A security management and control system and method for storage devices
By locking the hard drive through a security control terminal and an electric lock system, combined with real-time monitoring and emergency destruction of the hard drive by a positioning module, the physical security risks of storage devices are resolved and the security and data protection capabilities of storage devices are improved.
Patent Information
- Application Number
- CN202510942143.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-09
- Publication Date
- 2025-09-23
- Estimated Expiration
- 2045-07-09
AI Technical Summary
Existing storage devices have risks in terms of physical security such as hard disk mis-insertion and theft, and centralized storage devices are prone to data leakage and loss when damaged or illegally accessed.
A security control terminal, communication terminal, positioning module and electric lock system are used to lock the hard drive through the electric lock. The positioning module monitors the device location in real time and destroys the hard drive in an emergency to prevent data leakage.
It effectively prevents the accidental insertion and theft of hard drives, promptly notifies users of device location changes, and destroys hard drives in emergencies, greatly improving the security of storage devices and preventing data leakage.
Smart Images

Figure CN120449217B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of storage technology, and in particular to a security management and control system and method for storage devices. Background Art
[0002] In the field of storage technology, the security of storage devices is of paramount importance. Data stored in centralized storage devices typically includes personal privacy (such as ID numbers and bank accounts), corporate secrets (such as customer data and R&D materials), and so on. If a centralized storage device is damaged, lost, or illegally accessed, it may result in large amounts of data loss, leakage, or even malicious tampering, causing huge losses to individuals, businesses, and institutions. For storage devices, related technologies mainly restrict access at the software level to ensure the security of storage devices. However, storage devices often also pose physical security risks. For example, a hard disk that is reading and writing data may be mistakenly plugged in or out due to an operational error, resulting in the theft of the entire storage device or hard disk. Therefore, how to improve the security of storage devices has become a technical problem that needs to be urgently solved by those skilled in the art. Summary of the Invention
[0003] The present application provides a storage device security management system and method to improve the security of storage devices.
[0004] This application provides a storage device security management and control system, including:
[0005] A security control terminal, a communication terminal, a positioning module, and a first electric lock; the security control terminal is connected to the communication terminal, the positioning module, the first electric lock, and a storage device respectively;
[0006] The communication terminal is used to communicate with the security control terminal and the target terminal;
[0007] The positioning module is used to locate the position of the storage device and send the position of the storage device to the security control terminal;
[0008] The first electric lock is used to lock the hard disk in the storage device;
[0009] The security control terminal is used to control the first electric lock so that the first electric lock locks the hard disk in the storage device; send the location information of the storage device to the target terminal through the communication terminal; when the hard disk destruction conditions are met, increase the voltage provided to the hard disk in the storage device and reverse the positive and negative poles of the voltage provided to the hard disk to destroy the hard disk.
[0010] This application also provides a storage device security management method, including:
[0011] Receiving location information of the storage device located by the positioning module;
[0012] Sending the location information of the storage device to the target terminal via the communication terminal;
[0013] controlling a first electric lock so that the first electric lock locks a hard disk in the storage device;
[0014] When the hard disk destruction conditions are met, the voltage supplied to the hard disk in the storage device is raised, and the positive and negative polarity of the voltage supplied to the hard disk is reversed to destroy the hard disk.
[0015] The present application also provides an electronic device, comprising: a memory for storing a computer program; and a processor for implementing the steps of any of the above-mentioned methods for security management of storage devices when executing the computer program.
[0016] The present application also provides a computer-readable storage medium, in which a computer program is stored, wherein when the computer program is executed by a processor, the steps of any of the above-mentioned methods for security management and control of storage devices are implemented.
[0017] The present application also provides a computer program product, including a computer program, which implements the steps of any of the above-mentioned storage device security management methods when executed by a processor.
[0018] The beneficial effects are as follows: This application physically locks the hard drive through the first electric lock, preventing the hard drive from being accidentally plugged in or removed and stolen. The location of the storage device is located by the positioning module, and the location of the storage device can be sent to the user via the communication terminal, so that the user can be promptly notified when the storage device is moved. In an emergency, the security control terminal can destroy the hard drive to prevent data leakage, thereby greatly improving the security of the storage device. BRIEF DESCRIPTION OF THE DRAWINGS
[0019] In order to more clearly illustrate the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.
