CN102023937A - Dataflow encryption method for USB (Universal Serial Bus) storage equipment - Google Patents

Dataflow encryption method for USB (Universal Serial Bus) storage equipment Download PDF

Info

Publication number
CN102023937A
CN102023937A CN 201010551276 CN201010551276A CN102023937A CN 102023937 A CN102023937 A CN 102023937A CN 201010551276 CN201010551276 CN 201010551276 CN 201010551276 A CN201010551276 A CN 201010551276A CN 102023937 A CN102023937 A CN 102023937A
Authority
CN
China
Prior art keywords
data
encryption
main frame
switching device
usb
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN 201010551276
Other languages
Chinese (zh)
Inventor
郑茳
肖佐楠
匡启和
王廷平
尤国芳
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CCore Technology Suzhou Co Ltd
Original Assignee
CCore Technology Suzhou Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CCore Technology Suzhou Co Ltd filed Critical CCore Technology Suzhou Co Ltd
Priority to CN 201010551276 priority Critical patent/CN102023937A/en
Publication of CN102023937A publication Critical patent/CN102023937A/en
Pending legal-status Critical Current

Links

Images

Abstract

The invention discloses a dataflow encryption method for USB (Universal Serial Bus) storage equipment, wherein a switching device is arranged between a host machine and a USB flash disk, a first data storage area, a second data storage area, a third data storage area and a fourth data storage area are arrayed along a clockwise direction; a USB flash disk pointer points to a next data caching area along an counter-clockwise direction, meanwhile, an encryption pointer points to a next data caching area along a counter-clockwise direction, and meanwhile, a host machine pointer points to a next data caching area along the counter-clockwise direction; a main port of the switching device transmits one unit ciphertext data in the data caching area pointed by the USB flash disk pointer to the USB flash disk, an encryption module carries out encryption treatment on the data of the data caching area pointed by the encryption pointer, and the switching device transmits next unit plaintext data from the port into the data caching area pointed by the host machine pointer. The dataflow encryption method realizes the separation among the plaintext data, the ciphertext data and the encryption algorithm, and improves the data encryption speed between the host machine and the mobile storage equipment.

