CN106326753B

CN106326753B - Encryption Hub device realized based on EMMC interface

Info

Publication number: CN106326753B
Application number: CN201610712026.8A
Authority: CN
Inventors: 卞兴中; 左文; 贾宗铭; 周振宇; 张薇薇
Original assignee: Ramaxel Technology Shenzhen Co Ltd
Current assignee: Ramaxel Technology Shenzhen Co Ltd
Priority date: 2016-08-23
Filing date: 2016-08-23
Publication date: 2020-04-28
Anticipated expiration: 2036-08-23
Also published as: CN106326753A

Abstract

The invention provides an encryption Hub device realized based on an EMMC interface, which comprises a Hub encryption and decryption module consisting of a main controller, a Flash module, an encryption and decryption algorithm module and a USB-KEY module; the Hub encryption and decryption module is connected with the EMMC-host through a data bus, and the main controller is connected with the port controller; the EMMC forwarding module is provided with a plurality of EMMC expansion interfaces; the data to be written by the PC host is encrypted by a Hub encryption and decryption module and then written into an EMMC memory connected to a corresponding EMMC expansion interface; and the Hub encryption and decryption module is used for decrypting the encrypted data on the EMMC memory and transmitting the decrypted data to the PC host. Management of a plurality of devices; meanwhile, aiming at the risk of intercepting the data on the transmission channel, a special hardware encryption and decryption module and a USB-KEY module are added into the Hub, so that the interaction with the user is completed, the encryption on the EMMC data transmission channel is realized, and the safety of the data and the flexibility of the user use are greatly improved.

Description

Encryption Hub device realized based on EMMC interface

Technical Field

The invention relates to the field of data transmission safety, in particular to an encryption Hub device realized based on an EMMC interface.

Background

In the era of high-speed development of electronic information, people pay more and more attention to information security, the range of information security is wide, the information security reaches national military and political secrets, the information security reaches enterprise secrets and personal information, and any security hole can cause information leakage. The information is transmitted in various ways, and the information is stored, processed and exchanged, so that the possibility of disclosure or interception, eavesdropping, tampering and counterfeiting exists. The single security measure is also difficult to ensure the security of communication and information, and the protection of three links of information source, signal and information must be realized by comprehensively applying various levels of security measures.

In the field of EMMC storage, one-to-one communication is usually realized through an EMMC interface, and management of multiple EMMC devices cannot be realized at the same time, so that people have higher and higher expanding requirements on the EMMC interface. In addition, people usually choose to implant an encryption module in the EMMC master control to realize ciphertext storage of data, but the possibility that the data is intercepted on a transmission channel still exists, so that the risk of data leakage is high, special requirements of users cannot be met, and the flexibility is poor.

Disclosure of Invention

In view of the above drawbacks, the present invention is directed to solving the problem of data leakage occurring in a data transmission channel through the EMMC standard.

In order to solve the problems, the invention provides an encryption Hub Device realized based on an EMMC interface, which is characterized by comprising a main Controller, a Flash module, an encryption and decryption algorithm module, a USB-KEY module, an EMMC-Device and a Port Controller; the Hub encryption and decryption module is connected with the EMMC-Device and is connected with an external PC (personal computer) supporting the EMMC through the EMMC-Device; the Hub encryption and decryption module is connected with the EMMC-host through a data bus, and the main controller is connected with the Port-controller; the EMMC forwarding module is provided with a plurality of EMMC expansion interfaces; the data to be written by the PC host is encrypted by a Hub encryption and decryption module and then written into an EMMC memory connected to a corresponding EMMC expansion interface; and the Hub encryption and decryption module is used for decrypting the encrypted data on the EMMC memory and transmitting the decrypted data to the PC host.

The encryption Hub device realized based on the EMMC interface is characterized in that the encryption and decryption of data by the Hub encryption and decryption module comprises 2-level control, and the authentication of the user identity is realized by the first layer of encryption through the USB-KEY module; the second layer of encryption is encrypted or decrypted through a hardware encryption and decryption module in the encryption and decryption algorithm module.

The invention completes the expansion of the EMMC interface based on the encryption Hub of the EMMC interface, namely realizes the management of a plurality of devices; meanwhile, aiming at the risk of intercepting the data on the transmission channel, a special hardware encryption and decryption module and a USB-KEY module are added into the Hub, so that the interaction with the user is completed, the encryption on the EMMC data transmission channel is realized, and the safety of the data and the flexibility of the user use are greatly improved.

Drawings

FIG. 1 is a schematic diagram of an encrypted Hub device connection implemented based on an EMMC interface;

FIG. 2 is a schematic flow chart of a write operation;

FIG. 3 is a flow chart of a read operation.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

FIG. 1 is a schematic diagram of an encrypted Hub device connection implemented based on an EMMC interface; the encryption Hub Device is characterized by comprising a main Controller, a Flash module, an encryption and decryption algorithm module, a USB-KEY module, an EMMC transmission module EMMC-Device and a Port Controller Port-Controller; the Hub encryption and decryption module is connected with the EMMC-Device and is connected with an external PC (personal computer) supporting the EMMC through the EMMC-Device; the Hub encryption and decryption module is connected with the EMMC-host through a data bus, and the main controller is connected with the Port-controller; the EMMC forwarding module is provided with a plurality of EMMC expansion interfaces; the data to be written by the PC host is encrypted by a Hub encryption and decryption module and then written into an EMMC memory connected to a corresponding EMMC expansion interface; and the Hub encryption and decryption module is used for decrypting the encrypted data on the EMMC memory and transmitting the decrypted data to the PC host.

FIG. 2 is a schematic flow chart of a write operation; the process of writing the encryption Hub device to the EMMC memory by the PC host through the EMMC interface comprises the following steps:

step 3.1: the PC host sends a write operation request to perform write operation on the connected EMMC;

step 3.2: after receiving the write-in operation request, the main controller starts a USB-KEY module to authenticate the user identity; the main controller obtains a correct user serial number from the Flash user data; meanwhile, a verification requirement is sent to the user through the USB-KEY module, the user is required to input a PIN code and perform authentication, and a user-defined serial number is obtained and fed back to the main controller after the authentication is passed;

step 3.3: after receiving the self-defined serial number, the main controller verifies whether the serial number is correct or not; if the user information is correct, the user information is obtained from the database; the main controller starts specific operation to obtain an internal abstract; meanwhile, a verification requirement is sent to the USB-KEY module, corresponding operation is carried out in the USB-KEY module to obtain a verification abstract, and the verification abstract is sent back to the main controller;

step 3.4: verifying the internal abstract and the verification abstract, and returning the data write failure of the PC host when the verification fails; when the verification is successful, allowing the user to write data into the EMMC;

step 3.5: the main controller and the PC host software automatically confirm whether the EMMC memory equipment is normally accessed; if yes, allowing the PC host to allocate an address to the EMMC memory device, and initializing the EMMC memory device through a Port controller Port-controller;

step 3.6: the data of the PC host is transmitted to an EMMC-Device through an EMMC interface, and the data is stored in a high-speed data cache region;

step 3.7: the master controller encrypts data through an encryption and decryption algorithm module to form a ciphertext, the ciphertext is transmitted to a corresponding EMMC-Port through a bus, and the EMMC master controller checks an address in a data packet; and if the verification is successful, writing the encrypted ciphertext into the EMMC memory equipment accessed by the EMMC-Port of the EMMC Port to finish the data writing of the EMMC.

The user input authentication key can realize the input of user authentication data in a mode that a user inserts the U shield.

