41 results about "Disk encryption" patented technology

The invention relates to the technical field of electric digital data processing security, and discloses a solid state disk data encryption method and a solid state disk. According to the method, a national cryptographic algorithm hardware encryption and decryption co-processing module is serially arranged on a data bus between a main control chip and a flash memory particle array, so that transparent encryption of write-in data and transparent decryption of read-out data are realized; the module performs encryption and decryption based on an SM4 algorithm and an XTS advanced encryption standard mode in combination with a logic address as an adjustment value, and securely injects a root key through an out-of-band interface to derive a data key. The system comprises a main control chip, a flash memory array and the co-processing module, wherein the co-processing module is integrated with a hardware encryption and decryption engine, a key management unit and data flow control logic. On the premise that a general main control chip is not changed, high-performance, high-compatibility and high-security national cryptographic hardware-level full-disk encryption is realized.

The utility model discloses a portable hard disk bridging encryption circuit and equipment based on quantum random numbers, and belongs to the technical field of hard disk bridging encryption. According to the portable hard disk bridging encryption circuit based on the quantum random number, data of an upper computer reaches the SoC storage security chip through the upper computer interface, the SoC storage security chip obtains a secret key through the quantum random number generator and encrypts the data, and finally the encrypted data is written into a hard disk through the hard disk interface. All the data written into the hard disk can be completely encrypted, so that all the data written into the hard disk are ciphertexts, and the encryption safety of the mobile hard disk is improved. Besides, the circuit is in pluggable connection with the upper computer through the upper computer interface and in pluggable connection with the mobile hard disk through the hard disk interface, all the interfaces are connected when encryption is needed, the mobile hard disk skips the circuit to be directly connected with the upper computer when encryption is not needed, and the flexibility of hard disk encryption design is improved.

The invention provides a cloud hard disk encryption and decryption method and device, a medium and equipment. The method comprises the following steps: judging whether a volume type corresponding to a to-be-created cloud hard disk is an encrypted volume type or not; if yes, creating an encrypted volume type, and configuring secret key information of the encrypted volume type; verifying the secret key information for the first time, and creating a corresponding encrypted volume after the verification is passed; verifying the secret key information for the second time, creating a corresponding encrypted mirror image after the verification is passed, and storing the secret key information to the rear end, so that the creation of the cloud hard disk is completed; when the write request is generated, judging whether a mirror image corresponding to the cloud hard disk corresponding to the to-be-written data is an encrypted mirror image or not; if yes, acquiring secret key information from a rear end; performing end-to-end 4K alignment on the data blocks of the to-be-written data; and according to the secret key information, encrypting the data blocks after the end-to-end 4K alignment to obtain encrypted data, and carrying out distributed storage on the encrypted data at the rear end. According to the invention, the security of the user data is improved.

The invention provides a multilevel security management method for a trusted data space, and relates to the technical field of data security management, and the method comprises the steps: carrying out the main body access authentication and trusted rating for a connection main body of the trusted data space, and introducing a group isolation strip based on a data scene; setting a multi-layer security check level for security management of the trusted data space, and carrying out node data disk encryption for a core data node of the trusted data space; and acquiring a data interaction task, aiming at a sequence link node of a task cycle chain, implementing connection main body group isolation of a node data scene by triggering a group isolation strip, and implementing level safety verification of the node data scene by matching multiple layers of safety verification levels. According to the method and the device, the technical goal of dynamic safety management based on task tracking and risk supervision can be realized, and the technical effects of improving the real-time risk identification capability of the data interaction task and ensuring the safety and stability of the data interaction process are achieved.

The invention relates to a disk encryption method based on artificial intelligence, and the method comprises the steps: obtaining to-be-stored data in a specified time period, recognizing and classifying the to-be-stored data, and adding a corresponding data importance level mark to the data; carrying out statistics on data volumes with the same importance level, and matching corresponding disks; cutting the corresponding to-be-stored data matched with the disk according to the corresponding data type to form data blocks of different data types; partitioning the disk, and storing the data blocks of different data types to different partitions of the disk; performing different partition encryption level processing on different partitions, and performing different levels of disk encryption processing on different disks according to importance levels of data stored in the disks; acquiring to-be-stored data in real time, performing grade classification on the real-time to-be-stored data, and distributing the real-time to-be-stored data to different disks; and classification is carried out according to data types under each importance degree grade, and the data are stored to different partitions, so that more intelligent, flexible and secure disk encryption is realized.

