U disk-based network attached storage software deployment method, device and equipment

Abstract

The embodiment of the application provides a kind of based on the network attached storage software deployment method, device and equipment of U disk, which comprises: in the case where U disk is accessed and terminal equipment has installed network attached storage software, the equipment information of terminal equipment is collected, the encrypted equipment information is obtained by encrypting equipment information, and the encrypted equipment information is transmitted to U disk;In the case where encrypted identity information is received, the identity information is obtained by decrypting encrypted identity information, and the identity information is split into sequence information and first check code, the second check code is calculated by checking sequence information, in the case where first check code and second check code are identical, it is determined that check is passed;In the case where activation information is received, the client use right of network attached storage software is activated based on activation information.The scheme realizes that special U disk is used as only activation voucher on physical level, realizes the bidirectional authentication of U disk and terminal equipment.

Description

TECHNICAL FIELD

[0001] Embodiments of the present application relate to the technical field of computer, and in particular, to a network attached storage software deployment method, device and equipment based on a U disk. BACKGROUND

[0002] In the digital era, multimedia data (photos, videos, documents, etc.) under various application scenarios is growing explosively, and problems such as scattered data storage, inconvenient sharing, and difficult remote access are increasingly prominent. Traditional local storage methods (such as hard disk partitioning) have defects such as serious data fragmentation, weak cross-device collaboration capability, and lack of security protection mechanism; while public cloud storage faces risks such as privacy leakage, limited transmission bandwidth, and high long-term subscription costs, and is difficult to meet the core needs of users for centralized management, safe and controllable, and efficient sharing of data. Therefore, network attached storage technology has become a key technical link in the field of data storage and sharing, and its core goal is to realize centralized management of scattered data, cross-terminal interconnection and remote convenient access under the premise of ensuring data security and reliability, reduce storage and operation and maintenance costs, and improve data sharing and access efficiency, laying a foundation for efficient data management of individuals, families and small office scenarios.

[0003] In related technologies, in order to eliminate the hardware binding limitation of network attached storage products, pure software installation type, system integration type, etc. can be used for deployment of network attached storage software. However, the foregoing methods rely on software passwords or system accounts for identity verification, are vulnerable to brute force cracking or tampering, and have a high risk of data leakage, which needs to be improved. SUMMARY

[0004] Embodiments of the present application provide a network attached storage software deployment method, device and equipment based on a U disk, which solves the problem that the deployment of network attached storage software in related technologies relies on software passwords or system accounts for identity verification, is vulnerable to brute force cracking or tampering, and has a high risk of data leakage, and builds a "physical key" + "software authentication" dual system, uses a special U disk as the only activation credential on the physical layer, realizes two-way authentication of the U disk and the terminal device, reduces the risk of data leakage, improves data security, and has high flexibility of software deployment.

[0005] In a first aspect, embodiments of the present application provide a network attached storage software deployment method based on a U disk, which comprises:

[0006] In a case that the U disk is detected to be accessed and the terminal device has installed the network attached storage software, device information of the terminal device is collected, the device information is encrypted to obtain encrypted device information, and the encrypted device information is transmitted to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in a case that the device information meets a legal condition, pre-generated identity identification information is encrypted to obtain encrypted identity identification information, and the encrypted identity identification information is fed back to the terminal device;

[0007] In a case that the encrypted identity identification information is received, the encrypted identity identification information is decrypted to obtain the identity identification information, and the identity identification information is split into sequence information and a first check code, a second check code is calculated by checking the sequence information, in a case that the first check code and the second check code are same, it is determined that the checking is passed, so that the U disk feeds back activation information to the terminal device;

[0008] In a case that the activation information is received, the client use right of the network attached storage software is activated based on the activation information, for data sharing transmission.

[0009] In a second aspect, the embodiments of the present application further provide a network attached storage device based on a U disk, comprising:

[0010] A first U disk authentication module is configured to, in a case that the U disk is detected to be accessed and the terminal device has installed the network attached storage software, collect device information of the terminal device, encrypt the device information to obtain encrypted device information, and transmit the encrypted device information to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in a case that the device information is legal, pre-generated identity identification information is encrypted to obtain encrypted identity identification information, and the encrypted identity identification information is fed back to the terminal device;

[0011] A first device authentication module is configured to, in a case that the encrypted identity identification information is received, decrypt the encrypted identity identification information to obtain the identity identification information, and split the identity identification information into sequence information and a first check code, calculate a second check code by checking the sequence information, in a case that the first check code and the second check code are same, it is determined that the checking is passed, so that the U disk feeds back activation information to the terminal device;

[0012] A first software enabling module is configured to, in a case that the activation information is received, activate the client use right of the network attached storage software based on the activation information, for data sharing transmission.

[0013] In a third aspect, an electronic device is provided, and the device includes:

[0014] one or more processors;

[0015] a storage device configured to store one or more programs,

[0016] When the one or more programs are executed by the one or more processors, the one or more processors implement the U disk-based network attached storage software deployment method described in the embodiments of the present application.

[0017] In a fourth aspect, a non-volatile storage medium storing computer executable instructions is provided, and the computer executable instructions, when executed by a computer processor, are configured to perform the U disk-based network attached storage software deployment method described in the embodiments of the present application.