Description

A kind of data stream encryption method that is used for the USB storage facilities
Technical field
The present invention relates to a kind of data stream encryption method of the USB of being used for storage facilities, belong to the safe storage application.
Background technology
At present, the USB flash disk memory device is widely used, and the data of USB flash disk memory device are encrypted the safety that can effectively ensure digital asset information, and it is not obtained by the disabled user.Therefore, the data encryption in the data encryption, particularly movable storage device is the important means of protection digital information safety.Original text data high-speed encrypting storing is widely used in various information security fields to the USB flash disk memory device.
At present, for the data of preserving in the USB flash disk memory device are encrypted, the measure of taking is to increase by an encrypting module in ordinary mobile storage.Main frame is encrypted the original text data earlier before movable storage device writes data through encrypting module, then encrypt data is deposited in the movable storage device.Main frame is during from the movable storage device sense data, earlier with encrypt data through the encrypting module deciphering, the original text data after will deciphering are then read in main frame.Problems such as present design ubiquity data encryption speed is slow, the data encryption mode is simple, cryptographic means is limited.This is concerning storing big data quantity into movable storage device, need more adding data encrypting and deciphering transmission speed, cryptographic means and the mode of encryption chip all to be had higher requirement the current demand of close means and mode.
Along with the widespread use of USB flash disk memory device high capacity movable storage device, the security of the data of being stored on these equipment more and more receives publicity.Especially some confidential datas, in using the movable storage device copy procedure, in case situation such as take place that memory device is lost, the security of these data just can't be protected.
Summary of the invention
The object of the invention provides a kind of data stream encryption method of the USB of being used for storage facilities, and this method has realized separating of clear data, encrypt data and cryptographic algorithm, and has improved data encryption speed between main frame and the movable storage device.
For achieving the above object, the technical solution used in the present invention is:
A kind of data stream encryption method that is used for the USB storage facilities is characterized in that: may further comprise the steps:
Step 1. is arranged at switching device between main frame and the USB flash disk, being connected with the master port of main frame of this switching device from port, the master port of switching device is connected with the port of USB flash disk, the encrypting module of switching device is used to encrypt the transmission data between main frame and the USB flash disk, be provided with four data buffer areas in this switching device, and its first data storage area, second data storage area, the 3rd data storage area and the 4th data storage area are arranged along clockwise direction;
Step 2. switching device receive write command and data unit length from port from main frame, and this write command and data unit length are transmitted to USB flash disk;
Step 3. configure host pointer, USB flash disk pointer and encryption pointers, described main frame pointer, be used to identify the address of the data storage area of main frame write data, described USB flash disk pointer, sign is used for the address to the data storage area of USB flash disk transmission data, described encryption pointers is used for the address of the data storage area of the pending data of mark encryption module;
During step 4. initialization USB flash disk pointer and encryption pointers are pointed to second data buffer area, main frame pointed first data buffer area;
Step 5. switching device transmits a unit clear data from port to the current data buffer zone of main frame pointer indication;
If the described switching device of step 6. FromPort is " free time " state, and when the main frame pointed CurrentThe data buffer area edge ContraryNext data buffer area state of clockwise ground is " sky ", and then the main frame pointer points to next data buffer area in the counterclockwise direction, and simultaneously, the encryption and decryption pointer points to next data buffer area in the counterclockwise direction;
Step 7. switching device transmits next unit clear data from port to the data buffer of main frame pointer indication, and encrypting module carries out encryption with the data buffer data of encryption pointers indication;
Step 8.U index points to next data buffer area in the counterclockwise direction, and simultaneously, encryption pointers is pointed to next data buffer area in the counterclockwise direction, and simultaneously, the main frame pointer points to next data buffer area in the counterclockwise direction;
Step 9. switching device master port is transferred to USB flash disk with unit encrypt data in the data buffer of USB flash disk pointer indication, encrypting module carries out encryption with the data buffer data of encryption pointers indication, and switching device transmits next unit clear data from port in the data buffer of main frame pointer indication.
Related content in the technique scheme is explained as follows:
1, in the such scheme, the storage space of described data buffer area equates that with described data unit length described four data buffer areas are four continuous data buffer areas on the address.
2, in the such scheme, the length number device that also comprises the unit number of recording of encrypted data, carry out described switching device from port after the current data buffer zone of main frame pointer indication transmits a unit clear data operation, the count value of described length number device subtracts 1, when length counter equals 0, and USB flash disk pointer usbHostPos equals main frame pointer usbDevicePos, finishes this data encryption process.
3, in the such scheme, at least three kinds of cryptographic algorithm are set in the described encryption and decryption module.
Because the technique scheme utilization, the present invention compared with prior art has following advantage and effect:
The invention enables whole USB flash disk mobile storage encryption stream switching device in the course of the work, data rate gets a promotion.When using the movable storage device of writing rate below 10MB/s, can accomplish that substantially writing rate is harmless; When the movable storage device of operating speed at 30MB/s, can be more than 25MB/s by encrypting the speed that switching device writes; Secondly, realize separating of clear data, encrypt data and cryptographic algorithm, improved safety of data greatly; Once more,, comprise filename and file directory name, also encrypt, further strengthened security USB flash disk filesystem information data; Ciphering process is transparent for domestic consumer, and is easy to use; Once more, be provided with four data buffer zones, effectively reduced the time of waiting for.
Description of drawings
Accompanying drawing 1 is switching device structural representation of the present invention;
Accompanying drawing 2 is schematic flow sheet of the present invention;
Accompanying drawing 3 is switching device hardware synoptic diagram of the present invention;
Accompanying drawing 4 is software configuration synoptic diagram of the present invention;
Accompanying drawing 5 is data parallel synoptic diagram of the present invention;
Accompanying drawing 6 writes data to the time flow chart of movable storage device for computing machine.
Embodiment
Below in conjunction with drawings and Examples the present invention is further described:
Embodiment: a kind of data stream encryption method that is used for the USB storage facilities may further comprise the steps:
Step 1. is arranged at switching device between main frame and the USB flash disk, being connected with the master port of main frame of this switching device from port USB Dev, the master port USB Host of switching device is connected with the port of USB flash disk, the encrypting module of switching device is used to encrypt the transmission data between main frame and the USB flash disk, be provided with four data buffer areas in this switching device, and its first data storage area, second data storage area, the 3rd data storage area and the 4th data storage area are arranged along clockwise direction;
Step 2. switching device receive write command and data unit length from port from main frame, and this write command and data unit length are transmitted to USB flash disk;
Step 3. configure host pointer usbDevicePos, USB flash disk pointer usbHostPos and encryption pointers encrPos, described main frame pointer usbDevicePos, be used to identify the address of the data storage area of main frame write data, described USB flash disk pointer usbHostPos, sign is used for the address to the data storage area of USB flash disk transmission data, described encryption pointers encrPos is used for the address of the data storage area of the pending data of mark encryption module;
