Universal serial bus (USB) mobile hard disk cartridge for realizing hard disk data protection lock by using advanced technology attachment (ATA) command

Abstract

The utility model relates to a method and a device for realizing a USB (Universal Serial Bus) mobile hard disk cartridge of a hard disk data protection lock by using an ATA (Advanced Technology Attachment) command, and the device comprises a USB bridging controller which is used for converting a USB bus signal into an interface and a protocol of a mechanical or solid state disk; the MCU controller with the USB interface sends a data security command of an ATA transport protocol to the USB bridging controller and locks and unlocks a hard disk, and a lock key is input through a keyboard of the device or host computer application software; the analog switch circuit logic module is used for switching a USB bus under the control of the MCU and selecting to connect the USB bridging controller to the MCU or an upper host; and the USB HUB controller can be selected, so that the upper host is simultaneously connected with the USB bridging controller and the MCU. The device is plug-and-play, and a special drive program does not need to be installed. In the embodiment of the utility model, after the hard disk used by the mobile hard disk box is locked, data information in the hard disk is effectively protected.

Description

Technical Field

[0001] The present invention relates to the field of computer information security, and particularly to a method and device for implementing a USB mobile hard disk box with a hard disk data protection lock using ATA commands. Background Art

[0002] The USB interface mobile hard disk is an indispensable external storage device for computers to transfer and store data files. Compared with mobile hard disks of other interfaces (such as IEEE1394), it has a lower price, and has the characteristics of large capacity, fast speed, small size, easy to carry, hot pluggable, plug and play, etc., and has been widely popularized and applied.

[0003] The USB mobile hard disk consists of two parts: a USB bridge controller, which is used to convert the USB bus signal into the interface and protocol used by the hard disk; and a mechanical or solid-state hard disk as the storage medium. The mechanical hard disk is an IDE and SATA interface that supports the ATA transmission protocol, and the solid-state hard disk is an mSATA and NGFF m.2 interface that supports the ATA transmission protocol, and an NVMe interface that supports the PCIe transmission protocol.

[0004] The portability of the USB mobile hard disk determines that it is easy to be lost and stolen, resulting in the leakage of sensitive data information. In the prior art, common data protection solutions for USB mobile hard disks are as follows: one is to use a mechanical structure to lock the mobile hard disk. For example, the patent with publication number CN203324990U discloses an encrypted mobile hard disk with a password lock, and the patent with publication number CN204303347U discloses a theft alarm mobile hard disk. These physical lock solutions can only limit the illegal use of the mobile hard disk, but cannot prevent the leakage of the data information of the mobile hard disk after theft. The second is to rely on the computer operating system and application software to set access keys for the mobile hard disk or perform data software encryption / decryption. For example, the patent with publication number CN101350042A discloses a method for restricting the use of a mobile hard disk. This pure software solution has extremely low security. The third is to add a dedicated encryption chip to the mobile hard disk to perform hardware chip-level encryption / decryption on the data. Therefore, the data encryption strength and security are very high. However, for USB 3.0 mobile hard disks, this solution has great technical implementation difficulty and high cost.

[0005] For the mechanical or solid-state hard disks that support the ATA transmission protocol used in the USB mobile hard disk, data security commands (Security Mode Feature Set) can be sent to the hard disk through the USB hard disk controller, so that the hard disk enters the corresponding security state, thereby preventing illegal reading and writing of the hard disk and protecting the data security of the hard disk.

[0006] In the ATA transmission protocol specification command set, the hard disk data security commands (Security Mode Feature Set) include: set key and automatically lock (Security Set Password), unlock (Security Unlock), clear key (Security Disable Password), freeze (Security Freeze Lock), data erase (Security Erase Prepare and Security Erase Unit). The command descriptions are as follows:

[0007] Set the lock key and automatically lock (Security Set Password) command: Set the key for the hard disk. After receiving the command, the hard disk controller saves the key and locks the hard disk. When the hard disk is powered off and then powered on, it is in the user data locked state. In this state, only unlocking, data clearing, hard disk diagnostic test, and non-user data read and write commands are allowed to be sent and executed, and reading and writing user data in the hard disk is not allowed.

[0008] Unlock (Security Unlock) command: Send a key to the locked hard disk. The hard disk controller successfully unlocks the hard disk after verifying that the key is correct. The hard disk is in the user data unlocked state. In this state, all commands are allowed to be sent and executed, and the computer can read and write the hard disk normally. When the hard disk loses power, the unlocking is ineffective, and it is still in the user data locked state.

