61 results about "Disk encryption" patented technology

The invention discloses a USB flash disk encryption system for data element circulation. The USB flash disk encryption system comprises a client and a USB flash disk, the client comprises a USB flash disk content display interface and a key input module; the USB flash disk comprises a connecting interface, a data encryption module and a storage chip; the data encryption module comprises a data partitioning unit, a key generation unit and an AES encryption unit; the data partitioning unit is used for partitioning original data into data blocks with odd numbers and even numbers; the key generation unit is used for expanding the original key into a plurality of round keys; the AES encryption unit comprises a first AES encryption core and a second AES encryption core; the first AES encryption core uses a plurality of round keys to perform multi-round encryption processing on each data block with the odd number, and the second AES encryption core uses a plurality of round keys to perform multi-round encryption processing on each data block with the even number in sequence. According to the invention, the data encryption efficiency of the USB flash disk can be improved, and the data encryption security is enhanced.

The invention relates to the technical field of electric digital data processing security, and discloses a solid state disk data encryption method and a solid state disk. According to the method, a national cryptographic algorithm hardware encryption and decryption co-processing module is serially arranged on a data bus between a main control chip and a flash memory particle array, so that transparent encryption of write-in data and transparent decryption of read-out data are realized; the module performs encryption and decryption based on an SM4 algorithm and an XTS advanced encryption standard mode in combination with a logic address as an adjustment value, and securely injects a root key through an out-of-band interface to derive a data key. The system comprises a main control chip, a flash memory array and the co-processing module, wherein the co-processing module is integrated with a hardware encryption and decryption engine, a key management unit and data flow control logic. On the premise that a general main control chip is not changed, high-performance, high-compatibility and high-security national cryptographic hardware-level full-disk encryption is realized.

The utility model discloses a portable hard disk bridging encryption circuit and equipment based on quantum random numbers, and belongs to the technical field of hard disk bridging encryption. According to the portable hard disk bridging encryption circuit based on the quantum random number, data of an upper computer reaches the SoC storage security chip through the upper computer interface, the SoC storage security chip obtains a secret key through the quantum random number generator and encrypts the data, and finally the encrypted data is written into a hard disk through the hard disk interface. All the data written into the hard disk can be completely encrypted, so that all the data written into the hard disk are ciphertexts, and the encryption safety of the mobile hard disk is improved. Besides, the circuit is in pluggable connection with the upper computer through the upper computer interface and in pluggable connection with the mobile hard disk through the hard disk interface, all the interfaces are connected when encryption is needed, the mobile hard disk skips the circuit to be directly connected with the upper computer when encryption is not needed, and the flexibility of hard disk encryption design is improved.

The invention provides a cloud hard disk encryption and decryption method and device, a medium and equipment. The method comprises the following steps: judging whether a volume type corresponding to a to-be-created cloud hard disk is an encrypted volume type or not; if yes, creating an encrypted volume type, and configuring secret key information of the encrypted volume type; verifying the secret key information for the first time, and creating a corresponding encrypted volume after the verification is passed; verifying the secret key information for the second time, creating a corresponding encrypted mirror image after the verification is passed, and storing the secret key information to the rear end, so that the creation of the cloud hard disk is completed; when the write request is generated, judging whether a mirror image corresponding to the cloud hard disk corresponding to the to-be-written data is an encrypted mirror image or not; if yes, acquiring secret key information from a rear end; performing end-to-end 4K alignment on the data blocks of the to-be-written data; and according to the secret key information, encrypting the data blocks after the end-to-end 4K alignment to obtain encrypted data, and carrying out distributed storage on the encrypted data at the rear end. According to the invention, the security of the user data is improved.

The invention provides a multilevel security management method for a trusted data space, and relates to the technical field of data security management, and the method comprises the steps: carrying out the main body access authentication and trusted rating for a connection main body of the trusted data space, and introducing a group isolation strip based on a data scene; setting a multi-layer security check level for security management of the trusted data space, and carrying out node data disk encryption for a core data node of the trusted data space; and acquiring a data interaction task, aiming at a sequence link node of a task cycle chain, implementing connection main body group isolation of a node data scene by triggering a group isolation strip, and implementing level safety verification of the node data scene by matching multiple layers of safety verification levels. According to the method and the device, the technical goal of dynamic safety management based on task tracking and risk supervision can be realized, and the technical effects of improving the real-time risk identification capability of the data interaction task and ensuring the safety and stability of the data interaction process are achieved.

The invention relates to a disk encryption method based on artificial intelligence, and the method comprises the steps: obtaining to-be-stored data in a specified time period, recognizing and classifying the to-be-stored data, and adding a corresponding data importance level mark to the data; carrying out statistics on data volumes with the same importance level, and matching corresponding disks; cutting the corresponding to-be-stored data matched with the disk according to the corresponding data type to form data blocks of different data types; partitioning the disk, and storing the data blocks of different data types to different partitions of the disk; performing different partition encryption level processing on different partitions, and performing different levels of disk encryption processing on different disks according to importance levels of data stored in the disks; acquiring to-be-stored data in real time, performing grade classification on the real-time to-be-stored data, and distributing the real-time to-be-stored data to different disks; and classification is carried out according to data types under each importance degree grade, and the data are stored to different partitions, so that more intelligent, flexible and secure disk encryption is realized.

A method is described including signing a concatenation of an image signature, a public key associated with the image signature, and a full disk encryption (FDE) header to obtain an image encryption service (IES) signature. The method also includes writing the IES signature to an extensible firmware interface system partition (ESP) of an encrypted confidential virtual machine (CVM) disk image.

A key management system for providing encryption of a disk in a client device is provided. The system comprises a trusted platform module (TPM) having a first fragment of a key, a remote storage having a second fragment of the key, and a processing unit to partially boot instructions relating to booting of the client device, send a request for validation to the TPM, receive the first fragment of the key from the TPM on successful validation, request for the second fragment of the key with credentials to access the remote storage. The credentials and a network of the request are verified, the second fragment of the key is transmitted on successful validation. The first fragment and the second fragment of the key are combined to generate an encryption key for booting the client device. The first fragment of the key and the second fragment of the key are rotatable.

The invention relates to the technical field of database security, in particular to an SQLite database transparent encryption method, system and device based on a national cryptographic algorithm and a storage medium, and the method comprises the following steps: S1, when an SQLite database is opened, loading and connecting a hardware cryptographic device to obtain an encryption master key and a corresponding key handle; s2, in response to the write-in operation, calling a national secret symmetric encryption algorithm through a key handle, encrypting a plaintext of a database page to generate a page, and writing the page into a database file; s3, reading the ciphertext page in response to the reading operation, decrypting the ciphertext page through a cryptographic symmetric decryption algorithm adjusted by a key handle after analysis, recovering a plaintext page and returning the plaintext page to the application; and S4, circularly executing encryption writing and decryption reading to process the continuous request, and releasing the key handle and disconnecting the hardware connection until the database connection is closed. According to the method, transparent full disk encryption, meeting the national secret standard, of the SQLite database is achieved, the secret key safety and the operation performance are guaranteed through hardware cryptographic equipment, and good application compatibility is kept.

The invention discloses a local data security storage method for a non-networked vehicle, which comprises the following steps of: setting a vehicle-mounted MP5 (Mobile Pentium 5), and storing local data through the vehicle-mounted MP5; setting a three-level storage architecture for the vehicle-mounted MP5, and storing vehicle static information into a configuration data area; storing the operation parameters into a runtime data area according to a time sequence; storing the fault event into an event data area; implementing a hierarchical encryption strategy on data, performing full disk encryption on storage equipment, performing independent file encryption on sensitive data files, and implementing additional character encryption on key fields; an encryption key is derived based on a vehicle VIN code and a user PIN, a circular buffer management mechanism is established, and a secure data export interface is provided. According to the invention, the confidentiality, integrity and availability of vehicle local data can be improved, and the safety and reliability of vehicle data storage are improved.

