CN103677668A

CN103677668A - Method and device for detecting mobile storage equipment

Info

Publication number: CN103677668A
Application number: CN201310628626.2A
Authority: CN
Inventors: 何博; 宁敢; 张聪
Original assignee: Beijing Qihoo Technology Co Ltd; Qizhi Software Beijing Co Ltd
Current assignee: Beijing Qizhi Business Consulting Co ltd; Beijing Qihoo Technology Co Ltd; 360 Digital Security Technology Group Co Ltd
Priority date: 2013-11-29
Filing date: 2013-11-29
Publication date: 2014-03-26
Anticipated expiration: 2033-11-29
Also published as: CN103677668B

Abstract

The invention discloses a method and a device for detecting mobile storage equipment. The method includes enabling a server to receive hardware attribute information of the mobile storage equipment; enabling the server to search a detection result corresponding to the mobile storage equipment in a preset mobile storage equipment detection library according to the hardware attribute information; enabling the server to return the detection result of the mobile storage equipment. The hardware attribute information of the mobile storage equipment is uploaded by a client when the mobile storage equipment accesses the client. The method and the device have the advantage that the mobile storage equipment detection rate can be quickly increased.

Description

Method and device for detecting mobile storage device

Technical Field

The invention relates to the technical field of mobile storage equipment, in particular to a method and a device for detecting the mobile storage equipment.

Background

The development of the information age prompts people to have larger and larger demand for electronic information, the electronic information is inevitably moved and carried in daily study, work and life, and the function of a mobile storage device is increased. However, some illegal manufacturers use a mass production tool software to change the master information on the removable storage device in order to earn violence, and mark the removable storage device capacity much larger than its actual capacity, and when the actual capacity of the removable storage device is smaller than or equal to 90% of its nominal capacity, the removable storage device is identified as a water shrink disk with quality problems.

At present, a common authentication method is to directly copy some large-capacity files on a computer, and if the files on the mobile storage device are found not to be opened normally, the device may be a water-shrinkage disc.

However, the method for identifying the shrink disk consumes a lot of time for the user because the user needs to read and write large-capacity data on the mobile storage device, and the service life of the mobile storage device is easily reduced because the user often reads and writes data on the mobile storage device for a long time.

Disclosure of Invention

In view of the above problems, the present invention is proposed to provide a method for mobile storage device detection, which overcomes or at least partially solves the above problems, and a corresponding apparatus for mobile storage device detection.

According to an aspect of the present invention, there is provided a method for detecting a mobile storage device, including:

the server side receives the hardware attribute information of the mobile storage device uploaded by the client side when the mobile storage device is accessed;

the server side searches a detection result corresponding to the mobile storage equipment in a preset mobile storage equipment detection library according to the hardware attribute information;

and the server side returns the detection result of the mobile storage equipment.

Optionally, the hardware attribute information includes vendor identification VID, device identification PID, serial number, interface type, and/or master boot record MBR snapshot.

Optionally, the preset mobile storage device detection library is generated by:

the server side judges the risk level of the current mobile storage equipment according to the hardware attribute information and extracts a corresponding detection rule according to the risk level;

the server side adopts the detection rule to initiate the detection of the mobile storage device accessed to the client side, and obtains the detection result of the mobile storage device;

the server side adds a blacklist label or a white list label to the detection result to generate detection result information;

and the server side writes the hardware attribute information and the corresponding detection result information into a preset mobile storage device detection library.

Optionally, the detection result includes that the mobile storage device is a normal device, or the mobile storage device is an abnormal device, the preset mobile storage device detection library includes hardware attribute information of the mobile storage device and corresponding detection result information, and the detection result information includes a blacklist tag or a whitelist tag;

the step that the server side searches a detection result corresponding to the mobile storage device in a preset mobile storage device detection library according to the hardware attribute information comprises the following steps:

the server side searches detection result information corresponding to the hardware attribute information in a preset mobile storage device detection library;

if the detection result information is extracted to have a white list label, obtaining that the mobile storage device is a normal device according to the detection result corresponding to the mobile storage device;

if the detection result information is extracted to have the blacklist label, the detection result corresponding to the mobile storage device is obtained, and the mobile storage device is an abnormal device.

Optionally, the detection result includes normal equipment, poor-quality aging equipment, unknown equipment, suspected shrinking equipment, and/or shrinking equipment; the preset mobile storage device detection library comprises hardware attribute information of the mobile storage device and a corresponding detection result;

when the server side finds that the detection result corresponding to the hardware attribute information is normal equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is normal equipment;

and/or the presence of a gas in the gas,

when the server side searches a preset mobile storage device detection library for that the detection result corresponding to the hardware attribute information is the poor-quality aging device, obtaining that the detection result corresponding to the mobile storage device is the poor-quality aging device;

and/or the presence of a gas in the gas,

when the server side finds that the detection result corresponding to the hardware attribute information is unknown equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is unknown equipment;

and/or the presence of a gas in the gas,

when the server side finds that the detection result corresponding to the hardware attribute information is suspected shrinking equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is suspected shrinking equipment;

and/or the presence of a gas in the gas,

when the server side finds that the detection result corresponding to the hardware attribute information is the shrinking device in a preset mobile storage device detection library, the detection result corresponding to the mobile storage device is obtained, and the mobile storage device is the shrinking device.

Optionally, the detection result includes that the mobile storage device is a normal device, or the mobile storage device is an abnormal device, the preset mobile storage device detection library includes hardware attribute information of the mobile storage device and a corresponding intermediate detection result, and the intermediate detection result includes a normal device, an inferior aging device, an unknown device, a suspected shrinking device, and/or a shrinking device;

when the server side finds that the intermediate detection result corresponding to the hardware attribute information is normal equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is normal equipment;

and/or the presence of a gas in the gas,

when the server side finds that the intermediate detection result corresponding to the hardware attribute information is the inferior aging equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is that the mobile storage equipment is abnormal equipment;

and/or the presence of a gas in the gas,

when the server side finds that the intermediate detection result corresponding to the hardware attribute information is unknown equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is abnormal equipment;

and/or the presence of a gas in the gas,

when the server side finds that the intermediate detection result corresponding to the hardware attribute information is suspected shrinking equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is abnormal equipment;

and/or the presence of a gas in the gas,

when the server side finds that the intermediate detection result corresponding to the hardware attribute information is the shrinkage device in a preset mobile storage device detection library, the detection result corresponding to the mobile storage device is obtained, and the mobile storage device is the abnormal device.

