CN105488436A - Mobile storage equipment access method and device - Google Patents

Abstract

The present invention provides a method and device for accessing a mobile storage device. The method includes: configuring a device identifier for a mobile storage device connected to a user terminal, and canceling the device identifier from the associated position of the operating system of the accessed user terminal display, receive an access operation to the mobile storage device, call the first security driver preset in the mobile storage device to perform security verification on the access operation, and after the verification is successful, access the The mobile storage device described above. Since the solution of the embodiment of the present invention does not display the device identification configured for the mobile storage device connected to the user terminal, it is impossible to directly access the mobile storage device through identification of the device identification and related operations, and it is necessary to further call the first security The driver verifies the access operation, and only after the verification is successful, the mobile storage device is allowed to be accessed according to the access operation, thereby ensuring the safety of the mobile storage device.

Description

Method and device for accessing mobile storage device

technical field

The invention relates to the technical field of software, in particular to a mobile storage device access method and a mobile storage device access device.

Background technique

The full name of U-disk is USB flash drive. It is a mobile storage device connected to a terminal device using a USB interface. It has the advantages of large storage capacity, fast data storage speed, small size and convenient use. It is being used by more and more users.

When accessing the U disk, you can insert the U disk into the terminal device, access the U disk by opening the U disk drive letter displayed on the page, store the required data in the U disk or download the required data from the U disk.

However, ordinary U disks do not have any access control for data access operations. As long as the terminal equipment with a USB interface can access the U disk, this U disk access method brings convenience to people, but also brings viruses. Intrusion and information leakage and other issues.

Contents of the invention

In view of the above problems, the present invention is proposed to provide a mobile storage device access method and a mobile storage device access device that overcome the above problems or at least partially solve the above problems.

According to one aspect of the present invention, a method for accessing a mobile storage device is provided, including:

Configuring a device identifier for the mobile storage device connected to the user terminal, and canceling the display of the device identifier at the location associated with the operating system of the connected user terminal;

receiving an access operation to the mobile storage device;

Calling the first security driver preset in the mobile storage device to perform security verification on the access operation, and after the verification is successful, access the mobile storage device according to the access operation.

Optionally, the mobile storage device adopts the NTFS new technology file system.

Optionally, canceling the presentation of the device identifier on the operating system of the accessed user terminal includes:

Modifying the associated setting item of the registry of the operating system of the user terminal to not display the accessed mobile storage device.

Optionally, before receiving the user's access operation on the mobile storage device, the method further includes:

Generate a management interface for the mobile storage device, and display the device identifier and a corresponding login box on the management interface;

Verify the login information entered by the user in the login box, and determine that the verification is successful.

Optionally, the method also includes:

An operation of setting attributes of the mobile storage device in the management interface is received.

Optionally, the receiving operation of accessing the mobile storage device includes:

Generate a folder corresponding to the mobile storage device, and receive an access operation initiated by the user for the folder;

Or, receive an access operation initiated by a certain program according to the device identifier.

Optionally, the calling the first security driver preset in the mobile storage device to perform security verification on the access operation includes:

If the access operation is triggered by the user through the folder, verify that the access operation is a safe operation;

If the access operation is initiated by a certain program according to the device identifier, verify whether the access operation is a safe operation.

Optionally, before the first security driver of the mobile storage device is called to perform security verification on the access operation, the method further includes:

Calling the second driver preset in the mobile storage device to verify whether the access operation is a safe operation.

Optionally, after configuring the device identifier for the accessed mobile storage device, the method further includes:

Associating the device identifier of the mobile storage device with the first secure driver.

Optionally, the accessing the mobile storage device according to the access operation includes:

The access operation is sent to the mobile storage device by accessing the access control interface of the mobile storage device corresponding to the device identifier.

Optionally, the access operation is a read operation, write operation or format operation on the mobile storage device.

According to another aspect of the present invention, a device for accessing a mobile storage device is provided, including:

The device identification canceling module is used to configure the device identification for the mobile storage device connected to the user terminal, and cancel the display of the device identification at the associated position of the operating system of the connected user terminal;

An access operation receiving module, configured to receive an access operation to the mobile storage device;

The security verification module is configured to call the first security driver preset in the mobile storage device to perform security verification on the access operation, and access the mobile storage device according to the access operation after the verification is successful.

Optionally, the mobile storage device adopts the NTFS new technology file system.

