TWI709044B - Storage apparatus managing method and storage apparatus managing system - Google Patents

Abstract

A storage device managing method, comprising: (a) receiving authentication information via a portable electronic device; (b) transmitting a confirming command to a control module, to confirm if the control module is in a ready state; and (c) controlling the portable electronic apparatus to be capable of accessing an encrypted data region of the storage apparatus, if the control module is in the ready state and the identifying information matches predetermined identifying information. The step (c) comprises : if the control module has received confirmation commands and is confirmed to be in the ready state at least twice, and the authentication information meets the predetermined authentication information, the portable electronic device is controlled to be capable of accessing the encrypted data region. The storage device managing program only generates the confirming command when the authentication information meets the predetermined authentication information.

Description

Storage device management method and storage device management system

The present invention relates to a storage device management method and a storage device management system, and particularly relates to a storage device management method and a storage device management system that can encrypt storage devices.

In recent years, portable electronic devices such as mobile phones, tablet computers, and wearable electronic devices have become more popular. However, portable electronic devices usually have the problem of small capacity. To increase the capacity of the portable electronic device, it is usually to increase the internal memory capacity of the portable electronic device itself, or to increase the capacity of the portable electronic device itself. The device is equipped with an external memory card. However, portable electronic devices with large internal memory capacity are usually quite expensive. Since the external memory card is relatively small in size, it is easy to lose it after being removed from the portable electronic device, and some portable electronic devices do not support the external memory card.

Therefore, flash disks dedicated to portable electronic devices are becoming more and more popular. This type of flash drive not only provides a larger memory capacity for portable electronic devices, but is also convenient for users to carry. However, the pen drive used by the portable device usually does not have a security function, so the data stored in the pen drive is at risk of being stolen.

Therefore, an object of the present invention is to provide a storage device management method to provide encryption protection for the storage device of a portable electronic device.

Another object of the present invention is to provide a storage device management system to provide encryption protection for the storage device of a portable electronic device.

An embodiment of the present invention discloses a storage device management method used on a storage device connected to a portable electronic device, including: (a) receiving authentication information with the portable electronic device; (b) enabling the portable electronic device A storage device management program in the portable electronic device sends at least one confirmation command to a control module, the confirmation command is used to confirm whether the control module is in a ready state, wherein the confirmation command is Test Unit Ready command; (c ) If the control module is confirmed to be in the ready state and the authentication information matches the predetermined authentication information, then the portable electronic device can be read or written to an encrypted data area of the storage device; and (d) If the authentication information does not conform to the predetermined authentication information, the portable electronic device cannot access the encrypted data area of the storage device. Wherein the step (c) includes: if the control module has received at least two confirmation commands within a predetermined period of time and has been confirmed to be in the ready state at least twice, and it is determined that the authentication information matches the predetermined authentication information, then The control module enables the portable electronic device to read or write to the encrypted data area; wherein the storage device management program generates the confirmation command to the control module when the authentication information matches the predetermined authentication information.

Another embodiment of the present invention discloses a storage device management system, including: a control module; wherein a portable electronic device or a storage device connected to the portable electronic device receives authentication information, in the portable electronic device A storage device management program of ”sends at least one confirmation command to the control module, the confirmation command is used to confirm whether the control module is in a ready state, wherein the confirmation command is Test Unit Ready command; if the control module is confirmed In the ready state, and the control module is notified that the authentication information conforms to the predetermined authentication information, the storage device management program controls the control module so that the portable electronic device can read or write to one of the storage devices Encrypted data area; if the authentication information does not match the predetermined authentication information, the storage device management program controls the control module so that the portable electronic device cannot access the encrypted data area of the storage device; wherein the storage device manages The program sends at least two confirmation commands to the control module, if the control module has received at least two confirmation commands within a predetermined period of time and has been confirmed to be in the ready state at least twice, and the control module is notified of the If the authentication information conforms to the predetermined authentication information, the storage device management program makes the portable electronic device readable or writeable to the encrypted data area; wherein the portable electronic device further includes an authentication data receiving device to receive the authentication Information, the storage device management program generates the confirmation command to the control module only when the authentication information matches the predetermined authentication information.

According to the foregoing embodiments, the storage device used by the portable electronic device can be properly protected to prevent the data in the storage device from being stolen, so that such storage device can have both convenience and security.

Hereinafter, a plurality of embodiments will be used to illustrate the technical content of the present invention. Please also note that the components in each embodiment can be implemented in hardware (for example, circuits), or in hardware plus software (for example, installing programs in a processor). In addition, in the following embodiments, a flash drive is taken as an example for description, but the storage device management system and storage device management method provided by the present invention can be applied to storage devices other than the flash drive.

Fig. 1 shows a block diagram of a storage device management system according to an embodiment of the invention. Please also note that in the embodiment of FIG. 1, the control module 107 is used as an example in the flash drive 111 for illustration, but the control module 107 can also be provided in the portable electronic device 100. As shown in FIG. 1, the portable electronic device 100 includes a storage device management program 105, and the flash drive 111 includes a control module 107. The storage device management program 105 and the control module 107 can be regarded as a storage device management system. The portable electronic device 100 may be a smart electronic device such as a mobile phone, a tablet computer, and a wearable device. In one embodiment, the portable electronic device 100 operates on a mobile operating system 103 (mobile operating system), such as Android, Tizen, webOS, iOS, etc., but it is not limited. In one embodiment, if the portable electronic device 100 runs on iOS, the flash drive 111 must support a specific file system such as FAT32 or exFAT. The storage device management program 105 can be executed by a main processor, which can be the main processor of the portable electronic device 100 itself, that is, in addition to executing the storage device management program 105, the main processor also uses To control other functions of the portable electronic device 100. In one embodiment, the storage device management program 105 is independent of the mobile operating system 103 and can be removed from the mobile operating system 103. As a result, the portable electronic device 100 cannot perform the operation of reading the encrypted data area 115, but other functions will not be affected. The storage device management program 105 may be various forms of programs. In one embodiment, the storage device management program 105 is an application (app, application).

In one embodiment, the data area of the flash drive 111 includes a public data area 113 and an encrypted data area 115. The public data area 113 does not need to be authenticated. As long as the flash drive 111 is connected to the portable electronic device 100, anyone can read the data in the public data area 113 through the portable electronic device 100, or save the data in the public data area 113. To read the encrypted data area 115, an authentication process is required, and the portable electronic device 100 can read or write to the encrypted data area 115 only after the authentication process is passed. In one embodiment, the user must input the authentication information CI to the authentication information receiving device 109 in the portable electronic device 100, and then the storage device management program 105 will determine whether the authentication information CI matches a predetermined authentication information, if the authentication information CI The information that meets the predetermined authentication will pass the authentication process (that is, the authentication is successful). On the contrary, if the authentication information CI does not conform to the predetermined authentication information, the authentication process is not passed (that is, authentication fails).

The certification information CI and the predetermined certification information may be various types of information. For example, the authentication information CI is a user account and password, and the predetermined authentication information is a predetermined user account and password, and the authentication information receiving device 109 is a user input interface, such as a touch screen. In another example, the authentication information CI is a fingerprint. Correspondingly, the predetermined authentication information is a predetermined fingerprint, and the authentication information receiving device 109 is a fingerprint recognition device. In addition, the authentication information CI can also be other information that can be used as identity authentication, such as voiceprint, iris information, facial information, etc. Since there are many types of such information, it will not be detailed here.

After the storage device management program 105 determines that the authentication information CI matches the predetermined authentication information, it sends a switching command SC to the control module 107 to make the control module 107 switch the flash drive 111 from the public data area 113 to the encrypted data area 115. In one embodiment, the storage device management program 105 sends a confirmation command CC to the control module 107. The confirmation command CC is used to confirm whether the control module 107 can read or write to the flash drive 111, that is, whether the control module 107 is in a ready state. Therefore, in one embodiment, the flash drive 111 must be switched only when the control module 107 has reported that it is ready and the control module 107 has received the switching command SC.

In one embodiment, the storage device management program 105 generates a confirmation command CC to the control module 107 after the user inputs the authentication information CI. In another embodiment, the storage device management program 105 generates the confirmation command CC to the control module 107 after confirming that the authentication information CI matches the specific authentication information.

In addition, in one embodiment, the storage device management program 105 sends the confirmation command CC to the control module 107 twice within a predetermined time period. That is, the storage device management program 105 can continuously send the confirmation command CC to the control module 107 twice, or send the second confirmation command CC to the control module 107 after a period of time after the first confirmation command CC is sent. In this embodiment, the control module 107 has to report that it is in the ready state twice in response to the two confirmation commands CC, and the control module 107 has received the switching command SC, before the portable The disc 111 performs a switching operation. Since the storage device management program 105 performs two confirmation actions, it is possible to prevent the control module 107 from misjudging and switching the flash drive 111.

The confirmation command CC can have different formats under different standards. For example, the confirmation command CC can be the TEST UNIT READY command in the SCSI (Small Computer System Interface) standard, but the present invention is not limited to only SCSI standard can be used.

The aforementioned “switching” means that the portable electronic device 100 can only read or write the public data area 113 originally, and “switch” it to the encrypted data area 115 that can be read or written. In one embodiment, address information is stored in the flash drive 111, which records those addresses as the public data area 113 and those addresses as the encrypted data area 115. For example, the address of the public data area 113 is LBA0-LBAN, and the encrypted data area 115 is LBAN+1-LBAM. The original file system in the flash drive 111 sets the readable or writable address to LBA0-LBAN, so the portable electronic device 100 can only read or write to the public data area 113 originally. When it wants to switch to the encrypted data area 115, the control module 107 will notify the file system in the flash drive 111 to set the readable or writable address to LBAN+1-LBAM, so the portable electronic device 100 The encrypted data area 115 can be read.

Figures 2-4 show an example of actual use of the storage device management system shown in Figure 1. However, please note that these examples are only to illustrate the possible presentation methods of portable electronic devices using the storage device management system provided by the present invention. The arrangement of components or interfaces, positions, sequence of actions, etc. are not intended to be used in the current version. The scope of the invention.

As shown in Figure 2, the portable electronic device 100 includes a display screen 201 (a touch screen in this example). When the pen drive 111 is connected to the portable electronic device 100, the portable electronic device 100 is preset Set to be readable or writable in the aforementioned public data area 113. Therefore, the portable electronic device 100 can display a data screen 203, and the data screen 203 will correspondingly display the public files PF_1 and PF_2 in the public data area 113. The user can read data in the public data area 113 or write data to the public data area 113 through the data screen 203. The user can click a switch icon (icon) 205 to switch the portable electronic device 100 to read the encrypted data area 205.

As mentioned above, the encrypted data area 205 can only be switched to through the authentication process. In the example in Figure 3, the authentication information is the user account and password. Therefore, as shown in FIG. 3, the portable electronic device 100 will display an authentication screen 301 for the user to enter a user account and password. At this time, the display screen 201 is the authentication information receiving device 109 in Figure 1, and the user account and password entered by the user are the authentication information CI in Figure 1. If the storage device management program (105 in Figure 1) of the portable electronic device 100 confirms that the user account and password match the predetermined user account and password, it will switch the flash drive 111 to the encrypted data area 115. As shown in FIG. 4, the display screen 201 displays a data screen 401, so that the user can read the encrypted files EF_1, EF_2... in the encrypted data area or can add data to the encrypted data area 115. If the authentication information is other types of information, the authentication screen 301 may only display a message to notify the user to input the authentication information through the authentication information receiving device on the portable electronic device 100, such as a camera, a fingerprint recognition device, etc.

In one embodiment, the flash drive 111 only has an encrypted data area and no public data area. In this case, after the flash drive 111 is connected to the portable electronic device 100, the authentication screen will be displayed as shown in FIG. 3, and the public data area will not be displayed as shown in FIG. Such changes or combinations should be included in the scope of the present invention.

In the foregoing embodiments, the authentication information is received through a portable electronic device, while in other embodiments, the authentication information may be received through a flash drive. Figure 5 shows a block diagram of a storage device management system according to another embodiment of the invention. Similarly, in the embodiment of FIG. 5, the control module 505 is used as an example in the flash drive 509, but the control module 505 can also be provided in the portable electronic device 500. As shown in FIG. 5, the portable electronic device 500 includes a storage device management program 503, and the flash drive 509 includes a control module 505. The storage device management program and the control module 505 can be regarded as a storage device management system. In one embodiment, the portable electronic device 500 operates on a mobile operating system 507 (mobile operating system), such as Android, Tizen, webOS, iOS, etc., but it is not limited. In one embodiment, if the portable electronic device 500 runs on iOS, the flash drive 509 must support a specific file system such as FAT32 or exFAT. The details of the storage device management program 503, control module 505, and mobile operating system 507 are roughly the same as the storage device management program 105, control module 107, and mobile operating system 103 in Figure 1. The same content will not be repeated here. .

The flash drive 509 further includes an authentication information determining device 511, and its data area includes a public data area 513 and an encrypted data area 515. In addition to receiving the authentication information CI, the authentication information judging device 511 is also used to judge whether the authentication information CI conforms to predetermined authentication information, and send the judgment result CR to the control module 505. If the judgment result CR is that the authentication information CI conforms to the predetermined authentication information, the control module 505 controls the flash drive 509 to switch from the public data area 513 to the encrypted data area 515. In one embodiment, the authentication information judging device 511 only has the function of receiving the authentication information CI, and transmits the received authentication information CI to the storage device management program 503, and the storage device management program 503 determines whether the authentication information CI meets the predetermined authentication If the authentication information CI matches the predetermined authentication information, the storage device management program 503 sends the switching command SC shown in Figure 1 to the control module 505, so that the control module 505 can switch the flash drive 509.

In the embodiment of FIG. 5, the authentication information CI and the predetermined authentication information can be various types of information. For example, the authentication information CI is a fingerprint, correspondingly, the predetermined authentication information is a predetermined fingerprint, and the authentication information determining device 511 is a fingerprint recognizer. In another example, the authentication information CI is a voiceprint, correspondingly, the predetermined authentication information is a predetermined voiceprint, and the authentication information determining device 511 is a voiceprint recognizer. In addition, the authentication information CI can also be other information that can be used as identity authentication, such as iris information. Since there are so many types of this kind of information, I will not elaborate on them one by one here.

In one embodiment, since the authentication information judging device 511 is located on the flash drive 509, the storage device management program 503 cannot know when the authentication information judging device 511 will start the authentication operation. For example, if the authentication information judging device 511 is a fingerprint recognition Device, when the finger is placed on the authentication information judging device 511, the authentication action will start. Therefore, the storage device management program 503 will continuously send the confirmation command CC to the control module 505. After confirming that the control module 505 is in the ready state and the judgment result CR is that the authentication information CI matches the predetermined authentication information, the flash drive 509 is controlled to switch. In one embodiment, the authentication information determining device 511 sends the authentication information CI to the storage device management program 503, and the storage device management program 503 determines whether the authentication information CI meets the predetermined authentication information. If the authentication information CI matches the predetermined authentication information, The storage device management program 503 transmits the switching command SC and the confirmation command CC in FIG. 1 to the control module 505 so that the control module 505 can switch the flash drive 509. In this embodiment, the authentication information determining device 511 can be replaced with an authentication information receiving device. In another embodiment, the authentication information judging device 511 sends the received authentication result CR to the storage device management program 503. If the authentication result CR shows that the authentication information CI conforms to the predetermined authentication information, the storage device management program 503 sends Figure 1 The switching command SC and the confirmation command CC in the control module 505 are sent to the control module 505, so that the control module 505 can switch the flash drive 509.

Figure 6 shows an example of actual application of the storage device management system shown in Figure 5. When the pen drive 509 is connected to the portable electronic device 600, the display screen 601 of the portable electronic device 600 will display a public data area as shown in Figure 2 (not shown in Figure 6). After the user is successfully authenticated through the authentication information identification device 511, the display screen 601 will display an encrypted data area as shown in Figure 4 (not shown in Figure 6).

In one embodiment, the flash drive 509 only has an encrypted data area and no public data area. In this case, after the flash drive 509 is connected to the portable electronic device 600, the public data area will not be displayed as shown in Figure 2. At this time, the storage device management program 503 will control the portable electronic device 500 as shown in Figure 6. Generally, a message such as "Please authenticate" is displayed on the screen 601. Such changes or combinations should be included in the scope of the present invention. In one embodiment, the flash drive 509 may further include an indication area 603 to notify the user of the success or failure of the authentication, or the authentication information judging device 511 itself cannot operate normally. For example, the indicator area 603 can pack at least one light source, and make the light source generate light in different states according to different states.

In the following examples, the present invention provides a further way of data protection. FIG. 7 shows a block diagram of a storage device management system according to another embodiment of the invention. Similarly, in the embodiment of FIG. 7, the control module 705 is in the pen drive 707 as an example for illustration, but the control module 705 can also be provided in the portable electronic device 700. As shown in FIG. 7, the portable electronic device 700 includes a storage device management program 703, and the pen drive 707 includes a control module 705. The storage device management program 703 calculates the number of authentication failures. For example, in the embodiment shown in FIG. 3, when the user account or password is entered incorrectly, the number of authentication failures is increased by one. In the embodiment of FIG. 5, the storage device management program 503 can also receive the judgment result CR and calculate the number of authentication failures. When the number of authentication failures is not less than (that is, greater than or equal to) a failure threshold, the storage device management program 703 will generate a delete command EC to the control module 705, and then the control module 705 will delete the data in the USB 707 .

In one embodiment, the deletion operation will only delete the stored data 711 written in the flash drive 707 by the user, but will not delete the system data 709 used to control the operation of the flash drive. In another embodiment, the storage data 711 will be deleted first, then the system data 709 will be deleted, and then all the data will be deleted. For example, even spare data will also be deleted.

In one embodiment, the delete action is a delete action in which deleted data can be restored. For example, the control module 705 only deletes the index data of the data. For example, when querying the index data, it will not determine that there is data in the original storage space, but the data still exists in the original location. In another embodiment, the deletion action is an irreversible deletion action. For example, the data is overwritten in the original storage space of the data to be deleted, so that the original storage data will be completely deleted. However, please note that these recoverable and non-recoverable delete actions are only for example, and are not intended to limit the present invention.

Figure 8 shows a flowchart of part of the operation of the embodiment shown in Figure 7, which includes the following steps:

Step 801

It is judged whether the authentication is successful, if yes, go to step 803, if not, go to step 805.

Step 803

Read the encrypted data area.

Step 805

Determine whether the number of authentication failures is greater than the critical number of failures? If yes, go to step 807, if otherwise, the number of authentication failures accumulates once, and then return to step 801 to wait for the next authentication procedure.

Step 807

Delete the data on the flash drive.

As mentioned above, in one embodiment, the deletion operation will only delete the stored data written in the flash drive by the user, but will not delete the system data used to control the operation of the flash drive. In another embodiment, the storage data will be deleted first, then the system data will be deleted, and then all the data will be deleted. In addition, in one embodiment, the delete action is a delete action in which deleted data can be restored.

Figures 9-10 show an example of actual use of the storage device management system shown in Figure 7. As shown in FIG. 9, when the portable electronic device 700 is connected to the portable electronic device 700 and the user authentication fails, the display screen 702 of the portable electronic device 700 will display a warning message. For example, the display screen 702 will display the number of authentication failures and inform the user that it will be deleted after a certain number of times. Those warning messages can be set through the aforementioned storage device management program. It is also possible not to display any message, and delete the operation directly after the number of authentication failures reaches the critical number of failures.

In the embodiment in FIG. 10, a procedure for stopping the delete action is provided, so that the user can avoid deleting the data in the flash drive due to misoperation or incorrect calculation of the number of authentication failures. The storage device management program will display a warning message as shown in Figure 10 and a stop code input interface 901 before starting the delete operation, allowing the user to stop the delete operation with a preset stop code. Whether to provide a stop procedure, what error message to display, and the setting of the stop code can be set through the aforementioned storage device management program.

FIG. 11 is a schematic diagram of a control interface of a pen drive according to an embodiment of the present invention, which can be used to implement the aforementioned embodiments. In one embodiment, the pen drive control interface shown in Figure 11 is a control interface operating under the Android system.

As shown in Figure 11, the icon 1101 is used to open the flash drive, and it can only read the data in the public data area without logging in to the account. The icon 1103 is used to obtain the hardware information of the flash drive, such as ID (Vendor ID, vendor identification code) and PID (Product ID, product identification code). Icon 1105 is used to turn off the interface for reading the flash drive. The icon 1107 is used to display or modify user information, such as name and so on. The icon 1109 is used to log in to the user account that can read the encrypted area of the flash drive. After it is activated, the interface shown in Figure 3 will be displayed. Icon 1111 is used to log out the user account that can read the encrypted area of the flash drive. Icon 1113 is used to modify the user account password. After execution, you can enter the existing password and the new password in the password areas 1119 and 1121 to modify. The icon 1115 is used to display a prompt to the user, so that the user can get assistance through the prompt area 1123 when they do not know how to operate. Icon 1117 can be used to delete all data in the pen drive,

As mentioned above, the storage device management system provided by the present invention can be applied to storage devices other than pen drives. Therefore, according to the foregoing embodiment, the storage device management method shown in Figure 12 can be obtained, which includes the following steps:

Step 1201

A portable electronic device (such as the embodiment in Figure 1) or a storage device (such as the embodiment in Figure 5) is used to receive the authentication information.

Step 1203

Make a storage device management program in the portable electronic device send at least one confirmation command (such as the confirmation command CC in Figure 1 and Figure 5) to a control module, and the confirmation command is used to confirm whether the control module is one Ready state.

Step 1205

If the control module is confirmed to be in the ready state and the authentication information matches the predetermined authentication information, an encrypted data area of the storage device can be read or written to by the portable electronic device.

Step 1207

If the authentication information does not match the predetermined authentication information, the portable electronic device cannot access the encrypted data area of the storage device.

Other detailed steps can be derived according to the foregoing embodiment, so they will not be repeated here.

According to the foregoing embodiments, the storage device used by the portable electronic device can be properly protected to prevent the data in the storage device from being stolen, so that such storage device can have both convenience and security. The foregoing descriptions are only preferred embodiments of the present invention, and all equivalent changes and modifications made in accordance with the scope of the patent application of the present invention shall fall within the scope of the present invention.

100, 500, 600, 700‧‧‧Portable electronic devices 105, 503, 703‧‧‧Storage Device Management Program 107, 505, 705‧‧‧Control module 103, 507‧‧‧Mobile operating system 109、511‧‧‧Authentication information receiving device 111, 509, 707‧‧‧USB 113, 513‧‧‧ Public Information Area 115、515‧‧‧Encrypted data area 201, 601, 702 display screen 203, 401‧‧‧Data screen 205‧‧‧Switch icon 301‧‧‧Authentication screen 603‧‧‧Instruction area 709‧‧‧System Information 711‧‧‧Save data 901‧‧‧Stop code input interface 1100‧‧‧USB Drive Control Interface 1101-1117‧‧‧icon 1119, 1121‧‧‧Password area 1123‧‧‧Reminder area PF_1, PF_2‧‧‧public file EF_1, EF_2‧‧‧Encrypted files

Fig. 1 shows a block diagram of a storage device management system according to an embodiment of the invention. Figures 2-4 show an example of actual use of the storage device management system shown in Figure 1. Figure 5 shows a block diagram of a storage device management system according to another embodiment of the invention. Figure 6 shows an example of actual application of the storage device management system shown in Figure 5. FIG. 7 shows a block diagram of a storage device management system according to another embodiment of the invention. Figure 8 shows a flowchart of some actions of the embodiment shown in Figure 7 Figures 9-10 show an example of actual use of the storage device management system shown in Figure 7. FIG. 11 is a schematic diagram of a control interface of a pen drive according to an embodiment of the invention. FIG. 12 shows a flowchart of a storage device management method according to an embodiment of the invention.

100‧‧‧Portable Electronic Device

103‧‧‧Mobile Operating System

105‧‧‧Storage Device Management Program

107‧‧‧Control Module

109‧‧‧Authentication information receiving device

111‧‧‧Flash Drive

113‧‧‧Public Information Area

115‧‧‧Encrypted data area

Claims (22)

A storage device management method, used on a storage device connected to a portable electronic device, includes: (a) Use the portable electronic device to receive authentication information; (b) Make a storage device management program in the portable electronic device send at least one confirmation command to a control module, the confirmation command is used to confirm whether the control module is in a ready state, wherein the confirmation command is Test Unit Ready command; (c) If the control module is confirmed to be in the ready state and the authentication information conforms to the predetermined authentication information, make the portable electronic device readable or writeable to an encrypted data area of the storage device; and (d) If the authentication information does not meet the predetermined authentication information, the portable electronic device cannot access the encrypted data area of the storage device; The step (c) includes: If the control module has received at least two of the confirmation commands within a predetermined period of time and has been confirmed to be in the ready state at least twice, and it is determined that the authentication information conforms to the predetermined authentication information, the control module enables the portable The electronic device can read or write the encrypted data area; The storage device management program generates the confirmation command to the control module only when the authentication information matches the predetermined authentication information. The storage device management method according to claim 1, wherein the portable electronic device uses a mobile operating system. The storage device management method according to claim 2, wherein the mobile operating system is iOS. The storage device management method according to claim 2, wherein the mobile operating system is Android, and the file system used by the storage device is FAT32 or exFAT. The storage device management method according to claim 2, wherein the storage device management program is independent of the mobile operating system. The storage device management method according to claim 1, wherein the storage device is a flash drive. The storage device management method according to claim 1, wherein the storage device management program is an application program. According to the storage device management method of claim 1, the storage device further includes a public data area, and the portable electronic device can read the public data area regardless of whether the authentication information conforms to the predetermined authentication information. The storage device management method according to claim 1, further comprising: Count the number of authentication failures in which the authentication information does not meet the predetermined authentication information; and If the number of authentication failures is not less than a number of failed authentications, a deletion action is performed to delete the stored data in the storage device. The storage device management method according to claim 9, wherein the storage data is deleted in a way that the data cannot be restored. The storage device management method described in claim 10 further includes: Before performing the deletion, it is determined whether to stop the deletion according to a stop code received by the portable electronic device. A storage device management system, including: A control module; A certification data receiving device in a portable electronic device is used to receive certification information, a storage device management program in the portable electronic device sends at least one confirmation command to the control module, and the confirmation command is used to confirm the control Whether the module is in a ready state, where the confirmation command is Test Unit Ready command; If the control module is confirmed to be in the ready state, and the control module is notified that the authentication information conforms to the predetermined authentication information, the storage device management program controls the control module to make the portable electronic device readable or accessible Write an encrypted data area of the storage device; If the authentication information does not conform to the predetermined authentication information, the storage device management program controls the control module so that the portable electronic device cannot access the encrypted data area of the storage device; The storage device management program sends at least two confirmation commands to the control module, if the control module has received at least two confirmation commands within a predetermined period of time and is confirmed to be in the ready state at least twice, and the control module When the module is notified that the authentication information conforms to the predetermined authentication information, the storage device management program makes the portable electronic device readable or writeable to the encrypted data area; The storage device management program generates the confirmation command to the control module only when the authentication information matches the predetermined authentication information. The storage device management system according to claim 12, wherein the portable electronic device uses a mobile operating system. The storage device management system according to claim 13, wherein the mobile operating system is iOS. The storage device management system according to claim 13, wherein the mobile operating system is Android, and the file system used by the storage device is FAT32 or exFAT. The storage device management system according to claim 13, wherein the storage device management program is independent of the mobile operating system. The storage device management system according to claim 12, wherein the storage device is a flash drive. The storage device management system according to claim 12, wherein the storage device management program is an application program. For the storage device management system described in claim 12, the storage device further includes a public data area, and the portable electronic device can read the public data area regardless of whether the authentication information conforms to the predetermined authentication information. The storage device management system according to claim 12, wherein the storage device management program counts the number of authentication failures in which the authentication information does not conform to the predetermined authentication information, and if the number of authentication failures is not less than a number of failed authentications, the control module Make the storage device perform a delete action to delete the stored data in the storage device. The storage device management system according to claim 20, wherein the storage data is deleted in a way that the data cannot be restored. The storage device management system according to claim 20, further comprising: Before performing the deletion, the storage device management program determines whether to stop the deletion according to a stop code.

Images