[0020] Figure 1 A schematic diagram of a security management and control system for a storage device provided in an embodiment of the present application;
[0021] Figure 2 A schematic diagram of a specific security management and control system provided in an embodiment of the present application;
[0022] Figure 3 A schematic diagram of the workflow of the security management and control system provided in an embodiment of the present application;
[0023] Figure 4 A flowchart of a method for security management and control of a storage device provided in an embodiment of the present application. DETAILED DESCRIPTION
[0024] The following will be combined with the accompanying drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.
[0025] It should be noted that, in the description of this application, the terms "comprises," "includes," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. The terms "first," "second," etc., in this application are used to distinguish similar objects, and are not used to describe a particular order or sequence.
[0026] In order to enable those skilled in the art to better understand the present application, the present application is further described in detail below with reference to the accompanying drawings and specific implementation methods.
[0027] An embodiment of the present application provides a security management and control system for a storage device. The security management and control system is described in detail with reference to a schematic diagram of the security management and control system.
[0028] refer to Figure 1 As shown, the security management and control system of the storage device in this embodiment includes:
[0029] A security control terminal 10, a communication terminal 20, a positioning module 30, and a first electric lock 40; the security control terminal 10 is connected to the communication terminal 20, the positioning module 30, the first electric lock 40, and a storage device respectively;
[0030] The communication terminal 20 is used to communicate with the security control terminal 10 and the target terminal;
[0031] The positioning module 30 is used to locate the location of the storage device and send the location of the storage device to the security control terminal 10;
[0032] The first electric lock 40 is used to lock the hard disk in the storage device;
[0033] The security control terminal 10 is used to control the first electric lock 40 so that the first electric lock 40 locks the hard disk in the storage device; sends the location information of the storage device to the target terminal through the communication terminal 20; when the hard disk destruction conditions are met, raises the voltage provided to the hard disk in the storage device and reverses the positive and negative poles of the voltage provided to the hard disk to destroy the hard disk.
[0034] The security control terminal 10, the communication terminal 20 and the positioning module 30 can be arranged inside the chassis of the storage device. The communication terminal 20 and the positioning module 30 adopt an internal and external dual antenna mode, and the external antenna is covered on the surface of the chassis of the storage device to increase the signal.
[0035] The security control terminal 10 is connected to the communication terminal 20, the positioning module 30, and the first electric lock 40. The security control terminal 10 and the communication terminal 20 can be connected via an RS232 interface. The security control terminal 10 and the positioning module 30 can be connected via an RS232 interface.
[0036] The communication terminal 20 may be a GSM modem. Also known as a text message module or GSM text message terminal, a GSM modem is a device based on the GSM / CDMA mobile communication network that is used to send and receive text messages via AT commands or an API interface. The security control terminal 10 can monitor the status of the storage device and, based on user configuration, control the GSM modem by sending AT commands via a serial communication interface. The GSM modem can transmit storage device status information to a target terminal, such as a designated user's mobile phone. Furthermore, the target terminal can send commands to the GSM modem according to specific command rules. The GSM modem then transmits the commands to the security control terminal 10 via the serial communication interface, and the security control terminal 10 then executes the corresponding actions based on the commands.
[0037] The user can send instructions to the communication terminal 20 to make the security control terminal 10 perform corresponding actions, such as hardware unlocking, hard disk power off, etc., to achieve the purpose of protecting data security.
[0038] The positioning module 30 can be a Beidou positioning module. The Beidou positioning module is connected to the security control terminal 10 and communicates with the security control terminal 10. The security control terminal 10 sends instructions to the Beidou positioning module via a serial communication interface and receives the location information of the storage device returned by the Beidou positioning module. When the location information changes and reaches a set threshold, the security control terminal 10 sends an AT command via the serial communication interface to control the SMS modem, which then sends the location information to the user's mobile phone. The user sends instructions to the SMS modem via mobile phone text messages according to specific instruction rules. The SMS modem sends the instructions to the security control terminal 10 via the serial communication interface, and the security control terminal 10 performs the corresponding actions according to the instructions.
[0039] The first electric lock 40 is used to lock the hard drive, preventing unauthorized removal or theft. This lock primarily locks the hard drive by locking the hard drive tray. The mechanical spring in the first electric lock 40 remains in its normal (uncompressed) state, releasing the latch and locking the hard drive tray. This lock (without power) requires no power. When the coil in the first electric lock 40 is energized, the generated magnetic force retracts the latch, allowing the hard drive tray to move freely, unlocking the hard drive tray. Figure 2 The hard disk electric lock shown in FIG is the first electric lock 40 .