During step 4. initialization USB flash disk pointer usbHostPos and encryption pointers encrPos are pointed to the second data buffer area FIFO2, main frame pointer usbDevicePos points to the first data buffer area FIFO1;
Step 5. switching device transmits a unit clear data from port to the current data buffer zone of main frame pointer usbDevicePos indication;
If the described switching device of step 6. FromPort is " free time " state flgHostTxRxDone==1, and the current data buffer area FIFO that points to as main frame pointer usbDevicePos next data buffer area FIFO((usbHostPos+1 in the counterclockwise direction); 0x03) state is " sky ", and then main frame pointer usbDevicePos points to next data buffer area FIFO in the counterclockwise direction, and simultaneously, encryption pointers encrPos points to next data buffer area FIFO in the counterclockwise direction;
Step 7. switching device transmits next unit clear data from port to the data buffer of main frame pointer usbDevicePos indication, and encrypting module carries out encryption with the data buffer data of encryption pointers indication;
Step 8.U index usbHostPos points to next data buffer area FIFO in the counterclockwise direction, simultaneously, encryption pointers encrPos points to next data buffer area FIFO in the counterclockwise direction, simultaneously, main frame pointer usbDevicePos points to next data buffer area FIFO in the counterclockwise direction;
Step 9. switching device master port is transferred to USB flash disk with unit encrypt data in the data buffer of USB flash disk pointer indication, encrypting module carries out encryption with the data buffer data of encryption pointers indication, and switching device transmits next unit clear data from port in the data buffer of main frame pointer usbDevicePos indication.
The storage space of described data buffer area equates that with described data unit length described four data buffer areas are four continuous data buffer areas on the address.
The length number device that also comprises the unit number of recording of encrypted data, carry out described switching device from port after the current data buffer zone of main frame pointer usbDevicePos indication transmits a unit clear data operation, the count value of described length number device subtracts 1, when length counter equals 0, and USB flash disk pointer usbHostPos equals main frame pointer usbDevicePos, finishes this data encryption process.
At least three kinds of cryptographic algorithm are set in the described encryption and decryption module.
The concrete course of work of present embodiment foregoing is as follows.
In the USB of this implementation column storage facilities, the data that have three types are in the master port USB Host of switching device and transmitting between port USB Dev of switching device: USB command block bag CBW, USB state CSW and general data DATA.USB command block bag CBW is the order from port USB Dev that the master port of main frame sends to switching device, command format is deferred to SCSI transmission command collection, switching device needs scsi command is extracted from command block bag CBW, carry out corresponding order, and this CBW order bag, the master port USB Host by switching device is forwarded to USB flash disk.The state that USB state bag CSW reflection the current command piece bag is carried out is the master port USB Host that USB flash disk sends to switching device, and switching device is by being forwarded to the master port of main frame from port USB Dev.
The hardware module explanation:
(1), data buffer area FIFO(2K): size is the 2K byte, and the storage of usb data stream is special-purpose.Because USB2.0 packet size is 512 bytes, therefore, the FIFO of 2K byte is divided into 4, and every block size is 512 bytes.
(2), the master port USB Host of switching device: the USB master port hardware module of switching device, support USB1.1 and USB2.0 agreement, can receive data from USB flash disk to FIFO by this port, or send data in the FIFO to USB flash disk by this port.
(3), switching device from port USB Dev:U disk storage device hardware module, support USB1.1 and USB2.0 agreement, can receive data from main frame to FIFO by the Device port, or send data in the FIFO to main frame by the Device port.
(4), encrypting module ENCR: the encryption and decryption control module, by calling SM1, SM4, the DES scheduling algorithm carries out encryption and decryption to the data in the data buffer zone FIFO.
(5), SM1: the enciphering and deciphering algorithm module is dispatched by encrypting module ENCR.
