CN102831081A - Transparent encryption and decryption secure digital memory card (SD card) and implementation method thereof - Google Patents

Transparent encryption and decryption secure digital memory card (SD card) and implementation method thereof Download PDF

Info

Publication number
CN102831081A
CN102831081A CN2012103199978A CN201210319997A CN102831081A CN 102831081 A CN102831081 A CN 102831081A CN 2012103199978 A CN2012103199978 A CN 2012103199978A CN 201210319997 A CN201210319997 A CN 201210319997A CN 102831081 A CN102831081 A CN 102831081A
Authority
CN
China
Prior art keywords
card
decryption
file system
encryption
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2012103199978A
Other languages
Chinese (zh)
Inventor
梁松涛
何骏
董建强
张鲁国
刘熙胖
王科峰
刘长河
杨伟红
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Zhengzhou Xinda Jiean Information Technology Co Ltd
Original Assignee
Zhengzhou Xinda Jiean Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Zhengzhou Xinda Jiean Information Technology Co Ltd filed Critical Zhengzhou Xinda Jiean Information Technology Co Ltd
Priority to CN2012103199978A priority Critical patent/CN102831081A/en
Publication of CN102831081A publication Critical patent/CN102831081A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Storage Device Security (AREA)

Abstract

The invention relates to a transparent encryption and decryption secure digital memory card (SD card) for encrypting and decrypting the data in a memory area of the SD card through a file encryption and decryption system and an implementation method of the transparent encryption and decryption secure digital memory card. The SD card comprises a main control chip and a NandFlash; the main control chip is provided with a secure digital input output (SDIO) interface and a Nand interface, the Nand interface is connected with the NandFlash; the SD card also comprises a virtual file system and an encryption and decryption file system; the SDIO interface is used for connecting peripheral equipment such as a smart phone and a computer, and the main control chip of SD card; the Nand interface is used for connecting the main control chip and the NandFlash memory area; NandFlash is in charge of the storage of date; the virtual file system provides the interface for the interaction between the peripheral equipment and the SD card; writing or reading data are encrypted and decrypted by the encryption and decryption file system, so that the writing data are stored in a ciphertext form, thereby effectively guaranteeing the safety of stored data of the SD card and facilitating the operation and bringing no damage to the SD card.

Description

Transparent encryption and decryption SD card and its implementation
Technical field
The present invention relates to a kind of Virtual File System that passes through and realize the command interaction between external unit and the SD card main control chip, the data in the SD card memory area are carried out transparent encryption and decryption SD card and its implementation that encryption and decryption is handled through the encryption and decryption file system.
Background technology
SD card (Secure Digital Memory Card) translator of Chinese is a safe digital card, is a kind of memory device of new generation of based semiconductor fast-flash memory device, and it is used on mancarried device widely, for example digital camera, smart mobile phone, PAD etc.Though SD card volume is little, and is in light weight, have high memory capacity, rapid data transmission rate, mobile dirigibility and well security greatly.
If general SD card carry Flash memory block, external unit can directly be visited Flash data are carried out read-write operation.If expand the function of SD card and do not have carry Flash, external unit just can't stick into the mutual of line command and data with SD, and mutual interface and interface need be provided.Have through install driver at present and solve the problems referred to above; But driver is to write different drivers according to the difference of using device type; The interface that every kind of driver offers external unit is also inequality, and the mode of this complicacy is difficult to promoted in practical application.Therefore, press for a kind of simple, easy-operating mode, realize the mutual of SD card and external unit.
Along with being widely used of SD card, SD card institute security of storage data receives people's attention day by day.At present; Have through cryptoguard and control visit the SD card; But the data of SD card memory area comprise password and remain with stored in form expressly; Be easy to through improper means decryption like this or skip password authentification and directly obtain the clear data among the SD, user profile is just revealed easily like this.Therefore, how SD card sensitive information inside is effectively protected, become problem demanding prompt solution.
Summary of the invention
The objective of the invention is to overcome the deficiency of prior art and a kind of visit SD card memory area is provided, through encrypting storage, guarantee transparent encryption and decryption SD card and its implementation of the safety of data in the SD card simultaneously writing file.
The objective of the invention is to realize like this:
A kind of transparent encryption and decryption SD card comprises SD card main control chip, NandFlash storer, it is characterized in that:
SD card main control chip has for external unit is connected with SD card main control chip to be provided the SDIO of bridge interface and connects SD card main control chip and the Nand interface of NandFlash storer; SD card main control chip also comprises Virtual File System module and the encryption and decryption file system module of realizing through chip operating system COS; SD card main control chip is used for receiving and fill order as the bridge of external unit and SD card intraware;
The SDIO interface is used for external unit and SD card main control chips such as connection of intelligent mobile phone, computer; The Nand interface is used for connecting the NandFlash memory block of SD card main control chip and NandFlash storer; The NandFlash storer is responsible for the storage of data;
The Virtual File System module is a file system that fictionalizes through chip operating system COS; This Virtual File System module can fictionalize the data of file system memory sector; Be used for the read write command that external unit is sent is responded; Realize the normal communication of external unit and SD card; External unit sends the Card Reader instruction, and Virtual File System responds, and external unit and SD card connect;
The encryption and decryption file system module carries out encryption and decryption through the close algorithm of state to the data that write or read, and the feasible data that write are with the stored in form of ciphertext; The user sends reading command through external application; After chip operating system COS reads in the NandFlash storer sector data and calls the encryption and decryption file system file is deciphered; Send to external unit through the SDIO interface, resolve to readable documents through application program and supply the user to read; The user sends through external application and writes instruction; After chip operating system COS reads in the NandFlash storer sector data and calls the encryption and decryption file system data that write are encrypted; Send to the NandFlash storer through the Nand interface, the data that write with the stored in form of ciphertext in the NandFlash storer.
Transparent encryption and decryption is meant data in use, and system carries out encryption and decryption operation to data automatically, does not change the access habits of user to the opening of file, reading and writing; Need not user's intervention; Apparently, the file of access encrypted is basic identical with visit unencrypted file, and these encrypt files are " transparent " concerning validated user; But, also can't use even obtain encrypt file through nonconventional approaches for the user who does not have access rights.
Virtual File System be external unit with the SD card between be connected with communication interface be provided.
A kind of implementation method of transparent encryption and decryption SD card is characterized in that: this method may further comprise the steps:
Step 1), SD card power up, and chip operating system COS starts;
Step 2), chip operating system COS sets up Virtual File System and fictionalizes the data of file system memory sector;
Step 3), external unit send the Card Reader instruction, and Virtual File System calls virtual memory sector data and responds, and external unit and SD card connect;
Step 4), user write PIN code checking password through external application, and chip operating system COS receives PIN code checking password and carries out contrast verification;
Step 5), verify successfully, main control chip carry NandFlash storer then, Virtual File System switches to the encryption and decryption file system, otherwise in the carry NandFlash storer, the user can't not visit the data in the NandFlash storer to main control chip;
Step 6), user are sent read write command through external application, and chip operating system COS calls the encryption and decryption file system and the file in the NandFlash storer is deciphered supplied the user to read or the data that write are encrypted the memory block that deposits in the NandFlash storer;
Shutdown system is accomplished in the step 7) operation.
In the step 5), need the number of times of password authentication be limited, surpass the checking number of times, then can stick into the row locking, need carry out release and could normally use once more SD.
Characteristics of the present invention and good effect are following: the first, and adopting Virtual File System is between external unit and the SD card interface to be provided, and need not installing drive and just can realize that external unit is connected with communication between the SD card; The second, through the file encryption-decryption system, the data that deposit in are encrypted, make the data of SD card memory area with the stored in form of ciphertext, effectively ensured the safety of SD card storage data; The 3rd, adopt PIN code to carry out password authentication, guarantee that user data not by unauthorized access, has prevented the leakage of information in the SD card; The 4th, not when the password authentication, the user can't visit the NandFlash memory block, has realized the write-protect to the SD card through software mode, crosses with respect to present part SD cartoon and overrides switch control user write operation, more convenient and difficult the SD card is caused damage.
Description of drawings
Fig. 1 is a transparent encryption and decryption SD card structure schematic diagram of the present invention.
Fig. 2 is the implementation method process flow diagram of transparent encryption and decryption SD card of the present invention.
Embodiment
As shown in Figure 1; A kind of transparent encryption and decryption SD card; Comprise SD card main control chip 2 and NandFlash storer 6, it is characterized in that: SD card main control chip 2 has for external unit and is connected the Nand interface 5 that the SDIO of bridge interface 1 and connection SD card main control chip 2 and NandFlash storer 6 are provided with SD card main control chip 2; SD card main control chip 2 also comprises the Virtual File System module 3 and encryption and decryption file system module 4 that realizes through chip operating system COS;
SDIO interface 1 is used for external unit and SD card main control chips 2 such as connection of intelligent mobile phone, computer, and SD card main control chip 2 is used for receiving and fill order as the bridge of external unit and SD card intraware; Nand interface 5 is used for connecting the memory block of SD card main control chip 2 and NandFlash storer 6; NandFlash storer 6 is responsible for the storage of data;
Virtual File System module 3 is file system that fictionalize through chip operating system COS; Virtual File System module 3 can fictionalize the data of file system memory sector; Be used for the read write command that external unit is sent is responded; Realize the normal communication of external unit and SD card; External unit sends the Card Reader instruction, and Virtual File System responds, and external unit and SD card connect; The full name of COS is Chip Operating System (chip operating system), and the characteristics of the smart card that it is generally tightly served round it are developed;
The encryption and decryption file system is carried out encryption and decryption through the close algorithm of state to the data that write or read, and the feasible data that write are with the stored in form of ciphertext; The user sends reading command through external application; After COS reads in the NandFlash storer sector data and calls the encryption and decryption file system file is deciphered; Send to external unit through the SDIO interface, resolve to readable documents through application program and supply the user to read; The user sends through external application and writes instruction; After COS reads in the NandFlash storer sector data and calls the encryption and decryption file system data that write are encrypted; Send to the NandFlash storer through the Nand interface, the data that write with the stored in form of ciphertext in the NandFlash storer.
Described transparent encryption and decryption is meant data in use, and system carries out encryption and decryption operation to data automatically, does not change the user to the visit of file (open, reading and writing etc.) custom; Need not user's intervention; Apparently, the file of access encrypted is basic identical with visit unencrypted file, and therefore these encrypt files are " transparent " concerning validated user; But, also can't use even obtain encrypt file through nonconventional approaches for the user who does not have access rights.
Described Virtual File System 3 is for being connected between external unit and the SD card and communication provides interface.
As shown in Figure 2, a kind of implementation method of transparent encryption and decryption SD card is characterized in that:
This method may further comprise the steps:
Step 1) SD card powers up, COS system start-up;
Step 2) COS sets up Virtual File System 3 and fictionalizes the data of file system memory sector;
The step 3) external unit sends the Card Reader instruction, and Virtual File System 3 calls virtual memory sector data and responds, and external unit and SD card connect;
Step 4) user writes PIN code checking password through external application, and COS receives PIN code checking password and carries out contrast verification;
Step 5) verifies successfully, main control chip 2 carry NandFlash6 then, and Virtual File System 3 switches to file encryption-decryption system 4; Otherwise among the carry NandFlash6, the user can't not visit the data among the NandFlash6 to main control chip 2;
Step 6) user sends read write command through external application, and COS calls file among 4 couples of NandFlash6 of file encryption-decryption system and deciphers and supply the user to read or the data that write are encrypted to deposit in the NandFlash6 memory block;
Shutdown system is accomplished in the step 7) operation.
In the described step 5), need the number of times of password authentication be limited, surpass the checking number of times, then can stick into the row locking, need carry out release and could normally use once more SD.

