WO2012124849A1

WO2012124849A1 - Hard disk security system using cipher system

Info

Publication number: WO2012124849A1
Application number: PCT/KR2011/002040
Authority: WO
Inventors: 배정식
Original assignee: 주식회사 스카이디지탈
Priority date: 2011-03-11
Filing date: 2011-03-24
Publication date: 2012-09-20

Abstract

A hard disk security system, according to the present invention, includes a data storage unit(110) which is arranged on a hard disk and stores data, a key input unit(120) which is arranged on a hard disk and inputs a user password, a memory unit(130) which stores a user secret key that is inputted and set from the key input unit, an encryption and decryption module unit(150) which encrypts and stores data in the data storage unit(110) or decrypts the data which is encrypted and stored in the data storage unit(110) by using the user secret key stored in the memory unit(130) and a hard disk identification number, a data terminal unit(160) which sends generated data to the encryption and decryption module unit(150) or the data storage unit(110), or reads the decrypted data in the encryption and decryption module unit(150) or data stored in the data storage unit(110), and a control unit(170) allows the encryption and decryption module unit (150) to operate when a password is the same as the user secret key after comparing the user secret key stored in the memory unit with the password inputted from the key input unit.

Description

Hard disk security system using encryption method

The present invention relates to a hard disk security system using an encryption method. In particular, the present invention relates to a hard disk security system for encrypting data stored in a hard disk using a secret key input by a hard disk user through a key input unit mounted on the hard disk.

The most common mass storage device used in computers is the hard disk drive. Hard disk drives are general-purpose storage devices, so you can remove data from your computer and connect it to another computer so that others can access the stored data. In other words, there was a problem that is vulnerable to security. In particular, external hard disk drives are easy to remove and require a stronger security system.

In order to overcome this problem, there is a method of controlling access to the hard disk if the authentication process is not successful by adding an authentication process for the user. However, in such a case, when a hacking software is used to destroy the authentication method of the system or when the hard disk drum is physically mounted on another hard disk, others have access to data stored in the hard disk.

The hard disk security system using the encryption method according to the present invention aims to solve the following problems.

First, the secret key input by the user is used for the encryption method, and the data itself stored on the hard disk is encrypted and stored.

Second, it encrypts the data stored in the hard disk itself so that other computers cannot read the data normally.

Third, the user wants to set whether to use the encryption method in the hard disk security system, and whether the user should check the secret key when accessing the encrypted data.

Fourthly, a system that performs data input / output of encryption method is made into one external device, and a general internal hard disk is detached and used in this system.

The problem of the present invention is not limited to those mentioned above, and other problems not mentioned will be clearly understood by those skilled in the art from the following description.

Hard disk security system according to the present invention is a data storage unit for storing the data disposed on the hard disk, a key input unit arranged in the hard disk or hard disk housing for the user to enter a password, the user secret key is input from the key input unit is set Encrypted data stored in the data storage unit using one or more of a memory unit for storing the data, a user secret key stored in the memory unit, a password input from the key input unit, or a hard disk identification number, or the data stored encrypted by the data storage unit Encryption and decryption module unit for decrypting the data, sending the generated data to the encryption and decryption module unit or data storage unit, or a data terminal unit for reading data stored in the data storage unit or data decrypted by the encryption and decryption module unit, key input unit Password and decrypt using password entered in And a serial bus unit that connects one or more of the control unit and the data storage unit and the encryption and decryption module unit to control the module unit, the encryption and decryption module unit and the data terminal unit, or between the data storage unit and the data terminal unit.

Key input unit according to the invention is characterized in that the input means consisting of one or more of the keyboard, keypad or touch panel.

The key input unit according to the present invention is characterized in that it is arranged on any one of the outer surface of the hard disk or hard disk housing, or connected to the USB terminal disposed on any one of the outer surface of the hard disk or hard disk housing. .

