KR101269095B1 - Remote storage device using mobile phone and method thereof - Google Patents

Abstract

The present invention relates to a mobile storage device using a mobile terminal, a method of implementing the same, and a recording medium recording the method. The method of implementing the mobile storage device using the mobile terminal according to the present invention is based on a password previously input by the mobile terminal. 1 generates and stores a hash value, sends a random value to the host, receives a network connection request including a second hash value and an environment variable based on the random value from the host, and the first hash value matches the second hash value. In this case, the operating environment of the host is identified from the received environment variable, and a control message for controlling the mobile terminal as a mobile storage device and an event message for installing the control application are transmitted to the host in response to the identified operating environment. Creates a session between the mobile terminal and the host.

Description

Mobile storage device using mobile terminal and its implementation method {Remote storage device using mobile phone and method

The present invention relates to a mobile storage device using a mobile terminal and a method for implementing the same. In particular, an apparatus, an implementation method, and an apparatus that can be used as a mobile storage device for a user by connecting a portable terminal used by a user to a host in particular. A recording medium recording the method of implementation.

With the rapid development of computer technology and hardware, a variety of technologies have emerged regarding so-called 'removable storage devices' for users to access their data anytime and anywhere.

The hardware implementation method is to utilize a USB memory or an external hard disk which is a physical removable storage medium. As USB memory and external hard disks become more inexpensive and smaller in mass storage media, they are able to provide unparalleled storage space in the past. When a user finds a device or host to be connected while carrying the device, the hardware removable storage device recognizes the storage device as a removable storage device by using a wired connection and utilizes the storage space.

In the software implementation method, a web storage or cloud storage technology that accesses its data through a network from a host computer using a virtual removable storage medium implemented on a network. There is a way to use it. Such a software removable storage device can be used by a user to logically access the removable storage device from a host through a network.

The most important issue in the above portable storage device is to ensure the confidentiality of their personal data and to provide a reliable storage service continuously. Accordingly, there is a constant need for improvement and development of removable storage devices in terms of confidentiality and availability.

The technical problem to be solved by the present invention is to solve the problem that the hardware-based removable storage device does not provide an encryption function or caused by the increase of the cost of the removable storage device due to encryption by adding a special hardware, and software-based To overcome the limitation that there is a tendency that depends on the operating system and the implementation environment of the host in the removable storage device, to solve the inconvenience that the availability and confidentiality of the data is limited in the removable storage device based on the general-purpose network.

In order to solve the above technical problem, a method for implementing a mobile storage device using a portable terminal according to the present invention includes the steps of generating and storing a first hash value from a password previously inputted by the portable terminal; Transmitting, by the portable terminal, a random value to a host, and receiving a network connection request from the host including a second hash value based on the random value and an environment variable indicating an operating environment of the host; Identifying an operating environment of the host from the received environment variable when the first hash value and the second hash value match; Transmitting a control application for controlling the portable terminal as a removable storage device and an event message for installing the control application in response to the identified operating environment to the host; And generating a session between the portable terminal and the host through the control application.

The method for implementing a mobile storage device using the portable terminal according to the present invention includes establishing a secure channel between the portable terminal and the host by exchanging a key for communication encryption through the generated session. It further comprises the step of forming.

In addition, the method for implementing a mobile storage device using the portable terminal according to the present invention further includes the step of mapping the mobile terminal to at least one operating environment and a corresponding control application in advance. Identifying the operating environment of the host by extracting information on the operating environment of the host from the received environment variable, wherein the control application transmitted to the host is identified from the one or more previously stored control applications; It is preferably a control application selected using the mapping relationship to the operating environment.

In addition, the method for implementing a removable storage device using the portable terminal according to the present invention described above comprises the steps of: generating, by the portable terminal, a data encryption key from the previously input password; And performing at least one of encrypting and storing data in the portable terminal using the generated key or reading and decrypting the stored data, wherein the data encryption key is a memory of the portable terminal. It is preferable to delete the resident after a predetermined time.

Furthermore, the method for implementing a removable storage device using the portable terminal according to the present invention includes the steps of: receiving, by the portable terminal, at least one request of file list reading, file transmission, reception, file deletion, and file copy from the host; And transmitting, by the portable terminal, a response corresponding to the received request to the host, wherein receiving the request and transmitting the response include transmitting encrypted communication data through the generated session. It is preferably carried out using.

