Non-inductive implementation method for encrypted hidden partition based on bridging chip

Abstract

The invention discloses a non-inductive implementation method of an encrypted hidden partition based on a bridging chip, and relates to the field of information security storage. The method comprises the following steps: A) a computer judges the state of the hard disk after being connected with the hard disk through a bridging chip, executes a step B) if the state is an initial state, and executes a step C) if the state is a running state; b) an initial state control process: a pseudo disk module is arranged in the bridging chip and is used for prompting a user to input configuration information such as a hidden partition password; the bridge chip obtains hidden partition configuration information input by a user through the pseudo disk module; and C) a running state control process: the bridge chip returns the public partition to the computer and checks a USB transport protocol version and write-in data accessed to the computer, so as to judge whether to switch the public partition to the hidden partition. According to the method, management, starting and encryption of the hidden partition can be realized under the condition that a client support program does not need to be installed.

Description

Technical Field

[0001] The present invention relates to the field of information security storage, and in particular to a method for realizing a bridge chip-based encrypted hidden partition without any sense of interference. Background Art

[0002] Hard drives are widely used around the world, and more and more sensitive data is stored on them. However, hard drives pose significant security risks in the field of information security storage. Therefore, protecting the confidentiality of sensitive data on hard drives is crucial for every user.

[0003] Creating an encrypted hidden partition on a hard drive can prevent the leakage of private data within the hard drive. However, most existing hidden partition implementations require the installation of a client support program to decrypt and display the contents of the hidden partition. "A Hard Drive Partition Hiding Method, Device, and Hard Drive" (Application Publication No. CN 108009447 A) requires additional programs to configure the first and second partition tables to display or hide specified partitions, and does not support encryption of hidden partition data. "A Method for Controlling SSD Partition Hiding Based on a SATA Encryption Bridge" (Application Publication No. CN 115688146 A) requires the use of a "SATA Bridge Security Operation Tool" to configure and read and write hidden partitions.

[0004] However, running other programs on a secure computer can be a security risk, as it can be easily cracked by unauthorized users using Trojans or vulnerabilities, thereby leaking data from hidden partitions. Moreover, the hidden partition management program on the computer itself may also reveal the existence of hidden partitions. Summary of the Invention

[0005] In order to overcome the shortcomings of existing hidden partition implementation solutions, the present invention provides a bridge chip-based encrypted hidden partition implementation method, which can achieve hidden partition management, activation and encryption without the need to install client support programs.

[0006] In order to achieve the above-mentioned purpose of the invention, the technical solution of the present invention includes the following contents.

[0007] A method for realizing a bridge chip-based encrypted hidden partition without any sense of touch is applied to a computer. The method comprises:

[0008] Obtaining the hard disk system status recorded in the bridge chip, where the hard disk system status includes: an initial state or a running state;

[0009] When the hard disk system state is in the initial state, based on the configuration information of the hidden partition input and saved by the user, a write instruction and write data are generated and sent to the bridge chip, so that the bridge chip determines whether the user enables or disables the hidden partition mode based on the write data, and when the user enables the hidden partition mode, the bridge chip performs partitioning of the public partition and the hidden partition in the hard disk and generates a hidden partition encryption key based on the write data, and then changes the hard disk system state from the initial state to the running state; wherein the configuration information of the hidden partition includes: hidden partition space size, hidden partition password, and reset password;

[0010] When the hard disk system is in the running state, it enters the public partition by default, generates and sends a data write instruction to the bridge chip, so that the bridge chip determines whether to switch the public partition to a hidden partition based on the USB transmission protocol version of the connected computer and the instruction analysis result of the data write instruction.

[0011] Furthermore, the step of generating the write instruction and the write data based on the configuration information of the hidden partition input and saved by the user includes:

[0012] Sending a series of instructions to the bridge chip, which returns the pseudo-disk data to the computer based on the instructions;

[0013] A virtual pseudo file system is formed based on the pseudo disk data; wherein the pseudo file system includes a virtual initial state pseudo file;

[0014] After receiving the configuration information of the hidden partition input by the user and storing the configuration information of the hidden partition into the initial state pseudo file, a write instruction and a write data are generated.

[0015] Furthermore, in the case where the user disables the hidden partition mode, the method further includes:

[0016] The bridge chip extracts the reset password from the write data;

[0017] The bridge chip calculates a secondary hash value of the reset password and stores the secondary hash value of the reset password in a non-volatile storage unit of the bridge chip;

[0018] Change the hard disk system status from initial state to running state.

