USB HUB for locking and unlocking mobile hard disk through ATA command

Abstract

The utility model relates to a USB HUB method and device for locking and unlocking a USB mobile hard disk through an ATA command, and the device comprises a multi-port USB HUB controller which is used for connecting an upper computer host with the mobile hard disk, an MCU and other USB devices at the same time; the MCU controller is provided with a USB (Universal Serial Bus) interface and is used for sending a data security command of an ATA (Advanced Technology Attachment) transport protocol to the connected mobile hard disk and locking and unlocking the hard disk, and a lock key can be input through a keyboard of the device or host computer host application software; and the analog switch circuit logic module is used for switching the USB bus under the control of the MCU and selecting to connect the mobile hard disk to the MCU or the host computer. The device is plug-and-play, and a special drive program does not need to be installed. According to the method and the device provided by the utility model, locking and unlocking of the USB mobile hard disk are realized, and important sensitive data information in the mobile hard disk is effectively protected.

Description

Technical Field

[0001] The present invention relates to the field of computer information security, and particularly to a method and device for implementing a USB HUB for locking and unlocking a USB interface mobile hard disk through ATA commands. Background Art

[0002] A USB HUB is a computer USB bus hub or docking station that, as a repeater, regenerates and amplifies USB signals in a USB bus star topology, expands a computer USB interface into multiple independently operating USB interfaces, enabling the computer to connect devices with multiple USB interfaces; it supports various versions of the USB transmission protocol and can be hot-plugged and plug-and-play.

[0003] A USB interface mobile hard disk is an indispensable external storage device for a computer to transfer and store data files, with characteristics such as large capacity, high speed, small size, easy portability, hot-plugging, and plug-and-play, and has been widely popularized and applied. A USB mobile hard disk consists of two parts: a USB bridge controller for converting USB bus signals into the interfaces and protocols used by the hard disk; and a mechanical or solid-state hard disk as the storage medium. The mechanical hard disk has IDE and SATA interfaces that support the ATA transmission protocol, and the solid-state hard disk has mSATA and NGFF interfaces that support the ATA transmission protocol, and an NVMe interface that supports the PCIe transmission protocol.

[0004] The portability of a USB mobile hard disk determines that it is prone to being lost or stolen, resulting in the leakage of sensitive data information. In the prior art, common data protection solutions for USB mobile hard disks are as follows: one is to use a mechanical structure to lock the mobile hard disk. For example, the patent with publication number CN203324990U discloses an encrypted mobile hard disk with a password lock, and the patent with publication number CN204303347U discloses a theft-alarm mobile hard disk. These physical lock solutions can only restrict the illegal use of the mobile hard disk and cannot prevent the leakage of data information on the mobile hard disk after theft. The second is to rely on the computer operating system and application software to set access keys for the mobile hard disk or perform data software encryption / decryption. For example, the patent with publication number CN101350042A discloses a method for restricting the use of a mobile hard disk. This pure software solution has extremely low security. The third is to add a dedicated encryption chip to the mobile hard disk to perform hardware chip-level encryption / decryption of data, so the data encryption strength and security are very high. However, for a USB 3.0 mobile hard disk, this solution has great technical implementation difficulty and high cost.

[0005] For mechanical or solid-state hard disks that support the ATA transmission protocol and are used in USB mobile hard disks, a data security command (Security Mode Feature Set) can be sent to the hard disk through the USB hard disk controller to put the hard disk into a corresponding security state, thereby preventing illegal reading and writing of the hard disk and protecting the data security of the hard disk.

[0006] In the ATA transmission protocol specification command set, the hard disk data security commands (Security Mode Feature Set) include: set key and automatically lock (Security Set Password), unlock (Security Unlock), clear key (Security Disable Password), freeze (Security Freeze Lock), data erase (Security Erase Prepare and Security Erase Unit). The command descriptions are as follows:

[0007] Set the lock key and automatically lock (Security Set Password) command: Set the key for the hard disk. After receiving the command, the hard disk controller saves the key and locks the hard disk. When the hard disk is powered off and then powered on, it is in the user data locked state. In this state, only unlocking, data clearing, hard disk diagnostic test, and non-user data read and write commands are allowed to be sent and executed, and reading and writing user data in the hard disk is not allowed.