In order to solve the above technical problem, a method of implementing a mobile storage device using a portable terminal according to the present invention, after the host receives a random value from the portable terminal, the hash value from the random value and the password received from the user Generating a; Sending, by the host, a network connection request including the generated hash value and an environment variable representing an operating environment of the host to the mobile terminal; Receiving a control application for controlling the portable terminal as a removable storage device and an event message for installing the control application from the portable terminal; Installing, by the host, the control application according to the received event message; And creating a session between the portable terminal and the host through the control application.

The method for implementing a removable storage device using the portable terminal according to the present invention further includes establishing a secure channel between the portable terminal and the host by exchanging a key for communication encryption through the generated session. .

In addition, the method for implementing a removable storage device using a portable terminal according to the present invention comprises the steps of: the host transmits at least one request of file list reading, file transmission and reception, file deletion and file copy to the mobile terminal; And receiving, by the host, a response corresponding to the transmitted request from the mobile terminal; transmitting the request and receiving the response further include encrypted communication data through the generated session. It is preferably carried out using.

In addition, the following provides a computer-readable recording medium having recorded thereon a program for executing a method of implementing a removable storage device using a portable terminal described above in a computer.

The present invention utilizes a portable terminal that a user always possesses as a software-encrypted removable storage device so that an encrypted storage service can be used without adding expensive hardware. It can be used flexibly under the operating system and implementation environment, and by utilizing the unique wireless communication means possessed by the portable terminal, the portable terminal directly controls the storage service, thereby greatly improving the availability and confidentiality of data.

1 is a view for explaining the basic idea and the overall operation method of a method for implementing a mobile storage device using a portable terminal according to an embodiment of the present invention.
2 is a flowchart illustrating a method of implementing a mobile storage device using a portable terminal according to an embodiment of the present invention, focusing on the portable terminal.
FIG. 3 is a flowchart illustrating a method of implementing a removable storage device using a portable terminal according to an embodiment of the present invention based on a host.
4 is a block diagram illustrating a mobile storage device using a portable terminal according to an embodiment of the present invention from a hardware perspective.
FIG. 5 is a diagram illustrating a method of installing a control application in a mobile storage device using a portable terminal according to an embodiment of the present invention.
FIG. 6 is a diagram for describing a method of creating a session in a mobile storage device using a mobile terminal according to one embodiment of the present invention; FIG.
7A to 7E illustrate various communication protocols between a portable terminal and a host in a mobile storage device using a portable terminal according to an embodiment of the present invention.

Before describing the embodiments of the present invention, the basic idea that the embodiments of the present invention are commonly employed will be introduced.

As briefly introduced, hardware-based removable storage devices have a weakness in confidentiality because USB memory or external hard disks do not provide encryption by default. In addition, in the case of a removable storage device that provides an encryption function, an encryption function is provided by using separate hardware. However, there is a problem in that a unit price of the product increases due to the addition of such hardware. Furthermore, a removable storage device that uses encryption software (eg, BitLocker or 3rd party application) may provide a function of encrypting and managing a USB memory or an external hard disk, but the software may be removable. There has been a tendency to depend on the operating system and implementation environment of the host to be connected to the device.

Meanwhile, in the case of a network-based removable storage device, the availability and confidentiality of the stored data may be limited according to the technical level and the policy level of the service provider, which may be directly accessed by the subject providing the removable storage service. This is a problem that arises from being an object. In addition, the network-based mobile storage device is inconvenient that the availability of information is not guaranteed depending on the availability of a network such as the Internet in the environment to use the mobile storage service.

Accordingly, embodiments of the present invention to be introduced below propose a method of utilizing a large storage space inside a mobile terminal as a removable disk by utilizing a communication device owned by the mobile terminal through a mobile terminal which is always carried by a modern user. I would like to. As the mobile terminal has recently evolved into a smart phone, data encryption and management are becoming easier based on powerful hardware, and the mobile storage service is more easily available through an input means and a display device provided by the mobile terminal. Could provide. Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view for explaining the basic idea and the overall operation method of a method for implementing a mobile storage device using a portable terminal according to an embodiment of the present invention.

