TWI685770B - A storage system with chaotic system authentication - Google Patents

Abstract

A storage system with chaotic system certification, including smart mobile devices with Bluetooth and mobile applications, Bluetooth storage devices, and cloud authentication platforms. The storage device has a servant generator module and a synchronization controller; the mobile application has a main random number generator module. Logging in to the cloud authentication platform and locating the data of storage device to the mobile application; When the storage device is connected to the computer, the application verification is performed after the Bluetooth pairing is successful, so that the main random number generator module and the servant number generator module are synchronized by the synchronization controller for authentication, verification and authentication. After that, the two-way data reading of the storage device and the computer is performed.

Description

Storage system with authentication of chaotic system

This book is about a storage system with a security protection mechanism, especially a storage system that performs two-way data access with a computer after performing chaos system authentication.

With the development of storage technology, the capacity of storage devices used to store digital information is getting larger and larger, but the volume is getting smaller and smaller, the cost is also getting lower, and the speed of reading and writing is getting faster and faster. Storage technology has gradually been eliminated by memory, and even replaced the technology of optical disk storage. It has become the most important digital storage technology at present. With the high speed of the access interface used by the storage device and the characteristics of plug-and-play, people can quickly and conveniently Carry and copy all kinds of information.

Today, the use of storage devices allows users to enjoy high mobility, but the resulting security risks also increase. In the eyes of those who are interested, it is the best target to steal important secrets, especially when the memory products are more The smaller the size, the more important the issue of data confidentiality becomes when the pen drive is used in commercial applications. If the pen drive is lost or stolen, it will directly lead to the leakage of a large amount of personal information and confidential documents.

According to a survey by the security research institute Ponemon, nearly half of the companies have leaked the confidential or sensitive data of the team because of the stolen pen drive. , SanDisk, Super Talent, Taiteng Technology and other major manufacturers have launched some products with encryption function, the encryption method is not the same, some are encrypted by AES hardware, and there are high-end styles that are fingerprint recognition functions Attached to the flash drive, when considering the cost issue, most of the encrypted discs need to be installed on the computer with the corresponding software. After the password is set on the software, the file can be stored on the flash drive through the software This method seems to be safe and easy to operate, but there are many loopholes and inconveniences, and it is easy to be cracked by people who are interested.

The other type of hard encryption is more protective than software encryption, and can have a simpler interface and faster encryption and decryption speed. For example, in 2016, the world's largest independent memory module manufacturer-Kingston launched the USB encrypted flash drive DataTraveler ® 2000, using 256-bit AES hardware encryption technology, without the need to install additional software to protect the stored data, to The combination lock composed of real alphanumeric keys and hardware encryption technology help users to save sensitive and important data, but in fact, it will affect the popularization and sales due to the inconvenience of memory after multiple password changes and high unit price sales. The question of willingness to buy.

In view of the above problems, the purpose of this creation is to use an encryption mechanism that is different from the general market and makes it sufficiently competitive in price. The chaotic system encryption was developed and paired and authenticated with mobile devices for storage. Two-way data reading between the device and the computer.

In order to achieve the above purpose, the present invention creates a storage system with authentication of a chaotic system. The storage system includes a storage device that is authenticated by a smart mobile device and performs bidirectional data access with a computer. The storage system certified by the chaotic system includes: a smart mobile device, a storage device, and a cloud authentication platform.

The smart mobile device includes: a mobile device Bluetooth module, which is installed on the smart mobile device; and a mobile application, which is installed on the smart mobile device, and the mobile application includes a main random number generation Module and a verification module.

The storage device described above, after being authenticated by the smart mobile device, performs bidirectional data access with the computer, and includes: a housing with an opening and a receiving space, the opening being provided in the One end of the housing is connected to the accommodating space; a connecting module is provided at the opening, one end of the connecting module can be connected to the computer; a processor module is provided at the accommodating space; one A bidirectional analog conversion module is installed in the accommodation space and connected to the connection module; a flash memory module is installed in the accommodation space and connected to the bidirectional analog conversion module and the processor module; A storage device Bluetooth module is installed in the accommodating space and connected to the processor module; and a servo generator module and a synchronization controller are installed in the accommodating space and connected to the processor Module.