(6), SM4: the enciphering and deciphering algorithm module is dispatched by encrypting module ENCR.
(7), DES: the enciphering and deciphering algorithm module is dispatched by encrypting module ENCR.
Project organization is as follows:
(1), USB Host break in service function: USBHost_ISR()
The master port USB Host module of switching device is finished a data transfer (sending or receive 512 bytes), then can produce once to interrupt, and in the corresponding break in service function, can dispose this module status mark.
(2), USB Dev break in service function: USBDev_ISR()
Switching device finish a data transfer (sending or receive 512 bytes) from port USB Dev module, then can produce once and to interrupt, in the corresponding break in service function, can dispose this module status mark.
(3), ENCR break in service function: Encr_ISR()
Encrypting module ENCR module is finished and is once encrypted (encrypting 512 bytes), then can produce once and interrupt, and in the corresponding break in service function, can dispose this module status mark.
(4), the master port USB Host status indication of switching device: flgHostTxRxDone
Mark USB Host module is busy or idle.
FlgHostTxRxDone equals 0, and USB Host is busy;
FlgHostTxRxDone equals 1, the USB Host free time;
(5), switching device from port USB Dev status indication: flgDeviceTxRxDone
Mark USB Dev module is busy or idle.
FlgDeviceTxRxDone equals 0, and USB Dev is busy;
FlgDeviceTxRxDone equals 1, the USB Dev free time;
(6), encrypting module ENCR status indication: flgSecurityDone
Mark encrypting module ENCR module is busy or idle.
FlgSecurityDone equals 0, and ENCR is busy;
FlgSecurityDone equals 1, the ENCR free time;
(7), USB flash disk pointer: usbHostPos
The FIFO start address of current USB Host operation.After USB Host receives or sends a packet, the next FIFO of pointed, order is: FIFO0 → FIFO1 → FIFO2 → FIFO3 → FIFO0.
UsbHostPos equals 0, the current operation of USB Host be FIFO0;
UsbHostPos equals 1, the current operation of USB Host be FIFO1;
UsbHostPos equals 2, the current operation of USB Host be FIFO2;
UsbHostPos equals 3, the current operation of USB Host be FIFO3;
(8), main frame pointer: usbDevicePos
The FIFO start address of current USB Dev operation.After USB Dev receives or sends a packet, the next FIFO of pointed, order is: FIFO0 → FIFO1 → FIFO2 → FIFO3 → FIFO0.
UsbDevicePos equals 0, the current operation of USB Host be FIFO0;
UsbDevicePos equals 1, the current operation of USB Host be FIFO1;
UsbDevicePos equals 2, the current operation of USB Host be FIFO2;
UsbDevicePos equals 3, the current operation of USB Host be FIFO3;
(9), encryption pointers: encrPos
The FIFO start address of current ENCR operation.After ENCR encrypts a packet, the next FIFO of pointed, order is: FIFO0 → FIFO1 → FIFO2 → FIFO3 → FIFO0.
EncrPos equals 0, the current operation of USB Host be FIFO0;
EncrPos equals 1, the current operation of USB Host be FIFO1;
EncrPos equals 2, the current operation of USB Host be FIFO2;
EncrPos equals 3, the current operation of USB Host be FIFO3;
(10), data buffer area fifo status mark:
FIFO is divided into three kinds of states: FIFO sky, data fifo are full, data fifo has added and separates or decipher.
Fifo status equals 0, and FIFO is empty;
Fifo status equals 1, and data fifo is full;
Fifo status equals 2, and data fifo is encrypted or deciphered;
(11), management of usb data flow transmission and module schedules program
Be responsible for the scheduling of USB Host, USB Dev and three hardware modules of ENCR, management traffic read-write process.
Data are write workflow:
Write flow process (main frame is that PC writes data to USB flash disk movable storage device workflow)
PC → USB Dev → ENCR encryption → USB Host → movable storage device
PC is from movable storage device reading of data detailed step:
1, receives that PC sends CBW bag (write data order bag);
2. from the CBW bag, obtain the data to be transmitted unit number,, jump to 10 if the data to be transmitted unit number equals zero;
3.USB Host sends this CBW bag to USB flash disk equipment;
4. module pointer initialization, configuration usbHostPos=1, usbDevicePos=0, encrPos=1; USB Dev begins to receive data, and configuration USB Dev module is " have much to do " (flgDeviceTxRxDone==0).
5. if USB Dev module current state is " free time " (flgDeviceTxRxDone==1), and the current FIFO of USB Dev position (usbDevicePos) recycle back adds a position ((usbDevicePos+3) ﹠amp; Fifo status 0x03) is " sky ", then:
The current fifo status of configure host pointed is " data are full ";
A FIFO(recycle back adds one on the main frame pointed): usbDevicePos=(usbDevicePos+3) ﹠amp; 0x03;