The portable terminal 10 generally means a wireless communication device possessed and used by a user, and has a separate storage space for storing data. In addition, the mobile terminal 10 includes an arithmetic device capable of driving encryption software for data encryption and decryption, and stores a control application for controlling the mobile terminal 10 by distributing it to the host 20. Doing.

The host 20 may be a user PC or may be a cloud computer existing on a network rather than physically one hardware. In the case of a cloud computer, a cloud guest operating system (OS) is used to provide resources required for the computing environment from one or more pieces of hardware.

The wireless communication means 30 generically refers to a communication module held by a mobile terminal. Examples of the wireless communication means 30 include Wi-Fi, a 3G mobile communication network, and a Bluetooth. Recently introduced smart phones are often equipped with all the above-described wireless communication means, and communicate with other devices by selectively using one or more of the above-described wireless communication means according to the use environment. In the embodiments of the present invention, the portable terminal 10 and the host 20 are connected by selectively utilizing the wireless communication means 30 described above.

In an environment in which the portable terminal 10 and the host 20 can be connected through the wireless communication means 30, the basic operations of the present embodiment are as follows.

The user wishes to utilize the mobile terminal 10 as a removable storage device. To this end, in step 110, the portable terminal 10 distributes and installs a control application capable of controlling the host to the host 20.

If the control application is now installed in the host 20, the host 20 recognizes the portable terminal 10 as a mobile storage device through the control application in step 120 and creates a session between them. A session is a logical connection for dialogue between users or computers in a network environment. In the present embodiment, it means a logical connection between the mobile terminal 10 and the host 20 for data communication.

If the session is created in step 120, in step 130, the host 20 may view a file stored in the mobile terminal 10 through a control application, transmit or receive a file, delete a file, or copy a file. Do this. All of these commands are sent and received in encrypted form using a session key. Here, the session key refers to an encryption key which is used only for one communication session between the communicating counterparts. In particular, when there are many ciphertexts using a single key, an attacker may intercept and analyze the key and use the session key temporarily to prevent this. Accordingly, a time-out for expiration of the session key may be set, and when the set expiration time elapses, the corresponding session key is no longer valid.

Based on the above structure, embodiments of the present invention will be described in detail from the perspective of a mobile terminal and a host, respectively.

2 is a flowchart illustrating a method of implementing a mobile storage device using a portable terminal according to an embodiment of the present invention, focusing on the portable terminal, and includes the following steps.

In operation 210, the mobile terminal generates and stores a first hash value from a previously input password. To this end, a hash function is utilized, and a first hash value is calculated by combining a password previously input from a user and a first random value using a message digest function unique to the hash function. do. This first hash value is then used for password authentication for the user.

In step 220, the mobile terminal transmits a second random value to the host, and then receives a network connection request including a second hash value based on the second random value and an environment variable indicating an operating environment of the host. More specifically, the second random value utilized to generate the second hash value is a value transmitted from the mobile terminal to the host. The second random value is combined with the password input from the user to the second random value. Create Again, the hash function is used to abbreviate the message.

The portable terminal now receives a network connection request from the host that includes the second hash value and an environment variable. The environment variable is a variable that records the operating environment of the host, that is, the property of the system, and is set in a shell of the operating system or the like. The names of these environment variables and their meanings are predefined, so you can read the environment variables to see the configuration of your system. Environment variables record settings for the application running on the operating system, such as the directory where the system's executable files are placed. An application can simply obtain the value of an environment variable through a system call or a standard application programming interface (API) of the operating system.

In addition, some of the internal data of the web browser is referred to as an environment variable, which is transmitted when a request is made through the HTTP (hypertext transfer protocol) protocol, and is a web server such as a browser type or a linked web page. Is sent to the web browser for optimal processing. That is, an application requesting data through HTTP may transmit an environment variable, and an embodiment of the present invention may be used to identify an operating environment of a host.

In operation 230, when the first hash value generated in operation 210 and the second hash value generated in operation 220 match, the host environment is identified from the received environment variable. The difference between the first hash value and the second hash value due to the characteristics of the hash function means that the original original value is different, and thus means that the input password is different. Therefore, if both hash values are different, it means that the password authentication has failed and the host terminates the attempt to recognize the portable terminal.

On the other hand, the coincidence of the first hash value and the second hash value means that the user's password preset in the portable terminal and the user's password input from the host are likely to match. Thus, the portable terminal identifies the operating environment of the host from the environment variables included in the received network connection request message. In detail, the portable terminal receives an environment variable from the host and extracts information on the operating environment of the host from the received environment variable. As described above, since the environment variable includes information on the system property of the host, it is possible to identify the operating environment of the host from this.

In operation 240, the portable terminal transmits a control application for controlling the portable terminal as a mobile storage device and an event message for installing the control application in response to the operation environment identified in operation 230.

To this end, the portable terminal preferably maps and stores at least one or more operating environments and corresponding control applications in advance. Since the operating environment of the host may be very diverse, the control application for controlling the mobile terminal needs to be installed with an application suitable for each operating environment. That is, the portable terminal stores control applications corresponding to a plurality of operating environments in a storage space in the portable terminal in advance, and then distributes a control application suitable for a host requesting a network connection. Therefore, the control application transmitted to the host is a control application selected using a mapping relationship to the operating environment identified in step 230 among at least one or more previously stored control applications.

In addition, such control applications can run on a virtual machine that is not platform dependent. That is, the portable terminal stores only binary installation files produced in a single format as an application, and can be distributed and installed in a host. Of course, in this case, it would be desirable to have a virtual machine pre-installed on the host that can run the binary installation file. For example, in an environment where a Java platform and a corresponding virtual machine are installed, the portable terminal only needs to store a single format installation file without storing a plurality of applications.

On the other hand, even if the mobile terminal selects a control application suitable for the host's operating environment and transmits it to the host, this is merely a download from the host's point of view. Therefore, in order to actively install the control application transmitted from the mobile terminal to the host, it is necessary to transmit an event message corresponding to the 'install command' to the host. This event message is a kind of trigger for performing a specific operation on the host's operating system. The host receiving the event message corresponding to the 'install command' is the target application (received control) specified by the 'install command'. Installs the application automatically).

If the control application is now installed, in step 250, a session is created between the mobile terminal and the host through the installed control application. As described above with reference to FIG. 1, it is preferable that the mobile terminal and the host form a secure channel between the mobile terminal and the host by exchanging a key for communication encryption through the session generated in step 250.

FIG. 3 is a flowchart illustrating a method of implementing a mobile storage device using a portable terminal according to an embodiment of the present invention with reference to the configuration of FIG. 2 as described above. Detailed description thereof will be omitted.

After receiving the random value from the mobile terminal in step 310, the host generates a hash value from the random value and the password input from the user. The hash value of step 310 refers to the second hash value described above with reference to FIG. 2, and is a value to be compared with the first hash value already generated and stored in the portable terminal for password authentication.

In step 320, the host transmits a network connection request including the hash value generated in step 310 and an environment variable indicating an operating environment of the host to the mobile terminal. As described above, since the environment variables may be extracted from internal data of the web browser, it is assumed in the present embodiment that the host accesses the mobile terminal through the web browser. Of course, some kind of web server must be running to allow such a connection in the mobile terminal. Therefore, the transmitting of the network connection request in step 320 may be performed through a web browser embedded in the host according to the HTTP communication protocol.

The mobile terminal then processes this network connection request to select the appropriate control application for the host.

In operation 330, the host receives a control message for controlling the mobile terminal as a removable storage device and an event message for installing the control application from the mobile terminal. Since the control application received by the host corresponds to the operating environment of the host included in the environment variable, the host installs the control application according to the received event message in step 340.

In step 350, a session is created between the mobile terminal and the host through the control application installed in step 340. In addition, the mobile terminal and the host may form a secure channel between the mobile terminal and the host by exchanging a key for communication encryption through the session created in operation 350.

According to the above-described embodiments of the present invention, an encrypted storage service can be used without adding expensive hardware, flexible utilization is possible under various operating systems and implementation environments of the host, and data availability and confidentiality can be greatly improved. .