[0040] The security control terminal 10 has a hard drive destruction function. Under normal circumstances, the hard drives are powered by the PSU (Power Supply Unit)'s P12V voltage, which is then distributed through the security control terminal 10 to each hard drive. In an emergency requiring hard drive destruction, the security control terminal 10 uses a built-in boost module to boost the supply voltage to 24V, flipping the polarity to -24V, and then outputs this voltage to the hard drive. When the hard drive receives -24V, the abnormal power supply damages the hard drive circuit board, effectively destroying the hard drive.
[0041] The user can send a command to the communication terminal 20, which in turn causes the security control terminal 10 to execute the hard drive destruction operation. When the security control terminal 10 receives a hard drive destruction task, the user is required to send a confirmation instruction to confirm whether to destroy the hard drive. If the security control terminal 10 receives the confirmation instruction within the specified time, the hard drive destruction will be carried out.
[0042] In some embodiments, the security control terminal 10 is further configured to communicate with a controller in a storage device and execute corresponding actions according to instructions issued by the controller.
[0043] refer to Figure 2 As shown, the security control terminal 10 can connect to a controller in the storage device via an IIC (Inter-Integrated Circuit) bus. The controller can be a Baseboard Management Controller (BMC). The security control terminal 10 communicates with the storage device's BMC, and the BMC can issue instructions to the security control terminal 10, causing it to perform corresponding operations. For example, the BMC can issue instructions to the security control terminal 10 to control the first electric lock 40 to unlock when powered on and lock when powered off.
[0044] In some embodiments, the security management and control system for storage devices further includes:
[0045] The first limit switch corresponds to the hard disk slot one by one; the first limit switch is used to monitor whether there is a hard disk in the hard disk slot.
[0046] refer to Figure 2 As shown, the first limit switch (i.e. Figure 2 The first limit switch is connected to the safety control terminal 10. The first limit switch is used to monitor the presence of a hard drive in the hard drive slot, that is, to monitor whether the hard drive is in place. A limit switch is a mechanical position monitoring sensor that triggers the switch contacts to generate a signal. When the moving parts of the mechanical device touch the actuator of the limit switch, external force drives the internal contacts to operate: the normally open contact closes, and the circuit is connected. The normally closed contact opens, and the circuit is disconnected. The closing or opening of the normally open contact generates different signals. Based on the signal changes, the safety control terminal 10 can determine whether the hard drive is in place.
[0047] In some embodiments, the security control terminal 10 is used to determine whether there is a hard disk in the corresponding hard disk slot according to the state of the first limit switch; when there is no hard disk in the hard disk slot, the first electric lock 40 corresponding to the hard disk slot is controlled to be powered on and unlocked so that a hard disk can be added to the hard disk slot; after the hard disk is added to the hard disk slot, the first electric lock 40 corresponding to the hard disk slot is controlled to be powered off and locked to lock the added hard disk; when a target instruction sent by the storage device is received, the first electric lock 40 is controlled to be powered on and unlocked; the target instruction is an instruction for instructing the security control terminal 10 to control the first electric lock 40 to unlock; the storage device and the security control terminal 10 communicate via an integrated circuit bus; when the operating object triggers the maintenance mode through the graphical user interface of the storage device, the storage device sends the corresponding instruction to the controller in the storage device, and the controller in the storage device communicates with the security control terminal 10 via the integrated circuit bus and sends the target instruction to the security control terminal 10; in maintenance mode, the security control terminal 10 monitors the status of non-maintenance components, does not monitor the status of maintenance components, and does not lock maintenance components.
[0048] The security control terminal 10 uses the first limit switch to determine whether the hard drive is in place. Under normal power supply conditions, if a hard drive slot is empty (i.e., not in place), the security control terminal 10 controls the first electric lock 40 in the corresponding slot to power on and unlock it, allowing the user to easily add a new hard drive to the slot. If the security control terminal 10 detects that the hard drive is in place, the security control terminal 10 controls the first electric lock 40 in the corresponding hard drive slot to power off, locking the hard drive.