Optionally, the device identification canceling module is specifically configured to modify the associated setting item of the registry of the operating system of the user terminal to be a mobile storage device that does not display access.

Optionally, the device also includes:

A management interface generation module, configured to generate a management interface of the mobile storage device before receiving the user's access operation on the mobile storage device, and display the device identifier and a corresponding login box on the management interface;

The login information verification module is used to verify the login information input by the user in the login box, and determine that the verification is successful.

Optionally, the device also includes:

An attribute setting operation receiving module, configured to receive an attribute setting operation on the mobile storage device in the management interface.

Optionally, the access operation receiving module includes:

A folder generating submodule, configured to generate a folder corresponding to the mobile storage device, and receive an access operation initiated by a user for the folder;

Or, the access operation obtaining submodule is configured to receive an access operation initiated by a certain program according to the device identifier.

Optionally, the security verification module includes:

A security operation determination submodule, configured to verify that the access operation is a security operation if the access operation is triggered by the user through a folder;

The security operation verification sub-module is used to verify whether the access operation is a security operation if the access operation is initiated by a certain program according to the device identification.

Optionally, the device also includes:

The second driver calling module is used to call the second driver preset in the mobile storage device before the first security driver preset in the mobile storage device performs security verification on the access operation. Verify that the access operation is a secure operation.

Optionally, the device also includes:

The device identification associating module is configured to associate the device identification of the mobile storage device with the first secure driver after the device identification is configured for the accessed mobile storage device.

Optionally, the security verification module is specifically configured to send the access operation to the mobile storage device by accessing an access control interface of the mobile storage device corresponding to the device identifier.

Optionally, the access operation is a read operation, write operation or format operation on the mobile storage device. Through the embodiment of the present invention, since the device identification configured for the mobile storage device connected to the user terminal is not displayed, it is impossible to directly access the mobile storage device through identification of the device identification and related operations, and it is necessary to further call the first security The driver verifies the access operation, and only after the verification is successful, the mobile storage device is allowed to be accessed according to the access operation, thereby ensuring the safety of the mobile storage device and avoiding problems such as virus intrusion and information leakage.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the specific embodiments of the present invention are enumerated below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating a preferred embodiment and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same parts. In the attached picture:

FIG. 1 shows a flowchart of a method for accessing a mobile storage device according to Embodiment 1 of the present invention;

FIG. 2 shows a flowchart of a method for accessing a mobile storage device according to Embodiment 2 of the present invention;

FIG. 3 shows a structural block diagram of an apparatus for accessing a mobile storage device according to Embodiment 1 of the present invention;

FIG. 4 shows a structural block diagram of an apparatus for accessing a mobile storage device according to Embodiment 2 of the present invention.

detailed description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

Referring to FIG. 1 , it shows a flow chart of the steps of a method for accessing a mobile storage device according to Embodiment 1 of the present invention, which may specifically include the following steps:

Step 101, configuring a device identifier for a mobile storage device connected to a user terminal, and canceling the display of the device identifier at a location associated with an operating system of the connected user terminal.

The user terminal can be a terminal device such as a desktop computer, a notebook computer, a mobile phone, and a PAD, and the terminal device is equipped with a card slot (such as a USB card slot, etc.) for an interface (such as a USB, etc.) to be inserted into. The removable storage device may be a USB flash drive with an interface, a hard disk, or other removable devices that can be used as storage media (such as mobile terminals, etc.). By inserting the interface of the mobile storage device into the card slot of the user terminal, connecting the mobile terminal device and the user terminal, the data reading operation and data writing operation of the user terminal to the mobile storage device can be realized.

The device identifier is a device drive letter, which can be at least one of words, numbers, characters and other identifiers, such as "removable storage device 1". After detecting that the mobile storage device is connected to the user terminal, a device identifier can be configured for the connected mobile storage device as required.

After the device identification is configured for the mobile storage device connected to the user terminal, the traditional method will display the device identification at the location associated with the operating system of the user terminal, for example, displaying the device identification "removable storage" on the page of "My Computer" Device I", etc. However, in the method in the embodiment of the present invention, after the mobile storage device is connected to the user terminal and configured with a device identifier, the display of the device identifier at the associated position of the operating system of the connected user terminal is canceled, that is, the configured device identifier to hide. Since the device ID is not displayed, it is impossible to directly access the mobile storage device by identifying the device ID and related operations. It is necessary to complete subsequent related operations to access the mobile storage device, thereby realizing the control of access to the mobile storage device and ensuring the security of the mobile storage device. Safety.

Step 102, receiving a user's access operation on the mobile storage device.

After the mobile storage device is connected to the user terminal, the user's access operation on the mobile storage device can be received. For example, after configuring the device ID, the generated folder can be displayed on the pop-up page, and the user can initiate an access operation on the displayed folder; after configuring the device ID, other drivers or non-drivers can be received through reverse operations Discover hidden device identifiers, and initiate an access operation on the device identifiers; other access methods may also be used, which are not limited in the present invention. Wherein, the access operation may be an operation such as a read operation, a write operation, or a format operation.

Step 103, call the first security driver preset in the mobile storage device to perform security verification on the access operation, and access the mobile storage device according to the access operation after the verification is successful.

The installation file of the first security driver is preset in the mobile storage device, and the installed first security driver is used for security verification of the access operation. Specifically, after the mobile storage device is connected to the user terminal, the operating system of the user terminal detects whether the first security driver needs to be installed in the user terminal, and when it detects that the first security driver needs to be installed in the user terminal, instructs the user terminal to run The installation file of the first safe driver stored in the storage device is removed, so that the first safe driver is available.

The first driver program is used to verify whether the program initiating the access operation is safe, and then verify whether the access operation is a safe operation.

A first security program list is preset in the terminal server of the mobile storage device for verifying the program that initiates the operation access. Specifically, the first program list can be a white list, and the programs in the white list are safe programs by default. If the program that initiates the access operation hits the white list, then the program is a safe program; it can also be a black list, and the black list is default. The program in is a dangerous program. If the program that initiates the access operation hits the blacklist, it means that the program is a dangerous program. Other verification methods may also be used, which are not limited in the present invention.

When verifying the access operation, the first security driver can be called to verify whether the application program or driver that initiates the access operation belongs to the first security program list. At this time, the first security program list is a white list. If it belongs, the access operation is determined to be safe operation, the mobile storage device may be further accessed according to the access operation; if not, determine that the access operation is a dangerous operation, and prevent access to the mobile storage device.

In actual operation, the device identification of the mobile storage device may be associated with the first security driver, and the mobile storage device corresponding to the associated device identification may be accessed after the first security driver successfully verifies the access operation operate.

According to the embodiment of the present invention, since the device identification configured for the mobile storage device connected to the user terminal is not displayed, the mobile storage device cannot be directly accessed through the identification of the device identification and related operations, and it is necessary to further call the first security The driver verifies the access operation, and only after the verification is successful, the mobile storage device is allowed to be accessed according to the access operation, thereby ensuring the safety of the mobile storage device and avoiding problems such as virus intrusion and information leakage.

Referring to FIG. 2, it shows a flowchart of a method for accessing a mobile storage device according to Embodiment 2 of the present invention, which may specifically include the following steps:

Step 201, generating a management interface of a mobile storage device, and displaying the device identifier and a corresponding login box on the management interface.

In the embodiment of the present invention, before the mobile storage device is connected to the user terminal, the access management client installed on the user terminal may be opened according to a preset operation to generate a management interface of the mobile storage device.

The management interface is an information configuration interface. In the management interface, the device ID of the mobile storage device and the corresponding login box can be displayed. The login box can display multiple attribute information and associated input fields, such as device manufacturer information and device serial number. Attribute information such as unit information, department information, user information, and remark information; attribute information such as initial password, number of password attempts, and password complexity requirements can also be displayed, as well as input columns configured for each attribute information.

In a specific operation, for a mobile storage device accessed for the first time, the property setting operation of the mobile storage device in the management interface can be received, and the registration of the mobile storage device can be completed by configuring property information in the management interface. The registration information of the mobile storage device is stored in the login server of the user terminal for viewing, and the registration behavior of the mobile storage device can be recorded in the login server in the form of a log.

For a mobile storage device that is not accessed for the first time, attribute information can be input in the generated management interface to generate login information for the mobile storage device. Through preset operations in the management interface, such as clicking the "OK" button, Submit the login information entered.

In actual operation, mobile storage devices can use the NTFS new technology file system. Compared with the commonly used FAT32 file system, the NTFS new technology file system has a larger memory and can store files on multiple hard disks. At the same time, NTFS can provide various FAT An advanced file system with performance, security, reliability, and advanced features not available in the previous version. For example, NTFS ensures volume consistency through standard transaction logging features and recovery techniques. If the system fails, NTFS can use the log file and checkpoint information to restore the consistency of the file system. In Windows2000 and WindowsXP, NTFS can also provide advanced features such as file and folder permissions, encryption, disk quotas, and compression.