[0018] In the embodiments of the present application, through device information encrypted transmission and U disk side legality determination, illegal terminal devices can be effectively filtered, and the risk of network attached storage software being enabled by unauthorized devices can be avoided; through identity information decryption splitting and verification code comparison, the integrity and authenticity of the identity certificate are guaranteed; through the automatic linkage of U disk access and network attached storage software activation, the operation convenience and security are improved. The above-mentioned scheme constructs a "physical key" + "software authentication" dual system, uses a special U disk as the only activation certificate on the physical layer, realizes the bidirectional authentication of the U disk and the terminal device, reduces the data leakage risk, improves the data security, and has high flexibility of software deployment. BRIEF DESCRIPTION OF DRAWINGS

[0019] Figure 1 A flowchart of a U disk-based network attached storage software deployment method provided by the embodiments of the present application is provided;

[0020] Figure 2 A flowchart of a process of calculating a second verification code provided by the embodiments of the present application is provided;

[0021] Figure 3 A flowchart of a network attached storage software deployment method provided by the embodiments of the present application is provided, and the method includes installing network attached storage software;

[0022] Figure 4 A flowchart of a network attached storage software deployment method provided by the embodiments of the present application is provided, and the method includes enabling a file sharing function;

[0023] Figure 5 A flowchart of a network attached storage software deployment method provided by the embodiments of the present application is provided, and the method includes exiting the U disk;

[0024] Figure 6A flow chart of another network-attached storage software deployment method provided by the embodiment of the present application;

[0025] Figure 7 A flow chart of a process of generating identity information provided by the embodiment of the present application;

[0026] Figure 8 A structural block diagram of a network-attached storage device based on a U disk provided by the embodiment of the present application;

[0027] Figure 9 A structural schematic diagram of an electronic device provided by the embodiment of the present application. DETAILED DESCRIPTION

[0028] The embodiment of the present application will be further described in detail below in combination with the drawings and embodiments. It can be understood that the specific embodiments described herein are only used to explain the embodiment of the present application, but not to limit the embodiment of the present application. In addition, it should be noted that, for the convenience of description, only the parts related to the embodiment of the present application are shown in the drawings, but not all the structures.

[0029] The terms "first", "second", and the like in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be exchanged under appropriate circumstances, so that the embodiment of the present application can be implemented in an order other than that illustrated or described herein, and the objects distinguished by "first", "second", etc. are usually a class, and do not limit the number of objects, for example, the first object can be one or more. In addition, "and / or" in the specification and claims means at least one of the connected objects, and the character " / ", generally indicates that the front and rear associated objects are in an "or" relationship.

[0030] The U disk-based network-attached storage software deployment method provided by the embodiment of the present application, the execution subject of each step can be a computer device, which refers to any electronic device with data computing, processing and storage capabilities, such as mobile phones, PC (Personal Computer), tablet computers and other terminal devices, and the embodiment of the present application does not limit this.

[0031] Figure 1 A flow chart of a U disk-based network-attached storage software deployment method provided by the embodiment of the present application, the network-attached storage software deployment method is applied to a terminal device, such as Figure 1 As shown in the figure, the U disk-based network-attached storage software deployment method specifically includes the following steps:

[0032] In step S101, in the case that the U disk is detected to be accessed and the terminal device has installed the network attached storage software, device information of the terminal device is collected, the device information is encrypted to obtain encrypted device information, and the encrypted device information is transmitted to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in the case that the device information meets a legal condition, pre-generated identity identification information is encrypted to obtain encrypted identity identification information, and the encrypted identity identification information is fed back to the terminal device.

[0033] The core functions of the network attached storage software include file sharing, data backup, remote access, permission management, and the like, and the network attached storage software can be applied to different storage scenes such as home and office. The embodiments of the present application do not need to rely on special NAS hardware, but directly use idle terminal devices (for example, desktop computers, notebook computers, and the like) in the home or office scene to deploy the network attached storage software, and only needs the special U disk to complete the authentication process of steps S101-S102 to use the related services, which can reduce the use threshold of the network attached storage technology. Moreover, the U disk can be bound to multiple terminal devices, the user can switch the hardware carrier of the network attached storage software according to the scene requirement, and meanwhile, the U disk has portability, which can facilitate temporary deployment of the network attached storage software on the terminal device in a different place, and realize temporary sharing and management of data.

[0034] Specifically, after detecting the access of the U disk, the terminal device can first determine whether the network attached storage software is installed. The terminal device can determine whether the network attached storage software is installed through system service query, software installation directory detection, or registry key value verification. In the case where the network attached storage software is installed, the network attached storage software is started, and the device information of the terminal device is collected, which can include computer motherboard information, system version, device name, disk capacity, etc. It should be understood that the device information can be regarded as the unique identification data of the terminal device, and serves as the core basis for determining the legality of the device. In order to improve the security of the data, the terminal device can encrypt the collected device information. The specific encryption method can be symmetric encryption (such as AES-256) or asymmetric encryption (such as RSA-2048). In an embodiment, the AES key can be written in the secure storage area of the terminal device in advance, and the same AES key can be written in the firmware encryption storage area of the U disk. When interacting, the terminal device and the U disk can directly call the pre-stored symmetric key for encryption or decryption. In an embodiment, the U disk can generate an RSA key pair by a special device when it is manufactured, the private key is written in the firmware secure storage area of the U disk, and the public key is exported and stored in the secure storage area of the terminal device. Of course, a hybrid encryption method of AES and RSA can also be used. The terminal device generates a temporary AES session key, encrypts the session key using the public key provided by the U disk, and transmits the encrypted session key to the U disk. The U disk uses the private key to obtain the session key, and the terminal device and the U disk can use the session key for data encryption transmission. Therefore, the specific encryption method is not limited in the present application, and can be selected adaptively according to the specific application scenario.

[0035] After the terminal device encrypts the device information to obtain encrypted device information, the terminal device can transmit the encrypted device information to the U disk for device identity verification. Specifically, after the U disk decrypts the encrypted device information to obtain the device information, the U disk can verify the device information. Specifically, the device information can be compared with a preset device list to determine whether the device information meets the legal condition. If the device information is recorded in the preset device list, it is determined that the device information meets the legal condition. If the device information is not recorded in the preset device list, it is determined that the device information does not meet the legal condition. It should be understood that the preset device list can be regarded as a white list of authorized devices, and the U disk can bind multiple terminal devices. After the U disk confirms that the device information is legal, the U disk can read the pre-generated identity information, encrypt the identity information to obtain encrypted identity information, and feed back the encrypted identity information to the terminal device for identity verification of the U disk by the terminal device.

