10 results about "Disk encryption" patented technology

The invention relates to the technical field of database security, in particular to an SQLite database transparent encryption method, system and device based on a national cryptographic algorithm and a storage medium, and the method comprises the following steps: S1, when an SQLite database is opened, loading and connecting a hardware cryptographic device to obtain an encryption master key and a corresponding key handle; s2, in response to the write-in operation, calling a national secret symmetric encryption algorithm through a key handle, encrypting a plaintext of a database page to generate a page, and writing the page into a database file; s3, reading the ciphertext page in response to the reading operation, decrypting the ciphertext page through a cryptographic symmetric decryption algorithm adjusted by a key handle after analysis, recovering a plaintext page and returning the plaintext page to the application; and S4, circularly executing encryption writing and decryption reading to process the continuous request, and releasing the key handle and disconnecting the hardware connection until the database connection is closed. According to the method, transparent full disk encryption, meeting the national secret standard, of the SQLite database is achieved, the secret key safety and the operation performance are guaranteed through hardware cryptographic equipment, and good application compatibility is kept.

The embodiment of the invention provides an encryption method, a software upgrading method, a related device, equipment, a medium and a product. The USB flash disk encryption method comprises the following steps: acquiring bare data of a software upgrade package; establishing upgrading information of the software upgrading package, wherein the upgrading information comprises an identification number and a version number of the software upgrading package and a preset storage position of the software upgrading package in the target USB flash disk; and encrypting the upgrading information, and storing the encrypted upgrading information and the bare data into the target USB flash disk according to a preset storage rule, so that the target equipment obtains the bare data of the software upgrading package required by upgrading based on the encrypted upgrading information under the condition of accessing the target USB flash disk. According to the USB flash disk encryption method disclosed by the embodiment of the invention, the data in the USB flash disk is stored in a bare data form, so that the possibility that the data is identified is reduced, the upgrading information independent of the software upgrading package is established, the data is convenient to manage, the upgrading information is encrypted, and the data processing complexity is reduced; and the improvement of the data security is realized in a simple mode.

The invention discloses a hard disk encryption management method, device and equipment and a readable storage medium. The hard disk encryption management method comprises the steps that a hard disk receives a manufacturer custom command from a host; analyzing the manufacturer custom command to obtain an encrypted management command; when the encryption management command is a password setting command, if a first logic space of the hard disk is in an unencrypted state or an unlocked state, converting a first plaintext password into a first ciphertext password through an encryption algorithm; loading the first ciphertext password to an encryption engine of the hard disk, converting the first preset data into first encrypted data by the encryption engine by taking the first ciphertext password as a key, and storing the first encrypted data to a standby area corresponding to a first logic space of the hard disk; and after the first encrypted data is successfully stored, setting the first logic space of the hard disk to be in an encrypted and unlocked state, and replying a command execution result to the host. According to the method and the device, the applicability of a hard disk encryption function is greatly improved, and the password security is greatly improved.

The invention relates to the technical field of software encryption protection, in particular to a method, a system and equipment for automatically guiding an encrypted disk in a Linux system and a medium. A fixed UUID is designated as a partition identifier, a plaintext is encrypted through a symmetric encryption and decryption algorithm, a secret key is obtained, and the plaintext is prevented from being leaked when process parameters are transmitted; a secret key and a secret key decryption algorithm are embedded in the GRUB, so that the GRUB has a plaintext restoration function; the method comprises the following steps: transmitting a key parameter when a kernel is under a GRUB guide boot partition, obtaining a plaintext by using a decryption algorithm when the parameter is obtained in the kernel, and writing the plaintext into an initrd memory fixed path file after decompressing initramfs (initrd); the system-cryptsetup is used for realizing that a cryptttb file reads a plaintext password file mounting partition, and the cryptttb file is used for reading a plaintext password file mounting partition; and finally, switching and guiding the root file system. According to the method, a user does not need to be informed of a plaintext password for a software final state, key binding, disk encryption and system boot management and control are achieved, and finally manual intervention is not needed.

The application provides a data protection method and device, computer equipment and a storage medium. The address information of selected partial hard disk files is added to an encryption file list created by the hard disk, and a self-encryption algorithm is started to encrypt the content of the partial hard disk files, thereby realizing local hard disk file encryption and improving the flexibility of data protection. Even if the hard disk password is forgotten, the unencrypted hard disk files can still be operated, application requirements are met, and compared with a software data protection mode, encrypted data is easily destroyed when the hard disk is formatted. In the application, the target file of the hard disk encryption can still be retained when the hard disk is formatted, and the security of the hard disk file is further improved.