A method is described including signing a concatenation of an image signature, a public key associated with the image signature, and a full disk encryption (FDE) header to obtain an image encryption service (IES) signature. The method also includes writing the IES signature to an extensible firmware interface system partition (ESP) of an encrypted confidential virtual machine (CVM) disk image.

The invention relates to the technical field of database security, in particular to an SQLite database transparent encryption method, system and device based on a national cryptographic algorithm and a storage medium, and the method comprises the following steps: S1, when an SQLite database is opened, loading and connecting a hardware cryptographic device to obtain an encryption master key and a corresponding key handle; s2, in response to the write-in operation, calling a national secret symmetric encryption algorithm through a key handle, encrypting a plaintext of a database page to generate a page, and writing the page into a database file; s3, reading the ciphertext page in response to the reading operation, decrypting the ciphertext page through a cryptographic symmetric decryption algorithm adjusted by a key handle after analysis, recovering a plaintext page and returning the plaintext page to the application; and S4, circularly executing encryption writing and decryption reading to process the continuous request, and releasing the key handle and disconnecting the hardware connection until the database connection is closed. According to the method, transparent full disk encryption, meeting the national secret standard, of the SQLite database is achieved, the secret key safety and the operation performance are guaranteed through hardware cryptographic equipment, and good application compatibility is kept.

The invention discloses a local data security storage method for a non-networked vehicle, which comprises the following steps of: setting a vehicle-mounted MP5 (Mobile Pentium 5), and storing local data through the vehicle-mounted MP5; setting a three-level storage architecture for the vehicle-mounted MP5, and storing vehicle static information into a configuration data area; storing the operation parameters into a runtime data area according to a time sequence; storing the fault event into an event data area; implementing a hierarchical encryption strategy on data, performing full disk encryption on storage equipment, performing independent file encryption on sensitive data files, and implementing additional character encryption on key fields; an encryption key is derived based on a vehicle VIN code and a user PIN, a circular buffer management mechanism is established, and a secure data export interface is provided. According to the invention, the confidentiality, integrity and availability of vehicle local data can be improved, and the safety and reliability of vehicle data storage are improved.

The embodiment of the invention provides an encryption method, a software upgrading method, a related device, equipment, a medium and a product. The USB flash disk encryption method comprises the following steps: acquiring bare data of a software upgrade package; establishing upgrading information of the software upgrading package, wherein the upgrading information comprises an identification number and a version number of the software upgrading package and a preset storage position of the software upgrading package in the target USB flash disk; and encrypting the upgrading information, and storing the encrypted upgrading information and the bare data into the target USB flash disk according to a preset storage rule, so that the target equipment obtains the bare data of the software upgrading package required by upgrading based on the encrypted upgrading information under the condition of accessing the target USB flash disk. According to the USB flash disk encryption method disclosed by the embodiment of the invention, the data in the USB flash disk is stored in a bare data form, so that the possibility that the data is identified is reduced, the upgrading information independent of the software upgrading package is established, the data is convenient to manage, the upgrading information is encrypted, and the data processing complexity is reduced; and the improvement of the data security is realized in a simple mode.

The invention discloses a data secrecy method and device based on permission sharing operation of an encrypted PSSD and a medium. The method comprises the following steps: 1) performing permission partitioning on the PSSD; 2) setting an encryption area feature attribute; an attribute structure Lij is set for each encryption area, and accessible user groups and corresponding lowest user permissions of the encryption areas are specified in the structure; 3) allocating unlocking permissions to each group of users; 3) when a request of accessing the encryption area by the user is received, performing access permission verification on the user; and 4) if the identity authority level of the user executing unlocking currently is greater than the encrypted disk partition authority and the accessible user group is matched, automatically unlocking the disk space with the matched authority, otherwise, sending verification failure information, and recording error counting for each verification failure. According to the method, stepped data sharing and management of personnel among the groups can be achieved, reading and writing of data among the groups are achieved according to user permission, and disk encryption space can be managed more flexibly.

The present invention belongs to the field of information security technology and discloses a virtual disk encryption method and device based on Ukey. The method comprises: after detecting Ukey access, creating a virtual disk partition, generating a blank image file according to input file information, and writing the encrypted information obtained by encrypting the symmetric encryption key generated by the secure random number generator using the preset file content structure and the encryption certificate derived by the Ukey into the blank image file, and finally using the symmetric encryption key to encrypt the formatted file data in the file system to obtain ciphertext data and combine it with the preset file content structure written above to generate an encrypted disk image file. The UKey device is used to realize the separation management of keys and data. The keys are stored in the UKey and a physical chip is used to protect the keys, which greatly reduces the risk of key leakage and improves data security. At the same time, the encrypted image file data in a unified format can be seamlessly used between different platforms, with higher flexibility and convenience.

The invention discloses a data protection device and method, electronic equipment and a storage medium, the device comprises a memory encryption virtual machine, the memory encryption virtual machine comprises a data management module, an application management module, an encryption memory and a full disk encryption module, the data management module and the application management module are arranged in a memory to encrypt an account-free mirror image of the virtual machine; the data management module is used for writing the encrypted data set and the data use control strategy into the full-quantity disk encryption module; loading the key to an encryption memory, decrypting the encrypted data set by using the key to obtain a data set, and injecting the data set into a white list application process; the application management module is used for receiving application package data; verifying the application package data based on the data use control strategy; under the condition that the verification is passed, creating a safe operation environment of the white list application process in the encrypted memory; and starting the data calculation task to obtain a data use result, and sending the data use result to the data use end. Therefore, the data security can be improved.

The invention discloses a hard disk encryption management method, device and equipment and a readable storage medium. The hard disk encryption management method comprises the steps that a hard disk receives a manufacturer custom command from a host; analyzing the manufacturer custom command to obtain an encrypted management command; when the encryption management command is a password setting command, if a first logic space of the hard disk is in an unencrypted state or an unlocked state, converting a first plaintext password into a first ciphertext password through an encryption algorithm; loading the first ciphertext password to an encryption engine of the hard disk, converting the first preset data into first encrypted data by the encryption engine by taking the first ciphertext password as a key, and storing the first encrypted data to a standby area corresponding to a first logic space of the hard disk; and after the first encrypted data is successfully stored, setting the first logic space of the hard disk to be in an encrypted and unlocked state, and replying a command execution result to the host. According to the method and the device, the applicability of a hard disk encryption function is greatly improved, and the password security is greatly improved.

The invention relates to the technical field of data security, in particular to a USB flash disk encryption implementation system and method. The system comprises a data partition management module used for forming a common data partition and a hidden encryption partition; the transparent encryption and decryption module is realized based on a file system filter driver and is used for encrypting and decrypting the hidden encryption partition data in real time; the identity authentication module is used for verifying user identity information and dynamically mounting the hidden encryption partition after the user identity information passes the verification; and the security isolation module is used for establishing a security data transmission channel and monitoring an access state, and automatically unloading the hidden encryption partition when a condition is met. The method comprises the steps of partition creation, request interception, identity verification, dynamic mounting, real-time encryption and decryption and automatic unloading. According to the invention, security level-to-level management and transparent encryption and decryption of U disk data are realized, and the problems of poor compatibility and complex operation in the prior art are solved.

The application relates to a mobile hard disk encryption method based on a touch screen and a mobile hard disk, and the mobile hard disk encryption method comprises the following steps: S1, generating encryption track data through a touch screen module; S2, converting the encryption track data into encryption instructions, and converting a register into a register in an encryption state according to the encryption instructions; and S3, triggering decryption instructions in the mobile hard disk in the encryption state, and updating the register in the encryption state into a decryption state according to the decryption instructions. In the prior art, the data security problem is that people with ulterior motives can easily steal the mobile hard disk or steal the data of the hard disk in a short time; the scheme can solve the problems that the password operation of the mobile hard disk is complicated and the state display is not intuitive while the safety and privacy are considered.