According to another aspect of the present invention, there is provided an apparatus for mobile storage device detection, including:

the receiving module is positioned at the server side and is suitable for receiving the hardware attribute information of the mobile storage device uploaded by the client side when the mobile storage device is accessed;

the search module is positioned at the server side and is suitable for searching a detection result corresponding to the mobile storage equipment in a preset mobile storage equipment detection library according to the hardware attribute information;

and the return module is positioned at the server side and is suitable for returning the detection result of the mobile storage equipment.

Optionally, the apparatus further comprises:

the acquisition module is positioned at the server side and is suitable for the server side to receive the hardware attribute information of the mobile storage equipment uploaded by the client side when the mobile storage equipment is accessed;

the judging module is positioned at the server side and is suitable for judging the risk level of the current mobile storage equipment according to the hardware attribute information and extracting a corresponding detection rule according to the risk level;

the detection module is positioned at the server side and is suitable for initiating the detection of the mobile storage device accessed to the client side by adopting the detection rule to obtain the detection result of the mobile storage device;

the adding module is positioned at the server side and is suitable for adding a blacklist label or a whitelist label to the detection result to generate detection result information;

and the writing module is positioned at the server side and is suitable for writing the hardware attribute information and the corresponding detection result information into a preset mobile storage equipment detection library.

the search module at the server side comprises:

the information searching submodule on the server side is suitable for searching the detection result information corresponding to the hardware attribute information in a preset mobile storage device detection library; if the detection result information is extracted to have a white list label, calling a first detection result obtaining submodule, and if the detection result information is extracted to have a black list label, calling a second detection result obtaining submodule;

a first detection result obtaining submodule, located on the server side, and adapted to obtain that the detection result corresponding to the mobile storage device is that the mobile storage device is a normal device;

and the second detection result obtaining submodule positioned at the server side is suitable for obtaining the detection result corresponding to the mobile storage equipment, and the mobile storage equipment is abnormal equipment.

the search module at the server side comprises: when the detection result corresponding to the hardware attribute information is found to be normal equipment in a preset mobile storage equipment detection library, calling the first detection result obtaining sub-module positioned at the server side, when the detection result corresponding to the hardware attribute information is found to be poor-quality aged equipment in the preset mobile storage equipment detection library, calling the third detection result obtaining sub-module positioned at the server side, when the detection result corresponding to the hardware attribute information is found to be unknown equipment in the preset mobile storage equipment detection library, calling the fourth detection result obtaining sub-module positioned at the server side, when the detection result corresponding to the hardware attribute information is found to be suspected shrink equipment in the preset mobile storage equipment detection library, calling the fifth detection result obtaining sub-module positioned at the server side, when the detection result corresponding to the hardware attribute information is found in a preset mobile storage device detection library to be the shrinkage device, calling a sixth detection result to obtain a sub-module;

and/or the presence of a gas in the gas,

a third detection result obtaining submodule, located at the server side, and adapted to obtain that the mobile storage device is an inferior aging device, where the detection result corresponding to the mobile storage device is obtained;

and/or the presence of a gas in the gas,

a fourth detection result obtaining submodule, located on the server side, and adapted to obtain that the detection result corresponding to the mobile storage device is that the mobile storage device is an unknown device;

and/or the presence of a gas in the gas,

a fifth detection result obtaining submodule, located on the server side, and adapted to obtain that the detection result corresponding to the mobile storage device is that the mobile storage device is a suspected shrinking device;

and/or the presence of a gas in the gas,

and the sixth detection result obtaining submodule, which is positioned at the server side, is suitable for obtaining a detection result corresponding to the mobile storage device, wherein the mobile storage device is a shrinking device.

the search module at the server side comprises: when the intermediate detection result corresponding to the hardware attribute information is found to be normal equipment in a preset mobile storage equipment detection library, calling a first detection result acquisition sub-module, when the intermediate detection result corresponding to the hardware attribute information is found in a preset mobile storage device detection library to be the poor-quality aging device, and/or, when the intermediate detection result corresponding to the hardware attribute information is found in a preset mobile storage device detection library to be unknown device, and/or, when the intermediate detection result corresponding to the hardware attribute information is found in a preset mobile storage device detection library as suspected shrink device, and/or, when the intermediate detection result corresponding to the hardware attribute information is found in a preset mobile storage device detection library to be the shrinkage device, calling the second detection result acquisition submodule positioned on the server side;

The invention relates to a method for detecting a mobile storage device and a device for detecting the mobile storage device. The server side searches a corresponding detection result in a preset mobile storage device detection library according to the hardware attribute information of the mobile storage device and returns the detection result to the client side, so that the problem that the traditional mobile storage device detection takes long time is solved.

The foregoing description is only an overview of the technical solutions of the present invention, and the embodiments of the present invention are described below in order to make the technical means of the present invention more clearly understood and to make the above and other objects, features, and advantages of the present invention more clearly understandable.

Drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are only for purposes of illustrating the preferred embodiments and are not to be construed as limiting the invention. Also, like reference numerals are used to refer to like parts throughout the drawings. In the drawings:

FIG. 1 is a flowchart illustrating a first embodiment of a method for mobile storage device detection according to an embodiment of the present invention;

FIG. 2 is a flow chart illustrating the steps of integrity checking of a mobile storage device according to an embodiment of the present invention;

FIG. 3 is a flowchart illustrating steps of an embodiment two of a method for mobile storage device detection according to an embodiment of the present invention;

FIG. 4 is a flowchart illustrating a third embodiment of a method for mobile storage device detection, according to an embodiment of the present invention;

FIG. 5 is a block diagram illustrating an embodiment of an apparatus for mobile storage device detection according to an embodiment of the present invention;

fig. 6 is a block diagram illustrating an embodiment of an apparatus for detecting a mobile storage device according to an embodiment of the present invention.