Step 202, verify the login information entered by the user in the login box, and determine that the verification is successful.

After receiving the login information input by the user in the login box of the management interface, the login information is verified to verify whether the login information is correct, and if it is correct, it is determined that the verification is successful.

When specifically verifying the login information, the registration information of the mobile storage device can be read from the back-end server of the user terminal, and it is judged whether the login information of the mobile storage device is consistent with the registration information. The access operation of the mobile storage device; if inconsistent, it will be determined that the verification fails, and the user's access operation to the mobile storage device is prohibited from being accepted.

Step 203, configuring a device identifier for the mobile storage device connected to the user terminal, and canceling the display of the device identifier at the location associated with the operating system of the connected user terminal.

After the device identification is configured for the mobile storage device, the device identification is not displayed. For example, the device identification can be hidden by modifying the associated setting item in the registry of the operating system of the user terminal to not display the connected mobile storage device. For example, you can look up the path HKEY_CURRENT_USER→Software→Microsoft→Windows→CurrentVersion→Ploicies→Explorer in the registry, find the “NoDrives” option and delete it, thereby hiding the device identification. The device identification can also be hidden in other ways, which is not limited in the present invention.

Step 204, receiving an access operation on the mobile storage device.

In a specific implementation, after the device identifier is configured, the folder corresponding to the mobile storage device can be generated, and the access operation initiated by the user on the folder can be received, for example, the generated folder can be displayed on a pop-up page, and the user can display the Initiate an access operation to the folder; the path of the folder can also be displayed on the pop-up page for the user to find, such as the path "My Computer/Removable Storage Device I", the user can search for the folder according to the path, and The found folder initiates an access operation.

It is also possible to receive an access operation initiated by a certain program based on the device ID after configuring the device ID, for example, other drivers or non-drivers discover hidden device IDs through reverse operations, and initiate access operations on the device ID; you can also For other receiving methods, the present invention is not limited here. Wherein, the access operation may be a read operation, a write operation, or a format operation.

Step 205, calling a second driver preset in the mobile storage device to verify whether the access operation is a safe operation.

The second driver is used to verify whether the program initiating the access operation is safe, and then verify whether the access operation is a safe operation.

A second security program list is preset in the terminal server of the mobile storage device for verifying the program that initiates the operation access. Specifically, the second program list can be a white list, and the programs in the white list are safe programs by default. If the program that initiates the access operation hits the white list, then the program is a safe program; it can also be a black list, and the black list is default. The program in is a dangerous program. If the program that initiates the access operation hits the blacklist, it means that the program is a dangerous program. Other verification methods may also be used, which are not limited in the present invention.

When the access operation is triggered by a certain program in the user terminal, after receiving the access operation to the mobile storage device, the second security program list can be obtained from the terminal server, and it can be judged whether the program initiating the access operation belongs to the The second security program list. At this time, the second access list is a white list. If it belongs to the list, it is determined that the program that initiates the access operation is a security program, and the access operation is a security operation. Wherein, the first security program list of the first security driver is different from the second security program list of the second security driver, such as different program names, different program classifications, different program sources (such as external network downloads, user terminal original programs, etc.), The program size is different and others are different, and the present invention is not limited here. Two security drivers are used to verify the access operation respectively, which further guarantees the security of the mobile storage device.

In a specific operation, the way of triggering the access request may be initiated by the user for the folder, initiated by a certain program according to the device identifier, or in other applicable ways. If the access operation is triggered by the user through the folder, verify that the access operation is a security operation, that is, do not call the second security driver to perform security verification on the access operation; if the access operation is performed by a program according to the If the device identification is initiated, verify whether the access operation is a safe operation, for example, judge whether the program that initiated the access operation is in the second safe program list, if so, the verification is successful, and then call the first safe driver to verify the Whether the access operation is safe.

Step 206, call the first security driver preset in the mobile storage device to perform security verification on the access operation, and access the mobile storage device according to the access operation after the verification is successful.

In a specific operation, the way of triggering the access operation may be initiated by the user for the folder, initiated by a certain program according to the device identifier, or in other applicable ways. If the access operation is triggered by the user through the folder, the access operation is released, that is, the first security driver is not called to perform security verification on the access operation; if the access operation is initiated by a program according to the device identification , then verify whether the access operation is a safe operation, for example, determine whether the program initiating the access operation is in the first list of safe programs, and if so, the verification is successful.

