.

[0044] In this embodiment, the command destruction is specifically: the storage module executes data destruction of different security levels according to different instructions issued by the front-end Host / CPU;

[0045] The automatic destruction is specifically as follows: the storage module determines whether to execute data destruction by judging the level of a level signal sent by the front-end Host / CPU.

[0046] In this embodiment, the soft-destruction key is provided with a working indicator light. When the soft-destruction key is in a normal state, the destruction state display pin outputs a low-level signal and the indicator light is always off.

[0047] When the destruction starts, the destruction status display pin outputs a 1Hz level jump signal and the indicator light flashes;

[0048] When the destruction is completed, the destruction status display pin outputs a high level signal and the indicator light is always on.

[0049] In this embodiment, the soft-destruction key is used to perform full disk erasure and overwriting of all non-volatile Flash memories on the storage module.

[0050] In this embodiment, the destruction mapping table is used to clear all logical mapping addresses.

[0051] In this embodiment, the destruction key is used to:

[0052] When data encryption is enabled, the data received by the PCIe interface is encrypted by the main control hardware encryption module, and then the encrypted data is stored in the flash memory, and a key is generated. The soft key destruction program is used to delete the generated key.

[0053] In this embodiment, full disk erase is used to:

[0054] By applying high voltage to the Flash memory, the electrons in the storage cells of the Flash memory are released, so that the state of all its storage cells is 1.

[0055] In this embodiment, the full disk overwrite is used to write non-confidential data into the hard disk that previously stored sensitive data, specifically:

[0056] Overwriting hard disks storing sensitive data with meaningless data.

[0057] In this embodiment, the execution of the soft destroy program includes the following steps:

[0058] S101: Solidify the corresponding soft key destruction program according to different requirements of the user for data security level;

[0059] S102: The hardware circuit supports the real-time detection of the destroy command and the destroy pin level. When the destroy command or the destroy pin is detected to be valid, it is further determined whether the destroy command is received or the destroy pin is pulled low.

[0060] S103: If it is determined that the destroy pin level is pulled low, then continue to determine how long the destroy pin level is at a low level. If the low level duration is less than 1s, it is determined as an error operation, and return to S102 to continue detecting the destroy command and the destroy pin level; if the low level duration is greater than or equal to 1s, it is determined to be executing the destroy program and entering the destroy process; if it is determined to be a destroy command, directly enter the destroy process.

[0061] S104: After entering the destruction program, the soft key destruction program solidified in S101 is automatically executed, and the current execution state of the soft key destruction program is determined according to the destruction state indication signal.

[0062] Data destruction generally occurs in an emergency to destroy the data in the storage module. According to different application scenarios, the destruction activation methods in this embodiment can be divided into the following two types:

[0063] a. Command destruction: Data destruction of different security levels can be executed according to different instructions issued by the front-end Host / CPU;

[0064] b. Automatic destruction: The storage module only needs a level signal, and the data is destroyed by judging the level of the signal;

[0065] 2. Destruction status indication signal:

[0066] The destruction status indicator signal is divided into three states: normal state, destruction in progress state and destruction end state:

[0067] a. Under normal conditions, the destruction status display pin outputs a low-level signal and the indicator light is always off.

[0068] b. After the destruction begins, the destruction status display pin outputs a 1Hz level jump signal and the indicator light flashes;

[0069] c. After the destruction is completed, the destruction status display pin outputs a high-level signal and the indicator light is always on.

[0070] 3. Destruction plan

[0071] Soft destruction technology is mainly based on the full erasure and overwriting of all non-volatile Flash memory on the storage module, so the soft destruction time is positively correlated with the capacity of the storage module. Taking into account the destruction time and confidentiality requirements provided by the user, the destruction levels can be divided into the following plans:

[0072] a. Destroy the mapping table; clear all logical mapping addresses. After the address is cleared, the data at the corresponding physical address cannot be found. Advantages: short erasing time, which can be completed within 100 milliseconds; but only the mapping table is erased, and the data on the flash block is not erased. The risk of data recovery is high and the security level is low;

[0073] b. Destroy the encryption key: After data encryption is turned on, the data received by the PCIe interface is encrypted by the main control hardware encryption module, and then the encrypted data is stored in the flash memory and a key is generated. The program deletes its encryption key, making the encrypted data unreadable. The erasure time is short and can be completed within 100 milliseconds, but only the encryption key is erased, and the risk of cracking the key and recovering the data is high, and the security level is low;

[0074] c. Full disk erase: Erasing flash memory block data is done by applying high voltage inside the block to release the electrons in the storage cells in the flash memory, making the state of all storage cells "1", thereby achieving the purpose of data destruction. The possibility of data recovery is low and the security level is high;

[0075] d. Complete disk overwrite. Data overwrite is to write non-confidential data into the hard disk that previously stored sensitive data. The data on the hard disk is stored in the form of binary "1" and "0". By using pre-defined meaningless and irregular information to repeatedly overwrite the data originally stored on the hard disk, it is impossible to know whether the original data is "1" or "0", thus achieving the purpose of hard disk data erasure. Data overwrite can be divided into overwrite 0, overwrite 1 and random overwrite. Advantages: low possibility of data recovery and high security level;

[0076] The specific implementation method of soft key destruction in this embodiment for different security levels is as follows:

[0077] 1. First, according to the different requirements of the user for the data security level, the corresponding soft key destruction program is solidified. For example, for electronic disks with high security requirements, the full disk erasure program is solidified.