It is the FIFO(usbDevicePos of current main frame pointed that configuration USB Dev module receives data FIFO);
Data to be transmitted unit number=data to be transmitted unit number-1;
If the data to be transmitted unit number is greater than zero, configuration USB Dev module is " having much to do " (flgDeviceTxRxDone=0); From the host receiving data bag;
6. if ENCR module current state is " free time " (flgSecurityDone==1), and current FIFO position (encrPos) recycle back that encryption pointers is pointed to adds a position (encrPos+3) ﹠amp; The fifo status of 0x03 is " data are full ", then:
The current fifo status that the configuration encryption pointers is pointed to is " data are encrypted ";
Encryption pointers is pointed to a FIFO: (encrPos=(encrPos+3) ﹠amp; 0x03);
Configuration ENCR module encrypt data FIFO is the FIFO(encrPos that encryption pointers is pointed to);
Configuration ENCR module is " having much to do " (flgSecurityDone=0);
Start the ENCR module, data are encrypted;
7. if the current FIFO position-reversed circulation that USB Host module " free time " (flgHostTxRxDone==1), and USB flash disk pointer (usbHostPos) is pointed to adds a position ((usbHostPos+1) ﹠amp; Fifo status 0x03) is " data are encrypted ":
The FIFO that current FIFO(usbHostPos points to is set) state is " sky ";
A FIFO(recycle back adds one on the configuration USB flash disk pointed): the ﹠amp of usbHostPos=(usbHostPos+3); 0x03;
It is the FIFO(usbHostPos of USB flash disk pointed that configuration USB Host module sends data FIFO);
Put USB Host module and be " having much to do " (flgHostTxRxDone=0);
8. if the transmission data units number is greater than zero, USB Host sends packet to memory device;
If the data transmission unit number is greater than zero at this moment, perhaps (usbHostPos+3) ﹠amp; 0x03 is not equal to usbDevicePos, then jumps to step 5;
9.USB Host sends Data In request to memory device, obtains the CSW bag;
10. wait USB Host instruction is finished;
11.USB Host reads the CSW bag;
12. wait for the USB Dev free time;
13.USB Dev sends CSW and wraps the main frame to PC;
14. withdraw from.
Annotate: wherein, USB Host module, USB Dev module and ENCR module are after finishing single job, the interruption of this module will be triggered, interrupt program loop, break in service function U SBHost_ISR (), USBDev_ISR () and ENCR_ISR () will carry out, respectively can configuration module state variable: flgHostTxRxDone, flgSecurityDone and flgDeviceTxRxDone.
As shown in Figure 5,
(1) expression among Fig. 5, switching device receives first bag, switching device encrypting module Encr free time, switching device master port USB Host free time from port USB Dev;
(2) expression among Fig. 5, Dev is received first bag, Encr free time, Host free time;
(3) expression among Fig. 5, Dev receives second bag, and Encr encrypts first bag, Host free time;
(4) expression among Fig. 5, Dev receives second bag, and Encr has encrypted first bag, Host free time;
(5) expression among Fig. 5, Dev is received second bag, Encr free time, Host free time;
(6) expression among Fig. 5, Dev receives three guarantees, and Encr encrypts second bag, and Host sends first bag;
(7) expression among Fig. 5, Dev receives the 4th bag, and Encr encrypts three guarantees, and Host sends second bag;
(8) expression among Fig. 5, Dev receives the 5th bag, and Encr encrypts the 4th bag, and Host sends three guarantees.
As shown in Figure 6, assess encrypting switching device maximum transmitted performance, the assessment benchmark is as follows: USB high-speed transfer pattern, each maximum bag number of all being supported with bulk transfer (128) transmits, the USB interface transmission time is the theoretical time, and the time behind the non-access movable storage device, system clock 80MHZ, USB interface packet (512B) time of transmission is 13us, order bag of USB interface transmission or state bag time are 7.5us, and packet time of encrypt/decrypt is 6us.
Performance is as follows: transmitting the required theoretical time of 128 packets (64KB) is: 128* (Tcpu2+Tdd)+Tcpu1+ (Tcbw+Tcpu2)+(Thd+Tcpu2)+(Tdec+Tcpu2)+(Tcsw+Tcpu2)=128* (2+13)+3+ (7.5+2)+(13+2)+(6+2)+(7.5+2)=1963us, the transfer rate of writing is 64KB/1963us=31.8MB/s.
The foregoing description only is explanation technical conceive of the present invention and characteristics, and its purpose is to allow the personage who is familiar with this technology can understand content of the present invention and enforcement according to this, can not limit protection scope of the present invention with this.All equivalences that spirit is done according to the present invention change or modify, and all should be encompassed within protection scope of the present invention.

Claims (4)

1. data stream encryption method that is used for the USB storage facilities is characterized in that: may further comprise the steps:
Step 1. is arranged at switching device between main frame and the USB flash disk, being connected with the master port of main frame of this switching device from port (USB Dev), the master port of switching device (USB Host) is connected with the port of USB flash disk, the encrypting module of switching device is used to encrypt the transmission data between main frame and the USB flash disk, be provided with four data buffer areas in this switching device, and its first data storage area, second data storage area, the 3rd data storage area and the 4th data storage area are arranged along clockwise direction;
Step 2. switching device receive write command and data unit length from port from main frame, and this write command and data unit length are transmitted to USB flash disk;
Step 3. configure host pointer (usbDevicePos), USB flash disk pointer (usbHostPos) and encryption pointers (encrPos), described main frame pointer (usbDevicePos), be used to identify the address of the data storage area of main frame write data, described USB flash disk pointer (usbHostPos), sign is used for the address to the data storage area of USB flash disk transmission data, described encryption pointers (encrPos) is used for the address of the data storage area of the pending data of mark encryption module;
During step 4. initialization USB flash disk pointer (usbHostPos) and encryption pointers (encrPos) are pointed to second data buffer area (the 2nd FIFO2), main frame pointer (usbDevicePos) points to first data buffer area;
Step 5. switching device transmits a unit clear data from port to the current data buffer zone of main frame pointer (usbDevicePos) indication;
If the described switching device of step 6. is " free time " state from port (USB Dev), and the current data buffer area that points to when main frame pointer (usbDevicePos) next data buffer area state in the counterclockwise direction is " sky ", then main frame pointer (usbDevicePos) points to next data buffer area in the counterclockwise direction, simultaneously, encryption pointers (encrPos) is pointed to next data buffer area in the counterclockwise direction;
Step 7. switching device transmits next unit clear data from port to the data buffer of main frame pointer (usbDevicePos) indication, and encrypting module carries out encryption with the data buffer data of encryption pointers indication;
Step 8.U index (usbHostPos) points to next data buffer area in the counterclockwise direction, simultaneously, encryption pointers (encrPos) is pointed to next data buffer area in the counterclockwise direction, simultaneously, main frame pointer (usbDevicePos) points to next data buffer area in the counterclockwise direction;
Step 9. switching device master port is transferred to USB flash disk with unit encrypt data in the data buffer of USB flash disk pointer indication, encrypting module carries out encryption with the data buffer data of encryption pointers indication, and switching device transmits next unit clear data from port in the data buffer of main frame pointer (usbDevicePos) indication.
2. data stream encryption method according to claim 1 is characterized in that: the storage space of described data buffer area equates that with described data unit length described four data buffer areas are four continuous data buffer areas on the address.
3. data stream encryption method according to claim 1, it is characterized in that: the length counter that also comprises the unit number of recording of encrypted data, carry out described switching device from port after the current data buffer zone of main frame pointer (usbDevicePos) indication transmits a unit clear data operation, the count value of described length number device subtracts 1, when length counter equals 0, and USB flash disk pointer usbHostPos equals main frame pointer usbDevicePos, finishes this data encryption process.
4. data stream encryption method according to claim 1 is characterized in that: at least three kinds of cryptographic algorithm are set in the described encryption and decryption module.
CN 201010551276 2010-11-19 2010-11-19 Dataflow encryption method for USB (Universal Serial Bus) storage equipment Pending CN102023937A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN 201010551276 CN102023937A (en) 2010-11-19 2010-11-19 Dataflow encryption method for USB (Universal Serial Bus) storage equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN 201010551276 CN102023937A (en) 2010-11-19 2010-11-19 Dataflow encryption method for USB (Universal Serial Bus) storage equipment