The application relates to the technical field of electric digital data processing security, and discloses a solid state disk data encryption method and a solid state disk. The method realizes transparent encryption of written data and transparent decryption of read-out data by serially arranging a national secret algorithm hardware encryption and decryption coprocessing module on a data bus between a main control chip and a flash memory particle array; the module is based on an SM4 algorithm and an XTS advanced encryption standard mode, combines a logical address as an adjustment value to perform encryption and decryption, and injects a root key through an out-of-band interface to derive a data key. The system comprises a main control chip, a flash memory array and the coprocessing module, the latter integrates a hardware encryption and decryption engine, a key management unit and data flow control logic. The application realizes high-performance, high-compatibility, high-security national secret hardware-level full-disk encryption without changing a general main control chip.

The invention discloses a hard disk fingerprint encryption system, which relates to the technical field of hard disk encryption and comprises a storage module, a fingerprint verification module, a pressure sensing module, a control unit and a data transmission module for performing data transmission with external computing equipment, a timing unit is arranged in the control unit; a user can customize the minimum pressure value of the pressure sensing module and the minimum pressing time of the timing unit; when the data transmission module is connected with an external computing device, the fingerprint verification module is used for collecting and verifying user fingerprints; a first fingerprint is pre-stored in the fingerprint verification module, and when verification of the first fingerprint passes, the pressure sensing module detects that the pressure value of finger pressing is larger than or equal to the minimum pressure value, and meanwhile the pressing duration time detected by the timing unit reaches or exceeds the minimum pressing time, the control unit controls the storage module to be in a complete unlocking state. The difficulty that a stealer verifies and unlocks by using copied fingerprints is increased, and the safety is improved.

The invention discloses a dynamic monitoring method for storage data of an intelligent encrypted USB flash disk, which relates to the technical field of USB flash disk encrypted storage and comprises the following steps of: inputting identity information of a user for the intelligent encrypted USB flash disk; extracting information features in the identity information, and generating an exclusive identity encryption key for the identity information based on the information features; converting the identity information into an information code, performing encryption protection on the identity information through an identity encryption key, outputting an identity ciphertext, and keeping the identity information at the same time; decrypting the identity ciphertext, verifying whether the identity ciphertext can be restored into identity information, and completing monitoring whether an error occurs in the encryption process of the identity ciphertext; the method and the device are used for solving the problems that the existing USB flash disk encryption storage technology is insufficient in security protection of identity verification information and lacks verification of the accuracy of the identity verification information, so that the intelligent encryption USB flash disk has the risk of leakage and the risk of incapability of use.

This invention discloses a U-shield encrypted communication method, system, device, and medium based on terminal identity authentication, belonging to the field of encrypted communication technology. The method includes: acquiring terminal running process data; comparing the running process data with a secure process baseline to obtain a process baseline deviation; acquiring the terminal's network access data based on the process baseline deviation; performing network anomaly analysis on the network access data to obtain a network anomaly metric; constructing a security risk matrix based on the process baseline deviation and the network anomaly metric; and calculating a comprehensive terminal security score based on the security risk matrix; and formulating a U-shield encrypted communication strategy based on the comprehensive terminal security score. The beneficial effect of this invention is that by constructing a security risk matrix to integrate and calculate process security status and network security status, it achieves a comprehensive quantitative assessment of multi-dimensional risks and accurate identification of complex threats.

The application relates to a method for realizing centralized transaction communication and data storage security encryption based on a domestic chip merchant secret algorithm, which comprises a communication link security reinforcement step and a data storage encryption step, and the communication link security reinforcement step specifically comprises the following processing procedures: communication link encryption based on a safe endogenous SDK; and link security reinforcement based on a safe endogenous merchant secret gateway; the data storage encryption step specifically comprises the following processing procedures: application layer safe endogenous encryption; database transparent encryption; and data storage disk encryption. The method, device, processor and computer readable storage medium thereof for realizing centralized transaction communication and data storage security encryption based on the domestic chip merchant secret algorithm integrate the safe endogenous merchant secret algorithm in a CPU internal chip, and external application does not need to excessively care about the adaptation of the underlying hardware, so that the problems of high compatibility cost and high procurement cost of newly-added encryption cards in the current merchant secret application are solved.