Encryption and decryption module unit according to the present invention encryption key generation unit for generating a final encryption key using at least one of a user secret key, a password input from the key input unit or a hard disk identification number, a table for storing a random table to be used for encryption Data generated by the data terminal unit using a random table selector for selecting a random table to be used for encryption in the table storage unit based on the encryption key generated by the storage unit and the encryption key generator and a random table selected by the random table selector. And an encrypted data generation unit for converting the data into encrypted data.

The random table selecting unit according to the present invention is further characterized by further determining the order of the random table to be used in the encrypted data generating unit when a plurality of random tables are selected.

The order of the random table according to the present invention is characterized in that the encrypted data converted in the encrypted data generation unit is determined based on the physical sector (sector) position to be stored in the data storage unit.

When the plurality of random tables are selected by the random table selecting unit, the random table used by the encrypted data generating unit may be one or more final random tables generated by combining the selected plurality of random tables.

The encryption data generating unit according to the present invention generates the first conversion data by calculating the final encryption key generated by the encryption key generation unit and the data generated by the data terminal unit, the primary by using the random table selected by the random table selector And converting the converted data into encrypted data.

The hard disk security system according to the present invention further includes an encryption mode setting unit for setting whether to use an encryption mode.

When the encryption mode is set in the encryption mode setting unit, the encryption and decryption module unit encrypts and stores the data in the data storage unit using the user secret key and the hard disk identification number stored in the memory unit, or the data stored encrypted in the data storage unit. When the encryption mode is not set in the encryption mode setting unit, the encryption and decryption module unit does not operate, and the data terminal unit reads or writes data directly to the data storage unit.

The hard disk security system according to the present invention may further include a security mode setting unit configured to set whether or not to use a security mode in which the control unit compares a user secret key stored in the memory unit with a password input from the key input unit.

When the security mode is set in the security mode setting unit according to the present invention, the control unit compares the user secret key stored in the memory unit and the password input from the key input unit so that the password and decryption module unit operates only when the password is the same as the user secret key. It is characterized by controlling.

When the security mode is set in the security mode setting unit according to the present invention, the control unit transmits the password inputted from the key input unit to the encryption and decryption module to decrypt the data stored in the data storage unit using the password and the hard disk identification number. It is characterized by controlling.

The security mode setting unit according to the present invention is characterized by setting to use the security mode only at a reference time interval.

The data terminal unit according to the present invention is characterized in that it comprises a list of used hard disks for storing the identification number of the hard disk in which the data storage unit is disposed when the data storage unit is first connected to the hard disk security system.

When the control unit according to the present invention needs to store data in a data storage unit disposed on a hard disk not stored in the used hard disk list, the controller receives a user secret key from a user through a key input unit and stores the data in a memory unit. It is done.

The hard disk security system using the encryption method according to the present invention has the following effects.

First, since the data stored on the hard disk itself is encrypted, data access is impossible unless the user enters the secret key correctly.

Second, the user can set whether to use the encryption method, and encrypt only specific data and store it on the hard disk.

Third, when accessing data stored using an encryption method, the user may preset whether to go through a security procedure for verifying the secret key entered by the user and / or at which time interval to verify the secret key. Users can work smoothly.

The effects of the present invention are not limited to those mentioned above, and other effects that are not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a block diagram schematically illustrating a configuration of a hard disk security system according to an embodiment of the present invention.

2 is a perspective view illustrating a hard disk of a hard disk security system according to an embodiment of the present invention.

3 is a perspective view showing an example of connecting a separate device for inputting a password to the hard disk according to the present invention.

4 is a perspective view illustrating a hard disk housing and a hard disk according to an embodiment of the present invention.

5 is a flowchart illustrating an operation process according to an example of the hard disk security system of the present invention.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

The terms first, second, A, B, etc. may be used to describe various components, but the components are not limited by the terms, but merely for distinguishing one component from other components. Used only as For example, without departing from the scope of the present invention, the first component may be referred to as the second component, and similarly, the second component may also be referred to as the first component. The term and / or includes a combination of a plurality of related items or any item of a plurality of related items.