[0009] Clear key (Security Disable Password) command: After sending the unlock command, send this command and key to the hard disk. The hard disk controller will successfully clear the lock key after verifying that the key is correct. After the hard disk is powered off, it will be in the user data unlocked state. In this state, all commands can be sent and executed, and the computer can read and write the hard disk normally.

[0010] Freeze (Security Freeze Lock) command: puts the hard disk in the user data unlocked state into the security freeze state to prevent illegal locking, unlocking, clearing keys, clearing data and other operations. In this state, other commands except setting keys and automatically locking, unlocking, clearing keys, and clearing data are allowed to be sent and executed, and the computer can read and write the hard disk normally. The freeze state is automatically released after the hard disk is powered off or hard reset.

[0011] Data Erase (Security Erase Prepare and Security Erase Unit) commands: Regardless of whether the hard disk is in the user data locked or unlocked state, this command and the locking key are sent to the hard disk. After the hard disk controller verifies that the key is correct, all user data in the hard disk will be erased. Summary of the Invention

[0012] In view of the problems existing in the existing USB mobile hard disk data protection solutions in the background art, the present utility model provides a USB mobile hard disk enclosure that uses ATA commands to implement a hard disk data protection lock. It comprehensively uses hardware and software technologies and can lock and unlock the connected hard disk. When the hard disk is locked, unauthorized users cannot read or write the data in the hard disk medium. The USB mobile hard disk enclosure that uses ATA commands to implement a hard disk data protection lock has an upstream USB interface connected to the host computer and a downstream hard disk interface connected to a mechanical hard disk with a SATA interface or a solid-state hard disk with an mSATA / NGFF m.2 interface.

[0013] Preferably, the USB mobile hard disk enclosure that uses ATA commands to implement a hard disk data protection lock includes: a USB bridge controller; an MCU controller with a USB interface, supporting USB host mode and USB device mode; an analog switch circuit logic module; an optional multi-port USB HUB controller; an optional built-in keyboard; it is plug-and-play and does not require the installation of a dedicated driver.

[0014] In any of the above solutions, preferably, the USB bridge controller is a USB to SATA Bridge Controller, supporting USB 2.0 and above protocols and SATA protocol, supporting the ATA / ATAPI PACKET command set. Its USB bus port is connected to the analog switch circuit logic module, and its SATA bus port is connected to the SATA interface for inserting a mechanical hard disk or the mSATA / NGFF m.2 interface for inserting a solid-state hard disk.

[0015] In any of the above solutions, preferably, the MCU controller with a USB interface, supporting USB host and device modes, has one end connected to a downstream port of the USB HUB controller and conducts USB communication with the host computer in USB device mode; the other end is connected to the analog switch circuit logic module and is connected to the USB bridge controller by controlling the analog switch circuit logic module in USB host mode to send data security commands and key values in the ATA transmission protocol to the USB bridge controller; it is connected to the RESET# of the USB bridge controller and the USB HUB controller through control signals respectively.

[0016] Preferably, in any of the above solutions, the analog switch circuit logic module is a multi-channel one-to-two switch, one end of which is connected to the USB bridge controller, and the other two ends are respectively connected to a downstream port of the USB HUB controller and the MCU controller. Under the control of the MCU, when the MCU controller works in the device mode, the USB bridge controller is connected to the host computer, and when it works in the host mode, the USB bridge controller is connected to the MCU controller.

[0017] Preferably, in any of the above solutions, the optional multi-port USB HUB controller supports USB 2.0 and above protocols. When in use, one of its downstream ports is connected to the MCU controller, one downstream port is connected to the analog switch circuit logic module, and the other downstream ports can be connected to other USB devices. When there is no need to send ATA transmission protocol data security commands to the USB bridge controller, the host computer can read and write the USB mobile hard disk, the MCU controller, and other USB devices simultaneously.

[0018] Preferably, in any of the above solutions, the optional built-in keyboard, if installed on the shell of the USB mobile hard disk case when in use, is connected to the MCU controller. The user inputs the ATA data security command and the lock key value through the keys and sends them to the MCU controller; if it is omitted and not used, the user inputs the ATA data security command and the lock key value through the host computer application software and sends them to the MCU controller.

