CN101350034B - Mobile memory apparatus and method for visiting file - Google Patents

Mobile memory apparatus and method for visiting file Download PDF

Info

Publication number
CN101350034B
CN101350034B CN2008102221770A CN200810222177A CN101350034B CN 101350034 B CN101350034 B CN 101350034B CN 2008102221770 A CN2008102221770 A CN 2008102221770A CN 200810222177 A CN200810222177 A CN 200810222177A CN 101350034 B CN101350034 B CN 101350034B
Authority
CN
China
Prior art keywords
file
management module
user
protection device
device management
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN2008102221770A
Other languages
Chinese (zh)
Other versions
CN101350034A (en
Inventor
岳维松
王宗茹
纪君峰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Petevio Institute Of Technology Co ltd
Original Assignee
Potevio Institute of Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Potevio Institute of Technology Co Ltd filed Critical Potevio Institute of Technology Co Ltd
Priority to CN2008102221770A priority Critical patent/CN101350034B/en
Publication of CN101350034A publication Critical patent/CN101350034A/en
Application granted granted Critical
Publication of CN101350034B publication Critical patent/CN101350034B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Storage Device Security (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

The invention provides a movable storage device and a method for visiting files, wherein the movable storage device comprises a file control mapper which is used to receive a request that a user visits file maps, to search a file protector which is corresponding to a file, to send a command which starts the file protector to an equipment management module, and is also used to control application programs to visit the file which is corresponding to the file maps, the equipment management module which is used to start the file protector according to a start command, and the file protector which is used to monitor the application programs of visiting files to guarantee the safety of the file visiting process, wherein the file protector operates before a corresponding file, and the file maps are used to preserve the access attribute information of the corresponding file. The invention can improve the safety of the file in the visited process.