Claims (5)

1. a transparent encryption and decryption SD card comprises SD card main control chip, NandFlash storer, it is characterized in that:
SD card main control chip has for external unit is connected with SD card main control chip to be provided the SDIO of bridge interface and connects SD card main control chip and the Nand interface of NandFlash storer; SD card main control chip also comprises Virtual File System module and the encryption and decryption file system module of realizing through chip operating system COS; SD card main control chip is used for receiving and fill order as the bridge of external unit and SD card intraware;
The SDIO interface is used for external unit and SD card main control chips such as connection of intelligent mobile phone, computer; The Nand interface is used for connecting the NandFlash memory block of SD card main control chip and NandFlash storer; The NandFlash storer is responsible for the storage of data;
The Virtual File System module is a file system that fictionalizes through chip operating system COS; This Virtual File System module can fictionalize the data of file system memory sector; Be used for the read write command that external unit is sent is responded; Realize the normal communication of external unit and SD card; External unit sends the Card Reader instruction, and Virtual File System responds, and external unit and SD card connect;
The encryption and decryption file system module carries out encryption and decryption through the close algorithm of state to the data that write or read, and the feasible data that write are with the stored in form of ciphertext; The user sends reading command through external application; After chip operating system COS reads in the NandFlash storer sector data and calls the encryption and decryption file system file is deciphered; Send to external unit through the SDIO interface, resolve to readable documents through application program and supply the user to read; The user sends through external application and writes instruction; After chip operating system COS reads in the NandFlash storer sector data and calls the encryption and decryption file system data that write are encrypted; Send to the NandFlash storer through the Nand interface, the data that write with the stored in form of ciphertext in the NandFlash storer.
2. transparent encryption and decryption SD card according to claim 1; It is characterized in that: transparent encryption and decryption is meant data in use, and system carries out encryption and decryption operation to data automatically, does not change the access habits of user to the opening of file, reading and writing; Need not user's intervention; Apparently, the file of access encrypted is basic identical with visit unencrypted file, and these encrypt files are " transparent " concerning validated user; But, also can't use even obtain encrypt file through nonconventional approaches for the user who does not have access rights.
3. transparent encryption and decryption SD card according to claim 1 is characterized in that: Virtual File System be external unit with the SD card between be connected with communication interface be provided.
4. the implementation method of a transparent encryption and decryption SD card, it is characterized in that: this method may further comprise the steps:
Step 1), SD card power up, and chip operating system COS starts;
Step 2), chip operating system COS sets up Virtual File System and fictionalizes the data of file system memory sector;
Step 3), external unit send the Card Reader instruction, and Virtual File System calls virtual memory sector data and responds, and external unit and SD card connect;
Step 4), user write PIN code checking password through external application, and chip operating system COS receives PIN code checking password and carries out contrast verification;
Step 5), verify successfully, main control chip carry NandFlash storer then, Virtual File System switches to the encryption and decryption file system, otherwise in the carry NandFlash storer, the user can't not visit the data in the NandFlash storer to main control chip;
Step 6), user are sent read write command through external application, and chip operating system COS calls the encryption and decryption file system and the file in the NandFlash storer is deciphered supplied the user to read or the data that write are encrypted the memory block that deposits in the NandFlash storer;
Shutdown system is accomplished in the step 7) operation.
5. the implementation method of transparent encryption and decryption SD card according to claim 4 is characterized in that: in the step 5), need the number of times of password authentication be limited, surpass the checking number of times, then can stick into the row locking to SD, need carry out release and could normally use once more.
CN2012103199978A 2012-09-03 2012-09-03 Transparent encryption and decryption secure digital memory card (SD card) and implementation method thereof Pending CN102831081A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2012103199978A CN102831081A (en) 2012-09-03 2012-09-03 Transparent encryption and decryption secure digital memory card (SD card) and implementation method thereof

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2012103199978A CN102831081A (en) 2012-09-03 2012-09-03 Transparent encryption and decryption secure digital memory card (SD card) and implementation method thereof

Publications (1)

Publication Number Publication Date
CN102831081A true CN102831081A (en) 2012-12-19

Family

ID=47334227

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2012103199978A Pending CN102831081A (en) 2012-09-03 2012-09-03 Transparent encryption and decryption secure digital memory card (SD card) and implementation method thereof

Country Status (1)

Country Link
CN (1) CN102831081A (en)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103413562A (en) * 2013-08-09 2013-11-27 珠海市杰理科技有限公司 Wireless audio adapter and audio playing device
CN103699853A (en) * 2013-12-27 2014-04-02 北京大唐智能卡技术有限公司 Smart SD (secure digital memory card) and control system and control method thereof
CN106020999A (en) * 2016-05-31 2016-10-12 广东欧珀移动通信有限公司 Communicating method and equipment in operation system
CN103903042B (en) * 2014-03-25 2017-02-01 杭州晟元数据安全技术股份有限公司 Data flow encryption SD card
CN109190385A (en) * 2018-07-27 2019-01-11 广东九联科技股份有限公司 A kind of file encrypting method of law-enforcing recorder
CN111008389A (en) * 2019-12-05 2020-04-14 成都星时代宇航科技有限公司 Data processing method and device based on file system in satellite

