CN110489357B - Method and system for hiding data on removable storage device - Google Patents
Method and system for hiding data on removable storage device Download PDFInfo
- Publication number
- CN110489357B CN110489357B CN201910853849.6A CN201910853849A CN110489357B CN 110489357 B CN110489357 B CN 110489357B CN 201910853849 A CN201910853849 A CN 201910853849A CN 110489357 B CN110489357 B CN 110489357B
- Authority
- CN
- China
- Prior art keywords
- storage device
- partition
- application software
- data
- display
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
- G06F3/0601—Interfaces specially adapted for storage systems
- G06F3/0602—Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
- G06F3/062—Securing storage systems
- G06F3/0622—Securing storage systems in relation to access
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/14—Protection against unauthorised use of memory or access to memory
- G06F12/1416—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights
- G06F12/1425—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights the protection being physical, e.g. cell, word, block
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/14—Protection against unauthorised use of memory or access to memory
- G06F12/1458—Protection against unauthorised use of memory or access to memory by checking the subject access rights
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
- G06F3/0601—Interfaces specially adapted for storage systems
- G06F3/0628—Interfaces specially adapted for storage systems making use of a particular technique
- G06F3/0629—Configuration or reconfiguration of storage systems
- G06F3/0637—Permissions
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
- G06F3/0601—Interfaces specially adapted for storage systems
- G06F3/0628—Interfaces specially adapted for storage systems making use of a particular technique
- G06F3/0638—Organizing or formatting or addressing of data
- G06F3/0644—Management of space entities, e.g. partitions, extents, pools
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Human Computer Interaction (AREA)
- Computer Security & Cryptography (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
- Storage Device Security (AREA)
Abstract
The invention discloses a method and a system for hiding data on a movable storage device, and the technical scheme is characterized by comprising the following steps: partitioning the storage equipment in advance to form a display partition and a hidden partition, wherein mapping tables for generating logical addresses to physical addresses based on partition capacity are written in the display partition and the hidden partition; when the storage device is powered on, only the display partition is reported to be identified by the operating system of the host; and sending a private command to the storage device through the file application software, determining that a hidden partition exists in the storage device, and displaying and operating data in the hidden partition based on the file application software. The invention has the characteristic of high data security.
Description
Technical Field
The present invention relates to the field of storage technologies, and in particular, to a method and system for hiding data on a removable storage device.
Background
NAND Flash (Flash memory) is currently the most mainstream nonvolatile storage medium, and is widely used in common storage products such as mobile U disk, solid state disk (Solid State Drivers, SSD), mobile memory card, and the like, because of its advantages such as high performance, low power consumption, shock resistance, and long lifetime.
A storage device such as a solid state disk is a hard disk composed of a control unit and a solid state storage unit (NAND Flash). The solid state disk adopts a NAND Flash chip to store data, the NAND Flash chip needs to be erased before data is written, the basic unit of the erase operation is a Block (Page), each Block comprises a plurality of pages, and the pages are basic units of data read-write operation.
When the storage device is connected with the computer through the USB interface, the storage device is electrified, and an operating system of the computer can identify data in the storage device, so that the data in the storage device can be read and written, the storage device can be suitable for each computer, and the following data security problem is more and more valued by a user.
Therefore, the existing storage device has an improvement in that the information to be protected is not accessed by other people, and the security of the data is improved.
Disclosure of Invention
Aiming at the defects existing in the prior art, the invention aims to provide a method for hiding data on a movable storage device, which has the characteristic of improving the data security.
The technical aim of the invention is realized by the following technical scheme:
a method for hiding data on a removable storage device, comprising the steps of:
partitioning the storage equipment in advance to form a display partition and a hidden partition, wherein mapping tables for generating logical addresses to physical addresses based on partition capacity are written in the display partition and the hidden partition;
when the storage device is powered on, only the display partition is reported to be identified by the operating system of the host;
and sending a private command to the storage device through the file application software to determine that the hidden partition exists in the storage device, and displaying and operating the data in the hidden partition based on the file application software.
Preferably, the file application software is stored in other storage devices connected to the host computer, or the file application software is stored in a display partition of the storage device.
Preferably, only reporting the display partition for identification by the operating system of the host when the storage device is powered on includes the steps of:
the display partitions of the storage device are provided with a plurality of display partitions, and each display partition stores file application software adapting to different host operating system types;
identifying the type of a host operating system when the storage device is powered on;
based on the type of the host operating system, the display partition storing the file application software adapted thereto is reported.
Preferably, the private command is sent to the storage device through the file application software to determine that a hidden partition exists in the storage device, and the data in the hidden partition is displayed and operated based on the file application software, and the method comprises the following steps:
after determining that a hidden partition exists in the storage device, the file application software receives a corresponding logic address in a hidden partition mapping table fed back by the storage device;
the file application software reads the data of the hidden partition based on the physical address corresponding to the logical address in the hidden partition mapping table;
the file application software analyzes the catalog and the file structure of the hidden partition data through the nested virtual file system, and displays the analyzed data in a file form;
and the file application software performs read-write operation on the displayed hidden partition data.
Preferably, the file application software may issue a switch instruction to the storage device, and the storage device responds to the switch instruction to report the hidden partition for identification by the operating system of the host.
In view of the shortcomings of the prior art, another object of the present invention is to provide a system for hiding data on a removable storage device, which has the feature of improving data security.
The technical aim of the invention is realized by the following technical scheme:
a system for hiding data on a removable storage device, comprising:
the partition module is used for partitioning the storage device in advance to form a display partition and a hidden partition, wherein mapping tables for generating logical addresses to physical addresses based on partition capacity are written in the display partition and the hidden partition;
the reporting module is used for only reporting the display partition to be identified by the operating system of the host computer when the storage device is powered on;
and the file application software is used for sending a private command to the storage device to determine that the hidden partition exists in the storage device so as to display and operate the data in the hidden partition.
Preferably, the file application software is stored in other storage devices connected to the host, or the file application software is stored in a display partition of the storage device.
Preferably, the reporting module includes:
the configuration module is provided with a plurality of display partitions of the storage device, and each display partition stores file application software adapting to different host operating system types;
the identification module is used for identifying the type of the host operating system when the storage device is powered on;
and the matching module is used for reporting the display partition which stores the file application software matched with the host operating system type.
Preferably, the file application software includes:
the identification module is used for receiving the corresponding logical address in the hidden partition mapping table fed back by the storage device after determining that the hidden partition exists in the storage device;
the reading module is used for reading the data of the hidden partition based on the physical address corresponding to the logical address in the hidden partition mapping table;
the display module is used for analyzing the catalog and the file structure of the hidden partition data through the virtual file system and displaying the analyzed data in a file form;
and the operation module is used for performing read-write operation on the displayed hidden partition data.
Preferably, the file application software further includes:
and the switching module is used for issuing a switching instruction to the storage device, and the storage device responds to the switching instruction to report the hidden partition so as to be identified by the operating system of the host.
In summary, compared with the prior art, the invention has the following beneficial effects:
the storage device is partitioned when the storage device leaves a factory and forms a display partition and a hidden partition respectively, and when the storage device is connected with a host machine and is powered on, the storage device only reports the display partition to be identified by a host machine operating system, so that the host machine operating system can only perform read-write operation on data in the display partition;
the file application software can skip the host operating system to directly read and identify the data in the hidden partition of the storage device, and a user can only enter the hidden partition of the storage device through the file application software, so that the data in the hidden partition is displayed in the file application software in a file form, and the user can conveniently and directly read and write the data in the hidden partition;
therefore, the data in the hidden partition can be read only through matched file application software, so that the safety of the data in the storage device is improved.
Drawings
FIG. 1 is a schematic diagram of a memory device according to the present invention;
FIG. 2 is a schematic diagram illustrating interaction between a storage device and a host in the technical scheme of the present invention;
FIG. 3 is a schematic flow chart of a method for hiding data according to the present invention;
FIG. 4 is a flow chart of the file application software adapting to the type of the host operating system according to the embodiment of the present invention;
FIG. 5 is a schematic flow chart of reading and writing and displaying hidden partition data of file application software in the technical scheme of the invention;
fig. 6 is a system block diagram of a hidden data system in the technical solution of the present invention.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention, and it is apparent that the described embodiments are some embodiments of the present invention, but not all embodiments of the present invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
The storage device comprises a mobile U disk, a solid state disk (Solid State Drivers, SSD) and a mobile memory card. As shown in fig. 1, the storage device includes a control unit, a flash memory chip and a buffer unit, where the control unit is electrically connected to the flash memory chip and the buffer unit, and the control unit is used to implement data interaction with a host, receive a command sent by the host, and is responsible for resolving the host command, allocating the buffer unit, implementing mapping between a logical address and a physical address, coordinating garbage collection and host service, and the like.
The buffer unit can temporarily store data (such as read-write data of a host, intermediate data in a garbage collection process and the like), and various table item information (such as mapping relation of a logical address and a physical address, data block abrasion and use information, a data block grade linked list and the like). Typically, the cache unit is implemented by a control unit on-hook cache (e.g., SDRAM, ddr.) with cache capacities of hundreds of MB in high performance enterprise level SSDs.
The storage device has the characteristic of being movable and is widely applied to the scene of file copy transmission, so that in the use process of the existing storage device, people can frequently find that when the storage device is connected in a computer (also called a Host computer and a Host computer) through a USB interface, the Host computer can see all data conditions in the storage device, and therefore when the file copy is transmitted, anyone can copy the data in the storage device only by connecting the storage device with the Host computer, and the security of the data in the storage device is low.
Therefore, the storage device is partitioned in advance to form a display partition and a hidden partition, the display partition can be used for storing basic data, and the hidden partition can be used for storing important data.
Furthermore, the file application software adapting to the host operating system can be developed in advance, the file application software can skip the host operating system to directly read and identify the data in the hidden partition of the storage device, and a user can only enter the hidden partition of the storage device through the file application software, so that the data in the hidden partition is displayed in the file application software in a file form, and the user can conveniently and directly read and write the data in the hidden partition, so that the data in the hidden partition can be read only through the matched file application software, and the safety of the data in the storage device is improved.
Example 1
In view of the foregoing, as shown in fig. 3, the present invention provides a method for hiding data on a removable storage device, comprising the steps of:
in step S100, the storage device is partitioned in advance to form a display partition and a hidden partition, where mapping tables for generating logical addresses to physical addresses based on partition capacities are written in both the display partition and the hidden partition.
According to the technical scheme defined in step S100, specifically, when the storage device leaves the factory, by configuring an embedded program in the control unit in the storage device, the storage device can be partitioned by the embedded program, so that the storage device forms a display partition and a hidden partition.
The storage device is partitioned in the following manner:
as shown in fig. 1 and fig. 2, a user setting instruction is issued in advance through an embedded program, the storage device performs partitioning according to the user setting instruction, the number of the display partition and the hidden partition and the partition capacity of the display partition and the hidden partition are set, for example, the total capacity of the storage device is 4G, the storage device is divided into two partitions of the display partition and the hidden partition, the partition capacity of the display partition can be set to be 1G, and the partition capacity of the hidden partition is 3G.
And generating corresponding logic addresses according to the partition capacities of the display partition and the hidden partition, reading the physical addresses of the display partition and the hidden partition, generating mapping tables corresponding to the display partition and the hidden partition based on the logic addresses and the physical addresses, and writing the mapping tables into the corresponding display partition and the hidden partition, so that mapping tables for generating the logic addresses to the physical addresses based on the partition capacities are written into the display partition and the hidden partition.
The logical address refers to a relative address used in an application program, the physical address refers to an absolute address in a flash memory chip, the content stored in the mapping table is a mapping relation from the logical address to the physical address, the corresponding physical address can be found by inquiring the mapping table through the logical address, and then the data in the flash memory chip is read and written.
When the host operates the storage device to write or read data, a logical address of a target operation is usually sent, the storage device receives the logical address and then converts the logical address into a corresponding physical address on the flash memory chip, and then the data is written into or read from the physical address.
Thus, how to determine which physical address of the flash memory chip the data is written to or from which physical address of the flash memory chip the data is read out, all logical address to physical address conversions are managed by FTL conversion layer algorithms of the control unit in the memory device, i.e. managing a mapping table of logical addresses to physical addresses.
In step S200, only the display partition is reported to be identified by the operating system of the host computer when the storage device is powered on.
According to the technical scheme defined in step S200, specifically, in the prior art, a mapping table is generated in the storage device, where the mapping table corresponds to mapping of the entire physical address of the storage device to the logical address, when the storage device is powered on, the storage device will report the entire mapping table to the host, and the host identifies the mapping table to obtain the logical address of the entire storage device, whether it is a Linux operating system or a Windows operating system, only the file system of the storage device needs to be identified by the host, and the data in the storage device is completely visible in the host operating system.
In the application, mapping tables are written in a display partition and a hidden partition in a storage device, an application software and a file system driving layer are configured in a host operating system, the storage device only reports the partition capacity of the display partition and the logical address of the mapping table to the host, and after the application software obtains the logical address of the display partition reported by the storage device, the application software reads the logical address to identify data in the display partition, and the data in the display partition is displayed in a file form through the file system driving layer.
The storage device does not report the logical address of the mapping table of the hidden partition to the host, so that the host cannot identify the hidden partition, and cannot display and read/write data in the hidden partition, and therefore the hidden partition is in an invisible state for a user. Wherein the file systems of the display partition and the hidden partition of the storage device are configured to match the host operating system.
The application develops file application software for the purpose of opening the hidden partition in the storage device. The file application software is matched with the host operating system, the file application software can be operated and used under the host operating system, and the file application software can be opened under the host operating system to identify the data of the hidden partition in the storage device and perform read-write operation.
In one embodiment, the file application software is stored in a display partition of the storage device. In another embodiment, the file application software is stored in the host, i.e., in other storage devices connected to the host. However, due to the removable nature, the storage device is often connected with hosts of different operating systems, and the file application software can adapt to the Linux operating system, but cannot adapt to the Windows operating system, so that two sets of file application software need to be configured for special use.
In the case where only the display partition is reported to be recognized by the operating system of the host when the storage device is powered on, as shown in fig. 4, the method includes the following steps:
step S210, a plurality of display partitions of the storage device are provided, and file application software adapting to different host operating system types is stored in each display partition;
step S220, identifying the type of a host operating system when the storage device is powered on;
step S230, based on the type of the host operating system, the display partition storing the file application software adapted to the host operating system is reported.
According to the technical scheme defined in step S210 to step S230, specifically, the storage device is built with a plurality of display partitions when leaving the factory, so that file application software adapted to different host operating system types is stored in different display partitions. In one embodiment, the storage device is configured with a first display partition in which file application software that is adapted to the Linux operating system is stored, a second display partition in which file application software that is adapted to the Windows operating system is stored, and a hidden partition.
Therefore, when the storage device is powered on, the storage device can identify the type of the host operating system, when the storage device is powered on, the host operating system performs data interaction with the storage device, different host operating systems in the data interaction can issue different data interaction instructions, and the type of the host operating system can be identified through the data interaction instructions. If the storage device identifies that the host operating system type is Linux operating system, the storage device reports the first display partition so that only the first display partition is identified by the host operating system. If the storage device identifies that the host operating system type is Windows operating system, the storage device will report the second display partition so that only the second display partition is identified by the operating system of the host.
By the mode, the purpose that file application software in the storage equipment can adapt to a plurality of host operating systems is achieved.
The following description is made for the file application software to open the data in the hidden partition of the storage device:
and step S300, sending a private command to the storage device through the file application software to determine that the hidden partition exists in the storage device, and displaying and operating the data in the hidden partition based on the file application software.
According to the technical scheme defined in step S300, specifically, after the storage device is powered on, the host establishes a connection with the storage device, and then the file application software establishes a connection with the storage device.
The specific process of determining whether the hidden partition exists in the storage device by the file application software is as follows: the user opens file application software in the host operating system, the file application software sends a private command to the storage device, the private command carries a verification key, the storage device can acquire the verification key in the private command after receiving the private command, then the verification key of the private command is matched with a preset key, after the verification key is successfully matched with the preset key, the storage device returns a logical address corresponding to the hidden partition mapping table and the partition capacity of the hidden partition to the file application software, so that the hidden partition exists in the storage device, and the user can display and read and write data in the hidden partition through the file application software.
Otherwise, after the verification key fails to match with the preset key, the storage device will not return the logical address corresponding to the hidden partition mapping table, so as to indicate that there is no hidden partition in the storage device.
In order to improve the uniqueness of the use of the file application software, a login page is also configured in the file application software, and an account number and a password are required to be input into the login page to enter the file application software, so that the existence of a hidden partition in the storage device is determined.
It should be noted that, the method includes sending a private command to the storage device through the file application software to determine that a hidden partition exists in the storage device, and displaying and operating data in the hidden partition based on the file application software, as shown in fig. 5, including the following steps:
step S310, after determining that a hidden partition exists in the storage device, the file application software receives a corresponding logical address in a hidden partition mapping table fed back by the storage device;
step S320, the file application software reads the data of the hidden partition based on the physical address corresponding to the logical address in the hidden partition mapping table;
step S330, the file application software analyzes the catalog and the file structure of the hidden partition data through the nested virtual file system, and displays the analyzed data in a file form;
and step S340, the file application software performs read-write operation on the displayed hidden partition data.
According to the technical scheme defined in steps S310 to S340, specifically, after the file application software obtains the logical address of the hidden partition mapping table, the partition capacity start logical address and the partition capacity end logical address of the corresponding hidden partition in the mapping table are identified, so as to obtain the partition capacity of the hidden partition correspondingly, and further obtain the corresponding physical address through the logical address, so that the file application software can read the data in the hidden partition.
If the file application software directly reads the data in the hidden partition, the data is in a binary code form of '010101 … …', and the data cannot be effectively displayed for a user to view, so that the virtual file system can analyze the directory and the file structure of the data of the hidden partition, and the analyzed data is displayed in a file form. The style of the file form display will be defined by the UI interface of the file application software.
Therefore, the virtual file system configuration is carried out into the file application software, so that the file application software forms an integral program capable of opening and displaying the data in the hidden partition without calling a file system driving layer of the host operating system, the file application software can directly read the data in the hidden partition so as to skip the host operating system, and the data in the hidden partition is directly displayed in a file form on a UI interface of the file application software. Thus, the file application software opens the security of the data in the hidden partition is higher.
And the file application software performs read-write operation on the displayed hidden partition data. Specifically, when the file application software performs a read operation on the data in the hidden partition, the file application software can issue a private command of the read operation to the storage device, wherein the private command carries a read operation instruction, a logical address of a read file and a private key, when the storage device receives the private command, the storage device firstly matches a preset private key with the preset key, performs the read operation after the matching is successful, searches a physical address of the file in the flash memory chip in the mapping table based on the logical address, further reads the data in the flash memory chip and feeds the data back to the file application software, and the file application software displays the fed-back data through the virtual file system.
Similarly, when the file application software system performs writing operation on the hidden partition, the file application software issues a private command of the writing operation to the storage device, wherein the private command carries a writing operation instruction, a logic address of a writing file and a private key, when the storage device receives the private command, the storage device firstly matches a preset private key with the preset key, performs writing operation after successful matching, writes data into the flash memory chip, maps a physical address and a logic address of the writing file, updates a mapping table of the hidden partition, and correspondingly feeds back the mapping table to the file application software.
When a user copies data in a storage device into a host through file application software. The user selects files or catalogues in the storage device through the file application software and copies to the host computer, the file application software obtains file information to be copied by the user and all logic addresses related to the file content through the virtual file system, the file application software issues a private command to the storage device, the storage device reads a physical address corresponding to the files from the mapping table based on the logic addresses, the file application software creates files with the same file information in an operating system of the host computer, and the file application software writes file data read by the storage device into the files created by the operating system.
When a user copies data in a host to a storage device through file application software. The user selects the file in the host through the file application software and selects to copy the file to the storage device, the file application software reads the file information and the file content of the host file through the operating system, the file application software generates a logic address written into the storage device through the virtual file system, the file application software issues a private command to the storage device, the file information and the content are written into the storage device, the storage device maps and updates the physical address and the logic address written into the storage device in the mapping table, and the operation of writing the file into the storage device from the host operating system is completed.
It should be noted that the file application software may also issue a switch instruction to the storage device, where the storage device responds to the switch instruction to report the hidden partition for identification by the operating system of the host.
Therefore, the display of the hidden partition on the host operating system can be realized through the mode, so that the hidden partition of the storage device can be identified by the host operating system, and when the storage device receives a switching instruction issued by the file application software, the storage device reports the logical address corresponding to the hidden partition mapping table to the host operating system, so that the hidden partition of the storage device can be accessed by the host operating system.
However, by using the above method, after the host operating system identifies the hidden partition of the storage device, the storage device needs to be plugged in and plugged out again, so that the hidden partition of the storage device can be prevented from being identified by the host operating system. Therefore, the hidden partition can be switched between display and hiding for the host operating system in the mode, the switching mode is simple and convenient, and complex configuration operation on the storage equipment is not needed.
Therefore, the file application software can skip the host operating system to directly read and identify the data in the hidden partition of the storage device, and a user can only enter the hidden partition of the storage device through the file application software, so that the data in the hidden partition is displayed in the file application software in a file form, and the user can conveniently and directly read and write the data in the hidden partition, so that the data in the hidden partition can be read only through the matched file application software, and the safety of the data in the storage device is improved.
Example two
The invention also provides a system for hiding data on the movable storage device, as shown in fig. 6, the system is applied to the storage device and the host, the storage device comprises a control unit, a flash memory chip and a buffer unit, the control unit is respectively and electrically connected with the flash memory chip and the buffer unit, the control unit is used for realizing data interaction with the host, the control unit receives a command sent by the host, and the control unit is responsible for analyzing the host command, distributing the buffer unit, realizing mapping of a logical address and a physical address, coordinating garbage collection and host service and the like. The control unit of the storage device is also provided with a partition module and a reporting module.
The partition module is used for partitioning the storage device in advance to form a display partition and a hidden partition, wherein mapping tables for generating logical addresses to physical addresses based on partition capacity are written in the display partition and the hidden partition; the reporting module is used for only reporting the display partition to be identified by the operating system of the host computer when the storage device is powered on.
In one embodiment, file application software is stored in a display partition of the storage device, and the file application software is used for sending a private command to the storage device to determine that a hidden partition exists in the storage device so as to display and operate data in the hidden partition.
In another embodiment, the file application is stored in other storage devices connected to the host. The file application software is used for sending a private command to the storage device to determine that a hidden partition exists in the storage device so as to display and operate data in the hidden partition.
It is worth to say that the reporting module comprises a configuration module, an identification module and a matching module.
The configuration module is used for setting a plurality of display partitions of the storage device, and each display partition stores file application software adapting to different host operating system types; the identification module is used for identifying the type of the host operating system when the storage device is powered on; the matching module is used for reporting the display partition which stores the file application software matched with the host operating system type.
The file application software comprises an identification module, a reading module, a display module and an operation module.
The identification module is used for receiving a corresponding logic address in a hidden partition mapping table fed back by the storage device after determining that the hidden partition exists in the storage device; the reading module is used for reading the data of the hidden partition based on the physical address corresponding to the logical address in the hidden partition mapping table; the display module is used for analyzing the catalog and the file structure of the hidden partition data through the virtual file system and displaying the analyzed data in a file form; the operation module is used for performing read-write operation on the displayed hidden partition data.
The file application software also includes a switching module for issuing a switching instruction to the storage device, the storage device responding to the switching instruction to report the hidden partition for recognition by the operating system of the host.
According to the method and the device, the file application software can skip the host operating system to directly read and identify the data in the hidden partition of the storage device, and a user can only enter the hidden partition of the storage device through the file application software, so that the data in the hidden partition is displayed in the file application software in a file form, the user can conveniently and directly read and write the data in the hidden partition, and the data in the hidden partition can be read only through the matched file application software, so that the safety of the data in the storage device is improved.
The foregoing is merely exemplary embodiments of the present invention and is not intended to limit the scope of the invention, which is defined by the appended claims.
Claims (2)
1. A method for hiding data on a removable storage device, comprising the steps of:
partitioning the storage equipment in advance to form a display partition and a hidden partition, wherein mapping tables for generating logical addresses to physical addresses based on partition capacity are written in the display partition and the hidden partition;
when the storage device is powered on, only reporting the display partition, wherein a plurality of display partitions are arranged on the storage device, and each display partition stores file application software adapting to different host operating system types;
identifying the type of a host operating system when the storage device is powered on;
based on the type of the host operating system, reporting a display partition storing the file application software adapted to the host operating system;
sending a private command to the storage device through file application software to determine that a hidden partition exists in the storage device;
after determining that a hidden partition exists in the storage device, the file application software receives a corresponding logic address in a hidden partition mapping table fed back by the storage device;
the file application software reads the data of the hidden partition based on the physical address corresponding to the logical address in the hidden partition mapping table;
the file application software analyzes the catalog and the file structure of the hidden partition data through the nested virtual file system, and displays the analyzed data in a file form;
the file application software performs read-write operation on the displayed hidden partition data;
the file application software is stored in other storage devices connected with the host computer, or the file application software is stored in a display partition of the storage device;
the file application software may issue a switch instruction to the storage device, which responds to the switch instruction to report the hidden partition for recognition by the operating system of the host.
2. A system for hiding data on a removable storage device, comprising:
the partition module is used for partitioning the storage device in advance to form a display partition and a hidden partition, wherein mapping tables for generating logical addresses to physical addresses based on partition capacity are written in the display partition and the hidden partition;
the reporting module is used for only reporting the display partition to be identified by the operating system of the host computer when the storage device is powered on;
the reporting module comprises a configuration module, an identification module and a matching module;
the configuration module is used for configuring a plurality of display partitions of the storage device, and file application software adapting to different host operating system types is stored in each display partition;
the identification module is used for identifying the type of the host operating system when the storage device is powered on;
the matching module is used for reporting the display partition stored with the file application software matched with the matching module based on the type of the host operating system
File application software for sending a private command to the storage device to determine that a hidden partition exists in the storage device, so as to display and operate data in the hidden partition;
the file application software comprises an identification module, a reading module and a display module;
the identification module is used for receiving a corresponding logic address in a hidden partition mapping table fed back by the storage device after determining that the hidden partition exists in the storage device;
the reading module is used for reading the data of the hidden partition based on the physical address corresponding to the logical address in the hidden partition mapping table;
the display module is used for analyzing the catalog and the file structure of the hidden partition data through the virtual file system and displaying the analyzed data in a file form;
an operation module for performing read-write operation on the displayed hidden partition data
The file application software is stored in other storage devices connected with the host computer, or the file application software is stored in display partitions of the storage devices;
the file application software also comprises a switching module, wherein the switching module is used for issuing a switching instruction to the storage device, and the storage device responds to the switching instruction to report the hidden partition so as to be identified by an operating system of the host.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910853849.6A CN110489357B (en) | 2019-09-10 | 2019-09-10 | Method and system for hiding data on removable storage device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910853849.6A CN110489357B (en) | 2019-09-10 | 2019-09-10 | Method and system for hiding data on removable storage device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110489357A CN110489357A (en) | 2019-11-22 |
| CN110489357B true CN110489357B (en) | 2023-07-14 |
Family
ID=68557242
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910853849.6A Active CN110489357B (en) | 2019-09-10 | 2019-09-10 | Method and system for hiding data on removable storage device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110489357B (en) |
Families Citing this family (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111913900B (en) * | 2020-07-21 | 2024-05-31 | 大唐微电子技术有限公司 | Method for communication between host and external device, storage medium and electronic device |
| CN112579107A (en) * | 2020-12-24 | 2021-03-30 | 深圳须弥云图空间科技有限公司 | Data hiding and calling method and device, electronic equipment and readable storage medium |
| CN113408015B (en) * | 2021-06-15 | 2024-07-19 | 北京安天网络安全技术有限公司 | Product operation and maintenance method and device of terminal equipment and storage medium |
| CN113535603B (en) * | 2021-06-22 | 2023-06-13 | 杭州华澜微电子股份有限公司 | Implementation method of data hiding partition |
| CN113378245B (en) * | 2021-07-07 | 2024-07-19 | 北京安天网络安全技术有限公司 | Operation and maintenance method and device for security state data, electronic equipment and storage medium |
| CN113794701A (en) * | 2021-08-30 | 2021-12-14 | 合肥致存微电子有限责任公司 | Real-time dynamic SCSI private command communication locking method and device |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102654849A (en) * | 2011-03-03 | 2012-09-05 | 赛酷特(北京)信息技术有限公司 | Method for hiding and reading by partitions |
| CN106709361A (en) * | 2016-11-30 | 2017-05-24 | 中国人民解放军信息工程大学 | File content hidden storage access method based on capacity hiding and multi-file system and storage device of method |
| CN109840435A (en) * | 2017-11-27 | 2019-06-04 | 深圳市朗科科技股份有限公司 | A kind of data guard method storing equipment |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20130262879A1 (en) * | 2012-03-29 | 2013-10-03 | Aptos Technology Inc. | Secure type storage device and information security system |
-
2019
- 2019-09-10 CN CN201910853849.6A patent/CN110489357B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102654849A (en) * | 2011-03-03 | 2012-09-05 | 赛酷特(北京)信息技术有限公司 | Method for hiding and reading by partitions |
| CN106709361A (en) * | 2016-11-30 | 2017-05-24 | 中国人民解放军信息工程大学 | File content hidden storage access method based on capacity hiding and multi-file system and storage device of method |
| CN109840435A (en) * | 2017-11-27 | 2019-06-04 | 深圳市朗科科技股份有限公司 | A kind of data guard method storing equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN110489357A (en) | 2019-11-22 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110489357B (en) | Method and system for hiding data on removable storage device | |
| US6678785B2 (en) | Flash management system using only sequential write | |
| US8762627B2 (en) | Memory logical defragmentation during garbage collection | |
| US9753847B2 (en) | Non-volatile semiconductor memory segregating sequential, random, and system data to reduce garbage collection for page based mapping | |
| US9727245B2 (en) | Method and apparatus for de-duplication for solid state disks (SSDs) | |
| CN100517268C (en) | Nonvolatile memory system, nonvolatile memory device, memory controller, access device, and method for controlling nonvolatile memory device | |
| US20070038802A1 (en) | System and method for configuration and management of flash memory | |
| US20100169588A1 (en) | Optimized memory management for random and sequential data writing | |
| KR20150083264A (en) | System and method for efficient address translation on Flash memory device | |
| EP3346387B1 (en) | Storage system and system garbage collection method | |
| US6591356B2 (en) | Cluster buster | |
| US10019398B2 (en) | System with solid state drive and control method thereof | |
| CN110908927A (en) | Data storage device and method for deleting name space thereof | |
| CN103150256A (en) | Method and device to improve usb flash write performance | |
| US8433847B2 (en) | Memory drive that can be operated like optical disk drive and method for virtualizing memory drive as optical disk drive | |
| US20100287330A1 (en) | Method for writing data into flash memory | |
| US20100318726A1 (en) | Memory system and memory system managing method | |
| WO2017132797A1 (en) | Data arrangement method, storage apparatus, storage controller and storage array | |
| CN110569202A (en) | Multimedia file playing method and system for movable storage equipment | |
| CN110554843A (en) | Method and system for storing file data by multiple storage devices | |
| CN110658978B (en) | Data processing method and device, electronic equipment and readable storage medium | |
| CN103257928A (en) | Method and system for data management of flash memory equipment | |
| CN115934002A (en) | Solid state disk access method, solid state disk, storage system and cloud server | |
| US11436105B2 (en) | Data processing method and memory controller utilizing the same | |
| US20210303212A1 (en) | Data processing method and memory controller utilizing the same |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information | ||
| CB02 | Change of applicant information |
Address after: 518000 09-2, 10-11 unit, 6 building, Changhong science and technology building, 18 South Road, science and Technology Park, Nanshan District, Shenzhen, Guangdong, China 18 Applicant after: Deyi Microelectronics Co.,Ltd. Address before: 518000 09-2, 10-11 unit, 6 building, Changhong science and technology building, 18 South Road, science and Technology Park, Nanshan District, Shenzhen, Guangdong, China 18 Applicant before: YEESTOR MICROELECTRONICS Co.,Ltd. |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant |