Computer peripheral access control device and system

Abstract

This invention provides a computer peripheral access control system, comprising a computer device, a computer peripheral access control device, and an authentication server. The computer peripheral access control device includes a communication module, a processing module, a transmission interface, an authentication module, and a security chip. The communication module connects to peripheral devices such as a keyboard and mouse, while the transmission interface connects to the computer device. When the processing module receives peripheral device access information from a peripheral device, it generates a blocking signal to prevent the peripheral device from connecting to the computer device. After authentication by the authentication module and the authentication server, the processing module connects the peripheral device to the computer device, solving the problem that existing peripheral devices cannot verify the user's true identity.

Claims

1. A computer peripheral access control device, comprising: a communication module; wherein, When the communication module connects to a peripheral device, it receives access information from the peripheral device. A processing module is connected to the communication module. A transmission interface is connected to the processing module for connecting to a computer device. An authentication module is connected to the processing module. A security chip is connected to the authentication module and stores an authentication private key. When the processing module receives the peripheral device access information through the communication module, it generates a blocking signal to block the peripheral device from connecting to the computer device and causes the authentication module to initiate an authentication process. The authentication module sends an authentication request to the computer device through the processing module and the transmission interface. The authentication module receives a challenge message transmitted by the computer device through the transmission interface and the processing module, and uses the authentication private key to digitally sign the challenge message to generate a response message, which is then transmitted to the computer device through the processing module and the transmission interface. When the authentication module receives an authorization scepter from the computer device through the processing module and the communication module, the authentication module calls the authentication private key to authenticate the authorization scepter. When the authorization scepter is successfully authenticated, the authentication module generates an enable signal, causing the processing module to connect the peripheral device to the computer device.

2. The computer peripheral access control device as described in claim 1 further includes a sensor connected to the authentication module to sense an external trigger and generate authentication information accordingly, so that the authentication module sends the authentication request to the computer device based on the authentication information.

3. The computer peripheral access control device as described in claim 2, wherein, The sensor is a near-field communication sensor used to sense the external trigger generated by an authentication medium.

4. The computer peripheral access control device as described in claim 2, wherein, The sensor is a fingerprint sensor, and the identity authentication information is fingerprint information.

5. The computer peripheral access control device as described in claim 1, wherein, The communication module is either a Bluetooth module or a wireless radio frequency module.

6. The computer peripheral access control device as described in claim 1, wherein, When the processing module receives an abnormal signal, it disconnects the peripheral device from the computer device and resets the blocking signal.

7. The computer peripheral access control device as described in claim 6, wherein, When the processing module receives an interrupt signal from the peripheral device through the communication module, the processing module determines that it has received the abnormal signal.

8. The computer peripheral access control device as described in claim 6, wherein, When the processing module receives a destruction authorization transmitted by the computer device through the transmission interface, the processing module determines that it has received the abnormal signal.

9. A computer peripheral access control system, comprising: a computer device; a computer peripheral access control device as described in any one of claims 1 to 8, connected to the computer device; and an authentication server connected to the computer device; wherein, When the computer device receives the challenge information, it forwards the challenge information to the peripheral access control device. When the computer device receives the response information, it forwards the response information to the authentication server. When the authentication server determines that the response information is valid, it generates the authorization scepter and sends it to the computer device, causing the computer device to forward the authorization scepter to the peripheral access control device.

10. The computer peripheral access control system as described in claim 9, wherein, The computer peripheral access control device first generates an authentication public key and an authentication private key based on a user account, a peripheral device registration information and an identity registration information, and then transmits the authentication public key to the authentication server and stores the authentication private key in the security chip.

11. The computer peripheral access control system as described in claim 10, wherein, The authentication server encrypts the authorization scepter based on the authentication public key.

Images