USB device identification access method and system based on computer operating system

Abstract

The invention provides a USB device identification access method and system based on a computer operating system, and relates to the technical field of data security, and the USB device identification access system comprises the following steps: obtaining an access signal of a USB interface to a USB device; according to the access signal, calling each preset trusted driver in a shared driver library in sequence to attempt to connect with the USB device, so as to obtain an attempt result; when the USB equipment is matched and connected with the corresponding preset credible driving program, keeping continuous communication between the preset credible driving program and the USB equipment according to the access signal; and when the USB equipment cannot be matched with the preset credible driving program, performing credibility isolation analysis on the USB equipment, generating an analysis result, and controlling and configuring a corresponding driving program and an access environment based on the analysis result so as to complete identification access of the USB equipment. According to the access method and system provided by the invention, the data security when the computer operating system accesses the USB equipment can be effectively ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data security, in particular to a USB device identification and access method and system based on a computer operating system. BACKGROUND

[0002] With the increasing number of computer peripheral USB devices, such as keyboard, mouse, modem, printer, scanner, digital camera, MP3, etc. can be connected with computer devices through USB interface. For important host devices of enterprises and institutions, the high security of system data information is very important, and the security protection of data information can be realized by preventing leakage, preventing virus infection, etc. Peripheral USB devices are one of the main factors that threaten computer operating systems, therefore, the access security of peripheral USB devices to computer operating systems is also very important.

[0003] In the existing process of USB device access to computer operating system through USB interface, the computer operating system usually needs to obtain device information from the USB device to select the corresponding driver, so as to realize the communication between the computer operating system and the USB device. However, in the process of the computer operating system issuing query instructions to the USB device and obtaining device information of the USB device, data transmission between the computer operating system and the USB device will still cause data security risks of the computer operating system. SUMMARY

[0004] The present application provides a USB device identification and access method and system based on a computer operating system, to solve the technical problem that in the process of the computer operating system issuing query instructions to the USB device and obtaining device information of the USB device, data transmission between the computer operating system and the USB device will cause data security risks of the computer operating system.

[0005] To achieve the above and other related objectives, this invention provides a USB device identification and access method based on a computer operating system. The method, applied to a computer operating system, includes: acquiring an access signal from a USB interface to a USB device; sequentially calling each preset trusted driver in a shared driver library to attempt a connection with the USB device based on the access signal, thereby obtaining the attempt result, wherein the shared driver library includes multiple preset trusted drivers; when the attempt result indicates that the USB device matches and connects with the corresponding preset trusted driver, maintaining continued communication between the preset trusted driver and the USB device based on the access signal; when the attempt result indicates that the USB device and the preset trusted driver cannot match, performing a trustworthiness isolation analysis on the USB device, generating an analysis result, and controlling and configuring the corresponding driver and access environment based on the analysis result to complete the identification and access of the USB device.

[0006] In one embodiment of the present invention, according to the access signal, each preset trusted driver in the shared driver library is sequentially invoked to attempt to connect with the USB device to obtain the attempt result, including: detecting the operation request of the USB device according to the access signal; based on the operation request, searching in the shared driver library through the calling module for several preset trusted drivers that cover the calling range corresponding to the operation request, as adapter drivers; and attempting to connect the operation request with the USB device through each adapter driver to obtain the attempt result.

[0007] In one embodiment of the present invention, the operation request includes a first operation request initiated by the computer operating system to the USB device; based on the operation request, a plurality of preset trusted drivers covering the calling scope corresponding to the operation request are searched in a shared driver library by a calling module as adaptation drivers, including: when the operation request is detected to be a first operation request initiated to the USB device, performing a requirement analysis on the first operation request to extract multiple requirement information corresponding to the driver requirements; calculating the matching degree of each requirement information corresponding to the same preset trusted driver. Based on the matching degree corresponding to each demand information Indicator factors corresponding to demand information The comprehensive matching index of the same preset trusted driver was calculated. For all preset trusted drivers and their corresponding comprehensive matching metrics Construct a comprehensive set of matching indicators ; Determine the comprehensive matching index set Each comprehensive matching index Has the indicator threshold been reached? If yes, it indicates that the corresponding preset trusted driver covers the calling range corresponding to the operation request, and the corresponding preset trusted driver is used as an adaptive driver; if no, it indicates that the corresponding preset trusted driver cannot cover the calling range corresponding to the operation request, and the corresponding preset trusted driver is discarded.

[0008] In an embodiment of the present application, the operation request is used to attempt to connect each adaptive driver with the USB device to obtain an attempt result, including: according to the comprehensive matching index corresponding to each adaptive driver , the adaptive drivers are sorted to obtain an adaptive driver sequence; each adaptive driver in the adaptive driver sequence is selected in sequence to send the first operation request to the USB device; feedback information of the USB device is received, and the feedback information is data split to obtain a plurality of split information, wherein each split information corresponds to each requirement information corresponding to the first operation request; each split information in the feedback information is compared with the corresponding requirement information; if the feedback information and the requirement information are matched with each other, the USB device and the corresponding adaptive driver are matched and connected as the attempt result; if at least one feedback information and the corresponding requirement information are not matched, the USB device and the corresponding adaptive driver are matched as the attempt result.

[0009] In an embodiment of the present application, the operation request includes a second operation request initiated by the USB device to the computer operating system; when the operation request is the second operation request, all preset trusted drivers are used as adaptive drivers; the operation request is used to attempt to connect each adaptive driver with the USB device to obtain an attempt result, including: the second operation request is sent to each adaptive driver respectively, and the corresponding execution result data is obtained through the preset trusted driver; it is judged whether the execution result data belongs to a safety instruction; if yes, the USB device and the adaptive driver corresponding to the execution result data are matched and connected as the attempt result; if no, the USB device and the adaptive driver are matched as the attempt result.

[0010] In an embodiment of the present application, it is judged whether the execution result data belongs to a safety instruction, including: the execution result data is compared with each safety instruction under the corresponding adaptive driver to obtain a similarity value , a similarity set is constructed; the maximum similarity value in the similarity set is found; it is judged whether the maximum similarity value is greater than a similarity threshold value of the corresponding safety instruction ; if yes, it indicates that the execution result data belongs to the safety instruction; if no, it indicates that the execution result data does not belong to the safety instruction.