Detailed Description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

With the rapid development of electronic commerce, the number of users using internet payment in China has reached more than 2 hundred million, more users tend to purchase electronic devices or other products on the internet, and some users may be deceived by bad merchants to purchase inferior products when purchasing the products, usually based on the price and shape of the products. In order to guarantee the vital interests of the user, when the user purchases products on the internet, the user can be guided to regular online stores and merchants to purchase the products, and corresponding price intervals of the products can be provided for the user. If the user logs in the online store with higher risk, the user can be warned that the online store has higher purchase risk. Of course, the user can also be recommended with the products of trusted manufacturers, and the user is given more diversified choices. To help users avoid risks in advance, some photos of the appearance that have been identified as a poor product (e.g., a compact disc), information about the poor product, and relevant comments of the user may be exposed on the web. In addition, the purchasing link of the inferior product can be stored, and when the website where the user wants to purchase the product is an exposed risk website, the user can be prompted to have risk in purchasing the product at the website.

In a specific implementation, a wind and cloud list of the product can be established. For example, a ranking system can be established according to the popularity of purchasers of products, and a user can select and purchase products with higher reliability according to the weather leaderboard of the products, so that the probability of purchasing inferior products is reduced.

However, even if too many testimonies and related purchasing guidance are made in advance, the product finally purchased by the user cannot be guaranteed to be qualified, certain economic loss is brought to the user, and meanwhile, the development of the network payment industry is hindered. Specifically, if the user starts the online purchase claim-first service to perform online shopping, if the purchased product is found to be a poor product, the user submits the relevant evidence, and after a series of detection processes, if the purchased product is found to be a poor product, the direct economic loss suffered by the user is compensated accordingly.

Therefore, one of the core concepts of the embodiments of the present invention is to collect hardware attribute information of a mobile storage device and corresponding detection result information, create a mobile storage device detection library, and a server side may search for a corresponding detection result in the mobile storage device detection library according to the hardware attribute information of the mobile storage device uploaded by the client side when the mobile storage device is accessed.

Referring to fig. 1, a flowchart illustrating a first step of a method for detecting a mobile storage device according to an embodiment of the present invention is shown, which may specifically include the following steps:

step 101, a server side receives hardware attribute information of a mobile storage device uploaded by a client side when the mobile storage device is accessed;

in a specific implementation, the mobile storage device may include a computer external storage device of any medium, such as a mobile phone, a wireless network card with an additional storage function, a usb disk, and the like.

When a user accesses the mobile storage device to the client side, the client side can upload the hardware attribute information of the mobile storage device to the server side. The hardware attribute information may include vendor identification VID, device identification PID, serial number, interface type, and/or master boot record MBR snapshot, among others. The hardware attribute information is subordinate to the fingerprint information, and other fingerprint information, such as a purchase website, purchase time, price, promotional capacity, detection time when the user detects the mobile device, information when the user detects a machine of the mobile device, an account number used when the user starts an online purchase claim priority mode, and the like, may also be obtained in the embodiment of the present invention.

Specifically, the hardware attribute information of the mobile storage device can be directly extracted from the mobile storage device, and the other fingerprint information can be extracted from a website of the mobile storage device purchased by the user, a local log on the user machine, or a cloud diary.

102, the server side searches a detection result corresponding to the mobile storage device in a preset mobile storage device detection library according to the hardware attribute information;

in a preferred embodiment of the present invention, the preset mobile storage device detection library may be generated by:

step S101, a server side receives hardware attribute information of the mobile storage device uploaded by the client side when the mobile storage device is accessed;

step S102, the server side judges the risk level of the current mobile storage device according to the hardware attribute information, and extracts a corresponding detection rule according to the risk level;

step S103, the server side adopts the detection rule to initiate the detection of the mobile storage device accessed to the client side, and obtains the detection result of the mobile storage device;

step S104, adding a blacklist label or a whitelist label to the detection result by the server side to generate detection result information;

and step S105, the server side writes the hardware attribute information and the corresponding detection result information into a preset mobile storage device detection library.

in a preferred embodiment of the present invention, the step S102 may include the following sub-steps:

substep SS11, the server side searches the risk level corresponding to the hardware attribute information in a preset risk level library;

and a substep SS12, the server side searches a preset detection rule base for the detection rule corresponding to the risk level.

In the embodiment of the present invention, the risk level library may be created by collecting a large number of results of statistics after direct feedback or trusted detection by the user, and hardware attribute information of the mobile storage device and corresponding detection information that are requested from each manufacturer, and is used as a basis for dynamically selecting the detection rule in the embodiment of the present invention. Specifically, the risk level is an evaluation obtained by combining the hardware attribute information and the detection information of the mobile storage device, for example, if the hardware attribute information of the type a mobile storage device finds that the detection information thereof in the risk level library considers that the risk is high, the type a mobile storage device risk level may be classified as a high risk level.

It should be noted that, the embodiment of the present invention does not limit the manner of classifying the risk levels of the mobile storage device, for example, the risk levels may be classified only according to the purchase IP address of the mobile storage device, if it is found that the IP address of the mobile storage device purchased by the user is in a suspicious IP area considered to have a high purchase risk, the probability of purchasing the problematic mobile storage device in the suspicious IP area is high, the purchase risk is high, and the risk level of the mobile storage device may be directly determined to be suspected shrink.

in a preferred embodiment of the invention, when the risk level is a high risk level, the corresponding detection rule may be a result mapping rule,

the step S103 may include the following sub-steps:

sub-step SS21, the server side uses the result mapping rule to extract the hardware attribute information of the mobile storage device accessed to the client side;

and a substep SS22, the server side searches a preset mapping data table for a detection result corresponding to the hardware attribute information.

In particular implementations, if the mobile storage device is determined to be at a high risk level, indicating that the mobile storage device is almost deemed to be a poor product, such as most likely a shrink device, then to save time in detecting the mobile storage device, it may be determined directly that the mobile storage device is a shrink disk.

The water shrinkage disc is also called as a capacity expansion disc or an upgrade disc, and means that illegal manufacturers use software of a production tool to mark the capacity of the mobile storage equipment to be far larger than the actual capacity of the mobile storage equipment, so that violence is obtained by means of fraudulent consumers, and when the actual capacity of the mobile storage equipment is smaller than or equal to 90% of the nominal capacity of the mobile storage equipment, the water shrinkage disc is determined to have quality problems.