As used herein, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It is to be understood that the present invention means that there is a part or a combination thereof, and does not exclude the presence or addition possibility of one or more other features or numbers, step operation components, parts or combinations thereof.

Hereinafter, a hard disk security system 100 using an encryption method will be described in detail with reference to the accompanying drawings. The hard disk security system 100 according to the present invention is to prevent others except a specific user from accessing data stored in the hard disk. Password is entered in the hard disk so that only authorized users can access the data.

1 is a block diagram schematically illustrating a configuration of a hard disk security system 100 according to an embodiment of the present invention.

The hard disk security system 100 shown in FIG. 1 is disposed on the hard disk 10 and stored in the data storage unit 110, the hard disk 10, or the hard disk housing 20, which stores data. Encryption mode for setting whether to use the encryption mode in the key input unit 120 for inputting, the memory unit 130 for storing the user secret key input and set from the key input unit 120, the hard disk security system 100 According to whether the setting unit 140 and the encryption mode setting unit 140 set the encryption mode, data is stored in the data storage unit 110 using the user secret key stored in the memory unit 130 and the identification number of the hard disk 10. Encrypts and decrypts the data generated by the encryption and decryption module unit 150 and the encryption mode setting unit 140 to decrypt the data stored by being encrypted or stored in the data storage unit 110 and the encryption and Data terminal unit 160, memory unit to send to the decryption module unit 150 or data storage unit 110, or to read data decrypted by the encryption and decryption module unit 150 or data stored in the data storage unit 110 The control unit 170 and the data storage unit for controlling the password and decryption module 150 to operate when the password is the same as the user secret key by comparing the user secret key stored in the 130 and the password input from the key input unit 120 One or more of the connection between the 110 and the encryption and decryption module unit 150, between the encryption and decryption module unit 150 and the data terminal unit 160 or between the data storage unit 110 and the data terminal unit 160 It includes a serial bus unit 180.

The present invention basically the data storage unit 110, the key input unit 120, the memory unit 130, the encryption mode setting unit 140, the encryption and decryption module unit 150, Preferably, the controller 170 and the serial bus are arranged. The data storage unit 110 includes various media on which data can be stored, such as a magnetic drum or a flash memory for data storage disposed on the hard disk 10.

The data terminal unit 160 refers to a terminal that reads and writes data stored in the data storage unit 110 of the hard disk. Therefore, it includes various types of computer terminals such as general desktop PCs, notebook computers, and tablet PCs.

2 is a perspective view illustrating a hard disk 10 of a hard disk security system 100 according to an embodiment of the present invention. 2 illustrates a form in which the key input unit 120 is provided with a keypad-type input means outside the hard disk. The user inputs a key directly from the outside, but can be used on all hard disks, but it is more preferable to use the external hard disk.

In addition, a user may input a password by connecting a keyboard or a keypad to the hard disk 10. 3 is an example of connecting a separate device for inputting a password to the hard disk 10 according to the present invention, and shows a form in which a keyboard is connected.

Meanwhile, the key input unit 120 may use an input means that can be used by those skilled in the art, such as a keyboard, a keypad, or a touch panel.

As another embodiment of the present invention, the cryptographic security system of the present invention may be integrated into the housing 20 device. 4 is a perspective view showing the hard disk housing 20 and the hard disk according to this embodiment.

That is, the main configuration of the present invention is included in the hard disk housing 20, and inserts a general internal hard disk 10 or an external hard disk into the hard disk housing 20, to configure a hard disk security system according to the present invention will be.

The hard disk housing 20 includes a key input unit 120, a memory unit 130, an encryption and decryption module unit 150, a control unit 170, and the like required for the security system according to the present invention. When the general hard disk 10 is inserted into the hard disk housing 20, the hard disk security system 100 using the encryption method of the present invention is implemented.

This embodiment is cost effective in that the encryption method can be implemented in a general hard disk. The encrypted hard disk cannot normally read data from other computers, and normal data access is possible only from a computer in which the hard disk housing 20 of the present invention is installed.

As shown in FIG. 2 and FIG. 4, the

key input units

120 and 220 are preferably disposed on any one of an outer surface of the hard disk 10 or the hard disk housing 20. Or it is connected to the USB terminal disposed on any one of the outer surface of the hard disk 10 or the hard disk housing 20. 3 illustrates a case in which a USB terminal is provided on one side of the outer side of the hard disk.

The encryption and decryption module unit 150 encrypts the data generated by the data terminal unit 160 and stores the data in the data storage unit 110 or decrypts the data stored by being encrypted in the data storage unit 110. That is, a process of processing data in the encryption and decryption module unit 150 and an apparatus (or method) for controlling the data correspond to one of the core components of the present invention.

Meanwhile, data generated by the data terminal unit 160 is encrypted in real time and stored in the data storage unit 110. However, after storing a large amount of data in a short time or temporarily stored in the hard disk 10 according to the needs of the operating system or program, the temporarily stored data may be encrypted by the encryption and decryption module unit 150. Alternatively, the encryption and decryption module 150 temporarily stores the encrypted data while decrypting the encrypted data, and the data terminal unit 160 may use the decrypted data. The temporary storage area of the hard disk 10 that performs the above function is called a data temporary storage unit.

The temporary storage unit may be implemented in some areas of the data storage unit 110 of the hard disk 10 or in a separate data storage area. Furthermore, a separate memory device such as RAM or flash memory disposed on the hard disk 10 may be used.

The hard disk security system 100 of the present invention takes a method of encrypting the data itself generated by the data terminal unit 160 and storing the data itself in the data storage unit 110 of the hard disk. Therefore, when processing a large amount of data it is desirable to use a temporary data storage to reduce the load on the system. The data stored in the data temporary storage unit may be stored in the data storage unit 110 via the encryption and decryption module unit 150 in real time after storage, but may be encrypted when the memory or the like is available as needed for system resources. have. That is, encrypted data may be stored in the data storage unit 110 after a predetermined time has elapsed at the time when the data terminal unit 160 generates data.

The encryption and decryption module unit 150 may include an encryption key generation unit 151 for generating a final encryption key using a user secret key and an identification number of the hard disk 10, and a table storage unit 152 for storing a random table to be used for encryption. ), A random table selector 153 for selecting a random table to be used for encryption in the table storage unit 152 based on the encryption key generated by the encryption key generator 151, and a random selected by the random table selector 153. An encrypted data generation unit 154 converts the data generated by the data terminal unit 160 into encrypted data using the table.

In the present invention, a key value for encryption uses various values. The user secret key and the number for identifying the hard disk 10 are largely used. A user secret key is a specific key value that the first user wants to use for encryption. Then, the value input from the key input unit 120 is called a password to check whether a specific user is correct. Passwords and user secret keys are separate concepts. When the password and the user secret key match, the encryption and decryption module 150 operates normally to decrypt the data stored in the data storage unit 110. That is, when the password and the user secret key match, the user can normally access the data stored in the data storage unit 110.

Hereinafter, the encryption method of the present invention will be described, focusing on the core content, and the terms or methods that are understood by those skilled in the art will be omitted or briefly described.

The user secret key is a series of strings containing one or more of numbers, alphabets, Korean or special symbols. The value initially set by the user becomes the user private key, and when a special value for resetting the user private key is input, the new user private key may be reset.

Various information may be used for the number for identifying the hard disk. In general, it is preferable that different values are used for each hard disk, such as a product serial number which is a unique number for each hard disk produced or a device number which is a unique number assigned to each hard disk device during production.

The encryption key generation unit 151 generates a final encryption key using the user secret key and the hard disk identification number. As a method of generating the final encryption key, various methods may be used. You can simply combine the user secret key and the hard disk identification number, or you can calculate a specific value by entering the user secret key and the hard disk identification number as variables in a mathematical function. Various values that can be calculated by combining other user secret keys and hard disk identification codes can be used.