The invention relates to a mobile hard disk encryption method based on a touch screen and a mobile hard disk. The mobile hard disk encryption method comprises the following steps: S1, generating encryption track data through a touch screen module; s2, converting the encryption track data into an encryption instruction, and converting a register into a register in an encryption state according to the encryption instruction; and S3, triggering a decryption instruction in the mobile hard disk in the encryption state, and updating the register in the encryption state into a decryption state according to the decryption instruction. In the prior art, the problem of data security is solved, and a mobile hard disk is easily stolen by a person with an exclusive mood or the data of the hard disk is stolen in a short time; according to the scheme, the problems that password operation of the mobile hard disk is tedious and state display is not visual can be solved while security privacy is considered.

The invention relates to the technical field of software encryption protection, in particular to a method, a system and equipment for automatically guiding an encrypted disk in a Linux system and a medium. A fixed UUID is designated as a partition identifier, a plaintext is encrypted through a symmetric encryption and decryption algorithm, a secret key is obtained, and the plaintext is prevented from being leaked when process parameters are transmitted; a secret key and a secret key decryption algorithm are embedded in the GRUB, so that the GRUB has a plaintext restoration function; the method comprises the following steps: transmitting a key parameter when a kernel is under a GRUB guide boot partition, obtaining a plaintext by using a decryption algorithm when the parameter is obtained in the kernel, and writing the plaintext into an initrd memory fixed path file after decompressing initramfs (initrd); the system-cryptsetup is used for realizing that a cryptttb file reads a plaintext password file mounting partition, and the cryptttb file is used for reading a plaintext password file mounting partition; and finally, switching and guiding the root file system. According to the method, a user does not need to be informed of a plaintext password for a software final state, key binding, disk encryption and system boot management and control are achieved, and finally manual intervention is not needed.

A system and method reduces use of restricted operations in a cloud computing environment during cybersecurity threat inspection. The method includes: detecting an encrypted disk in a cloud computing environment, the encrypted disk encrypted utilizing a first key in a key management system (KMS); generating a second key in the KMS, the second key providing access for a principal of an inspection environment; generating a snapshot of the encrypted disk; generating a volume based on the snapshot, wherein the volume is re-encrypted with the second key; generating a snapshot of the re-encrypted volume; generating an inspectable disk from the snapshot of the re-encrypted volume; and initiating inspection for a cybersecurity object on the inspectable disk.

The invention discloses a virtual machine encryption method based on Libvirt and QEMU (quick empirical mode unit). The method belongs to the technical field of cloud computing and virtualization. According to the method, the QEMU is expanded, the support of the QEMU for national cryptographic algorithms SM1 and SM4 is increased, a QEMU module is modified, and when a qemu-img command is executed, echoes of-object parameter information are set to be xxxxxxx according to a-object parameter address, and the echoes are used for hiding a disk encryption key. The method comprises the following steps: expanding Libvirt, realizing one-machine one-password of a virtual machine by applying a national password algorithm SM9, generating a secret key pair by using a UUID of the virtual machine as a national password SM9 public key, storing a private key of the SM9 in an encryption chip, encrypting an encryption secret key of the virtual machine and an XML (Extensible Markup Language) by using the SM9 public key, and decrypting the encryption secret key of the virtual machine and the XML by calling an encryption chip interface. According to the method, the problem that the Secret of Libvirt and the XML of the virtual machine leak sensitive information is solved, the problem that the secret key is leaked when the QEMU creates and encrypts the QCOW2 file is solved, and the encryption and decryption performance of the disk file of the virtual machine is improved.

The invention relates to the field of intelligent equipment manufacturing, and discloses a burnt mirror image file processing method capable of starting full-disk encryption, which is used for processing a mirror image file before burning and solving the problem of long burning time of the mirror image file due to starting of a full-disk encryption technology. According to the scheme, firstly, storage partition information is obtained, then format recognition and screening are conducted on storage partitions, and a target partition containing a mountable file system is determined; then, an analysis tool matched with the format of the target partition is adopted, use state information of the target partition is extracted, and the use state information at least comprises position features of the free data blocks; positioning a storage area corresponding to the idle data block in the to-be-processed burning mirror image by combining the partition configuration information table and the position characteristics of the idle data block; and finally, carrying out data filling on an idle data block storage area positioned in the to-be-processed burning mirror image, and setting all bits in the area as logic high levels to obtain an optimized burning mirror image file.

