CN1102774C

CN1102774C - Data treatment system with concealing program functions

Info

Publication number: CN1102774C
Application number: CN 97104212
Authority: CN
Inventors: 赖宏怡; 詹森达; 王伯宁; 杨修宗; 周永丰
Original assignee: Wistron Corp; Acer Inc
Current assignee: Wistron Corp; Acer Inc
Priority date: 1997-04-23
Filing date: 1997-04-23
Publication date: 2003-03-05
Anticipated expiration: 2017-04-23
Also published as: CN1197240A

Abstract

The present invention relates to a method for hiding a program in a data processing system, which comprises the following steps: an indication code is provided, and specific states of all operational programs in the data processing system are indicated; the state of the indication code is judged; a state corresponding to the indication code is a first state, and a reading command sent out by the data processing system to control and read data is intercepted; the content of the reading command is read; the content corresponding to the reading command is a distinguishing code read out by a first storage device, and the distinguishing code is replicated; the replicated distinguishing code is stored in a second storage device; a modified distinguishing code is generated according to the distinguishing code, and the distinguishing code is replaced by the modified distinguishing code.

Description

Data handling system with concealing program functions

The present invention relates to a kind of data handling system, be meant a kind of disposal route that can avoid conflicting program and be stored in same data handling system especially with concealing program functions.Further, the invention solves the problem of program conflict in the computer system, and can prevent that the content of specific region is changed in the storage device by the mode of concealing program.The present invention more provide need not change desire the concealing program method of concealing program content, to realize extensive applicability.

In present PC framework, (refer in particular to the computer compatible) with the IBM specification, the operation of system, except hardware such as CPU (central processing unit), system storage, system chipset, Winchester disk drive, floppy drive are equipped with, also need the cooperation of software programs such as Basic Input or Output System (BIOS) (BIOS), operating system (OS), application software to work normally.

Cooperate the operating system of PC that operating systems such as DOS, UNIX, WIN95, OS/2, XENIX, PICK are arranged in the market.And the most general use-pattern of these operating systems is that operating system program is stored in as in the non-volatile storages such as hard disk, floppy disk, finish the initialization of computer system when BIOS finishes computer, power up behind bolt (POST), BIOS can carry operating system in hard disk or floppy disk in the storer of system into the program of operating system program, then, CPU (central processing unit) is the program of executive operating system, and system's control is promptly transferred to operating system control.

Under present personal computer system framework, the storing mode of hard disk allows to be divided into 4 subregions at the most on a single hard disk, and the similar virtual disk independently of each subregion can independently be loaded with an operating system program.In computer system when operation, only have an operating system to obtain ownership, and meaning promptly only has an operating system for now using state, and other operating system all is in the non-state of now using, and does not influence each other.

Have a start-up routine (Master Boot Sector) in (cylinder 0, magnetic head 0, the sector 1) of hard disk, the illustration of start-up routine is shown in subordinate list one.Latter end in start-up routine includes indication hard disk partition table (as the shadow region of subordinate list one).Corresponding to each subregion, all comprise a descriptor code (Identity) in order to the indication graded properties at hard disk partition table, the length of each descriptor code is 16Byte.

Descriptor code contains a state mark code (Boot Indicator) and identification code (system ID).The state mark code is indicating whether corresponding subregion is bootable subregion (bootable partition), and meaning is whether the operating system of subregion will be written into after start, and it is promptly bootable to anticipate; And identification code promptly is to describe the operating system of being deposited in the subregion, represents DOS as 01h, 12bit FAT, and 06h represents DOS6.2 etc.

Present PC operating system almost all is loaded with the disc operating system (DOS) program, with commander's computer work.And in the specification of DOS, limit in the fdisk of a computer system, allow a main partition and several to expand the existence of division operation system.When computer system reads start-up routine, according to the content of hard disk partition table, computer system can have the hard disk areas that starts the operating system to corresponding, the relative operation system program is read, and unloading is carried out to system storage.When this operating system was DOS, DOS can be written into storer with start-up routine from hard disk once more, and judged according to the identification code in the hard disk partition table wherein whether another main partition of existence is wherein arranged.If when having the main partition of repetition in the hard disk, will cause system can't normally carry out the DOS program.

And some specific application program only can be carried out in specific operating system environment, and simultaneously, these application programs also do not allow the parameter of its operating system environment of working and program to suffer change and revise, otherwise the situation that i.e. appearance can't be worked.But with WIN95 is example, is the operating system that base growth is come out though WIN95 is one with DOS, so it can be used as extended operating system use and is stored in same subregion.But in the process of installing, WIN95 can change parameter and the executive routine of DOS, thereby makes and depend on the DOS application program of particular version thereby can't suitably carry out.

Thereby for solving this type of problem, in the prior art, be about to specific program concentrate in the identical subregion with this specific operating system, whereby, make that this subregion is an isolated area, not with other program interference, and guarantee that security is arranged.But this kind method is when applying to dos operating system, and problem promptly takes place.Because on the one hand, desire to possess independently DOS, and on the other hand, need possess another DOS at another subregion again and use for general procedure at a subregion.As mentioned above, this kind situation is that DOS does not allow, and still causes system suitably to carry out.

The method that prior art is handled same system and deposited two dos operating systems is to utilize the identification code of another operating system of change to reach.With NCR Corp. is example, for reaching in same hard disk, and deposit one first dos operating system and one second dos operating system, NCR obtains mandate to Microsoft earlier, thereby identification code (ID) in the whole second dos operating system program and the identification code in the start-up routine are done change one by one, make when the conduct of first dos operating system starts the operating system, in the detecting computer system in the process of other operating systems, according to identification code through change, can be with second dos operating system, distinguish to be considered as a non-dos operating system, thereby reach the purpose of hidden partition and program.And when second dos operating system is activated, because the identification code in its start-up routine and the identification code of operating system program itself change all.Therefore, when second dos operating system reads in start-up routine in the system storage once more, according to contained identification code in the hard disk partition table wherein corresponding to each operating system program, judge when whether having other operating system programs in the computer system, because the identification code of itself is through revising, therefore, the target of its inspection no longer is the identification code of first dos operating system also, make it judge that computer system there is no other identical dos operating systems and exists, thereby reach concealing program, and make the purpose of system's operate as normal.

But this way is also uneconomical.Its reason is as follows: the program of (1) operating system itself must be through revising, so that general's identification code wherein changes to the content of a non-representative dos operating system, the gigantic project that this process involves, simultaneously, must obtain the mandate of operating system program manufacturer, cost improves.(2) hiding fdisk must exclusive operating system can realize, non-exclusive operating system can't realize the function hidden.

Therefore can find that prior art is used the mode of alter operation system identification, not only gigantic project, this operating system promptly becomes an exclusive operating system simultaneously, lacks broad applicability and compatibility, is not a desirable disposal route.

The object of the invention promptly is to provide a kind of content that need not change program, can pass through specific program or subzone hiding, and then exempt the generation of operating system collision problem.

For achieving the above object, an implementation of the present invention is by adding particular step in the standard boot program of data handling system and calling order, and reaches the program of need not rewriting, and promptly reaches the purpose of exempting program conflict and hidden partition.Technical scheme of the present invention is as follows:

A kind of in data handling system the method for concealing program, be to cooperate one first storage device and the use of one second storage device; This first storage device has a start-up routine down at least one running program, and this start-up routine contains a corresponding respectively respectively identification code of this running program content; The method includes the steps of:

(1) provides an indication code, in order to indicate the particular state of each running program in data handling system;

(2) judge the state of this indication code;

(3) be one first state corresponding to this indication code, the data interception disposal system is sent the reading order with the control reading of data;

(4) understand the reading order content;

(5) content of corresponding reading order is duplicated this identification code for to read this identification code from this first storage device;

(6) store the identification code duplicated in this second storage device;

(7), produce identification code once change according to the identification code that is stored in this second storage device through duplicating;

(8) will be somebody's turn to do identification code through change and replace this identification code as to the result that reads that should reading order.

Wherein, first storage device be in the data handling system in order to the data memory device of store operation program, with personal computer system, can be the Winchester disk drive of personal computer system; And second storage device is the memory storage in the data handling system, with personal computer system, it can be for being made of dynamic RAM (DRAM) or static RAM volatile storages such as (SRAM), for the computer system temporal data.

Running program is meant the program in order to the execution work of control data disposal system, with personal computer system, as the program of control personal computer system work such as operating system program, application program, driver.And this start-up routine contains and corresponds respectively to the respectively identification code of this running program, as ID sign indicating number etc.; Simultaneously, this start-up routine contains the state mark code, in order to indicate the state of each running program in data handling system, comprise whether be in existing with state or non-existing with state etc.With personal computer system, it can be the sign as the storage cell in the computer system, in order to indicate specific state, and indication code is meant in the storage cell of computer system, use the state that indicates a specific running program for the user, for example subzone hiding whether state, and the kind of the running program within the subregion of hiding etc.Wherein this storage cell can be positioned at CMOS or the NVRAM or other the non-volatility memorizer of data handling system.

System's execution in step of conception according to the present invention, judge the state of indication code earlier, when indication code for when indicating a specific subregion of hiding to remove first state of hiding, i.e. control is worked as system and is sent the order of reading specific data, corresponding to this reading order, promptly tackle these orders, and understand the content of reading order.When judge this reading order be system when first storage device reads identification code, then second storage device is read and be stored in to identification code from first storage device; Simultaneously, and according to identification code, other non-ly are in the existing state of using, but identification code changes with the identification code of the running program identical operations program that is in existing usefulness state, generation one is different from the identification code through change of this identification code, again with the read result of this identification code through changing as this reading order.

Carry out the execution in step that the present invention changed by data handling system, system is about to this result that reads through change, the result that reads as reading order, thereby the running program of avoiding the subregion hidden is when now using state, and the identical situation that clashes of running program of both having deposited because of identification code and other system takes place.

In the description of above technical scheme, it should be noted that the process of the change identification code of conception according to the present invention, be the identification code that produces change according to the identification code that is stored in this second storage device, as the response of reading order.Because second storage device does not involve running program itself (running program itself is stored in first storage device), therefore, the process of whole change can't be changed running program itself, also need not match, can realize the effect of hidden partition with the content of running program.