[0008] Unlock (Security Unlock) command: Send a key to the locked hard disk. The hard disk controller successfully unlocks the hard disk after verifying that the key is correct. The hard disk is in the user data unlocked state. In this state, all commands are allowed to be sent and executed, and the computer can read and write the hard disk normally. When the hard disk loses power, the unlocking is ineffective, and it is still in the user data locked state.

[0009] Clear key (Security Disable Password) command: After sending the unlock command, send this command and key to the hard disk. The hard disk controller will successfully clear the lock key after verifying that the key is correct. After the hard disk is powered off, it will be in the user data unlocked state. In this state, all commands can be sent and executed, and the computer can read and write the hard disk normally.

[0010] Freeze (Security Freeze Lock) command: puts the hard disk in the user data unlocked state into the security freeze state to prevent illegal locking, unlocking, clearing keys, clearing data and other operations. In this state, other commands except setting keys and automatically locking, unlocking, clearing keys, and clearing data are allowed to be sent and executed, and the computer can read and write the hard disk normally. The freeze state is automatically released after the hard disk is powered off or hard reset.

[0011] Data Erasure (Security Erase Prepare and Security Erase Unit) Command: Regardless of whether the hard disk is in the user data locked or unlocked state, send this command and the key used for locking to the hard disk. After the hard disk controller verifies that the key is correct, all user data on the hard disk will be erased. Summary of the Invention

[0012] In view of the problems existing in the prior USB interface mobile hard disk data protection solution in the background art, the present utility model provides a USB HUB for locking and unlocking a mobile hard disk through ATA commands. It comprehensively uses hardware and software technologies and can lock the connected USB interface mobile hard disk. After the mobile hard disk is locked, unauthorized users cannot read or write the data in the hard disk medium. The USB HUB for locking and unlocking a mobile hard disk through ATA commands has an upstream port connected to the host computer of the upper computer through a USB bus, and multiple downstream ports are respectively connected to multiple USB devices through USB buses.

[0013] Preferably, the USB HUB for locking and unlocking a mobile hard disk through ATA commands includes: a multi-port USB HUB controller; an MCU controller with a USB interface, supporting USB host mode and USB device mode; an analog switch circuit logic module; an optional built-in keyboard; it is plug-and-play and does not require installing a dedicated driver.

[0014] In any of the above solutions, preferably, the multi-port USB HUB controller supports USB 2.0 and above protocols. One downstream port is connected to the MCU controller, one downstream port is connected to the analog switch circuit logic module, and the other downstream ports are connected to other USB devices. When it is not necessary to send data security commands in the ATA transmission protocol to the USB mobile hard disk, the host computer of the upper computer can read and write the USB mobile hard disk, the MCU, and other USB devices simultaneously.

[0015] In any of the above solutions, preferably, the MCU controller with a USB interface and supporting USB host and device modes has one end connected to a downstream port of the USB HUB controller and conducts USB communication with the host computer of the upper computer in USB device mode; the other end is connected to the analog switch circuit logic module and is connected to the USB mobile hard disk by controlling the analog switch circuit logic module in USB host mode to send data security commands and key values in the ATA transmission protocol to the USB mobile hard disk; it is connected to the RESET# of the USB HUB controller through a control signal.

[0016] Preferably, in any of the above solutions, the analog switch circuit logic module is a multi-channel one-bit selector. One end thereof is connected to the USB mobile hard disk, and the other two ends are respectively connected to a downstream port of the USB HUB controller and the MCU controller. The USB bus is switched by the MCU. In the device mode of the MCU controller, the USB mobile hard disk is connected to the host computer. In the host mode of the MCU controller, the USB mobile hard disk is connected to the MCU controller.

[0017] Preferably, in any of the above solutions, for the optional built-in keyboard, when in use, it is installed on the shell of the USB HUB and connected to the MCU controller. The user inputs the ATA data security command and the lock key value through the keys and sends them to the MCU controller. When not in use, the user inputs the ATA data security command and the lock key value through the application software of the host computer and sends them to the MCU controller.

[0018] The present invention also provides a method for implementing a USB HUB for locking and unlocking a mobile hard disk through ATA commands. The method includes the following steps:

[0019] Insert the device into any USB port of the host computer. After the MCU controller is powered on and initialized, it enters the USB device mode, connects to the computer, and waits for the user to input the lock command and the key value through the built-in keyboard or the application software.

[0020] If there is no user input of the lock command and the key value, it loops to wait for the user input. If there is user input, after the MCU controller reads in the lock command and the key value, it enters the USB host mode, switches the analog switch circuit, and connects to the USB female socket into which the USB mobile hard disk is inserted.

[0021] The MCU controller detects whether a USB mobile hard disk is inserted. If not, it returns to the device mode. If so, it sends the ATA security command and the key value to the USB mobile hard disk.

[0022] The MCU controller reads the return status of the USB mobile hard disk and detects whether the USB mobile hard disk has successfully executed the ATA security command. If not, it directly returns to the device mode to wait for the user to input again. Otherwise, it switches the analog switch circuit to connect the USB mobile hard disk to the host computer and then returns to the device mode.

[0023] In the embodiment of the utility model, the USB HUB that locks and unlocks the USB interface mobile hard disk through ATA commands can lock and unlock the connected mobile hard disk, protect the security of important data, effectively restrict the illegal use of the mobile hard disk, and completely prevent the leakage of sensitive information in the hard disk data after the mobile hard disk is stolen. It can be widely used in the transfer and backup of computer data, and is particularly suitable for protecting confidential information and personal privacy in office and business. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 The utility model is a schematic diagram of the USB HUB structure principle for locking and unlocking a mobile hard disk through an ATA command.

[0025] Figure 2 The utility model is a flowchart of a method for implementing a USB HUB that locks and unlocks a mobile hard disk through an ATA command.

[0026] Figure 3 It is the principle block diagram of the main interface of the host computer application software. DETAILED DESCRIPTION

[0027] In order to make the purpose, technical solution and advantages of the utility model more clear, the utility model is further described in detail below with reference to the accompanying drawings and exemplary embodiments. The specific embodiments described here are only used to explain the utility model and are not used to limit the utility model.

[0028] Embodiment 1: Use USB2.0 HUB controller and the keyboard provided in the shell.

[0029] According to Figure 1 The USBHUB structure principle diagram of the utility model provided by the present invention for locking and unlocking the mobile hard disk through the ATA command is shown in this embodiment:

[0030] The multi-port USB HUB controller uses GL850G, which is a USB2.0Low-Power HUB Controller with four ports. It only uses the USB2.0 bus, does not support the USB3.0 bus, and does not use the TX- / TX+ and RX- / RX+ signal lines. Its upstream port DPO / DM0 is connected to the USB port of the host computer, the downstream port DP1 / DM1 is connected to the device port DP / DM of the MCU controller CH559L, DP2 / DM2 is connected to a port of the analog switch circuit logic module, and DP3 / DM3 and DP4 / DM4 are connected to other USB devices respectively.

[0031] The MCU controller with a USB interface selects CH559L, which is an enhanced E8051 core single-chip microcomputer compatible with the MCS51 instruction set. The average instruction speed is 8 to 15 times faster than that of the standard MCS51. It has 64KB of non-volatile memory Flash-R0M inside, which is used for the program storage area and data storage area; 256 bytes of internal iRAM for fast data caching and stack, and 6KB of on-chip xRAM for large data caching and DMA direct memory access; an embedded USB controller and dual USB transceivers, supporting USB host mode and USB device mode, and supporting USB2.0 full speed of 12Mbps or low speed of 1.5Mbps. The device ports DP / DM of CH559L are connected to DP1 / DM1 of GL850G, and the host ports HP / HM are connected to the ports Dp2 / Dn2 of the analog switch circuit logic module; the IO ports P21 and P22 are respectively connected to OEb and SEL of the analog switch circuit logic module; the IO port P23 is connected to RESET# of GL850G. When CH559L enters the USB host mode, it starts to hard reset GL850G and ends when it returns to the USB device mode; the IO ports P24, P25, and P26 are connected to the LED indicators; the IO ports P14 to P17 are connected to the CLK, / CS, DI, and DO of the external Serial Flash W25Q64FV (64M-bit), and are read and written by the host computer as a small-capacity standard USB flash drive; the IO ports P30 and P31 are connected to the built-in keyboard.

[0032] The analog switch circuit logic module selects BL1532 to switch the DP / DM signal lines of the USB2.0 bus. It is a Low-Power, Two-Port, High-Speed USB2.0 double-pole double-throw (DPDT) Analog Switch. Its OEb and SEL are respectively connected to P21 and P22 of CH559L; the ports Dp / Dn are connected to the USB2.0 female socket for inserting a USB mobile hard disk; the ports Dp1 / Dn1 are connected to DP2 / DM2 of GL850G; the ports Dp2 / Dn2 are connected to the host ports HP / HM of CH559L.

[0033] The built-in keyboard is installed on the housing of the device. It selects 16 keys (0-9 numeric keys, F1-F6 lock command keys), which are connected to P30 and P30 of CH559L, and send key codes through RS232 serial communication.

[0034] According to Figure 2 the flowchart of the implementation method of the USB HUB for locking and unlocking a mobile hard disk through ATA commands provided by the present utility model as shown, the working process is as follows:

[0035] Insert this USB HUB device into any USB port of the host computer. After the MCU controller CH559L is powered on and initialized, it enters the USB device mode and acts as a standard USB flash drive for reading and writing by the host computer. Control the OEb and SEL of the analog switch circuit logic module BL1532 to switch the Dp / Dn port to be connected to the Dp1 / Dn1 port, and connect the USB external hard drive to the host computer. Wait for the user to input the built-in keyboard lock command and key value.

[0036] After the user inputs, CH559L reads the lock command and key value and then enters the USB host mode. Control the OEb and SEL of the analog switch circuit logic module BL1532 to switch the Dp / Dn port to be connected to the Dp2 / Dn2 port, and connect the USB external hard drive to CH559L.

[0037] CH559L detects whether a USB external hard drive is inserted. If not, it returns to the device mode. If so, it sends the ATA security command and key value input by the user to the USB external hard drive.

[0038] CH559L reads the status returned by the USB external hard drive and detects whether the ATA security command has been successfully executed on the USB external hard drive. If not, it directly returns to the device mode to wait for the user to input again. If successful, it controls the OEb and SEL of the analog switch circuit logic module BL1532 to switch the Dp / Dn port to be connected to the Dp1 / Dn1 port and returns to the device mode.

[0039] Beneficial effects: The USB2.0 HUB provided in this embodiment has passed the test of the experimental prototype, realizing the locking and unlocking of USB 2.0 and 3.0 interface external hard drives, effectively preventing the leakage of sensitive information in the data of the USB external hard drive, and protecting the security of important data. The advantages of this embodiment are: ① simple circuit logic and low cost; ② using the built-in keyboard to input the lock command and key value, not relying on the computer operating system and application software. The disadvantages are: ① only using the USB2.0 bus reduces the read and write speed of the USB3.0 external hard drive; ② the built-in keyboard increases the cost and complexity of the shell.

[0040] Embodiment 2: Use a USB3.0 HUB controller and a built-in keyboard on the shell.