The actual capacity of the shrink disk is far smaller than the marked capacity, the shrink disk is ultra-slow in reading and writing speed and can quickly cause insufficient storage space in the use process, and in addition, files written into the shrink disk exceed the actual capacity and cannot be read and used normally, so that troubles such as a series of data loss, work delay and the like can be brought to a user. A good detection method of the mobile storage device is crucial to the user.

In a specific implementation, since data needs to be written and read in the process of detecting the mobile storage, before detecting the mobile storage device, a user can be reminded to backup important data. After the mobile storage device starts to be detected, the user can be reminded of the detection progress of the mobile storage device by using a mode such as a progress detection bar and the like, and the user is reminded to avoid pulling out the mobile storage device, so that the data loss is prevented.

In another preferred embodiment of the present invention, when the risk level is a medium risk level, the corresponding detection rule may be an integrity rule;

the server side adopts the detection rule to initiate detection on the mobile storage device accessed to the client side, and obtaining the detection result of the mobile storage device comprises the following steps:

sub-step SS31, the server side sends a request for detecting the storage space of the mobile storage device to the client side using the integrity rule detection;

sub-step SS32, the server side writes test data in the storage space of the mobile storage device; the size of the test data is a nominal capacity;

sub-step SS33, the server side reads the first data of the mobile storage device;

sub-step SS34, the server side comparing the test data with the first data; when the data of the test data of the mobile storage device, which is consistent with the first data, is greater than a first preset threshold, performing sub-step SS35, when the data of the test data of the mobile storage device, which is consistent with the first data, is less than the first preset threshold and is greater than a second preset threshold, performing sub-step SS36, when the data of the test data of the mobile storage device, which is consistent with the first data, is less than the second preset threshold and is greater than a third preset threshold, performing sub-step SS37, and when the data of the test data of the mobile storage device, which is consistent with the first data, is less than the third preset threshold, performing sub-step SS 38;

substep SS35, the server side obtaining a detection result that the mobile storage device is a normal device;

substep SS36, the server side obtaining a detection result that the mobile storage device is an unknown device;

substep SS37, the server side obtains a detection result that the mobile storage device is a suspected shrink device;

and a substep SS38, the server side obtains a detection result that the mobile storage device is a shrink device.

In a specific implementation, if the mobile storage device is determined to be at the medium risk level, it indicates that the mobile storage device is highly likely to be a poor device, and since the mobile storage device is highly likely to be a poor product, in order to be able to determine whether the mobile storage device is a qualified product, an integrity check algorithm may be used to perform a strict check.

Specifically, data with a labeled capacity size may be stored in the mobile storage device, for example, data of 2G may be written when the labeled capacity of the mobile storage device is 2G, the data of 2G is read, and whether the written and read data changes or not may be checked, specifically, referring to a flowchart of steps of detecting integrity of a mobile storage device of the present invention shown in fig. 2, the steps include:

step 1: writing the file A into the mobile storage device of 2G;

step 2: renaming the file A as a file B on the mobile storage device of 2G;

and step 3: reading the file B from the 2G mobile storage device to a hard disk;

and 4, step 4: and comparing whether the file A is equal to the file B, if so, determining that the mobile storage device is a normal mobile storage device, and if not, determining that the mobile storage device is a shrink disk.

It should be noted that the storage capacity of the mobile storage device is typically 2G, 4G, 8G, 16G … … 2ⁿG is increased in an exponential mode, and the actual capacity of the mobile storage device can be detected more quickly based on the characteristic, and particularly, 2G, 4G, 8G, 16G … … 2 can be detectedⁿThe data of the size G is added to the mobile storage device one by one, for example, if the actual storage space of the mobile storage device is 2G, but its nominal capacity is 16G, if the data of 16G is directly written, it takes a long time. And based on the exponential increasing characteristic of the storage space of the mobile storage device, the 2G data can be added firstly, if the data is not changed, the 4G data is added continuously, if the data is changed when the 4G data is added, the mobile storage device can be judged to be a shrinking device and a shrinking disk. If it is determined that the mobile storage device is a shrink disk, the actual capacity of the mobile storage device can be detected without adding data of the nominal capacity, and the time required for detection is greatly reduced.

In another preferred embodiment of the present invention, when the risk level is a low risk level, the corresponding detection may be a data point rule;

sub-step SS41, the server side sends a request for detecting the storage space of the mobile storage device to the client side by using the data point rule detection;

sub-step SS42, the server side obtains each sector set of the storage space of the mobile storage device;

sub-step SS43, the server side determines whether each sector set of the storage space of the mobile storage device is a normal sector set;

sub-step SS44, the server side calculating the proportion of the normal sector set in the storage space of the mobile storage device;

sub-step SS45, the server side compares the proportion of the normal sector set in the storage space of the mobile storage device with a preset proportion; the preset proportion comprises a first preset proportion, a second preset proportion and a third preset proportion; performing a sub-step SS46 when the proportion of the normal sector set of the storage space of the mobile storage device exceeds a first preset proportion, performing a sub-step SS47 when the proportion of the normal sector set of the storage space of the mobile storage device is smaller than the first preset proportion and larger than a second preset proportion, performing a sub-step SS48 when the proportion of the normal sector set of the storage space of the mobile storage device is smaller than the second preset proportion and larger than a third preset proportion, and performing a sub-step SS49 when the proportion of the normal sector set of the storage space of the mobile storage device is smaller than the third preset proportion;

substep SS46, the server side obtaining a detection result that the mobile storage device is a normal device;

a substep SS47, wherein the server side obtains a detection result that the mobile storage device is an unknown shrink device;

substep SS48, the server side obtains a detection result that the mobile storage device is a suspected shrink device;

and a substep SS49, the server side obtains a detection result that the mobile storage device is a shrink device.

In a specific implementation, a sector is the smallest physical storage unit of a disk in a mobile storage device, and the size of a sector is typically 512 bytes. For example, a 2G removable storage device means that the storage space formed by all sectors in the removable storage device has 2G, for example, a file is stored on a usb disk, and actually the file is allocated to a storage space comprising a plurality of sectors, for example, a 300MB movie is placed on the usb disk, and actually a plurality of sectors are responsible for storing data.