[0019] The present utility model also provides a method for implementing a USB mobile hard disk case with a hard disk data protection lock using ATA commands. The method includes the following steps:

[0020] Insert the device into any USB port of the host computer. After the MCU controller is powered on and initialized, it enters the USB device mode, connects to the computer, and waits for the user to input the lock command and the key value through the built-in keyboard or application software.

[0021] If there is no user input of the lock command and the key value, it loops waiting for the user to input. If there is user input, the MCU controller reads in the lock command and the key value and then enters the USB host mode, switching the analog switch circuit to connect to the USB bridge controller.

[0022] The MCU controller detects whether the hard disk is ready. If not, it returns to the device mode. If so, it sends the ATA security command and the key value to the USB bridge controller.

[0023] The MCU controller reads the status returned by the hard disk and detects whether the ATA security command has been successfully executed by the hard disk. If not, it directly returns to the device mode waiting for the user to input again. Otherwise, it switches the analog switch circuit to connect the USB mobile hard disk to the host computer and then returns to the device mode.

[0024] In the embodiments of the present invention, the USB mobile hard disk box with a hard disk data protection lock implemented by ATA commands has achieved locking and unlocking of the used hard disk, protecting the security of important data, effectively restricting the illegal use of the mobile hard disk, and thoroughly preventing the leakage of sensitive information in the hard disk data after the mobile hard disk is stolen. It can be widely applied to the transfer and backup of computer data, and is particularly suitable for protecting confidential information in offices and businesses as well as personal privacy. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 is a schematic structural principle diagram of a USB mobile hard disk box with a hard disk data protection lock implemented by ATA commands according to the present invention.

[0026] Figure 2 is a flowchart of the implementation method of a USB mobile hard disk box with a hard disk data protection lock implemented by ATA commands according to the present invention.

[0027] Figure 3 is a schematic block diagram of the main interface of the host application software of the upper computer. DETAILED IMPLEMENTATION MANNER

[0028] In order to make the objectives, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings and exemplary embodiments. The specific embodiments described herein are only for explaining the present invention and are not used to limit the present invention.

[0029] Embodiment 1: Use a USB3.0 HUB controller and a keyboard built into the housing.

[0030] According to Figure 1 the schematic structural principle diagram of the USB mobile hard disk box with a hard disk data protection lock implemented by ATA commands provided by the present invention as shown, in this embodiment:

[0031] The USB bridge controller selects JMS578, which is a USB to SATA Bridge Controller from USB3.1 Gen 1 to SATA 6Gb / s, compliant with the USB3.1 specification, USB Mass Storage Class and BOT specification, USB Attached SCSI Protocol (UASP) specification, and the 3.2 version of SATA 6Gb / s electrical specification, and supports the ATA / ATAPI PACKET command set. The DP / DM of its USB bus port is connected to the Dp / Dn ports of BL1532 in the analog switch circuit logic module, and the SSTXN / SSTXP and SSRXN / SSRXP are connected to the TX2- / TX2+ and RX2- / RX2+ in the downstream port 2 of the USB HUB controller GL3523. The TXN / TXP and RXN / RXP of the SATA bus port are connected to the SATA interface that can insert a mechanical hard disk or the mSATA / NGFF m.2 interface that can insert a solid-state drive.

[0032] The MCU controller with a USB interface selects CH559L, which is an enhanced E8051 core single-chip microcomputer compatible with the MCS51 instruction set, and the average instruction speed is 8 to 15 times faster than that of the standard MCS51. It has 64KB of non-volatile memory Flash-ROM inside, which is used for the program storage area and data storage area; 256 bytes of internal iRAM, which is used for fast data caching and the stack, and 6KB of on-chip xRAM, which is used for large data caching and DMA direct memory access; it has an embedded USB controller and a dual USB transceiver, supporting the USB host mode and USB device mode, and supporting USB2.0 full speed of 12Mbps or low speed of 1.5Mbps. The DP / DM of the device port of CH559L is connected to the DP1 / DM1 of the USB HUB controller GL3523, and the HP / HM of the host port is connected to the Dp2 / Dn2 ports of the analog switch circuit logic module BL1532; the IO ports P21 and P22 are respectively connected to the OEb and SEL of the analog switch circuit logic module; the IO port P23 is connected to the RESET# of GL3523. When CH559L enters the USB host mode, it starts to hard reset GL3523 and ends when it returns to the USB device mode; the IO ports P24, P25, and P26 are connected to the LED indicators; the IO ports P14 to P17 are connected to the CLK, / CS, DI, and DO of the external Serial Flash W25Q64FV (64M-bit), and are read and written by the host computer as a small-capacity standard USB flash drive; the IO ports P30 and P31 are connected to the built-in keyboard.

[0033] The analog switch circuit logic module selects BL1532 to switch the DP / DM signal lines of the USB2.0 bus. It is a Low-Power, Two-Port, High-Speed USB2.0 double-pole double-throw (DPDT) Analog Switch. Its OEb and SEL are respectively connected to P21 and P22 of CH559L; the ports Dp / Dn are connected to the DP / DM of JMS578; the ports Dp1 / Dn1 are connected to DP2 / DM2 of GL3523; the ports Dp2 / Dn2 are connected to the host ports HP / HM of CH559L.

[0034] The multi-port USB HUB controller selects GL3523, which is a one-to-four USB 3.1 Low-Power HUB Controller that supports the USB3.0 bus. It uses TX- / TX+ and RX- / RX+ signal lines and is compatible with USB2.0 and USB3.0. Its upstream ports DPO / DM0 and TX0- / TXO+ and RXO- / RXO+ are connected to the USB port of the upper computer host. The downstream port DP1 / DM1 is connected to the device port DP / DM of the MCU controller CH559L. DP2 / DM2 is connected to the port Dp1 / Dn1 of BL1532. TX2- / TX2+ and RX2- / RX2+ are connected to SSTXN / SSTXP and SSRXN / SSRXP of JMS578. DP3 / DM3, TX3- / TX3+, RX3- / RX3+ and DP4 / DM4, TX3- / TX4+, RX4- / RX4+ are respectively connected to other USB devices.

[0035] The built-in keyboard is installed on the housing of the device. It selects 16 buttons (0-9 numeric keys, F1-F6 lock command keys) and is connected to P30 and P30 of CH559L. The key codes are sent through RS232 serial communication.

[0036] According to Figure 2 the implementation method flowchart of the USB mobile hard disk box with a hard disk data protection lock implemented by ATA commands provided by the present utility model as shown, the working process is as follows:

[0037] Insert this USB mobile hard disk box device into any USB port of the upper computer host. After the MCU controller CH559L is powered on and initialized, it enters the USB device mode and is read and written by the upper computer host as a standard USB flash drive; control the OEb and SEL of the analog switch circuit logic module BL1532 to switch the connection between the ports Dp / Dn and Dp1 / Dn1, and connect JMS578 to the upper computer host; wait for the user to input the lock command and key value through the built-in keyboard.

[0038] After the user inputs, CH559L reads the lock command and the key value and then enters the USB host mode. It controls the OEb and SEL of the analog switch circuit logic module BL1532 to switch the connection of port Dp / Dn and port Dp2 / Dn2, connecting JMS578 to CH559L.

[0039] CH559L detects whether a hard disk is inserted into JMS578. If not, it returns to the device mode. If so, it sends the ATA security command and the key value input by the user to the USB external hard disk.

[0040] CH559L reads the status of the hard disk returned by JMS578 and detects whether the ATA security command has been successfully executed on the hard disk. If not, it directly returns to the device mode to wait for the user to input again. If successful, it controls the OEb and SEL of the analog switch circuit logic module BL1532 to switch the connection of port Dp / Dn and port Dp1 / Dn1, and returns to the device mode.

[0041] Beneficial effects: The USB3.0 external hard disk enclosure provided in this embodiment has passed the test of the experimental prototype, realizing the locking and unlocking of the inserted mechanical hard disk or solid-state drive, effectively preventing the leakage of sensitive information in the hard disk data, and protecting the security of important data. The advantages of this embodiment are that it uses the built-in keyboard to input the lock command and the key value, without relying on the computer operating system and application software; the disadvantages are: ① Using a USB HUB to expand the USB3.0 bus reduces the read and write speed of the USB3.0 external hard disk; ② The built-in keyboard increases the cost and complexity of the enclosure.

[0042] Embodiment 2: Do not use a USB HUB controller and use the built-in keyboard on the enclosure.

[0043] In this embodiment, the USB bridge controller still selects JMS578. Its DP / DM of the USB bus port is connected to the port Dp / Dn of BL1532 in the analog switch circuit logic module, and SSTXN / SSTXP and SSRXN / SSRXP are connected to the port TXA- / TXA+ of CH482 in the analog switch circuit logic module, and RXB- / RXB. The TXN / TXP and RXN / RXP of the SATA bus port are connected to the SATA interface that can insert a mechanical hard disk or the mSATA / NGFF m.2 interface that can insert a solid-state drive.

[0044] The MCU controller still selects CH559L. It only uses the DP / DM signal lines of the USB2.0 bus and does not use the TX- / TX+ and RX- / RX+ signal lines of the USB3.0 bus. Its device port DP / DM is directly connected to a USB port of the host computer through a single USB cable. Other connection methods are the same as those in Embodiment 1.

[0045] In the analog switch circuit logic module, BL1532 is still selected to switch the DP / DM of the USB2.0 bus, and its connection method is the same as that in Embodiment 1; CH482 is added to switch the TX- / TX+ and RX- / RX+ signal lines of the USB3.0 bus. CH482 is a QPDT broadband ultra-speed bidirectional analog switch, which includes 2 differential channels 2:1 MUX (a total of 4 channels for one selection), and its EN# and SEL are respectively connected to P21 and P22 of CH559L; the ports TXA- / TXA+ and RXB- / RXB are connected to SSTXN / SSTXP and SSRXN / SSRXP of JMS578; the ports TXA0- / TXA0+ and RXB0- / RXB0 are directly connected to a USB port of the host computer of the upper computer through a single USB cable; the ports TXA1- / TXA1+ and RXB1- / RXB1+ are not used.

[0046] The USB HUB controller is not used.

[0047] The built-in keyboard is still used to input the lock command and key value.

[0048] In this embodiment, the working process of locking and unlocking the hard disk inserted into JMS578 adds CH559L to control the EN# and SEL of CH482 on the basis of Embodiment 1. In the USB device mode, SSTXN / SSTXP and SSRXN / SSRXP of JMS578 are connected to the ports TXA0- / TXA0+ and RXB0- / RXB0 of CH482, connecting JMS578 to the host computer of the upper computer. In the USB host mode, JMS578 is disconnected from the host computer of the upper computer, and the rest is the same as Embodiment 1.

[0049] Beneficial effects: The USB3.0 mobile hard disk box provided in this embodiment also realizes the locking and unlocking of the inserted mechanical hard disk or solid-state hard disk, effectively preventing the leakage of sensitive information in the hard disk data and protecting the security of important data. The advantages of this embodiment are that the built-in keyboard is used to input the lock command and key value, without relying on the computer operating system and application software; the disadvantages are: ① Using the broadband ultra-speed bidirectional analog switch CH482 to switch the USB3.0 bus signal reduces the read and write speed of the USB3.0 mobile hard disk to some extent; ② Occupying two USB ports of the host computer of the upper computer; ③ The built-in keyboard increases the cost and complexity of the shell.

[0050] Embodiment 3: Use a USB2.0 HUB controller, and the shell does not have a keyboard and uses application software.

[0051] In this embodiment, the USB bridge controller JMS580 is selected. It is a USB to SATA Bridge Controller from USB3.2 Gen 2 to SATA 6Gb / s, compliant with the USB3.2 specification, the USB Mass Storage Class and BOT specification, the USB Attached SCSI Protocol (UASP) specification, and the 3.2 version SATA 6Gb / s electrical specification. It supports the execution of TRIM commands for SSDs, supports the ATA / ATAPI PACKET command set, has a built-in USB Type-C multiplexer and configuration channel (CC) logic, and supports Type-C connections. After using JMS580, Figure 1 the upstream USB interface in Figure 1 is a Type-C socket of USB3.0, and its C1 and C2 are connected to the ports Dp1 / Dn2 and Dp2 / Dn1 of BL1532-4 in the analog switch circuit logic module. The USB3.0 ports SSTXN1 / SSTXP1, SSRXN1 / SSRXP1 and SSTXN2 / SSTXP2, SSRXN2 / SSRXP2 of JMS580 are connected to the Type-C socket one by one. The 2.0 port DP / DM is connected to the port Dp / Dn of BL1532-2, C1 and C2 are connected to the port Dp / Dn of BL1532-4, and the SATA bus ports TXN / TXP and RXN / RXP are connected to the SATA interface that can insert a mechanical hard disk or the mSATA / NGFF m.2 interface that can insert a solid-state drive.

[0052] The MCU controller still selects CH559L. Its device ports DP / DM are connected to DP1 / DM1 of the USB HUB controller SL2.1A, and the host ports HP / HM are connected to the ports Dp2 / Dn2 of BL1532-3 in the analog switch circuit logic module; the IO ports P20, P21, P22, P23 are respectively connected to the SEL of BL1532-1, BL1532-2, BL1532-3, BL1532-3 in the analog switch circuit logic module; the IO port P24 is connected to the RESET# of JMS580, and the IO ports P25, P26, P27 are connected to the LED indicators; the IO ports P14~P17 are connected to the CLK, / CS, DI, DO of the external Serial Flash W25Q64FV (64M-bit), and it is used as a small-capacity standard USB flash drive for reading and writing by the host computer.

[0053] In the analog switch circuit logic module, 4 pieces of BL1532 are selected. Their OEb pins are all grounded, and the SEL pins are respectively connected to P20, P21, P22, and P23 of CH559L. The Dp / Dn pins of BL1532-1 are simultaneously connected to DP1 / DN1 and DP2 / DN2 of the Type-C socket, the Dp1 / Dn1 pins are connected to the Dp2 / Dn2 pins of BL1532-2, and the Dp2 / Dn2 pins are connected to UDP / UDM of the USB HUB controller SL2.1A; the Dp / Dn pins of BL1532-2 are connected to DP / DM of JMS580, the Dp1 / Dn1 pins are connected to the Dp / Dn pins of BL1532-3, and the Dp2 / Dn2 pins are connected to the Dp1 / Dn1 pins of BL1532-1; the Dp / Dn pins of BL1532-3 are connected to the Dp1 / Dn1 pins of BL1532-2, the Dp1 / Dn1 pins are connected to the host port HP / HM of CH559L, and the Dp2 / Dn2 pins are connected to DP2 / DM2 of the USB HUB controller SL2.1A; the Dp / Dn pins of BL1532-4 are connected to C1 / C2 of JMS580, and the Dp1 / Dn2 and Dp2 / Dn1 pins are respectively connected to C1 and C2 of the Type-C socket. When C1 / C2 of JMS580 is connected to C2 / C1 of the Type-C socket, it works in the USB2.0 mode and the hard disk has not executed the lock command. When C1 / C2 of JMS580 is connected to C1 / C2 of the Type-C socket, it works in the USB3.0 mode and the hard disk has executed the lock command.

[0054] The multi-port USB HUB controller SL2.1A is selected. It is a domestic one-port-four high-integration, high-performance, low-power, and low-price USB2.0 HUB Controller. It only uses the USB2.0 bus and does not use the TX- / TX+ and RX- / RX+ signal lines of USB3.0. Its upstream port UDP / UDM is connected to the Dp2 / Dn2 pins of BL1532-1, and its downstream ports DP1 / DM1 are connected to the device port DP / DM of CH559L, and DP2 / DM2 are connected to the Dp2 / Dn2 pins of BL1532-3. DP3 / DM3 and DP4 / DM4 are not used.

[0055] The housing does not have a keyboard, and the application software of the host computer of the upper computer is used to input the data security commands and key values in the ATA transmission protocol. As Figure 3 shown, it is the principle block diagram of the main interface of the application software, and the working process is as follows:

[0056] The user selects and clicks the button on the main interface and enters the key value in the pop-up input box;

[0057] After the user inputs, the host computer writes the input ATA security command and key value into the internal RAM of CH559L according to the hard disk access mode.

[0058] CH559L sends the input ATA security command and key value to JMS580 according to the process as Figure 2 shown.

[0059] When CH559L reads the status of the USB mobile hard disk executing the ATA security command and returns to the device mode, the host computer reads this status from the internal RAM of CH559L.

[0060] Beneficial effects: The USB3.0 mobile hard disk box provided in this embodiment also realizes the locking and unlocking of the inserted mechanical hard disk or solid state drive, effectively preventing the leakage of sensitive information in the hard disk data and protecting the security of important data. The advantages of this embodiment are as follows: ① The overall circuit logic and shell structure are simple, and the cost performance is good; ② The USB3.0 signal line is directly connected to the host computer, giving full play to the performance of JMS580 without affecting the hard disk reading and writing speed at all; ③ It supports Type-C connection. It has passed the performance test of the experimental prototype and is in mass production for users with confidentiality requirements.

[0061] The above are only the preferred embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent replacements, and improvements made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A USB mobile hard disk box device that uses ATA commands to implement a hard disk data protection lock, the upstream USB interface is connected to a host computer host, and the downstream hard disk interface is connected to a mechanical hard disk with a SATA interface or a solid-state hard disk with an mSATA / NGFF m.2 interface, characterized in that: The device comprises: USB bridge controller, which converts USB bus signals into interfaces and protocols used by mechanical or solid-state drives; The MCU controller with a USB interface is used to send data security commands and key values ​​of the ATA transmission protocol to the USB bridge controller to lock and unlock the hard disk inserted into the downstream hard disk interface; Analog switch circuit logic module, used to switch the USB bus and CC signal line in Type-C under MCU control; An optional multi-port USB HUB controller, when in use, the USB bridge controller and the MCU controller share a USB port to connect to the host computer. When not in use, the USB bridge controller and the MCU controller each occupy a USB port to connect to the host computer. Optional onboard keyboard for entering data security commands and lock key values; Plug and play, no need to install special drivers.

2. The USB mobile hard disk box device according to claim 1, characterized in that: The USB bridge controller is a USBto SATA Bridge Controller, which supports USB2.0 and above protocols and SATA protocols, and supports ATA / ATAPI PACKET command sets. Its USB bus port is connected to the analog switch circuit logic module, and the SATA bus port is connected to the SATA interface that can be inserted into a mechanical hard disk or the mSATA / NGFF m.2 interface that can be inserted into a solid-state hard disk; it is plug-and-play and does not require the installation of a dedicated driver.

3. The USB mobile hard disk box device according to claim 1, characterized in that: The MCU controller with a USB interface supports USB host and device working modes, one end of which is connected to a downstream port of a USB HUB controller and is connected to a host computer host in USB device mode; the other end is connected to an analog switch circuit logic module and is connected to a USB bridge controller by controlling the analog switch circuit logic module in USB host mode, and sends data security commands and key values ​​in the ATA transmission protocol to the USB bridge controller; and is respectively connected to RESET# of the USB bridge controller and the USB HUB controller through control signals.

4. The USB mobile hard disk box device according to claim 1, characterized in that: The analog switch circuit logic module is a multi-way two-choice switch, one end of which is connected to the USB bridge controller, and the other two ends are respectively connected to a downstream port of the USB HUB controller and the MCU controller; Under the control of the MCU, when the MCU controller works in device mode, the USB bridge controller is connected to the upper computer host, and when working in host mode, the USB bridge controller is connected to the MCU controller.

5. The USB mobile hard disk box device according to claim 3, characterized in that: The data security command and key value in the ATA transmission protocol are input through the device's own keyboard or through the host computer application software.

6. The USB mobile hard disk box device according to claim 1, characterized in that: The optional multi-port USB HUB controller supports USB 2.0 and above protocols; when in use, one downstream port is connected to the MCU controller, one downstream port is connected to the analog switch circuit logic module, and the other downstream ports can be connected to other USB devices; it is plug-and-play and does not require the installation of a dedicated driver; when there is no need to send a data security command in the ATA transmission protocol to the USB bridge controller, the upper computer host can simultaneously read and write the USB mobile hard disk, the MCU controller, and other USB devices.

7. The USB mobile hard disk box device according to claim 1, characterized in that: The optional built-in keyboard, when used, is installed on the outer shell of the USB mobile hard disk box and connected to the MCU controller. The user inputs the ATA data security command and lock key value by pressing the keys and sends them to the MCU controller; if it is omitted and not used, the user inputs the ATA data security command and lock key value through the upper computer host application software and sends them to the MCU controller.

8. The USB mobile hard disk box device according to claim 3, characterized in that: When the MCU controller works in device mode, the upper computer host reads and writes its internal RAM and the external FLASH as a standard U disk according to the hard disk access mode, which is plug-and-play and does not require the installation of a dedicated driver.

9. The USB mobile hard disk box device according to claim 3, characterized in that: The MCU controller hard resets the USB HUB controller by controlling RESET# of the USB HUB controller, thereby disconnecting the upper computer host from the USB device inserted into the downstream port of the USB HUB.

Images