[0049] When a user needs to perform hard disk maintenance, for example, when a hard disk is damaged and needs to be replaced, the user can trigger the maintenance mode of the corresponding hard disk slot through the operation interface of the storage device. At this time, the storage device sends the instruction to the BMC, and the BMC communicates with the security control terminal 10 through the I2C bus. After receiving the corresponding instruction, the security control terminal 10 controls the first electric lock 40 of the corresponding hard disk slot to unlock.
[0050] In maintenance mode, the security control terminal 10 monitors the status of non-maintenance components, but does not monitor the status of maintenance components and does not lock maintenance components. In maintenance mode, users can select components in the storage device for maintenance as needed. The security control terminal 10 does not monitor, issue alarms, or lock the selected maintenance components. However, it continues to monitor, issue alarms, and lock the remaining unselected components, preventing misuse and theft.
[0051] In some embodiments, the security management and control system of the storage device further includes:
[0052] Alarm device, used for issuing alarms.
[0053] The alarm is connected to the security control terminal 10. The security control terminal 10 controls the alarm to sound an alarm. Figure 2 As shown, the alarm can be an audible and visual alarm. The user can pre-configure the alarm mode, and the configured information is transmitted to the security control terminal 10 through the BMC. The security control controls the alarm according to the configuration information.
[0054] In some embodiments, further comprising:
[0055] Second electric lock; used to lock the chassis cover of the storage device.
[0056] The secondary electric lock is used to lock the chassis cover of storage devices, preventing them from being disassembled. The mechanical spring of the secondary electric lock remains in its normal (uncompressed) position, releasing the lock tongue and locking the chassis cover (no power required). When the coil of the secondary electric lock is energized, the magnetic force generated retracts the lock tongue, allowing the chassis cover to move freely and unlock. Figure 2 The middle chassis cover electric lock is the second electric lock.
[0057] In some embodiments, the security control terminal 10 is further used to switch the power supply to the battery backup unit when the power supply unit of the storage device is abnormal; and to switch the power supply to the power supply unit when the power supply unit of the storage device is normal.
[0058] The storage device's complex programmable logic device (CPLD) monitors the PSU's power supply status in real time. When the PSU is functioning properly, the CPLD notifies the security control terminal 10 through the general purpose input / output (GPIO) interface. The security control terminal 10 then switches to the PSU power supply mode, minimizing power consumption in the storage device's battery backup unit (BBU).
[0059] When the PSU power supply is abnormal, such as due to a power outage or damage, the CPLD notifies the security control terminal 10 via GPIO. The security control terminal 10 then switches to the storage device's BBU power supply mode and continues to monitor the storage device's status. At this point, the P12V power supply to the hard drive is canceled, and the hard drive remains locked. If there is no hard drive in the hard drive slot, the security control terminal 10 will cancel power to the corresponding first electric lock 40, thereby achieving energy conservation.
[0060] The power supply unit and battery backup unit (BBU) improve power supply reliability. In the event of a battery power failure, the BBU can be reused to ensure that even in the event of an abnormality (such as a storage device being moved), the user can be notified of the storage device's location information via SMS.
[0061] In some embodiments, further comprising:
[0062] The second limit switch is used to monitor whether the chassis cover of the storage device is in place.
[0063] The second limit switch is used to monitor whether the storage device's chassis cover is in place. The second limit switch is connected to the security control terminal 10. When the chassis cover is in place, the normally open contacts of the second limit switch close. When the chassis cover is not in place, the normally open contacts of the second limit switch open. Closing or opening the normally open contacts of the second limit switch generates different signals. Based on this signal change, the security control terminal 10 can determine whether the storage device's chassis cover is in place.
[0064] In some embodiments, the security management and control system of the storage device further includes:
[0065] The third limit switch is used to monitor whether the battery backup unit is in place;
[0066] The fourth limit switch is used to monitor whether the controller of the storage device is in place.
[0067] The third limit switch is used to monitor the presence of the battery backup unit (BBU). The fourth limit switch is used to monitor the presence of the storage device's controller. The third and fourth limit switches are connected to the security control terminal 10. When the BBU is removed, the third limit switch reports a signal to the security control terminal 10. When the storage device's controller is removed, the fourth limit switch reports a signal to the security control terminal 10.
[0068] In addition, limit switches can be set at other locations on the storage device to monitor the status of components at corresponding locations. For example, limit switches can be set at the locations of the power supply unit, cooling fan, etc. to monitor the status of the power supply unit, cooling fan, etc.
[0069] Users can perform maintenance, alarm, and action settings through the storage device's GUI (Graphical User Interface).
[0070] In addition, in some embodiments, the security control terminal 10 is provided with a network port so that the security control terminal 10 can be configured through the network port.
[0071] The security control terminal 10 is provided with an RJ45 network interface for accessing the IP network. When the storage device encounters an abnormality, such as a link failure or a power outage requiring maintenance, the user can use a computer to perform relevant configuration or maintenance operations over the IP network using the TCP / IP protocol.
[0072] refer to Figure 3 As shown, the workflow of the storage device security management and control system may include:
[0073] The security control terminal 10 determines whether the device is in maintenance mode. If it is, the configured maintenance components (i.e., components within the storage device that require maintenance) enter an unlocked and non-monitored state. The security control terminal 10 then determines whether any abnormalities exist in the location information of non-maintenance components (i.e., components within the storage device that are not undergoing maintenance) or the storage device. If it is not in maintenance mode, the security control terminal 10 determines whether any abnormalities exist in the location information of key components or the storage device. If any abnormalities occur, the terminal takes action according to user-configured requirements or SMS instructions. Action types include audible and visual alarms, hard drive power-off, and hard drive destruction. Before destroying the hard drive, the terminal first sends a SMS notification to the user for confirmation. The terminal then determines whether the user's instructions are received within a specified timeframe. If so, the terminal further confirms whether to destroy the hard drive. If confirmed, the hard drive is destroyed. If no user instructions are received within the specified timeframe, the terminal determines whether the user has configured hard drive destruction. If so, the terminal destroys the hard drive.
[0074] In summary, this application achieves physical locking of the hard drive through a first electric lock, preventing the hard drive from being accidentally plugged in or removed, as well as from being stolen. The location of the storage device is located by a positioning module, and the location of the storage device can be sent to the user via a communication terminal, allowing the user to be promptly notified if the storage device is moved. In an emergency, the security control terminal can destroy the hard drive to prevent data leakage, thereby greatly improving the security of the storage device.
[0075] The embodiment of the present application also provides a method for security management and control of a storage device, the execution subject of the method is a security control terminal in a security management and control system. Figure 4 As shown, the method includes:
[0076] S101: Receive location information of a storage device located by a positioning module;
[0077] S102: Sending the location information of the storage device to the target terminal via the communication terminal;
[0078] S103: Controlling the first electric lock so that the first electric lock locks the hard disk in the storage device;
[0079] S104: When the hard disk destruction condition is met, the voltage provided to the hard disk in the storage device is increased, and the positive and negative polarity of the voltage provided to the hard disk is reversed to destroy the hard disk.
[0080] Based on the above embodiment, as a specific implementation method, the following is also included:
[0081] When the power supply unit of the storage device supplies power abnormally, the battery backup unit is switched to supply power; when the power supply unit of the storage device supplies power normally, the power supply unit is switched to supply power.
[0082] Based on the above embodiment, as a specific implementation method, the following is also included:
[0083] The second electric lock is controlled so that the second electric lock locks the chassis cover of the storage device.
[0084] Based on the above embodiment, as a specific implementation method, the following is also included:
[0085] Control the alarm device to issue an alarm.
[0086] Based on the above embodiment, as a specific implementation method, the following is also included:
[0087] Communicate with the controller in the storage device and perform corresponding actions according to the instructions sent by the controller.
[0088] Based on the above embodiment, as a specific implementation method, the following is also included:
[0089] Whether there is a hard disk in the hard disk slot is determined according to the state of the first limit switch; the first limit switch corresponds to the hard disk slot in a one-to-one manner.
[0090] Based on the above embodiment, as a specific implementation method, the following is also included:
[0091] Whether the chassis cover of the storage device is in place is determined according to the state of the second limit switch.
[0092] Based on the above embodiment, as a specific implementation method, the following is also included:
[0093] and determining whether there is a hard disk in the corresponding hard disk slot according to the state of the first limit switch; when there is no hard disk in the hard disk slot, controlling the first electric lock corresponding to the hard disk slot to be powered on and unlocked so as to add a hard disk to the hard disk slot; after the hard disk is added to the hard disk slot, controlling the first electric lock corresponding to the hard disk slot to be powered off and locked so as to lock the added hard disk; when receiving the target instruction sent by the storage device, controlling the first electric lock to be powered on and unlocked; the target instruction is an instruction for instructing the security control terminal to control the first electric lock to unlock; the storage device and the security control terminal communicate via an integrated circuit bus; when the operating object triggers the maintenance mode through the graphical user interface of the storage device, the storage device sends the corresponding instruction to the controller in the storage device, and the controller in the storage device communicates with the security control terminal via the integrated circuit bus and sends the target instruction to the security control terminal; in the maintenance mode, the security control terminal monitors the status of non-maintenance components, does not monitor the status of maintenance components and does not lock maintenance components.
[0094] For the description of the features in the embodiment corresponding to the method, please refer to the relevant description of the embodiment corresponding to the device, and no further details will be given here.
[0095] The security control method provided by this application uses a first electric lock to physically lock the hard drive, preventing it from being accidentally plugged in or removed, or stolen. The location of the storage device is located by a positioning module, and the location of the storage device is sent to the user via a communication terminal. This allows the user to be notified promptly if the storage device is moved, and in an emergency, the hard drive can be destroyed via a security control terminal to prevent data leakage, thereby greatly improving the security of the storage device.
[0096] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus the necessary general hardware platform, and of course it can also be implemented by hardware, but in many cases the former is a better implementation method.
[0097] An embodiment of the present application further provides a security management and control apparatus for a storage device, comprising:
[0098] A receiving unit, configured to receive location information of the storage device located by the positioning module;
[0099] a sending unit, configured to send the location information of the storage device to a target terminal via a communication terminal;
[0100] a first control unit, configured to control a first electric lock so that the first electric lock locks the hard disk in the storage device;
[0101] The destruction unit is used to raise the voltage provided to the hard disk in the storage device and reverse the positive and negative poles of the voltage provided to the hard disk to destroy the hard disk when the hard disk destruction conditions are met.
[0102] Based on the above embodiment, as a specific implementation method, the following is also included:
[0103] The power supply switching unit is used to switch the power supply from the battery backup unit to the battery backup unit when the power supply of the power supply unit of the storage device is abnormal; and to switch the power supply from the power supply unit to the battery backup unit when the power supply of the power supply of the storage device is normal.
[0104] Based on the above embodiment, as a specific implementation method, the following is also included:
[0105] The second control unit is used to control the second electric lock so that the second electric lock locks the chassis cover of the storage device.
[0106] Based on the above embodiment, as a specific implementation method, the following is also included:
[0107] The third control unit is used to control the alarm device to issue an alarm.
[0108] Based on the above embodiment, as a specific implementation method, the following is also included:
[0109] The communication unit is used to communicate with the controller in the storage device and perform corresponding actions according to the instructions sent by the controller.
[0110] Based on the above embodiment, as a specific implementation method, the following is also included:
[0111] The first judging unit is configured to judge whether there is a hard disk in the hard disk slot according to a state of a first limit switch; the first limit switch corresponds to the hard disk slot in a one-to-one manner.
[0112] Based on the above embodiment, as a specific implementation method, the following is also included:
[0113] The second judging unit is configured to judge whether the chassis cover of the storage device is in place according to the state of the second limit switch.
[0114] Based on the above embodiment, as a specific implementation method, the following is also included:
[0115] an execution unit, configured to determine whether there is a hard disk in the corresponding hard disk slot according to the state of the first limit switch; when there is no hard disk in the hard disk slot, control the first electric lock corresponding to the hard disk slot to be powered on and unlocked so as to add a hard disk to the hard disk slot; after the hard disk is added to the hard disk slot, control the first electric lock corresponding to the hard disk slot to be powered off and locked so as to lock the added hard disk; and when receiving a target instruction sent by the storage device, control the first electric lock to be powered on and unlocked; the target instruction is an instruction for instructing the security control terminal to control the first electric lock to unlock; the storage device and the security control terminal communicate via an integrated circuit bus; when the operating object triggers the maintenance mode through the graphical user interface of the storage device, the storage device sends the corresponding instruction to the controller in the storage device, and the controller in the storage device communicates with the security control terminal via the integrated circuit bus and sends the target instruction to the security control terminal; in the maintenance mode, the security control terminal monitors the status of non-maintenance components, does not monitor the status of maintenance components, and does not lock maintenance components.
[0116] An embodiment of the present application also provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the steps in any of the above-mentioned storage device security management method embodiments.
[0117] An embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored, wherein the computer program is configured to execute the steps of any of the above-mentioned storage device security management method embodiments when running.
[0118] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media that can store computer programs, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk, or an optical disk.
[0119] An embodiment of the present application further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the steps in any of the above-mentioned storage device security management method embodiments are implemented.
[0120] An embodiment of the present application also provides another computer program product, including a non-volatile computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the steps in any of the above-mentioned storage device security management method embodiments.
[0121] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.
[0122] The above is a detailed introduction to the security management and control system and method for a storage device provided by the present application. This article uses specific examples to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method and core idea of the present application. It should be pointed out that for ordinary technicians in this technical field, without departing from the principles of the present application, several improvements and modifications can be made to the present application, and these improvements and modifications also fall within the scope of protection of the present application.
Claims
1. A security management and control system for storage devices, characterized in that: include: Security control terminal, communication terminal, positioning module, first electric lock; The security control terminal is respectively connected to the communication terminal, the positioning module, the first electric lock and the storage device; the security control terminal, the communication terminal and the positioning module are arranged inside the chassis of the storage device; The communication terminal and positioning module adopt a built-in and external dual antenna mode, and the external antenna is covered on the surface of the storage device chassis; The communication terminal is used to communicate with the security control terminal and the target terminal; The positioning module is used to locate the position of the storage device and send the position of the storage device to the security control terminal; The first electric lock is used to lock the hard disk in the storage device; The security control terminal is used to control the first electric lock so that the first electric lock locks the hard disk in the storage device; sending the location information of the storage device to the target terminal through the communication terminal; When the hard drive destruction conditions are met, the voltage supplied to the hard drive in the storage device is increased and the positive and negative polarity of the voltage supplied to the hard drive is reversed to destroy the hard drive. When the security control terminal receives a hard drive destruction task, if the security control terminal receives a confirmation instruction sent by the user within the specified time, the hard drive destruction is carried out. Second electric lock; a chassis cover for locking the storage device; a first limit switch, configured to detect whether a hard disk is present in the hard disk slot; the first limit switch corresponds one-to-one to each hard disk slot; The security control terminal is used to determine whether there is a hard disk in the corresponding hard disk slot according to the state of the first limit switch; when there is no hard disk in the hard disk slot, control the first electric lock corresponding to the hard disk slot to power on and unlock; when a hard disk is added to the hard disk slot, control the first electric lock corresponding to the hard disk slot to power off and lock; when receiving the target instruction sent by the storage device, control the first electric lock to power on and unlock; the target instruction is an instruction for instructing the security control terminal to control the first electric lock to unlock; in maintenance mode, the security control terminal monitors the status of non-maintenance components, does not monitor the status of maintenance components and does not lock maintenance components.
2. The security management and control system for storage devices according to claim 1, characterized in that: The security control terminal is also used to switch the power supply to the battery backup unit when the power supply unit of the storage device is abnormal; and to switch the power supply to the power supply unit when the power supply unit of the storage device is normal.
3. The security management and control system for storage devices according to claim 1, characterized in that: Also includes: The second limit switch is used to monitor whether the chassis cover of the storage device is in place.
4. The security management and control system for storage devices according to claim 1, characterized in that: The security control terminal is further configured to communicate with the controller in the storage device and execute corresponding actions according to instructions sent by the controller.
5. The security management and control system for storage devices according to claim 1, characterized in that: Also includes: Alarm device, used for issuing alarms.
6. The storage device security management and control system according to claim 1, characterized in that: The security control terminal is provided with a network port so that the security control terminal can be configured through the network port.
7. A method for security management of a storage device, characterized in that: The security management and control system for the storage device according to claim 1 comprises: Receiving location information of the storage device located by the positioning module; Sending the location information of the storage device to the target terminal via the communication terminal; controlling a first electric lock so that the first electric lock locks a hard disk in the storage device; When the hard disk destruction conditions are met, the voltage supplied to the hard disk in the storage device is raised, and the positive and negative polarity of the voltage supplied to the hard disk is reversed to destroy the hard disk.
Citation Information
Patent Citations
Hard disk data destruction method, system, medium and equipment
CN115794684A
Server hard disk bracket control method and device, storage medium and electronic device
CN116150822A