KR101511378B1 - Data processing device and data securing method for storage device using the same - Google Patents

Abstract

The present invention relates to an information processing apparatus capable of preventing unauthorized access to data stored in a portable storage device, and a data security method of a portable storage device using the same. The present invention includes a memory (40) storing a public key for the portable storage device (200); An interface 10 to which the portable storage device 200 is connected; A processor (20) for accessing the portable storage device (200) and processing the data; And an interface control unit 30 for generating a public key with the portable storage device 200 and storing the public key in the memory 40 and the portable storage device 200. According to the present invention, if the public key is not generated between the information processing apparatus and the portable storage device, the information processing device can not access the portable storage device, thereby preventing the data stored in the portable storage device from being exposed And after the public key is generated through the public key generation procedure between the information processing apparatus and the portable storage device, the information processing device can utilize the data of the portable storage device without the hassle of inputting the password every time There are advantages.

Memory card, information processing device, certificate

Description

TECHNICAL FIELD [0001] The present invention relates to an information processing apparatus and a data storage method using the same,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable storage device and an information processing device, and more particularly, to an information processing device capable of preventing unauthorized access to data stored in a portable storage device and a data security method of the portable storage device using the same .

In recent years, various portable storage media such as SD cards (Secure Digital Cards), CF cards (Compact Flash Cards), memory sticks and memory cards and USB memories have been widely spread and used in various electronic apparatuses.

A digital camera, a computer, an electronic dictionary, a mobile phone, a PMP, or the like. At this time, since the portable storage device can be separated from the above-described various electronic devices, there is a great risk that the portable storage device will be lost due to its good portability.

When such a portable storage device is lost, data stored in the portable storage device may be exposed to others. In particular, personal information of users may be leaked or company confidential information may be leaked.

In recent years, security technologies for such portable storage devices have also been developed.

In the case of an SD card, when a password is set, it is possible to access the data stored in the SD card only when the password is input and the password is set each time the device is connected.

However, according to this conventional technique, there are the following problems.

That is, if the password is not set in the portable storage device, there is a problem that the data stored therein may be exposed to others. In the case of setting the password, it is troublesome to input the password every time the portable storage device is connected to the device There was a problem.

SUMMARY OF THE INVENTION Accordingly, the present invention has been made keeping in mind the above problems occurring in the prior art, and it is an object of the present invention to provide an information processing apparatus capable of preventing data stored in a portable storage device from being exposed to others, Security method.

Another object of the present invention is to provide an information processing apparatus in which a public key is generated by generating a public key between an information processing apparatus and a portable storage device, And a data security method for a portable storage device using the same.

According to an aspect of the present invention, there is provided a portable storage device including: a memory for storing a public key of a portable storage device; An interface to which the portable storage device is connected; A processor for accessing the portable storage device and processing the data; And an interface controller for generating a public key with the portable storage device and storing the public key in the memory and the portable storage device.

The interface control unit may generate a public key by combining a unique number of the information processing apparatus and a unique number of the portable storage device.

In addition, the interface control unit may determine whether or not the authority required to generate the public key for the portable storage device exists.

The interface control unit may generate a public key only when the information processing apparatus is judged to have a public key generation right for the portable storage device.

At this time, when the user logs in the public key certificate stored in the portable storage device, the interface controller can determine that the user has the authority to generate the public key.

If the interface control unit detects that the portable storage device is connected to the interface, the interface control unit compares the public key stored in the memory with the public key stored in the portable storage device; As a result of the public key comparison, if the public key stored in the memory does not match the public key stored in the portable storage device, access to the portable storage device by the processor can be blocked.

Meanwhile, a data security method of a portable storage device according to the present invention includes the steps of (A) comparing a public key stored in the portable storage device with a public key stored in the information processing device when the portable storage device is connected to the information processing device; If it is determined that the public key corresponding to the portable storage device and the information processing device have been stored as a result of the checking in the step (A), the information processing device accesses the data stored in the portable storage device (B1); If it is determined that the public key corresponding to the portable storage device and the memory is not stored as a result of the checking in step (A), access to the data stored in the portable storage device is blocked (step B2) .

In the memory of the information processing apparatus, a plurality of public keys respectively generated for various portable storage devices are stored; In the portable storage device, a plurality of public keys generated respectively with various information processing apparatuses can be stored.

The public key may be generated by forming a string of a combination of a unique number of the information processing apparatus and a unique number of the portable storage device.

Alternatively, the public key may be generated as a combination of characters randomly extracted by a predetermined number or more.

The data security method further includes a step (C) of receiving, when the access to the data is blocked in the step (B2), a command as to whether to generate a public key for the portable storage device in the information processing device As shown in FIG.

The data security method may further include: (D) confirming whether or not an authority to generate a public key is generated when an instruction is input to generate a public key for the portable storage device in the step (C); Generating (E) a public key for the portable storage device in the information processing apparatus if it is determined in step (D) that the public key generation right is authorized; (F) storing the public key generated in the step (E) in the information processing apparatus and the portable storage device, respectively.

Here, the data security method may further include a step (G) of, when the generation of the public key is completed in the step (D), blocking the access to the data stored in the portable storage device is released.

The step (C) may further include: (C1) a user interface for inputting an authentication key for verifying the existence of a public key generation authority; And comparing the authentication key input through the user interface with the authentication key stored in the portable storage device (C2).

The step (C) may include: displaying (C3) a login screen of a public certificate stored in the portable storage device; Inputting a password of the authorized certificate (C4); And a password for the authorized certificate is transmitted to the authentication server and logged in (C5).

The data security method may further include the steps of: (E ') comparing the public key generated in the step (E) with a public key previously stored in the memory and a public key previously stored in the portable storage device; If it is determined in step (E ') that a public key identical to the public key generated in step (E) is stored in the memory or the portable storage device, the public key generated in step (E) (E ") < / RTI > of a public key that contains a different string than the public key.

The following effects can be expected in the information processing apparatus of the present invention and the data security method of the portable storage apparatus using the same according to the present invention as described above.

That is, if the public key is not generated between the information processing apparatus and the portable storage device, the information processing apparatus can not access the portable storage device, so that it is possible to prevent the data stored in the portable storage device from being exposed to others .

Further, in the information processing apparatus and the data security method of the portable storage apparatus using the same according to the present invention, after the public key is generated through the public key generation procedure between the information processing apparatus and the portable storage apparatus, It is convenient because it can utilize the data of the portable storage device without the hassle of inputting.

Hereinafter, specific embodiments of the information processing apparatus according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing a schematic configuration of an information processing apparatus according to a specific embodiment of the present invention.

As shown in FIG. 1, an information processing apparatus 100 according to the present invention includes an interface 10 to which a portable storage device 200 is connected.

At this time, the information processing apparatus 100 reads data from a storage medium such as a personal computer, a workstation, a PDA (Personal Digital Assistant), a mobile phone, an electronic dictionary, a portable multimedia player (PMP) It includes all electronic devices that can be used.

The portable storage device 200 includes a memory card such as an SD card (Secure Digital Card), a CF card (Compact Flash Card), a memory stick, and various portable storage media such as a USB memory.

The interface 10 is a part of the portable storage device 200 connected to the information processing apparatus 100 and reads data from the portable storage device 200 and transmits data to the portable storage device 200 And store it.

The interface 10 is connected to the processor 20. The processor 20 serves as a main controller of the information processing apparatus 100, decodes and executes various commands, reads data from the storage medium, processes the data, and stores the data.

Accordingly, the processor 20 processes the data read from the portable storage device 200 through the interface 10.

Meanwhile, the information processing apparatus 100 according to the present invention is provided with an interface control unit 30.

The interface controller 30 stores data in the portable storage device 200 or receives data stored in the portable storage device 200 in response to a command from the processor 20.

Meanwhile, the processor 20 generates a public key for the portable storage device 200.

The public key is a string commonly stored in the information processing apparatus 100 and the portable storage device 200. In order for the information processing device 100 to access the portable storage device 200, The device 100 and the portable storage device 200 are required to store a common key having the same character string.

When the public key is not generated between the information processing apparatus 100 and the portable storage device 200, the information processing apparatus 100 enters a question and answer mode for generating a public key, When the user instructs generation of the public key, the public key is generated according to a predetermined procedure.

The processor 20 may generate the public key by various methods. First, a string of lengths longer than a certain length can be generated as a random combination of digits and / or characters.

Or a unique number such as a serial number or a MAC address of the information processing apparatus 100 and a unique number of the portable storage device 200. [ For this purpose, the interface 10 reads the unique number of the portable storage device 200 from the portable storage device 200. At this time, the unique number of the portable storage device 200 can be basically accessed / RTI >

The processor 20 may further include a plurality of public keys generated between the information processing apparatus 100 and the portable storage device 200 and other portable storage devices or other information processing apparatuses If it is stored, it is checked whether or not the newly generated public key is the same as the new public key, and if it is the same, the public key can be regenerated as another character string.

The public key generated by the processor 20 is stored in the memory 40 provided in the information processing apparatus 100. [

Here, the memory 40 may be a storage unit provided in an information processing apparatus such as a computer, and may be a nonvolatile storage device for permanently storing a public key.

A plurality of public keys for each of a plurality of portable storage devices connected to the information processing apparatus 100 may be stored in the memory 40.

Then, the processor 20 stores the generated public key in the portable storage device 200 through the interface control unit 30.

On the other hand, in order for the processor 20 to generate the public key, the user is required to have authority to generate the public key.

When the public key is not generated between the information processing apparatus 100 and the portable storage device 200, the information processing apparatus 100 enters a question and answer mode for generating a public key.

Here, if the user instructs the generation of the public key, the processor 20 generates the public key only after confirming the existence of the authority for generating the public key and confirming the existence of the public key generating authority.

The processor 20 verifies the authority of public key generation by various methods. For example, when a user issues a public key generation command in a question and answer mode for generating a public key, an input window for receiving an authentication key from a user is displayed.

Then, when the user inputs the correct authentication key, the public key is generated.

The authentication key is stored in the portable storage device 200 as a password required for authentication of the user. Accordingly, the interface control unit 30 reads the authentication key from the portable storage device 200 through the interface 10, and the processor 20 compares the same with the authentication key input by the user, , And recognizes that it has a public key generation right.

At this time, the authentication key is also stored in the portable storage device 200 in an area where the interface 10 can be basically accessed without a public key.

Meanwhile, the processor 20 may determine whether the public key generation right is authorized by another method.

If the public key certificate is stored in the portable storage device 200, the information processing device 100 displays the authorized certificate login screen by calling the public key certificate stored in the portable storage device 200.

Then, a password for the authorized certificate is input from the user, and the password is transmitted to the authorized authentication server, and the login is performed by receiving the authorization for authentication from the authentication server.

At this time, the information processing apparatus 100 should be provided with an internet module so as to be able to access the authentication server.

When the authority for generating the public key is authenticated as described above and the public key is generated in the processor 20, the generated public key is stored in the portable storage device 200 by the interface control unit 30. At this time, the interface controller 30 stores the public key in the accessible area of the portable storage device 200 irrespective of another authentication procedure or a public key matching check procedure.

The public key stored in the memory 40 is used to access data stored in the portable storage device 200 when the portable storage device 200 is connected to the information processing device 100 in the future.

That is, the processor 20 may include one or more public keys generated by the processor 20 of the information processing apparatus 100 and stored in the memory 40, and one or more public keys stored in the portable storage device 200 Keys are compared with each other to determine whether there is a matching public key among them.

If the public keys stored in the memory 40 of the information processing apparatus 100 match with one of the public keys stored in the portable storage device 200 as a result of comparison, 200 is allowed to access the data stored therein.

However, if the public key corresponding to the comparison result is not in the memory 40 and the portable storage device 200, the interface 10 can not access the data of the portable storage device 200.

At this time, the portable storage device 200 may be divided into two or more areas and may be divided into an area where the public key, an authentication key required for authentication, an authorized certificate, and the like are stored, and another area where general data is stored.

Here, the area in which the public key, the authentication key, the public key certificate, and the like are stored is directly accessible without any additional procedure. However, the area where the remaining general data is stored can not be accessed if the public keys do not match, or is stored in a form that the information processing apparatus 100 can not recognize even if it is accessible.

That is, the interface control unit 30 of the information processing apparatus 100 transmits the public key to the portable storage device 200 of the interface 10 until the public key matching the public key of the processor 20 is found. Block access.

At this time, the area of the portable storage device 200 where the access is blocked is a region in which general data is stored among the divided areas described above.

That is, the portable storage device 200 has an area accessible only when the public key matches the information processing device 100, and an area accessible regardless of whether the public key is matched. The public key, the authentication key, The interface control unit 30 distinguishes them and stores them in an accessible area even if the public keys do not match.

If the public key stored in the memory 40 matches the public key stored in the portable storage device 200 as a result of the public key comparison of the processor 20, To access all areas of the portable storage device 200 and to use the data.

At this time, the interface controller 30 may block access to data in a specific area of the portable storage device 200 by various methods.

For example, the interface control unit 30 may control the access of the interface 10 to the portable storage device 200 by software. That is, it is possible to prevent the interface 10 from accessing the accessible area only if the public key matches the public key of the portable storage device 200 through the program, or until access of the public key is confirmed, It does not fall.

At this time, the information necessary for identifying such an area is stored in an area that is basically accessible in the portable storage device 200, so that the interface control unit 30 can recognize the information.

Also, the interface controller 30 may block access to the portable storage device 200 by various other methods. In another example, the interface controller 30 stores data on the public key, the authentication key, and the public certificate in the portable storage device 200 through the interface 10 in a general manner.

However, other general data are coded by a specific method and stored in the portable storage device 200. [

As a result of the public key comparison of the processor 20, the shared key stored in the memory 40 and the portable storage device 200 is read from the portable storage device 200, The interface controller 30 performs data decryption or provides information related to data decryption so that data can not be decrypted if the public keys do not match, So that it can not be recognized.

However, since data on the public key, the authentication key, the public key certificate, and the unique number of the portable storage device are not subjected to the coding process according to the above-mentioned specific method, when the portable storage device 200 is connected to the information processing device 100, The processor 20 and other components of the processor 20 can smoothly perform an authentication process using an authentication key or a public key certificate, a public key generation process using a unique number, a public key comparison process using a stored public key, and the like.

The interface control unit 30 blocks access to data stored in a specific area of the portable storage device 200 by the above-described method. If there is a matching public key stored in the portable storage device 200 and the memory 50 as a result of the public key comparison of the processor 20, Or allow data to be stored in the portable storage device 200 by normally decrypting the data.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a data security method of a portable storage device according to another embodiment of the present invention will be described in detail with reference to the drawings.

FIG. 2 is a flow chart showing a data security method of a portable storage device according to a specific embodiment of the present invention, and FIG. 3 is a flowchart illustrating a data security method of a portable storage device according to another embodiment of the present invention. And FIG. 4 is a flowchart showing a stepwise method of generating a public key in the embodiment of the present invention.

As shown in FIG. 2, a data security method of the portable storage device according to a specific embodiment of the present invention starts from step S100 of detecting that the portable storage device 200 is connected to the information processing device 100 do.

Here, the portable storage device 200 and the information processing device 100 have already been described with reference to FIG.

The information processing apparatus 100 accesses the accessible area in the portable storage device 200 irrespective of the coincidence of the public key and reads the public key stored in the portable storage device 200. The read public keys are compared with the public keys stored in the memory 40, which is the storage means provided in the information processing apparatus 100, to determine whether there is a matching public key (S200).

Herein, the public key is the same as already described with reference to FIG. 1 for the information processing apparatus according to the specific embodiment of the present invention.

If it is determined in step 200 that the corresponding public key is stored in the portable storage device 200 and the information processing device 100 respectively, Accesses the data stored in the device 200 and processes it through the processor 20.

However, if it is determined in step 200 that there is no public key stored in the memory 40 of the information processing apparatus 100 and the portable storage device 200, The information processing apparatus 100 enters a question and answer mode to inquire whether to generate a public key for the portable storage device 200. Accordingly, the user can input a public key generation command.

When the user inputs a public key generation command (S400), the information processing apparatus 100 performs an authentication step (S500) as to whether or not the user is authorized to access the portable storage device 200.

That is, a user interface for inputting an authentication key for certifying the public key generation right of the user is displayed (S510), and when the user inputs the authentication key (S530), the information processing apparatus 100 displays the authentication The key is compared with the authentication key stored in the portable storage device 200, and it is determined whether the key is matched (S550).

If the authentication key input by the user in step 550 matches the authentication key stored in the portable storage device 200, it is determined that the user has a right to generate the public key for the portable storage device 200, The information processing apparatus 100 generates a public key (S600).

In operation S700, the public key generated in operation 600 is stored in the memory 40 and the portable storage 200 of the information processing apparatus 100, respectively.

If the public key is stored in the information processing apparatus 100 and the portable storage 200 in step 700, the information processing apparatus 100 can access the data stored in the portable storage 200 (S300).

If the user does not input the public key generation command in operation 400, the user can not access the data stored in the portable storage device 200 through the information processing apparatus 100 (S800).

Here, the portable storage device 200 may include two or more storage areas, and a part of the plurality of storage areas may be accessible by the information processing apparatus 100 regardless of whether or not the public key is coincident or authorized , And the remaining storage area is an area in which access is possible only when the public key is matched or the authentication authority is present.

Therefore, the information required for public key comparison or authentication, that is, the public key or the authentication key, is stored in the accessible area irrespective of whether or not the public key is matched.

3, another embodiment of the present invention controls access to data stored in the portable storage device 200 according to the same method as the specific embodiment of the present invention described with reference to FIG. 2, Only the authentication step S500 is performed differently.

When the user inputs a public key generation command in step 400, the information processing apparatus 100 transmits the public key certificate stored in the portable storage device 200 to the portable storage device 200 Recognizes and reads the data and outputs a screen necessary for the authentication certificate log-in (S520).

In step 520, the user inputs information necessary for logging into the authorized certificate. When a plurality of authorized certificates are stored in the portable storage device 200, one of the authorized certificates is selected, and the password (S540).

The information processing apparatus 100 transmits the information input in operation 540 to the authorized authentication server (S560). In this case, the information processing apparatus 100 should be provided with an Internet module using wired and wireless lines.

In step 560, if a password required for login of the authorized certificate is transmitted to the authentication server, the authentication server determines whether or not the authorized certificate is allowed to log in according to a predetermined procedure, and the information processing apparatus 100 receives the result (S580).

If the log-in is granted in step 580, the information processing apparatus 100 generates a public key for the portable storage device 200 (S600), and the subsequent procedure is the same as that described in the specific embodiment of the present invention Same as.

If the login is not granted according to the result received from the authentication server in operation 580, the authentication fails and the public key is not generated and access to the portable storage device 200 is also impossible (S800).

At this time, the authorized certificate is also stored in an accessible area regardless of whether the public key is matched among a plurality of storage areas of the portable storage device 200, such as a public key or authentication key information.

Meanwhile, as shown in FIG. 4, the 600th step, that is, the public key generation step in the embodiment different from the specific embodiment of the present invention, may be performed by various methods, (S610) of reading the serial number of the portable storage device 200 in step S610.

The serial number is a unique number of the portable storage device 200, and is a serial number of the product. The serial number is stored in a space accessible to the portable storage device 200 irrespective of whether a public key is matched among a plurality of storage areas.

In step 610, the serial number of the portable storage device 200 read from the portable storage device 200 is combined with the unique number of the information processing device 100 to generate a character string to be a public key (S630) is performed.

At this time, the unique number of the information processing apparatus 100 may be a product serial number or a MAC address of the information processing apparatus 100.

The combined character string is a common key of the portable storage device 200 and the information processing apparatus 100.

At this time, the information processing apparatus 100 determines whether or not the public key generated by the above process is stored in the information processing apparatus 100 or the portable storage device 200, The serial number of the portable storage device 200 and the unique number of the information processing device 100 may be reassembled to generate a new character string.

It is to be understood that the invention is not limited to the embodiments described above but is defined by the scope of the appended claims and that various changes and modifications can be made by those skilled in the art It is self-evident.

1 is a block diagram showing a schematic configuration of an information processing apparatus according to a specific embodiment of the present invention.

