Encryption hard disk and encryption control system

Abstract

The invention discloses an encrypted hard disk and an encryption control system, and relates to the technical field of encrypted hard disks, and the encrypted hard disk comprises a storage module, an identity verification information input module, a control unit and a data transmission module used for carrying out data transmission with external computing equipment; a management disk and a use disk are arranged in the storage module, and management software or a management software installation package is solidified in the management disk; a central user can open encryption setting and close encryption setting through management software or a management software installation package in the management disk and through the identity verification information input module, so that the state of an encryption area in the use disk is switched between a hidden state and a visible state; in a time period when a central user independently uses and when a public user needs to be borrowed, the data security of an encryption area can be ensured when the central user uses the data conveniently and the public user needs to borrow the data.

Description

Technical Field

[0001] The present invention relates to the technical field of encrypted hard disks, and in particular to an encrypted hard disk and an encrypted control system. Background Art

[0002] For an encrypted hard disk, it mainly has two types of target users. One is the central user who needs to use the encryption function of the encrypted hard disk and has a relatively high requirement for data confidentiality, and the other is the public user who only uses the data usage function of the encrypted hard disk.

[0003] Therefore, an encrypted hard disk usually has a public area and an encrypted area that can be encrypted and protected. The central user can use data in the encrypted area and unlock it with a password (or other unlocking methods) before using the encrypted area to prevent the public user from accessing the confidential data in the encrypted area when using the encrypted hard disk. However, for the central user, the encrypted hard disk is held and used by the central user most of the time, and only borrowed by the public user for a small part of the time.

[0004] During the usage period of the central user, in each connection and use between the encrypted hard disk and the PC device, the encrypted area needs to be unlocked each time. Summary of the Invention

[0005] The present invention aims to provide a technical solution to solve the above problems in order to overcome the above deficiencies.

[0006] To achieve the above object, the present invention provides the following technical solution: An encrypted hard disk includes a storage module, an authentication information input module, a control unit, and a data transmission module for data transmission with an external computing device; a management disk and a usage disk are provided in the storage module, and management software or a management software installation package is solidified in the management disk. The usage disk allocates the capacities of the public area and the encrypted area through the management software or the management software installed on the external computing device based on the management software installation package, and performs encryption setting and decryption setting for the encrypted area. Among them, the encryption setting includes encrypting the authentication information of the central user collected by the authentication information input module; when performing plug-and-play data transmission with an external computing device through the data transmission module: When the encryption setting is enabled and not unlocked, the encrypted area is in a hidden state where it cannot be read; When the encryption setting is enabled and unlocked, the encrypted area is in a visible state where it can be read.

[0007] As a further solution of the present invention: When there is no encryption protection, the public area is in a hidden state where it cannot be read, and the encrypted area is in a visible state where it can be read.

[0008] As a further solution of the present invention: when performing the closing encryption setting after the opening encryption setting, the public area is made in an unreadable hidden state, and the encrypted area is made in a readable visible state.

[0009] As a further solution of the present invention: when configured to input specific information through the authentication information input module, the control unit recognizes the input of a specific instruction, sends an instruction to start the management software to the current external computing device, and receives feedback information of successful opening or non-existence of the management software fed back by the external computing device; when receiving the feedback information of non-existence of the management software, the installation of the management software installation package is started.

[0010] As a further solution of the present invention: the authentication information input module includes a fingerprint input module.

[0011] As a further solution of the present invention: the specific instruction input is generated after collecting correct fingerprints multiple times within a threshold time period through the fingerprint input module.

[0012] As a further solution of the present invention: when performing capacity allocation, it is configured to click and drag a common two-way progress bar in the setting interface to allocate the encrypted disk and the public disk simultaneously.

[0013] As a further solution of the present invention: the two-way progress bar has a first direction and a second direction with opposite directions; the end point of the first direction corresponds to 0 capacity of the public area, and the end point of the second direction corresponds to 0 capacity of the encrypted area; by moving the two-way progress bar along the first aspect or along the second direction, the memory capacities of the public area and the encrypted area are allocated simultaneously.

[0014] As a further solution of the present invention: the ratio of the allocated memory capacity corresponds to the position ratio in the distance travel from the end point of the first direction to the end point of the second direction of the two-way progress bar.

[0015] The present invention also provides the following technical solution: an encryption control system, including the above-mentioned encrypted hard disk and an external computing device cooperating with the encrypted hard disk.

[0016] Compared with the prior art, the beneficial effects of this technical solution are: the central user can perform the opening encryption setting and the closing encryption setting through the management software or the management software installation package in the management disk, and through the authentication information input module, so that the state of the encrypted area in the use disk can be switched between the hidden state and the visible state; so that it is convenient for the central user to use during the period of individual use by the central user and to ensure the data security of the encrypted area when it is lent to the public user.

[0017] The additional aspects and advantages of the present invention will be partially given in the following description, partially will become obvious from the following description, or will be understood through the practice of the present invention. Brief Description of the Drawings

[0018] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0019] Figure 1 is a circuit block diagram of the encrypted hard disk of the present invention; Figure 2 is a schematic diagram of the unlocking interface of the present invention; Figure 3 is a schematic diagram of the management software interface after successful unlocking of the present invention; Figure 4 is a schematic diagram of the interface for closing password protection of the present invention; Figure 5 is a schematic diagram of the interface for capacity allocation of the present invention; Figure 6 is a schematic diagram of the disk area displayed in the display interface of an external computing device after the encrypted hard disk of the present invention is unlocked. Among them, the APP disk in the figure is the management disk, the encrypted disk is the encrypted disk area of the used disk, and the public disk is the public disk area of the used disk; Figure 7 is a schematic diagram of the interface when the management software installation package of the present invention starts to be installed. Detailed Embodiments

[0020] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the drawings in the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, rather than all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present invention.

[0021] Please refer to Figure 1-7 , an encrypted hard disk, including a storage module, an authentication information input module, a control unit, and a data transmission module for data transmission with an external computing device.

[0022] The storage module is provided with a management disk and a used disk, and the management software or the management software installation package is solidified in the management disk.

[0023] The usage disk allocates the capacities of the public area and the encrypted area through the management software or the management software installed on an external computing device based on the management software installation package, and performs encryption enabling settings and encryption disabling settings for the encrypted area. Among them, the encryption enabling settings include encrypting and protecting the authentication information of the central user collected by the authentication information input module.

[0024] When plugging and transmitting data with an external computing device through the data transmission module: when the encryption is enabled and not unlocked, the encrypted area is in an unreadable hidden state, and the encrypted area is hidden in the display interface of the external computing device; when the encryption is enabled and unlocked, the encrypted area is in a readable visible state, and the encrypted area is displayed in the display interface of the external computing device.

[0025] The central user can perform encryption enabling settings and encryption disabling settings through the management software or the management software installation package in the management disk, and through the authentication information input module, so that the state of the encrypted area in the usage disk switches between the hidden state and the visible state. So as to be convenient for the central user to use during the period of individual use and to ensure the security of the encrypted area data when lent to public users.

[0026] In some embodiments, the data transmission module includes data ports such as USB plug-in ports, TYPE-C plug-in ports, etc., so as to be able to plug and transmit data with an external computing device.

[0027] In some embodiments, the external computing device is, for example, a laptop computer, a desktop computer or other terminal devices.

[0028] In some embodiments, after successful data interaction between the encrypted hard disk and the external computing device (such as successful plug-in connection), the central user inputs identity information through the authentication information input module, and after inputting the correct identity information, the encrypted area is switched to a readable visible state.

[0029] In this embodiment, when there is no encryption protection, the public area is in an unreadable hidden state, and the encrypted area is in a readable visible state.

[0030] In some embodiments, when performing encryption disabling settings after encryption enabling settings, the public area is in an unreadable hidden state, and the encrypted area is in a readable visible state.

[0031] When the central user frequently uses the encrypted hard disk alone, the encryption can be disabled, so that there is no need to unlock it during the period of individual use, and the used disk area is protected and restricted to be used in the encrypted area, avoiding the central user using it in the public area.

[0032] When it is necessary to lend it to public users for use, the central user can enable the encryption setting before external connection, so that public users cannot access the data in the encrypted area. And by restricting the use of the disk area in the decrypted protection state, it reduces the confidential data used by the central user when using the encrypted hard disk alone that public users can access in the public area, making data use safer.

[0033] The usage disk performs capacity allocation for the public area and the encrypted area, as well as enabling encryption setting and disabling encryption setting for the encrypted area through the management software or the management software installed on the external computing device based on the management software installation package.

[0034] In this embodiment, it is configured that the usage disk performs capacity allocation for the public area and the encrypted area, as well as enabling encryption setting and disabling encryption setting for the encrypted area through the management software installed on the external computing device based on the management software installation package.

[0035] If it is necessary to perform corresponding capacity allocation (or re - perform capacity allocation) and / or encryption setting on the corresponding external computing device, it can correspondingly install the management software installation package in the management disk on the PC - side device to install the management software on the PC - side device.

[0036] If the capacity allocation and encryption setting of the encrypted hard disk have been set through the management software on an external computing device, when used for other external computing devices, it is usually not necessary to install the management software on the other external computing devices again. That is, the setting data or records of the capacity allocation and encryption setting are retained on the encrypted hard disk. When other external computing devices read the encrypted hard disk, they correspondingly read the already - set capacity allocation and encryption setting.

[0037] In specific cases, when it is necessary to perform capacity allocation setting (such as re - performing capacity allocation setting) and / or encryption setting (such as re - performing encryption setting, such as fingerprint replacement and / or enabling encryption and / or disabling encryption, etc.) on the encrypted hard disk, it is necessary to open the management software on the current external computing device or install the management software through the management software installation package and then open the management software to perform the corresponding settings.

[0038] In this embodiment, when configured to input specific information through the authentication information input module, the control unit identifies the input of specific instructions, sends a management software startup instruction to the current external computing device, and receives the feedback information of successful opening or non - existence of the management software from the external computing device; when receiving the feedback information of non - existence of the management software, it starts the installation of the management software installation package.

[0039] In some embodiments, the authentication information input module includes a fingerprint input module.

[0040] The specific instruction input is generated after the fingerprint input module collects multiple correct fingerprints (matched fingerprints) within a threshold time period. The specific instruction input is to perform a specific fingerprint collection operation through the fingerprint input module to identify and generate the specific instruction input.

[0041] On the one hand, the fingerprint input module of the encrypted hard disk is used for specific specified input, which can effectively reduce the use of the input module, with lower costs and more centralized and intelligent operations. On the other hand, when correct fingerprint information is obtained through the fingerprint input module, corresponding control of the management software is carried out to ensure that the target of using the management software for corresponding settings (such as capacity allocation settings, encryption settings) is the central user, reducing the situation of accidental triggering by public users.

[0042] In this embodiment, the management software is started by clicking on the corresponding software program on an external computing device to start it.

[0043] The installation and startup of the management software installation package is to click on the management program installation package opened on the management disk of the encrypted hard disk through an external computing device to start it.

[0044] In this embodiment, when performing capacity allocation, it is configured to click and drag the common two-way progress bar in the setting interface to allocate the encrypted disk and the public disk simultaneously.

[0045] The two-way progress bar has a first direction and a second direction with opposite directions; the end point of the first direction corresponds to 0 capacity in the public area, and the end point of the second direction corresponds to 0 capacity in the encrypted area; by moving the two-way progress bar along the first aspect or the second direction, the memory capacities of the public area and the encrypted area are allocated simultaneously. For example, when moving along the first direction, the allocated memory capacity in the public area decreases correspondingly, and the allocated memory capacity in the encrypted area increases correspondingly. In some embodiments, the ratio of the allocated memory capacity corresponds to the position ratio in the distance travel from the end point in the first direction to the end point in the second direction of the two-way progress bar.