The application provides a data protection method and device, computer equipment and a storage medium. The address information of selected partial hard disk files is added to an encryption file list created by the hard disk, and a self-encryption algorithm is started to encrypt the content of the partial hard disk files, thereby realizing local hard disk file encryption and improving the flexibility of data protection. Even if the hard disk password is forgotten, the unencrypted hard disk files can still be operated, application requirements are met, and compared with a software data protection mode, encrypted data is easily destroyed when the hard disk is formatted. In the application, the target file of the hard disk encryption can still be retained when the hard disk is formatted, and the security of the hard disk file is further improved.

The present invention discloses a data confidentiality method, device and medium based on the permission sharing operation of encrypted PSSD, which includes the following steps: 1) partitioning the PSSD into permission zones; 2) setting the characteristic attributes of the encryption zones; and setting an attribute structure L for each encryption zone. ij , within this structure, specify the user groups that can access the encryption zone and the corresponding minimum user permissions; 3) assign unlocking permissions to each user group; 3) upon receiving a user request to access the encryption zone, verify the user's access permissions; 4) if the user identity permission level currently performing the unlocking operation is greater than the encrypted disk partition permissions and the accessible user group matches, automatically unlock the disk space with matching permissions; otherwise, a verification failure message is sent and an error count is recorded for each verification failure. This method enables tiered data sharing and management between groups, enabling inter-group data reading and writing based on user permissions, and more flexible management of disk encryption space.

The present invention provides a virtual machine encryption method in a cloud platform, including: constructing a KMS system pool, where multiple verified KMS systems are configured in the KMS system pool; creating a number of encryption policies, and each encryption policy is bound to one verified KMS system in the KMS system pool; a virtual machine to be encrypted in the cloud platform selects an encryption policy from all the encryption policies and binds the selected encryption policy to the virtual machine to be encrypted; obtaining a symmetric encryption key from the KMS system corresponding to the selected encryption policy and encrypting all virtual disks of the virtual machine to be encrypted. The present invention also provides a virtual machine encryption device, equipment and medium in a cloud platform, which prevents the virtual machine to be encrypted under the cloud platform from obtaining a key from a KMS system that is not bound and associated, and avoids the scenario where data cannot be decrypted.

The invention discloses a USB key encryption communication method, system and device based on terminal identity authentication and a medium, and belongs to the technical field of encryption communication, and the method comprises the following steps: obtaining running process data of a terminal, and comparing the running process data with a security process baseline to obtain a process baseline deviation degree; acquiring network access data of the terminal based on the process baseline deviation degree, and performing network anomaly analysis on the network access data to obtain a network anomaly metric value; constructing a security risk matrix based on the process baseline deviation degree and the network anomaly metric value, and performing calculation according to the security risk matrix to obtain a terminal comprehensive security score; and formulating a USB key encryption communication strategy according to the terminal comprehensive security score. The method has the advantages that the process security state and the network security state are subjected to fusion calculation by constructing the security risk matrix, and comprehensive quantitative evaluation of multi-dimensional risks and accurate recognition of composite threats are achieved.

The application relates to the technical field of electric digital data processing security, and discloses a solid state disk data encryption method and a solid state disk. The method realizes transparent encryption of written data and transparent decryption of read-out data by serially arranging a national secret algorithm hardware encryption and decryption coprocessing module on a data bus between a main control chip and a flash memory particle array; the module is based on an SM4 algorithm and an XTS advanced encryption standard mode, combines a logical address as an adjustment value to perform encryption and decryption, and injects a root key through an out-of-band interface to derive a data key. The system comprises a main control chip, a flash memory array and the coprocessing module, the latter integrates a hardware encryption and decryption engine, a key management unit and data flow control logic. The application realizes high-performance, high-compatibility, high-security national secret hardware-level full-disk encryption without changing a general main control chip.