The present invention's conception also comprises a kind of data handling system startup method, by new launch computer program is provided, to reach the purpose of avoiding program conflict.The data handling system startup method of conception according to the present invention is to cooperate one first storage device and one second storage device to use; The storage cell of this data handling system has an indication code, in order to indicate the particular state of each running program in data handling system; This first storage device has a start-up routine and at least one running program, this start-up routine contains one and corresponds respectively to the respectively identification code and a descriptor code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system; The method includes the steps of:

(1) starts power supply;

(2) carry out trace routine;

(3) judge the state of this indication code;

(4) be one first state corresponding to this indication code, change this state mark code;

(5) duplicate this start-up routine that comprises this identification code at least;

(6) store institute's version in this second storage device;

(7) according to this state mark code content, the state of each running program in the judgment data disposal system;

(8) indicate one of this at least one running program for now using state corresponding to this state mark code,, read the address that this first storage device stores is now used the operating system of state according to this descriptor code content;

(9) this address reading of data certainly;

(10) store these data in this second storage device;

(11) selectively according to these data contents, the reading order of control reading of data in the data interception disposal system;

(12) understand the reading order content;

(13) content of corresponding reading order is duplicated this identification code for to read this identification code from this first storage device;

(14) store this identification code in this second storage device through duplicating;

(15), produce identification code once change according to being stored in the identification code of being duplicated in this second storage device;

(16) will be somebody's turn to do through the identification code of change as to the result that reads that should reading order.

Wherein, step (4) be with an any order step (3) afterwards, step (7) finishes before.

Wherein, first storage device be in the data handling system in order to the memory storage of store operation program, with personal computer system, can be the Winchester disk drive of personal computer system; And second storage device is the memory storage in the computer system, and it can be for being made of dynamic RAM (DRAM) or static RAM storeies such as (SRAM), for the computer system storage data.

Wherein, operating system is meant the program in order to the execution work of control data disposal system, comprises operating system program, application program, driver etc.And this start-up routine contains and corresponds respectively to the respectively identification code of this running program, and simultaneously, this start-up routine contains the state mark code, in order to indicate the state of each running program in data handling system, comprise whether be in existing with state etc.; And indication code is meant in the storage cell of computer system, uses for the user and indicates the state of a particular operational program and kind of the running program within the hiding subregion etc.Wherein this storage cell can be positioned at CMOS or the NVRAM or other the non-volatility memorizer of data handling system.And descriptor code is in order to describe the address that each running program is stored in second storage device.

After data handling system starts power supply, promptly carry out initialize routine and self-trace routine, set the working storage initial value of peripheral element and system, and detect the state of each element and peripheral device.Then carry out the state of judging this indication code, the hiding or whether recover of decision operation program.When removing first state of hiding for the indication one specific subregion of hiding corresponding to this indication code, promptly change the content of state recognition sign indicating number in the start-up routine, to change to the existing state of using corresponding to the running program of removing the subregion of hiding, other subregions will be denoted as the non-state of now using.

Afterwards, read start-up routine and program part is read in second storage device, so that data handling system is from the second storage device reading of data and carry out it.Wherein this specific part comprises state mark code, descriptor code at least.

According to the state mark code, the data handling system judgement is in existing running program with state, and according to descriptor code corresponding to this used running program, judge that this running program is stored in the address of first storage device, and the control data disposal system is to this address reading of data, and, use for system and read and the executable operations program data storing to the second storage device.

When system sends the order of reading particular data, corresponding to this reading order, promptly tackle these orders, and understand the content of reading order.When judge this reading order be system when first storage device reads identification code, then second storage device is read and be stored in to identification code from first storage device; Simultaneously, and according to identification code, will be corresponding to the non-running program of now using state, and can now use the identical identification code change of identification code of the running program of state with this, generation one is different from the identification code through change of this identification code, again with the read result of this identification code through changing as this reading order.

Computer system, through after changing the result that reads be i.e. there is no the identical operations program and exists according to this in the judgement system, and the generation of the situation that avoids conflict.By this Starting mode, data handling system can be reached the effect of concealing program under the prerequisite that does not change running program itself.

The present invention's conception also comprises a kind of data handling system with concealing program functions, comprises: electric supply installation, in order to power to data handling system; One bus unit is used for data and is transmitted thereon; One CPU (central processing unit) is electrically connected on this bus unit, uses for deal with data and the running of control data disposal system; One input media is electrically connected on this bus unit, in order to import data to data handling system; One first storage device is electrically connected on this bus unit, in order to storage data; One second storage device is electrically connected on this bus unit, in order to storage data; One the 3rd storage device is electrically connected on this bus unit, in order to storage data; One storage cell has an indication code, in order to indicate the respectively particular state of this running program in data handling system; This first storage device device has a start-up routine and at least one running program, and this start-up routine contains and corresponds respectively to the respectively identification code of this running program content; This start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system; The 3rd storage device has a primary control program (PCP); This CPU (central processing unit) is read this primary control program (PCP) from the 3rd storage device, and transfers to this second storage device and it is stored in this second storage device by this bus unit; This CPU (central processing unit) is read this primary control program (PCP) by this bus unit from this second storage device, and corresponding to the control of this primary control program (PCP), carries out following steps:

(1) judges the state of this indication code;

(2) change this state indication code;

(3) duplicate the specific part of this start-up routine at least;

(4) store institute's version in this second storage device;

(5) according to this Status Flag digital content, the state of each running program in the judgment data disposal system;

(6) indicate one of this specific running program for now using state corresponding to this state mark code, read the address of this this used particular operational program of first storage device stores by this bus unit;

(7) by this bus unit, this CPU (central processing unit) is from this address reading of data of this first storage device;

(8) this CPU (central processing unit) is duplicated these data and is stored in this second storage device;

(9) this CPU (central processing unit) is controlled the reading order of reading of data selectively according to these data contents in the data interception disposal system;

(10) understand the reading order content;

(11) content of corresponding reading order is duplicated this identification code for to read this identification code from this storage device;

(12) store the identification code duplicated in this second storage device;

(13), produce identification code once change according to being stored in the identification code of being duplicated in this second storage device;

(14) will be somebody's turn to do through the identification code of change as to the result that reads that should reading order.

Wherein, this electric supply installation be in order to extraneous power supply transfer to data handling system, and by the voltage to provide data handling system to be suitable for suitably is provided.For example 110 volt AC power are converted to the charger of the direct supply of suitable wattage, or exchange commentaries on classics direct current, DC-DC circuit etc. in the notebook computer, so that the suitable voltage that uses of each element in the data handling system to be provided.

The data handling system of conception has bus unit and connects each main element according to the present invention, transmits thereon for control signal and data, as system bus, pci bus, isa bus, USB (universal serial bus) (USB) etc.Wherein, first storage device be in the data handling system in order to the memory storage of store operation program, with the personal data disposal system, can be the Winchester disk drive of personal data disposal system; And second storage device of conceiving according to the present invention comprises the system storage of being made up of storeies such as DRAM or caches, uses for storage data; The 3rd storage device is the storage device that has the basic input/output routine control program of control data disposal system, as BIOS ROM.

The data handling system of conception according to the present invention, after power-on, read primary control program (PCP) by CPU (central processing unit) from the 3rd storage device, and pass through bus unit, primary control program (PCP) is stored in second storage device, and according to the step of primary control program (PCP), execution in step (1) is to step (14).

The present invention conception also comprise a kind of in data handling system the device of concealing program, this device is to cooperate one first storage device and the use of one second storage device; This first storage device has a start-up routine and at least one running program, this start-up routine contains and corresponds respectively to the respectively identification code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system; Data handling system contains a storage cell, in order to store an indication code, for the particular state of indication running program in data handling system; This device stores control command, carries out following steps in order to the control data disposal system:

(1) judges the state of this indication code;

(2) be one first state corresponding to this indication code, the data interception disposal system is sent the reading order with the control reading of data;

(3) understand the reading order content;

(4) content of corresponding reading order is duplicated this identification code for to read this identification code from this first storage device;

(5) store the identification code duplicated in this second storage device;

(6), produce identification code once change according to the identification code of being duplicated that is stored in this second storage device;

(7) identification code that will be somebody's turn to do through change replaces the read result of this identification code as corresponding reading order.

The above method of utilization indication code indication particular operational program if be used in the identical operations program when must not and be stored in same hard disk, can realize that same hard disk has the function of same operation program by the use of a utility routine matching program.Its way is as described below:

So that DOS to be installed is example, when user the one DOS, by the indication of change indication code DOS is hidden, and utility routine is changed at the hard disk partition table of installing after the DOS, and the identification code 06 of a DOS is changed to a pseudo-code, for example FEh.This moment is when carrying out the installation procedure of the 2nd DOS again, because the subregion of a DOS is hidden and its identification code has changed to FEh through being denoted as, the 2nd DOS judges when whether having other DOS in the hard disk according to hard disk partition table, can assert that there is no other identical DOS in the hard disk exists, and can successfully install.

And when the user changes indication code for first state that remove to hide, as previously mentioned, promptly carry out corresponding program.

Except extra utilization be stored in the storage cell indication code with indicate with the hidden state of judging subregion, in the identical operations program and be stored under the environment of hard disk, another by way of example of the present invention's conception can be exempted the use of this indication code, and directly be realized the purpose of concealing program.The conception of this part is presented below: the method for concealing program in data handling system of conception according to the present invention is to cooperate one first storage device and the use of one second storage device; This first storage device has a start-up routine and at least one running program, this start-up routine contains one and corresponds respectively to the respectively identification code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system.The method includes the steps of:

(1), judges to be in existing running program with state according to the content of this state mark code;

(2) indicate one of this at least one running program for now using state corresponding to this state mark code, judge whether the identification code of other running programs is identical with the identification code of the running program that is in existing usefulness state;

(3) be same as the identification code that is in existing running program with state, the reading order of control reading of data in the data interception disposal system corresponding to the identification code of other running programs;

(4) understand the reading order content;

(5) content of corresponding reading order is duplicated these identification codes for to read these identification codes from this first storage device;

(6) store this identification code in this second storage device through duplicating;

(7), produce identification code once change according to being stored in the identification code of being duplicated in this second storage device;

(8) will be somebody's turn to do through the identification code of change as to the result that reads that should reading order.

Wherein, each key step is rough identical with the method for previously described concealing program, and dissimilarity is to omit the utilization of indication code, and directly respond user's wish will be now with or inactive planning, as the standard of judging.Be in existing running program with state by judgement, other be in non-now its identification code and this are in the identical person of identification code of the running program of existing usefulness state with the running program of state, replace it with identification code through changing.So far, can realize the effect of concealing program.