Publications (1)

Publication Number Publication Date
CN102023937A true CN102023937A (en) 2011-04-20

Family

ID=43865253

Family Applications (1)

Application Number Title Priority Date Filing Date
CN 201010551276 Pending CN102023937A (en) 2010-11-19 2010-11-19 Dataflow encryption method for USB (Universal Serial Bus) storage equipment

Country Status (1)

Country Link
CN (1) CN102023937A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108959114A (en) * 2018-05-22 2018-12-07 长沙金信诺防务技术有限公司 A kind of sonar contact data recording equipment and recording method
CN109711208A (en) * 2018-11-19 2019-05-03 北京计算机技术及应用研究所 USB interface device data encryption conversion equipment and its working method
CN112417522A (en) * 2020-12-01 2021-02-26 北京华大智宝电子系统有限公司 Data processing method, security chip device and embedded system

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN2372721Y (en) * 1999-06-18 2000-04-05 北京深思洛克数据保护中心 Programmable software enciphered lock
CN1445681A (en) * 2003-05-01 2003-10-01 南京邮电学院 Encryption, decryption method using high security level symmetry secret key algorithm and its encipherer
CN101510245A (en) * 2009-03-06 2009-08-19 苏州国芯科技有限公司 High speed encryption and decryption USB bridging chip and chip high speed encryption and decryption method
CN101561888A (en) * 2009-05-12 2009-10-21 苏州国芯科技有限公司 Real-time encryption SD card and high-speed encryption/decryption method

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN2372721Y (en) * 1999-06-18 2000-04-05 北京深思洛克数据保护中心 Programmable software enciphered lock
CN1445681A (en) * 2003-05-01 2003-10-01 南京邮电学院 Encryption, decryption method using high security level symmetry secret key algorithm and its encipherer
CN101510245A (en) * 2009-03-06 2009-08-19 苏州国芯科技有限公司 High speed encryption and decryption USB bridging chip and chip high speed encryption and decryption method
CN101561888A (en) * 2009-05-12 2009-10-21 苏州国芯科技有限公司 Real-time encryption SD card and high-speed encryption/decryption method

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108959114A (en) * 2018-05-22 2018-12-07 长沙金信诺防务技术有限公司 A kind of sonar contact data recording equipment and recording method
CN108959114B (en) * 2018-05-22 2022-12-16 长沙金信诺防务技术有限公司 Sonar detection data recording device and recording method
CN109711208A (en) * 2018-11-19 2019-05-03 北京计算机技术及应用研究所 USB interface device data encryption conversion equipment and its working method
CN109711208B (en) * 2018-11-19 2020-08-25 北京计算机技术及应用研究所 USB interface equipment data encryption conversion device and working method thereof
CN112417522A (en) * 2020-12-01 2021-02-26 北京华大智宝电子系统有限公司 Data processing method, security chip device and embedded system

Similar Documents

Publication Publication Date Title
CN101854353B (en) Multi-chip parallel encryption method based on FPGA
CN110618947A (en) Techniques for secure I/O with memory encryption engine
US9152825B2 (en) Using storage controller bus interfaces to secure data transfer between storage devices and hosts
CN101510245B (en) High speed encryption and decryption USB bridging chip and chip high speed encryption and decryption method
CN102541780B (en) Multi-data stream channel DMA (Direct Memory Access) system
CN102073808B (en) Method for encrypting and storing information through SATA interface and encryption card
CN102737270B (en) A kind of bank intelligent card chip secure coprocessor based on domestic algorithm
CN101540191B (en) Real-time encrypted U disk and high speed encryption-decryption method
CN101561751A (en) USB encryption and decryption bridging chip
CN102663326A (en) SoC-used data security encryption module
CN109101829B (en) Safety solid-state disk data transmission system based on reconfigurable cipher processor
CN101561888B (en) Real-time encryption SD card and high-speed encryption/decryption method
CN102023936B (en) Method for decrypting encrypted data in USB (universal serial bus) storage device
JP5060069B2 (en) Method and apparatus for efficiently managing DRM rights objects in a low performance storage device
CN102023937A (en) Dataflow encryption method for USB (Universal Serial Bus) storage equipment
CN101101624A (en) Encryption control system and method
CN103679061A (en) Implementation method and device for extendable throughput rate of SM4 cryptographic algorithm
CN101482909B (en) Enciphering algorithm module accelerating machine and its data high-speed encryption and decryption method
CN201984486U (en) Security chip, encryption box and USB interface identification and data storage equipment
CN114547663B (en) Method for realizing data encryption, decryption and reading of high-speed chip based on USB interface
CN106209370A (en) Elliptic curve cipher device, system and data cache control method
CN102722943A (en) Security chip of telephone POS (point of sale)
CN103034817A (en) Hard disc encryption system for computer
CN114401081A (en) Data encryption transmission method, application and system
CN202632409U (en) Telephone point of sale (POS) security chip

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C02 Deemed withdrawal of patent application after publication (patent law 2001)
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20110420