A solid state disk assembly with data security function

Abstract

The application discloses a solid state disk assembly with data security function, and relates to the technical field of solid state disk security protection.The assembly comprises a solid state disk shell and a circuit board, wherein the circuit board is integrated with a master control unit, a NAND flash memory array, an environment sensing module and an interface module, and the modules are electrically connected through the circuit board wiring;the application integrates the environment sensing module composed of three types of sensors of temperature and humidity, vibration and electromagnetic radiation in the solid state disk assembly, matches the safety strategy control module built in the master control unit, realizes real-time collection of working environment parameters and threshold comparison, simultaneously designs the linkage control logic of encryption level control, interface locking, data temporary backup and storage area read-only protection in the master control unit, presets multiple safety modes and environment parameter thresholds and realizes dynamic switching, and performs differentiated safety protection operation on different environment abnormal scenes such as high temperature, strong electromagnetic interference and violent vibration.

Description

Technical Field

[0001] This invention relates to the field of solid-state drive security protection technology, specifically to a solid-state drive component with data security functions. Background Technology

[0002] Solid-state drives (SSDs) are solid-state storage devices that use flash memory chips as the storage medium. With their advantages of high read / write speeds, strong shock resistance, low power consumption, and small size, they are widely used in various data storage scenarios such as personal terminals, enterprise servers, industrial control, financial terminals, and national defense. They have become the core carrier for data storage and interaction in modern information systems, playing a crucial role in ensuring the efficient operation of information systems and rapid data access. Data security is one of the core functional features of SSDs. With the increasing prominence of security risks such as data leakage, malicious cracking, and hardware theft, sensitive data stored on SSDs faces the threat of unauthorized access, tampering, and theft. This is especially true for core data in fields such as finance and government; once leaked or tampered, it can cause incalculable losses. Therefore, configuring SSDs with comprehensive and efficient security functions is key to preventing data security risks and ensuring data integrity and confidentiality, directly determining the applicability of SSDs in high-security scenarios.

[0003] However, existing solid-state drives (SSDs) still have certain shortcomings in terms of data security. The security strategies of existing SSDs are all fixed configuration modes, which cannot adapt to complex and changing working environments such as abnormal temperature and humidity, strong electromagnetic interference, and violent vibration. They lack targeted security protection measures in various abnormal environmental scenarios, which can easily lead to data leakage, tampering, or physical damage. This has become a significant weakness in the data security protection system of SSDs. Therefore, it is of great significance to develop an SSD component with data security functions. Summary of the Invention

[0004] The purpose of this invention is to overcome the shortcomings of existing technologies and provide a solid-state drive (SSD) component with data security functions. This SSD component integrates an environmental sensing module consisting of three types of sensors: temperature, humidity, vibration, and electromagnetic radiation. Combined with a security policy control module built into the main control unit, it achieves real-time acquisition and threshold comparison of working environment parameters. Simultaneously, the main control unit incorporates linked control logic for encryption level adjustment, interface locking, temporary data backup, and read-only protection of the storage area. It presets multiple security modes and environmental parameter thresholds and dynamically switches between them. Differentiated security protection operations are performed for different abnormal environmental scenarios such as high temperature, strong electromagnetic interference, and severe vibration, achieving targeted and dynamic data security protection in complex environments.

[0005] To solve the above-mentioned technical problems, the present invention provides the following technical solution: a solid-state drive component with data security function, the component comprising: a solid-state drive casing and a circuit board, wherein a main control unit, a NAND flash memory array, an environmental sensing module, and an interface module are integrated on the circuit board, and each module is electrically connected through circuit board wiring; The main control unit has a built-in security policy control module, which pre-stores multiple security modes and environmental parameter thresholds corresponding to each mode. The main control unit is used to receive parameters transmitted by the environmental perception module and send policy switching instructions to the NAND flash array and interface module. The environmental sensing module integrates temperature and humidity sensors, vibration sensors, and electromagnetic radiation sensors to collect various parameters of the solid-state drive's working environment and transmit these parameters to the security policy control module of the main control unit. The NAND flash memory array is divided into a regular storage area and a temporary backup area, which are used to receive mode switching instructions sent by the main control unit and switch the storage working mode. The interface module is used to receive state switching instructions sent by the main control unit and switch the data interaction working state.

[0006] Furthermore, the environment sensing module performs the following operations when collecting and transmitting solid-state drive operating environment parameters: The environmental sensing module continuously collects temperature and humidity values, vibration amplitude values, and electromagnetic radiation intensity values ​​in the working environment of the solid-state drive through temperature and humidity sensors, vibration sensors, and electromagnetic radiation sensors. The environmental sensing module converts the collected analog environmental parameters into digital environmental parameters; The environmental perception module continuously transmits all converted digital environmental parameters to the security policy control module of the main control unit according to the preset transmission frequency, and maintains a real-time signal connection with the main control unit during the acquisition and transmission process, with the parameter transmission link always in a conducting state.