Same, conceive the data handling system startup method of omitting indication code according to the present invention, be to cooperate one first storage device and one second storage device to use; This first storage device has a start-up routine and at least one running program, this start-up routine contains one and corresponds respectively to the respectively identification code and a descriptor code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system; The method includes the steps of:

(1) starts power supply;

(2) carry out trace routine;

(3) read this start-up routine;

(4) duplicate this start-up routine that comprises this state mark code at least;

(5) store institute's version in this second storage device;

(6), judge to be in existing running program with state according to the content of this state mark code;

(7) indicate one of this at least one running program for now using state corresponding to this state mark code,, read the address that this first storage device stores is now used the running program of state according to this descriptor code content;

(8) this address reading of data certainly;

(9) store these data in this second storage device;

(10) read identification code corresponding to the running program of now using state;

(11) whether the identification code of judging other running programs is identical with the identification code that is in existing running program with state;

(12) be same as the identification code that is in existing running program with state, the reading order of control reading of data in the data interception disposal system corresponding to the identification code of other running programs;

(13) understand the reading order content;

(14) content of corresponding reading order is duplicated these identification codes for to read these identification codes from this first storage device;

(15) store this identification code in this second storage device through duplicating;

(16), produce identification code once change according to being stored in the identification code of being duplicated in this second storage device;

(17) will be somebody's turn to do through the identification code of change as to the result that reads that should reading order.

Wherein, each key step is rough identical with previously described data handling system startup method, and dissimilarity is to omit the utilization of indication code, and directly respond user's wish will be now with or inactive planning, as the standard of judging.Be in existing running program with state by judgement, other be in non-now its identification code and this are in the identical person of identification code of the running program of existing usefulness state with the running program of state, replace it with identification code, with response as reading order through changing.Whereby, can realize the effect of concealing program.

Another embodiment of the data handling system with concealing program functions of conception according to the present invention comprises: an electric supply installation, give data handling system in order to supply suitable power supply; One bus unit is used for data and is transmitted thereon; One CPU (central processing unit) is electrically connected on this bus unit, in order to deal with data and the running of control data disposal system; One input media is electrically connected on this overall apparatus, in order to import data to data handling system; One first storage device is electrically connected on this bus unit, in order to storage data; One second storage device is electrically connected on this bus unit, in order to storage data; One the 3rd storage device is electrically connected on this bus unit, in order to storage data; This first storage device has a start-up routine and at least one running program, this start-up routine contains and corresponds respectively to the respectively identification code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system; The 3rd storage device has a primary control program (PCP); This CPU (central processing unit) is read this primary control program (PCP) from the 3rd storage device, and transfers to this second storage device and it is stored in this second storage device by this bus unit; This CPU (central processing unit) is read this primary control program (PCP) by this bus unit from this second storage device, and corresponding to the control of this primary control program (PCP), carries out following steps:

(1) carries out trace routine;

(2) read this start-up routine;

(3) duplicate this start-up routine that comprises this state mark code at least;

(4) store institute's version in this second storage device;

(5), judge to be in the running program that now to use state according to the content of this state mark code;

(6) indicate one of this at least one running program for now using state corresponding to this state mark code,, read the address that this first storage device stores is now used the running program of state by this bus unit according to this descriptor code content;

(7) pass through this bus unit from this address reading of data;

(8) by this bus unit, store these data in this second storage device;

(9) read corresponding to the identification code that can now use the running program of state;

(10) whether the identification code of judging other running programs is identical with the identification code that is in existing running program with state;

(11) be same as the identification code that is in existing running program with state, the reading order of control reading of data in the data interception disposal system corresponding to the identification code of other running programs;

(12) understand the reading order content;

(13) content of corresponding reading order is duplicated these identification codes for to read these identification codes from this first storage device;

(14) by this bus unit, store this identification code in this second storage device through duplicating;

Wherein, each key step of the formation of data handling system and its execution is rough identical with the method for previously described concealing program, dissimilarity is that it omits the utilization of indication code, and directly respond user's wish will be now with or inactive planning, as the standard of judging.Be in existing running program by judgement with state, other are in non-now its identification code is in the identical person of identification code of existing running program with state with this with the running program of state, replace it with identification code, as the result that reads of reading order through changing.Whereby, can realize the effect of concealing program.

By below in conjunction with the accompanying drawing description of preferred embodiments, the above and other purpose of the present invention and advantage will be apparent.

Fig. 1,2 is the start flow process of PC in the prior art.

Fig. 3,4,5 is the first embodiment process flow diagram of the conception according to the present invention.

Fig. 6 is the synoptic diagram of PC start flow process.

For further illustrating conception of the present invention, special with following preferred embodiment, the embodiment of the present invention's conception is described.

The data handling system start-up routine of first embodiment of conception is an example with the personal computer system according to the present invention, is the purpose of reaching concealing program by the service routine (service routine) in BIOSB program and the IOS program in the change computer system.

Please see Table one.Table one is the illustration of start-up routine in the hard disk, and dash area is a hard disk partition table.In the hard disk partition table in Table 1, can find only to exist two fdisks.The content meaning of hard disk partition table is as follows: off-set value content meaning 00h 80h state mark code (existing using/non-existing using)

Non-existing the using of 00h=

00h=now uses the initial magnetic head 02h of 01h 01h 04h initial sector 03h 04h start cylinder 04h 51h identification code

00h=the unknown

01h＝DOS，12-bit?FAT

04h＝DOS，16-bit?FAT

05h=DOS, expansion, 16-bit FAT

06h=DOS 6.205h E9 finishes magnetic head 06h 11 and finishes the interior sector of the sector 07h 00 end cylinder 08h 000,0A1 first subregion sector 0ch A20000 subregion

Therefore by the state mark code that 00h comprised, can judge used subregion and operating system program; But content by the identification code decision operation system that 04h comprised; By each initial end address, can the position of decision operation system program on hard disk.

In the process of personal computer system start, system all is to reach by the BIOS service routine of calling out this standard of INT13 among the BIOS from the hard drive read/write data.And the preferred embodiment of conception according to the present invention, promptly pass through at this service routine of INT13, make INT13 service routine and extra INT13 interrupt service routine (interrupt service routine) binding selectively, replacing original INT13 service routine, and reach the purpose of concealing program.

When calling out the INT13 service routine in personal computer system, must insert parameter prior to the working storage of hard disk controller, the meaning of each parameter is as follows:

AH reads into system storage/write into hard disk with the section on the hard disk;

The section number that AL need read;

CH cylinder number;

CL preliminary sectors number;

DH magnetic head number;

DL disk drive number;

The address of ES:BX memory buffer;

When system calling INT13 carries out when the hard disk partition table of hard disk read into hard disk, the required parameter of inserting is as follows respectively:

AH=02 writing system storer

AL＝01

CH＝0

CL＝1

DH＝0

DL=80h Winchester disk drive C;

ES：BX

And when calling INT13 execution write the program of hard disk, the required parameter of inserting of working storage was as follows:

AH=03 writes hard disk;

AL＝01

CH＝0

CL＝1

DH＝0

DL＝80h

ES：BX

Therefore, when carrying out the INT13 service routine, the difference of the value by each working storage, control system respectively at sense data on the specific Winchester disk drive address to system storage; Or write data to specific Winchester disk drive address by system storage.By reading the value of these working storages, can judge whether INT13 carries out reading of start-up routine.

The launch computer program of first embodiment of conception according to the present invention, the non-volatility memorizer of utilization in computer system, as CMOS, NVRAM, storage cells such as FLASH MEMORY, store an indication code, in order to provide the user to indicate to hide fdisk whether and indicate the operating system that is hidden in the fdisk., set specific fdisk and be hidden in preparation (setup) environment of BIOS corresponding to the user, as previously mentioned, system can carry out a utility routine, and the pairing identification code 06h of DOS in the hard disk partition table on the hard disk is modified to a pseudo-code FEh.

Ask for an interview Fig. 3,4,5,6, the synoptic diagram of PC boot program sees also Fig. 6.Shown in Fig. 3,6, computer system is after power-on (step 301), and CPU (central processing unit) is promptly controlled the content of BIOS ROM is carried in the system storage 61, and the control by bios program, carries out boot program.System carries out initialization and self-trace routine (POST) (step 302) afterwards under bios program control, system can check the value of indication code, checks whether the fdisk of hiding originally removes stealthy state.

After system calling INT19 service routine carries start-up routine into system storage, before the start-up routine acquire the right of control, remove first state of hidden state corresponding to the indication code indication, the state indication code that BIOS control will be removed the operating system program of hiding changes to existing usefulness, and the state indication code of other operating system programs is changed to non-existing using, simultaneously, on original INT13, hang up the INT13 interrupt service routine.Again system's control is given start-up routine (step 303,304).

Ditto described, the function of INT13 interrupt service routine is hard disk partition table is read in interception from hard disk INT13, and the DOS identification code that the releasing in the hard disk partition table of reading is hiding, change back 06h by FEh, with other DOS identification code in the FEh replacement system, the state recognition frameshift alteration that will remove hiding DOS simultaneously on hard disk is for now using state.

By calling out the INT19 service routine, again by calling out the INT13 service routine, the address from (cylinder 0, magnetic head 0, the sector 1) of hard disk 63 reads out to system storage 61 (step 304) with start-up routine (Master Boot Sector) 62.Start-up routine carries into after the system storage, and system promptly reads and carry out start-up routine gauge outfit (OS Lader) (step 53), and in response to its control, reads hard disk partition table.According to the hard disk partition table that latter end comprises in the start-up routine (shown in 62 shadow regions), as mentioned above, can judge the operating system program that is in existing usefulness state, and, obtain the address (step 306) at its place according to the described content of the descriptor code of hard disk partition table.According to this address, call out the INT13 service routine once more, to hard disk 63 corresponding address read operation system programs, and will be now advance system storage 61 (step 307) in 66 years with the operating system program of state.

After operating system program advanced system storage 61 in 66 years, CPU (central processing unit) was carried out specific work (step 401) promptly according to operating system program.If this used operating system program is DOS (step 402), DOS itself can call out the INT13 service routine, to obtain start-up routine (step 404) once more in the process that CPU (central processing unit) is carried out.At this moment, the value of inserting according to each working storage on the hard disk controller, can judge that this INT13 is that desire is with (cylinder 0 on the hard disk 63, magnetic head 0, sector 1) start-up routine, carry into system storage 61 (step 405) once more, whether with the indication hard disk partition table (as 64 shadow regions) according to the latter end in the start-up routine 64, judging has other dos operating systems to have (step 501) in the system.

Corresponding to judging that this INT13 reads hard disk partition table, by in the INT13 service routine, add and read the off-set value 04h of each fdisk to read identification code corresponding to each fdisk, and can be now make comparisons with the identification code of the operating system program of state with being in, can judge the dos operating system (as the step 502 among Fig. 5) that whether has other in the system.

Corresponding to judged result is that system has identical dos operating system, with the numerical value that is different from 06h replace (for example: FEh) it (step 503), as the response (step 504) of the INT13 service routine that sends corresponding to operating system.One of them way is directly to change these numerical value on system storage.And dos operating system is received after this response, i.e. there is no other dos operating system in the judgement system, and continues to carry out the standard program of DOS.So far, via the implementation of change bios program and INT13, can realize the purpose of concealing program.