[0019] Furthermore, partitioning the hard disk into a public partition and a hidden partition based on the write data and generating a hidden partition encryption key includes:

[0020] The bridge chip extracts the hidden partition space size, hidden partition password and reset password from the written data;

[0021] The bridge chip calculates the size of the public partition space and the hidden partition logical offset address according to the size of the hidden partition space;

[0022] The bridge chip uses the primary hash value of the hidden partition password as an encryption key to encrypt the hidden partition space size and the hidden partition logical offset address, and stores the plaintext of the public partition space size, the ciphertext of the hidden partition space size, the ciphertext of the hidden partition logical offset address, the secondary hash value of the reset password, and the secondary hash value of the hidden partition password in the non-volatile storage unit of the bridge chip.

[0023] Furthermore, the computer obtains the size of the public partition space through the following steps:

[0024] A hard disk capacity identification instruction is sent to the hard disk, so that the bridge chip intercepts the hard disk capacity identification instruction and then returns the public partition space size to the computer.

[0025] Furthermore, the instruction analysis result includes: the length and data content of the data to be written;

[0026] The bridge chip determines whether to switch the public partition to a hidden partition based on the USB transmission protocol version of the connected computer and the instruction analysis result of the data write instruction, including:

[0027] Step 1: Determine the USB transmission protocol version of the bridge chip connected to the computer: if the USB transmission protocol version is USB 3.0, do not switch the public partition to a hidden partition; if the USB transmission protocol version is USB 2.0, execute step 2;

[0028] Step 2: The bridge chip determines whether the length of the data to be written is greater than a set threshold: if the length of the data to be written is greater than the set threshold, the public partition is not switched to the hidden partition; if the length of the data to be written is not greater than the set threshold, step 3 is executed;

[0029] Step 3: The bridge chip matches the first n bytes of the data to be written with the locator byte by byte. If the match is unsuccessful, the public partition is not switched to the hidden partition. If the match is successful, step 4 is executed. Where n is the number of bytes of the locator.

[0030] Step 4: The bridge chip calculates the secondary hash value of the data between the locator and the terminator, and compares it with the secondary hash value of the hidden partition password and the secondary hash value of the reset password stored in the non-volatile storage unit respectively: if the comparison result is the hidden partition password, the public partition is switched to the hidden partition; if the comparison result is the reset password, the hard disk status is set to the initial status; otherwise, the public partition is not switched to the hidden partition.

[0031] Furthermore, switching the public partition to a hidden partition includes:

[0032] The bridge chip calculates a hash value of the hidden partition password and uses it as the key to decrypt the ciphertext of the hidden partition space size and the ciphertext of the hidden partition logical offset address;

[0033] The bridge chip initiates a command to reconnect the hard drive to update the USB transmission protocol connected to the computer;

[0034] The bridge chip intercepts the instruction sent by the computer to identify the hard disk capacity and returns the hidden partition space size to the computer;

[0035] The bridge chip intercepts all read and write instructions sent by the computer and redirects the logical block address corresponding to the read and write instructions to the hidden partition according to the hidden partition logical offset address;

[0036] The bridge chip uses the one-time Hash value of the hidden partition password as a key to encrypt and decrypt the read and written data, so as to realize the reading and writing of data on the hidden partition.

[0037] Furthermore, the bridge chip initiates an instruction to reconnect the hard disk to update the USB transmission protocol connected to the computer, including:

[0038] After the bridge chip initiates an instruction to reconnect the hard disk, if the user slowly inserts a USB 3.0 data cable into the USB 3.0 port of the computer so that the bridge chip is connected to the computer using the USB 2.0 transmission protocol, the transmission protocol used by the bridge chip to connect to the computer is updated to USB 3.0;

[0039] After the bridge chip initiates the instruction to reconnect the hard disk, if the user directly uses a USB 2.0 data cable to connect the bridge chip to the computer using the USB 2.0 transmission protocol, the transmission protocol used by the bridge chip to connect to the computer is still USB 2.0.

[0040] Furthermore, the method further comprises:

[0041] When the hard disk system is in the running state, an instruction for executing data read and write operations on the public partition is generated and sent to the bridge chip to implement the data read and write operations on the public partition.

[0042] An electronic device comprises: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the method for realizing the invisible implementation of the encrypted hidden partition based on the bridge chip as described in any one of the above claims.