[0078] 2. The hardware circuit supports real-time detection of the destroy command and the destroy pin level. When the destroy command is detected or the destroy pin is valid, it further determines whether the destroy command is received or the destroy pin is pulled low.

[0079] 3. If it is judged that the destroy pin level is pulled low, it is necessary to determine the length of time the destroy pin level is at a low level. If it is less than 1s, it is judged as an error operation, and return to the previous step to continue to detect the destroy command and the destroy pin level. If it is greater than or equal to 1s, it is judged to execute the destroy program and enter the destroy process. If it is judged to be a destroy command, it will directly enter the destroy process.

[0080] 4. After entering the destruction program, the first step of the solidified soft key destruction program is automatically executed, and the execution progress of the current soft key destruction program is determined according to the destruction status indication signal. The above is only a specific implementation of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any changes or replacements that can be easily thought of by any technician familiar with the technical field within the technical scope disclosed in the present disclosure should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure shall be based on the protection scope of the claims.

Claims

1. A soft key destruction system for different security levels, characterized in that : The soft-destruction key executes the soft-destruction key program corresponding to the data security level for data of different security levels; The soft key destruction procedure includes destroying the mapping table, destroying the key, erasing the entire disk, and overwriting the entire disk; The activation methods of the soft key destruction program include command destruction and automatic destruction; The soft key destruction program is provided with status indications, which include: normal status, destruction in progress status and destruction end status.

2. The soft-destruction key for different security levels according to claim 1, characterized in that: The soft-destruct key includes a storage module, and the storage module is burned with the soft-destruct key program.

3. The soft key destruction method for different security levels according to claim 2, characterized in that: The command destruction is specifically as follows: the storage module executes data destruction of different security levels according to different instructions issued by the front-end Host / CPU; The automatic destruction is specifically as follows: the storage module determines whether to execute data destruction by judging the level of a level signal sent by the front-end Host / CPU.

4. The soft key destruction method for different security levels according to claim 3, characterized in that: The soft-destruction key is provided with a working indicator light. When the soft-destruction key is in a normal state, the destruction state display pin outputs a low-level signal and the indicator light is always off. When the destruction starts, the destruction status display pin outputs a 1Hz level jump signal and the indicator light flashes; When the destruction is completed, the destruction status display pin outputs a high level signal and the indicator light is always on.

5. The soft key destruction method for different security levels according to claim 4, characterized in that: The soft-destruction key is used to perform full disk erasure and overwriting of all non-volatile Flash memories on the storage module.

6. The soft key destruction method for different security levels according to claim 5, characterized in that: The destruction mapping table is used to clear all logical mapping addresses.

7. The soft key destruction method for different security levels according to claim 6, characterized in that: The destruction key is used to: When data encryption is enabled, the data received by the PCIe interface is encrypted by the main control hardware encryption module, and then the encrypted data is stored in the flash memory and a key is generated; The soft key destruction program is used to delete the generated key.

8. The soft key destruction method for different security levels according to claim 7, characterized in that: Full disk wipe is used for: By applying high voltage to the Flash memory, the electrons in the storage cells of the Flash memory are released, so that the state of all its storage cells is 1.

9. The soft key destruction method for different security levels according to claim 8, characterized in that: Full disk overwrite is used to write non-confidential data to a hard disk that previously stored sensitive data. Specifically: Overwriting hard disks storing sensitive data with meaningless data.

10. The soft-destruction key for different security levels according to claim 9, characterized in that: The execution of the soft destroy program includes the following steps: S101: Solidify the corresponding soft key destruction program according to different requirements of the user for data security level; S102: The hardware circuit supports the real-time detection of the destroy command and the destroy pin level. When the destroy command or the destroy pin is detected to be valid, it is further determined whether the destroy command is received or the destroy pin is pulled low. S103: If it is determined that the destroy pin level is pulled low, then continue to determine the duration of the destroy pin level being at a low level. If the low level duration is less than 1s, it is determined to be an erroneous operation, and return to S102 to continue detecting the destroy command and the destroy pin level; if the low level duration is greater than or equal to 1s, it is determined to be executing the destroy procedure and enter the destroy process; if it is determined to be a destroy command, directly enter the destroy process; S104: After entering the destruction program, the soft key destruction program solidified in S101 is automatically executed, and the current execution state of the soft key destruction program is determined according to the destruction state indication signal.

Images