When user's desire during with the partition recovery hidden state, the setup program that only need enter BIOS is changed indication code.Identical, after starting shooting again, system can check the value of indication code, checks whether remove the fdisk of hiding originally recovers stealthy state.Recover hidden state corresponding to the indication code indication, after the intact INT19 service routine of system calling carries start-up routine into system storage, and before the start-up routine acquire the right of control, the state indication code that BIOS controls the operating system program that will recover hiding changes to non-existing using, and the state indication code of the operating system program of user's appointment is changed to existing usefulness, simultaneously, remove secondary program, give start-up routine with system's control again and get final product at the INT13 that original INT13 hung up.

An alternative embodiment of the invention, can by as first embodiment in indication code in, add the function of instruction program content, the operating system program of indicating it to hide for the user.Same as above, system is promptly by this indication code, and in hard disk partition table, whether contrast has the identification code that is same as this operating system program.If have, then replace response as reading order with the identification code that changes.

In the process of above preferred embodiment change identification code, can be chosen in and change in the system storage or directly in hard disk, change, or change in other the storage device.And the value of change except FEh, can select other value to use certainly.Though and the bright embodiment of these people be by DOS as the invention illustration, but mixing under the situation that other programs use, by the type of operating system of the hidden partition that indicated in the indication code, can judge the value that should change.Therefore, the present invention's conception is the invention for a wide usage, is applicable to various programs.

Though above preferred embodiment is that example is so that explanation with the operating system program, but the present invention conception apply to purposes widely, for example in general application program, also can use identical notion, read the order of identification code by interception, as responding the result, and realize the effect hidden with the identification code forged.Structure of the present invention and feature describe in detail through above-mentioned example and diagram, will more clearly manifest.But what need further specify is that this embodiment only conduct illustrates the enforcement of the preferable mode of operation of the present invention, but not invention scope is caused restriction.Anyly do not break away from change and the improvement of being done under the spirit of the present invention, all belong to the present invention the category that is intended to protect.8E D8 8E C0 FA 8E-D0 BC 00 7C FB 8B F4 BF 89 00 01 FC F3 A5-50 B8 1E 06 50 CB B9 04 BE 07 80 3C 80 74-2C 83 C6 10 E2 F6 B4 0F B3 07 8E 97 06 B9-78 00 AC 84 0E CD 10 E2 06 72 04 34 12 B8-FF FF 50 1E B4 0F CD 10 CD 16 CB B2 80 8B-DC 8A 74 01 BD 05 00 8B 38 01 02 CD 13 73-1E 80 FC 11 75 10 1E B8 8E D8 33 FF 81 7D-EA 43 4F 1F 74 09 32 E4 4D 75 DD EB A7 81-BF FE 01 55 AA 75 9F 8B 53 CB 43 52 4A 0D-0A 45 72 72 6F 72 20 6C 34 69 6E 67 20 6F-70 65 72 61 74 69 6E 67 79 73 74 65 6D 20-66 72 6F 6D 20 66 69 78 20 64 69 73 6B 2E-0D 0A 0D 0A 49 6E 73 65 20 43 4F 4D 50 41-51 20 44 4F 53 20 64 69 35 74 74 65 20 69-6E 20 64 72 69 76 65 20 0D OA 50 72 65 73-73 20 61 6E 79 20 6B 65 77 68 65 6E 20 72-65 61 64 79 3A 20 07 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00

Claims

1, a kind of in data handling system the method for concealing program, be to cooperate one first storage device and the use of one second storage device; This first storage device has a start-up routine and at least one running program, and this start-up routine contains one and corresponds respectively to the respectively identification code of this running program content; The method includes the steps of:

(2) judge the state of this indication code;

(4) understand the reading order content;

(6) store the identification code duplicated in this second storage device;

2, a kind of data handling system startup method is to cooperate one first storage device and one second storage device to use; The storage cell of this data handling system has an indication code, in order to indicate the particular state of each running program in data handling system; This first storage device has a start-up routine and at least one running program, this start-up routine contains one and corresponds respectively to the respectively identification code and a descriptor code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system; The method includes the steps of:

(1) starts power supply;

(2) carry out trace routine;

(3) judge the state of this indication code;

(6) store institute's version in this second storage device;

(8) indicate one of this at least one running program for now using state corresponding to this state mark code,, read the address that this first storage device stores is now used the running program of state according to this descriptor code content;

(9) this address reading of data certainly;

(10) store these data in this second storage device;

(12) understand the reading order content;

Wherein, step (4) be with an any order in step (3) afterwards, step finishes between (7).

3, a kind of data handling system with concealing program functions comprises:

One electric supply installation is in order to supply suitable power supply to data handling system;

One bus unit is used for data and is transmitted thereon;

One CPU (central processing unit) is electrically connected on this bus unit, uses for deal with data and the running of control data disposal system;

One input media is electrically connected on this bus unit, uses for input media to data handling system;

One first storage device is electrically connected on this bus unit, uses for storage data;

One second storage device is electrically connected on this bus unit, uses for storage data;

One the 3rd storage device is electrically connected on this bus unit, uses for storage data;

One storage cell has an indication code, uses for indicating the respectively particular state of this running program in data handling system;

This first storage device has a start-up routine and at least one running program, this start-up routine contains and corresponds respectively to the respectively identification code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system, the 3rd storage device has a primary control program (PCP);

This CPU (central processing unit) is read this primary control program (PCP) from the 3rd storage device, and transfer to this second storage device and it is stored in this second storage device by this bus unit, this CPU (central processing unit) is read primary control program (PCP) by this bus unit from this second storage device, and, carry out following steps corresponding to the control of this primary control program (PCP):

(1) judges the state of this indication code;

(2) change this state indication code;

(3) duplicate the specific part of this start-up routine at least;

(4) store institute's version in this second storage device;

(5) according to this state mark code content, the state of each running program in the judgment data disposal system;

(6) indicate one of this particular operational program for now using state corresponding to this state mark code, read the address of this this used particular operational program of first storage device stores by this bus unit;

(10) understand the reading order content;

(11) content of corresponding reading order is duplicated this identification code for to read this identification code from this first storage device.

(12) store the identification code duplicated in this second storage device;

4, a kind of in data handling system the device of concealing program, described data handling system also comprises first storage device that has a start-up routine and at least one running program, and this start-up routine contains the identification code that corresponds respectively to this running program content respectively and one and is used for indicating the state mark code of each running program at the state of data handling system; One second storage device; And a storage cell, be used for storing the indication code of an indication running program in the particular state of data handling system; The device of described concealing program comprises:

Be used to judge the device of this indication code state;

Be used for when indication code is first state, the data interception disposal system is sent the device of the reading order that reads in order to control data;

Be used to understand the device of reading order content;

The content that is used for corresponding reading order is for reading the device that identification code is duplicated this identification code from first storage device;

The identification code that is used for being duplicated stores the device of second storage device into;

Be used for according to the device that identification code produces the identification code of a change that duplicates that is stored in second storage device; And

Be used for replacing the device that read result of this identification code as corresponding reading order with the identification code of this change.

5, a kind of in data handling system the method for concealing program, be to cooperate one first storage device and the use of one second storage device; This first storage device has a start-up routine and at least one running program, this start-up routine contains one and corresponds respectively to the respectively identification code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system; The method includes the steps of:

(4) understand the reading order content;

(6) store this identification code in second storage device through duplicating;

6, a kind of data handling system startup method is to cooperate one first storage device and one second storage device to use; This first storage device has a start-up routine and at least one running program, this start-up routine contains one and corresponds respectively to the respectively identification code and a descriptor code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system; The method includes the steps of:

(1) starts power supply;

(2) carry out trace routine;

(3) read this start-up routine;

(5) store institute's version in this second storage device;

(6), judge to be in existing operation with state according to the content of this state mark code;

(8) this address reading of data certainly;

(9) store these data in this second storage device;

(13) understand the reading order content;

7, a kind of data handling system with concealing program functions comprises:

One bus unit is used for data and is transmitted thereon;

One input media is electrically connected on this bus unit, uses for the input data to data handling system;

This first storage device has a start-up routine and at least one running program, this start-up routine contains and corresponds respectively to the respectively identification code of this running program content, this start-up routine contains a state mark code, in order to indicate the respectively state of this running program in data handling system; The 3rd storage device has a primary control program (PCP);

This CPU (central processing unit) is read this primary control program (PCP) from the 3rd storage device, and transfers to this second storage device and it is stored in this second storage device by this bus unit; This CPU (central processing unit) is read this primary control program (PCP) by this bus unit from this second storage device, and corresponding to the control of this primary control program (PCP), carries out following steps:

(1) carries out trace routine;

(2) read this start-up routine;

(4) store institute's version in this second storage device;

(5), judge to be in existing running program with state according to the content of this state mark code;

(6) indicate one of this at least one running program for now using state corresponding to this state mark code,, read the address that the running program of state is now used in this first storage device storage by this bus unit according to this descriptor code content;

(7) pass through this bus unit from this address reading of data;

(8) by this bus unit, store these data in this second storage device;

(9) read identification code corresponding to the running program of now using state;

(12) understand the reading order content;

8, according to claim 1 or 4 described in data handling system the method for concealing program, wherein this second storage device is a volatile memory device.

9, according to the method for concealing program in claim 1 or the 4 described data handling systems, wherein this first storage device is a non-volatile memory.

10, the method for concealing program in the data handling system according to claim 8, wherein this second storage device is a system storage.

11, according to claim 9 in data handling system the method for concealing program, wherein, this first storage device is a Winchester disk drive.

12, according to claim 2 or 6 described data handling system startup methods, wherein this second storage device is a non-volatile memory.

13, according to claim 2 or 6 described data handling system startup methods, wherein this first storage device is a non-volatile memory.

14, data handling system startup method according to claim 12, wherein this second storage device is a system storage.

15, data handling system startup method according to claim 13, wherein this first storage device is a Winchester disk drive.

16, according to claim 3 or 7 described a kind of data handling systems with function of concealing program, wherein this second storage device is a volatile memory device.

17, according to claim 3 or 7 described a kind of data handling systems with concealing program functions, wherein this first storage device is a non-volatile memory.

18, a kind of data handling system with concealing program functions according to claim 16, wherein this second storage device is a system storage.

19, a kind of data handling system with concealing program functions according to claim 17, wherein this first storage device is a Winchester disk drive.

20, according to claim 4 a kind of in data handling system the device of concealing program, wherein this second storage device is a volatile memory device.

21, according to claim 4 a kind of in data handling system the device of concealing program, wherein this first storage device is non-waving a property memory storage.

22, according to claim 20 a kind of in data handling system the device of concealing program, wherein this second storage device is a system storage.

23, according to claim 21 a kind of in data handling system the device of concealing program, wherein this first storage device is a Winchester disk drive.