[0011] In one embodiment of the present invention, performing a trustworthiness isolation analysis on a USB device and generating an analysis result includes: transferring the USB device to an isolation detection module, wherein the isolation detection module is used to receive remote control instructions issued by a computer operating system, the remote control instructions including a first remote control instruction for retrieving device information, a second remote control instruction for remotely verifying and controlling the isolation detection module, and a third remote control instruction for remotely calling and controlling the isolation detection module's device driver; sending the first remote control instruction to the isolation detection module; scanning the printing device information of the USB device by the isolation detection module to obtain the scanning device information of the USB device, wherein the printing device information is obtained by the isolation detection module after retrieving the device information of the USB device according to the first remote control instruction and then printing it; determining whether there is corresponding policy information consistent with the scanning device information according to the policy information in the policy rule information database; if yes, determining that the USB device is allowed to be accessed as the first analysis result; if no, further analyzing the USB device using the isolation detection module through the second remote control instruction to generate a second analysis result.

[0012] In one embodiment of the present invention, the USB device is further analyzed by the isolation detection module using a second remote control command to generate a second analysis result, including: configuring a corresponding third remote control command based on the device information corresponding to the USB device; remotely sending the third remote control command to the isolation detection module, wherein the isolation detection module calls the corresponding device driver according to the third remote control command to establish communication between the isolation detection module and the USB device; while the isolation detection module is communicating with the USB device, the second remote control command is wirelessly sent to the isolation detection module sequentially according to a preset security verification strategy to obtain the difference data before and after each execution of the second remote control command by the isolation detection module on the USB device, wherein the difference data is data related to the USB device before and after access; based on the difference data... Difference data Number of types and each difference data Corresponding weight Assess risk indicators for USB devices ,in, This is the cumulative value of the difference data; when the risk indicator If the risk level exceeds the first risk indicator threshold, then the USB device will not be allowed to connect, which will be considered the second analysis result; when the risk indicator... If the value is less than the second risk indicator threshold, then allowing the USB device to be connected will be considered as the second analysis result.

[0013] In one embodiment of the present invention, the USB device is further analyzed by the isolation detection module using a second remote control command to generate a second analysis result, including: configuring a corresponding third remote control command based on the device information corresponding to the USB device; remotely sending the third remote control command to the isolation detection module, wherein the isolation detection module calls the corresponding device driver according to the third remote control command to establish communication between the isolation detection module and the USB device; while the isolation detection module is communicating with the USB device, receiving a call signal for the second remote control command, retrieving the corresponding second remote control command and wirelessly sending it to the isolation detection module to obtain the difference data before and after each execution of the second remote control command by the isolation detection module on the USB device, wherein the difference data is data related to the USB device before and after access. ; Determine the difference in data Whether the acquisition conditions are met, including whether the trend of the difference values ​​in the difference data tends to be stable, and the number of times the difference data was acquired when the trend of the difference values ​​tends to be stable. More than the set number of times If so, then based on the difference data. Difference data Number of types Number of times and each difference data Corresponding weight Assess risk indicators for USB devices When risk indicators If the risk level exceeds the first risk indicator threshold, then the USB device will not be allowed to connect, which will be considered the second analysis result; when the risk indicator... If the value is less than the second risk indicator threshold, then allowing the USB device to be connected will be considered as the second analysis result.

[0014] To achieve the above object and other related objects, the present application also provides a USB device identification and access system based on a computer operating system, which is applied to the computer operating system and comprises: an acquisition unit configured to acquire an access signal of a USB interface to a USB device; a connection attempt unit configured to sequentially call each preset trusted driver in a common driver library to attempt connection with the USB device according to the access signal, so as to acquire an attempt result, wherein the common driver library comprises a plurality of preset trusted drivers; a communication control unit configured to, when the attempt result is that the USB device is matched with the corresponding preset trusted driver for connection, maintain the continuous communication between the preset trusted driver and the USB device according to the access signal; and an analysis and configuration unit configured to, when the attempt result is that the USB device cannot be matched with the preset trusted driver, perform isolation analysis on the trustworthiness of the USB device, generate an analysis result, and control the configuration of the corresponding driver and access environment based on the analysis result, so as to complete the identification and access of the USB device.

[0015] The present application has the following beneficial effects: the USB device identification and access method and system based on a computer operating system proposed by the present application can effectively realize the quick matching of trusted USB devices based on preset trusted drivers, so as to ensure the communication safety between the computer operating system and the USB device. When no corresponding preset trusted driver is found in the common driver library, the risk indicators of the USB device can be analyzed and evaluated by means of isolated access of the isolation detection module, and then the access safety of the USB device to the computer operating system is determined based on the risk indicators, and when the safety is confirmed, the USB device is safely accessed to the computer operating system by calling the corresponding device driver, so that the data safety of the computer operating system when the USB device is accessed can be effectively improved. BRIEF DESCRIPTION OF DRAWINGS

[0016] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application. It is apparent that the accompanying drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor on the basis of these drawings.

[0017] In the drawings: Figure 1 The flowchart of the USB device identification and access method based on a computer operating system provided by the embodiments of the present application is shown.

[0018] Figure 2An instruction arrangement process diagram between a computer operating system and an isolation detection module provided by an embodiment of the present application.

[0019] Figure 3 A structural block diagram of a USB device identification access system based on a computer operating system provided by an embodiment of the present application is shown.

[0020] Figure 4 A structural diagram of an electronic device provided by an embodiment of the present application is shown.

[0021] Reference signs are as follows: An electronic device 1; a USB device identification access system 11 based on a computer operating system; a memory 12; a processor 13; an acquisition unit 111; a connection attempt unit 112; a communication control unit 113; an analysis configuration unit 114. DETAILED DESCRIPTION

[0022] The present application will be described in detail with specific embodiments hereinafter, and those skilled in the art can easily understand other advantages and effects of the present application from the content disclosed in the specification. The present application can also be implemented or applied by different specific embodiments, and each detail in the specification can be modified or changed based on different views and applications without departing from the spirit of the present application, and the following embodiments and features in the embodiments can be combined with each other without conflict.

[0023] It should be noted that the diagrams provided in the following embodiments only illustrate the basic concept of the present application in a schematic manner, and the drawings only show the components related to the present application in the drawings, not the number, shape and size of the components when actually implemented. The type, number and ratio of each component can be arbitrarily changed when actually implemented, and the layout type of the components can also be more complex.

[0024] In the following description, a large number of details are discussed to provide a more thorough explanation of the embodiments of the present application, however, it is obvious to those skilled in the art that the embodiments of the present application can be implemented without these specific details, and in other embodiments, the known structures and devices are shown in the form of block diagrams rather than in the form of details to avoid making the embodiments of the present application difficult to understand.