Description

The method of a kind of movable storage device and file access
Technical field
The present invention relates to the mobile storage technical field, the method for particularly a kind of movable storage device and file access.
Background technology
Present movable storage device has been widely used in the middle of people's the live and work like flash disk etc.Be different from traditional magnetic disk media, have as the movable storage device of storage medium with electronic chip that volume is little, in light weight, the control flexible characteristic.Movable storage device generally comprises the two large divisions; Be control module and storage unit; When movable storage device and main frame carried out data interaction, control module and main frame were saved in movable storage device or reading of data from movable storage device with data then through the interface swap data.
Data have two kinds of organizational forms in movable storage device; A kind of is the form relevant with operating system; As support the FAT/FAT32 file layout of Windows system and the file layout of supporting linux system, this form has generally formed standard, can share between the different equipment; Second kind of form is and the concrete relevant privately owned form of application that because the standard of lack of uniform, data can not be shared between different application.
Usually, the data in the movable storage device write through operating system, for the data that write in the movable storage device, when opening through certain operating system, also are to present to the user with the form of file or folder.It is thus clear that during data in the application access movable storage device in the operating system, operating system can be transmitted data pellucidly between application program and movable storage device.
But; Owing to objectively need; The file of some need to be keep secret is edited under security context except meeting; Sometimes also can under non-safe environment, edit, because operating system is transmitted file the danger that so just exists file content to be leaked in the editing process between application program and movable storage device.Therefore, the application safety of raising file becomes urgent day by day requirement at present.
In the prior art,, write in the process of movable storage device, file is encrypted through the mode of hardware or software at file in order to improve safety of files; When reading file, decipher again.But present this scheme can only guarantee the security of file in storing process, and in access process, file is easily by malicious modification or illegally steal, and safety of files can't be protected,
Summary of the invention
In view of this, the invention provides a kind of flash memory device, can improve file by the security in the access process.
The present invention also provides a kind of method of file access, can improve file by the security in the access process.
Technical scheme of the present invention is achieved in that
The present invention provides a kind of movable storage device, comprises control module and storage unit, it is characterized in that,
Said control module is provided with the document control mapper; Said document control mapper is used to receive the request of user capture file map; The operation file reflection; Locating file corresponding file protector sends the order that starts said file protection device to device management module, and controlling application program is visited said file map corresponding file;
Said storage unit comprises general area and hidden area;
Said general area stores the visible said file map to the user; Said file map has the filename identical with respective file and extension name, and only includes the access attribute information of respective file;
Preserve the sightless said file of user, said file protection device and said device management module said hidden area, and the said file of preserving in the said hidden area, said file protection device and said device management module are controlled visit through special purpose interface and by said control module; Wherein, said file protection device is used to monitor the application program of access file, guarantees the security of file access process; Said file protection device moves prior to respective file; Said device management module is used for starting said file protection device according to said startup command.
The present invention also provides a kind of method of file access, comprising:
With storage unit be divided into storage to the user visible and have the filename identical and extension name with respective file, and general area and the storage of file map that only include respective file access attribute information to the sightless said file of user, file protection device, reach the hidden area of device management module;
The document control mapper receives the request of user capture file map, and the operation file reflection, searches said file corresponding file protector, sends the order that starts said file protection device to device management module;
Device management module starts the application program that said file protection device is monitored access file according to said startup command, guarantees the security of file access process;
Document control mapper controlling application program is visited the corresponding said file of said file map.
It is thus clear that; The movable storage device that the present invention proposes and the method for file access; In movable storage device, preserve file, file protection device and file map, and document control mapper and device management module are set in movable storage device, be used to coordinate and manage this three kinds of entities; Because having only file map is visible to the user; Can only operate to the corresponding file reflection during user capture file; And user's operation file reflection is understood at first startup file protector; Through the application program of file protection device monitoring access file, thus the security of assurance file access process.
Description of drawings
Fig. 1 is the mutual relationship synoptic diagram of file of the present invention, file protection device and file map;
Fig. 2 is that file of the present invention, file protection device and file map are through the interactional synoptic diagram of document control mapper;
Fig. 3 is the method flow diagram of embodiment of the invention access file.
Embodiment
For making the object of the invention, technical scheme and advantage clearer, below with reference to the accompanying drawing embodiment that develops simultaneously, to further explain of the present invention.
The present invention proposes a kind of movable storage device, comprising:
The document control mapper is used to receive the request of user capture file map, and locating file corresponding file protector sends the order that starts said file protection device to device management module; Also be used for controlling application program and visit said file map corresponding file;
Device management module is used for according to said startup command startup file protector;
The file protection device is used to monitor the application program of access file, guarantees the security of file access process; Said file protection device moves prior to respective file;
File map is used to preserve the access attribute information of respective file.
The present invention is provided with corresponding file reflection and file protection device for different files, wherein:
File is the file of match operation system file format standard, has different forms according to the difference of using, and like word, EXCEL and PDF, these files comprise the needed useful information of user.
The file protection device is the application program that is associated with file layout, is used for protecting the certain applications file, generally is binary format, can be carried out by computing machine.
File and file protection device generally are in protected state, and the user conducts interviews through special purpose interface.Promptly under static state, illegal program does not know how to visit these data, can't visit and revise these data yet.
File map is a kind of special file, has identical filename and file layout with associated with, but different with the content of associated with, has only comprised the access attribute information of file, is the sign of application access associated with.File map is visible to the user, the incident of associated with meeting operation response system operation file.
In the present invention, file and file protection device are invisible to the user, and file map is visible to the user.Therefore, the embodiment of the invention can be divided into the storage unit of movable storage device different zones, i.e. general area and hidden area.Wherein, the file of preserving in the general area is visible to the user, and the file that the user clicks or double-clicks wherein will cause computing machine to read this document; The file of preserving in the hidden area is sightless to the user, and the data in the hidden area are controlled visit through special purpose interface by the control module of movable storage device.File and file protection device are stored in the hidden area, and file map is stored in general area.
Referring to Fig. 1, Fig. 1 is the mutual relationship synoptic diagram of file of the present invention, file protection device and file map.Wherein:
File map is file " representative ", and representation file and operating system are directly mutual, with file be one-to-one relationship, file map 1 representation file 1, file map 2 representation files 2 ..., file map N representation file N.Application program operation file reflection will practical operation arrive corresponding file, as the reflection 1 that opens file, and the file of finally opening is a file 1; If deleted file reflection 1, file map 1 corresponding file 1 also will be deleted.
The relation of file protection device and file is: the file protection device is that a class file is protected; Protected file has identical or close attribute; Therefore file and file protection device are not to concern one to one, maybe the corresponding file protection device of a plurality of files.The file protection device is a binary file, in system, move, and the main index of file described here also can be protected binary file according to file.
In the present invention, the interaction of above-mentioned three kinds of files realizes that through the document control mapper document control mapper is positioned at the control module of movable storage device.When the user thinks operation file N, if operation corresponding file reflection N, because file map N is visible to the user.The document control mapper can directly read the memory location at the pairing file N of file map N place after the operation requests that receives file map N, and whether decision triggers the corresponding file protector according to relating attribute.After the document control mapper triggered the file protection device, the file protection device can be the running environment of file build safety prior to running paper.Like this, file promptly is placed in the protected environment in by the process with visit, thereby has got rid of the danger that file is destroyed by illegal program, guarantees safety of files.
Referring to Fig. 2, Fig. 2 is that file of the present invention, file protection device and file map are through the interactional synoptic diagram of document control mapper.Among Fig. 2, what solid line was represented is that data flow to movable storage device from application program, and what dotted line was represented is that data flow to application program from movable storage device.Whole process comprises the steps:
Step 201: since to the user visible be file map, and file is invisible for the user, when the user needs access file N, sends the order of visit corresponding file reflection N, indication document control mapper operation file reflection.
Step 202: the document control mapper is indicated according to this, searches corresponding file map N, and the video order of N of operation file is sent to file map N.
Step 203: file map N receives order, returns solicit operation file N to the document control mapper.
After this, if be pre-existing in file N corresponding file protector N, then file protection device N will be activated prior to file N, for the visit of file N provides safe environment.Be step 204~step 208: the document control mapper is startup file N corresponding file protector N at first, transfers the content of file N afterwards, access file N success.
If corresponding file protector N does not exist, then the document control mapper can report main frame this access file failure.
In the present invention, the file protection device can also be used for after startup, requires user's input validation information, judges according to the affirmation information of user's input whether this user is allowed to open file, when allowing, and circular document control mapper.
In the movable storage device that the present invention proposes, in the hidden area of storage unit, store device management module, invisible to the user.Device management module and is set up passage with the document control mapper after movable storage device inserts main frame or user's operation when this device management module is operated.File is not shielded in original state; According to the safety requirements of file, when needs were given the file dynamic protection, device management module write file the hidden area of movable storage device; And generate this document corresponding file reflection in the general area of movable storage device storage unit; The file map that generates has filename identical with agent-protected file and extension name, meets user's operating habit like this, is convenient to the later operational administrative of user.In addition, device management module also with the acting in conjunction of document control mapper, guarantee the synchronous operation of file protection device and file.
The embodiment of the invention also proposes a kind of method of file access, comprising:
The document control mapper receives the request of user capture file map, and locating file corresponding file protector sends the order that starts said file protection device to device management module;
Device management module is according to said startup command startup file protector; The application program of file protection device monitoring access file guarantees the security of file access process;
Document control mapper controlling application program is visited said file map corresponding file.
May further include before this method: device management module is set up passage with said document control mapper after movable storage device inserts main frame or user's operation when this device management module is operated.
This method may further include: device management module and the acting in conjunction of document control mapper guarantee the synchronous operation of file protection device and respective file.
Because file is not shielded in original state, therefore before said method, can further include: device management module writes movable storage device with file, generates said file corresponding file reflection.
In the said method, after the device management module startup file protector, and before the application program of file protection device monitoring access file, may further include:
The file protection device judges according to the affirmation information of user's input whether said user is allowed to open file, when allowing, and circular document control mapper.
Below introduce in detail process according to the inventive method access file, referring to Fig. 3, Fig. 3 is the method flow diagram of embodiment of the invention access file.This method comprises:
Step 301: the user initiates the request of access file during through the host access file.It is emphasized that here " file " is the general name of ordinary file and file map (file map can be regarded a kind of special file as).
Step 302: the document control mapper judges that the file of this visit is ordinary file or file map; Concrete mode is: can in file map, comprise character string specific and that in ordinary file, generally can not occur in advance; Like " 0X0a0a0B0B ", through judging that whether comprising this specific character string in this document judges that this document is ordinary file or file map, that is: when not comprising specific character string; What judge the requirement visit is file, execution in step 303; When comprising specific character string, what judge the requirement visit is file map, execution in step 304.
Step 303: according to way conventional in the prior art,, directly open file, finish current flow process as adopting the reading order of SCSI.
Step 304: the document control mapper is searched the pairing file protection device of this document reflection respective file, if the corresponding file protector exists, then execution in step 305; If the corresponding file protector does not exist, then this visit failure of file map device report main frame finishes current flow process.
Step 305: the document control mapper sends the order that starts said file protection device, and (device management module has moved on main frame when movable storage device inserts main frame to device management module; And initiatively set up passage with the document control mapper), device management module is according to said startup command startup file protector.
Step 306: after the file protection device starts; Can require user's input validation information, judge according to the affirmation information of user's input whether this user is allowed to open file, when allowing; The document control mapper of notice movable storage device; File content is mapped to file map, and the identifier of the application program that opens file is sent to the document control mapper, guarantee correctly opening of file.
Step 307: document control mapper load document, file access success.
To sum up visible; Movable storage device and file access method that the embodiment of the invention proposes; In movable storage device, preserve file, file protection device and file map, and document control mapper and device management module are set in movable storage device, be used to coordinate and manage this three kinds of entities; Because having only file map is visible to the user; Can only operate to corresponding file during the user capture file; And user's operation file reflection is understood at first startup file protector, through the application program of file protection device monitoring access file, thus the security of assurance file access process.Device management module also with the acting in conjunction of document control mapper, guarantee the synchronous operation of file protection device and respective file.In addition, in the present invention, the memory module of movable storage device is divided into general area and hidden area, general area storage file reflection, visible to the user; Hidden area storage file and file protection device, invisible to the user, and; The hidden area generally is in protected state; Be used for conducting interviews through special purpose interface, therefore under static state, illegal program does not know how to visit the hidden area; Also just can't revise and destroy the file in the hidden area, guarantee safety of files.
The above is merely preferred embodiment of the present invention, is not to be used to limit protection scope of the present invention.All within spirit of the present invention and principle, any modification of being done, be equal to replacement and improvement etc., all should be included within protection scope of the present invention.

Claims (10)

1. a movable storage device comprises control module and storage unit, it is characterized in that,
Said control module is provided with the document control mapper; Said document control mapper is used to receive the request of user capture file map; The operation file reflection; Locating file corresponding file protector sends the order that starts said file protection device to device management module, and controlling application program is visited said file map corresponding file;
Said storage unit comprises general area and hidden area;
Said general area stores the visible said file map to the user; Said file map has the filename identical with respective file and extension name, and only includes the access attribute information of respective file;
Preserve the sightless said file of user, said file protection device and said device management module said hidden area, and the said file of preserving in the said hidden area, said file protection device and said device management module are controlled visit through special purpose interface and by said control module; Wherein, said file protection device is used to monitor the application program of access file, guarantees the security of file access process; Said file protection device moves prior to respective file; Said device management module is used for starting said file protection device according to said startup command.
2. movable storage device according to claim 1 is characterized in that, said device management module is set up passage with said document control mapper after movable storage device inserts main frame or user's operation when said device management module is operated.
3. movable storage device according to claim 1 and 2 is characterized in that, said device management module also is used for and the acting in conjunction of said document control mapper, guarantees the synchronous operation of file protection device and respective file.
4. movable storage device according to claim 1 and 2 is characterized in that, said device management module also is used for file is write movable storage device, generates said file corresponding file reflection.
5. movable storage device according to claim 1 is characterized in that, said file protection device is used for also judging according to the affirmation information of user's input whether said user is allowed to open file that when allowing, circular document is controlled mapper.
6. the method for a file access is characterized in that, said method comprises:
With storage unit be divided into storage to the user visible and have the filename identical and extension name with respective file, and general area and the storage of file map that only include respective file access attribute information to the sightless said file of user, file protection device, reach the hidden area of device management module; Wherein, said hidden area is used for conducting interviews through special purpose interface;
The document control mapper receives the request of user capture file map, and the operation file reflection, searches said file corresponding file protector, sends the order that starts said file protection device to device management module;
Device management module starts the application program that said file protection device is monitored access file according to said startup command, guarantees the security of file access process;
Document control mapper controlling application program is visited the corresponding said file of said file map.
7. method according to claim 6; It is characterized in that; Further comprise before the said method: device management module is set up passage with said document control mapper after movable storage device inserts main frame or user's operation when said device management module is operated.
8. method according to claim 6 is characterized in that, said method further comprises: said device management module and the acting in conjunction of document control mapper guarantee the synchronous operation of file protection device and respective file.
9. method according to claim 6 is characterized in that, further comprise before the said method: said device management module writes movable storage device with file, generates said file corresponding file reflection.
10. method according to claim 6 is characterized in that, after the said device management module startup file protector, and before the application program of file protection device monitoring access file, further comprises:
The file protection device judges according to the affirmation information of user's input whether said user is allowed to open file, when allowing, and circular document control mapper.
CN2008102221770A 2008-09-10 2008-09-10 Mobile memory apparatus and method for visiting file Expired - Fee Related CN101350034B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2008102221770A CN101350034B (en) 2008-09-10 2008-09-10 Mobile memory apparatus and method for visiting file

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2008102221770A CN101350034B (en) 2008-09-10 2008-09-10 Mobile memory apparatus and method for visiting file

Publications (2)

Publication Number Publication Date
CN101350034A CN101350034A (en) 2009-01-21
CN101350034B true CN101350034B (en) 2012-05-23

Family

ID=40268825

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2008102221770A Expired - Fee Related CN101350034B (en) 2008-09-10 2008-09-10 Mobile memory apparatus and method for visiting file

Country Status (1)

Country Link
CN (1) CN101350034B (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102479307B (en) * 2010-11-23 2015-03-18 腾讯科技(深圳)有限公司 Mobile device and video file hiding method of mobile device
US8966574B2 (en) 2012-02-03 2015-02-24 Apple Inc. Centralized operation management
CN105488436B (en) * 2015-12-25 2019-05-10 北京奇虎科技有限公司 A kind of movable storage device access method and device
CN106529261B (en) * 2016-10-25 2020-07-07 公安部第三研究所 UKey and method for synchronizing offline service data
CN111428272B (en) * 2020-04-21 2023-06-06 深圳融安网络科技有限公司 Secure access method and device for mobile storage device and storage medium
CN114817981A (en) * 2022-02-14 2022-07-29 统信软件技术有限公司 File access method, computing device and readable storage medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1794210A (en) * 2006-01-05 2006-06-28 北京中讯锐尔科技有限公司 Data safety storage and processing method of mobile storage equipment
CN1866224A (en) * 2005-05-20 2006-11-22 联想(北京)有限公司 Mobile memory device and method for accessing encrypted data in mobile memory device
CN101079008A (en) * 2006-05-22 2007-11-28 中国软件与技术服务股份有限公司 Mobile memory divulgence protection method and system

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1866224A (en) * 2005-05-20 2006-11-22 联想(北京)有限公司 Mobile memory device and method for accessing encrypted data in mobile memory device
CN1794210A (en) * 2006-01-05 2006-06-28 北京中讯锐尔科技有限公司 Data safety storage and processing method of mobile storage equipment
CN101079008A (en) * 2006-05-22 2007-11-28 中国软件与技术服务股份有限公司 Mobile memory divulgence protection method and system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
郑晓辉等.移动存储设备安全防护系统的研究与设计.《四川兵工学报》.2009,第30卷(第7期),107~109. *

Also Published As

Publication number Publication date
CN101350034A (en) 2009-01-21

Similar Documents

Publication Publication Date Title
JP6019514B1 (en) Computer program, secret management method and system
JP4806557B2 (en) Storage device and computer system for managing logs
CN101350034B (en) Mobile memory apparatus and method for visiting file
US20080107271A1 (en) Systems and Methods for Document Control Using Public Key Encryption
US20080201544A1 (en) Storage system
CN112269547B (en) Active and controllable hard disk data deleting method and device without operating system
US10380356B2 (en) Operating system partition protecting system, protecting device, and terminal
Reardon et al. On secure data deletion
JP4806751B2 (en) File access destination control apparatus, method and program thereof
US9639713B2 (en) Secure endpoint file export in a business environment
US20150302220A1 (en) Secure data containers
CN100447765C (en) Mapping method for mobile memory device
EP2081127A1 (en) Controller for controlling logical volume-related settings
US20240152630A1 (en) Security system and method for real-time encryption or decryption of data using key management server
KR20150027567A (en) Integrated document management system
CN100424650C (en) Method and device for saving and restoring application environment of personal information in computer
US9430674B2 (en) Secure data access
KR20130079004A (en) Mobile data loss prevention system and method for providing virtual security environment using file system virtualization on smart phone
JP7527539B2 (en) Electronic data management method, electronic data management device, program therefor, and recording medium
JP2008234539A (en) Information processing apparatus, file processing method and program
KR101458149B1 (en) Method of Controlling File With Backing-up Hidden Files
US11392704B2 (en) Apparatus for LAN booting environment-based file security and centralization, method therefor, and computer-readable recording medium on which program for performing same method is recorded
JP5047664B2 (en) Electronic document management apparatus, computer program, and electronic document management method
CN112988672B (en) User data protection method and device
JP2006107112A (en) Access authority setting system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
ASS Succession or assignment of patent right

Owner name: CHINA POTEVIO CO., LTD.

Free format text: FORMER OWNER: PUTIAN IT TECH INST CO., LTD.

Effective date: 20130917

C41 Transfer of patent application or patent right or utility model
TR01 Transfer of patent right

Effective date of registration: 20130917

Address after: 100080, No. two, 2 street, Zhongguancun Electronic Science and Technology Park, Beijing

Patentee after: CHINA POTEVIO CO.,LTD.

Address before: 100080 Beijing, Haidian, North Street, No. two, No. 6, No.

Patentee before: PETEVIO INSTITUTE OF TECHNOLOGY Co.,Ltd.

ASS Succession or assignment of patent right

Owner name: PUTIAN IT TECH INST CO., LTD.

Free format text: FORMER OWNER: CHINA POTEVIO CO., LTD.

Effective date: 20131202

C41 Transfer of patent application or patent right or utility model
TR01 Transfer of patent right

Effective date of registration: 20131202

Address after: 100080 Beijing, Haidian, North Street, No. two, No. 6, No.

Patentee after: PETEVIO INSTITUTE OF TECHNOLOGY Co.,Ltd.

Address before: 100080, No. two, 2 street, Zhongguancun Electronic Science and Technology Park, Beijing

Patentee before: CHINA POTEVIO CO.,LTD.

CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20120523

Termination date: 20210910

CF01 Termination of patent right due to non-payment of annual fee