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2003345663A (en) * 2002-05-29 2003-12-05 Fujitsu Ltd Database access control method and program
CN2824145Y (en) * 2005-08-05 2006-10-04 群联电子股份有限公司 Memory card with ID identification
CN101398824A (en) * 2007-09-26 2009-04-01 新奥特硅谷视频技术有限责任公司 Method for implementing data storage by virtual file systems technology after processing
CN101561888A (en) * 2009-05-12 2009-10-21 苏州国芯科技有限公司 Real-time encryption SD card and high-speed encryption/decryption method
CN102136082A (en) * 2010-12-29 2011-07-27 上海爱信诺航芯电子科技有限公司 High-speed and low-power-consumption SD (Secure Digital) card

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2003345663A (en) * 2002-05-29 2003-12-05 Fujitsu Ltd Database access control method and program
CN2824145Y (en) * 2005-08-05 2006-10-04 群联电子股份有限公司 Memory card with ID identification
CN101398824A (en) * 2007-09-26 2009-04-01 新奥特硅谷视频技术有限责任公司 Method for implementing data storage by virtual file systems technology after processing
CN101561888A (en) * 2009-05-12 2009-10-21 苏州国芯科技有限公司 Real-time encryption SD card and high-speed encryption/decryption method
CN102136082A (en) * 2010-12-29 2011-07-27 上海爱信诺航芯电子科技有限公司 High-speed and low-power-consumption SD (Secure Digital) card

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103413562A (en) * 2013-08-09 2013-11-27 珠海市杰理科技有限公司 Wireless audio adapter and audio playing device
CN103699853A (en) * 2013-12-27 2014-04-02 北京大唐智能卡技术有限公司 Smart SD (secure digital memory card) and control system and control method thereof
CN103699853B (en) * 2013-12-27 2017-01-04 北京大唐智能卡技术有限公司 A kind of intelligent SD card and control system thereof and method
CN103903042B (en) * 2014-03-25 2017-02-01 杭州晟元数据安全技术股份有限公司 Data flow encryption SD card
CN106020999A (en) * 2016-05-31 2016-10-12 广东欧珀移动通信有限公司 Communicating method and equipment in operation system
US10656974B2 (en) 2016-05-31 2020-05-19 Guangdong Oppo Mobile Telecommunications Corp., Ltd. Method for communication in operating system and related products
US10664326B2 (en) 2016-05-31 2020-05-26 Guangdong Oppo Mobile Telecommunications Corp., Ltd. Method for communication in operating system and related products
CN109190385A (en) * 2018-07-27 2019-01-11 广东九联科技股份有限公司 A kind of file encrypting method of law-enforcing recorder
CN111008389A (en) * 2019-12-05 2020-04-14 成都星时代宇航科技有限公司 Data processing method and device based on file system in satellite

Similar Documents

Publication Publication Date Title
CN103065102B (en) Data encryption mobile storage management method based on virtual disk
CN101196855B (en) Mobile encrypted memory device and cipher text storage area data encrypting and deciphering processing method
CN1269071C (en) Storage card
US7636844B2 (en) Method and system to provide a trusted channel within a computer system for a SIM device
TWI332629B (en)
CN100437618C (en) Portable information safety device
CN102831081A (en) Transparent encryption and decryption secure digital memory card (SD card) and implementation method thereof
CN101266706B (en) On-demand customized payment terminal
CN101308475A (en) Safe mobile storage system and method of use thereof
CN101984449B (en) Smart card COS operating system
WO2010052722A1 (en) Secure storage device
CN102163267A (en) Solid state disk as well as method and device for secure access control thereof
CN103903042A (en) Data flow encryption SD card
CN105303093A (en) Token verification method for cryptographic smart token
CN201716734U (en) Usb safe storage encryption device
CN103347017A (en) Data processing method and system on chip
CN204669402U (en) A kind of cloud data message encrypting and decrypting system based on USB flash disk
CN103914642A (en) USB (universal serial bus) KEY-based security suite structure system
CN101217366B (en) A digital signature device with write protection
CN103699853B (en) A kind of intelligent SD card and control system thereof and method
CN103150523A (en) Simple embedded-type credible terminal system and method thereof
CN114340051B (en) Portable gateway based on high-speed transmission interface
CN111736770B (en) Embedded secure memory
CN102223227B (en) Safe and intelligent code memory chip and automatic communication file reestablishing method thereof
CN205068458U (en) Card reader of smart card

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20121219