[0025] The application provides a USB device identification access method based on a computer operating system. When a USB device is inserted into a USB interface, the access signal of the USB device is analyzed and a preset trusted driver is called. Each preset trusted driver is sequentially connected with the USB device for trial connection. When the trial connection is successful, it is indicated that the current USB device is a trusted device, and the corresponding preset trusted driver is directly used to provide communication service for the USB device. When the trial connection is unsuccessful, the USB device is isolated and analyzed for trustworthiness to determine whether the USB device is trustworthy without communication with the computer operating system. The analysis result is used to realize the driving program and access environment of the USB device, thereby realizing safe access of the USB device. Through the above method, the preset type of driving program corresponding to the trusted USB device can be quickly connected with the computer operating system without calling the USB device information, thereby solving the device information reading risk of the unknown USB device caused by the unreliable unknown USB device when the computer operating system actively accesses and queries the device information of the unknown USB device. When the preset trusted driver fails to access, the trustworthiness of the unknown USB device is further isolated and evaluated to determine whether the USB device can be identified and accessed, thereby ensuring the access safety of the USB device to the computer operating system.

[0026] Figure 1 A flowchart of the USB device identification access method based on the computer operating system in the example embodiment of the application is shown, which is applied to the computer operating system and includes steps S10-S40. The technical solution of the application will be described in detail below. Figure 1

[0027] First, step S10 is performed to acquire the access signal of the USB device to the USB interface.

[0028] When the USB device tries to establish a connection with the computer operating system, the USB interface can communicate with the computer operating system through the interface switching module when the USB plug of the USB device is inserted into the USB interface, so that the access signal of the USB device of the USB interface is sent to the computer operating system through the interface switching module to acquire the access signal of the USB device by the computer operating system, and the preset trusted driver in the common driver library is called to try to communicate with the USB device based on the access signal.

[0029] ​Then, step S20 is performed, and each preset trusted driver in the common driver library is called in sequence to attempt connection with the USB device according to the access signal, to obtain an attempt result. The common driver library includes a plurality of preset trusted drivers.

[0030] When the computer operating system receives the access signal of the USB device, each preset trusted driver in the pre-configured common driver library is called to attempt connection with the USB device, so that an attempt result including matching connection of the USB device and the corresponding preset trusted driver and failure of matching of the USB device and the preset trusted driver can be obtained. Each preset trusted driver in the common driver library can be pre-marked by a human, for example, when the USB device is a common USB mouse, keyboard, USBKey, or the like, a device driver corresponding to the USB device that can be directly trusted can be pre-marked as a preset trusted driver, and the corresponding preset trusted driver can be stored by using the common driver library, or a driver list corresponding to the preset trusted driver can be stored, and when the corresponding preset trusted driver needs to be called, the preset trusted driver corresponding to the storage location can be directly called through the corresponding number in the driver list, to attempt connection with the USB device detected to access the access signal.

[0031] In step S20, each preset trusted driver in the common driver library is called in sequence to attempt connection with the USB device according to the access signal, to obtain an attempt result, including: The operation request of the USB device is detected according to the access signal; Based on the operation request, a plurality of preset trusted drivers covering the calling range of the operation request are searched for in the common driver library by using a calling module, as adaptive drivers; The operation request is attempted to be connected with the USB device through each adaptive driver, to obtain an attempt result.

[0032] When the access signal of the USB device is acquired by the computer operating system, the preset trusted driver is connected by the preset trusted driver, in order to improve the efficiency of the preset trusted driver, the operation request can be based on the related operation request, the preset trusted driver in the common driver library is screened by calling module, so as to find a plurality of preset trusted drivers in the common driver library which can cover the operation request corresponding to the calling range, as the corresponding adaptive driver. Then, the corresponding operation request is tried to communicate with the USB device through each adaptive driver in turn, so as to obtain the test result according to the feedback data of the USB device received by the computer operating system. For example, when the computer operating system connects the operation request through the adaptive driver corresponding to the USBKey and the corresponding USBKey device, when the operation request is sent to the USBKey device through the adaptive driver, the computer operating system will receive the feedback data sent by the USBKey device, and then determine the corresponding adaptive driver as the driver when the corresponding USBKey device communicates with the computer operating system based on the feedback data. Of course, in order to ensure the accuracy of the feedback data, the feedback data can also be detected by data format, matching degree and other indicators of the operation request, to determine whether the feedback data is wrong, and when the feedback data is correct, the corresponding adaptive driver can be used as the driver when the corresponding USBKey device communicates with the computer operating system.

[0033] On the contrary, if the USB device is a USB storage device, and there is no preset trusted driver corresponding to the USB storage device in the common driver library, the preset trusted driver that can realize the communication between the USB storage device and the computer operating system cannot be acquired through the operation request, so that the USB device and the preset trusted driver cannot be matched, that is, the USB device and the preset trusted driver cannot be matched as the corresponding test result.

[0034] The operation request includes a first operation request initiated by the computer operating system to the USB device.

[0035] When the operation request is the first operation request, the operation request is based on the operation request, and the calling module is used to find a plurality of preset trusted drivers in the common driver library which cover the operation request corresponding to the calling range, as the adaptive driver, which can further include: When it is detected that the operation request is the first operation request initiated to the USB device, the demand analysis is carried out on the first operation request, and a plurality of demand information corresponding to the demand of the driver is extracted; The matching degree of each demand information corresponding to the same preset trusted driver ; based on the matching degree corresponding to each requirement information and the index factor corresponding to the requirement information , the comprehensive matching index of the same preset trusted driver is calculated ; For all preset trusted drivers and their corresponding comprehensive matching indexes , a comprehensive matching index set is constructed ; whether each comprehensive matching index in the comprehensive matching index set reaches an index threshold : If yes, it means that the corresponding preset trusted driver covers the corresponding call range of the operation request, and the corresponding preset trusted driver is used as the adaptive driver; If not, it means that the corresponding preset trusted driver cannot cover the corresponding call range of the operation request, and the corresponding preset trusted driver is discarded.