[0043] A computer-readable storage medium having computer program instructions stored thereon, wherein the computer program instructions, when executed by a processor, implement the method for seamlessly implementing an encrypted hidden partition based on a bridge chip as claimed in any one of the above claims.

[0044] A computer program product, when running on a computer device, enables the computer device to execute the method for seamlessly implementing an encrypted hidden partition based on a bridge chip as claimed in any one of the above claims.

[0045] Compared with the prior art, the present invention has at least the following beneficial effects.

[0046] 1. This invention leverages the ability of the bridge chip to intercept, modify, forward, and actively send commands and data, creating a seamless encrypted hidden partition. Users can enable hidden partitions without requiring additional support programs, mitigating the risk of hidden partition exposure and preventing unauthorized access to hidden partition management programs through exploits such as Trojans or vulnerabilities.

[0047] 2. The present invention utilizes a bridge chip to encrypt and decrypt data in the hidden partition. This operation is transparent to the user and the computer, thereby improving security without affecting computer performance.

[0048] 3. The present invention does not depend on the operating system, hard disk type and supporting program. It can conveniently and quickly manage, enable and encrypt hidden partitions on any hard disk in any computer environment. It is plug-and-play and has better compatibility and practicality. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 Schematic diagram of the connection between the computer, bridge chip and hard disk.

[0050] Figure 2 The following is a workflow diagram of the method for implementing the encrypted hidden partition without any sense of connection based on the bridge chip.

[0051] Figure 3 This is a schematic diagram of the storage distribution of public partitions and hidden partitions on the hard disk. DETAILED DESCRIPTION

[0052] The present invention will be further described below with reference to the accompanying drawings and specific embodiments.

[0053] This embodiment discloses a method for realizing encryption and hidden partitioning based on a bridge chip. Figure 1 As shown, the method includes a computer, a USB-SATA bridge chip and a SATA hard disk, and the computer is connected to the SATA hard disk via the USB-SATA bridge chip.

[0054] The bridge chip used in this embodiment is TUSB9261, and the firmware of the TUSB9261 bridge chip is modified to provide it with a pseudo disk module, an encryption and decryption module, and a hidden partition module. The TUSB9261 bridge chip is hereinafter referred to as the bridge chip.

[0055] like Figure 2 As shown, the specific implementation steps of the present invention are as follows:

[0056] Step A: Determine the system status.

[0057] After the computer is electrically connected to the hard drive via the bridge chip, the bridge chip calls the pseudo-disk module to check the hard drive status recorded on the bridge chip's Flash memory. If no hidden partition has been configured, indicating that the hard drive is in the initial state, proceed to step B. If the hidden partition has been configured, indicating that the hard drive is in the running state, proceed to step C. When the system is shipped from the factory, no hidden partition has been configured and the state is initial.

[0058] Step B: Initial state control process.

[0059] (B-1) The bridge chip starts the pseudo disk module and returns the pseudo disk data to the computer according to the instructions sent by the computer, thereby forming a virtual pseudo file system and a virtual initial state pseudo file on the computer, which is used to prompt the user to enter and save the configuration information of the hidden partition in the initial state pseudo file.

[0060] The configuration information of the hidden partition includes the hidden partition space size (optional), hidden partition password (optional) and reset password (required);

[0061] (B-2) After receiving the configuration information of the hidden partition input and saved by the user in the pseudo-initial state pseudo-file, the computer generates a write instruction and write data and sends them to the bridge chip;

[0062] (B-3) The bridge chip detects the received write instruction and write data. If the data includes the hidden partition space size and the hidden partition password, indicating that the user has enabled the hidden partition mode, then step (B-4.1) is executed; if the user has disabled the hidden partition mode, then step (B-4.2) is executed; if illegal text is detected, then the process returns to step (B-1);

[0063] (B-4.1) The bridge chip extracts the hidden partition space size, hidden partition password and reset password from the write data, and calculates the public partition space size and hidden partition logical offset address based on the hidden partition space size. The storage distribution principle of the public partition and the hidden partition on the hard disk is as follows: Figure 3 shown.

[0064] The bridge chip invokes the encryption and decryption module, using the primary hash value of the hidden partition password as an encryption key to encrypt the hidden partition space size and the hidden partition logical offset address. The bridge chip then stores the plaintext public partition space size, the ciphertext hidden partition space size, the ciphertext hidden partition logical offset address, the secondary hash value of the reset password, and the secondary hash value of the hidden partition password in the flash memory of the bridge chip. The hard drive is then changed to a running state.