The invention discloses a hard disk fingerprint encryption system, which relates to the technical field of hard disk encryption and comprises a storage module, a fingerprint verification module, a pressure sensing module, a control unit and a data transmission module for performing data transmission with external computing equipment, a timing unit is arranged in the control unit; a user can customize the minimum pressure value of the pressure sensing module and the minimum pressing time of the timing unit; when the data transmission module is connected with an external computing device, the fingerprint verification module is used for collecting and verifying user fingerprints; a first fingerprint is pre-stored in the fingerprint verification module, and when verification of the first fingerprint passes, the pressure sensing module detects that the pressure value of finger pressing is larger than or equal to the minimum pressure value, and meanwhile the pressing duration time detected by the timing unit reaches or exceeds the minimum pressing time, the control unit controls the storage module to be in a complete unlocking state. The difficulty that a stealer verifies and unlocks by using copied fingerprints is increased, and the safety is improved.

The invention relates to the field of data encryption, and particularly discloses an enterprise terminal leakage prevention method and system based on kernel encryption and file redirection, and the method comprises the following steps: S1, deploying a security terminal on a terminal layer, carrying out the whole encryption of a C-Y disk of a terminal hard disk through employing a VeraCrypt kernel driver, and creating an isolated and unencrypted Z disk as an external network dedicated disk; s2, executing kernel-level authority control on the security terminal through a loaded MiniFilter file system filter driver, including intercepting and verifying a software installation and execution request, and only allowing software in a software white list issued by a strategy server to start; according to the method, a hard disk encryption and partition creation technology based on a VeraCrypt kernel driver is deployed at the enterprise terminal, so that the security of enterprise terminal data is greatly improved. The method comprises the following steps of: performing full disk encryption on partial partitions of a terminal hard disk, creating an isolated extranet special disk, and effectively isolating intranet sensitive data from a possible risk environment of an extranet;

The invention belongs to the technical field of information security, and discloses a virtual disk encryption method and device based on a Ukey. The method comprises the following steps: after Ukey access is detected, creating a virtual disk partition, generating a blank mirror image file according to input file information, writing a preset file content structure and encrypted information obtained by encrypting a symmetric encryption key generated by a secure random number generator by using an encryption certificate exported by the Ukey into the blank mirror image file, and storing the blank mirror image file in the virtual disk partition; and finally, encrypting formatted file data in a file system by using a symmetric encryption key to obtain ciphertext data, generating an encrypted disk mirror image file by combining the ciphertext data with the written preset file content structure, realizing separation management of the key and the data by using UKey equipment, and storing the key in the UKey. A physical chip is used for protecting the secret key, the risk of secret key leakage is greatly reduced, the data safety is improved, meanwhile, encrypted mirror image file data in a unified format can be seamlessly used between different platforms, and higher flexibility and convenience are achieved.

Embodiments of the present application disclose a document encryption and decryption method and device based on a U disk, computer equipment and a storage medium. The method comprises: obtaining an IRP file formed after an IO manager converts an operation request on a file; obtaining a control command from an application program; feeding back state information to the application program according to the control command, so that the application program formulates an encryption and decryption strategy and sends the encryption and decryption strategy; receiving the encryption and decryption strategy; determining whether the operation on the file is a type of operation requiring encryption and decryption in the encryption and decryption strategy according to the IRP file; and if the operation on the file is the type of operation requiring encryption and decryption in the encryption and decryption strategy, encrypting and decrypting the file by using a U disk encryption and decryption technology to obtain a processing result. The method of the embodiments of the present application can improve the security, reliability, applicability and compliance of the document encryption and decryption based on the U disk.

The invention relates to the technical field of data security and storage control, in particular to a hard disk encryption adapter for improving mobile data security in various application scenes. Comprising a security chip and an NFC communication module, the security chip is connected between a host and a hard disk and is used for realizing data ferry between the host and the hard disk, and the NFC communication module is connected between the security chip and a mobile phone APP and is used for establishing communication between the security chip and the mobile phone APP and realizing near-field off-network identity authentication and access control; the access control comprises group matching and secret sharing, trusted device group construction based on group matching, realization of data sharing and cross-domain access among trusted device groups, realization of hard disk secret key segmentation and synthesis based on secret sharing, realization of hard disk access authorization of different security levels, and realization of multi-level authorization management of sensitive hard disk data. According to the method, hierarchical authorization is achieved, storage security and password service are fused, and the security of mobile data under various application scenes is improved.