FIG. 2 is a flowchart illustrating a data security method of a portable storage device according to a specific embodiment of the present invention. FIG.

FIG. 3 is a flowchart illustrating a data security method of a portable storage device according to another embodiment of the present invention. FIG.

4 is a flow diagram of a stepwise method of generating a public key in an embodiment of the present invention.

Description of the Related Art [0002]

100: information processing apparatus 200: portable storage device

10: Interface 20: Processor

30: interface control unit 40: memory

Claims (16)

A memory for storing a public key for the portable storage device; An interface to which the portable storage device is connected; A processor for accessing the portable storage device and processing the data; And an interface control unit for generating a public key with the portable storage device and storing the public key in the memory and the portable storage device, Wherein the interface control unit comprises:  Wherein when the portable storage device is connected to the interface, the public key stored in the memory is compared with the public key stored in the portable storage device, and if the public key stored in the memory is not coincident with the public key stored in the portable storage device Blocking the access of the processor to the portable storage device; If the public key is not stored, controls to block an accessor for data stored in the portable storage device and to receive a command for whether to generate a public key for the portable storage device. The method according to claim 1, Wherein the interface control unit comprises: Wherein the information processing apparatus generates a public key by combining a unique number of the information processing apparatus and a unique number of the portable storage device. 3. The method according to claim 1 or 2, Wherein the interface control unit comprises: And determines whether or not the authority required for generation of a public key for the portable storage device exists. The method of claim 3, Wherein the interface control unit comprises: And generates the public key only when it is determined that the information processing apparatus has the authority to generate the public key for the portable storage device. 5. The method of claim 4, Wherein the interface control unit comprises: Wherein the information processing apparatus determines that the user has the authority to generate the public key when logged in the public key certificate stored in the portable storage device. delete (A) comparing a public key stored in the portable storage device with a public key stored in the information processing device when the portable storage device is connected to the information processing device; If it is determined that the public key corresponding to the portable storage device and the information processing device have been stored as a result of the checking in the step (A), the information processing device accesses the data stored in the portable storage device (B1); If it is determined that the public key corresponding to the portable storage device and the memory is not stored as a result of the checking in step (A), access to the data stored in the portable storage device is blocked (step B2). And And (C) receiving, when the access to the data is blocked in the step (B2), a command as to whether to generate a public key for the portable storage device in the information processing apparatus A method of data security in a portable storage device. 8. The method of claim 7, The memory of the information processing apparatus stores a plurality of public keys generated for various portable storage devices, and the portable storage device stores a plurality of public keys generated between the various information processing devices. A method of data security in a portable storage device. 9. The method of claim 8, Wherein the public key is generated by forming a string of a combination of a unique number of the information processing apparatus and a unique number of the portable storage device. 9. The method of claim 8, Wherein the public key is generated by a combination of characters randomly extracted by a predetermined number or more. delete 8. The method of claim 7, The data security method includes: (D) confirming whether or not an authority to generate a public key is generated when an instruction to generate a public key for the portable storage device is input in the step (C); Generating (E) a public key for the portable storage device in the information processing apparatus if it is determined in step (D) that the public key generation right is authorized; Further comprising: (F) storing the public key generated in step (E) in the information processing apparatus and the portable storage device, respectively. 13. The method of claim 12, The data security method includes: Further comprising: (G) when the generation of the public key is completed in the step (D), the blocking of the access to the data stored in the portable storage device is canceled. 13. The method of claim 12, The step (C) (C1) a user interface is provided for receiving an authentication key for verifying the existence of a public key generation authority; And comparing the authentication key input through the user interface with an authentication key stored in the portable storage device (C2). 13. The method of claim 12, The step (C) (C3) a login screen of a public certificate stored in the portable storage device is displayed; Inputting a password of the authorized certificate (C4); And And a password for the authorized certificate is transmitted to the authentication server and logged in (C5). 13. The method of claim 12, The data security method includes: (E ') comparing the public key generated in the step (E) with a public key previously stored in the memory and a public key previously stored in the portable storage device; If it is determined in step (E ') that a public key identical to the public key generated in step (E) is stored in the memory or the portable storage device, the public key generated in step (E) (E ") of reproducing a public key including a character string different from the character string " E ".

Images