[0065] (B-4.2) The bridge chip extracts the reset password from the write data; the bridge chip calls the encryption and decryption module to store the secondary hash value of the reset password in the flash memory of the bridge chip, and then changes the state of the hard disk to the running state;

[0066] The data of the pseudo disk and pseudo file are all pre-stored in the firmware of the bridge chip. The bridge chip can return the pseudo disk and pseudo file data to the computer according to the instructions sent by the computer. For example, if the computer sends an instruction to read the data at hard disk LBA0, the bridge chip intercepts this read instruction and returns the data of pseudo disk LBA 0 pre-stored in the firmware to the computer. The same operation is performed for other LBAs.

[0067] The initial pseudo file type may be a txt file or an html file.

[0068] Step C: Operational control process.

[0069] The operation state control process mainly includes two parts: the system determines whether to switch the public partition to a hidden partition and how to perform data operations on the hidden partition.

[0070] 1. Whether to switch the public partition to a hidden partition.

[0071] (C-1) The bridge chip calls the hidden partition module to intercept the instruction sent by the computer to identify the hard disk capacity and returns the size of the public partition space to the computer. Then, the bridge chip determines the USB transmission protocol version of the computer to which the bridge chip is connected. If the transmission protocol is USB 3.0, normal read and write operations are performed (without switching the public partition to a hidden partition); if the transmission protocol is USB 2.0, step (C-2) is executed.

[0072] (C-2) The bridge chip receives and detects the data write instruction sent by the host; if the length of the data to be written is greater than 4096 bytes, a normal write operation is performed (the public partition is not switched to a hidden partition); if the length of the data to be written is less than or equal to 4096 bytes, step (C-3) is executed.

[0073] (C-3) The bridge chip calls the hidden partition module to match the first n bytes of the data to be written with the locator byte by byte (n is the number of bytes of the locator). If the match is successful, the data between the locator and the terminator is sent to the encryption and decryption module and enters step (C-4). Otherwise, a normal write operation is performed (the public partition is not switched to the hidden partition) and returns to step (C-2).

[0074] The above locator may be "hid_pwd:" and the terminator may be "###".

[0075] (C-4) The bridge chip calls the encryption and decryption module to calculate the secondary hash value of the data between the locator and the terminator, and compares it with the secondary hash value of the hidden partition password and the secondary hash value of the reset password stored in the Flash respectively; if the comparison result is the hidden partition password, the bridge chip cancels this data write instruction (switches the public partition to the hidden partition); if the comparison result is the reset password, the hard disk status is set to the initial state and returns to step B; otherwise, a normal write operation is performed (the public partition is not switched to the hidden partition) and returns to step (C-3).

[0076] 2. Perform data operations on the hidden partition.

[0077] The bridge chip invokes the encryption and decryption module to calculate the primary hash value of the hidden partition password, using it as a key to decrypt the ciphertext of the hidden partition space size and the hidden partition logical offset address. The bridge chip initiates a command to reconnect the hard drive, thereby updating the USB transmission protocol connected to the computer. The hidden partition module is then invoked to intercept the computer's command to identify the hard drive capacity and return the hidden partition space size to the computer. The hidden partition module is also invoked to intercept all read and write commands sent by the computer and redirect the corresponding LBAs to the hidden partition. The encryption and decryption module is then invoked to encrypt and decrypt the read and write data using the primary hash value of the hidden partition password as a key.

[0078] In a preferred embodiment, the hash algorithm is SM3, the encryption and decryption algorithm is SM4, and the working mode is XTS.

[0079] In a preferred embodiment, the file type with a data length less than or equal to 4096 bytes used for hidden partition password authentication is a txt file.

[0080] In a preferred embodiment, the bridge chip has a built-in error counter, and when the number of consecutive incorrect password inputs reaches a preset number, the relevant functions will be locked.

[0081] In a preferred embodiment, the primary hash value of the hidden partition password is stored only in the volatile memory of the bridge chip, ensuring that it disappears after power failure, ensuring that the encryption and decryption keys cannot be used illegally. The secondary hash values ​​of the hidden partition password and the reset password are stored in Flash and can be used to verify the correctness of the passwords entered by the user during runtime.

[0082] In a preferred embodiment, the bridge chip supports the USB 3.0 protocol and is also compatible with the USB 2.0 protocol. The user can connect the bridge chip to the computer using the USB 2.0 transmission protocol by slowly inserting a USB 3.0 data cable into the USB 3.0 port of the computer or directly using a USB 2.0 data cable.

[0083] Connecting the bridge chip to a computer via the USB 2.0 protocol is a prerequisite for enabling the hidden partition in runtime. This is easy to implement and does not require the use of additional management programs, making it relatively concealed. Compared to USB 3.0, USB 2.0 inherently has a slower write speed. Furthermore, the password comparison operation is only triggered when writing small files with a length of 4096 bytes or less, and only the first n bytes of the data being written are compared (n is the number of bytes in the locator). Therefore, password authentication does not significantly affect read and write performance, and can avoid being detected by attackers.

[0084] In a preferred embodiment, when performing data operations on the hidden partition, the bridge chip can initiate a hard drive reconnection instruction by restarting the SATA port. Restarting the SATA port is equivalent to reconnecting the hard drive to the computer. After the bridge chip initiates the hard drive reconnection instruction, if the user slowly inserts a USB 3.0 data cable into the computer's USB 3.0 port, causing the bridge chip to connect to the computer using the USB 2.0 transmission protocol, the transmission protocol will be updated to USB 3.0, thereby not affecting the read and write speed of the hidden partition.

[0085] In a preferred embodiment, the entire hard disk storage space is divided into two parts: the first part is a public partition, with a starting address of 0 and a storage space of pub_len; the second part is a hidden partition, with a starting address of hid_offset and a storage space of hid_len. The public partition can be considered a small hard disk with a storage space of pub_len starting at LBA 0 of the entire hard disk address space; the hidden partition can be considered a small hard disk with a storage space of hid_len starting at LBA hid_offset of the entire hard disk address space.

[0086] In a preferred embodiment, when performing data operations on the hidden partition, the hidden partition module presents the address space [hid_offset, hid_offset+hid_len-1] to the computer in the form of an independent small hard disk, and uses the one-time hash value of the hidden partition password to encrypt and decrypt the data in the address space [hid_offset, hid_offset+hid_len-1].

[0087] In a preferred embodiment, the specific operations of the hidden partition module presenting the address space [hid_offset, hid_offset+hid_len-1] to the computer in the form of an independent small hard disk include:

[0088] (1) When the computer sends a command to identify the hard disk capacity, the bridge chip changes the capacity data returned by the hard disk to hid_len;

[0089] (2) When the computer sends a read or write instruction, the bridge chip modifies the LBA address of the read or write instruction and changes it to LBA+hid_offset.

[0090] In a preferred embodiment, the above-mentioned read and write instructions include SCSI_READ, SCSI_WRITE, SCSI_VERIFY, SCSI_UNMAP and other SCSI instructions related to the hard disk LBA or capable of modifying hard disk data.

[0091] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A method for realizing encryption hidden partition without any sense based on bridge chip, characterized in that: Applied to a computer, the method includes: Obtaining the hard disk system status recorded in the bridge chip, where the hard disk system status includes: an initial state or a running state; When the hard disk system state is in the initial state, based on the configuration information of the hidden partition input and saved by the user, a write instruction and write data are generated and sent to the bridge chip, so that the bridge chip determines whether the user enables or disables the hidden partition mode based on the write data, and when the user enables the hidden partition mode, the bridge chip performs partitioning of the public partition and the hidden partition in the hard disk and generates a hidden partition encryption key based on the write data, and then changes the hard disk system state from the initial state to the running state; wherein the configuration information of the hidden partition includes: hidden partition space size, hidden partition password, and reset password; When the hard disk system is in the running state, it enters the public partition by default, generates and sends a data write instruction to the bridge chip, so that the bridge chip determines whether to switch the public partition to a hidden partition based on the USB transmission protocol version of the connected computer and the instruction analysis result of the data write instruction.

2. The method according to claim 1, characterized in that The step of generating a write instruction and write data based on the configuration information of the hidden partition input and saved by the user includes: Sending a series of instructions to the bridge chip, which returns the pseudo-disk data to the computer based on the instructions; A virtual pseudo file system is formed based on the pseudo disk data; wherein the pseudo file system includes a virtual initial state pseudo file; After receiving the configuration information of the hidden partition input by the user and storing the configuration information of the hidden partition into the initial state pseudo file, a write instruction and a write data are generated.

3. The method according to claim 1, characterized in that In the event that the user disables the hidden partition mode, the method further includes: The bridge chip extracts the reset password from the write data; The bridge chip calculates a secondary hash value of the reset password and stores the secondary hash value of the reset password in a non-volatile storage unit of the bridge chip; Change the hard disk system status from initial state to running state.

