Computer Security Locking Device with Encryption Board and Electronic Key
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current information security products, such as encryption devices, often fail to protect stored information effectively, as they operate like firewalls without encrypting data and can be easily cloned or misused, leading to potential data leakage.
Innovation Solution
A security locking device for computers that uses separate key pairs, with an encryption board and electronic key for real-time authentication, encrypts and decrypts data between the main board and hard disk, and employs SM4 and SM1 algorithms to ensure data security and prevent hardware copying.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If encryption devices are configured at the information output interface without encrypting stored information, then the device complexity is reduced and ease of operation is improved, but information security is compromised and data leakage may occur
Solution Approach 1:
The encryption system is segmented into multiple components: encryption board inserted between main board and hard disk, electronic key with separate key pairs, and distributed key lists. This segmentation allows encryption functionality to be added without complicating the overall system operation, as each component has a specific role.
Solution Approach 2:
The encryption board acts as an intermediary device between the main board and hard disk, intercepting and encrypting data before it reaches the storage medium. This mediator approach enables encryption without requiring changes to the existing operating system or user interfaces, maintaining ease of operation while securing data.
2Reliability
If encryption devices are configured to encrypt stored information, then information security is improved, but the device complexity increases and the operations become troublesome
Solution Approach 1:
The encryption board performs self-configuration and automatic authentication using the electronic key and stored key lists. The system automatically encrypts and decrypts data based on partition information without requiring user intervention or complex configuration, reducing operational burden despite the added encryption functionality.
Solution Approach 2:
Key lists are pre-stored in both the encryption board and electronic key during manufacturing or initial setup. Authentication credentials and encryption keys are prepared in advance, eliminating the need for complex runtime configuration and reducing operational complexity during normal use.
3Ease of operation
If encryption devices are configured without real-time authentication, then the ease of operation is improved, but the reliability decreases and the hardware can be easily copied
Solution Approach 1:
The system implements real-time authentication feedback loops where the encryption board continuously verifies the electronic key's credentials against stored key lists before allowing encryption/decryption operations. This automatic feedback mechanism ensures security without requiring user awareness or intervention, maintaining ease of operation while preventing hardware copying.
Solution Approach 2:
Authentication is performed continuously and automatically with every encryption/decryption operation rather than as a one-time setup step. The encryption board continuously verifies the electronic key's validity, ensuring ongoing security protection while requiring no additional user actions, thus maintaining operational simplicity.
4Device complexity
If a single key list is stored in one location, then the device complexity is reduced, but the security decreases and the key list can be stolen
Solution Approach 1:
The key list is segmented and distributed across multiple secure locations: portions are stored in the encryption board's secure memory and in the electronic key. This segmentation prevents any single point of failure or theft from compromising the entire key system, enhancing security while maintaining manageable complexity through automated key management.
Solution Approach 2:
The key list structure is nested with different levels of security: master key lists are stored in the encryption board, while user-specific key lists are stored in the electronic key. This nested arrangement allows hierarchical key management where outer layers protect inner layers, providing enhanced security without requiring complex external key management infrastructure.
Data Source
AI summary
The present disclosure relates to a security locking device of computers having separate key pairs, and including an encryption board inserted between a main board and a hard disk, and an encryption board being inserted into the encryption board to perform a real-time authentication process. The electronic key and the encryption board performs the real-time authentication process and hardware anti-copy self-testing process, and encrypt the data communicated between the encryption board and the electronic key. After passing the authentication process and the hardware anti-copy self-testing process, the electronic key combines an internally stored key list with the key list on the encryption board, and selects a user key to encrypt/decrypt the data on the disk according to the partition of the hard disk where the encrypted data is written to. The security locking device can assure the safety of the data, and the hardware is prevented from being copied.