FIG. 3 is a schematic flow chart of a read operation; the process of reading the EMMC memory by the encryption Hub device realized by the PC host through the EMMC interface comprises the following steps:

step 4.1: the PC host sends a read operation request to read the connected EMMC;

step 4.2: after receiving the reading operation request, the main controller starts a USB-KEY module to authenticate the user identity; the main controller obtains a correct user serial number from the Flash user data; meanwhile, a verification requirement is sent to the user through the USB-KEY module, the user is required to input a PIN code and perform authentication, and a user-defined serial number is obtained and fed back to the main controller after the authentication is passed;

step 4.3: after receiving the self-defined serial number, the main controller verifies whether the serial number is correct or not; if the user information is correct, the user information is obtained from the database; the main controller starts specific operation to obtain an internal abstract; meanwhile, a verification requirement is sent to the USB-KEY module, corresponding operation is carried out in the USB-KEY module to obtain a verification abstract, and the verification abstract is sent back to the main controller;

step 4.4: verifying the internal abstract and the verification abstract, and returning the data reading failure of the PC host when the verification fails; when the verification is successful, allowing the user to read the data of the EMMC;

step 4.5: the main controller and the PC host software automatically confirm whether the EMMC memory equipment is normally accessed; if yes, allowing the PC host to allocate an address to the EMMC memory device, and initializing the EMMC memory device through a Port controller Port-controller; the EMMC sends data to the data bus through the EMMC-Port;

step 4.6: the main controller carries out decryption operation on the data through the encryption and decryption algorithm module, transmits the decrypted data to the EMMC transmission module EMMC-Device and stores the data into the high-speed data cache region;

step 4.7: and finally, the data is read out to the PC host through the EMMC interface circuit.

While the invention has been described with reference to a particular embodiment, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

Claims

1. An encryption Hub Device realized based on an EMMC interface is characterized by comprising a main Controller, a Flash module, an encryption and decryption algorithm module, a USB-KEY module, an EMMC transmission module EMMC-Device and a Port Controller Port-Controller; the Hub encryption and decryption module is connected with the EMMC-Device and is connected with an external PC (personal computer) supporting the EMMC through the EMMC-Device; the Hub encryption and decryption module is connected with the EMMC-host through a data bus, and the main controller is connected with the Port-controller; the EMMC forwarding module is provided with a plurality of EMMC expansion interfaces; the data to be written by the PC host is encrypted by a Hub encryption and decryption module and then written into an EMMC memory connected to a corresponding EMMC expansion interface; the Hub encryption and decryption module is used for decrypting the encrypted data on the EMMC memory and transmitting the decrypted data to the PC host; the Hub encryption and decryption module performs data encryption and decryption by 2-level control, and the first layer of encryption realizes the authentication of the user identity through the USB-KEY module; the second layer of encryption is encrypted or decrypted through a hardware encryption and decryption module in the encryption and decryption algorithm module; the PC host performs writing operation according to the following steps:

step 3.2: after receiving the write-in operation request, the main controller sends a verification request to the user through the USB-KEY module, the user is required to input a PIN code and carry out authentication, and a self-defined serial number is obtained and fed back to the main controller after the authentication is passed;

step 3.5: the main controller and the PC host software automatically confirm whether the EMMC memory equipment is normally accessed;

if yes, allowing the PC host to allocate an address to the EMMC memory device, and initializing the EMMC memory device through a Port controller Port-controller;

step 3.7: the master controller encrypts data through an encryption and decryption algorithm module to form a ciphertext, the ciphertext is transmitted to a corresponding EMMC-Port through a bus, and the EMMC master controller checks an address in a data packet; if the verification is successful, writing the encrypted ciphertext into EMMC memory equipment accessed by an EMMC-Port of the EMMC Port to finish the data writing of the EMMC;

the PC host performs reading operation according to the following steps:

step 4.2: after receiving the reading operation request, the main controller sends a verification request to the user through the USB-KEY module, the user is required to input a PIN code and carry out authentication, and a self-defined serial number is obtained and fed back to the main controller after the authentication is passed;