[0036] Step S102, in the case of receiving the encrypted identity information, the encrypted identity information is decrypted to obtain the identity information, and the identity information is split into sequence information and a first check code, the sequence information is checked to obtain a second check code, and in the case of the first check code and the second check code being the same, it is determined that the check is passed, so that the U disk feeds back the activation information to the terminal device.

[0037] The identity information can be a unique authorization identification built in the U disk, which is used for the terminal device to identify the legal identity of the U disk. In order to avoid being intercepted and forged in the transmission process, the U disk can encrypt the identity information to be transmitted to obtain encrypted identity information, so as to improve the security. Therefore, after the terminal device receives the encrypted identity information, the encrypted identity information can be decrypted to obtain the original identity information, and then the identity information is parsed. It should be noted that the identity information can be composed of two parts, one is sequence information, and the other is a first check code. The sequence information can be the main object to be checked, and the first check code can be a check value generated by the U disk side in advance and transmitted together with the sequence information. Therefore, the terminal device can split the identity information according to the combination rule of the sequence information and the first check code to obtain the sequence information and the first check code. After obtaining the sequence information, the sequence information can be checked to obtain a second check code, which can be a hash algorithm, a cyclic redundancy check algorithm, etc. Herein, the present application is not limited. In the case of the first check code and the second check code being the same, the terminal device can confirm that the U disk passes the identity authentication, and receives the activation information sent by the U disk. Thus, through steps S101 and S102, the terminal device and the U disk can complete the mutual authentication, and enter the subsequent software use process.

[0038] Optionally, Figure 2 A flow chart of a process for calculating the second check code provided by the embodiment of the present application is shown in Figure 2 The specific implementation process of checking the sequence information to obtain the second check code includes the following steps:

[0039] Step S1021, the sequence information is spliced with a preset string to obtain a target string, and the target string is converted into a byte array.

[0040] The sequence information can be core effective data split from the decrypted plaintext identity information of the terminal device, is the core subject of the current verification calculation, and is also the original core data for generating the first verification code on the U disk side. The preset string can be a fixed, secret and unmodifiable character content pre-stored by the terminal device and the U disk in the authorization stage, which can be referred to as a salt value string or a fixed verification factor, and specifically serves as fixed supplementary data for the current splicing operation. The sequence information and the preset string can be spliced according to a fixed order agreed in advance. After obtaining the target string, the target string can be converted into a byte array, which can be an ordered data set composed of a plurality of bytes as a basic unit according to a unified character encoding format (for example, UTF-8 encoding, ASCII encoding, etc.) agreed by the terminal and the U disk. The byte data can be used as input data for subsequent cyclic redundancy check calculation.

[0041] Step S1022, performing cyclic redundancy check calculation on the byte array to obtain a second verification code.

[0042] The cyclic redundancy check calculation can be a specific binary modulo 2 division operation on the input byte array, and the remainder obtained by the operation is used as the final verification result, that is, the second verification code. The second verification code is a fixed-length check value, which can be used as the core basis for consistency comparison with the first verification code. It should be noted that only a legally paired terminal device and a U disk can generate consistent two verification codes, thereby effectively verifying the integrity of the U disk identity certificate.

[0043] Step S103, in the case of receiving the activation information, activating the client usage right of the network attached storage software based on the activation information, for data sharing transmission.

[0044] The activation information can be an authorization credential of the network attached storage software, and can specifically include information such as a one-time or time-limited authorization code. After receiving the activation information, the client usage right of the network attached storage software can be activated directly based on the activation information, for example, the authorization credential in the activation information is input into the network attached storage software to normally enable the complete function of the client of the network attached storage software. The network attached storage software can mount a local storage medium, which can include a computer internal disk, an external mobile hard disk, or an additional USB storage card slot, which is not limited herein. It should be noted that when the storage capacity or computing performance of the network attached storage software needs to be improved, the user does not need to replace the entire system, but only needs to upgrade the hard disk, memory and other hardware of the related terminal device, so that the upgrade cost is controllable; if the current terminal device fails, it can be directly replaced with other terminal devices, and the U disk can be inserted to restore the service. It can be understood that the embodiment constructs a three-layer security protection system of "physical key + two-way authentication + data encryption": the U disk serves as a physical activation key, and the U disk can be inserted or removed to realize the start-stop control of the network attached storage software, which cuts off the possibility of illegal access from the physical layer; the two-way authentication mechanism between the U disk and the terminal device can ensure that only authorized devices can run the network attached storage service; the algorithm encryption and permission management of data can further protect the privacy of data.

[0045] The above-mentioned device information encryption transmission and U disk side legality judgment can effectively filter illegal terminal devices and avoid the risk of unauthorized devices activating the network attached storage software; the identity information decryption splitting and the check code comparison can ensure the integrity and authenticity of the identity credential; the automatic linkage of the U disk access and the network attached storage software activation can improve the operation convenience and security. The above-mentioned scheme constructs a dual system of "physical key" + "software authentication", uses a special U disk as the only activation credential on the physical layer, realizes the two-way authentication between the U disk and the terminal device, reduces the data leakage risk, improves the data security, and has high flexibility of software deployment.

[0046] Figure 3 A flowchart of a network attached storage software deployment method provided by an embodiment of the present application including a process of installing network attached storage software is shown in FIG. 1. Figure 3 The U disk-based network attached storage software deployment method specifically includes the following steps.