The invention discloses a hard disk encryption control method and device, equipment and a program product, and the method comprises the steps: responding to the configuration of an encrypted hard disk to trigger a system interruption management mode under the condition that an operating system enters a running stage; in the system interrupt management mode, calling a password management program loaded in a power-on self-test stage so as to obtain a password of the encrypted hard disk by utilizing the password management program; and configuring the encrypted hard disk by using the password.

The embodiment of the invention provides an encryption method, a software upgrading method, a related device, equipment, a medium and a product. The USB flash disk encryption method comprises the following steps: acquiring bare data of a software upgrade package; establishing upgrading information of the software upgrading package, wherein the upgrading information comprises an identification number and a version number of the software upgrading package and a preset storage position of the software upgrading package in the target USB flash disk; and encrypting the upgrading information, and storing the encrypted upgrading information and the bare data into the target USB flash disk according to a preset storage rule, so that the target equipment obtains the bare data of the software upgrading package required by upgrading based on the encrypted upgrading information under the condition of accessing the target USB flash disk. According to the USB flash disk encryption method disclosed by the embodiment of the invention, the data in the USB flash disk is stored in a bare data form, so that the possibility that the data is identified is reduced, the upgrading information independent of the software upgrading package is established, the data is convenient to manage, the upgrading information is encrypted, and the data processing complexity is reduced; and the improvement of the data security is realized in a simple mode.

The invention discloses a data secrecy method and device based on permission sharing operation of an encrypted PSSD and a medium. The method comprises the following steps: 1) performing permission partitioning on the PSSD; 2) setting an encryption area feature attribute; an attribute structure Lij is set for each encryption area, and accessible user groups and corresponding lowest user permissions of the encryption areas are specified in the structure; 3) allocating unlocking permissions to each group of users; 3) when a request of accessing the encryption area by the user is received, performing access permission verification on the user; and 4) if the identity authority level of the user executing unlocking currently is greater than the encrypted disk partition authority and the accessible user group is matched, automatically unlocking the disk space with the matched authority, otherwise, sending verification failure information, and recording error counting for each verification failure. According to the method, stepped data sharing and management of personnel among the groups can be achieved, reading and writing of data among the groups are achieved according to user permission, and disk encryption space can be managed more flexibly.

A system and method reduces use of restricted operations in a cloud computing environment during cybersecurity threat inspection. The method includes: detecting an encrypted disk in a cloud computing environment, the encrypted disk encrypted utilizing a first key in a key management system (KMS); generating a second key in the KMS, the second key providing access for a principal of an inspection environment; generating a snapshot of the encrypted disk; generating a volume based on the snapshot, wherein the volume is re-encrypted with the second key; generating a snapshot of the re-encrypted volume; generating an inspectable disk from the snapshot of the re-encrypted volume; and initiating inspection for a cybersecurity object on the inspectable disk.

The present invention belongs to the field of information security technology and discloses a virtual disk encryption method and device based on Ukey. The method comprises: after detecting Ukey access, creating a virtual disk partition, generating a blank image file according to input file information, and writing the encrypted information obtained by encrypting the symmetric encryption key generated by the secure random number generator using the preset file content structure and the encryption certificate derived by the Ukey into the blank image file, and finally using the symmetric encryption key to encrypt the formatted file data in the file system to obtain ciphertext data and combine it with the preset file content structure written above to generate an encrypted disk image file. The UKey device is used to realize the separation management of keys and data. The keys are stored in the UKey and a physical chip is used to protect the keys, which greatly reduces the risk of key leakage and improves data security. At the same time, the encrypted image file data in a unified format can be seamlessly used between different platforms, with higher flexibility and convenience.

The invention discloses a data protection device and method, electronic equipment and a storage medium, the device comprises a memory encryption virtual machine, the memory encryption virtual machine comprises a data management module, an application management module, an encryption memory and a full disk encryption module, the data management module and the application management module are arranged in a memory to encrypt an account-free mirror image of the virtual machine; the data management module is used for writing the encrypted data set and the data use control strategy into the full-quantity disk encryption module; loading the key to an encryption memory, decrypting the encrypted data set by using the key to obtain a data set, and injecting the data set into a white list application process; the application management module is used for receiving application package data; verifying the application package data based on the data use control strategy; under the condition that the verification is passed, creating a safe operation environment of the white list application process in the encrypted memory; and starting the data calculation task to obtain a data use result, and sending the data use result to the data use end. Therefore, the data security can be improved.

The utility model discloses a computer hard disk encryption secrecy device, and particularly relates to the field of computer equipment, the computer hard disk encryption secrecy device comprises a protection box, a protection mechanism is arranged in the protection box, the protection mechanism comprises a grid frame fixed in the protection box, and electromagnetic suction devices are fixedly arranged in the grid frame and the protection box. A box door is hinged to the front end face of the protection box, a password input device is fixedly arranged on the front end face of the box door, a face recognizer is fixedly arranged on the front end face of the box door, an electromagnetic door lock is fixedly arranged in the protection box, and a normally-closed alarm is fixedly arranged on the front end face of the grid frame. External information can be connected through the signal generator, a switch of a single electromagnetic suction device can be controlled, if the box door is cracked and opened, the normally-closed alarm can be bounced off, an alarm signal is immediately sent to a computer end of a hard disk manager through the signal generator, the hard disk manager is reminded to come to check, and safety measures are further enhanced.

The invention discloses a hard disk encryption management method, device and equipment and a readable storage medium. The hard disk encryption management method comprises the steps that a hard disk receives a manufacturer custom command from a host; analyzing the manufacturer custom command to obtain an encrypted management command; when the encryption management command is a password setting command, if a first logic space of the hard disk is in an unencrypted state or an unlocked state, converting a first plaintext password into a first ciphertext password through an encryption algorithm; loading the first ciphertext password to an encryption engine of the hard disk, converting the first preset data into first encrypted data by the encryption engine by taking the first ciphertext password as a key, and storing the first encrypted data to a standby area corresponding to a first logic space of the hard disk; and after the first encrypted data is successfully stored, setting the first logic space of the hard disk to be in an encrypted and unlocked state, and replying a command execution result to the host. According to the method and the device, the applicability of a hard disk encryption function is greatly improved, and the password security is greatly improved.

The invention relates to the technical field of data security, in particular to a USB flash disk encryption implementation system and method. The system comprises a data partition management module used for forming a common data partition and a hidden encryption partition; the transparent encryption and decryption module is realized based on a file system filter driver and is used for encrypting and decrypting the hidden encryption partition data in real time; the identity authentication module is used for verifying user identity information and dynamically mounting the hidden encryption partition after the user identity information passes the verification; and the security isolation module is used for establishing a security data transmission channel and monitoring an access state, and automatically unloading the hidden encryption partition when a condition is met. The method comprises the steps of partition creation, request interception, identity verification, dynamic mounting, real-time encryption and decryption and automatic unloading. According to the invention, security level-to-level management and transparent encryption and decryption of U disk data are realized, and the problems of poor compatibility and complex operation in the prior art are solved.

The embodiment of the invention provides a computer hard disk encryption and decryption method and device and medical equipment. The computer hard disk encryption and decryption method comprises the steps that inherent hardware information of a computer is obtained; when a first preset condition is met, triggering encryption processing on a hard disk of the computer according to the inherent hardware information; and when a second preset condition is met, triggering decryption processing on the hard disk of the computer according to the inherent hardware information. Therefore, under the condition that the computer equipment is not supported by the TPM, encryption and decryption of the hard disk can be achieved, the encryption and decryption process can be automatically carried out, manual operation of a user is not needed, and when the hard disk is moved out of the computer equipment, data in the hard disk cannot be decrypted and read.

The invention belongs to the technical field of disk encryption and decryption, and provides a disk encryption and decryption method and device and a storage medium. The method comprises the following steps: extracting internal data of a main body device provided with a to-be-accessed disk in a pre-tracking preset time period based on an access request; wherein the preset time period is a time region between the timestamp of the current access request and the timestamp of the last shutdown operation; traversing the internal data to confirm that communication exists between the main body equipment and the external equipment, and extracting equipment information of the external equipment and communication duration of the external equipment and the main body equipment; when it is judged that the external device communicates with the main device for the first time and the communication duration is larger than a preset duration threshold value, a first instruction is sent to a display front end; wherein the first instruction is used for requesting the user sending the access request to input a standby key. The security of the disk data of the user is further ensured.

The application relates to a mobile hard disk encryption method based on a touch screen and a mobile hard disk, and the mobile hard disk encryption method comprises the following steps: S1, generating encryption track data through a touch screen module; S2, converting the encryption track data into encryption instructions, and converting a register into a register in an encryption state according to the encryption instructions; and S3, triggering decryption instructions in the mobile hard disk in the encryption state, and updating the register in the encryption state into a decryption state according to the decryption instructions. In the prior art, the data security problem is that people with ulterior motives can easily steal the mobile hard disk or steal the data of the hard disk in a short time; the scheme can solve the problems that the password operation of the mobile hard disk is complicated and the state display is not intuitive while the safety and privacy are considered.

The invention relates to a mobile hard disk encryption method based on a touch screen and a mobile hard disk. The mobile hard disk encryption method comprises the following steps: S1, generating encryption track data through a touch screen module; s2, converting the encryption track data into an encryption instruction, and converting a register into a register in an encryption state according to the encryption instruction; and S3, triggering a decryption instruction in the mobile hard disk in the encryption state, and updating the register in the encryption state into a decryption state according to the decryption instruction. In the prior art, the problem of data security is solved, and a mobile hard disk is easily stolen by a person with an exclusive mood or the data of the hard disk is stolen in a short time; according to the scheme, the problems that password operation of the mobile hard disk is tedious and state display is not visual can be solved while security privacy is considered.

The invention relates to the technical field of software encryption protection, in particular to a method, a system and equipment for automatically guiding an encrypted disk in a Linux system and a medium. A fixed UUID is designated as a partition identifier, a plaintext is encrypted through a symmetric encryption and decryption algorithm, a secret key is obtained, and the plaintext is prevented from being leaked when process parameters are transmitted; a secret key and a secret key decryption algorithm are embedded in the GRUB, so that the GRUB has a plaintext restoration function; the method comprises the following steps: transmitting a key parameter when a kernel is under a GRUB guide boot partition, obtaining a plaintext by using a decryption algorithm when the parameter is obtained in the kernel, and writing the plaintext into an initrd memory fixed path file after decompressing initramfs (initrd); the system-cryptsetup is used for realizing that a cryptttb file reads a plaintext password file mounting partition, and the cryptttb file is used for reading a plaintext password file mounting partition; and finally, switching and guiding the root file system. According to the method, a user does not need to be informed of a plaintext password for a software final state, key binding, disk encryption and system boot management and control are achieved, and finally manual intervention is not needed.

A system and method reduces use of restricted operations in a cloud computing environment during cybersecurity threat inspection. The method includes: detecting an encrypted disk in a cloud computing environment, the encrypted disk encrypted utilizing a first key in a key management system (KMS); generating a second key in the KMS, the second key providing access for a principal of an inspection environment; generating a snapshot of the encrypted disk; generating a volume based on the snapshot, wherein the volume is re-encrypted with the second key; generating a snapshot of the re-encrypted volume; generating an inspectable disk from the snapshot of the re-encrypted volume; and initiating inspection for a cybersecurity object on the inspectable disk.

The invention provides a hard disk encrypted data protection method and system. The method comprises the steps of generating a hard disk encryption key; receiving a hard disk encryption request, and determining a to-be-encrypted target storage device and a to-be-encrypted target hard disk; configuring a hard disk encryption key corresponding to the target hard disk; partitioning the target hard disk into an encrypted region and a non-encrypted region; the target storage device encrypts the data with the encryption identifier according to the hard disk encryption key and then transmits the data to the encryption area in the corresponding target hard disk; the target storage device encrypts the data with the encryption identifier according to the hard disk encryption key and then performs monitoring when transmitting the data to the encryption area in the corresponding target hard disk to generate monitoring information; judging whether encryption abnormity occurs or not according to the monitoring information, and if yes, sending an encryption abnormity alarm; therefore, the target storage device and the target hard disk are matched with each other to encrypt the data with the encryption identifier and perform exception monitoring on the encryption process, and the data security is improved.

The invention discloses a virtual machine encryption method based on Libvirt and QEMU (quick empirical mode unit). The method belongs to the technical field of cloud computing and virtualization. According to the method, the QEMU is expanded, the support of the QEMU for national cryptographic algorithms SM1 and SM4 is increased, a QEMU module is modified, and when a qemu-img command is executed, echoes of-object parameter information are set to be xxxxxxx according to a-object parameter address, and the echoes are used for hiding a disk encryption key. The method comprises the following steps: expanding Libvirt, realizing one-machine one-password of a virtual machine by applying a national password algorithm SM9, generating a secret key pair by using a UUID of the virtual machine as a national password SM9 public key, storing a private key of the SM9 in an encryption chip, encrypting an encryption secret key of the virtual machine and an XML (Extensible Markup Language) by using the SM9 public key, and decrypting the encryption secret key of the virtual machine and the XML by calling an encryption chip interface. According to the method, the problem that the Secret of Libvirt and the XML of the virtual machine leak sensitive information is solved, the problem that the secret key is leaked when the QEMU creates and encrypts the QCOW2 file is solved, and the encryption and decryption performance of the disk file of the virtual machine is improved.

The invention provides a disk encryption method, device, equipment and system based on a threshold password. In one embodiment of the invention, the method comprises the following steps: respectively generating shared secrets corresponding to other first encryption nodes according to key initial parameters, and sending the shared secrets to the corresponding first encryption nodes; adding the first encryption node corresponding to the shared secret passing verification into a local second encryption node set; generating a third encryption node set through a consistency negotiation mode, and generating a secret sharing share according to the third encryption node set and the super-reversible matrix; and generating a private key share according to the secret sharing share, and sending the private key share to the client, so that the client generates an encryption key according to the received private key share, and performs disk creation and encryption according to the generated encryption key. According to the method, the problems of key loss and damage during single-point failure can be avoided.

The invention relates to the field of intelligent equipment manufacturing, and discloses a burnt mirror image file processing method capable of starting full-disk encryption, which is used for processing a mirror image file before burning and solving the problem of long burning time of the mirror image file due to starting of a full-disk encryption technology. According to the scheme, firstly, storage partition information is obtained, then format recognition and screening are conducted on storage partitions, and a target partition containing a mountable file system is determined; then, an analysis tool matched with the format of the target partition is adopted, use state information of the target partition is extracted, and the use state information at least comprises position features of the free data blocks; positioning a storage area corresponding to the idle data block in the to-be-processed burning mirror image by combining the partition configuration information table and the position characteristics of the idle data block; and finally, carrying out data filling on an idle data block storage area positioned in the to-be-processed burning mirror image, and setting all bits in the area as logic high levels to obtain an optimized burning mirror image file.

The application provides a data protection method and device, computer equipment and a storage medium. The address information of selected partial hard disk files is added to an encryption file list created by the hard disk, and a self-encryption algorithm is started to encrypt the content of the partial hard disk files, thereby realizing local hard disk file encryption and improving the flexibility of data protection. Even if the hard disk password is forgotten, the unencrypted hard disk files can still be operated, application requirements are met, and compared with a software data protection mode, encrypted data is easily destroyed when the hard disk is formatted. In the application, the target file of the hard disk encryption can still be retained when the hard disk is formatted, and the security of the hard disk file is further improved.