The final encryption key generated by the encryption key generation unit 151 selects a table to be used for data encryption. On the other hand, the table used for encryption is composed of a randomly generated value in the system, the generated random table is stored in the table storage unit 152. Although only one random table may be used, it is preferable that a plurality of random tables be generated. This is because the larger the number of random tables used for encryption, the more complicated encryption is performed.

The random table selecting unit 153 selects a random table to be used for encryption among the generated random tables. The criterion for selecting the random table is based on the final encryption key generated by the encryption key generator 151. In this case, various methods may be used for selecting a random table. One or more result values obtained by applying a specific equation for the final encryption key may be selected or simply a random operation may be selected by performing a modular operation. In addition, a random table can be selected using a data structure prepared in advance. For example, a specific address value may be calculated by hashing the final encryption key, and when a plurality of random tables are used, random tables may be selected through continuous hashing.

The random table selector 153 may additionally determine the order of the random tables to be used in the encrypted data generator 154 when a plurality of random tables are selected. Various methods may also be used in a manner in which the order of the random table is determined.

For example, when the random table is stored in the table storage unit 152 or in a storage device such as the hard disk 10, the random table may be selected based on the stored sector value.

Furthermore, in the system of the present invention, if the data generated by the data terminal unit 160 is stored in the data temporary storage unit without being encrypted in real time and then encrypted, the sector position where the data to be encrypted is stored in the hard disk 10 is encrypted. Based on the random table may be selected. In a simple method, the random table order may be determined in ascending or descending order based on the sector value.

In addition, the order of the random table may be selected based on a physical sector location to be stored in the data storage unit when the encrypted data converted by the encrypted data generation unit 154 is stored in the data storage unit.

Meanwhile, when a plurality of random tables are selected by the random table selector 153, the one or more final random tables generated by combining the selected plurality of random tables may be calculated and then used by the encrypted data generator 154.

In another encryption method, the final encryption key generated by the encryption key generation unit 151 and the data generated by the data terminal unit 160 are generated to generate primary converted data, and the random selected by the random table selection unit 153. The primary conversion data can be converted into encrypted data using a table. Such a method of going through two encryption conversion processes is merely an example according to the encryption method of the present invention, and various alternative methods that can be devised by those skilled in the art may be used.

In another embodiment, the hard disk security system 100 according to the present invention is a data storage unit 110 is disposed on the hard disk to store data, a key input unit disposed on the hard disk or hard disk housing to the user to enter a password 120, data storage using one or more of a memory unit 130 storing a user secret key input and set from the key input unit, a user secret key stored in the memory unit, a password input from the key input unit, or a hard disk identification number. Encryption and decryption module unit 150 for encrypting and storing data in the storage unit, or decrypting the data stored encrypted in the data storage unit, sending the generated data to the encryption and decryption module unit or data storage unit, or encryption and decryption module Input from the data terminal unit 160, the key input unit for reading the data decrypted by the unit or the data stored in the data storage unit One of the control unit 170 and the data storage unit and the encryption and decryption module unit, between the encryption and decryption module unit and the data terminal unit, or between the data storage unit and the data terminal unit to control the encryption and decryption module unit to operate using the password. It includes a serial bus unit for connecting the above.

In the configuration illustrated in FIG. 1, the encryption mode setting unit 140 is omitted. In such a hard disk security system, all data is encrypted and processed.

Of course, it may further include an encryption mode setting unit 140 for setting whether to use the encryption mode in the hard disk security system.

When the encryption mode is set in the encryption mode setting unit, the encryption and decryption module unit encrypts and stores the data in the data storage unit using the user secret key and the hard disk identification number stored in the memory unit, or the data stored encrypted in the data storage unit. If the encryption mode is not set in the encryption mode setting unit, the encryption and decryption module unit does not operate, and the data terminal unit reads or writes data directly to the data storage unit.

5 is a flowchart illustrating an operation process according to an example of the hard disk security system 100 of the present invention. 5 is only an example of the hard disk security system 100 of the present invention, and various embodiments having different configurations or different processes are possible. For example, a process of determining whether to use the encryption mode and / or a use of the security mode among the processes illustrated in FIG. 5 may correspond to an arbitrary process.

However, since the configuration for setting the encryption mode provides a more flexible device for storing data, it is desirable for the user to determine whether to set the encryption mode. Since storing the data in the data storage unit 110 by performing the encryption is a step of encryption rather than storing the data directly, if you handle data that does not necessarily require encryption, release the encryption mode and It will be more efficient to use. Alternatively, in the case of having the hard disk housing 20 device, it is efficient to distinguish data between a hard disk that requires security and a hard disk that does not require security.

Furthermore, the encrypted data and the unencrypted data may coexist in one hard disk data storage 110. However, an identifier for distinguishing the encrypted data from the encrypted data is additionally required. Partitions can be partitioned on a hard disk to store encrypted data and non-encrypted data separately.

The data terminal unit 160 may include a list of used hard disks for storing an identification number of a hard disk on which the data storage unit is disposed when the data storage unit is first connected to the hard disk security system. The used hard disk list may be stored in a specific area of another hard disk or a separate memory device included in the data terminal unit 160 in addition to the hard disk in which the encrypted data is stored. In FIG. 5, the 'used hard disk list' is shortened to 'used hard list'.

Referring to FIG. 5, a hard disk connected when a system is booted by connecting a new hard disk to a data terminal unit (computer) that is connected to a power source or supplying power to the data terminal unit 160 connected to the hard disk. It is determined whether the hard disk is in use (S10).

If the hard disk is not in use, it is registered in the list of used hard drives (S100). The hard disk list identifies each hard disk using its own serial. Of course, it is possible to manage the list in a variety of ways, Figure 5 shows that the generated list is managed in a first-in, first-out (FIFO) method.

In the case of using a plurality of hard disks, the encryption and decryption module unit generates different final encryption keys for each hard disk by using the aforementioned hard disk identification number, thereby providing a complementary system for each of the plurality of hard disks.

Furthermore, since the list of used hard disks is managed for each data terminal unit 160, when a hard disk used in a specific terminal is used in another terminal, it is recognized as a new hard disk and the user secret key is set again. After all, the list of hard disks used is a configuration that provides a stronger encryption method when the terminal is changed.

To this end, the controller 170 receives a user secret key from the user through the key input unit 120 and stores the data in the memory unit 130 when data must be stored on a hard disk not stored in the list of used hard disks. This process becomes the starting stage of the hard disk security system 100 of the present invention. In this case, the control unit controls the process of storing the user secret key in addition to the function of controlling the above-described encryption and decryption module unit 150.

When the hard disk is registered in the usage list, the user decides whether to use the encryption mode (S110). If you set the encryption mode to not use, it can be used like a normal hard disk (S300). If the encryption mode is set to use, the encryption and decryption module 150 of the present invention operates to operate as a secured hard disk (S230).

On the other hand, if it is determined that the hard disk in use in step S10, it is determined whether the security mode is in use (S200). In the security mode, the controller 170 compares the user secret key with a password input by the current user and controls the encryption and decryption module 150 to operate only when the password is the same as the user secret key. Alternatively, only the operation of decrypting the encrypted data during the entire operation of the encryption and decryption module unit 150 may be controlled.

If it is determined that the security mode is not used, the hard disk security system 100 operates in a normal encryption mode (S230) without going through a process of inputting a password (S210). When it is determined that the security mode is used, a password is input from the user (S210), and the password input by the user through the key input unit 120 is compared with the user secret key (S220). If the password entered by the user is not the same as the user secret key, repeat the step of continuing to enter the password.

Although not illustrated in FIG. 5, this process may be configured so that access to the hard disk fails without asking for a password anymore.

If the password entered in step S220 matches the user secret key, the hard disk security system 100 operates in a normal encryption mode.