[0046] For example, if the two-way progress bar is at a distance of 1 / 2L from the end point in the first direction in the distance travel L from the end point in the first direction to the end point in the second direction, the allocated memory capacity in the public area is 1 / 2 of the total allocable capacity, and the allocated memory capacity in the encrypted area is 1 / 2 of the total allocable capacity; if the two-way progress bar is at a distance of 1 / 3L from the end point in the first direction in the distance travel L from the end point in the first direction to the end point in the second direction, the allocated memory capacity in the public area is 1 / 3 of the total allocable capacity, and the allocated memory capacity in the encrypted area is 2 / 3 of the total allocable capacity. It is more convenient and clear to allocate the capacity ratio.

[0047] In this embodiment, the encryption setting further includes character encryption setting. For example, corresponding characters are input through the keyboard of an external computing device so that corresponding characters can be input during the encryption setting or when unlocking.

[0048] In this embodiment, an encryption control system is further proposed, which includes the encrypted hard disk of any of the above embodiments and an external computing device cooperating with the encrypted hard disk, so as to make the use more convenient and intelligent.

[0049] For those skilled in the art, it is obvious that the present invention is not limited to the details of the above exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic characteristics of the present invention. Therefore, from any point of view, the embodiments should be regarded as exemplary and non-limiting. The scope of the present invention is defined by the appended claims rather than the above description. Therefore, all changes falling within the meaning and scope of the equivalent elements of the claims are intended to be embraced by the present invention. Any reference signs in the claims should not be regarded as limiting the claims involved.

Claims

1. An encrypted hard disk, characterized in that: It includes a storage module, an identity authentication information input module, a control unit, and a data transmission module for data transmission with an external computing device; The storage module is provided with a management disk and a use disk. The management disk is solidified with management software or a management software installation package. Using the disk to allocate the capacity of the public area and the encryption area through the management software or the management software installed on the external computing device based on the management software installation package, and to enable and disable the encryption setting of the encryption area, wherein enabling the encryption setting includes encrypting and protecting the identity authentication information of the central user collected by the identity authentication information input module; When performing plug-in data transmission with an external computing device via the data transmission module: When the encryption setting is turned on and unlocked, the encryption area is hidden and cannot be read; After the encryption setting is turned on and unlocked, the encryption area is made visible and readable.

2. The encrypted hard disk according to claim 1, characterized in that: When there is no encryption protection, the public area is placed in an unreadable hidden state, and the encryption area is placed in a readable visible state.

3. The encrypted hard disk according to claim 2, characterized in that: When the encryption setting is turned off after the encryption setting is turned on, the public area is placed in an unreadable hidden state, and the encryption area is placed in a readable visible state.

4. The encrypted hard disk according to any one of claims 1 to 3, characterized in that: When configured to input specific information through the identity authentication information input module, the control unit identifies the specific command input, issues a command to start the management software to the current external computing device, and receives feedback from the external computing device indicating that the opening is successful or that the management software does not exist; When feedback information indicating that the management software does not exist is received, the installation of the management software installation package is started.

5. The encrypted hard disk according to claim 4, characterized in that: The identity authentication information input module includes a fingerprint input module.

6. The encrypted hard disk according to claim 5, characterized in that: The specific instruction input is generated after the fingerprint input module collects multiple correct fingerprints within a threshold time period.

7. The encrypted hard disk according to claim 1 or 2 or 3 or 5 or 6, characterized in that: When allocating capacity, it is configured to click and drag the public bidirectional progress bar in the setting interface to allocate the encrypted disk and the public disk at the same time.

8. The encrypted hard disk according to claim 7, characterized in that: The bidirectional progress bar has a first direction and a second direction in opposite directions; The end point of the first direction corresponds to the 0 capacity of the public area, and the end point of the second direction corresponds to the 0 capacity of the encryption area; by moving the bidirectional progress bar along the first direction or along the second direction, the memory capacity of the public area and the encryption area is allocated at the same time.

9. The encrypted hard disk according to claim 8, characterized in that: The ratio of the allocated memory capacity corresponds to the position ratio of the bidirectional progress bar in the distance travel from the end point of the first direction to the end point of the second direction.

10. An encryption control system, characterized in that: It comprises the encrypted hard disk as described in any one of claims 1 to 9 and an external computing device cooperating with the encrypted hard disk.

Images