FIG. 4 is a block diagram illustrating a portable storage device using a portable terminal according to an embodiment of the present invention from a hardware perspective, and includes a portable terminal 10, a host 20, and a wireless communication means 30. . The portable terminal 10 again includes a communication unit 11, a control unit 12, and a storage unit 13, and the host 20 includes a communication unit 21 and a control unit 22.

The communication unit 11 of the mobile terminal 10 and the communication unit 21 of the host 20 mean communication means capable of utilizing a wireless communication network, respectively. Typically, the communication unit 11 of the mobile terminal 10 may use various networks such as Wi-Fi, 3G mobile communication network, Bluetooth, etc., and the communication unit 21 of the host 20 may also be connected to any one of the corresponding communication means. Will correspond. Implementing such a wireless communication means (11, 21) in terms of hardware is beyond the essence of the present invention, a detailed description thereof will be omitted.

The controller 12 of the portable terminal 10 drives an operating system for controlling the portable terminal 10 and a specific application operating on the operating system. The specific application at this time will be an application on the portable terminal 10 side for implementing the portable terminal 10 as a removable storage device. Therefore, the control unit 12 receives the password from the user, generates the first hash value, stores it in advance, compares it with the second hash value received from the host 20, and compares the operating environment of the host 20 with an environment variable. And a series of operations such as creating a session between the mobile terminal 10 and the host 20 through a control application.

To this end, the controller 12 may be implemented using a processor capable of processing the above-described series of operations and a memory required to record data according to the above-described operations. Such a processor and a storage space may be appropriately selected by those skilled in the art in consideration of the utilization environment or operating environment of the technical field to which the present invention belongs. In addition, the controller 12 may include software code for controlling the above-described hardware and processing the above-described operation.

The storage unit 13 provides a storage space necessary for utilizing the portable terminal 10 as a mobile storage device. In addition, the storage unit 13 provides a separate space for storing the control application to be installed in the host 20. In this case, it is preferable that the control application is prepared in advance so as to cope with various operating environments of the host 20.

On the other hand, the control unit 22 of the host 20 also drives the operating system of the host 20 and various applications running on the operating system. Accordingly, the controller 20 generates a hash value from the random value received from the mobile terminal 10 and the password input from the user, and includes an environment variable representing the operating environment of the host 20 in the network connection request message. A control application received from the portable terminal 10 is installed according to the event message, and a series of operations such as creating a session between the portable terminal 10 and the host 20 are processed through the control application. Although only the current operating system is illustrated in FIG. 4, when the control application is distributed from the portable terminal 10, the controller 22 is loaded and operated.

To this end, the control unit 20 may be implemented by utilizing a processor capable of processing the above-described series of operations and a storage space required to record data according to the above-described operations. May include software code.

FIG. 5 is a view for explaining a method of installing a control application in a mobile storage device using a portable terminal according to an embodiment of the present invention. FIG. 5 is a view illustrating only a configuration required for description in the system structure of FIG. 4.

First, the portable terminal 10 and the host 20 establish an environment that can be connected to each other through the wireless communication means 30. After receiving the password from the user, the mobile terminal 10 generates a hash value by combining the first random value with a hash function and stores the hash value in advance.

Subsequently, the portable terminal 10 transmits the second random value to the host 20, and the host 20 generates a hash value by combining the second random value and the password input from the user. The host 20 then sends the second hash value and environment variable back to the portable terminal 10. Initially, the mobile terminal 10 can run a mobile web server to allow access from the host 20. Accordingly, the host 20 may access the web server of the mobile terminal 10 through the web browser embedded in the host 20 according to the HTTP communication standard.

Now, the mobile storage device application of the portable terminal 10 compares the first hash value with the second hash value and determines that the user authentication is successful when the two hash values match. On the other hand, the mobile terminal 10 identifies the operating environment of the host 20 from the received environment variable, and then selects a control application corresponding to it and distributes it to the host 20.

Of course, the mobile terminal 10 maps and stores at least one or more operating environments and corresponding control applications in advance. Accordingly, the mobile terminal 10 extracts information on the operating environment of the host 20 from the received environment variable, and selects the control application using a mapping relationship for the identified operating environment among at least one or more previously stored control applications. To the host 20.