[0041] In this embodiment, the multi-port USB HUB controller selects GL3523, which is a four-port USB3.1 Low-Power HUB Controller, supporting the USB3.0 bus. It uses TX- / TX+ and RX- / RX+ signal lines and is compatible with USB 2.0 and USB 3.0. Its upstream ports DP0 / DMO and TXO- / TXO+, RXO- / RXO+ are connected to the USB port of the host computer, and the downstream port DP1 / DM1 is connected to the device port DP / DM of the MCU controller CH559L. DP2 / DM2 and TX2- / TX2+, RX2- / RX2+ are connected to a port of the analog switch circuit logic module. DP3 / DM3, TX3- / TX3+, RX3- / RX3+ and DP4 / DM4, TX3- / TX4+, RX4- / RX4+ are respectively connected to other USB devices.

[0042] The MCU controller still selects CH559L, only using the DP / DM signal lines of the USB2.0 bus and not using the TX- / TX+ and RX- / RX+ signal lines of the USB3.0 bus. Its device port DP / DM is connected to DP1 / DM1 of GL3523; the IO port P23 is connected to RESET# of GL3523. When CH559L enters the USB host mode, it starts to hard reset GL3523 and ends when it returns to the USB device mode; other connection methods are the same as in Embodiment 1.

[0043] In the analog switch circuit logic module, BL1532 is still selected to switch the DP / DM of the USB2.0 bus, and its connection method is the same as in Embodiment 1; CH482 is added to switch the TX- / TX+ and RX- / RX+ signal lines of the USB3.0 bus. CH482 is a QPDT broadband ultra-speed bidirectional analog switch, including 2 differential channels 2:1 MUX (a total of 4 channels for one selection). Its EN# and SEL are respectively connected to P21 and P22 of CH559L; the ports TXA- / TXA+ and RXB- / RXB are connected to the USB3.0 female socket for inserting the USB mobile hard disk; the ports TXA0- / TXA0+ and RXB0- / RXBO are connected to TX2- / TX2+ and RX2- / RX2+ of GL3523; the ports TXA1- / TXA1+ and RXB1- / RXB1+ are not used.

[0044] The built-in keyboard input lock command and key value are still used.

[0045] The working process of locking and unlocking the mobile hard disk through the ATA command in this embodiment is the same as that in Embodiment 1.

[0046] Beneficial effects: The USB 3.0 HUB provided in this embodiment also realizes the locking and unlocking of the USB interface mobile hard disk, effectively preventing the leakage of sensitive information in the data of the USB mobile hard disk, protecting the security of important data, and not affecting the reading and writing speed of the USB 3.0 mobile hard disk.

[0047] Embodiment 3: Use a USB 3.0 HUB controller, and the shell does not have a keyboard and uses application software.

[0048] In this embodiment, the multi-port USB HUB controller still selects GL3523. One port of the analog switch circuit logic module is connected to DP2 / DM2 in its downstream port 2, and TX2- / TX2+, RX2- / RX2+ are directly connected to the USB 3.0 female socket for inserting the USB mobile hard disk; the connection methods of other ports are the same as those in Embodiment 2.

[0049] The MCU controller still selects CH559L, and the connection method is the same as that in Embodiment 2.

[0050] In the analog switch circuit logic module, BL1532 is still selected to switch DP / DM of the USB 2.0 bus, and its connection method is the same as that in Embodiment 1; CH482 is not used to switch TX- / TX+, RX- / RX+ signal lines of the USB 3.0 bus.

[0051] The shell does not have a keyboard, but uses the application software of the host computer of the upper computer to input data security commands and key values in the ATA transmission protocol. As Figure 3 shown, it is the principle block diagram of the main interface of the application software, and the working process is as follows:

[0052] The user selects and clicks the button on the main interface and types the key value in the pop-up input box;

[0053] After the user inputs, the host computer of the upper computer writes the input ATA security command and key value into the internal RAM of CH559L according to the hard disk access mode;

[0054] CH559L sends the input ATA security command and key value of the user to the USB mobile hard disk according to the process as Figure 2 shown;

[0055] When CH559L reads the status of the USB mobile hard disk executing the ATA security command and returns to the device mode, the host computer of the upper computer reads this status from the internal RAM of CH559L.

[0056] Beneficial effects: The USB 3.0 HUB provided in this embodiment also realizes the locking and unlocking of USB 2.0 and 3.0 interface external hard drives, effectively preventing the leakage of sensitive information in the data of the USB external hard drive and protecting the security of important data. The overall circuit logic and shell structure of the USB 3.0 HUB in this embodiment are simple, and the cost performance is good. It has passed the performance test of the experimental prototype and is in mass production and delivered to users with confidentiality requirements for use.

[0057] The foregoing is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent replacements, and improvements made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims

1. A USB HUB device for locking and unlocking a USB mobile hard disk through an ATA command, wherein an upstream port is connected to a host computer through a USB bus, and a plurality of downstream ports are respectively connected to a plurality of USB devices through USB buses, characterized in that: The device comprises: Multi-port USB HUB controller expands one USB port of the host computer into multiple independent USB ports; An MCU controller with a USB interface is used to send data security commands and key values ​​of the ATA transmission protocol to the USB mobile hard disk, and to lock and unlock the USB mobile hard disk; Analog switch circuit logic module, used to switch the USB bus under MCU control; Optional onboard keyboard for entering data security commands and lock key values; Plug and play, no need to install special drivers.

2. The USB HUB device according to claim 1, characterized in that: The multi-port USB HUB controller supports USB2.0 and above protocols, wherein one downstream port is connected to an MCU controller, one downstream port is connected to an analog switch circuit logic module, and other downstream ports can be connected to other USB devices; it is plug-and-play and does not require installation of a dedicated driver; when there is no need to send a data security command in the ATA transmission protocol to a USB mobile hard disk, the upper computer host can simultaneously read and write the USB mobile hard disk, the MCU controller, and other USB devices.

3. The USB HUB device according to claim 1, characterized in that: The MCU controller with a USB interface supports USB host and device working modes. One end of the MCU controller is connected to a downstream port of a USB HUB controller and is connected to a host computer host in USB device mode; the other end is connected to an analog switch circuit logic module and is connected to a USB mobile hard disk by controlling the analog switch circuit logic module in USB host mode, and sends data security commands and key values ​​in the ATA transmission protocol to the USB mobile hard disk; and is connected to RESET# of the USB HUB controller through a control signal.

4. The USB HUB device according to claim 1, characterized in that: The analog switch circuit logic module is a multi-way two-choice switch, one end of which is connected to the USB mobile hard disk, and the other two ends are respectively connected to a downstream port of the USB HUB controller and the MCU controller; under the control of the MCU, when the MCU controller works in device mode, the USB mobile hard disk is connected to the upper computer host, and when working in host mode, the USB mobile hard disk is connected to the MCU controller.

5. The USB HUB device according to claim 3, characterized in that: The data security command and key value in the ATA transmission protocol are input through the device's own keyboard or through the host computer application software.

6. The USB HUB device according to claim 1, characterized in that: The optional built-in keyboard, when installed on the USB HUB shell and connected to the MCU controller, the user inputs the ATA data security command and lock key value through the keys and sends them to the MCU controller; if it is omitted and not used, the user inputs the ATA data security command and lock key value through the upper computer host application software and sends them to the MCU controller.

7. The USB HUB device according to claim 3, characterized in that: When the MCU controller works in device mode, the upper computer host reads and writes its internal RAM and the external FLASH as a standard U disk according to the hard disk access mode, which is plug-and-play and does not require the installation of a dedicated driver.

8. The USB HUB device according to claim 3, characterized in that: The MCU controller hard resets the USB HUB controller by controlling RESET# of the USB HUB controller, thereby disconnecting the upper computer host from the USB device inserted into the downstream port of the USB HUB.

Images