The mobile storage device has a built-in main control chip, and the main control chip is provided with one or more access control interfaces. By accessing the access control interface of the mobile storage device corresponding to the device identification, it can perform data transmission with other devices, and the access The operation is sent to the mobile storage device; further, the main control chip can process the data according to the access operation, and feed back the processed data to the user terminal connected to it through the access control interface.

According to the embodiment of the present invention, since the device identification configured for the mobile storage device connected to the user terminal is not displayed, the mobile storage device cannot be directly accessed through the identification of the device identification and related operations, and it is necessary to further call the first security The driver verifies the access operation, and only after the verification is successful, the mobile storage device is allowed to be accessed according to the access operation, thereby ensuring the safety of the mobile storage device and avoiding problems such as virus intrusion and information leakage.

Referring to FIG. 3 , it shows a structural block diagram of a device for accessing a mobile storage device according to Embodiment 1 of the present invention, which may specifically include the following modules:

The device identification canceling module 301 is configured to configure a device identification for a mobile storage device connected to a user terminal, and cancel the display of the device identification at a location associated with an operating system of the connected user terminal.

An access operation receiving module 302, configured to receive an access operation on the mobile storage device.

The security verification module 303 is configured to call the first security driver preset in the mobile storage device to perform security verification on the access operation, and access the mobile storage device according to the access operation after the verification is successful.

According to the embodiment of the present invention, since the device identification configured for the mobile storage device connected to the user terminal is not displayed, the mobile storage device cannot be directly accessed through the identification of the device identification and related operations, and it is necessary to further call the first security The driver verifies the access operation, and only after the verification is successful, the mobile storage device is allowed to be accessed according to the access operation, thereby ensuring the safety of the mobile storage device and avoiding problems such as virus intrusion and information leakage.

Referring to FIG. 4 , it shows a structural block diagram of a device for accessing a mobile storage device according to Embodiment 2 of the present invention, which may specifically include the following modules:

The management interface generating module 401 is configured to generate a management interface of the mobile storage device before receiving the user's access operation on the mobile storage device, and display the device identifier and a corresponding login box on the management interface.

The login information verification module 402 is configured to verify the login information input by the user in the login box, and determine that the verification is successful.

The device identification canceling module 403 is configured to configure a device identification for the mobile storage device connected to the user terminal, and cancel the display of the device identification at the position associated with the operating system of the connected user terminal.

An access operation receiving module 404, configured to receive an access operation on the mobile storage device.

The second driver calling module 405 is used to call the second driver preset in the mobile storage device before the first security driver preset in the mobile storage device performs security verification on the access operation. The program verifies whether said access operation is a safe operation.

The security verification module 406 is configured to call the first security driver preset in the mobile storage device to perform security verification on the access operation, and access the mobile storage device according to the access operation after the verification is successful.

In the embodiment of the present invention, preferably, the mobile storage device adopts the NTFS new technology file system.

In the embodiment of the present invention, preferably, the device identification canceling module 403 is specifically configured to modify the associated setting item of the registry of the operating system of the user terminal to be a mobile storage device that does not display access.

In the embodiment of the present invention, preferably, the device further includes:

An attribute setting operation receiving module, configured to receive an attribute setting operation on the mobile storage device in the management interface.

In the embodiment of the present invention, preferably, the access operation receiving module 404 includes:

A folder generating submodule, configured to generate a folder corresponding to the mobile storage device, and receive an access operation initiated by a user for the folder;

Or, the access operation obtaining submodule is configured to receive an access operation initiated by a certain program according to the device identifier.

In the embodiment of the present invention, preferably, the security verification module 406 includes:

A security operation determination submodule, configured to verify that the access operation is a security operation if the access operation is triggered by the user through a folder;

The security operation verification sub-module is used to verify whether the access operation is a security operation if the access operation is initiated by a certain program according to the device identification.

In the embodiment of the present invention, preferably, the device further includes:

The device identification associating module is configured to associate the device identification of the mobile storage device with the first secure driver after the device identification is configured for the accessed mobile storage device.

In the embodiment of the present invention, preferably, the security verification module 406 is specifically configured to send the access operation to the mobile storage device by accessing the access control interface of the mobile storage device corresponding to the device identifier.