At this time, an event message for actively installing the control application is also transmitted. The host 20 completes the control application preparation step by installing the control application distributed according to the event message.

FIG. 6 is a diagram illustrating a method of creating a session in a mobile storage device using a portable terminal according to an embodiment of the present invention. FIG. 6 is also a diagram illustrating only a configuration required for description in the system structure of FIG. 4.

As described above, the mobile terminal 10 generates a data encryption key (meaning a session key) from a password previously input from the user, and encrypts and stores the data in the mobile terminal 10 using the generated key. The stored data can be read and decoded. At this time, it is preferable that the data encryption key is deleted after resident in the memory of the portable terminal 10 for a predetermined time by setting an expiration time.

The portable terminal 10 and the host 20 create a secure channel by creating a session and exchanging keys for mutual data security.

The host 20 can now utilize the mobile terminal 10 as a removable storage device through a control application. Embodiments of the present invention for a removable storage service provide functions such as file list viewing, file transmission and reception, file deletion and file copying. At this time, if one device requests to perform the above-described command, the other device returns a response to the request. These requests and responses come in the form of encrypted communication data over already created sessions. Specific communication protocols for performing the respective commands are as follows.

7A to 7E are diagrams illustrating various communication protocols between a portable terminal and a host in a mobile storage device using a portable terminal according to an embodiment of the present invention. Each of the drawings is commonly denoted using the following symbols. It became. K represents the session secret key, E _K () represents the encryption with the session secret key K, FNAME represents the file name, SIZE represents the file size, DATE represents the date and time the file was created or modified, and TYPE Denotes the type of file, T denotes a time stamp that records the time at which the request or response was made, LIST denotes the form of a list of data, and STATE denotes the outcome of the request. That is, STATE has a value of success or failure.

7A illustrates a communication protocol relating to a method of viewing a file list. First, when the host 20 encrypts a path and a timestamp for data to be viewed, the file list is transmitted to the mobile terminal 10, the mobile terminal 10 responds to the request and the corresponding path from its storage unit. Encrypt and return file list information for. The response message illustrated in FIG. 7A includes the file's name, size, date created or modified, file type and timestamp.

7B illustrates a communication protocol relating to a method of transferring a file from the portable terminal 10 to the host 20. When the host 20 encrypts a message requesting a file to be received, along with the file size, file name, type, and timestamp, and transmits the message to the mobile terminal 10, the mobile terminal 10 results in response to the request. And the time stamp are encrypted and transmitted to the host 20. In this case, when the received 'STATE' information is 'success', it means that the mobile terminal 10 allows the transmission of the corresponding data to the host 20.

The host 20 now sends an acknowledgment message for this response to the mobile terminal 10 to inform the host 20 that it is ready to receive the file. Then, the mobile terminal 10 encrypts the data and transmits the data to the host 20.

In contrast to FIG. 7B, FIG. 7C illustrates a communication protocol relating to a method of transferring a file from the host 20 to the mobile terminal 10. When the host 20 encrypts a message that the host 20 will send the file along with the file's size, file's name, type, and time stamp, and sends it to the mobile terminal 10, the mobile terminal 10 sends the result and timestamp for the request. Encrypt the data and transmit it to the host 20.

Now, the host 20 encrypts the data according to the response and transmits the data to the mobile terminal 10. The mobile terminal 10 returns a confirmation message indicating that the data has been well received.

7D illustrates a communication protocol relating to a method of deleting a specific file stored in the mobile terminal 10. The host 20 encrypts the name and timestamp of the specific file to be deleted and transmits the encrypted name to the mobile terminal 10. Then, the portable terminal 10 performs a command to delete the file according to the request, and then returns the file list information updated by the deletion command to the host 20 to the host 20. 7D illustrates 'STATE' information indicating whether the delete command is normally performed.

7E illustrates a communication protocol related to a method of copying a specific file stored in the portable terminal 10 to a path designated by a user. The host 20 encrypts the name of the specific file to be copied, the current path, the path to be copied, and the timestamp together and transmits the encrypted file to the mobile terminal 10. Then, the portable terminal 10 performs a command for copying the file according to the request, and then returns the file list information updated by the copy command to the host 20 to the host 20. 7E illustrates 'STATE' information indicating whether the copy command is normally performed.