[0007] Furthermore, the security policy control module of the main control unit performs the following operations when comparing environmental parameter thresholds and determining security mode switching: The safety strategy control module receives digital environmental parameters transmitted by the environmental sensing module, and compares each parameter with the corresponding environmental parameter thresholds pre-stored in the module to obtain the temperature and humidity anomaly coefficient. Vibration anomaly coefficient Electromagnetic radiation anomaly coefficient ; When all environmental parameters are within the corresponding threshold range, the security policy control module determines that the solid-state drive maintains the current normal security working mode and does not send policy switching instructions to other modules. When any environmental parameter exceeds the corresponding threshold range, the security policy control module calculates the comprehensive environmental anomaly level based on the type of parameter exceeding the threshold using a formula. The calculation formula is: The security strategy control module comprehensively determines the level based on environmental anomalies. The system determines the corresponding abnormal environment type and sends a security mode switching command matching that abnormal environment type to the main control unit. The main control unit then distributes this command to the corresponding execution modules. , , These are the abnormal weights for temperature and humidity, vibration, and electromagnetic radiation, respectively. These weights are calibrated by the solid-state drive through multi-dimensional environmental stress tests before it leaves the factory, and the calibrated weight values ​​are pre-stored in the security policy control module.

[0008] Furthermore, when the main control unit detects an abnormal environment such as severe vibration and performs a safety protection operation, it performs the following operations: After receiving the severe vibration protection mode switching command from the security policy control module, the main control unit first calculates the backup priority of all data in the conventional storage area of ​​the NAND flash array. The backup priority calculation formula is as follows: The main control unit determines the backup priority. Sort the data in the regular storage area from high to low, where For the first Backup priority for class data For the first The frequency coefficient of reading and writing of class data For the first Storage association coefficient of class data, , A priority calculation coefficient is set, which is calibrated by the solid-state drive according to the business attributes of the data type before it leaves the factory. The calibrated coefficient value is pre-stored in the main control unit. The main control unit sends a core data backup command to the NAND flash array. After receiving the command, the NAND flash array will transfer and store the high-priority core data in the regular storage area to the temporary backup area according to the sorting result, thus completing the temporary backup operation of the core data. After the core data backup operation is completed, the main control unit sends a storage mode switching command to the NAND flash array. The NAND flash array switches from the normal read-write mode to the read-only protection mode according to the command. In the read-only protection mode, the NAND flash array only allows data reading permissions and disables data writing, modification and deletion permissions.

[0009] Furthermore, when the main control unit detects an abnormal environment such as high temperature or strong electromagnetic interference and performs a safety protection operation, it performs the following operations: After receiving the high temperature or strong electromagnetic interference protection mode switching command from the security policy control module, the main control unit activates its own encryption control function and calculates the target encryption level using a formula. The calculation formula is: The main control unit determines the encryption level based on the target. The overall data encryption level of the solid-state drive has been adjusted, including... This is the basic encryption level for solid-state drives. This refers to the temperature and humidity anomaly coefficient. This is the electromagnetic radiation anomaly coefficient. , The encryption level adjustment coefficient is calibrated by the solid-state drive through electromagnetic compatibility testing and high temperature aging testing before it leaves the factory. The calibrated coefficient value is pre-stored in the encryption control function module of the main control unit. As the encryption level adjustment operation is completed, the main control unit sends a working state switching command to the interface module; Upon receiving the instruction, the interface module switches its working state, cuts off all data interaction channels with external devices, and prohibits external devices from accessing, reading, writing, and interacting with the solid-state drive.

[0010] Furthermore, the environmental sensing module is a surface-mount integrated module, which is fixedly installed on the corner of the circuit board where there is no large integrated module. The signal output terminals of various sensors are electrically connected to the signal input terminals of the main control unit through a dedicated data bus. The environmental sensing module has a built-in independent analog-to-digital conversion unit, which is electrically connected to the signal output terminals of various sensors and is used to convert the analog parameters collected by the sensors into digital parameters. The converted digital parameters are transmitted to the safety policy control module of the main control unit through a dedicated data bus.

[0011] Furthermore, the conventional storage area of ​​the NAND flash array is the main data storage area of ​​the solid-state drive, used for various daily data read, write, storage and modification operations. The temporary backup area is an independent dedicated storage area that does not participate in the daily data storage work of the solid-state drive. It only starts working when it receives a backup command from the main control unit. The NAND flash array has a built-in storage control unit, which is electrically connected to the main control unit and is used to receive mode switching commands sent by the main control unit and control the NAND flash array to complete the switching of storage working modes.

[0012] Furthermore, the interface module is the only channel for data interaction between the solid-state drive and external devices. The module has two working states: normal read / write and locked. In the normal read / write state, the interface module transmits bidirectional data and commands between the solid-state drive and external devices and responds to interaction requests. In the locked state, the interface module cuts off all its own data transmission channels and command reception channels. The interface module has a built-in status detection unit, which is electrically connected to the main control unit and is used to detect the module's own working status and transmit the status information to the main control unit.