In the embodiment of the present invention, preferably, the access operation is a read operation, a write operation or a format operation on the mobile storage device.

According to the embodiment of the present invention, since the device identification configured for the mobile storage device connected to the user terminal is not displayed, the mobile storage device cannot be directly accessed through the identification of the device identification and related operations, and it is necessary to further call the first security The driver verifies the access operation, and only after the verification is successful, the mobile storage device is allowed to be accessed according to the access operation, thereby ensuring the safety of the mobile storage device and avoiding problems such as virus intrusion and information leakage.

As for the above embodiment of the geographical location-based incoming call management apparatus, since it is basically similar to the method embodiment, the description is relatively simple, and for relevant parts, please refer to part of the description of the method embodiment.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other.

It is easy for those skilled in the art to think that: any combination of the above-mentioned embodiments is feasible, so any combination of the above-mentioned embodiments is the embodiment of the present invention, but due to space limitations, this description will be limited here Not detailed one by one.

The geographic location-based call management solution provided herein is not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct a system having the solution of the present invention is apparent from the above description. Furthermore, the present invention is not specific to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline this disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the invention are sometimes grouped together in a single embodiment, figure, or its description. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method or method so disclosed may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments described herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. and form different embodiments. For example, in the claims, any one of the claimed embodiments can be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement some or all functions of some or all components in the mobile storage device access solution according to the embodiment of the present invention. The present invention can also be implemented as an apparatus or an apparatus program (for example, a computer program and a computer program product) for performing a part or all of the methods described herein. Such a program for realizing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet site, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names.

The invention discloses A1, a mobile storage device access method, which includes:

Configuring a device identifier for the mobile storage device connected to the user terminal, and canceling the display of the device identifier at the location associated with the operating system of the connected user terminal;

receiving an access operation to the mobile storage device;

Calling the first security driver preset in the mobile storage device to perform security verification on the access operation, and after the verification is successful, access the mobile storage device according to the access operation.

A2. The method according to A1, wherein the mobile storage device adopts the NTFS new technology file system.

A3. The method according to A1, wherein the canceling the presentation of the device identification on the operating system of the accessed user terminal includes:

Modifying the associated setting item of the registry of the operating system of the user terminal to not display the accessed mobile storage device.

A4. The method according to A1, wherein, before receiving the user's access operation on the mobile storage device, the method further includes:

Generate a management interface for the mobile storage device, and display the device identifier and a corresponding login box on the management interface;

Verify the login information entered by the user in the login box, and determine that the verification is successful.

A5. The method according to A4, wherein the method also includes:

An operation of setting attributes of the mobile storage device in the management interface is received.

A6. The method according to A1, wherein the receiving an access operation to the mobile storage device includes:

Generate a folder corresponding to the mobile storage device, and receive an access operation initiated by the user for the folder;

Or, receive an access operation initiated by a certain program according to the device identifier.

A7. The method according to A6, wherein the calling the first security driver preset in the mobile storage device to perform security verification on the access operation includes:

If the access operation is triggered by the user through the folder, verify that the access operation is a safe operation;

If the access operation is initiated by a certain program according to the device identifier, verify whether the access operation is a safe operation.

A8. The method according to A1, wherein, before the first security driver preset in the mobile storage device performs security verification on the access operation, the method further includes:

Calling the second driver preset in the mobile storage device to verify whether the access operation is a safe operation.

A9. The method according to A1, wherein, after configuring the device identifier for the accessed mobile storage device, the method further includes:

Associating the device identifier of the mobile storage device with the first secure drive.

A10. The method according to A1, wherein said accessing said mobile storage device according to said access operation comprises:

The access operation is sent to the mobile storage device by accessing the access control interface of the mobile storage device corresponding to the device identifier.

A11. The method according to A1, wherein the access operation is a read operation, write operation or format operation on the mobile storage device.

The present invention also discloses B12, a device for accessing mobile storage devices, which includes:

The device identification canceling module is used to configure the device identification for the mobile storage device connected to the user terminal, and cancel the display of the device identification at the associated position of the operating system of the connected user terminal;

An access operation receiving module, configured to receive an access operation to the mobile storage device;

The security verification module is configured to call the first security driver preset in the mobile storage device to perform security verification on the access operation, and access the mobile storage device according to the access operation after the verification is successful.

B13. The device according to B12, wherein the mobile storage device adopts the NTFS new technology file system.