The cloud authentication platform mentioned above includes: a management webpage platform for at least one user to log in; and a user database connected to the management webpage platform and having a storage device database.

Among them, when using the storage device for the first time, first enter the cloud authentication platform to perform a home operation, so that the user can specify the verification module for verification; when the connection module is connected to the computer, the storage device Bluetooth module After the pairing with the mobile device Bluetooth module is successful, the master random number generator module and the slave random number generator module obtain the same random signal synchronously through the synchronization controller, and perform an encrypted transmission comparison authentication After passing the verification of the verification module and the encrypted transmission comparison, the bidirectional analog conversion module is turned on to perform bidirectional data reading between the flash memory module and the computer.

The above storage system with chaos system authentication, wherein the home operation is that the user logs in the user account and password from the management web platform to the user database, and enters a product key to query the storage device data Perform matchmaking after the library.

The above storage system with chaos system certification, wherein the verification module can perform a network verification or a networkless verification.

The above storage system with the authentication of the chaotic system, wherein the networkless authentication will download the user information to the authentication module in advance.

The above storage system with chaos system authentication, wherein the network authentication is that the authentication module obtains user information from the user database for authentication, the authentication is completed, and the product key is downloaded; when the mobile application and the storage device When synchronization is achieved, the product key is sent to the storage device to perform the encrypted transmission comparison authentication. After successful execution, the computer starts to access the storage device.

The aforementioned storage system with chaos system authentication, wherein the non-networked authentication is that the mobile application automatically downloads the product key and encrypts and saves it in the verification module. When the user chooses to unlock the storage device, the action The application program will perform synchronous calculations with the storage device, execute the encrypted transmission comparison authentication through the product key downloaded in advance, and after successful execution, the computer begins to access the storage device.

The above storage system with authentication of a chaotic system, wherein the synchronization controller converges the value generated by the main random number generator module and the value generated by the servant random number generator module, and the error of the two values converges To zero.

The above storage system with chaotic system authentication, wherein the encrypted transmission comparison authentication includes a nonlinear encryption and decryption function; the product key is encrypted from the main random number generator module via the nonlinear encryption and decryption function and transmitted After going to the random number generator module, the non-linear encryption and decryption function is used to decrypt and obtain a decryption password. If the decryption password is the same as the product key, the encrypted transmission comparison authentication is completed.

其中，

為一非線性加密函數、

為一非線性解密函數、p為固定密碼、

為解密密碼、

為該主亂數產生器模組產生之數值以及

為該僕亂數產生器模組產生之數值。 The above storage system with authentication of the chaotic system, wherein the equation of the nonlinear encryption and decryption function is as follows:

among them,

Is a nonlinear encryption function,

Is a nonlinear decryption function, p is a fixed password,

To decrypt the password,

The value generated by the main random number generator module and

It is the value generated by the servant number generator module.

The above storage system with chaos system authentication, wherein the cloud authentication platform can log in multiple storage devices and manage them with the mobile application.

For the existing technology, the effect of this creation is:

1. Using the processor module as the main structure, eliminating the previous complicated software installation procedures;

2. With the cloud authentication platform, the password can be changed when the password is forgotten, or the pen drive can be locked when the storage device is lost, reducing the inconvenience of needing to remember the password;

3. The storage system with chaos system certification can be realized with lower-priced hardware chips, which can reduce costs.

4. The use of chaos theory and synchronization technology combined with cloud data authentication has a high technical threshold and makes its security relatively improved.

5. Depending on the user, you can choose to have network authentication or under network conditions to choose no network authentication, which can improve security.

6. Through the registration of the cloud authentication platform, the user can use the same mobile application to unlock a plurality of storage devices, and the convenience of use is high.

This creation will be fully understood by the drawings in conjunction with the following description, so that those skilled in the art can complete it, but the implementation of this case is not limited by the following examples.

Please refer to FIG. 1, which is a system block diagram of a storage system with authentication of a chaotic system. As shown in FIG. 1, a storage system 1 with authentication of a chaotic system is created. The storage system includes a storage device 2 through a After the authentication of the smart mobile device 3, bidirectional data access with a computer 5 is performed. The storage system 1 with authentication of the chaotic system includes: a smart mobile device 3, a storage device 2, and a cloud authentication platform 4.

The smart mobile device 3 includes: a mobile device Bluetooth module 31 and a mobile application 32; the mobile application 32 includes a main random number generator module 321 and a verification module 322.

The storage device 2 performs two-way data access with the computer 5 after being authenticated by the smart mobile 3 device, and includes: a housing 21 with an opening 211 and a receiving space 212, the opening 211 is provided in One end of the housing 21 is connected to the accommodating space 212; a connection module 22 is provided at the position of the opening 211, one end of the connection module 22 can be connected to the computer 5; a processor module 23, Set in the accommodating space 212; a bidirectional analog conversion module 24, set in the accommodating space 212, connected to the connection module 22; a flash memory module 25, set in the accommodating space 212, connected In the two-way analog conversion module 24 and the processor module 23; a storage device Bluetooth module 26, disposed in the accommodating space 212, connected to the processor module 22; and a random number generator module The group 27 and a synchronous controller 28 are disposed in the accommodating space 212 and connected to the processor module 23.

The cloud authentication platform 4 includes: a management web platform 41 for at least one user 6 to log in; and a user database 42 connected to the management web platform 41, with a storage device database 421, the The management web platform 41 can register a plurality of the storage devices 2 and manage with the mobile application 32.

Among them, when using the storage device 2 for the first time, first enter the cloud authentication platform 4 to perform a home operation 7 so that the user 6 can designate the verification module 322 for verification; when the connection module 22 is connected to the computer 5 After the storage device Bluetooth module 26 and the mobile device Bluetooth module 31 are paired successfully, the main random number generator module 321 and the slave random number generator module 27 are synchronized by the synchronization controller 28 Obtain the same random signal to perform an encrypted transmission comparison authentication 9, after passing the encrypted transmission comparison authentication 9 and the verification module 322, the bidirectional analog conversion module 24 is turned on to perform the flash memory module 25 Two-way data reading with the computer 5.

Please refer to FIG. 2, the user 6 needs to perform the home operation 7 when using the storage device 2 for the first time. First, the user 6 enters the management web platform 41 to log in the user account and password to complete the registration; second, log in The management web platform 41 enters a product key 92 to query the storage device database 421, and the user database 42 matches the corresponding registration data of the storage device 2 and the user 6; finally, the user 6 You can log in through the mobile application 32 and verify the account through the network to the user database 42 in the server. After the verification is completed, the product key 92 is encrypted and returned to the verification module 322 for storage , The login is completed, and the user can select the verification module 322 to perform a network verification 81 or a networkless verification 82 in a networkless environment.

The aforementioned encrypted transmission comparison authentication 9 includes a non-linear encryption and decryption function 91; the product key 92 is encrypted from the main random number generator module 321 via the non-linear encryption and decryption function 91 and transmitted to the servant number The generator module 27 then decrypts with the nonlinear encryption/decryption function 91 and obtains a decryption password 93, and the decryption password 93 is the same as the product key 92 to complete the encrypted transmission comparison authentication 9. The equation of the nonlinear encryption and decryption function 91 is as follows:

其中，

為一非線性加密函數、

為一非線性解密函數、p為產品金鑰、

為解密密碼、

為該主亂數產生器模組 321 產生之數值以及

為該僕亂數產生器模組 27 產生之數值。

among them,

Is a nonlinear encryption function,

Is a nonlinear decryption function, p is the product key,

To decrypt the password,

The value generated by the main random number generator module 321 and

It is the value generated by the servant number generator module 27.

