CN201078772Y - Information safety equipment with multi interface for automatic installation - Google Patents

Information safety equipment with multi interface for automatic installation Download PDF

Info

Publication number
CN201078772Y
CN201078772Y CNU2007201036523U CN200720103652U CN201078772Y CN 201078772 Y CN201078772 Y CN 201078772Y CN U2007201036523 U CNU2007201036523 U CN U2007201036523U CN 200720103652 U CN200720103652 U CN 200720103652U CN 201078772 Y CN201078772 Y CN 201078772Y
Authority
CN
China
Prior art keywords
module
information safety
safety devices
main frame
usb
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
CNU2007201036523U
Other languages
Chinese (zh)
Inventor
陆舟
于华章
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Feitian Technologies Co Ltd
Original Assignee
Beijing Feitian Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Feitian Technologies Co Ltd filed Critical Beijing Feitian Technologies Co Ltd
Priority to CNU2007201036523U priority Critical patent/CN201078772Y/en
Application granted granted Critical
Publication of CN201078772Y publication Critical patent/CN201078772Y/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Abstract

The utility model discloses an information safety equipment being able be automatically installed with multiple interfaces, which belongs to the information safety field. In order to solve the problems of the information safety equipment in the prior art, such as single interface standard, high cost and low reliability, etc., the utility model provides an information safety equipment being able to be automatically installed with multiple interfaces, which comprises a USB interface module, a judging module, a control module, an SCSI protocol processing module, an unrestricted protocol processing module, an automatic running module, an information safety module and at least two USB interfaces. The information safety equipment in the utility model can realize multiple interfaces and function of automatic installation, users can not suffer from limitation of user authority when using the information safety equipment.

Description

Many interfaces and the information safety devices that can install automatically
Technical field
The utility model relates to information security field, particularly a kind of many interfaces and the information safety devices that can install automatically.
Background technology
In recent years, along with the fast development of Internet technology and ecommerce, increasing commercial activity was transferred on the network and was carried out, for example, and the office of online government, Web bank and shopping online or the like.Meanwhile, more and more informational needs that relate to individual privacy and secret of the trade pass through network delivery.Yet deliberate threats such as virus, hacker and the counterfeit swindle of webpage have brought great challenge for the security of online transaction, cause network security problem to become very important.
Information safety devices (abbreviation equipment) is a kind of small hardware device that has processor and storer, and it is connected with main frame by the data communication interface of computing machine.It has key generation, safe storage key, presets functions such as cryptographic algorithm.The information safety devices computing relevant with key be fully at the device internal operation, and information safety devices has anti-characteristic of attacking, and security is high.Because information safety devices generally links to each other with computing machine by USB interface, so information safety devices is commonly called USB KEY or USB Token.Information safety devices manufacturer, software system development merchant or final user can store some important informations in the information safety devices into, in order to guarantee security or to prevent to forget.At present, the information safety devices of higher-end is programmable, promptly can be implemented in and move the code that pre-deposits wherein in the information safety devices.Information security operation comprises: data interaction, as the data that write are encrypted in information safety devices or the data that read are decrypted in information safety devices; Authentication information is handled, as storage/authentication password information, storage/certifying signature, storage/authentication certificate, rights management; Preset code and carry out data operation, as preset and to be read out information safety devices and portion operation within it and to carry out the user software part segment of data operation, preset software protection application interface function (information safety devices and software developer use between interface level function) or the like.
Usually can realize the information security function by built-in Safety Design chip in the information safety devices.The Safety Design chip is except the various characteristics with general-purpose built-in type microcontroller, when chip design, can aspect security performance, structurally do some special processings, for example, adopt specific security kernel, this security kernel can be supported a plurality of states that have different rights definition, is used to realize the management to the hardware resource access rights; Perhaps support the randomization of instruction time; Perhaps adopt the interrupt system that can realize the supporting chip state exchange, thereby realize control, to support the realizations of using more the level of security of different levels; Perhaps have MMU (Memory Management Unit, Memory Management Unit), be used to realize the isolation and the map addresses of logical address, physical address, support the design of many application, security to realize from architecture, organically form a hardware firewall with the different conditions of kernel support; Perhaps adopt energy back-up system database and the interface of user program and the interrupt system of transfer of right and switching; Perhaps adopt non-volatile memory medium or the like.
Safety Design chip in the information safety devices generally all requires to meet relevant standard and by the authentication of being correlated with etc. guaranteeing its security performance, as TCG TPM v1.2 standard, ISO15408 international standard and Chinese Password Management council standard or the like.There are a lot of money Safety Design chips available at present on the market, the ST19WP18 microcontroller of STMicw Electronics wherein, ensured the authentication of level EAL5+ (enhanced edition) by " public standard " assessment, this is the ISO15408 international standard about one of the highest standard of this series products.
The interface of existing information safety devices has multiple standards, for example, SCSI (Small Computer System Interface, the minihose system interface) standard, CCID (USB Chip/Smart Card Interface Devices-USB chip intelligent card equipment) standard and HID (Human Interface Device, human interface device) standard.When computing machine carries out communication at the information safety devices with distinct interface, be descriptor by the equipment type of coming identification equipment.Descriptor is the format piece of data result or information, and it can make computing machine know this equipment, and each descriptor has comprised the information about the Global Information of this equipment or an element.Different interfacing equipments has different descriptors.For example, the descriptor that meets the equipment of scsi interface standard, the equipment that meets the CCID interface standard and the equipment that meets the HID interface standard is all different, and computing machine can identify corresponding apparatus by descriptor when being connected with these equipment.
SCSI is a kind of interface standard that main frame connects external equipment, and the faster data transmission rate can be provided.SCSI has reserved explosion command for making things convenient for the developer to use, for finishing the SCSI communication of information safety devices, the developer is designed to the order of information safety devices with the SCSI explosion command, and the user only need use the SCSI extended instruction, just can finish the function of information safety devices.But in the operating system more than Windows 2000 reaches, domestic consumer does not have authority to use the SCSI extended instruction, has only the power user just to have authority to use.Authority be Windows for the purpose of safety, limited subscriber is to the right to access of system resource.Different user capture computing machines have different authorities.The user of Windows is divided into many groups, and common user's group has following several: Administrator (group of administrators), System, Power User (advanced level user's group), Power User, User (domestic consumer's group) and Guest (guest's group).Usually claim that Administrator, System and PowerUser are the power user, User and Guest are non-power user.Power user's authority is than non-power user's authority height.The use of scsi device extended instruction is subjected to the restriction of user right, and this has brought a lot of inconvenience for the use of scsi device.
AutoPlay function (Autorun) is the function that USB-SCSI equipment is carried, it becomes easier to the operation that equipment such as CD, hard disk and mass memory carry out, owing to comprised the needs order of operation automatically in the Autorun program, as change contents such as drive icon, run program file and optional shortcut menu, so when equipment such as CD that has the Autorun program or mass memory are connected on the computing machine, the Autorun program can be loaded corresponding document, for example GIF, JPEG, html file and pdf document etc., thus realize AutoPlay function.The Autorun program can also show startup interface etc. in addition.
The CCID standard is that it provides a kind of read-write equipment for smart card and main frame or other embedded host to realize the possibility of mutual communication by the common standard of formulating of several big international IT enterprises.The CCID standard code CCID equipment be a kind of chip/intelligence card interface device, equipment is connected with main frame or other embedded host by USB interface, the data communication that meets the CCID standard, equipment carries out communication by interface and the smart card that meets 7816 standard agreements simultaneously.Microsoft provides on its Windows2000 and above operating system and supports CCID to drive, and device fabrication manufacturer can be developed easily use the equipment that meets the CCID interface standard.Simultaneously, the CCID interface standard is supported PC (Personal Computer-personal computer)/SC (Smart Card-smart card) interface interchange, make numerous developers develop operation to information safety devices easily, on numerous versions of other increase income operating system such as LINUX, also having many CCID that increase income to drive can use for developer and user.
The HID class is a kind of in first USB device type of supporting fully of Windows, at operation Windows 98 or more on the computing machine of highest version, application program can with the HID devices communicating that uses the built-in driving of operating system, for this reason, the USB device that meets the HID class just is provided with easily and is moved.But HID equipment must not have man-machine interface, and it just needs and can play a role in the restriction of HID class standard.The equipment within the restriction of any HID of being operated in class of we can say can be called HID equipment, these equipment both can send data to computing machine, also can receive the request of configuration device from computing machine, the main example of being responsible for receiving data is the control panel of remote display and remote equipment, and once in a while or periodically receive the equipment of any kind of order from main frame.HID equipment can be one of a plurality of USB interface of equipment support, both can be that low-speed device also can be a full speed equipment.Microsoft provides on its Windows98 and above operating system and supports HID to drive, and device fabrication manufacturer can be developed easily use the equipment that meets the HID interface standard.
HID equipment and CCID equipment have many good qualities, and for example, can not be subjected to the restriction of user right, and in Windows98 and above operating system, domestic consumer and administrator can realize HID equipment and CCID equipment conducts interviews and corresponding operation; And the equipment user does not need install driver just can use whenever and wherever possible, do not need to manage the constantly driver of upgrading of version, do not need to consider the compatibling problem of different product driver, demand side does not need to worry the pollution of the installation unloading of driver to system's generation to the operating system application risk that driver causes.Generally, when host computer system is supported the smart card login, the CCID agreement can be selected for use, when host computer system is not supported the smart card login, the HID agreement can be selected for use.Because above-mentioned advantage, make HID equipment and CCID equipment application more and more widely, but a new problem has also been proposed simultaneously, be that HID equipment and CCID equipment can not resemble the function that has automatic operation the scsi device, promptly can not realize automatic installation the equipment related application.
Having a kind of prior art at present is at inner USB flash disk partial circuit and hub (HUB) partial circuit of increasing of HID category information safety equipment/CCID category information safety equipment, thereby realizes AutoPlay function.Though this prior art can realize the HID category information safety equipment/CCID category information safety equipment of plug and play and have the function of automatic operation, but owing to increased USB flash disk partial circuit and hub partial circuit, cost of development is increased, and the reliability of information safety devices also decreases.
The utility model content
In order to solve problems such as the interface standard of information safety devices is single in the prior art, cost is high, reliability is low, the utility model provides a kind of many interfaces and the information safety devices that can install automatically, and described information safety devices comprises at least two USB joints,
Usb interface module is used for connecting described information safety devices and main frame by described USB joint, resolves and handle the USB communications protocol; Described usb interface module is connected with each USB joint in the described USB joint respectively;
Judge module is used to the USB joint of judging that described information safety devices and main frame connect; Described judge module is connected with each USB joint in the described USB joint respectively;
Control module, be used for result according to described judge module judgement, the corresponding relation of applied interface protocol when connecting by this USB joint and main frame with default USB joint and described information safety devices, control and the mode of operation of managing described information safety devices are handled and are controlled data; The described default USB joint and the corresponding relation of application interface agreement are that a corresponding scsi interface agreement, the not limited interface protocol of other equal correspondences are arranged in all USB joints of described information safety devices; Described control module links to each other with judge module with described usb interface module respectively;
The SCSI protocol process module is used for after described information safety devices receives the device type request that main frame sends, to the main frame statement from as the scsi device type, and dissection process scsi interface protocol instructions; Described SCSI protocol process module links to each other with control module;
Not limited protocol process module is used for after described information safety devices receives the device type request that main frame sends, to the main frame statement from as not limited interface protocol device type, and the not limited interface protocol instruction of dissection process; Described not limited protocol process module links to each other with control module;
Automatically operation module, be used for when described information safety devices by corresponding scsi interface agreement the USB joint and after main frame connects, start automatically and move the Autorun program; Described automatic operation module links to each other with the SCSI protocol process module;
The information security module is used to carry out information security operation; Described information security module links to each other with not limited protocol process module.
Described not limited protocol process module comprises: the HID protocol processing unit, be used for after described information safety devices receives the device type request that main frame sends, to the main frame statement from as HID interfacing equipment type, and dissection process HID interface protocol instruction; Described HID protocol processing unit links to each other with the information security module with described control module respectively.
Described not limited protocol process module comprises:
The CCID protocol processing unit is used for after described information safety devices receives the device type request that main frame sends, to the main frame statement from as CCID interfacing equipment type, and dissection process CCID interface protocol instruction; Described CCID protocol processing unit links to each other with the information security module with described control module respectively.
Described judge module comprises the decision circuitry of being made up of at least one resistance and at least one diode.
The I/O pin of described decision circuitry and described control module links to each other, and described decision circuitry is judged the USB joint that described information safety devices and main frame connect by the level information of the tie point of the I/O pin of described control module.
Described automatic operation module comprises:
Detecting unit is used for utilizing the Autorun program to detect whether the application program relevant with described information safety devices being installed in the described main frame after described information safety devices is used scsi interface agreement and main frame and set up communication;
Installation unit is used for utilizing described Autorun program that the application program relevant with described information safety devices is installed in described main frame when described detecting unit does not detect described main frame the application program relevant with described information safety devices is installed;
Described detecting unit links to each other with described installation unit.
Described usb interface module is discrete USB interface chip.
Described information security module and usb interface module, control module, SCSI protocol process module, not limited protocol process module and a module or a plurality of module moved automatically in the module are integrated on the chip.
Described chip is the Safety Design chip, and described Safety Design chip comprises intelligent card chip.
Described information security module is the Safety Design chip, and described Safety Design chip comprises intelligent card chip.
The beneficial effects of the utility model mainly show:
Information safety devices in the utility model can be realized the function of many interfaces and the function that can install automatically; The user can not be subjected to the restriction of user right when using information safety devices; Information safety devices and control method thereof can be used under Windows98, Windows2000, Windows xp, Windows2003 and above operating system, and power user and non-power user all can use.
Description of drawings
Fig. 1 is the structural drawing of many interfaces of the utility model embodiment and the information safety devices that can install automatically;
Fig. 2 is a kind of circuit diagram of many interfaces of the utility model embodiment and the information safety devices that can install automatically;
Fig. 3 is the another kind of circuit diagram of many interfaces of the utility model embodiment and the information safety devices that can install automatically.
Embodiment
The utility model is described in further detail below in conjunction with the drawings and specific embodiments, but the utility model is not limited to the following examples.
Main frame among the utility model embodiment can be desktop computer, notebook computer, server or special machine.Many interfaces among the utility model embodiment and the information safety devices that can install automatically have two USB joints at least, it can also be connected with other external unit, for example, card reader, communication apparatus, digital camera, main frame are outward if other specialized equipment or the like.
In the present embodiment, information safety devices has two USB joints, and referring to Fig. 1, the information safety devices that the utility model embodiment provides a kind of many interfaces and can install automatically specifically comprises:
(1) USB joint A101 is used for connecting with main frame;
(2) USB joint B102 is used for connecting with main frame;
(3) usb interface module 103, be used for by USB joint A101 and or USB joint B102 and main frame connect, resolve also processing USB communications protocol; It links to each other with USB joint B102 with USB joint A101 respectively;
(4) judge module 104, are used to judge that information safety devices and main frame connect is USB joint A101, or USB joint B102; It links to each other with USB joint B102 with USB joint A101 respectively;
(5) control module 105, be used for result according to judge module 104 judgements, the corresponding relation of applied interface protocol when connecting by this USB joint and main frame with default USB joint and information safety devices, the mode of operation of control and management information safety equipment, data are handled and controlled, and carry out communication by usb interface module 103 and main frame; It links to each other with judge module 104 with usb interface module 103 respectively;
USB joint default in the present embodiment is as follows with the corresponding relation of application interface protocol type: when information safety devices was connected with main frame by USB joint A101, the USB interface of information safety devices was used the scsi interface agreement and main frame carries out communication; When information safety devices was connected with main frame by USB joint B102, the USB interface of information safety devices was used not limited interface protocol-HID interface protocol and main frame carries out communication; When information safety devices has the above USB joint of three and three, wherein have only a corresponding scsi interface agreement, remaining is the not limited interface protocol of correspondence all;
(6) the SCSI protocol process module 106, be used for after information safety devices receives the device type request that main frame sends, to the main frame statement from as the scsi device type, and dissection process scsi interface protocol instructions; It links to each other with control module 105, be built-in with the scsi interface device descriptor, stating from as the scsi device type time, by control module 105, usb interface module 103 and USB joint A101 to main frame, this descriptor is transferred to main frame, and carries out communication with main frame;
(7) the HID protocol process module 107, be used for after information safety devices receives the device type request that main frame sends, to the main frame statement from as the HID device type, and dissection process HID interface protocol instruction; It links to each other with control module 105, be built-in with HID interfacing equipment descriptor, stating from as the HID device type time, by control module 105, usb interface module 103 and USB joint B102 to main frame, this descriptor is transferred to main frame, and carries out communication with main frame;
(8) move module 108 automatically, be used for after information safety devices connects by USB joint A101 and main frame, start automatically and move the Autorun program; It links to each other with SCSI protocol process module 106;
(9) the information security module 109, are used to carry out information security operation; It links to each other with HID protocol process module 107.
Automatically operation module 108 specifically comprises:
1) detecting unit is used for after information safety devices connects by USB joint A101 and main frame, utilizes the Autorun program to detect in the main frame whether the application program relevant with information safety devices is installed;
2) installation unit is used for utilizing the Autorun program that the application program relevant with information safety devices is installed in main frame when detecting unit does not detect main frame the information safety devices related application is installed.
Above-mentioned automatic operation module 108 also comprises:
The user right judging unit is used to utilize the Autorun program to judge the user right of current host computer system.
The application program relevant with information safety devices can also comprise watchdog routine, correspondingly, moves module 108 automatically and also comprises:
The user right judging unit is used to utilize Autorun program or watchdog routine to judge the user right of current host computer system.
Further, information security module 109 can also link to each other with SCSI protocol process module 106, when information safety devices connects by USB joint A101 and main frame, information security module 109 also is used for when the user right of the current host computer system of user right judgment unit judges is superuser right, mutual by scsi interface protocol instructions and main frame, carry out information security operation.
The Autorun program can be write in advance by the information safety devices manufacturer, and is stored in the information safety devices.
The application program relevant with information safety devices can be write in advance by the information safety devices manufacturer, and is stored in the information safety devices.
Information security module 109 can be integrated in a chip with usb interface module 103, control module 105, SCSI protocol process module 106, HID protocol process module 107 and a module or a plurality of module moved automatically in the module 108.
Described chip can be the Safety Design chip, and this Safety Design chip comprises intelligent card chip.
Usb interface module can be the USB interface chip, and this USB interface chip and said chip are two discrete chips.
Information security module 109 can be the Safety Design chip, and this Safety Design chip comprises intelligent card chip.
For example, control module 105, SCSI protocol process module 106 and HID protocol process module 107 can be integrated on the Safety Design chip; Firmware program that will be relevant with information safety devices and Autorun procedure stores realize the function of information security functions of modules and automatic operation module on a storage chip; On a usb protocol chip, can also utilize a general single chip to realize the function of control module 105 usb interface module 103 designs.
For example, usb interface module 103, control module 105, SCSI protocol process module 106, HID protocol process module 107 and information security module 109 are integrated on the Safety Design chip, utilize storage chip to realize the function of operation module automatically.
The storage medium of above-mentioned storage chip can be RAM (Random Access Memory, random access memory), ROM (Read-Only Memory, ROM (read-only memory)), EPROM (Erasable Programmable Read-Only Memory, EPROM (Erasable Programmable Read Only Memory)), EEPROM (Electrically-Erasable Programmable Read-Only Memory, EEPROM (Electrically Erasable Programmable Read Only Memo)) one or more and among the FLASH (FLASH memory, flash memories).
Judge module 104 comprises the decision circuitry of being made up of at least one resistance and at least one diode.
Judge module 104 is by the level information of the tie point of the I/O pin of decision circuitry and control module 105, judges which USB joint what adopt when information safety devices and main frame connect is.
Referring to Fig. 2, judge module 104 comprises by a resistance and the decision circuitry that diode is formed.Information safety devices comprises housing parts and is loaded on its interior circuit board that the core component on the circuit board is the decision circuitry that has the intelligent card chip of USB interface and have a resistance and a diode; The main control chip Z32H256SU (201) of emerging company, pull down resistor R (202), USB joint (203A), USB joint (203B) and diode D (204) in being equipped with on the circuit board.The power pin Vcc of USB joint (203A) connects the positive pole of diode D (204), and is connected with the I/O pin of main control chip (201), and tie point is a; The I/O pin of main control chip (201) also connects the pull down resistor R (202) of a ground connection; The power pin Vcc of USB joint (203B) connects the negative pole of diode D (204), and is connected with the power pin Vcc of main control chip (201); The D+ pin of USB joint (203A) and USB joint (203B) (usb data string anode), D-pin (usb data string negative terminal), Vcc pin and earth terminal are connected with earth terminal with D+ pin, D-pin, the Vcc pin of main control chip (201) respectively.Wherein D+ pin and D-pin are two signal wires of USB, be responsible for usb bus on devices exchange data.Main control chip (201) utilizes the I/O pin to be connected with decision circuitry, and in order to incoming level information, thereby realization is to the identification of the USB joint of connection main frame.
The judgement principle of above-mentioned decision circuitry is as follows: after USB joint (203A) and main frame connect, power connection, diode D (204) conducting, the loop that power pin Vcc, the pull down resistor R of USB joint this moment (203A) and GND form is connected, and I/O can receive the information that a level point is a high level; After USB joint (203B) and main frame connect, power connection, diode D (204) ends, and can't form the loop of conducting this moment, and it is low level information that I/O can receive a level point; Therefore information safety devices can receive high level or low level information according to I/O, judge it is that USB joint (203A) links to each other with main frame, or USB joint (203B) links to each other with main frame.
Referring to Fig. 3, judge module 104 comprises by two resistance and two decision circuitry that diode is formed.Information safety devices comprises housing parts and is loaded on its interior circuit board that the core component on the circuit board is the decision circuitry that has the intelligent card chip of USB interface and have two resistance and two diodes; The main control chip Z32H256SU (301) of emerging company, pull down resistor R1 (302A), pull down resistor R2 (302B), diode D1 (304A), diode D2 (304B), USB joint (303A), USB joint (303B) and USB joint (303C) in being equipped with on the circuit board.The power pin Vcc of USB joint (303A) connects the positive pole of diode D1 (304A), and is connected with the I/O1 pin of main control chip (301), and its tie point is a; The I/O1 pin of main control chip (301) also connects the pull down resistor R1 (302A) of a ground connection; The power pin Vcc of USB joint (303B) connects the negative pole of diode D1 (304A), and is connected with the power pin Vcc of main control chip (301); The power pin Vcc of USB joint (303C) connects the positive pole of diode D2 (304B), and is connected with the I/O2 pin of main control chip (301), and its tie point is b; The I/O2 pin of main control chip (301) also connects the pull down resistor R2 (302B) of a ground connection; The negative pole of diode D2 (304B) is connected with the power pin Vcc of main control chip (301); D+ pin, D-pin, Vcc pin and the earth terminal of USB joint (303A), USB joint (303B) and USB joint (303C) are connected with earth terminal with D+ pin, D-pin, the Vcc pin of main control chip (301) respectively.Wherein D+ pin and D-pin are two signal wires of USB, be responsible for usb bus on devices exchange data.Main control chip (301) utilizes the I/O pin to be connected with decision circuitry, and in order to incoming level information, thereby realization is to the identification of the USB joint of connection main frame.
The judgement principle of above-mentioned decision circuitry is as follows: after USB joint (303A) and main frame connect, power connection, diode D1 (304A) conducting, the loop that power pin Vcc, the pull down resistor R1 of USB joint this moment (303A) and GND1 form is connected, and I/O1 can receive the information that a level point is a high level; After USB joint (303B) and main frame connect, power connection, diode D1 (304A) ends, and can't form the loop of conducting this moment, and it is low level information that I/O1 can receive a level point; After USB joint (303C) and main frame connect, power connection, diode D2 (304B) conducting, the loop that power pin Vcc, the pull down resistor R2 of USB joint this moment (303C) and GND2 form is connected, I/O2 can receive the information that the b level point is a high level, therefore, information safety devices can receive high level or low level information according to I/O1 and I/O2, judges it is which USB joint in USB joint (303A), USB joint (303B) and the USB joint (303C) links to each other with main frame.
HID protocol process module 107 in the present embodiment can be by replacing with lower module:
The CCID protocol process module is used for after information safety devices receives the device type request that main frame sends, to the main frame statement from as the CCID device type, and dissection process CCID interface protocol instruction; It links to each other with control module 105, be built-in with CCID interfacing equipment descriptor, stating from as the CCID device type time, by control module 105, usb interface module 103 and USB joint B102 to main frame, this descriptor is transferred to main frame, and carries out communication with main frame;
Correspondingly, when the presupposed information safety equipment were connected with main frame by USB joint B102 in control module 105, the USB interface of information safety devices was used not limited interface protocol-CCID interface protocol.
Above-described embodiment is a more preferably embodiment of the utility model, and common variation that those skilled in the art carries out in the technical solutions of the utility model scope and replacement all should be included in the protection domain of the present utility model.

Claims (10)

1. interface more than a kind and the information safety devices that can install automatically is characterized in that described information safety devices comprises at least two USB joints,
Usb interface module is used for connecting described information safety devices and main frame by described USB joint, resolves and handle the USB communications protocol; Described usb interface module is connected with each USB joint in the described USB joint respectively;
Judge module is used to the USB joint of judging that described information safety devices and main frame connect; Described judge module is connected with each USB joint in the described USB joint respectively;
Control module, be used for result according to described judge module judgement, the corresponding relation of applied interface protocol when connecting by this USB joint and main frame with default USB joint and described information safety devices, control and the mode of operation of managing described information safety devices are handled and are controlled data; The described default USB joint and the corresponding relation of application interface agreement are that a corresponding scsi interface agreement, the not limited interface protocol of other equal correspondences are arranged in all USB joints of described information safety devices; Described control module links to each other with judge module with described usb interface module respectively;
The SCSI protocol process module is used for after described information safety devices receives the device type request that main frame sends, to the main frame statement from as the scsi device type, and dissection process scsi interface protocol instructions; Described SCSI protocol process module links to each other with control module;
Not limited protocol process module is used for after described information safety devices receives the device type request that main frame sends, to the main frame statement from as not limited interface protocol device type, and the not limited interface protocol instruction of dissection process; Described not limited protocol process module links to each other with control module;
Automatically operation module, be used for when described information safety devices by corresponding scsi interface agreement the USB joint and after main frame connects, start automatically and move the Autorun program; Described automatic operation module links to each other with the SCSI protocol process module;
The information security module is used to carry out information security operation; Described information security module links to each other with not limited protocol process module.
2. many interfaces according to claim 1 and the information safety devices that can install automatically is characterized in that described not limited protocol process module comprises:
The HID protocol processing unit is used for after described information safety devices receives the device type request that main frame sends, to the main frame statement from as HID interfacing equipment type, and dissection process HID interface protocol instruction; Described HID protocol processing unit links to each other with the information security module with described control module respectively.
3. many interfaces according to claim 1 and 2 and the information safety devices that can install automatically is characterized in that described not limited protocol process module comprises:
The CCID protocol processing unit is used for after described information safety devices receives the device type request that main frame sends, to the main frame statement from as CCID interfacing equipment type, and dissection process CCID interface protocol instruction; Described CCID protocol processing unit links to each other with the information security module with described control module respectively.
4. many interfaces according to claim 1 and the information safety devices that can install automatically is characterized in that, described judge module comprises the decision circuitry of being made up of at least one resistance and at least one diode.
5. many interfaces according to claim 4 and the information safety devices that can install automatically, it is characterized in that, the I/O pin of described decision circuitry and described control module links to each other, described decision circuitry is judged the USB joint that described information safety devices and main frame connect by the level information of the tie point of the I/O pin of described control module.
6. many interfaces according to claim 1 and the information safety devices that can install automatically is characterized in that described automatic operation module comprises:
Detecting unit is used for utilizing the Autorun program to detect whether the application program relevant with described information safety devices being installed in the described main frame after described information safety devices is used scsi interface agreement and main frame and set up communication;
Installation unit is used for utilizing described Autorun program that the application program relevant with described information safety devices is installed in described main frame when described detecting unit does not detect described main frame the application program relevant with described information safety devices is installed;
Described detecting unit links to each other with described installation unit.
7. many interfaces according to claim 1 and the information safety devices that can install automatically is characterized in that described usb interface module is discrete USB interface chip.
8. many interfaces according to claim 1 and the information safety devices that can install automatically, it is characterized in that described information security module and usb interface module, control module, SCSI protocol process module, not limited protocol process module and a module or a plurality of module moved automatically in the module are integrated on the chip.
9. many interfaces according to claim 8 and the information safety devices that can install automatically is characterized in that described chip is the Safety Design chip, and described Safety Design chip comprises intelligent card chip.
10. many interfaces according to claim 1 and the information safety devices that can install automatically is characterized in that described information security module is the Safety Design chip, and described Safety Design chip comprises intelligent card chip.
CNU2007201036523U 2007-02-16 2007-02-16 Information safety equipment with multi interface for automatic installation Expired - Lifetime CN201078772Y (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNU2007201036523U CN201078772Y (en) 2007-02-16 2007-02-16 Information safety equipment with multi interface for automatic installation

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNU2007201036523U CN201078772Y (en) 2007-02-16 2007-02-16 Information safety equipment with multi interface for automatic installation

Publications (1)

Publication Number Publication Date
CN201078772Y true CN201078772Y (en) 2008-06-25

Family

ID=39570837

Family Applications (1)

Application Number Title Priority Date Filing Date
CNU2007201036523U Expired - Lifetime CN201078772Y (en) 2007-02-16 2007-02-16 Information safety equipment with multi interface for automatic installation

Country Status (1)

Country Link
CN (1) CN201078772Y (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103281323A (en) * 2013-05-31 2013-09-04 杨俊杰 Intelligent household appliance communication chip integrated based on HomePlug protocol and WiFi protocol
CN104537294A (en) * 2014-12-29 2015-04-22 飞天诚信科技股份有限公司 Method capable of processing multi-protocol APDU command
CN111045750A (en) * 2019-12-19 2020-04-21 飞天诚信科技股份有限公司 Method for automatically matching application programs on multi-application equipment and electronic equipment

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103281323A (en) * 2013-05-31 2013-09-04 杨俊杰 Intelligent household appliance communication chip integrated based on HomePlug protocol and WiFi protocol
CN104537294A (en) * 2014-12-29 2015-04-22 飞天诚信科技股份有限公司 Method capable of processing multi-protocol APDU command
CN104537294B (en) * 2014-12-29 2017-09-22 飞天诚信科技股份有限公司 A kind of method for handling multi-protocols APDU orders
CN111045750A (en) * 2019-12-19 2020-04-21 飞天诚信科技股份有限公司 Method for automatically matching application programs on multi-application equipment and electronic equipment
CN111045750B (en) * 2019-12-19 2023-07-07 飞天诚信科技股份有限公司 Method for automatically matching application programs on multi-application device and electronic device

Similar Documents

Publication Publication Date Title
CN100452003C (en) Information safety apparatus having multiple interface and capable of being automatically installed and controlling method therefor
CN100462949C (en) Automatic-installable information safety equipment and control method thereof
CN101266590B (en) Method and system for dynamically switching equipment arrangement
CN100555298C (en) The method and apparatus of virtulizing personal office environment
US8122172B2 (en) Portable information security device
CN100464513C (en) Electronic documant coordination downloading system and method
US20130305006A1 (en) Method, system and apparatus for region access control
CN101599832B (en) Method and system of authenticating personal identity for logging in a network system
CN101587519B (en) System and method for realizing multifunctional information security device
CN201078772Y (en) Information safety equipment with multi interface for automatic installation
CN104346572A (en) Construction method of universal external intelligent terminal safety operation environment
CN101150459A (en) Method and system for improving safety of information safety device
CA2702373C (en) Method of passing instructions between a host station and a portable electronic device, and device for implementation
CN102004705A (en) USB storage device based on hardware encryption
CN201886463U (en) USB (universal serial bus) memory device based on hardware encryption
RU2530353C2 (en) Integrated circuit chip, information processing device, program module control method, information processing system and method
CN101266538B (en) Intelligent memory card interface access control method
KR20110023685A (en) Solid state disk with authentication function and driving method thereof
CN102662883B (en) Machine type identification method for multi-hardware-platform FeiTeng server
US11501002B2 (en) Protocol security system
CN103246851B (en) A kind of wireless Internet card prevents the method usurped
CN102541673A (en) Security processing method and circuit for central processing unit (CPU) fetch instruction abnormity
US20220137816A1 (en) Native memory semantic remote memory access system
CN211015307U (en) Industrial personal computer based on Loongson 3A3000 processor and 7A1000 bridge piece
TWI780341B (en) System for using network identification to identify via telecommunication server and method thereof

Legal Events

Date Code Title Description
C14 Grant of patent or utility model
GR01 Patent grant
C56 Change in the name or address of the patentee

Owner name: FEITIAN TECHNOLOGIES CO., LTD.

Free format text: FORMER NAME: BEIJING FEITIAN CHENGXIN SCIENCE + TECHNOLOGY CO. LTD.

CP03 Change of name, title or address

Address after: 100085 Beijing city Haidian District Xueqing Road No. 9 Ebizal building B block 17 layer

Patentee after: Feitian Technologies Co., Ltd.

Address before: 100083, Haidian District, Xueyuan Road, No. 40 research, 7 floor, 5 floor, Beijing

Patentee before: Beijing Feitian Chengxin Science & Technology Co., Ltd.

CX01 Expiry of patent term

Granted publication date: 20080625

CX01 Expiry of patent term