[0013] Furthermore, the main control unit also has a built-in encryption control module and a status feedback receiving module. The encryption control module is electrically connected to the security policy control module and is used to receive instructions from the security policy control module and adjust the encryption level of the solid-state drive. The encryption control module has at least two different levels of encryption algorithms pre-stored. The status feedback receiving module is electrically connected to the NAND flash array, the environmental sensing module, and the interface module respectively and is used to receive the working status information transmitted by each integrated module and transmit the information to the core control unit of the main control unit.

[0014] Furthermore, the solid-state drive (SSD) casing is a one-piece metal casing that completely encloses the circuit board and all integrated modules on the circuit board. The inner sidewall of the SSD casing is provided with an electromagnetic shielding layer and a buffer protection layer. The buffer protection layer is attached to the edge of the circuit board. The SSD casing is provided with an opening that is compatible with the interface module. The interface module extends through the opening to the outside of the casing for establishing a connection with external devices.

[0015] Compared with existing technologies, this solid-state drive component with data security features has the following advantages: This invention integrates an environmental sensing module consisting of three types of sensors—temperature, humidity, vibration, and electromagnetic radiation—into a solid-state drive (SSD) component. Combined with a security policy control module built into the main control unit, it achieves real-time acquisition and threshold comparison of working environment parameters. Simultaneously, the main control unit incorporates linked control logic for encryption level adjustment, interface locking, temporary data backup, and read-only protection of the storage area. Multiple security modes and environmental parameter thresholds are preset and dynamically switched. Differentiated security protection operations are executed for various abnormal environmental scenarios such as high temperature, strong electromagnetic interference, and severe vibration. This solves the technical problem that traditional fixed security policies cannot adapt to complex working environments, achieving targeted and dynamic data security protection in complex environments. It avoids data leakage, tampering, or physical damage caused by environmental anomalies, improving the adaptability and reliability of SSD data security protection in various complex working environments.

[0016] Other advantages, objectives and features of the invention will be set forth in part in the description which follows, and in part will be apparent to those skilled in the art from the following examination or study, or may be learned from the practice of the invention. Attached Figure Description

[0017] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without any creative effort.

[0018] Figure 1 This is a schematic diagram of a solid-state drive component with data security features. Figure 2 This is a flowchart illustrating the workflow of a solid-state drive (SSD) component with data security features. Detailed Implementation

[0019] To further illustrate the technical means and effects of the present invention in achieving its intended purpose, the following detailed description of the specific implementation methods, structures, features, and effects of the present invention, in conjunction with the accompanying drawings and preferred embodiments, is provided below.

[0020] Example 1 This embodiment is applied to a core data storage security protection scenario for commercial bank offline business terminals. In this scenario, solid-state drives (SSDs) need to continuously store and process massive amounts of core sensitive data such as customer identity information, fund transaction data, and account details. Such data has extremely high confidentiality and integrity requirements; leakage, tampering, or damage will cause serious financial risks and customer losses. The data center environment where commercial bank offline business terminals are located is prone to various sudden environmental anomalies, such as sudden changes in temperature and humidity caused by air conditioning failures, severe vibrations caused by the start-up and shutdown of surrounding financial equipment, and strong electromagnetic interference caused by the simultaneous operation of multiple terminals. Traditional fixed security strategies for SSDs cannot provide adaptive protection against such complex and ever-changing environmental anomalies. The SSD component with data security functions of this invention, in this application scenario, achieves real-time perception and differentiated security protection against various environmental anomalies, ensuring the storage security of core financial data.

[0021] See Figure 1 and Figure 2The solid-state drive component with data security function used in this embodiment is mainly composed of an integrated solid-state drive shell and a circuit board made of metal. The solid-state drive shell completely encloses the circuit board and all integrated modules on the board. The inner sidewall of the shell is provided with an electromagnetic shielding layer and a buffer protection layer. The buffer protection layer is attached to the edge of the circuit board. An opening adapted to the interface module is opened on the shell. The interface module extends to the outside of the shell through the opening to realize external connection with the offline business terminal of the commercial bank.

[0022] The circuit board integrates a main control unit, a NAND flash memory array, an environmental sensing module, and an interface module. Each module is electrically connected through circuit board wiring. The environmental sensing module is a surface-mount integrated module, which is fixedly installed in the corner of the circuit board where there are no large integrated modules. This module integrates temperature and humidity sensors, vibration sensors, and electromagnetic radiation sensors. It has a built-in independent analog-to-digital conversion unit. The signal output terminals of various sensors are electrically connected to the analog-to-digital conversion unit and are electrically connected to the signal input terminal of the main control unit through a dedicated data bus.

[0023] The NAND flash array is divided into a regular storage area and a temporary backup area. The regular storage area serves as the main data storage area, handling the daily reading, writing, storage, and modification of customer and transaction data for the financial terminal. The temporary backup area is an independent dedicated storage area that does not participate in the daily data storage work of the solid-state drive. The array has a built-in storage control unit that is electrically connected to the main control unit. The interface module serves as the only channel for data interaction between the solid-state drive and external devices of the financial terminal. It has two working states: normal read / write and locked. The module has a built-in status detection unit that is electrically connected to the main control unit, which can detect its own working status in real time and transmit the information to the main control unit.

[0024] The main control unit has a built-in security policy control module, encryption control module and status feedback receiving module. The security policy control module has multiple security modes and corresponding environmental parameter thresholds for each mode pre-stored. The encryption control module is electrically connected to the security policy control module and has at least two different levels of encryption algorithms pre-stored. The status feedback receiving module is electrically connected to the NAND flash array, the environmental sensing module and the interface module respectively, and is used to receive the working status information of each integrated module and transmit it to the core control unit of the main control unit.

[0025] During the daily operation of commercial bank offline business terminals, the environmental sensing module of the solid-state drive (SSD) component is always operational. It continuously collects temperature and humidity values, vibration amplitude values, and electromagnetic radiation intensity values ​​within the data center using temperature and humidity sensors, vibration sensors, and electromagnetic radiation sensors. This data collection process is synchronized with the financial terminal's business operations, without interruption or delay. The environmental sensing module transmits the collected analog environmental parameters to the built-in analog-to-digital converter (ADC), which converts the analog parameters into digital environmental parameters. Then, according to a preset transmission frequency, all converted digital environmental parameters are continuously transmitted to the main control unit's security policy control module. Throughout the entire data collection and transmission process, the environmental sensing module maintains a real-time signal connection with the main control unit, ensuring the parameter transmission link remains active and that the main control unit can obtain the SSD's operating environmental parameters in real time.

[0026] After receiving the digital environmental parameters transmitted by the environmental sensing module, the safety strategy control module of the main control unit compares the various parameters such as temperature, humidity, vibration, and electromagnetic radiation with the corresponding environmental parameter thresholds pre-stored in the module, and obtains the temperature and humidity anomaly coefficient based on the comparison results. Vibration anomaly coefficient Electromagnetic radiation anomaly coefficient In the specific implementation of this embodiment, if any environmental parameter exceeds the corresponding threshold range, the security policy control module will calculate the comprehensive environmental anomaly judgment level according to the type of parameter exceeding the threshold using a formula. The calculation formula is: ,in , , These are the abnormal weights for temperature and humidity, vibration, and electromagnetic radiation, respectively. These weights are calibrated by the solid-state drive through multi-dimensional environmental stress tests before it leaves the factory, and the calibrated weight values ​​are pre-stored in the security policy control module.

[0027] The security strategy control module determines the level of environmental anomalies based on the calculated comprehensive assessment. The system determines the type of abnormal environment and sends a security mode switching command matching the type of abnormal environment to the main control unit. The main control unit then sends the command to the corresponding execution modules. If all environmental parameters are within the corresponding threshold range, the security policy control module determines that the solid-state drive will maintain the current normal security working mode and will not send any policy switching commands to other modules. The solid-state drive will continue to provide normal data storage and interaction services for the financial terminal.

[0028] When the start-up or shutdown of adjacent financial equipment in a commercial bank's computer room causes severe vibration, the security policy control module determines this as a severe vibration-related environmental anomaly and issues a corresponding protection mode switching command. The main control unit receives this command and initiates the security protection operation corresponding to the severe vibration. First, the main control unit calculates the backup priority for all financial data within the NAND flash array's conventional storage area. In this specific implementation, the backup priority is calculated using a formula: [Formula omitted for brevity]. ,in For the first Backup priority for class data For the first The frequency coefficient of reading and writing of class data For the first Storage association coefficient of class data, , A priority calculation coefficient is used. This coefficient is pre-stored in the main control unit by the solid-state drive (SSD) before it leaves the factory, based on the business attributes of its data type. The main control unit then calculates the backup priority. The data in the regular storage area is sorted from high to low priority. Among them, the real-time transaction data of financial terminals has a high read / write frequency coefficient, and the core identity information of customers has a high storage correlation coefficient. Both are classified as high-priority core data.

[0029] After sorting is complete, the main control unit sends a core data backup command to the NAND flash array. Upon receiving the command, the storage control unit of the NAND flash array sequentially transfers and stores the high-priority core financial data in the regular storage area to the temporary backup area according to the sorting result, completing the temporary backup operation of the core data. Immediately after the core data backup operation is completed, the main control unit sends a storage mode switching command to the NAND flash array. Based on this command, the NAND flash array switches from the regular read-write mode to read-only protection mode. In read-only protection mode, the NAND flash array only allows data read access, disabling data write, modification, and deletion permissions to prevent data write errors, data loss, or physical damage caused by abnormal hardware contact due to severe vibration.

[0030] When a commercial bank's computer room air conditioning malfunctions, causing an abnormally high-temperature environment, or when multiple financial terminals operate simultaneously, creating an abnormally strong electromagnetic interference environment, the security strategy control module determines the situation and issues a corresponding high-temperature or strong electromagnetic interference protection mode switching command. Upon receiving this command, the main control unit initiates the corresponding security protection operation. First, the main control unit activates its own encryption control function. In the specific implementation of this embodiment, the target encryption level is calculated using a formula. The calculation formula is: ,in This is the basic encryption level for solid-state drives. This refers to the temperature and humidity anomaly coefficient. This is the electromagnetic radiation anomaly coefficient. , The encryption level adjustment coefficient is calibrated by the solid-state drive through electromagnetic compatibility testing and high-temperature aging testing before it leaves the factory. The calibrated coefficient value is pre-stored in the encryption control function module of the main control unit.

[0031] The main control unit calculates the target encryption level. The system invokes the corresponding encryption algorithm within the encryption control module to adjust the overall data encryption level of the solid-state drive (SSD), thereby enhancing the encryption protection level of core financial data. Simultaneously with the encryption level adjustment, the main control unit sends a working state switching command to the interface module. Upon receiving this command, the interface module's state detection unit switches the interface module from normal read / write state to locked state, cutting off all data interaction channels with external devices of the financial terminal. This prohibits external devices from accessing, reading / writing, and interacting with the SSD, preventing data leakage caused by hardware failure due to high temperatures, and avoiding security issues such as signal theft and data tampering caused by strong electromagnetic interference.

[0032] Throughout the entire process of protecting against environmental anomalies, the status feedback receiving module of the main control unit maintains a constant signal connection with each integrated module, continuously receiving parameter acquisition status from the environmental sensing module, storage mode status of the NAND flash array, and operational status information from the interface modules. This information is then transmitted in real time to the core control unit of the main control unit, allowing the main control unit to monitor the operational status of each module in real time. When the data center environment recovers from the anomaly and the various parameters collected by the environmental sensing module return to the threshold range, the security policy control module determines that the environment has returned to normal and issues a normal security mode switching command. Upon receiving the command, the main control unit controls the NAND flash array to return from read-only protection mode to normal read / write mode, the interface modules to return from locked state to normal read / write state, the overall data encryption level of the solid-state drive (SSD) drops back to the basic encryption level, and the core financial data in the temporary backup area can be transferred back to the regular storage area or retained for a specified time according to preset rules, based on the business needs of the financial terminal. The SSD then returns to its state of providing normal data storage services to the financial terminal.

[0033] In summary, this embodiment applies a solid-state drive (SSD) component with data security features to the core data storage scenario of a commercial bank's offline business terminal. Based on the component's hardware structure design and software control logic, it achieves real-time acquisition, accurate judgment, and dynamic protection of SSD operating environment parameters. Through multi-dimensional sensor data collection by the environmental perception module, combined with threshold comparison and formula calculation by the security policy control module, it achieves accurate judgment of environmental anomaly types. Simultaneously, it executes differentiated security protection operations for different environmental anomaly scenarios such as severe vibration, high temperature, and strong electromagnetic interference. For severe vibration, it performs tiered backup of core data and read-only protection of the storage area; for high temperature and strong electromagnetic interference, it dynamically adjusts the encryption level and locks the interface. This solves the technical problem that traditional fixed security policies for SSDs cannot adapt to the complex and ever-changing working environment of financial terminals.

[0034] Example 2 This embodiment is applied to the data storage security protection scenario of industrial control terminals in intelligent manufacturing production lines. In this scenario, solid-state drives (SSDs) need to store core industrial data such as real-time operating parameters of the production line, process formula data, and equipment fault records. This type of data directly determines the production efficiency and product quality of the production line. Industrial workshops have multiple environmental anomalies, such as continuous vibration caused by the start-up and shutdown of large production equipment, strong electromagnetic radiation generated by frequency converters and power distribution cabinets, and high temperatures caused by the failure of temperature control in the production environment. Moreover, there are often two or more environmental anomalies superimposed. Traditional SSDs do not have the ability to adapt to and protect against complex environmental anomalies. Based on the aforementioned embodiment, the solid-state drive component with data security function of this invention optimizes the protection logic to adapt to the environmental characteristics of industrial control scenarios, realizes precise protection against single and complex environmental anomalies, and ensures the storage security of core industrial data and the stable operation of the production line.

[0035] See Figure 1 and Figure 2 The solid-state drive (SSD) component with data security features used in this embodiment is optimized for the miniaturization and high protection requirements of industrial control terminals, based on the hardware structure of the aforementioned embodiments. The SSD casing remains a one-piece structure made of metal, and the inner sidewall's buffer protective layer is made of a highly elastic, heat-resistant material and thickened, further increasing the contact area with the circuit board edge to adapt to the strong vibration environment of industrial workshops. The environmental sensing module, as a surface-mount integrated module, is fixed in the corner of the industrial control SSD circuit board, avoiding the ribbon cable interface area of ​​the industrial control terminal and reducing interference from external lines to parameter acquisition. The anti-interference performance of its dedicated data bus transmission is enhanced. The temporary backup area of ​​the NAND flash memory array adopts a continuous storage block planning method to improve the efficiency of fast backup of core industrial data. The interface module adds an anti-loosening connection structure specifically for industrial scenarios to ensure the stability of the connection with external devices of the industrial control terminal. The electrical connection methods and core functions of each module remain the same as those in the aforementioned embodiments.

[0036] During continuous production on the smart manufacturing production line, the environmental sensing module of the solid-state drive (SSD) component is activated synchronously with the industrial control terminal. It continuously collects temperature and humidity values, vibration amplitude values ​​from production equipment operation, and electromagnetic radiation intensity values ​​from various industrial electrical equipment within the industrial workshop. The data collection process is synchronized with the real-time operation of the production line, ensuring uninterrupted data acquisition. The environmental sensing module transmits the collected analog environmental parameters to the built-in analog-to-digital converter (ADC) to convert the analog parameters into digital environmental parameters. Then, following the high-frequency transmission rules preset for the industrial control scenario, the converted digital environmental parameters are continuously transmitted to the safety strategy control module of the main control unit. Throughout the data acquisition and transmission process, a real-time signal connection with the main control unit is maintained, ensuring the parameter transmission link remains continuous. This guarantees that the main control unit can capture real-time changes in industrial environmental parameters, adapting to the characteristics of sudden and abnormal environmental changes in industrial scenarios.

[0037] After receiving digital environmental parameters, the main control unit's safety policy control module compares each parameter with pre-stored industrial scenario-specific environmental parameter thresholds to obtain the temperature and humidity anomaly coefficients. Vibration anomaly coefficient Electromagnetic radiation anomaly coefficient In the specific implementation of this embodiment, if any one or more environmental parameters are detected to exceed the threshold range, the security policy control module will adjust the settings according to the type of parameter exceeding the threshold, using a formula. Comprehensive Judgment Level of Computational Environment Anomalies and according to The system accurately determines the type of single or combined environmental anomalies and sends a matching safety mode switching command to the main control unit. The main control unit then synchronously sends the command to the corresponding execution module. If all environmental parameters are within the threshold range, the system maintains the normal safety operating mode, providing normal data storage and interaction services to the industrial control terminal.

[0038] When an abnormal environment occurs in an industrial workshop due to a combination of severe vibrations caused by the start-up and shutdown of large equipment and short-term temperature deviations, the main control unit receives the corresponding protection mode switching command and performs collaborative protection based on the protection operations described in the aforementioned embodiments. First, the main control unit uses the formula... The system performs backup priority calculations on industrial data within the conventional storage area. Based on the calculation results, high-priority data such as real-time production line operating parameters and core process formula data are quickly sorted. Then, a core data backup command is sent to the NAND flash array. High-priority data is rapidly backed up using contiguous storage blocks in the temporary backup area. Immediately after backup, the NAND flash array is switched to read-only protection mode, disabling write, modify, and delete permissions to prevent data corruption caused by abnormal hardware contact due to vibration. Simultaneously, due to short-term temperature deviations, the main control unit synchronously activates the encryption control function, using a formula... The target encryption level is calculated, and the encryption level of the solid-state drive is slightly increased based on the value of the temperature and humidity anomaly coefficient, so as to achieve collaborative protection against combined anomalies of vibration and temperature deviation.

[0039] When an abnormal environment occurs in an industrial workshop, resulting in high temperatures due to temperature control failure combined with strong electromagnetic interference from the power distribution cabinet, the main control unit, upon receiving a protection command, prioritizes initiating a coordinated protection operation involving encryption and interface locking. The main control unit uses a formula... The target encryption level is calculated. Due to the high anomaly coefficients of both high temperature and strong electromagnetic interference, the encryption control module will invoke a pre-stored advanced encryption algorithm to perform high-level encryption on all core industrial data within the solid-state drive, enhancing its anti-theft and anti-tampering capabilities. Simultaneously, the main control unit sends a lock command to the interface module. The interface module immediately cuts off all data interaction channels with external devices such as the industrial control terminal PLC, inverter, and host computer, prohibiting any external access or data operation to prevent data leakage caused by signal crosstalk due to strong electromagnetic interference. At the same time, the NAND flash memory array shuts down its high-speed read / write channels to reduce chip heat generation and adapt to the hardware operation requirements of high-temperature environments. This provides targeted protection against the combined anomalies of high temperature and strong electromagnetic interference from both data protection and hardware protection perspectives.

[0040] In this embodiment, the status feedback receiving module of the main control unit adds a signal interaction function with the industrial control terminal host computer based on the previous embodiment. It transmits the parameter acquisition status of the environmental perception module, the storage mode status of the NAND flash array, and the working status of the interface module to the production line operation and maintenance host computer in real time, realizing remote monitoring of the solid-state drive protection status. When the industrial workshop environment recovers from an anomaly, the security policy control module determines that the environment is normal and issues a normal mode switching command. The main control unit controls the interface module to unlock, reduces the encryption level of the solid-state drive to the basic encryption level, and switches the NAND flash array from read-only protection mode to normal read-write mode. The core industrial data in the temporary backup area can be selected to be transferred back to the normal storage area or permanently stored according to the instructions of the operation and maintenance host computer. The solid-state drive is restored to the state of providing normal data storage services to the industrial control terminal.

[0041] In summary, this embodiment applies a solid-state drive (SSD) component with data security features to an industrial control terminal scenario in a smart manufacturing production line. Building upon the hardware structure and core protection logic of the aforementioned embodiments, and addressing the characteristics of strong vibrations, strong electromagnetic interference, high temperatures, and complex environmental anomalies in industrial settings, it achieves hardware structure adaptation and optimization, as well as a coordinated upgrade of the protection logic. Through high-frequency parameter acquisition by the environmental perception module and precise judgment by the security strategy control module, it effectively identifies both single and complex environmental anomalies in industrial scenarios. For different types of complex environmental anomalies, it performs differentiated protection operations involving backup and encryption linkage, and encryption and hardware protection coordination, solving the technical problem that traditional SSDs cannot adapt to complex industrial environmental anomalies. Furthermore, the added remote status feedback function adapts to the remote operation and maintenance needs of industrial production lines.

[0042] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention in any way. Although the present invention has been disclosed above with reference to preferred embodiments, it is not intended to limit the present invention. Any person skilled in the art can make some modifications or alterations to the above-disclosed technical content to create equivalent embodiments without departing from the scope of the present invention. Any simple modifications, equivalent changes and alterations made to the above embodiments based on the technical essence of the present invention without departing from the scope of the present invention shall still fall within the scope of the present invention.

Claims

1. A solid-state drive component with data security functions, characterized in that, The component includes: a solid-state drive casing and a circuit board. The circuit board integrates a main control unit, a NAND flash memory array, an environmental sensing module, and an interface module. The modules are electrically connected through circuit board wiring. The main control unit has a built-in security policy control module, which pre-stores multiple security modes and environmental parameter thresholds corresponding to each mode. The main control unit is used to receive parameters transmitted by the environmental perception module and send policy switching instructions to the NAND flash array and interface module. The environmental sensing module integrates temperature and humidity sensors, vibration sensors, and electromagnetic radiation sensors to collect various parameters of the solid-state drive's working environment and transmit these parameters to the security policy control module of the main control unit. The NAND flash memory array is divided into a regular storage area and a temporary backup area, which are used to receive mode switching instructions sent by the main control unit and switch the storage working mode. The interface module is used to receive state switching instructions sent by the main control unit and switch the data interaction working state.

2. A solid-state drive component with data security function according to claim 1, characterized in that, The environmental sensing module performs the following operations when collecting and transmitting solid-state drive operating environment parameters: The environmental sensing module continuously collects temperature and humidity values, vibration amplitude values, and electromagnetic radiation intensity values ​​in the working environment of the solid-state drive through temperature and humidity sensors, vibration sensors, and electromagnetic radiation sensors. The environmental sensing module converts the collected analog environmental parameters into digital environmental parameters; The environmental perception module continuously transmits all converted digital environmental parameters to the security policy control module of the main control unit according to the preset transmission frequency, and maintains a real-time signal connection with the main control unit during the acquisition and transmission process, with the parameter transmission link always in a conducting state.

3. A solid-state drive component with data security function according to claim 1, characterized in that, The security policy control module of the main control unit performs the following operations when comparing environmental parameter thresholds and determining security mode switching: The safety strategy control module receives digital environmental parameters transmitted by the environmental sensing module, and compares each parameter with the corresponding environmental parameter thresholds pre-stored in the module to obtain the temperature and humidity anomaly coefficient. Vibration anomaly coefficient Electromagnetic radiation anomaly coefficient ; When all environmental parameters are within the corresponding threshold range, the security policy control module determines that the solid-state drive maintains the current normal security working mode and does not send policy switching instructions to other modules. When any environmental parameter exceeds the corresponding threshold range, the security policy control module calculates the comprehensive environmental anomaly level based on the type of parameter exceeding the threshold using a formula. The calculation formula is: The security strategy control module comprehensively determines the level based on environmental anomalies. The system determines the corresponding abnormal environment type and sends a security mode switching command matching that abnormal environment type to the main control unit. The main control unit then distributes this command to the corresponding execution modules. , , The abnormal weights are respectively for temperature and humidity, vibration, and electromagnetic radiation.

4. A solid-state drive component with data security function according to claim 1, characterized in that, When the main control unit detects an abnormal environment such as severe vibration and performs a safety protection operation, it performs the following operations: After receiving the severe vibration protection mode switching command from the security policy control module, the main control unit first calculates the backup priority of all data in the conventional storage area of ​​the NAND flash array. The backup priority calculation formula is as follows: The main control unit determines the backup priority. Sort the data in the regular storage area from high to low, where For the first Backup priority for class data For the first The frequency coefficient of reading and writing data of class For the first Storage association coefficient of class data, , Calculate coefficients for priority; The main control unit sends a core data backup command to the NAND flash array. After receiving the command, the NAND flash array will transfer and store the high-priority core data in the regular storage area to the temporary backup area according to the sorting result, thus completing the temporary backup operation of the core data. After the core data backup operation is completed, the main control unit sends a storage mode switching command to the NAND flash array. The NAND flash array switches from the normal read-write mode to the read-only protection mode according to the command. In the read-only protection mode, the NAND flash array only allows data reading permissions and disables data writing, modification and deletion permissions.

5. A solid-state drive component with data security function according to claim 1, characterized in that, When the main control unit detects an abnormal environment such as high temperature or strong electromagnetic interference and performs a safety protection operation, it performs the following operations: After receiving the high temperature or strong electromagnetic interference protection mode switching command from the security policy control module, the main control unit activates its own encryption control function and calculates the target encryption level using a formula. The calculation formula is: The main control unit determines the encryption level based on the target. The overall data encryption level of the solid-state drive has been adjusted, including... This is the basic encryption level for solid-state drives. This refers to the temperature and humidity anomaly coefficient. This is the electromagnetic radiation anomaly coefficient. , Adjust the encryption level coefficient; As the encryption level adjustment operation is completed, the main control unit sends a working state switching command to the interface module; Upon receiving the instruction, the interface module switches its working state, cuts off all data interaction channels with external devices, and prohibits external devices from accessing, reading, writing, and interacting with the solid-state drive.

6. A solid-state drive component with data security function according to claim 1, characterized in that, The environmental sensing module is a surface-mount integrated module, which is fixedly installed on the corner of the circuit board where there is no large integrated module. The signal output terminals of various sensors are electrically connected to the signal input terminals of the main control unit through a dedicated data bus. The environmental sensing module has a built-in independent analog-to-digital conversion unit, which is electrically connected to the signal output terminals of various sensors and is used to convert the analog parameters collected by the sensors into digital parameters. The converted digital parameters are transmitted to the safety policy control module of the main control unit through a dedicated data bus.

7. A solid-state drive component with data security function according to claim 1, characterized in that, The conventional storage area of ​​the NAND flash array is the main data storage area of ​​the solid-state drive, used for various daily data read, write, storage and modification operations. The temporary backup area is an independent dedicated storage area that does not participate in the daily data storage work of the solid-state drive. It only starts working when it receives a backup command from the main control unit. The NAND flash array has a built-in storage control unit, which is electrically connected to the main control unit. It is used to receive mode switching commands sent by the main control unit and control the NAND flash array to complete the switching of storage working modes.

8. A solid-state drive component with data security function according to claim 1, characterized in that, The interface module is the only channel for data interaction between the solid-state drive and external devices. The module has two working states: normal read / write and locked. In the normal read / write state, the interface module transmits bidirectional data and commands between the solid-state drive and external devices and responds to interaction requests. In the locked state, the interface module cuts off all its own data transmission channels and command reception channels. The interface module has a built-in status detection unit, which is electrically connected to the main control unit and is used to detect the module's own working status and transmit the status information to the main control unit.

9. A solid-state drive component with data security function according to claim 1, characterized in that, The main control unit also has a built-in encryption control module and a status feedback receiving module. The encryption control module is electrically connected to the security policy control module and is used to receive instructions from the security policy control module and adjust the encryption level of the solid-state drive. The encryption control module has at least two different levels of encryption algorithms pre-stored. The status feedback receiving module is electrically connected to the NAND flash array, the environmental sensing module, and the interface module respectively and is used to receive the working status information transmitted by each integrated module and transmit the information to the core control unit of the main control unit.

10. A solid-state drive component with data security function according to claim 1, characterized in that, The solid-state drive (SSD) casing is a one-piece metal casing that completely encloses the circuit board and all integrated modules on it. The inner wall of the SSD casing is provided with an electromagnetic shielding layer and a buffer protection layer. The buffer protection layer is attached to the edge of the circuit board. The SSD casing is provided with an opening that is compatible with the interface module. The interface module extends through the opening to the outside of the casing for establishing a connection with external devices.

Images