[0047] Step S301, in the case that the U disk is detected to be accessed and the terminal device has installed the network attached storage software, device information of the terminal device is collected, the device information is encrypted to obtain encrypted device information, and the encrypted device information is transmitted to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in the case that the device information meets the legal condition, pre-generated identity identification information is encrypted to obtain encrypted identity identification information, and the encrypted identity identification information is fed back to the terminal device.

[0048] Step S302, in the case that the encrypted identity identification information is received, the encrypted identity identification information is decrypted to obtain identity identification information, and the identity identification information is split into sequence information and a first check code, the sequence information is checked to obtain a second check code, in the case that the first check code and the second check code are the same, it is determined that the check is passed, so that the U disk feeds back activation information to the terminal device.

[0049] Step S303, in the case that the activation information is received, the client use right of the network attached storage software is activated based on the activation information, for data sharing transmission.

[0050] Step S304, in the case that the U disk is detected to be accessed and the network attached storage software is not installed, an installation package of the network attached storage software is obtained from the U disk, or a software download address is obtained from the U disk, and the installation package of the network attached storage software is obtained based on the software download address.

[0051] In the case that the terminal device accesses the U disk for the first time, the terminal device does not install the network attached storage software, and thus it is detected that the network attached storage software is not installed. In a possible implementation, the U disk can be built-in with an installation package of the network attached storage software, the installation package can be a complete compressed file package containing all program files, installation scripts, configuration information and dependent components of the network attached storage software, and can be used to install the network attached storage software. In a possible implementation, the U disk can provide a software download address, which can be a unique network address of a storage server of the installation package of the network attached storage software, and the terminal device can download the installation package from the specified server through the software download address.

[0052] Step S305, the network attached storage software is installed based on the installation package, and the network attached storage software is started, for data sharing transmission.

[0053] According to the script instruction built in the installation package, the program files, configuration files and dependent components of the network attached storage software can be deployed to a specified storage directory of the terminal device, and the system service is registered and the start entry is created. After the network attached storage software is started, the user can select the mounting of the local storage medium, and utilize the network attached storage software for data sharing transmission.

[0054] The software installation resource provided by the U disk can solve the problem that the terminal device without the network attached storage software cannot enable the function, ensure that the legal terminal device can obtain and install the compliant network attached storage software, and guarantee the security of software use and data sharing.

[0055] Figure 4 A flowchart of a network attached storage software deployment method provided by an embodiment of the present application and containing an enabling file sharing function process is shown in Figure 4 The U disk-based network attached storage software deployment method specifically includes the following steps:

[0056] In step S401, when the U disk is detected to be connected and the terminal device has installed the network attached storage software, the device information of the terminal device is collected, the device information is encrypted to obtain encrypted device information, and the encrypted device information is transmitted to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in the case that the device information meets the legal conditions, the pre-generated identity information is encrypted to obtain encrypted identity information, and the encrypted identity information is fed back to the terminal device.

[0057] In step S402, when the encrypted identity information is received, the encrypted identity information is decrypted to obtain the identity information, and the identity information is split into sequence information and a first check code. The sequence information is checked to obtain a second check code. In the case that the first check code and the second check code are the same, it is determined that the check is passed, so that the U disk feeds back activation information to the terminal device.

[0058] In step S403, when the activation information is received, the client use right of the network attached storage software is activated based on the activation information for data sharing transmission.

[0059] In step S404, when the file sharing function of the network attached storage software is triggered, the to-be-transferred file is obtained from the mounted local storage medium.

[0060] The mounted local storage medium can be a storage medium that has been recognized by the network attached storage software and included in the management range, and is a storage carrier of the to-be-transferred file. The to-be-transferred file can be target data required by the user for sharing or backup. The network attached storage software can read the to-be-transferred file obtained from the local storage medium through a standardized storage access interface.

[0061] In step S405, the to-be-transferred file is sent to the target terminal device through a preset network link by the network attached storage software, or the to-be-transferred file is backed up to an external mobile storage medium by the network attached storage software.

[0062] The preset network link can be a pre-configured, encrypted exclusive data transmission channel between the network attached storage software and the target terminal device. The link type of the specific preset network link can support a local area network, a virtual private link, an encrypted wide area network, the Internet, and the like. The target terminal device can be a legally authorized terminal that receives the file to be transmitted, and is a receiving party of file sharing. In addition to sending the file to be transmitted to the target terminal device through the preset network link, in some application scenarios, the file to be transmitted can also be backed up to an external mobile storage medium. The external mobile storage medium can be an external storage device newly connected to the terminal device after the network attached storage software is started, and is used for backing up files, and can be other U disks, mobile hard disks, or memory cards.

[0063] According to the above, the two file processing modes of network sharing and offline backup can be flexibly selected according to actual needs, which can not only meet the needs of real-time data interaction of multiple terminals, but also realize offline disaster recovery of data, and give consideration to operation convenience and data security.

[0064] Figure 5 A flowchart of a network attached storage software deployment method containing a process of exiting a U disk provided by an embodiment of the present application is shown in FIG. 1, which is a U disk-based network attached storage software deployment method, and specifically includes the following steps: Figure 5

[0065] Step S501: In the case where the U disk is detected to be connected and the terminal device has installed the network attached storage software, device information of the terminal device is collected, the device information is encrypted to obtain encrypted device information, and the encrypted device information is transmitted to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in the case where the device information meets legal conditions, pre-generated identity identification information is encrypted to obtain encrypted identity identification information, and the encrypted identity identification information is fed back to the terminal device.

[0066] Step S502: In the case where the encrypted identity identification information is received, the encrypted identity identification information is decrypted to obtain identity identification information, and the identity identification information is split into sequence information and a first check code, the sequence information is checked to obtain a second check code, in the case where the first check code and the second check code are the same, it is determined that the check is passed, so that the U disk feeds back activation information to the terminal device.