[0036] When searching for a preset trusted driver in a common driver library through a call module in a computer operating system, when it is determined that the operation request is a first operation request, the requirement information corresponding to the first operation request can be directly analyzed to extract all requirement information corresponding to the first operation request. The first operation request can be an operation request initiated to a USBKey device, and the requirement information corresponding to the operation request can include digital transaction amount, digital transaction party information, etc. Then, each preset trusted driver calculates the matching degree of each requirement information corresponding to the preset trusted driver based on the corresponding requirement information , and the comprehensive matching index of each preset trusted driver is evaluated and calculated based on all matching degrees corresponding to the operation request . In order to ensure the accuracy of the comprehensive matching index , an index factor can be used to adapt the matching degree corresponding to each requirement information type , and then based on all adaptation results, the comprehensive matching index of each preset trusted driver is calculated by superposition , that is, the formula is . .

[0037] After obtaining the comprehensive matching index of each preset trusted driver , whether the comprehensive matching index reaches an index threshold is further judged, if yes, it means that the preset trusted driver corresponding to the current comprehensive matching index can be used as an adaptive driver, and if not, it means that the preset trusted driver corresponding to the current comprehensive matching index​ The corresponding preset trusted driver cannot be used to establish the attempted connection of the computer operating system and the corresponding USB device. Through this screening method, the number of attempted connections and the attempted connection load of the preset trusted driver in the common driver library can be effectively reduced, and the attempted connection efficiency can be improved.

[0038] Specifically, the operation request is used to attempt to connect each adaptive driver with the USB device to obtain an attempted result, which can further include: According to the comprehensive matching index corresponding to each adaptive driver The size of the adaptive driver is sorted to obtain an adaptive driver sequence. Each adaptive driver in the adaptive driver sequence is selected in turn to send the first operation request to the USB device. The feedback information of the USB device is received, and the feedback information is data split to obtain a plurality of split information, wherein each split information corresponds to each requirement information corresponding to the first operation request. Each split information in the feedback information is compared with the corresponding requirement information. If the feedback information and the requirement information are matched with each other, the attempted result is that the USB device is matched and connected with the corresponding adaptive driver. If at least one feedback information and the corresponding requirement information are not matched, the attempted result is that the USB device and the corresponding adaptive driver cannot be matched.

[0039] Further, in order to improve the attempted connection efficiency, after the adaptive driver is screened, the comprehensive matching index corresponding to each adaptive driver The size comparison is performed to sort the adaptation drivers, which can be in a descending order or an ascending order. Then, the adaptation driver sequence can be obtained after the sorting. After obtaining the adaptation driver sequence, if each adaptation driver in the adaptation driver sequence is arranged in a descending order, each adaptation driver in the adaptation driver sequence can be selected in sequence according to the sequence of the adaptation driver sequence, and the first operation request is attempted to be sent to the USB device through each selected adaptation driver. After the USB device receives the first operation request, the USB device generates execution data as feedback information according to the first operation request and sends the feedback information to the computer operating system. After the computer operating system receives the feedback information, the feedback information is data-split to obtain a plurality of split information, which can be data information in a format corresponding to the requirement information. Then, each split information is compared with the corresponding requirement information. For example, when the corresponding split data is empty or does not match the corresponding requirement information in format, data value range, etc., it indicates that the current USB device and the corresponding adaptation driver cannot be matched. When the feedback information matches the requirement information in format, data value range, etc., it indicates that the USB device and the corresponding adaptation driver can be matched and connected. Through the above comparison and analysis of the feedback information and the corresponding requirement information, the reliability of the adaptation driver in attempting to connect the computer operating system and the USB device can be further realized, so that the adaptation driver can be put into use under the premise that the communication between the computer operating system and the USB device is reliable. The adaptation driver sorting method can effectively improve the calling efficiency of the adaptation driver and improve the efficiency of finding a matched USB device. Moreover, when the first operation request is sent to the USB device through the adaptation driver, the feedback information is compared and analyzed with the corresponding requirement information, which can further realize the reliability verification of the adaptation driver when attempting to connect the computer operating system and the USB device, so as to ensure that the adaptation driver can be put into use under the premise that the communication between the computer operating system and the USB device is reliable.

[0040] In addition, the operation request includes a second operation request initiated by the USB device to the computer operating system; when the operation request is the second operation request, all the preset trusted drivers are used as the adaptation drivers.

[0041] When the operation request is the second operation request, the operation request is attempted to be connected with the USB device through each adaptation driver to obtain a trial result, which can further include: The second operation request is sent to each adaptation driver, and the corresponding execution result data is obtained through the preset trusted driver; It is judged whether the execution result data belongs to a safe instruction; If yes, the USB device and the adaptation driver corresponding to the execution result data are matched and connected as the trial result; If not, the USB device and the matching driver program cannot be matched as a result of the attempt.

[0042] The second operation request is mainly for the case where the request can be initiated by the USB device to the computer operating system, unlike the first operation request which attempts to connect. Specifically, when the operation request is the second operation request, the calling module of the computer operating system receives the second operation request initiated by the USB device through the corresponding USB interface. For example, the USB mouse can initiate the corresponding second operation request through the typing of the corresponding mouse key; the USB keyboard can initiate the corresponding second operation request through the typing of the corresponding keyboard key. When the calling module receives the corresponding second operation request, it directly sends the second operation request to each matching driver program to determine whether each matching driver program can execute the corresponding second operation request. If it can, it generates a corresponding execution result data; if it cannot, it can directly exclude the corresponding matching driver program. After obtaining the execution result data corresponding to all matching driver programs, it is further necessary to determine whether the execution result data can form a safe instruction corresponding to the matching driver program. The safe instruction is a trusted execution instruction that the computer operating system can execute according to the corresponding trusted USB device. If so, it means that the USB device and the matching driver program corresponding to the execution result data are matched and connected, and the corresponding matching driver program is used as the driver program for the computer operating system to communicate with the corresponding USB device. If the execution result data cannot form a safe instruction, it means that the USB device and the matching driver program cannot be matched. In this way, the active typing of the operation request by the USB device can be used to further confirm whether the USB device can be used as a trusted USB device to establish communication with the computer operating system.

[0043] In summary, through the verification and analysis of the first operation request by the calling module and the verification and analysis of the second operation request, multiple verification systems can be realized, such as active verification by the computer operating system or active verification by the USB device, to ensure the flexibility and security of the communication between the USB device and the computer operating system.

[0044] Next, determining whether the execution result data belongs to a safe instruction can further include: comparing the execution result data with each safe instruction under the corresponding matching driver program to obtain a similarity value , constructing a similarity set ; finding the maximum similarity value in the similarity set ; ; determining whether the maximum similarity value whether greater than a similarity threshold value of the corresponding security instruction ; If yes, it means that the execution result data belongs to the security instruction. If no, it means that the execution result data does not belong to the security instruction.

[0045] When the USB device sends a second operation request to the computer operating system by typing or other means, the calling module of the computer operating system will generate execution result data by calling the adaptive driver. Then, the pre-stored security instruction corresponding to each adaptive driver is called, and the execution result data is compared with each security instruction in turn to determine the similarity between the instruction information of the security instruction and the execution result data. Specifically, the similarity value can be obtained by comparing the instruction information (such as instruction symbol, instruction format, etc.) of the security instruction and the corresponding information of the execution result data , and then the similarity set between the execution result data and all security instructions under the corresponding adaptive driver is reconstructed . Then, the maximum similarity value in the similarity set is searched, and the formula is represented as The maximum similarity value can reflect the corresponding situation between the current execution result data and the security instruction. Then, the maximum similarity value is compared with the similarity threshold value of the corresponding security instruction, so that when the maximum similarity value exceeds the similarity threshold value , it means that the execution result data belongs to the security instruction, and the current USB device and the adaptive driver corresponding to the execution result data complete the matching connection; otherwise, it means that the USB device and the adaptive driver cannot be matched.

[0046] Then, step S30 is performed, and when the attempt result is that the USB device is matched with the corresponding preset trusted driver, the preset trusted driver and the USB device continue to communicate according to the access signal.

[0047] That is, when each preset trusted driver in the common driver library is called by the computer operating system to attempt to connect with the USB device, if the USB device matches the corresponding preset trusted driver for connection, it indicates that the computer operating system and the USB device can communicate through the corresponding preset trusted driver, and the access signal of the USB device to the USB interface can be maintained to continue communication between the preset trusted driver and the USB device. That is, when the USB device is always maintained in the USB interface, the computer operating system continuously obtains the access signal to ensure continuous communication between the computer operating system and the USB device through the preset trusted driver.

[0048] Next, step S40 is performed, and when the attempt result is that the USB device cannot match the preset trusted driver, the isolation analysis of the trustworthiness of the USB device is performed, an analysis result is generated, and based on the analysis result, the corresponding driver and access environment are configured to complete the identification and access of the USB device.

[0049] When each preset trusted driver in the common driver library is called by the computer operating system to attempt to connect with the USB device, if the USB device cannot match the preset trusted driver, it indicates that the trustworthiness of the current USB device is to be determined. The analysis result of whether the current USB device is trustworthy can be determined by means of isolation analysis of the trustworthiness of the USB device. If the analysis result is trustworthy, the identification and access of the USB device can be realized by configuring the corresponding driver and access environment, and if it is always untrustworthy, the USB device cannot directly complete the access to the computer operating system, thereby ensuring the safe use of the computer operating system.

[0050] In step S40, the isolation analysis of the trustworthiness of the USB device is performed to generate an analysis result, which can further include: The USB device is connected to the isolation detection module, wherein the isolation detection module is used to receive a remote control instruction issued by the computer operating system, and the remote control instruction includes a first remote control instruction for device information retrieval, a second remote control instruction for remote verification control of the isolation detection module, and a third remote control instruction for device driver remote calling control of the isolation detection module; The first remote control instruction is sent to the isolation detection module; The printing device information of the USB device by the isolation detection module is scanned to obtain scanning device information of the USB device, wherein the printing device information is obtained by printing by the isolation detection module after the device information retrieval of the USB device according to the first remote control instruction; According to the strategy information in the strategy rule information library, it is judged whether there is corresponding strategy information consistent with the scanning device information; If yes, it is determined that the USB device is allowed to be accessed as a first analysis result; If no, the USB device is further analyzed by a second remote control instruction using an isolation detection module to generate a second analysis result.

[0051] In the isolation analysis of the credibility of the USB device by the computer operating system, the credibility of the USB device can be comprehensively analyzed by temporarily accessing the USB device through an additional configuration of an isolation detection module. The isolation detection module can be an independent detection host device independent of the corresponding host of the computer operating system. When the isolation detection module monitors that the USB device is risk-free, the access of the computer operating system can be further analyzed, which can effectively ensure the access safety of the peripheral USB device of the computer operating system. Specifically, the USB device can be connected to the computer operating system and the isolation detection module through the USB interface, and the mutual switching between the computer operating system and the isolation detection module can be realized through a configuration interface switching module in the USB interface. When the USB device cannot be matched with the preset trusted driver, the USB device can be connected to the isolation detection module through the interface switching module. In the credibility analysis of the USB device by the isolation detection module, the communication between the isolation detection module and the USB device can be performed according to the remote control instruction sent by the computer operating system to the isolation detection module. The communication between the computer operating system and the isolation detection module can be established by using Internet of Things, Bluetooth, etc.

[0052] At the beginning, in order to determine whether the USB device belongs to the trusted device of the current computer operating system, the computer operating system can send a first remote control instruction to the isolation detection module, and the isolation detection module obtains the related device information of the USB device according to the first remote control instruction. After obtaining the device information of the USB device, in order to facilitate the safe acquisition of the computer operating system, the isolation detection module can also be configured with a printing submodule to print the device information of the USB device. At the same time, in order to ensure the safety of the computer operating system in obtaining information, a scanning device such as a camera can be further configured on the host of the computer operating system to shoot and scan the device information of the USB device printed by the isolation detection module, thereby ensuring the complete isolation between the computer operating system and the isolation detection module when the computer operating system obtains information. The computer operating system compares the device information of the USB device with the policy information in the corresponding policy rule information library, and when they are consistent, it means that the USB device is a trusted device, and the USB device can be determined to be allowed to be accessed. If they are not consistent, it means that the current USB device is not trusted by the computer operating system, and further analysis by the isolation detection module through a second remote control instruction is needed to confirm the trustworthiness of the USB device, so that when the USB device is confirmed to be trusted after analysis, it is further accessed to the computer operating system.

[0053] Please refer to Figure 2 , Figure 2 In an embodiment, the computer operating system and the isolation detection module can be connected to the USB device through the interface switching module of the USB interface respectively. When the computer operating system detects that the USB device is not trusted, the interface switching module can be controlled to connect the USB device to the isolation detection module, and then the computer operating system can send relevant control instructions such as the first control instruction, the second control instruction and the third control instruction to the isolation detection module through wireless routing, to realize that the isolation detection module replaces the computer operating system to perform relevant risk operations. After the isolation detection module executes, the data is fed back to the computer operating system in the form of printing, and the computer operating system further determines the risk index of the USB device when it is accessed based on the feedback information, and controls whether the computer operating system accesses the USB device based on the risk index, thereby effectively ensuring the data security of the computer operating system when the USB device and the computer operating system establish communication.

[0054] Further, the second analysis result generated by the isolation detection module through the second remote control instruction can further include: According to the device information corresponding to the USB device, a corresponding third remote control instruction is configured; The third remote control command is sent remotely to the isolation detection module, which in turn calls the corresponding device driver according to the third remote control command to establish communication between the isolation detection module and the USB device. When the isolation detection module is communicating with the USB device, according to the preset security verification strategy, the second remote control command is wirelessly sent to the isolation detection module in sequence to obtain the difference data before and after the isolation detection module executes the second remote control command on the USB device each time. The difference data is related to the data before and after the USB device is connected. Based on difference data Difference data Number of types and each difference data Corresponding weight Assess risk indicators for USB devices ,in, This represents the cumulative value of the difference data; When risk indicators If the value exceeds the first risk indicator threshold, then the USB device will not be allowed to be connected as the second analysis result. When risk indicators If the value is less than the second risk indicator threshold, then allowing the USB device to be connected will be considered as the second analysis result.

[0055] When the device information of a USB device does not match the computer's operating system, a second remote control command can be sent to the isolation detection module, enabling the module to continuously analyze and verify the USB device's trustworthiness. During this process, a third remote control command can be sent based on the USB device's device information to control the isolation detection module to invoke the corresponding device driver for communication between the module and the USB device. To improve the efficiency of USB device trustworthiness verification, iterative verification can be performed according to a preset security verification strategy to quickly confirm the USB device's trustworthiness. While the isolation detection module maintains communication with the USB device, a preset security verification strategy can be configured. Then, based on this strategy, second remote control commands corresponding to the preset security verification strategy are sequentially sent to the isolation detection module, enabling the module to access and control the USB device according to these commands. After each execution, the isolation detection module will also calculate the difference data of data that may be affected by the execution of the USB device before and after the execution. If there is no difference or the difference is small, it means that the USB device has no risk or the risk is small and access to the computer operating system can be achieved. Conversely, if there is a large difference, it means that the USB device has a risk and access to the computer operating system cannot be achieved. In this case, you can continue to access the USB device through the isolation detection module or stop accessing it to reduce security risks.

[0056] When performing differential analysis, computer operating systems can employ quantitative methods. Specifically, differential data from the isolation detection module can be obtained through scanning. Difference data Number of types Wait for the data, and then, based on each difference data... Corresponding weight To achieve risk indicators for USB devices The evaluation, expressed by the formula is as follows: This scheme can be an iterative process based on a preset security verification strategy. Therefore, the cumulative value of the difference data can be calculated by integration, i.e., the formula is: Of course, during iteration, it is also possible to obtain the difference data one by one. Then, the cumulative value of the difference data is calculated using an summation method. Furthermore, in the risk indicators... If the value exceeds the first risk indicator threshold, it indicates that the USB device is untrusted and should not be connected to the computer operating system. If the risk indicator... If the threshold is lower than the second risk indicator threshold, then conversely, it indicates that the USB device is allowed to be connected by the computer operating system. The second risk indicator threshold can be lower than the first risk indicator threshold to ensure that the risk indicators are balanced when determining USB device access. Conservatism.

[0057] In addition, by using the isolation detection module to further analyze the USB device via a second remote control command, a second analysis result can be generated, which may further include: Configure the corresponding third-party remote control commands based on the device information corresponding to the USB device; The third remote control command is sent remotely to the isolation detection module, which in turn calls the corresponding device driver according to the third remote control command to establish communication between the isolation detection module and the USB device. When the isolation detection module is communicating with the USB device, it receives a call signal for the second remote control command, retrieves the corresponding second remote control command, and wirelessly sends it to the isolation detection module. This allows it to obtain the difference data before and after each execution of the second remote control command by the isolation detection module on the USB device. The difference data is related to the data before and after the USB device is connected. ; Judging the difference data Whether the acquisition conditions are met, including whether the trend of the difference values ​​in the difference data tends to be stable, and the number of times the difference data is acquired when the trend of the difference values ​​tends to be stable. More than the set number of times ; If yes, the risk index of the USB device is evaluated based on the difference data , the number of kinds of difference data , the number of acquisition times , and the corresponding weight of each difference data . ; When the risk index is greater than the first risk index threshold value, the USB device is not allowed to be accessed as the second analysis result. When the risk index is less than the second risk index threshold value, the USB device is allowed to be accessed as the second analysis result.

[0058] In the process of analyzing whether the USB device can access the computer operating system, the user can also initiate a second remote control instruction to the computer operating system according to the needs after the communication between the isolation detection module and the USB device is established through the third remote control instruction. Then, the computer operating system sends the second remote control instruction to the isolation detection module, so that the second remote control instruction is executed on the USB device through the isolation detection module to obtain the difference data before and after each execution of the second remote control instruction on the USB device. And in each execution process, since the difference value trend stability of the difference data , the number of acquisition times of each difference data is unknown, it can be further judged whether the difference data satisfies the acquisition condition of the risk index of the related USB device. If all satisfy, the risk index can be calculated directly based on the difference data , the number of kinds of difference data , the number of acquisition times , and the corresponding weight of each difference data , and the formula can be represented as , so as to judge whether the USB device is not allowed to be accessed into the computer operating system by using the numerical value of the risk index . Through the above user self-checking mode, the risk index of the USB device can also be evaluated, so that when the risk index of the USB device meets the requirements, the access of the USB device to the computer operating system is ensured, and the data security of the computer operating system when communicating with the USB device such as USB storage device is ensured.

[0059] ​​Referring to 3, the application further provides a USB device identification access system 11 based on a computer operating system, applied to the computer operating system, comprising: an acquisition unit 111, configured to acquire an access signal of a USB interface to a USB device; a connection attempt unit 112, configured to sequentially call each preset trusted driver in a common driver library to attempt connection with the USB device according to the access signal, to acquire an attempt result, wherein the common driver library comprises a plurality of preset trusted drivers; a communication control unit 113, configured to, when the attempt result is that the USB device is matched and connected with the corresponding preset trusted driver, maintain the preset trusted driver and the USB device for continued communication according to the access signal; and an analysis and configuration unit 114, configured to, when the attempt result is that the USB device cannot be matched with the preset trusted driver, perform isolation analysis on the trustworthiness of the USB device, generate an analysis result, and control the configuration of the corresponding driver and access environment based on the analysis result, to complete the identification and access of the USB device.

[0060] It should be noted that the USB device identification access system 11 based on the computer operating system provided in the above embodiment and the USB device identification access method based on the computer operating system provided in the above embodiment belong to the same concept, wherein the specific manner in which each module and unit performs operations has been described in detail in the method embodiment, which will not be repeated here. The USB device identification access system 11 based on the computer operating system provided in the above embodiment can be applied in actual application, and the above functions can be completed by different functional modules according to needs, i.e., the internal structure of the device is divided into different functional modules to complete all or part of the functions described above, and this is not limited herein.

[0061] Referring to Figure 4 , the electronic device 1 can include a memory 12, a processor 13 and a bus, and can further include a computer program stored in the memory 12 and executable on the processor 13, such as a USB device identification access program based on a computer operating system.

[0062] The memory 12 comprises at least one type of readable storage medium, such as a flash memory, a mobile hard disk, a multimedia card, a card-type memory (e.g., an SD or DX memory), a magnetic memory, a disk, an optical disk, etc. In some embodiments, the memory 12 can be an internal storage unit of the electronic device 1, such as a mobile hard disk of the electronic device 1. In other embodiments, the memory 12 can also be an external storage device of the electronic device 1, such as a plug-in mobile hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. Further, the memory 12 can comprise both an internal storage unit and an external storage device of the electronic device 1. The memory 12 can be used to store application software and various data installed in the electronic device 1, such as codes for USB device recognition access based on a computer operating system, and to temporarily store data that has been output or will be output.

[0063] The processor 13 can comprise an integrated circuit in some embodiments, such as a single packaged integrated circuit or a plurality of packaged integrated circuits with the same or different functions, including one or more combinations of a central processing unit (CPU), a microprocessor, a digital processing chip, a graphics processor, and various control chips. The processor 13 is a control unit of the electronic device 1, which connects various components of the electronic device 1 through various interfaces and lines, executes programs or modules (e.g., a USB device recognition access program based on a computer operating system) stored in the memory 12, and calls data stored in the memory 12, to perform various functions and process data of the electronic device 1.

[0064] The processor 13 executes an operating system and various application programs installed in the electronic device 1. The processor 13 executes the application programs to implement the steps in the above-described USB device recognition access method based on a computer operating system.

[0065] For example, the computer program can be divided into one or more modules stored in the memory 12 and executed by the processor 13 to complete the present application. The one or more modules can be a series of computer program instruction segments capable of completing a specific function, which are used to describe the execution process of the computer program in the electronic device 1. For example, the computer program can be divided into units in the USB device recognition access system based on a computer operating system.

[0066] The integrated unit in the form of the software function module can be stored in a computer readable storage medium, which can be non-volatile or volatile. The software function module is stored in a storage medium, and includes a plurality of instructions for enabling a computer device (which can be a personal computer, a computer device, or a network device) or a processor to execute part of the functions of the USB device identification and access method based on a computer operating system according to various embodiments of the present application.

[0067] In summary, the USB device identification and access method and system based on a computer operating system disclosed by the present application can effectively realize quick matching of a trusted USB device based on a trusted preset trusted driver, thereby ensuring the communication security between the computer operating system and the USB device by sequentially calling each preset trusted driver in the common driver library to attempt to connect with the USB device after the USB device is accessed through the USB interface. Then, when no corresponding preset trusted driver is found in the common driver library, the risk indicators of the USB device can be analyzed and evaluated by using the isolation detection module to isolate the access, and then the access security of the USB device to the computer operating system is determined based on the risk indicators, and when the security is confirmed, the USB device is securely accessed to the computer operating system by calling the corresponding device driver, thereby effectively improving the data security of the computer operating system when the USB device is accessed. Therefore, the present application effectively overcomes the various shortcomings in the prior art and has high industrial utilization value.

[0068] The above embodiments only exemplarily illustrate the principles and effects of the present application, and are not used to limit the present application. Any person skilled in the art can modify or change the above embodiments without departing from the spirit and scope of the present application. Therefore, all equivalent modifications or changes completed by those skilled in the art without departing from the spirit and technical thought disclosed by the present application should be covered by the claims of the present application.

Claims

1. A method for identifying and connecting USB devices based on a computer operating system, characterized in that, Applied to the computer operating system, including: Obtain the USB interface's connection signal to the USB device; Based on the access signal, each preset trusted driver in the shared driver library is sequentially invoked to attempt to connect to the USB device in order to obtain the attempt result. The shared driver library includes multiple preset trusted drivers. When the attempt results in the USB device matching and connecting with the corresponding preset trusted driver, the communication between the preset trusted driver and the USB device is maintained according to the access signal; When the attempt results in the USB device not matching the preset trusted driver, the trustworthiness of the USB device is isolated and analyzed to generate analysis results. Based on the analysis results, the corresponding driver and access environment are configured to complete the identification and access of the USB device.

2. The USB device identification and access method based on a computer operating system according to claim 1, characterized in that, Based on the access signal, each preset trusted driver in the shared driver library is sequentially invoked to attempt a connection with the USB device to obtain the attempt results, including: The operation request of the USB device is detected based on the access signal; Based on the operation request, the calling module searches the common driver library for several preset trusted drivers that cover the calling scope corresponding to the operation request, and uses them as adaptation drivers. The operation request is attempted to connect to the USB device through each of the adapter drivers to obtain the attempt results.

3. The USB device identification and access method based on a computer operating system according to claim 2, characterized in that, The operation request includes a first operation request initiated by the computer operating system to the USB device; Based on the operation request, the calling module searches the shared driver library for several preset trusted drivers that cover the calling scope corresponding to the operation request, and uses them as adaptation drivers, including: When the operation request is detected to be a first operation request initiated to the USB device, the first operation request is analyzed to extract multiple requirement information corresponding to the driver requirements. Calculate the matching degree of each of the aforementioned requirement information corresponding to the same preset trusted driver. ; Based on the matching degree corresponding to each of the aforementioned demand information The index factors corresponding to the aforementioned demand information The comprehensive matching index of the same preset trusted driver is calculated. ; For all the aforementioned preset trusted drivers and their corresponding comprehensive matching metrics Construct a comprehensive matching index set ; Determine the comprehensive matching index set Each of the comprehensive matching indicators mentioned above Has the indicator threshold been reached? : If so, it means that the corresponding preset trusted driver covers the calling scope corresponding to the operation request, and the corresponding preset trusted driver is used as the adapter driver; If not, it means that the corresponding preset trusted driver cannot cover the calling scope corresponding to the operation request, and the corresponding preset trusted driver will be discarded.

4. The USB device identification and access method based on a computer operating system according to claim 3, characterized in that, The operation request is attempted to connect to the USB device through each of the adapter drivers to obtain the attempt results, including: Based on the comprehensive matching index corresponding to each of the aforementioned adapter drivers The size is used to sort the adapter drivers to obtain an adapter driver sequence; Each of the adapter drivers in the adapter driver sequence is selected sequentially to send the first operation request to the USB device; The feedback information from the USB device is received, and the feedback information is split into multiple split information, wherein each of the split information corresponds to each of the demand information corresponding to the first operation request. Each of the breakdown information in the feedback information is compared with the corresponding demand information; If the feedback information and the demand information match each other, then the USB device is matched and connected with the corresponding adapter driver as the result of the attempt; If at least one of the feedback messages does not match the corresponding requirement information, then the inability of the USB device to match the corresponding adapter driver is taken as the result of the attempt.

5. The USB device identification and access method based on a computer operating system according to claim 2, characterized in that, The operation request includes a second operation request initiated by the USB device to the computer operating system; when the operation request is the second operation request, all the preset trusted drivers are used as the adapter drivers. The operation request is attempted to connect to the USB device through each of the adapter drivers to obtain the attempt results, including: The second operation request is sent to each of the adapter drivers respectively, and the corresponding execution result data is obtained through the preset trusted driver. Determine whether the execution result data belongs to a security instruction; If so, then the USB device is matched and connected with the adapter driver corresponding to the execution result data as the attempt result; If not, the result of the attempt is that the USB device and the adapter driver are incompatible.

6. The USB device identification and access method based on a computer operating system according to claim 5, characterized in that, Determining whether the execution result data belongs to a safe instruction includes: The execution result data is compared with the security instructions under the corresponding adapter driver to obtain a similarity value. Construct a similarity set ; Find the similarity set Maximum similarity value ; Determine the maximum similarity value Is it greater than the similarity threshold of the corresponding security instruction? ; If so, it means that the execution result data belongs to a safe instruction; If not, it means that the execution result data does not belong to a security instruction.

7. The USB device identification and access method based on a computer operating system according to claim 1, characterized in that, The USB device is subjected to a trustworthiness isolation analysis, and the analysis results are generated, including: The USB device is transferred to the isolation detection module, wherein the isolation detection module is used to receive remote control instructions issued by the computer operating system. The remote control instructions include a first remote control instruction for retrieving device information, a second remote control instruction for remotely verifying and controlling the isolation detection module, and a third remote control instruction for remotely calling and controlling the device driver of the isolation detection module. Send the first remote control command to the isolation detection module; The isolation detection module scans the printing device information of the USB device to obtain the scanning device information of the USB device, wherein the printing device information is obtained by the isolation detection module through printing after retrieving the device information of the USB device according to the first remote control command; Based on the policy information in the policy rule information database, determine whether there is corresponding policy information that is consistent with the scanning device information; If so, then the USB device is determined to be allowed to be connected as the first analysis result; If not, the USB device is further analyzed using the isolation detection module via the second remote control command to generate a second analysis result.

8. The USB device identification and access method based on a computer operating system according to claim 7, characterized in that, The USB device is further analyzed using the isolation detection module via a second remote control command to generate a second analysis result, including: Configure the corresponding third remote control command based on the device information corresponding to the USB device; The third remote control command is remotely sent to the isolation detection module, wherein the isolation detection module calls the corresponding device driver according to the third remote control command to establish communication between the isolation detection module and the USB device; When the isolation detection module is communicating with the USB device, according to a preset security verification strategy, a second remote control command is wirelessly sent to the isolation detection module in sequence to obtain the difference data before and after the isolation detection module executes the second remote control command on the USB device each time. The difference data is data related to the USB device before and after it is connected. Based on the aforementioned difference data The difference data Number of types and the difference data for each item Corresponding weight Assess the risk indicators of the USB device. ,in, This is the cumulative value of the difference data; When the risk indicators If the value exceeds the first risk indicator threshold, then the USB device will not be allowed to be connected as the second analysis result. When the risk indicators If the value is less than the second risk indicator threshold, then allowing the USB device to be connected is taken as the second analysis result.

9. The USB device identification and access method based on a computer operating system according to claim 7, characterized in that, The USB device is further analyzed using the isolation detection module via a second remote control command to generate a second analysis result, including: Configure the corresponding third remote control command based on the device information corresponding to the USB device; The third remote control command is remotely sent to the isolation detection module, wherein the isolation detection module calls the corresponding device driver according to the third remote control command to establish communication between the isolation detection module and the USB device; When the isolation detection module is communicating with the USB device, it receives a call signal for the second remote control command, retrieves the corresponding second remote control command, and wirelessly sends it to the isolation detection module. This is to obtain the difference data before and after each execution of the second remote control command by the isolation detection module on the USB device, wherein the difference data is data related to the USB device before and after connection. ; Determine the difference data Whether the acquisition conditions are met, wherein the acquisition conditions include the trend of the difference value of the difference data tending to be stable, and the number of times the difference data is acquired when the trend of the difference value tends to be stable. More than the set number of times ; If so, then based on the difference data The difference data Number of types The number of times to obtain and the difference data for each item Corresponding weight Assess the risk indicators of the USB device. ; When the risk indicators If the value exceeds the first risk indicator threshold, then the USB device will not be allowed to be connected as the second analysis result. When the risk indicators If the value is less than the second risk indicator threshold, then allowing the USB device to be connected is taken as the second analysis result.

10. A USB device identification and access system based on a computer operating system, characterized in that, Applied to the computer operating system, including: The acquisition unit is used to acquire the access signal from the USB interface to the USB device. A connection attempt unit is configured to sequentially call each preset trusted driver in the shared driver library to attempt a connection with the USB device based on the access signal, so as to obtain the attempt result, wherein the shared driver library includes multiple preset trusted drivers; A communication control unit, configured to, when the attempt results in the USB device matching and connecting with a corresponding preset trusted driver, maintain continued communication between the preset trusted driver and the USB device based on the access signal; and The analysis and configuration unit is used to perform a trustworthiness isolation analysis on the USB device when the attempt result shows that the USB device cannot be matched with the preset trusted driver, generate an analysis result, and control the configuration of the corresponding driver and access environment based on the analysis result to complete the identification and access of the USB device.

Images