4. The method according to claim 1, wherein The method includes dividing the hard disk into a public partition and a hidden partition based on the write data and generating a hidden partition encryption key, comprising: The bridge chip extracts the hidden partition space size, hidden partition password and reset password from the written data; The bridge chip calculates the size of the public partition space and the hidden partition logical offset address according to the size of the hidden partition space; The bridge chip uses the primary hash value of the hidden partition password as an encryption key to encrypt the hidden partition space size and the hidden partition logical offset address, and stores the plaintext of the public partition space size, the ciphertext of the hidden partition space size, the ciphertext of the hidden partition logical offset address, the secondary hash value of the reset password, and the secondary hash value of the hidden partition password in the non-volatile storage unit of the bridge chip.

5. The method according to claim 4, characterized in that The computer obtains the size of the public partition space by the following steps: A hard disk capacity identification instruction is sent to the hard disk, so that the bridge chip intercepts the hard disk capacity identification instruction and then returns the public partition space size to the computer.

6. The method according to claim 4, characterized in that The instruction analysis result includes: the length and data content of the data to be written; The bridge chip determines whether to switch the public partition to a hidden partition based on the USB transmission protocol version of the connected computer and the instruction analysis result of the data write instruction, including: Step 1: Determine the USB transmission protocol version of the bridge chip connected to the computer: if the USB transmission protocol version is USB 3.0, do not switch the public partition to a hidden partition; if the USB transmission protocol version is USB 2.0, execute step 2; Step 2: The bridge chip determines whether the length of the data to be written is greater than a set threshold: if the length of the data to be written is greater than the set threshold, the public partition is not switched to the hidden partition; if the length of the data to be written is not greater than the set threshold, step 3 is executed; Step 3: The bridge chip matches the first n bytes of the data to be written with the locator byte by byte. If the match is unsuccessful, the public partition is not switched to the hidden partition. If the match is successful, step 4 is executed. Where n is the number of bytes of the locator. Step 4: The bridge chip calculates the secondary hash value of the data between the locator and the terminator, and compares it with the secondary hash value of the hidden partition password and the secondary hash value of the reset password stored in the non-volatile storage unit respectively: if the comparison result is the hidden partition password, the public partition is switched to the hidden partition; if the comparison result is the reset password, the hard disk status is set to the initial status; otherwise, the public partition is not switched to the hidden partition.

7. The method according to claim 6, characterized in that Switch public partitions to hidden partitions, including: The bridge chip calculates a hash value of the hidden partition password and uses it as the key to decrypt the ciphertext of the hidden partition space size and the ciphertext of the hidden partition logical offset address; The bridge chip initiates a command to reconnect the hard drive to update the USB transmission protocol connected to the computer; The bridge chip intercepts the instruction sent by the computer to identify the hard disk capacity and returns the hidden partition space size to the computer; The bridge chip intercepts all read and write instructions sent by the computer and redirects the logical block address corresponding to the read and write instructions to the hidden partition according to the hidden partition logical offset address; The bridge chip uses the one-time Hash value of the hidden partition password as a key to encrypt and decrypt the read and written data, so as to realize the reading and writing of data on the hidden partition.

8. The method according to claim 7, characterized in that The bridge chip initiates a command to reconnect the hard disk to update the USB transmission protocol connected to the computer, including: After the bridge chip initiates an instruction to reconnect the hard disk, if the user slowly inserts a USB 3.0 data cable into the USB 3.0 port of the computer so that the bridge chip is connected to the computer using the USB 2.0 transmission protocol, the transmission protocol used by the bridge chip to connect to the computer is updated to USB 3.0; After the bridge chip initiates the instruction to reconnect the hard disk, if the user directly uses a USB 2.0 data cable to connect the bridge chip to the computer using the USB 2.0 transmission protocol, the transmission protocol used by the bridge chip to connect to the computer is still USB 2.

0.

9. The method according to any one of claims 1 to 8, characterized in that The method further comprises: When the hard disk system is in the running state, an instruction for executing data read and write operations on the public partition is generated and sent to the bridge chip to implement the data read and write operations on the public partition.

10. An electronic device, characterized in that: The electronic device includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, it implements the method for seamlessly implementing an encrypted hidden partition based on a bridge chip as described in any one of claims 1 to 9.

Images