[0067] Step S503: In the case where the activation information is received, the client usage right of the network attached storage software is activated based on the activation information, and is used for data sharing transmission.

[0068] Step S504: In the case where the U disk is detected to be disconnected, the access right of the network attached storage software is disconnected, and the enabled service process is stopped. ​

[0069] If the U disk is detected to be unplugged, it can be considered that the terminal device is physically disconnected with the U disk, and then the subsequent mandatory security operation needs to be triggered. First, the access permission of the network attached storage software needs to be disconnected to recover all data access entrances provided by the network attached storage software to the outside and prohibit any access shared service permission control operation. Moreover, the enabled service process needs to be stopped, which can be a set of background processes supporting the core function started by the network attached storage software when running.

[0070] Step S505, clearing the cache data in the memory.

[0071] The network attached storage software generates non-persistent data temporarily stored in the terminal memory during running, and thus the cache data in the memory needs to be cleared to release the occupied cache space.

[0072] After the U disk is detected to be unplugged, the permission is disconnected and the process is terminated in a timely manner, the physical key function of the U disk as the only activation credential can be realized, and the risk of illegal access and data leakage is eliminated. Moreover, the cache data in the memory is cleared in a timely manner, and the terminal resource occupation is optimized.

[0073] Figure 6 Another flowchart of a network attached storage software deployment method provided by the embodiment of the application is provided, and the network attached storage software deployment method is applied to a U disk. As shown in the figure, the U disk-based network attached storage software deployment method specifically includes the following steps: Figure 6 As shown in the figure, the U disk-based network attached storage software deployment method specifically includes the following steps:

[0074] Step S601, in the case where the encrypted device information sent by the terminal device is received, the device information is obtained by decrypting the encrypted device information, and the device information is compared with a preset device list to determine whether the device information meets a legal condition.

[0075] After the U disk is inserted into the terminal device, the U disk receives the encrypted device information sent by the terminal device, and the encrypted device information can include the computer mainboard information, system version, device name, disk capacity and other information of the terminal device. The device information is obtained by decrypting the encrypted device information by a symmetric decryption or asymmetric decryption method. The specific decryption method corresponds to the encryption method in the foregoing embodiment, and details are not described herein. Specifically, after the device information is obtained by decrypting the encrypted device information, the device information can be compared with the preset device list. If the device information has a record in the preset device list, it can be determined that the device information meets the legal condition. If the device information has no record in the preset device list, it can be determined that the device information does not meet the legal condition.

[0076] Step S602, in the case that the device information satisfies the legal condition, the pre-generated identity identification information is encrypted to obtain encrypted identity identification information, and the terminal device is fed back the encrypted identity identification information, so that the terminal device decrypts the encrypted identity identification information to obtain the identity identification information, and splits the identity identification information into sequence information and a first check code, checks the sequence information to obtain a second check code, and in the case that the first check code and the second check code are the same, it is determined that the check is passed.

[0077] Wherein, if the device information satisfies the legal condition, the U disk can transmit its identity identification information to the terminal device for authentication. The identity identification information can be a unique authorization identification built-in the U disk, which is used for the terminal device to identify the legal identity of the U disk. After receiving the encrypted identity identification information, the terminal device can first decrypt the encrypted identity identification information to obtain the original identity identification information, and then parse the identity identification information. It should be noted that the identity identification information can be composed of two parts, one is sequence information, and the other is a first check code. The sequence information can be the main object to be checked, and the first check code can be a check value generated by the U disk side in advance. Thus, the terminal device can split the identity identification information according to the combination rule of the sequence information and the first check code to obtain the sequence information and the first check code. After obtaining the sequence information, the sequence information can be checked to obtain a second check code, which can be a hash algorithm, a cyclic redundancy check algorithm, etc., which is not limited herein. In the case that the first check code and the second check code are the same, the terminal device can confirm that the U disk passes the identity authentication, and determine that the check is passed.

[0078] Optionally, Figure 7 A flow chart of a process for generating identity identification information provided by the embodiment of the present application is shown in FIG. 1, the generation process of the identity identification information includes the following steps: Figure 7

[0079] Step S701, based on the product attribute, the time information and the serial number, the sequence information is obtained by encoding processing, and the sequence information and the preset string are spliced to obtain the target string.

[0080] ​The product attribute can be a unique hardware parameter of the U disk, such as a main control chip model, a firmware version number, a storage medium type, a factory batch number, and the like. The time information can be timestamp data of generating the sequence information corresponding to the U disk. The serial number can be an incremental serial number data maintained by the factory end to ensure the global uniqueness of the sequence information. The product attribute, the time information, and the serial number can be converted into sequence information in a unified format according to a preset rule, for uniquely identifying the current U disk. The preset string can be a fixed, secret, and unmodifiable character content pre-stored by the terminal device and the U disk in the authorization stage, which can be referred to as a salt value string or a fixed check factor, and specifically serves as fixed supplementary data of the current splicing operation. The sequence information and the preset string can be spliced by a string processing operation of being combined according to a fixed order agreed in advance

[0081] In step S702, the target string is converted into a byte array, and a first check code is calculated by performing a cyclic redundancy check on the byte array.

[0082] After obtaining the target string, the target string can be converted into a byte array. Specifically, the target string can be converted into an ordered data set composed of a plurality of bytes as basic units according to a unified character encoding format (for example, UTF-8 encoding, ASCII encoding, or the like) agreed between the terminal and the U disk. The byte data can serve as input data for subsequent cyclic redundancy check calculation. The cyclic redundancy check calculation can be a specific binary modulo 2 division operation on the input byte array, and the remainder obtained by the operation can be taken as the final check result, that is, the first check code. The first check code is a fixed-length check value, which can serve as a core basis for consistency comparison with the second check code. It should be noted that only a terminal device and a U disk in a legal pair can generate consistent two check codes, so that the integrity of the U disk identity credential can be effectively verified.

[0083] In step S703, the sequence information and the first check code are spliced to obtain identity identification information.

[0084] The sequence information and the first check code can be spliced to obtain identity identification information, which can be a unique authorization identifier built in the U disk, for identifying the legal identity of the U disk by the terminal device.

[0085] Reference Figure 6 The foregoing implementation process further includes:

[0086] In step S603, the terminal device is fed back with activation information, so that the terminal device activates the client usage right of the network additional storage software based on the activation information in the case that the activation information is received.

[0087] Wherein, after the terminal device completes the verification, the U disk can feed back activation information to the terminal device, and the activation information can be an authorization voucher of the network attached storage software, and specifically can include a one-time or time-limited authorization code and the like. If the terminal device has installed the network attached storage software, the client usage right of the network attached storage software can be activated directly based on the activation information, for example, the authorization voucher in the activation information is input into the network attached storage software, so as to normally enable the function of the network attached storage software.

[0088] The above, through the device information encryption transmission and the U disk side legality judgment, the illegal terminal device can be effectively filtered, and the risk that the network attached storage software is enabled by an unauthorized device is avoided; through the identity identification information decryption splitting and the check code comparison, the integrity and authenticity of the identity voucher are guaranteed; through the automatic linkage of the U disk access and the network attached storage software activation, the operation convenience and security are improved. The above scheme constructs a "physical key" + "software authentication" double system, uses the special U disk as the only activation voucher on the physical layer, realizes the mutual authentication of the U disk and the terminal device, reduces the data leakage risk, improves the data security, and the flexibility of software deployment is high.

[0089] Figure 8 A structure block diagram of a network attached storage device based on a U disk provided by an embodiment of the application is provided, the device is configured to execute the network attached storage software deployment method based on the U disk provided by the above embodiment, has the function modules and beneficial effects corresponding to the execution method. As shown in the figure, Figure 8 The device specifically includes:

[0090] The first U disk authentication module 801 is configured to, in the case that the U disk access is detected and the terminal device has installed the network attached storage software, collect the device information of the terminal device, encrypt the device information to obtain encrypted device information, and transmit the encrypted device information to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in the case that the device information is legal, encrypts the pre-generated identity identification information to obtain encrypted identity identification information, and feeds back the encrypted identity identification information to the terminal device;

[0091] The first device authentication module 802 is configured to, in the case that the encrypted identity identification information is received, decrypt the encrypted identity identification information to obtain the identity identification information, and split the identity identification information into sequence information and a first check code, calculate a second check code by verifying the sequence information, and in the case that the first check code and the second check code are the same, determine that the verification is passed, so that the U disk feeds back activation information to the terminal device;

[0092] The first software enabling module 803 is configured to activate the client usage right of the network attached storage software based on the activation information in the case that the activation information is received, for data sharing transmission.

[0093] The above, through the device information encryption transmission and the U disk side legality judgment, can effectively filter illegal terminal equipment, avoid the risk of network attached storage software being enabled by unauthorized equipment; through the identity information decryption splitting and the check code comparison, the integrity and authenticity of the identity certificate are guaranteed; through the automatic linkage of U disk access and network attached storage software activation, the operation convenience and safety are improved. The above scheme constructs a "physical key" + "software authentication" double system, which uses a special U disk as the only activation certificate on the physical layer, realizes the mutual authentication of the U disk and the terminal equipment, reduces the data leakage risk, improves the data security, and the software deployment flexibility is high.

[0094] In one possible embodiment, the first device authentication module 802 is further configured to:

[0095] The sequence information is spliced with the preset string to obtain a target string, and the target string is converted into a byte array;

[0096] The byte array is subjected to a cyclic redundancy check calculation to obtain a second check code.

[0097] In one possible embodiment, it further includes a second software enabling module, which is configured to:

[0098] In the case that the U disk access is detected and the network attached storage software is not installed, an installation package of the network attached storage software is obtained from the U disk, or a software download address is obtained from the U disk, and an installation package of the network attached storage software is obtained based on the software download address;

[0099] The network attached storage software is installed based on the installation package, and the network attached storage software is started, for data sharing transmission.

[0100] In one possible embodiment, it further includes a file sharing module, which is configured to:

[0101] In the case that the file sharing function of the network attached storage software is triggered, the to-be-transmitted file is obtained from the mounted local storage medium;

[0102] The to-be-transmitted file is sent to the target terminal equipment through a preset network link through the network attached storage software, or the to-be-transmitted file is backed up to an external mobile storage medium through the network attached storage software.

[0103] In one possible embodiment, it further includes a software disabling module, which is configured to:

[0104] In the case of detecting the U disk is pulled out, the access permission of the network attached storage software is disconnected, and the enabled service process is stopped;

[0105] Clearing the cache data in the memory.

[0106] The embodiment of the application also provides another U disk-based network attached storage device configured to execute the U disk-based network attached storage software deployment method provided by the above-mentioned embodiment, and has the corresponding function modules and beneficial effects of the execution method. The device specifically comprises:

[0107] The second U disk authentication module is configured to, in the case of receiving the encrypted device information sent by the terminal device, decrypt the encrypted device information to obtain device information, compare the device information with a preset device list, and determine whether the device information meets a legal condition;

[0108] The second device authentication module is configured to, in the case of the device information meeting the legal condition, encrypt the pre-generated identity identification information to obtain encrypted identity identification information, and feed back the encrypted identity identification information to the terminal device, so that the terminal device decrypts the encrypted identity identification information to obtain the identity identification information, splits the identity identification information into sequence information and a first check code, checks the sequence information to obtain a second check code, and in the case of the first check code and the second check code being the same, determines that the check is passed.