According to the embodiments of the present invention described above, it is possible to provide a portable storage device that can be more conveniently managed by implementing a portable storage device using a portable terminal that a user always carries, and encrypts data and encrypts communication. This makes it easy to protect your data from attackers.

Meanwhile, the present invention can be embodied as computer readable codes on a computer readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored.

Examples of the computer-readable recording medium include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device and the like, and also a carrier wave (for example, transmission via the Internet) . In addition, the computer-readable recording medium may be distributed over network-connected computer systems so that computer readable codes can be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the present invention can be easily deduced by programmers skilled in the art to which the present invention belongs.

The present invention has been described above with reference to various embodiments. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

10: mobile terminal 20: host
30: wireless communication means (Wi-Fi, 3G, Bluetooth)
11: communication unit of mobile terminal 12: control unit of mobile terminal
13:
21: communication unit of the host 22: control unit of the host

Claims (15)

In the method for implementing a removable storage device using a portable terminal,
Generating and storing, by the portable terminal, a first hash value based on a previously input password and a random value;
After the portable terminal transmits the random value to a host, a network connection including a password input by the user from the host, a second hash value based on the random value, and an environment variable representing an operating environment of the host Receiving a request;
Identifying an operating environment of the host from the received environment variable when the first hash value and the second hash value match;
Transmitting a control application for controlling the portable terminal as a removable storage device and an event message for installing the control application in response to the identified operating environment; And
Creating a session between the portable terminal and the host via the control application. The method of claim 1,
And wherein said control application is installed on said host by said event message. The method of claim 1,
Establishing a secure channel between the mobile terminal and the host by exchanging a key for communication encryption via the created session. The method of claim 1,
Storing, by the portable terminal, at least one operating environment and a corresponding control application in advance for mapping;
Identifying the operating environment of the host is performed by extracting information about the operating environment of the host from the received environment variable,
And a control application transmitted to the host is a control application selected from among at least one previously stored control application using a mapping relationship to the identified operating environment. The method of claim 1,
Generating, by the portable terminal, a data encryption key from the previously input password; And
Performing at least one operation of encrypting and storing data in the portable terminal using the generated key or reading and decrypting the stored data;
And the data encryption key is deleted after a predetermined time stays in the memory of the portable terminal. delete The method of claim 1,
Receiving, by the portable terminal, at least one request of file list reading, file transmission / reception, file deletion, and file copy from the host; And
The mobile terminal further comprises the step of transmitting a response corresponding to the received request to the host,
Receiving the request and transmitting the response are performed using encrypted communication data over the generated session. The method of claim 1,
And the portable terminal and the host are selectively connected using at least one or more wireless communication means of Wi-Fi, Bluetooth, or mobile communication network. In the method for implementing a removable storage device using a portable terminal,
Generating a hash value from the random value and a password input from the user after the host receives the random value from the mobile terminal;
Sending, by the host, a network connection request including the generated hash value and an environment variable representing an operating environment of the host to the mobile terminal;
Receiving a control application for controlling the portable terminal as a removable storage device and an event message for installing the control application from the portable terminal;
Installing, by the host, the control application according to the received event message; And
Creating a session between the portable terminal and the host via the control application. The method of claim 9,
Establishing a secure channel between the mobile terminal and the host by exchanging a key for communication encryption over the generated session. The method of claim 9,
And a control application received by the host corresponds to the operating environment included in the environment variable. The method of claim 9,
The transmitting of the network connection request may be performed through a web browser embedded in the host according to a hypertext transfer protocol (HTTP) communication protocol. The method of claim 9,
Transmitting, by the host, at least one request of file list viewing, file transmission / reception, file deletion, and file copying to the mobile terminal; And
The host further receiving a response corresponding to the transmitted request from the mobile terminal,
Transmitting the request and receiving the response are performed using encrypted communication data over the generated session. The method of claim 9,
And the portable terminal and the host are selectively connected using at least one or more wireless communication means of Wi-Fi, Bluetooth or mobile communication network. A computer-readable recording medium having recorded thereon a program for executing the method of any one of claims 1 to 5 and 7 to 14.

Images