KR100358108B1 - Apparatus for protecting harddisk data - Google Patents

Abstract

The present invention relates to a hard disk data protection device and a method thereof and a computer-readable recording medium having recorded thereon a program for realizing the method, wherein the hard disk is inserted in the middle of a cable connected between the hard disk and the I / O controller. In order to protect data securely, the hard disk data protection device is provided between a controller of a known computer and the hard disk so as to perform user authentication and to access and write the hard disk only by the authentication. A first step of making; A second step of initializing the hard disk data protection device and acquiring user information from the known computer; A third step of authenticating the obtained user information; A fourth step of reading and transmitting a partition sector of the hard disk at the request of the known computer; And a fifth step of receiving a read / write request of the hard disk from the known computer and writing / reading data on the hard disk, for use in a computing system.

Description

Hard disk data protection device and its method {APPARATUS FOR PROTECTING HARDDISK DATA}

The present invention relates to a hard disk data protection device and a method thereof, and more particularly, to a hard disk data protection device and method for inserting a cable between a hard disk and an I / O controller to secure the hard disk data. A computer readable recording medium having recorded thereon a program for realizing the method.

The conventional hard disk data protection method is used as a terminal-and-stay-resident program (TSR) routine by hooking an operating system. That is, information protection in a computer can be provided by intercepting a BIOS (BIOS) or an operating system, and is mainly performed by a memory resident routine with the help of an operating system.

However, the conventional hard disk data protection method as described above can be easily destroyed by an attacker such as a hacker with abundant knowledge of a computer, and the hardware can be directly accessed by a user's application program. There was a problem in that data could be processed at will by operating as if there was no protection module.

Accordingly, the present invention has been proposed to solve the above problems, and inserted into the middle of the cable connected between the hard disk and the I / O controller, a hard disk data protection device and method for protecting the hard disk data securely and It is an object of the present invention to provide a computer-readable recording medium having recorded thereon a program for realizing the method.

1 is a configuration diagram of an embodiment of a hard disk data protection system to which the present invention is applied.

Figure 2 is a detailed configuration diagram of an embodiment of a hard disk data protection device according to the present invention.

Figure 3 is an embodiment processing flow diagram for a user authentication method for hard disk data protection according to the present invention.

Figure 4 is a flow chart of an embodiment of a user access control method for hard disk data protection according to the present invention.

* Explanation of symbols for the main parts of the drawings

10: hard disk 20: hard disk data protection device

30: computer

21: Hard Disk Controller Interface

22: first memory 23: microprocessor

24: second memory

25: ID / ET Controller Interface

26: third memory

The apparatus of the present invention for achieving the above object, in the hard disk data protection device of a known computer, receiving a signal from a controller mounted on the motherboard of the known computer, hard disk controller interfacing to act as a hard disk Way; Controller interfacing means for acting as a controller mounted on the motherboard of the known computer, and for applying commands such as hard disk read / write and status check when accessing the actual hard disk; Control means for receiving a hard disk access request from the hard disk controller interfacing means to perform an authentication process and transmitting a hard disk access request signal to the controller interfacing means; And storage means for storing each function module and data.

On the other hand, the method of the present invention, in the hard disk data protection method applied to the hard disk data protection device, to perform the user authentication and to access the hard disk only by the authentication to perform the recording and reading operation, the hard A first step of providing a disk data protection device between a controller of a known computer and the hard disk; A second step of initializing the hard disk data protection device and acquiring user information from the known computer; A third step of authenticating the obtained user information; A fourth step of reading and transmitting a partition sector of the hard disk at the request of the known computer; And a fifth step of receiving a read / write request of the hard disk from the known computer and recording / reading data on the hard disk.

On the other hand, the present invention, the hard disk data protection device equipped with a processor, the hard disk data protection device so that it is possible to perform the user authentication and to access the hard disk only by the authentication and to perform the recording and reading operation, the known A first function provided between a controller of a computer and the hard disk, the first function of initializing the hard disk data protection device and obtaining user information from the known computer; A second function of authenticating the obtained user information; A third function of reading and transmitting a partition sector of the hard disk at the request of the known computer; And a computer-readable recording medium having recorded thereon a program for receiving a read / write request of the hard disk from the known computer and realizing a fourth function of recording / reading data on the hard disk. In order to protect the data stored on the computer's hard disk, it inserts a protection device in the middle of the cable connected between the hard disk and the I / O controller, blocking the protection device bypass approach to the conventional problem data and passing the protection device. Do not make the data accessible without doing so. In other words, it secures a secure area against vulnerabilities of the insecure computer itself so that the data on the hard disk cannot be accessed without this protection device.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a configuration diagram of an embodiment of a hard disk data protection system to which the present invention is applied.

As shown in the figure, the hard disk data protection system to which the present invention is applied performs data access according to user authentication and access authority to protect the hard disk 10 and the data stored in the hard disk 10. And a hard disk data protection device 20, and a known computer 30. The hard disk data protection device 20 is a user authorized to access the hard disk 10 from the computer 30 through an IDE cable. In case of access, data access is allowed. In FIG. 1, the hard disk 10 is actually located inside the computer 30 and is represented as being external for convenience of description. When the user applies power to the computer 30, a partition sector of the hard disk 10 is provided. In this case, the hard disk data protection device 20 sends the authentication module to the computer 30 instead of the partition table to perform the authentication process. When the authentication is completed, the hard disk data protection device 20 The boot sector and startup files (IO.SYS, MS-DOS.SYS, etc.) are transferred to the computer 30 so that the computer 30 normally boots. After the normal boot, when the user accesses the hard disk 10, it checks whether the user has passed the authentication and permits access to the hard disk 10 only for the normal user. In addition, the hard disk data protection device 20 Disk 10 has the function of encrypting and storing in case of access to the device is removed from the cable.

2 is a detailed configuration diagram of an embodiment of a hard disk data protection device according to the present invention.

As shown in the figure, the hard disk data protection device according to the present invention, a hard disk operating as a hard disk by receiving a signal from the ID (IDE) controller mounted on the main board (main board) of the computer 30 The controller interface 21, a nonvolatile first memory 22 that stores a function module that acts like a hard disk, and an ID mounted on a motherboard of the computer 30 acts like an IDE controller, Third memory for storing the ID (IDE) / AT (ATA) controller interface 25 for applying commands, such as read / write and check the status of the hard disk when accessing, and the function processing module for controlling the hard disk (10) (26), the disk access request is received from the hard disk controller interface 21, authentication processing is performed, and the disk is connected to the ID / IDE controller interface 25. The microprocessor 23 transmits an access request signal and a second memory 24 stores data processed by the microprocessor 23. In addition, when encryption processing is required, the microprocessor 23 can call and execute an encryption processing routine existing in the third memory 24.

Now, the user authentication procedure and user access control method for hard disk data protection according to the present invention will be described in detail with reference to FIGS. 3 and 4 as follows.

3 is a flowchart illustrating an embodiment of a user authentication method for hard disk data protection according to the present invention.

First, the computer 30 is turned on (300), then the BIOS is driven (302), and the read of the partition table of the hard disk 10 is requested (304). At this time, the computer 30 sends a partition table read request in the disk to the controller of the hard disk 10, and the hard disk data protection device 20 inserted in the middle of the cable receives the partition table read request.

On the other hand, after the hard disk data protection device 20 is initialized, it is checked whether there is a read request of the partition table of the hard disk 10 (306), and the authentication module is transmitted to the computer 30 (308), and the computer ( 30 performs an authentication module (310).

The computer 30 reads user information (ID, password) 32 and transmits it to the hard disk data protection device 20.

The hard disk data protection device 20 receives the user information (314), and determines whether the user information is correct authentication information (316).

As a result of determination 316, if the user information is correct authentication information, the flag is set to "OK" (318), and then the flag is transmitted to the computer 30 (320).

As a result of determination 316, if the user information is not correct authentication information, the flag is set to "NO" (322), and then the process 320 of transmitting the flag to the computer 30 is performed.

Computer 30 receives the flag (324) and determines (326) whether the received flag is set to " OK ".

If the determination result 326, the flag is "OK", the hard disk partition table read request for the normal booting procedure is transmitted to the hard disk data protection device 20, the hard disk data protection device 20 is a hard disk (10) Read the partition table (330) and perform a normal boot (332).

As a result of the determination 326, if the flag is not "OK", after outputting the warning message (328), a process of receiving a flag (324) is performed.

4 is a flowchart illustrating a method for controlling a user's access for protecting hard disk data according to the present invention.

First, the initialization and user authentication process of the hard disk data protection device 20 is performed (400), and it is determined whether the user has a hard disk read request (402).

In the determination result 402, if the hard disk read request of the user has not been input, it is determined whether the hard disk write request has been input (404), and if the hard disk read request of the user has been input, it is determined whether authentication has been completed. (406).

As a result of determination 404, if a hard disk write request is input, it is determined whether user authentication is completed (408). If the hard disk write request is not input, the process "402" is performed.

As a result of determination 406, if authentication is not completed, the hard disk read error code is transmitted to the computer 30 (410).

As a result of the determination (406), if the authentication is completed, after controlling the ID / IDE controller interface 25 to read the contents of the hard disk 10 (412), decrypt (414), The decrypted content is transmitted to the memory of the computer 30 (416), and the completion code is transmitted to the computer 30 (418).

As a result of determination 408, if authentication is not completed, the hard disk recording error code is transmitted to the computer 30 (420).

As a result of determination 408, if authentication is completed, the data transmitted from the computer 30 is encrypted (422), and the encrypted data is recorded on the hard disk 10 through the ID / AT controller interface 25 ( 424) and transmits the record completion code to the computer 30 (426). The method of the present invention as described above is implemented by a program and can be read by a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk). , Magneto-optical disks, etc.).

The present invention described above is capable of various substitutions, modifications, and changes without departing from the spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited to the drawing.

The present invention as described above, by providing a hard disk data protection device to block the bypass access to the data in order to protect the data stored in the hard disk of the computer, the application of an attacker or a user such as a hacker with a wealth of knowledge about the computer It is effective to protect the data stored on the hard disk from the program.

Claims (9)

In a known hard disk data protection device of a computer, Hard disk controller interfacing means for receiving a signal from a controller mounted on a main board of the known computer and operating like a hard disk; Controller interfacing means for acting as a controller mounted on the motherboard of the known computer, and for applying commands such as hard disk read / write and status check when accessing the actual hard disk; Control means for receiving a hard disk access request from the hard disk controller interfacing means to perform an authentication process and transmitting a hard disk access request signal to the controller interfacing means; And Storage means for storing each function module and data Hard disk data protection device comprising a. The method of claim 1, The storage means, First storage means for storing a functional module acting as a hard disk in the hard disk controller interfacing means; Second storage means for storing data processed by the control means; And Third storage means for storing a function processing module controlling the hard disk by the controller interfacing means Hard disk data protection device comprising a. The method of claim 2, In the second storage means, Hard disk data protection device characterized in that the encryption processing routine is stored to perform the encryption process in the control means. In the hard disk data protection method applied to the hard disk data protection device, A first step of providing the hard disk data protection device between a controller of a known computer and the hard disk so as to perform user authentication and access and write and read the hard disk only by the authentication; A second step of initializing the hard disk data protection device and acquiring user information from the known computer; A third step of authenticating the obtained user information; A fourth step of reading and transmitting a partition sector of the hard disk at the request of the known computer; And A fifth step of receiving a read / write request of the hard disk from the known computer to record / read data on the hard disk; Hard disk data protection method comprising a. The method of claim 4, wherein The third step, A sixth step of determining whether the user information is correct authentication information; A seventh step of setting a flag as OK and transmitting the flag to the computer if the user information is correct authentication information as a result of the determination in the sixth step; And An eighth step of setting the flag to NO and transmitting the flag to the computer if the user information is not correct authentication information as a result of the determination in the sixth step; Hard disk data protection method comprising a. The method according to claim 4 or 5, The fifth step, A ninth step of confirming whether the user is an authenticated user according to a hard disk recording request of the computer, and recording data on the hard disk; And A tenth step of verifying whether the user is an authenticated user and reading the contents of the hard disk according to the hard disk read request of the computer Hard disk data protection method comprising a. The method of claim 6, The ninth step, An eleventh step of determining whether the authentication of the user is completed; A twelfth step of transmitting a hard disk data recording error code to the computer if authentication is not completed as a result of the determination in the eleventh step; And As a result of the determination of the eleventh step, if authentication is completed, a thirteenth step of encrypting data received from the computer, writing the data to the hard disk, and then transmitting a completion code to the computer. Hard disk data protection method comprising a. The method of claim 6 The tenth step is An eleventh step of determining whether the authentication of the user is completed; A twelfth step of transmitting a hard disk data read error code to the computer if authentication is not completed as a result of the determination in the eleventh step; And As a result of the determination of the eleventh step, if authentication is completed, the thirteenth step of reading and decrypting data from the hard disk and transmitting the read data and the read completion code to the computer; Hard disk data protection method comprising a. In the hard disk data protection device equipped with a processor, The hard disk data protection device is provided between a controller of a known computer and the hard disk so as to perform user authentication and access and write and read the hard disk only by the authentication. A first function of initializing the hard disk data protection device and obtaining user information from the known computer; A second function of authenticating the obtained user information; A third function of reading and transmitting a partition sector of the hard disk at the request of the known computer; And A fourth function of receiving a read / write request of the hard disk from the known computer to write / read data to the hard disk A computer-readable recording medium having recorded thereon a program for realizing this.