B14. The device according to B12, wherein:

The device identification canceling module is specifically configured to modify the association setting item of the registry of the operating system of the user terminal to not display the accessed mobile storage device.

B15. The device according to B12, wherein the device also includes:

A management interface generation module, configured to generate a management interface of the mobile storage device before receiving the user's access operation on the mobile storage device, and display the device identifier and a corresponding login box on the management interface;

The login information verification module is used to verify the login information input by the user in the login box, and determine that the verification is successful.

B16. The device according to B15, wherein the device also includes:

An attribute setting operation receiving module, configured to receive an attribute setting operation on the mobile storage device in the management interface.

B17. The device according to B12, wherein the access operation receiving module includes:

A folder generating submodule, configured to generate a folder corresponding to the mobile storage device, and receive an access operation initiated by a user for the folder;

Or, the access operation obtaining submodule is configured to receive an access operation initiated by a certain program according to the device identifier.

B18. The device according to B17, wherein the safety verification module includes:

A security operation determination submodule, configured to verify that the access operation is a security operation if the access operation is triggered by the user through a folder;

The security operation verification sub-module is used to verify whether the access operation is a security operation if the access operation is initiated by a certain program according to the device identification.

B19. The device according to B12, wherein the device also includes:

The second driver calling module is used to call the second driver preset in the mobile storage device before the first security driver preset in the mobile storage device performs security verification on the access operation. Verify that the access operation is a secure operation.

B20, the device according to B12, wherein the device also includes:

The device identification associating module is configured to associate the device identification of the mobile storage device with the first secure driver after the device identification is configured for the accessed mobile storage device.

B21. The device according to B12, wherein:

The security verification module is specifically configured to send the access operation to the mobile storage device by accessing the access control interface of the mobile storage device corresponding to the device identifier.

B22. The apparatus according to B12, wherein the access operation is a read operation, write operation or format operation to the mobile storage device.

Claims (10)

1. a movable storage device access method, wherein, comprising:

The movable storage device configuration device of access user terminal is identified, and cancels the displaying of described device identification at the operating system relative position of accessed user terminal;

Receive the accessing operation to described movable storage device;

Call and be preset at first of described movable storage device and drive safely safety verification is carried out to described accessing operation, and after being proved to be successful, access described movable storage device according to described accessing operation.

2. method according to claim 1, wherein, described movable storage device adopts NTFS New Technology File System.

3. method according to claim 1, wherein, the described device identification of described cancellation comprises in the displaying of the operating system of accessed user terminal:

The association setting option revising the registration table of the operating system of described user terminal is the movable storage device not showing access.

4. method according to claim 1, wherein, before described reception user is to the accessing operation of described movable storage device, described method also comprises:

Generate the administration interface of movable storage device, and in described administration interface, show the login frame of described device identification and correspondence;

The log-on message that user inputs in login frame is verified, and determines to be proved to be successful.

5. method according to claim 4, wherein, described method also comprises:

Be received in described administration interface and the setup of attribute of described movable storage device is operated.

6. method according to claim 1, wherein, the accessing operation of described reception to described movable storage device comprises:

Generate the file that described movable storage device is corresponding, receive the accessing operation that user initiates for described file;

Or, receive the accessing operation that certain program is initiated according to described device identification.

7. method according to claim 6, wherein, described in call and be preset at first of described movable storage device and drive safely and safety verification is carried out to described accessing operation comprise:

If described accessing operation is triggered by file by user, then verify that described accessing operation is safe operation;

If described accessing operation is initiated according to described device identification by certain program, then verify whether described accessing operation is safe operation.

8. method according to claim 1, wherein, be preset at before first of described movable storage device drives safely and carry out safety verification to described accessing operation described calling, described method also comprises:

Call the second driver being preset at described movable storage device and verify whether described accessing operation is safe operation.

9. method according to claim 1, wherein, after the described mark of the movable storage device configuration device to access, described method also comprises:

The device identification of described movable storage device and described first is driven safely and associates.

10. a movable storage device access means, wherein, comprising:

Module is cancelled in device identification, for identifying the movable storage device configuration device of access user terminal, and cancels the displaying of described device identification at the operating system relative position of accessed user terminal;

Accessing operation receiver module, for receiving the accessing operation to described movable storage device;

Secure verification module, is preset at first of described movable storage device and drives for calling safely and carry out safety verification to described accessing operation, and after being proved to be successful, access described movable storage device according to described accessing operation.