The security mode described above controls the encryption and decryption module 150 to operate only when the password input by the user through the key input unit 120 and the user secret key stored in the memory unit 130 are the same. Therefore, when the password and the user secret key stored in the memory unit 130 are not the same, the encryption process may not be performed. Alternatively, when the password and the user secret key stored in the memory unit 130 are not the same, the entire system may be controlled to not operate.

As another embodiment, when the security mode is set, the user may pass the password inputted to the key input unit 120 to the encryption and decryption module unit 150 to decrypt the data. In this case, the password entered by the user is used only in the decryption operation. If the password entered by the user is not the same as the user secret key stored in the memory unit 130, since the encryption and decryption module unit 150 uses a completely different encryption method, the user can use the data terminal unit 160 No data is passed. As a result, the encrypted data stored in the data storage unit 110 cannot be used when a user incorrectly inputs a password.

As described above, the hard disk security system 100 of the present invention may determine in advance whether to use the encryption mode. The user determines whether to use the encryption mode through the encryption mode setting unit 140. The encryption mode setting unit 140 may be controlled by a program running on the computer while connected to the data terminal unit (computer), or may be set through a separate hardware device such as a keypad disposed outside the hard disk.

When the encryption mode is set in the encryption mode setting unit 140, the encryption and decryption module unit 150 transmits data to the data storage unit 110 using the user secret key and the hard disk identification number stored in the memory unit 130. If the encryption mode is not set in the encryption mode setting unit 140, the encryption operation is not performed. That is, whether encryption is set or not serves as an on / off switch for the encryption function among the functions of the encryption and decryption module unit 150.

The encryption and decryption module unit 150 decrypts the data stored in the data storage unit 110 regardless of whether the encryption mode setting unit 140 sets the encryption mode, and stores the data in the data storage unit 110 without encryption. No decryption operation is performed on the data. This is because even if the encryption mode setting is released, decryption is required for the data already encrypted and stored. Decryption is further related to the security mode setting.

The hard disk security system 100 further includes a security mode setting unit for setting whether the control unit 170 uses a security mode for comparing the user secret key stored in the memory unit 130 with the password inputted from the key input unit 120. It is preferable to include.

When the security mode is set in the security mode setting unit, the control unit 170 compares the user secret key stored in the memory unit 130 with the password inputted from the key input unit 120 to compare the password and the password only with the user secret key. The decryption module unit 150 is controlled to operate.

As described above, when the security mode is set in the security mode setting unit, the controller 170 may control only the decryption operation during the operation of the encryption and decryption module unit 150. The procedure for verifying a password has a greater meaning in preventing others from accessing data that has already been encrypted. Therefore, only the decryption operation can achieve the object of the invention.

The security mode setting unit may be implemented as a program on a computer like the encryption mode setting unit 140 or may be implemented as a separate hardware device disposed outside the hard disk.

When the security mode is set, various embodiments are possible when the user requests a process of inputting a password through the key input unit 120. For example, when a hard disk is newly connected to the data terminal unit 160 that is powered and operated, or when the power is supplied to the data terminal unit 160, the user may request a password input (S210). .

In another embodiment, the security mode setting unit may set the security mode to be used only at a reference time interval. In other words, the password can be entered at specific time intervals while the system is operating. Alternatively, the data terminal 160 may be in a standby mode because it is not used for a certain time, and then allow the user to enter a password at the moment when the user wants to use the system again.

The embodiments and drawings attached to this specification are merely to clearly show some of the technical ideas included in the present invention, and those skilled in the art can easily infer within the scope of the technical ideas included in the specification and drawings of the present invention. Modifications that can be made and specific embodiments will be apparent that all fall within the scope of the present invention.

Claims

A data storage unit disposed on the hard disk to store data;

A key input unit disposed on the hard disk or the hard disk housing to input a password by a user;

A memory unit for storing a user secret key input and set from the key input unit;

Encrypt and store data in the data storage unit using one or more of a user secret key stored in the memory unit, a password input from the key input unit, or a hard disk identification number, or decrypt data stored in the data storage unit by encrypting the data. An encryption and decryption module unit;

A data terminal unit for transmitting the generated data to the encryption and decryption module unit or the data storage unit, or reading data decrypted by the encryption and decryption module unit or data stored in the data storage unit;

A control unit which controls the encryption and decryption module unit to operate using the password inputted from the key input unit; And

And a serial bus unit for connecting one or more of the data storage unit and the encryption and decryption module unit, between the encryption and decryption module unit and the data terminal unit, or between the data storage unit and the data terminal unit. Hard disk security system using encryption method.
The method of claim 1,

The key input unit is a hard disk security system using an encryption method, characterized in that the input means consisting of one or more of the keyboard, keypad or touch panel.
The method according to claim 1 or 2,

The key input unit may be disposed on any one of the outer surface of the hard disk or the hard disk housing, or connected to a USB terminal disposed on any one of the outer surface of the hard disk or the hard disk housing. Hard disk security system using an encryption method.
The method of claim 1,

The encryption and decryption module unit

An encryption key generation unit generating a final encryption key using at least one of the user secret key, a password input from the key input unit, and a hard disk identification number;

A table storage unit for storing a random table to be used for encryption;

A random table selecting unit selecting a random table to be used for encryption in the table storage unit based on the encryption key generated by the encryption key generation unit; And

And an encryption data generation unit for converting data generated by the data terminal unit into encrypted data using the random table selected by the random table selecting unit.
The method of claim 4, wherein

And the random table selecting unit further determines an order of a random table to be used in the encrypted data generation unit when a plurality of random tables are selected.
The method of claim 5,

The order of the random table is a hard disk security system using an encryption method, characterized in that the encrypted data converted by the encrypted data generation unit is determined based on the physical sector (sector) position to be stored in the data storage unit.
The method of claim 4, wherein

When the plurality of random tables are selected by the random table selecting unit, the random table used by the encrypted data generating unit is one or more final random tables generated by combining the selected plurality of random tables. Disk security system.
The method of claim 4, wherein

The encrypted data generating unit generates the first conversion data by calculating the final encryption key generated by the encryption key generation unit and the data generated by the data terminal unit, and using the random table selected by the random table selecting unit. A hard disk security system using an encryption method, characterized by converting the difference conversion data into encrypted data.
The method of claim 1,

And an encryption mode setting unit configured to set whether to use an encryption mode in the hard disk security system.
The method of claim 9,

When the encryption mode is set in the encryption mode setting unit, the encryption and decryption module unit encrypts and stores data in the data storage unit using a user secret key and a hard disk identification number stored in the memory unit, or the data storage unit. Decrypt the data stored encrypted on

When the encryption mode is not set in the encryption mode setting unit, the encryption and decryption module unit does not operate, and the data terminal unit reads or writes data directly to the data storage unit. system.
The method of claim 1,

The hard disk security system

And a security mode setting unit configured to set whether the control unit uses a security mode for comparing a user secret key stored in the memory unit with a password inputted from the key input unit. .
The method of claim 11,

When the security mode is set in the security mode setting unit, the control unit compares the user secret key stored in the memory unit with the password input from the key input unit and the encryption and decryption module only when the password is the same as the user secret key. Hard disk security system using an encryption method, characterized in that the additional operation control.
The method of claim 11,

When the security mode is set in the security mode setting unit, the control unit transfers the password inputted from the key input unit to the encryption and decryption module to transfer the data stored in the data storage unit using the password and the hard disk identification number. Hard disk security system using an encryption method, characterized in that the control to decrypt.
The method of claim 11,

And the security mode setting unit sets the security mode to be used only at a reference time interval.
The method of claim 1,

The data terminal unit

And a used hard disk list for storing an identification number of a hard disk on which the data storage unit is disposed when the data storage unit is first connected to a hard disk security system.
The method of claim 15,

The controller may receive a user secret key from the user through the key input unit and store the data in the memory unit when the data is to be stored in a data storage unit disposed on a hard disk not stored in the used hard disk list. Hard disk security system using an encryption method.