For an nG mobile storage device, the following formula can be used, where n is a positive number:

number of sectors, size of each sector nG 1024 bytes

Therefore, whether a mobile storage device is a shrink disk is checked, and the most essential principle is to confirm whether the number of sectors in the mobile storage device meets the above equation, wherein the shrink disk shrinks and the missing is the number of sectors, and for a shrink disk, the number of sectors in the actual storage space is not enough, for example, even if the mobile storage device is called to have a capacity of 2G, the capacity of actually stored data is definitely less than 2G.

Specifically, the number of sectors in the sector set to be detected is determined by the nominal capacity of the mobile storage device, for example, 100 sectors may be set as the detection object in case of 1G of usb disk, and 400 sectors may be set as the detection object in case of 4G of usb disk.

In a specific implementation, because other sectors outside the sector set in which the random data is written do not intersect with the positions of the sectors in the sector set, in a normal case, the written random data does not intersect with the test data, but, in a case where the mobile storage device is a shrink disk, the capacity of the written random data is greater than the capacity of the sectors used for storing the random data, and therefore the random data occupies the positions of other sectors, for example, occupies the positions of the sector set, so that the random data partially covers the test data, interference is caused to the test data, the read second data is inconsistent with the test data, and therefore, the sector set is proved to be an abnormal sector set.

Specifically, a mobile storage device may have a plurality of sectors according to its capacity, a plurality of sectors may be randomly extracted from these larger number of sectors to form a sector set, a plurality of sector sets may be present in the entire mobile storage device, and these sector sets are approximately evenly distributed and may cover the sector space of the entire mobile storage device, but these sector sets are not continuous, i.e. there is no intersection, for example, the entire mobile storage device has 10000 sectors, a sector set may include 100 sectors, and the distribution of the 100 sectors in 10000 sectors of the entire mobile storage device may be respectively 1-20, 1000-.

In a specific implementation, the random data may be a random code, the other sectors outside the sector set do not intersect with the position of the sector in the sector set, and the other sectors outside the sector set are a plurality of sectors extracted at random.

Because data reading and writing are performed in the detection process of the mobile storage device, and the written or read data may cause the test data written in the storage space of the mobile storage device to be different from the initial data, the test data should be restored to the initial data of the mobile storage device, so that a user can normally use the mobile storage device.

In a preferred embodiment of the present invention, before the step of reading the second data in the sector set, the following sub-steps are further included:

and after exiting the mobile storage device, accessing the mobile storage device again.

In practice, some illegal manufacturers establish a cache mechanism in the mobile storage device for some detection tools, which can influence the detection tools to detect that the mobile storage device is a shrinking device. And through adopting the secondary detection mode of quitting the mobile storage device and accessing again, the actual capacity of the mobile storage device can be calculated more accurately, and the detection accuracy is also greatly improved.

It should be noted that the number of the sector sets may be determined according to the size of the mobile storage device, and the written test data may also be freely selected according to the actual situation, for example, if it is desired to more accurately detect the storage space of the mobile storage device, larger data may be written in the sectors, and in addition, in the embodiment of the present invention, new sectors may be further added on the basis of the already determined sector sets, or more test data may be added for detection, so as to more strictly detect the actual storage space of the mobile storage device, which is not limited by the present invention.

In another preferred embodiment of the present invention, if the server obtains a detection result that the mobile storage device is a normal device, the server side initiates detection on the mobile storage device accessed to the client side by using the detection rule, and the step of obtaining the detection result of the mobile storage device may further include the following sub-steps:

sub-step SS51, the server side detecting the reading speed of the mobile storage device;

sub-step SS52, the server side determines whether the reading speed of the mobile storage device is less than a preset speed threshold; when the reading speed of the mobile storage is less than a preset speed threshold value, executing a sub-step SS 53;

wherein,

the sub-step SS51, that is, the server side may detect the writing speed of the mobile storage device by:

sub-step SS51-11, the server side writing third test data on the mobile storage device;

sub-step SS51-12, the server side calculating a write time required to write the third test data;

sub-step SS51-13, the server side calculates the writing speed of the mobile storage device according to the third test data and the writing time;

in another preferred embodiment of the invention, the writing speed of the mobile storage device can also be detected.

Sub-step SS51, the server side detecting the write speed of the mobile storage device;

in sub-step SS52, the server side determines whether the writing speed of the mobile storage device is less than a preset speed threshold; when the writing speed of the mobile storage is less than a preset speed threshold value, executing a sub-step SS 53;

the sub-step SS51, that is, the server side can detect the reading speed of the mobile storage device by:

substep S51-21, the server side reads the third data of the mobile storage device;

sub-step SS51-22, the server side calculating a reading time required to read the third data;

sub-step SS51-23, the server side calculates the reading speed of the mobile storage device according to the third data and the reading time;

and a substep SS53, wherein the server side obtains a detection result that the mobile storage device is a poor aging device.

In a specific implementation, if a detection result that the mobile storage device is a normal device is generated, whether the mobile storage device is an inferior aged device or not can be further determined by detecting the read-write speed of the mobile storage device. Some mobile storage devices have a low actual read/write speed because the actual capacity is the nominal capacity, but the mobile storage devices may be inferior or aged. The poor quality of the product may be because the manufacturer manufactures the mobile storage device with some poor quality chips, poor quality masters, or some failed-to-manufacture storage devices (e.g., bad blocks exist), and the aged device may be a mobile storage device that is placed too long to be aged.

At present, the read-write speed can determine whether the mobile storage device is bad or aged, specifically, the read speed calculation method can calculate and write a known file, and divide the time for reading the file to obtain the read speed of the mobile storage device. The writing speed is calculated in a similar manner to the reading speed.

After the mobile storage device completes detection, a corresponding blacklist label or whitelist label can be added according to the detection information.

And 103, returning the detection result of the mobile storage device by the server side.

In practical application, a relatively intuitive risk description can be returned to the user aiming at the final detection result. After the detection is finished, for example, if the usb flash drive is finally determined to be a shrink device, a description similar to "your usb flash drive is a shrink device" may be returned.

In order to make those skilled in the art better understand the practical application scenario of the embodiment of the present invention, the following describes, by way of an example of a specific application, a detection process of the present invention after a usb disk is purchased by using an online payment first claim service, where the following is a payment process for the usb disk:

as an example of a specific application of the invention, if the USB flash disk is found to be a shrink device and purchased under the condition that the online shopping first-paying service is opened, once the USB flash disk is defrauded by a phishing website or the online shopping funds are stolen by a Trojan, a rapid claim settlement process can be carried out, and cash compensation can be obtained for the first time after the loss is confirmed.

The specific claim process is as follows: and the user extracts the transaction record of the claim from the cloud online shopping log or the local online shopping log to be used as an online shopping transaction certificate. The user enters an online shopping claims-first background, finds the online shopping records of corresponding time periods needing claim settlement application in the online shopping claims-first log, starts claim settlement application, confirms the selected transaction records, fills in transaction details, fills in corresponding transaction information, writes in personal information, asks for filling in real personal information and fills in other data. Specifically, the information that the user needs to submit includes: user contact, authentication result information and authenticator version, purchase path, commodity purchase address URL, transaction record, journal record, stamped authentication information stamp, user submitted other evidence, etc.

Preferably, the chat history in the online shopping composition can be supplemented, as well as the payment screenshots and other material that prove deceptive. The complete supplementary materials can accelerate the auditing progress. And after confirming that the data is correct, selecting and submitting the data, and waiting for verification, wherein in addition, the user can pay attention to the claim settlement progress in online shopping first claims. If the company responsible for online shopping first claim finds that the company really authenticates the shrink U disk purchased under the condition of online shopping first claim, the user can obtain corresponding compensation. In order to guarantee the benefit of the user, the evaluator used by the user needs to be the current latest version, and a claim settlement application is carried out within a specified period when the user finds that the water shrinkage disc is purchased.

Referring to fig. 3, a flowchart illustrating a second step of a method for detecting a mobile storage device according to an embodiment of the present invention is shown, which may specifically include the following steps:

step 201, a server side receives hardware attribute information of a mobile storage device uploaded by a client side when the mobile storage device is accessed;

in a preferred embodiment of the present invention, the detection result may include that the mobile storage device is a normal device, or that the mobile storage device is an abnormal device, the preset mobile storage device detection library includes hardware attribute information of the mobile storage device and corresponding detection result information, and the detection result information includes a blacklist tag or a whitelist tag;

step 202, the server side searches detection result information corresponding to the hardware attribute information in a preset mobile storage device detection library; if the detection result information is extracted to have a white list label, executing step 203, and if the detection result information is extracted to have a black list label, executing step 204;

step 203, obtaining a detection result corresponding to the mobile storage device, wherein the mobile storage device is a normal device;

step 204, obtaining a detection result corresponding to the mobile storage device, wherein the mobile storage device is an abnormal device;

step 205, the server side returns the detection result of the mobile storage device.

In the embodiment of the present invention, the detection result information in the detection library of the mobile storage device includes a blacklist tag and a whitelist tag, and when it is detected that the corresponding detection result information in the hardware attribute information of the mobile storage device includes the blacklist tag, which indicates that the device is classified as an abnormal device, the server may return the detection result that the mobile storage device is an abnormal device; when detecting that the corresponding detection result information in the hardware attribute information of the mobile storage device includes the white list tag, which indicates that the device is classified as a normal device, the server may return the detection result that the mobile storage device is a normal device.

Referring to fig. 4, a flowchart illustrating a second step of a method for detecting a mobile storage device according to an embodiment of the present invention is shown, which may specifically include the following steps:

step 301, a server side receives hardware attribute information of a mobile storage device uploaded by a client side when the mobile storage device is accessed;

in a preferred embodiment of the present invention, the detection result may include normal devices, poor-quality aging devices, unknown devices, suspected shrinking devices, and/or shrinking devices; the preset mobile storage device detection library comprises hardware attribute information of the mobile storage device and a corresponding detection result;

step 302, when the server side finds that the detection result corresponding to the hardware attribute information is normal equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is normal equipment;

step 303, when the server side finds that the detection result corresponding to the hardware attribute information is an inferior aging device in a preset mobile storage device detection library, obtaining that the detection result corresponding to the mobile storage device is that the mobile storage device is an abnormal device;

step 304, when the server side finds that the detection result corresponding to the hardware attribute information is unknown equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is unknown equipment;

305, when the server side finds that the detection result corresponding to the hardware attribute information is suspected glycidyl equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is suspected glycidyl equipment;

step 306, when the server side finds that the detection result corresponding to the hardware attribute information is a shrinking device in a preset mobile storage device detection library, obtaining that the detection result corresponding to the mobile storage device is the shrinking device.

Step 307, the server side returns the detection result of the mobile storage device.

For part of users, besides the requirement of knowing whether the mobile storage device is normal or not, the requirement of knowing the reason of the abnormality of the mobile storage device is also required, so that the information of whether the mobile storage device is normal or not can be fed back to the user, the specific reason of the abnormality of the mobile storage device can be returned together, and the user experience effect is better.

Referring to fig. 5, a flowchart illustrating a third step of a method for detecting a mobile storage device according to an embodiment of the present invention is shown, which may specifically include the following steps:

step 401, a server side receives hardware attribute information of a mobile storage device uploaded by a client side when the mobile storage device is accessed;

in a preferred embodiment of the present invention, the detection result may include that the mobile storage device is a normal device, or the mobile storage device is an abnormal device, the preset mobile storage device detection library includes hardware attribute information of the mobile storage device and a corresponding intermediate detection result, and the intermediate detection result includes a normal device, an inferior aging device, an unknown device, a suspected shrinking device, and/or a shrinking device;

step 402, when the server side finds that the intermediate detection result corresponding to the hardware attribute information is normal equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is normal equipment;

step 403, when the server side finds that the intermediate detection result corresponding to the hardware attribute information is an inferior aging device in a preset mobile storage device detection library, obtaining that the detection result corresponding to the mobile storage device is that the mobile storage device is an abnormal device;

step 404, when the server side finds that the intermediate detection result corresponding to the hardware attribute information is an unknown device in a preset mobile storage device detection library, obtaining that the detection result corresponding to the mobile storage device is that the mobile storage device is an abnormal device;

step 405, when the server side finds that an intermediate detection result corresponding to the hardware attribute information is suspected glycidyl equipment in a preset mobile storage equipment detection library, obtaining that the detection result corresponding to the mobile storage equipment is abnormal equipment;

step 406, when the server side finds that the intermediate detection result corresponding to the hardware attribute information is a shrinking device in a preset mobile storage device detection library, obtaining that the detection result corresponding to the mobile storage device is abnormal.

Step 407, the server side returns the detection result of the mobile storage device.

For some users, it is only desirable to know whether the mobile storage device is normal, and the reason for the abnormality of the mobile storage device is not concerned, so that the information about whether the mobile storage device is normal can be fed back to the user in the embodiment of the present invention, the specific reason for the abnormality can be omitted, and the user experience effect is better.

It is noted that, for simplicity of explanation, the method embodiments are described as a series of acts or combination of acts, but those skilled in the art will appreciate that the present invention is not limited by the order of acts, as some steps may, in accordance with the present invention, occur in other orders and/or concurrently. Further, those skilled in the art should also appreciate that the embodiments described in the specification are preferred embodiments and that the acts and modules referred to are not necessarily required by the invention.

Referring to fig. 6, a flowchart illustrating steps of an embodiment of an apparatus for detecting a mobile storage device according to an embodiment of the present invention is shown, which may specifically include the following modules:

a receiving module 501 located at the server side and adapted to receive the hardware attribute information of the mobile storage device uploaded by the client side when the mobile storage device is accessed;

in a preferred embodiment of the present invention, the hardware attribute information may include vendor identification VID, device identification PID, serial number, interface type, and/or master boot record MBR snapshot.

The search module 502 on the server side is adapted to search a detection result corresponding to the mobile storage device in a preset mobile storage device detection library according to the hardware attribute information;

in a preferred embodiment of the present invention, the apparatus may further include:

the search module located at the server side may include:

the first detection result obtaining submodule on the server side is suitable for obtaining that the mobile storage device is a normal device according to the detection result corresponding to the mobile storage device;

the second detection result obtaining submodule located at the server side is adapted to obtain that the detection result corresponding to the mobile storage device is that the mobile storage device is an abnormal device.

the search module at the server side comprises: calling the first detection result obtaining sub-module at the server side when the detection result corresponding to the hardware attribute information is found to be normal equipment in a preset mobile storage equipment detection library, calling the third detection result obtaining sub-module at the server side when the detection result corresponding to the hardware attribute information is found to be poor-quality aging equipment in the preset mobile storage equipment detection library, calling the fourth detection result obtaining sub-module at the server side when the detection result corresponding to the hardware attribute information is found to be unknown equipment in the preset mobile storage equipment detection library, calling the fifth detection result obtaining sub-module at the server side when the detection result corresponding to the hardware attribute information is found to be suspected shrinkage equipment in the preset mobile storage equipment detection library, and finding the detection result corresponding to the hardware attribute information to be suspected shrinkage equipment in the preset mobile storage equipment detection library When equipment shrinks, a sixth detection result is called to obtain a submodule;

and/or the presence of a gas in the gas,

the third detection result obtaining submodule on the server side is suitable for obtaining that the mobile storage device is an inferior aging device according to the detection result corresponding to the mobile storage device;

and/or the presence of a gas in the gas,

the fourth detection result obtaining submodule located on the server side is adapted to obtain that the detection result corresponding to the mobile storage device is that the mobile storage device is an unknown device;

and/or the presence of a gas in the gas,

the fifth detection result obtaining submodule on the server side is adapted to obtain that the detection result corresponding to the mobile storage device is that the mobile storage device is a suspected shrinking device;

and/or the presence of a gas in the gas,

the sixth detection result obtaining submodule located on the server side is adapted to obtain that the detection result corresponding to the mobile storage device is that the mobile storage device is a shrinking device.

And a return module 503 on the server side, adapted to return the detection result of the mobile storage device.

For the device embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual machine, or other apparatus. Various general purpose systems may also be used with the teachings herein. The required structure for constructing such a system will be apparent from the description above. Moreover, the present invention is not directed to any particular programming language. It is appreciated that a variety of programming languages may be used to implement the teachings of the present invention as described herein, and any descriptions of specific languages are provided above to disclose the best mode of the invention.

In the description provided herein, numerous specific details are set forth. It is understood, however, that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. However, the disclosed method should not be interpreted as reflecting an intention that: that the invention as claimed requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the detailed description are hereby expressly incorporated into this detailed description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art will appreciate that the modules in the device in an embodiment may be adaptively changed and disposed in one or more devices different from the embodiment. The modules or units or components of the embodiments may be combined into one module or unit or component, and furthermore they may be divided into a plurality of sub-modules or sub-units or sub-components. All of the features disclosed in this specification (including any accompanying claims, abstract and drawings), and all of the processes or elements of any method or apparatus so disclosed, may be combined in any combination, except combinations where at least some of such features and/or processes or elements are mutually exclusive. Each feature disclosed in this specification (including any accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will appreciate that while some embodiments described herein include some features included in other embodiments, rather than other features, combinations of features of different embodiments are meant to be within the scope of the invention and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art will appreciate that a microprocessor or Digital Signal Processor (DSP) may be used in practice to implement some or all of the functions of some or all of the components in a mobile storage device detection device according to embodiments of the present invention. The present invention may also be embodied as apparatus or device programs (e.g., computer programs and computer program products) for performing a portion or all of the methods described herein. Such programs implementing the present invention may be stored on computer-readable media or may be in the form of one or more signals. Such a signal may be downloaded from an internet website or provided on a carrier signal or in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention may be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by one and the same item of hardware. The usage of the words first, second and third, etcetera do not indicate any ordering. These words may be interpreted as names.

A1, a method for detecting a mobile storage device, comprising:

A2, the method of claim a1, wherein the hardware attribute information includes vendor identification VID, device identification PID, sequence number, interface type, and/or master boot record MBR snapshot.