Please refer to FIG. 3, a flowchart of selecting the network authentication 81 for the authentication module 322. After the user 6 successfully logs in to the mobile application 32, the authentication module 322 will automatically load the existing user 6 For storage device 2 information, just select the storage device 2 you want to open through the mobile application 32 and press unlock, the authentication module 322 will be connected to the user database 42 in the background to obtain user information for local and Network verification. If the verification is successful, the product key 92 of the storage device 2 will be downloaded. After the main random number generator module 321 and the servant random number generator module 27 are synchronized, the product key 92 will be chaotic. The method code is sent to the storage device 2 to perform the encrypted transmission comparison authentication 9. If the execution is successful, the two-way data transmission between the storage device 2 and the computer 5 will be opened. If it fails, no action will be taken to protect the data security.

Please refer to FIG. 4, a flow chart of selecting the non-networked authentication 82 for the authentication module 322. When the home operation 7 is completed, the mobile application 32 will automatically download the product key 92 of the storage device 2 for encryption Stored in the verification module 322, when the user 6 selects the storage device 2 to be unlocked, the main random number generator module 321 and the servant random number generator module 27 are synchronized and transmitted in advance through chaotic encryption After downloading the product key 92, the encrypted transmission comparison authentication 9 is executed. If successful, the two-way data transmission between the storage device 2 and the computer 5 will be opened, and no action will be performed if it fails.

Although the user 6 can choose whether or not to perform the network authentication 81, if this function is turned off, the user 6 cannot prevent the data from being stolen by changing the password through the webpage when the mobile phone or the storage device 2 is lost. Therefore, when the network authentication 81 is turned off, the mobile application 32 will issue a prompt to inform the user. If there is no special demand, no network signal, etc., do not turn off this function. However, user 6 can also use this product to use this product at work sites with poor reception, such as no network, through this non-network authentication 82, which also provides a wider use of this work.

Please refer to FIG. 5, for which the state response of the chaotic system presents a random random number diagram. In order to establish the storage device 2, the random number generator must first be designed, using the chaotic system Tinkerbell as the random number generator, chaos The original system is as follows:

在模擬運算呈現之模型，其響應呈獻豐富變化的隨機特性，可以提供更多豐富的隨機亂數，在使用上，本專利使用之系統不限於此型式之混沌系統。 set up

In the model presented by the simulation operation, its response presents rich and varied random characteristics, which can provide more abundant random random numbers. In use, the system used by this patent is not limited to this type of chaotic system.

該僕亂數產生器：

其中 u(k) 是待設計之該同步控制器 28 。 首先設同步誤差：

此時可以得到

令同步控制器 28 如下：

代入可得

， 若選擇

使

，則可知

The synchronization controller 28 converges the value generated by the main random number generator module 321 and the value generated by the servant random number generator module 27 to zero, in the following manner: Main random number generator:

The random number generator:

Where u(k) is the synchronous controller 28 to be designed. First set the synchronization error:

You can get

Let the synchronous controller 28 be as follows:

Substitution available

, If you choose

Make

, You know

，則

，因為

, 所以

而當同步誤差均收斂到 0 時，即表示該主亂數產生器模組 321 與僕亂數產生器模組 27 可以同步，其結果如圖 6。 when

,then

,because

, and so

When the synchronization errors all converge to 0, it means that the main random number generator module 321 and the servant random number generator module 27 can be synchronized. The result is shown in FIG. 6.

In the above, the synchronous controller 28 is dynamically calculated according to the error, and the result is shown in FIG. 7.

In addition, the singular attractor graph of the main random number generator module 321 and the servant random number generator module 27 are synchronized after synchronization, and the singular attractor graph of the main random number generator module 321 is shown in the figure 8A; the strange attractor diagram of the servant number generator module 27 is shown in FIG. 8B.

As can be seen from the above, after the servant random number generator module 27 is added to the synchronization controller 28, after a period of time, the main random number generator module 321 and the servant random number generator module 27 gradually Synchronized.

In summary, the creation of a storage system 1 with chaos system authentication, using chaos theory and synchronization technology combined with cloud data authentication, has a high technical threshold, and also makes its security relatively improved; you can choose to have network authentication according to the user 6 81 or select no network verification 82 under network conditions to improve security; through the registration of the cloud authentication platform 4, the user 6 can use the same mobile application 32 to unlock multiple storage devices 2, easy to use Degree is high.

The above are only preferred embodiments of the present invention and are not intended to limit the scope of implementation of the present invention. Without departing from the spirit and essence of the present invention, those skilled in the art can make various corresponding ones according to the present invention Changes and modifications, but these corresponding changes and modifications shall fall within the scope of protection of the claims appended to the present invention.

1‧‧‧ Storage system with Chaos system certification 2‧‧‧Storage device 21‧‧‧Housing 211‧‧‧ opening 212‧‧‧accommodation space 22‧‧‧Connect module 23‧‧‧ processor module 24‧‧‧Two-way analog conversion module 25‧‧‧Flash memory module 26‧‧‧storage Bluetooth module 27‧‧‧ Servant number generator module 28‧‧‧ Synchronous controller 3‧‧‧smart mobile device 31‧‧‧Mobile Bluetooth Module 32‧‧‧Mobile application 321‧‧‧ Main random number generator module 322‧‧‧Verification module 4‧‧‧ Cloud certification platform 41‧‧‧Manage web platform 42‧‧‧User database 421‧‧‧Storage device database 5‧‧‧ Computer 6‧‧‧User 7‧‧‧ Home operation 81‧‧‧Network verification 82‧‧‧No network verification 9‧‧‧Encrypted transmission comparison authentication 91‧‧‧Non-linear encryption and decryption function 92‧‧‧Product key 93‧‧‧ Decrypt password

Figure 1 is a system block diagram of the creation of a storage system with chaos system certification; Figure 2 is a flow chart of the use of creating a storage system with chaos system certification; Figure 3 is a tool for creating a storage system with chaos system certification Flowchart of network verification; Figure 4 is a flow chart of non-network verification for creating a storage system with chaotic system certification; Figure 5 is a random random number diagram of the state response class of a chaotic system for creating a storage system with chaotic system certification; Figure 6 The dynamic response diagram of the chaotic system with synchronization controller for the creation of the storage system with the certification of the chaotic system; Figure 7 is the dynamic response diagram of the synchronization error of the storage system with the certification of the certification for the chaotic system; The singular attractor graph of the main random number generator module after synchronization of the storage system; FIG. 8B is the singular attractor graph of the synchronized servant random number generator module after creating the storage system with chaos system authentication.

1‧‧‧ Storage system with Chaos system certification

2‧‧‧Storage device

21‧‧‧Housing

211‧‧‧ opening

212‧‧‧accommodation space

22‧‧‧Connect module

23‧‧‧ processor module

24‧‧‧Two-way analog conversion module

25‧‧‧Flash memory module

26‧‧‧storage Bluetooth module

27‧‧‧ Servant number generator module

28‧‧‧ Synchronous controller

3‧‧‧smart mobile device

31‧‧‧Mobile Bluetooth Module

32‧‧‧Mobile application

321‧‧‧ Main random number generator module

322‧‧‧Verification module

4‧‧‧ Cloud certification platform

41‧‧‧Manage web platform

42‧‧‧User database

421‧‧‧Storage device database

5‧‧‧ Computer

9‧‧‧Encrypted transmission comparison authentication

91‧‧‧Non-linear encryption and decryption function

92‧‧‧Product key

93‧‧‧ Decrypt password

Claims (8)

A storage system with authentication of a chaotic system. The storage system includes a storage device that is authenticated by a smart mobile device to perform bidirectional data access with a computer. The storage system with authentication of a chaotic system includes : A smart mobile device, including: a mobile device Bluetooth module, installed on the smart mobile device; and a mobile application, installed on the smart mobile device, the mobile application includes a main random number generator A module and a verification module; a storage device, which is authenticated by the smart mobile device and performs bidirectional data access with the computer, including: a housing with an opening and a receiving space, The opening is provided at one end of the housing and connected to the accommodating space; a connection module is provided at the position of the opening, one end of the connection module can be connected to the computer; and a processor module is provided at the Accommodating space; a bidirectional analog conversion module, installed in the accommodating space, connected to the connection module; a flash memory module, installed in the accommodating space, connected to the bidirectional analog conversion module and the A processor module; a storage device Bluetooth module, which is installed in the accommodating space and connected to the processor module; and a random number generator module and a synchronization controller, which are installed in the accommodating space, Connected to the processor module; and a cloud authentication platform, including: a management web platform for at least one user to log in; and a user database connected to the management web platform and having a storage device database; Among them, when using the storage device for the first time, first enter the cloud authentication platform to perform one for the user to log in the user account and password from the management web platform to the user database, and enter a product key to query the storage device After the database, the home operation of matchmaking is performed, so that the user can designate the verification module for verification; when the connection module is connected to the computer, the storage device Bluetooth module is paired with the mobile device Bluetooth module After success, the main random number generator module and the servant random number generator module obtain the same random signal synchronously by the synchronization controller, perform an encrypted transmission comparison authentication, and pass the verification module and the encrypted transmission After the comparison and authentication, the bidirectional analog conversion module is turned on to perform bidirectional data reading between the flash memory module and the computer. The storage system with chaos system certification as described in item 1 of the patent application scope, wherein the verification module can perform a network verification or a networkless verification. The storage system with chaos system authentication as described in item 2 of the patent application scope, wherein the network authentication is that the authentication module obtains user information from the user database for authentication, the authentication is completed, and the product key is downloaded; The mobile application and the storage device are synchronized, the product key is sent to the storage device to perform the encrypted transmission comparison authentication, and the computer starts to access the storage device after successful execution. The storage system with chaos system certification as described in item 2 of the patent application scope, wherein the non-networked certification is that the mobile application automatically downloads the product key and encrypts and saves it in the verification module when the user selects When the storage device is unlocked, the mobile application will perform synchronous calculations with the storage device, execute the encrypted transmission comparison authentication through the product key downloaded in advance, and after successful execution, the computer begins to access the storage device. The storage system with chaos system authentication as described in item 1 of the patent scope, wherein the synchronization controller generates the value generated by the main random number generator module and the value generated by the servant random number generator module , The error between the two values converges to zero. The storage system with chaotic system authentication as described in item 1 of the patent scope, wherein the encrypted transmission comparison authentication includes a nonlinear encryption and decryption function; the product key is passed from the main random number generator module through the The linear encryption and decryption function is encrypted, and after being transmitted to the servant generator module, the nonlinear encryption and decryption function is used to decrypt and obtain a decryption password. Comparing the decryption password with the product key is the encrypted transmission comparison. Certification. The storage system with authentication of chaotic system as described in item 6 of the patent application scope, wherein the equation of the nonlinear encryption and decryption function is as follows:

Among them, E(x,p,t) is a nonlinear encryption function, D(

, p, t) is a nonlinear decryption function, p is the product key,

To decrypt the password, x _i , i=1,2 is the value generated by the main random number generator module and

, I=1,2 is the value generated by the servant number generator module. The storage system with chaos system authentication as described in item 1 of the patent application scope, wherein the cloud authentication platform can register a plurality of the storage devices and manage them with the mobile application.

Images