[0109] The third software enabling module is configured to feed back activation information to the terminal device, so that the terminal device activates the client use right of the network attached storage software based on the activation information in the case of receiving the activation information.

[0110] In one possible embodiment, the generation process of the identity identification information is as follows:

[0111] The sequence information is obtained by encoding processing based on the product attribute, the time information and the serial number, and the sequence information and a preset character string are spliced to obtain a target character string;

[0112] The target character string is converted into a byte array, and the first check code is obtained by performing a cyclic redundancy check calculation on the byte array;

[0113] The sequence information and the first check code are spliced to obtain the identity identification information.

[0114] Figure 9 A structural schematic diagram of an electronic device provided by the embodiment of the application is shown in FIG. 1, which comprises a processor 901, a memory 902, an input device 903 and an output device 904; the number of processors 901 in the device can be one or more, Figure 9 Figure 9 ​The processor 901 in the device is taken as an example; the processor 901, the memory 902, the input device 903 and the output device 904 in the device can be connected through a bus or other means, Figure 9 The memory 902 is taken as an example. The memory 902 is a computer readable storage medium, which can be configured to store software programs, computer executable programs and modules, such as program instructions / modules corresponding to the U disk based network attached storage software deployment method in the embodiments of the present application. The processor 901 executes various function applications and data processing of the device by running the software programs, instructions and modules stored in the memory 902, that is, implements the U disk based network attached storage software deployment method described above. The input device 903 can be configured to receive input digital or character information, and generate key signal input related to user settings and function control of the device. The output device 904 can include a display device such as a display screen.

[0115] The electronic device provided above can be used to execute the U disk based network attached storage software deployment method provided in any of the above embodiments, and has corresponding functions and advantages.

[0116] The embodiments of the present application also provide a non-volatile storage medium containing computer executable instructions, which are configured to execute a U disk based network attached storage software deployment method described in the above embodiments when executed by a computer processor, and the method comprises the following steps: in the case that a U disk is detected to be connected and a terminal device has installed network attached storage software, collecting device information of the terminal device, encrypting the device information to obtain encrypted device information, and transmitting the encrypted device information to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in the case that the device information meets the legal conditions, encrypting the pre-generated identity information to obtain encrypted identity information, and feeding back the encrypted identity information to the terminal device; in the case that the encrypted identity information is received, decrypting the encrypted identity information to obtain identity information, and splitting the identity information into sequence information and a first check code, calculating a second check code from the sequence information, in the case that the first check code and the second check code are the same, determining that the check is passed, so that the U disk feeds back activation information to the terminal device; in the case that the activation information is received, activating the client use right of the network attached storage software based on the activation information, which is used for data sharing transmission.

[0117] Storage medium - any type of memory device or storage device. The term "storage medium" is intended to include an installation medium, e.g., a CD-ROM, floppy disks, or tape apparatus; computer system memory or random access memory such as DRAM, DDR RAM, SRAM, EDO RAM, Rambus RAM, etc.; or a non-volatile memory such as a magnetic medium, e.g., a hard drive, or optical storage. The memory can also be systems' memory, or computer readable media that is included with a computer system. The storage medium can also include other types of storage. Moreover, the storage medium can be located in a first computer system that is connected to a second computer system over a network, such as the Internet. The second computer system can provide program instructions to the first computer system for execution. The term "storage medium" can include one or both of removable and non-removable memory components including, but not limited to, volatile, non-volatile, removable, and non-removable memory such as RAM versus disk storage, magnetic versus optical storage, or the like. Additionally, the storage medium can be located in a computing / processing environment that can comprise numerous other elements as is well appreciated by those of skill in the art. The computing / processing environment can also comprise a plurality of storage media.

[0118] Of course, the storage medium provided by the embodiments of the present application includes computer executable instructions, and the computer executable instructions are not limited to the U disk based network attached storage software deployment method described above, but can also perform the related operations in the U disk based network attached storage software deployment method provided by any of the embodiments of the present application.

[0119] It is worth noting that in the embodiments of the U disk based network attached storage device described above, each unit and module included is only divided according to the function logic, but is not limited to the division described above, as long as the corresponding function can be realized; in addition, the specific name of each functional unit is only for the convenience of mutual differentiation, and does not configure as a limitation on the protection scope of the embodiments of the present application.

[0120] It should be noted that the numbering of each step in the present scheme is only used to describe the overall design framework of the present scheme, and does not indicate the necessary sequence between the steps. As long as the overall implementation process conforms to the overall design framework of the present scheme, it belongs to the protection scope of the present scheme, and the sequence in the description form is not an exclusive limitation on the specific implementation process of the present scheme. Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memories. The memory can include non-persistent memory in a computer readable medium, random access memory (RAM) and / or non-volatile memory such as read only memory (ROM) or flash memory. The memory is an example of a computer readable medium.

[0121] It is also to be noted that the terms "comprising", "including", and any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus. An element proceeded by "comprises a... " does not, without more constraints, exclude the existence of additional identical elements in the process, method, article, or apparatus that comprises the element.

[0122] Note that the above merely describes preferred embodiments of the present application and the applied technical principles. Those skilled in the art will understand that the present application is not limited to the specific embodiments described herein, and that various obvious changes, reconfigurations, and substitutions can be made without departing from the scope of the present application. Therefore, although the present application has been described in detail through the above embodiments, the present application is not limited to the above embodiments, and can include more other equivalent embodiments without departing from the concept of the present application, and the scope of the present application is determined by the scope of the appended claims.

Claims

1. A method for deploying network attached storage software based on a U disk, characterized in that, The method is applied to a terminal device and comprises the following steps: In the case that a U disk is detected to be connected and the terminal device has installed network attached storage software, collecting device information of the terminal device, encrypting the device information to obtain encrypted device information, and transmitting the encrypted device information to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in the case that the device information meets legal conditions, encrypting pre-generated identity information to obtain encrypted identity information, and feeding back the encrypted identity information to the terminal device; In the case that the encrypted identity information is received, decrypting the encrypted identity information to obtain the identity information, splitting the identity information into sequence information and a first check code, performing check calculation on the sequence information to obtain a second check code, and in the case that the first check code and the second check code are the same, determining that the check is passed, so that the U disk feeds back activation information to the terminal device; In the case that the activation information is received, activating the client use right of the network attached storage software based on the activation information for data sharing transmission; The check calculation on the sequence information to obtain the second check code comprises the following steps: Splicing the sequence information and a preset string to obtain target string, and converting the target string into a byte array; Performing cyclic redundancy check calculation on the byte array to obtain the second check code; The generation process of the identity information is as follows: Encoding processing based on product attributes, time information and serial numbers to obtain sequence information, and splicing the sequence information and a preset string to obtain target string; Converting the target string into a byte array, and performing cyclic redundancy check calculation on the byte array to obtain a first check code; Splicing the sequence information and the first check code to obtain identity information.

2. The U disk-based network attached storage software deployment method according to claim 1, characterized in that, Further comprising: In the case that the U disk is detected to be connected and the network attached storage software is not installed, obtaining an installation package of the network attached storage software from the U disk, or obtaining a software download address from the U disk, and obtaining the installation package of the network attached storage software based on the software download address; Installing the network attached storage software based on the installation package, and starting the network attached storage software for data sharing transmission.

3. The U disk-based network attached storage software deployment method according to claim 1, characterized in that, After the client use right of the network attached storage software is activated based on the activation information, further comprising: In the case that the file sharing function of the network attached storage software is triggered, obtaining a to-be-transmitted file from a mounted local storage medium; Sending the to-be-transmitted file to a target terminal device through a preset network link through the network attached storage software, or backing up the to-be-transmitted file to an external mobile storage medium through the network attached storage software.

4. The U disk-based network attached storage software deployment method according to claim 1, characterized in that, After the client use right of the network attached storage software is activated based on the activation information, further comprising: In the case that the U disk is detected to be disconnected, disconnecting the access right of the network attached storage software, and stopping the enabled service process; Clearing cache data in memory.

5. A method for deploying network attached storage software based on a U disk, characterized in that, The method is applied to a U disk, and the method comprises: In the case that the terminal device sends the encrypted device information, the device information is obtained by decrypting the encrypted device information, the device information is compared with a preset device list, and it is determined whether the device information meets a legal condition; In the case that the device information meets the legal condition, the pre-generated identity identification information is encrypted to obtain encrypted identity identification information, and the terminal device is fed back the encrypted identity identification information, so that the terminal device decrypts the encrypted identity identification information to obtain the identity identification information, and the identity identification information is split into sequence information and a first check code, the sequence information is checked to obtain a second check code, and in the case that the first check code and the second check code are the same, it is determined that the check is passed; The terminal device is fed back activation information, so that the terminal device activates the client use right of the network additional storage software based on the activation information in the case that the activation information is received; The generation process of the identity identification information is as follows: The sequence information is obtained by encoding processing based on product attributes, time information and serial numbers, and the sequence information and a preset string are spliced to obtain a target string; The target string is converted into a byte array, and the first check code is obtained by performing cyclic redundancy check calculation on the byte array; The sequence information and the first check code are spliced to obtain the identity identification information; The second check code is obtained by checking the sequence information, comprising: The sequence information and a preset string are spliced to obtain a target string, and the target string is converted into a byte array; The second check code is obtained by performing cyclic redundancy check calculation on the byte array.

6. A network attached storage device based on a USB stick, characterized in that, Comprise: The first U disk authentication module is configured to, in the case that the U disk is detected to access and the terminal device has installed the network additional storage software, collect the device information of the terminal device, encrypt the device information to obtain encrypted device information, and transmit the encrypted device information to the U disk, so that the U disk decrypts the encrypted device information to obtain the device information, and in the case that the device information is legal, pre-generated identity identification information is encrypted to obtain encrypted identity identification information, and the terminal device is fed back the encrypted identity identification information; The first device authentication module is configured to, in a case where the encrypted identity information is received, decrypt the encrypted identity information to obtain the identity information, split the identity information into sequence information and a first check code, perform check calculation on the sequence information to obtain a second check code, and in a case where the first check code and the second check code are the same, determine that the check is passed, so that the U disk feeds back activation information to the terminal device; wherein the check calculation on the sequence information to obtain the second check code comprises: splicing the sequence information with a preset string to obtain a target string, and converting the target string into a byte array; performing cyclic redundancy check calculation on the byte array to obtain the second check code; and the generation process of the identity information is as follows: performing encoding processing based on product attributes, time information and a serial number to obtain sequence information, splicing the sequence information with a preset string to obtain a target string, converting the target string into a byte array, performing cyclic redundancy check calculation on the byte array to obtain a first check code, and splicing the sequence information and the first check code to obtain the identity information. The first software enabling module is configured to, in a case where the activation information is received, activate the client use right of the network attached storage software based on the activation information, for data sharing transmission.

7. An electronic device, comprising: The electronic device comprises one or more processors; a memory configured to store one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement the U disk-based network attached storage software deployment method in any one of claims 1-5.

8. A non-volatile storage medium for storing computer-executable instructions, characterized in that, The computer executable instructions, when executed by a computer processor, are configured to perform the U disk-based network attached storage software deployment method in any one of claims 1-5.

Images