A3, the method according to claim a1 or a2, wherein the preset mobile storage device detection library is generated by:

A4, the method according to claim A3, wherein the detection result includes that the mobile storage device is a normal device, or the mobile storage device is an abnormal device, the preset mobile storage device detection library includes hardware attribute information of the mobile storage device and corresponding detection result information, and the detection result information includes a black list label or a white list label;

A5, the method according to claim A3, wherein the detection result includes normal equipment, poor-quality aged equipment, unknown equipment, suspected shrunk equipment, and/or shrunk equipment; the preset mobile storage device detection library comprises hardware attribute information of the mobile storage device and a corresponding detection result;

and/or the presence of a gas in the gas,

A6, the method according to claim A3, wherein the detection result includes that the mobile storage device is a normal device, or the mobile storage device is an abnormal device, the preset mobile storage device detection library includes hardware attribute information of the mobile storage device and corresponding intermediate detection results, and the intermediate detection results include a normal device, a poor aging device, an unknown device, a suspected shrinking device, and/or a shrinking device;

and/or the presence of a gas in the gas,

B7, an apparatus for detecting a mobile storage device, comprising:

B8, the apparatus of claim B7, wherein the hardware attribute information includes vendor identification VID, device identification PID, sequence number, interface type, and/or master boot record MBR snapshot.

B9, the apparatus of claim B7 or B8, further comprising:

B10, the apparatus according to claim B9, wherein the detection result includes that the mobile storage device is a normal device, or the mobile storage device is an abnormal device, the preset mobile storage device detection library includes hardware attribute information of the mobile storage device and corresponding detection result information, and the detection result information includes a black list tag or a white list tag;

the search module at the server side comprises:

B11, the apparatus according to claim B9, wherein the detection result includes normal devices, bad aged devices, unknown devices, suspected shrunk devices, and/or shrunk devices; the preset mobile storage device detection library comprises hardware attribute information of the mobile storage device and a corresponding detection result;

the search module at the server side comprises: when the detection result corresponding to the hardware attribute information is found to be normal equipment in a preset mobile storage equipment detection library, calling the first detection result obtaining sub-module positioned at the server side, when the detection result corresponding to the hardware attribute information is found to be poor-quality aged equipment in the preset mobile storage equipment detection library, calling the third detection result obtaining sub-module positioned at the server side, when the detection result corresponding to the hardware attribute information is found to be unknown equipment in the preset mobile storage equipment detection library, calling the fourth detection result obtaining sub-module positioned at the server side, when the detection result corresponding to the hardware attribute information is found to be suspected shrink equipment in the preset mobile storage equipment detection library, calling the fifth detection result obtaining sub-module positioned at the server side, when the detection result corresponding to the hardware attribute information is found in a preset mobile storage device detection library to be a shrinking device, calling a sixth detection result obtaining sub-module positioned at the server side;

a first detection result obtaining submodule, which is positioned at the server side and is suitable for obtaining that the detection result corresponding to the mobile storage equipment is that the mobile storage equipment is normal equipment;

and/or the presence of a gas in the gas,

a third detection result obtaining submodule, located on the server side, and adapted to obtain that the mobile storage device is an inferior aging device, where the detection result corresponding to the mobile storage device is obtained;

and/or the presence of a gas in the gas,

and the sixth detection result obtaining submodule which is positioned at the server side is suitable for obtaining the detection result corresponding to the mobile storage equipment, wherein the mobile storage equipment is shrinkage equipment.

B12, the apparatus according to claim B9, wherein the detection result includes that the removable storage device is a normal device, or the removable storage device is an abnormal device, the preset removable storage device detection library includes hardware attribute information of the removable storage device and corresponding intermediate detection results, and the intermediate detection results include a normal device, an inferior aging device, an unknown device, a suspected shrinking device, and/or a shrinking device;

the search module at the server side comprises: when the intermediate detection result corresponding to the hardware attribute information is found in a preset mobile storage device detection library as normal equipment, when the intermediate detection result corresponding to the hardware attribute information is found in the preset mobile storage device detection library as poor-quality aging equipment, and/or when the intermediate detection result corresponding to the hardware attribute information is found in the preset mobile storage device detection library as unknown equipment, and/or when the intermediate detection result corresponding to the hardware attribute information is found in the preset mobile storage device detection library as suspected shrinking equipment, and/or when the intermediate detection result corresponding to the hardware attribute information is found in the preset mobile storage device detection library as shrinking equipment, calling a second detection result to obtain a sub-module;

and the second detection result obtaining submodule on the server side is suitable for obtaining the detection result corresponding to the mobile storage equipment, wherein the mobile storage equipment is abnormal equipment.

Claims

1. A method of mobile storage device detection, comprising:

2. The method of claim 1, wherein the hardware attribute information comprises a Vendor Identification (VID), a device identification (PID), a serial number, an interface type, and/or a Master Boot Record (MBR) snapshot.

3. The method of claim 1 or 2, wherein the preset mobile storage device detection library is generated by:

4. The method according to claim 3, wherein the detection result includes that the mobile storage device is a normal device or the mobile storage device is an abnormal device, the preset detection library of the mobile storage device includes hardware attribute information of the mobile storage device and corresponding detection result information, and the detection result information includes a blacklist tag or a whitelist tag;

5. The method of claim 3, wherein the detection result comprises normal equipment, bad-quality aging equipment, unknown equipment, suspected shrinking equipment, and/or shrinking equipment; the preset mobile storage device detection library comprises hardware attribute information of the mobile storage device and a corresponding detection result;

and/or the presence of a gas in the gas,

6. The method according to claim 3, wherein the detection result includes that the mobile storage device is a normal device or the mobile storage device is an abnormal device, the preset mobile storage device detection library includes hardware attribute information of the mobile storage device and a corresponding intermediate detection result, and the intermediate detection result includes a normal device, an inferior aging device, an unknown device, a suspected shrinking device, and/or a shrinking device;

and/or the presence of a gas in the gas,

7. An apparatus for mobile storage device detection, comprising:

8. The apparatus of claim 7, wherein the hardware attribute information comprises a Vendor Identification (VID), a device identification (PID), a sequence number, an interface type, and/or a Master Boot Record (MBR) snapshot.

9. The apparatus of claim 7 or 8, further comprising:

10. The apparatus of claim 9, wherein the detection result includes that the mobile storage device is a normal device or the mobile storage device is an abnormal device, the preset detection library of the mobile storage device includes hardware attribute information of the mobile storage device and corresponding detection result information, and the detection result information includes a blacklist tag or a whitelist tag;

the search module at the server side comprises: