KR102008691B1 - Secure memory device based on cloud storage and Method for controlling verifying the same - Google Patents

Abstract

The present invention provides a highly secure cloud storage-based memory device that can use a file of cloud storage without a login process in the host system, and does not store protected files and cloud authentication information in a nonvolatile physical storage device, and an authentication control method thereof. A storage device, comprising: a cloud storage-based memory device for making files of a cloud storage available without a login process in a using host system; host devices to which the cloud storage-based memory device is connected; cloud storage for storing data files; And a smart device that performs a security authentication procedure when the memory device is physically connected to the host device.

Description

Secure memory device based on cloud storage and Method for controlling verifying the same}

The present invention relates to a memory device. Specifically, a cloud storage-based memory device having improved safety of using a file of cloud storage without a login process in a host system and not storing a protected file and cloud authentication information on a physical storage device. And an authentication control method thereof.

Universal Serial Bus (USB) is a PC peripheral port specification that simplifies complex PC and peripheral installation tasks with a single plug-in.

USB memory refers to a storage device used by connecting to the USB, which solves the problem of the initial high price and capacity and is now easily used by anyone.

USB memory is inexpensive compared to other hardware devices in terms of price, and the use of the memory to protect personal data by adding a password function is increasing in popularity.

In particular, the storage of personal data that can be protected in the USB memory is very common and shows high utilization in internet financial transactions, which are a part of life.

And cloud computing moves a number of discrete computing resources into one area, for example, the cloud area, an Internet environment with computing capabilities, and accesses the Internet anytime, anywhere, and as much as needed. It is a kind of distributed computing environment in which service is used and billed.

Since a cloud server provides a computing resource by connecting a plurality of physical or logical servers to each other through a network, it is possible to overcome the limitation of resources of an information device such as a computer and a portable terminal.

Information devices such as computers and mobile terminals connected to the cloud server are only responsible for interacting with the user or outputting the results. Actual information processing functions and large data storage functions utilize the resources of the cloud server. Can overcome the limitations of

However, even when utilizing resources in the cloud area, there is a limit in viewing multimedia or reading documents due to the limitation of the input / output unit of the information device itself.

Accordingly, the data stored in the cloud server is downloaded to a mobile terminal or a PC, and then, stored in a removable storage medium such as a memory stick or a CD, and an external device capable of processing the data in an optimal state is used.

In recent years, there has been a growing number of cases of leaking company confidential information through Universal Serial Bus (USB) devices, and cloud computing is no exception.

Therefore, there is a need for a control method for leaking important information by accessing a cloud application environment through a universal serial bus (USB) device that is not authorized in a cloud computing environment.

In particular, USB, which has non-physical physical properties of the prior art, is highly compatible, but there are security threats due to the possibility of accessing the physical medium in case of loss and theft, and USB alone does not provide access to files in cloud storage. There is an impossible problem.

In the case of cloud storage, it can be conveniently used in a network-accessible environment, but by performing the login on the host, the login trace remains on the public computer or the computer of another person, and a security threat exists, and dedicated applications such as computers and smartphones can be used. There is a problem that can be used only in the host device with the browser.

Republic of Korea Patent Publication No. 10-2014-0129714 Republic of Korea Patent No. 10-1758733 Republic of Korea Patent Publication No. 10-2014-0066919

The present invention is to solve the problems of the prior art cloud computing and portable memory device, it is possible to use the file of the cloud storage without the login process in the host system, the file and the cloud authentication information to be protected to the physical storage device It is an object of the present invention to provide a cloud storage-based memory device with enhanced safety that does not store and its authentication control method.

It is an object of the present invention to provide a cloud storage-based memory device and a method for controlling authentication thereof, which improves the safety of allowing only the user to access the cloud storage through the authentication of a smartphone and to set a desired level of security. .

The present invention provides a cloud storage-based memory device having a high security, which has a form of a USB memory stick that does not have user file data and is connected to a host device such as a computer or a TV so that files in the cloud storage can be viewed as files on a USB memory stick. And an authentication control method thereof.

The present invention can be used in any device connected to the USB, cloud storage-based memory device and the authentication control of the enhanced security that can be easily accessed and shared in a network environment to access and use the cloud storage as a USB memory The purpose is to provide a method.

The objects of the present invention are not limited to the above-mentioned objects, and other objects that are not mentioned will be clearly understood by those skilled in the art from the following description.

In accordance with an aspect of the present invention, there is provided a cloud storage-based memory device having improved safety, including: a cloud storage-based memory device for accessing files in a cloud storage without a login process from a using host system; Host devices; cloud storage for storing data files; and a smart device that performs a security authentication procedure when the cloud storage-based memory device is physically connected to the host device.

Here, the cloud storage-based memory device is characterized in that the file and the cloud authentication information to be protected are not stored in the physical storage device.

In addition, only the user authenticated through the authentication of the smart device can access the cloud storage, and the desired level of security is set through the smart device.

In addition, the security level includes a 0 level, in which a file cache of encrypted cloud ID and PWD, encrypted authentication information, metadata, and read / write file data is stored in the cloud storage-based memory device and supports automatic login, encrypted authentication information, The file cache of metadata and read / write file data is stored in the cloud storage based memory device, and the first stage supports automatic login during the validity period of the authentication information, and the file cache of metadata and read / write file data is stored in the cloud storage based memory device. 2 stages of file and meta data encryption and Block cache of metadata and read / write file data are stored in cloud storage based memory device and 3 stages of file, block and meta data encryption, and read / write file Block cache of data is stored on cloud storage based memory devices Block Data encryption is set in four steps, and cloud storage-based memory device is characterized in that it is set in five steps.

The cloud storage-based memory device is characterized in that the host device recognizes the same form as a general USB and all file information and authentication information are deleted at the moment the cloud storage-based memory device is removed from the host device.

In addition, the cloud storage-based memory device can access the Internet using WiFi or tethering provided by the smart device independently of the smart device, and connect the cloud storage-based memory device to a host device that does not have internet access. Even if the data file of the cloud storage can be used.

The cloud storage-based memory device may include a cloud drive interface unit that supports an interface between the cloud storage-based memory device and the cloud storage, a USB interface unit that supports an interface between the cloud storage-based memory device and the host device, and a cloud storage-based memory. Copy the information of the first authentication and data processing unit and all the information is deleted when the device is removed from the host device, and according to the user's security level setting to support performance improvement at a low security level And a second authentication and data processing unit.

The cloud storage-based memory device with improved safety according to the present invention for achieving another object is notified of the connection to the smart device when the cloud storage-based memory device is physically connected to the host device, the authentication request to the smart device by the file system check A cloud drive interface unit configured to transmit and receive cloud authentication procedures and metadata; a USB interface unit supporting an interface between a cloud storage-based memory device and a host device; A first authentication and data processing unit that supports virtual FAT configuration, block caching, and file caching, wherein all information is deleted when the cloud storage-based memory device is removed from the host device; Keep individual And a second authentication and data processing unit for supporting the.

In accordance with another aspect of the present invention, there is provided a method for controlling authentication of a cloud storage-based memory device with increased security, in which case (S1) when the cloud storage-based memory device is connected to a host device, (S2) informing the smart device; The host device checks the file system; (S4) When the cloud storage-based memory device requests authentication to the smart device, (S5) The smart device sets a security level and stores the authentication data (ID / PWD) in the cloud storage. Providing to the base memory device; (S6) Attempting to authenticate to the cloud storage from the cloud storage-based memory device receiving the authentication data (ID / PWM); (S7) When authentication in the cloud storage is completed, (S8) Transmitting file system identification information from the cloud storage-based memory device to the host device; (S9) cloud storage-based memory The device requests metadata reference to the cloud storage, and (S10) receives the highest metadata to configure an initial virtual FAT (S11).

The metadata may be file management information including a file allocation table (FAT).

The authentication process of (S1) to (S11) is characterized in that performed whenever the cloud storage-based memory device is physically connected to the host device.

In addition, only the user who has been authenticated (S1) to (S11) through the smart device can access the cloud storage, and sets a desired level of security level through the smart device.

In addition, the security level includes a 0 level, in which a file cache of encrypted cloud ID and PWD, encrypted authentication information, metadata, and read / write file data is stored in the cloud storage-based memory device and supports automatic login, encrypted authentication information, The file cache of metadata and read / write file data is stored in the cloud storage based memory device, and the first stage supports automatic login during the validity period of the authentication information, and the file cache of metadata and read / write file data is stored in the cloud storage based memory device. 2 stages of file and meta data encryption and Block cache of metadata and read / write file data are stored in cloud storage based memory device and 3 stages of file, block and meta data encryption, and read / write file Block cache of data is stored on cloud storage based memory devices Block Data encryption is set in four steps, and cloud storage-based memory device is characterized in that it is set in five steps.

And if the authentication process of (S1) ~ (S11) is made, in order to read the data of the cloud storage, (R1) performing a read access request from the host device to the cloud storage-based memory device; (R2) cloud Requesting file data reference from the storage-based memory device to the cloud storage and (R3) configuring a virtual FAT; (R4) the cloud storage transmitting the file data to the cloud storage-based memory device as a block stream; (R5) The cloud storage based memory device performs block caching, (R6) providing file data to the host device, and (R7) performing file caching in the cloud storage based memory device.

And (S1) ~ (S11) when the authentication process is made, in order to write the data of the cloud storage, (W1) requesting the file list generation to the cloud storage-based memory device to write access from the host device; (W2) The storage-based memory device is configured to make a virtual FAT; (W3) When the virtual FAT is configured, the host device writes file data, and (W4) The cloud storage-based memory device performs block caching; (W5) The host device (W6) the cloud storage-based memory device writes block data to the cloud storage; (W7) when the host device requests to finish writing the file, (W8) the cloud storage-based memory device caches the file. And (W9) writing file data to the cloud storage.

The host device records file data (W3), the cloud storage based memory device repeats the block caching process (W4), and when the space of the cloud storage based memory device is insufficient, the intermediate storage is stored in the cloud storage. The cloud storage based memory device is characterized in that the assembly in the step (W8) to cache files.

As described above, the cloud storage-based memory device having improved safety and the authentication control method thereof according to the present invention have the following effects.

First, you can use files from cloud storage without logging in to the host system.

Second, it is possible to improve safety by not storing protected files and cloud authentication information in a physical storage device.

Third, only the user can access the cloud storage through the authentication of the smartphone, increase the security to enable the desired level of security, and enable efficient system design.

Fourth, it has a USB memory stick that does not have user file data, and is connected to a host device such as a computer or a TV so that the files in the cloud storage can be viewed as files on the USB memory stick, thereby improving the pininess.

Fifth, it can be used in all devices connected to USB, and can be easily accessed and shared in a network environment, so that cloud storage can be accessed and used like a USB memory, thereby increasing security and convenience.

1 is an overall system configuration of a cloud storage-based memory device with improved safety according to the present invention
2 is a detailed configuration diagram of a cloud storage-based memory device having increased safety according to the present invention.
3 is an operation control flowchart illustrating a method for controlling authentication of a cloud storage based memory device having increased safety according to the present invention.
4 is a control flowchart illustrating a data input / output process of a cloud storage based memory device having increased safety according to the present invention.

Hereinafter, a preferred embodiment of a cloud storage based memory device having improved safety and an authentication control method thereof according to the present invention will be described in detail.

Features and advantages of the cloud storage-based memory device with improved safety and the authentication control method thereof according to the present invention will be apparent from the detailed description of each embodiment below.

1 is an overall system configuration diagram of a cloud storage based memory device with increased safety according to the present invention, and FIG. 2 is a detailed configuration diagram of a cloud storage based memory device with increased safety according to the present invention.

The present invention is to enable the use of files in the cloud storage without the login process in the host system used, without having a non-volatile physical space for the file storage connected to WiFi independently of the smartphone or tethering provided by the smartphone You can use it to access the Internet.

In this operation, all the authentication process is performed through the smart phone, and includes a configuration of deleting file information and authentication information when the USB device is removed.

In the entire system of the cloud storage-based memory device with improved safety according to the present invention, as shown in FIGS. 1 and 2, the cloud storage-based memory device 200 may use files of the cloud storage without a login process in a using host system. The host device 300 to which the cloud storage based memory device 200 is connected, the cloud storage 100 storing data files, and the cloud storage based memory device 200 are physically connected to the host device 300. When connected, the smart device 400 performs a security authentication procedure.

Here, the cloud storage-based memory device 200 may use a file of the cloud storage 100 without a login process at the host device 300, and does not store the protected file and the cloud authentication information in the nonvolatile physical storage device. .

In addition, only the user authenticated through the authentication of the smart device 400 can access the cloud storage 100, and sets a desired level of security level through the smart device 400.

The cloud storage-based memory device 200 according to the present invention is recognized in the same form as a general USB from the standpoint of the host device 300 (regardless of operating system, computer, TV, industrial device, etc.).

The cloud storage-based memory device 200 has a structure in which all file information and authentication information are deleted at the moment of being removed from the host device 300.

All authentication processes for using the data file of the cloud storage 100 through the cloud storage-based memory device 200 is performed in the smart device 400, the cloud storage-based memory device 200 and the smart device 400 Independently connect to WiFi or use the tethering provided by the smart device 400 to access the Internet, so even if the host device 300 is not connected to the Internet, the cloud storage-based memory device 200 The data file of the storage 100 can be used.

A detailed configuration of the cloud storage based memory device 200 according to the present invention is as follows.

As shown in FIG. 2, when the cloud storage-based memory device 200 is physically connected to the host device 300, the cloud device is notified of the connection to the smart device 400 and an authentication request is made to the smart device 400 by a file system check. Cloud drive interface unit 10 for transmitting and receiving authentication procedures and metadata, USB interface unit 40 for supporting the interface between the cloud storage-based memory device 200 and the host device 300, Cloud authentication procedure and meta First authentication to perform data transmission / reception, support virtual FAT configuration, block caching, and file caching in a read / write operation, and delete all information when the cloud storage-based memory device 200 is removed from the host device 300. And copy the information from the data processing unit 20 and the first authentication and data processing unit 20, and the user needs a low security level. Wu, and a second authentication and data processing unit 30, which supports the store to improve performance.

Cloud storage-based memory device with improved safety according to the present invention comprising such a configuration,

First, make the files in the cloud storage available without logging in from the host device,

Secondly, you can access the Internet using WiFi connection independently from smart device or tethering provided by smart device.

Third, the authentication process is performed using a smart device,

Fourth, the file information and the authentication information are deleted when the cloud storage-based memory device is removed.

Therefore, the cloud storage-based memory device with improved safety according to the present invention including such a configuration can be accessed from any computer without a user's trace on any computer that is very important for security in other people's computers, hotels, public places, PC rooms, etc. It can be useful for accessing files and contents requiring security existing in cloud storage.

In addition, even if the memory device is lost, the user does not have a physical storage space, and thus the user's file contents are not likely to leak.

The authentication control method of the cloud storage based memory device with improved safety according to the present invention will be described in detail as follows.

3 is an operation control flowchart illustrating a method for controlling authentication of a cloud storage based memory device having increased safety according to the present invention.

In order to use the files in the cloud storage without logging in at the host device, the following authentication process is performed.

First, when the cloud storage based memory device 200 is connected to the host device 300 (S1), the first authentication and data processing unit 20 of the cloud storage based memory device 200 may operate the cloud drive interface unit 10. Notify that the cloud storage based memory device 200 is connected to the smart device 400 through (S2).

The host device 300 reads the first block of the cloud storage-based memory device 200 and checks the file system (S3).

Subsequently, the cloud storage-based memory device 200 requests an authentication to the smart device 400 (S4).

In addition, the security stage is set through the smart device 400, and the smart device 400 provides the authentication data (ID / PWD) to the cloud storage-based memory device 200 (S5).

The cloud storage based memory device 200 receiving the authentication data ID / PWD attempts to authenticate with the cloud storage 100 (S6).

When authentication in the cloud storage 100 is completed (S7), the cloud storage-based memory device 200 transmits the file system confirmation information to the host device 300 (S8).

The cloud storage-based memory device 200 requests metadata reference to the cloud storage 100 (S9), receives the highest metadata (S10), and configures an initial virtual FAT (S11).

Meta data is file management information such as FAT (File Allocation Table).

This authentication procedure is performed whenever the cloud storage-based memory device 200 is physically connected to the host device 300.

And the process of setting the security step through the smart device 400 in detail as follows.

Security steps (Encrypted)
cloud ID (Encrypted)
cloud PWD (Encrypted)
Certification Information Meta data Read File Data Write File Data Level 0 ○ ○ ○ ○ File Cache File Cache Auto-Login Stage 1 × × ○ ○ File Cache File Cache Automatic login (during certification information validity period) Tier 2 × × × ○ File Cache File Cache File and Meta Data Encryption Tier 3 × × × ○ Block Cache Block Cache File, Block and Meta Data Encryption 4 steps × × × × Block Cache Block Cache Block Data Encryption 5 steps × × × × × × No information left in nonvolatile memory on USB

Such authentication step setting information may be stored in the second authentication and data processor 30 according to the security step setting of the user.

Information not stored in the second authentication and data processing unit 30 is stored in the first authentication and data processing unit 20 in which all information is deleted when the cloud storage-based memory device 200 is removed from the host device 300.

In Table 1, the security level is set to 0 to 5 levels, but is not limited thereto.

For example, the details stored in the second authentication and data processing unit 30 in step 0 are a file cache of encrypted cloud ID and PWD, encrypted authentication information, metadata, and read / write file data, and supports automatic login.

In the first step, the file cache of encrypted authentication information, metadata, and read / write file data is supported, and automatic login is supported during the validity period of the authentication information.

In the second step, a file cache of metadata and read / write file data is encrypted, and file and metadata are encrypted.

In step 3, it is a block cache of metadata and read / write file data, and File, Block and Meta Data encryption are performed.

In step 4, the block cache of read and write file data is performed, and block data encryption is performed.

In step 5, no information remains in the second authentication and data processor 30 of the cloud storage-based memory device 200.

At every stage, file caching means caching the entire data block of the file.

As described above, in the security level setting according to an embodiment of the present invention, all of the ID / PWD / authentication information is encrypted even in steps 0 and 1.

The authentication information is a hash that the cloud storage service provider can access without logging in. The files, blocks, and caches copy the cloud storage information locally.

In the first and second stages, File and Meta Data are not encrypted to improve performance.

After the second step, all data stored in the second authentication and data processor 30 is encrypted.

By setting the security level as described above, even after the hacking of the cloud storage-based memory device 200, only the encrypted fragment data can be accessed, and thus almost complete security can be maintained.

The data writing and reading process following the security authentication procedure is described as follows.

4 is a control flowchart illustrating a data input / output process of a cloud storage based memory device having increased safety according to the present invention.

First, in the read operation, a read access request is made from the host device 300 to the cloud storage-based memory device 200 to request a file data reference. (R1)

The cloud storage-based memory device 200 receiving the file data reference request from the host device 300 makes a file data reference request to the cloud storage 100 (R2), and configures a virtual FAT (R3).

Subsequently, when the cloud storage 100 transmits file data to the cloud storage based memory device 200 as a block stream (R4), the cloud storage based memory device 200 performs block caching (R5) and hosts the file data. Provided to the device 300 (R6), and cache files in the cloud storage-based memory device 200 (R7).

In security level 2 or below, caching is performed on a file basis as in (R7) to improve performance. Block caching and file caching use the first authentication and data processing unit 20 or the second authentication and data processing unit 30 according to the security level setting of the user.

In the write operation, when the host device 300 writes to the cloud storage based memory device 200 and requests the file list generation (W1), the cloud storage based memory device 200 configures a virtual FAT. W2)

When the cloud storage based memory device 200 configures a virtual FAT, the host device 300 writes file data (W3), and the cloud storage based memory device 200 performs block caching (W4).

Subsequently, the host device 300 writes FAT data (W5), and the cloud storage-based memory device 200 writes block data to the cloud storage 100 (W6).

When the host device 300 requests to finish writing the file (W7), the cloud storage-based memory device 200 caches the file (W8) and writes the file data to the cloud storage 100 (W9).

In this write operation, the host device 300 writes the file data (W3), and the cloud storage-based memory device 200 repeats the block caching process (W4), while the cloud storage-based memory device 200 If the space is insufficient, the intermediate storage in the cloud storage 100, and then the cloud storage-based memory device 200 is assembled in the step (W8) the file caching.

In order to improve performance in such a write operation, in security level 2 or below, file unit caching is performed at (W8).

And requesting file list generation to the cloud storage-based memory device 200 according to the file system operating method of the host device 300 (W1), configuring the virtual FAT by the cloud storage-based memory device 200 (W2). In operation W7, the host device 300 requests to finish writing a file may vary.

The cloud storage-based memory device with improved safety and the authentication control method thereof according to the present invention described above are new USB memory stick-type cloud storage-based memory devices that maintain the advantages of general USB memory and cloud storage and supplement the disadvantages. Instead of storing the protected file and cloud authentication information in a physical storage device, the authentication environment, physical file data, and access system to the host are separated so that there is no security threat due to loss or stealing.

In particular, by using the files in the cloud storage without logging in from the host system in use, not only user files but also authentication information such as user IDs and passwords for accessing the cloud storage must remain on the host system, and the authentication process must be performed through a smart device. The security is enhanced by making the cloud storage accessible.

As described above, it will be understood that the present invention is implemented in a modified form without departing from the essential characteristics of the present invention.

Therefore, the described embodiments should be considered in descriptive sense only and not for purposes of limitation, and the scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the equivalent scope are included in the present invention. It should be interpreted.

100. Cloud Storage 200. Cloud-Based Memory Devices
300. Host device 400. Smart device

Claims (16)

Cloud storage for storing data files;
A cloud storage-based memory device that can use files in cloud storage without a login process in a using host system and does not store protected files and cloud authentication information;
Host devices to which the cloud storage based memory device is connected;
When the cloud storage-based memory device is physically connected to a host device, the authentication data is received to receive a security authentication request from the cloud storage-based memory device so that the cloud storage-based memory device may perform a security authentication procedure to the cloud storage. Smart device for transmitting to the cloud storage-based memory device; Cloud storage-based memory device with enhanced security, comprising a. delete The cloud storage base of claim 1, wherein only a user authenticated through security authentication of the smart device can access the cloud storage, and a security level of a desired level is set through the smart device. Memory device. The method of claim 3, wherein the security level is
File cache of encrypted cloud ID and PWD, encrypted authentication information, metadata, and read / write file data is stored in the cloud storage-based memory device and supports automatic login;
A first step in which a file cache of encrypted authentication information, metadata, and read / write file data is stored in the cloud storage-based memory device and supports automatic login during the validity period of the authentication information;
File cache of metadata, read / write file data is stored in cloud storage based memory device, and file and metadata are encrypted.
3 steps in which block cache of metadata and read / write file data are stored in the cloud storage based memory device, and File, Block and Meta Data encryption are performed.
Block cache of read and write file data is stored in the cloud storage based memory device and Block Data encryption is performed;
Cloud storage-based memory device with increased safety, characterized in that the setting in five steps that leave no information on the cloud storage-based memory device. The memory device of claim 1, wherein the cloud storage-based memory device comprises:
A cloud storage-based memory device having enhanced security, wherein the host device recognizes the same form as a general USB device and deletes all file information and authentication information at the moment the cloud storage-based memory device is removed from the host device. The memory device of claim 1, wherein the cloud storage-based memory device comprises:
You can connect to the Internet independently of your smart device, or use the tethering provided by your smart device to access the Internet.
Cloud storage-based memory device with enhanced security, characterized in that the data files of the cloud storage can be used even if the cloud storage-based memory device is connected to a host device that is not connected to the Internet. The memory device of claim 1, wherein the cloud storage-based memory device comprises:
Cloud drive interface unit that supports the interface between the cloud storage-based memory device and cloud storage,
USB interface unit for supporting the interface of the cloud storage-based memory device and the host device,
A first authentication and data processing unit which deletes all information when the cloud storage-based memory device is removed from the host device;
And a second authentication and data processing unit for copying information of the first authentication and data processing unit and supporting individual security steps. When the cloud storage-based memory device which does not store the protected file and cloud authentication information is physically connected to the host device, the connection is notified to the smart device, an authentication request is made to the smart device by a file system check, and the cloud storage-based memory A cloud drive interface unit configured to transmit authentication data to the cloud storage-based memory device by the smart device so that the device can perform a security authentication procedure to cloud storage;
A USB interface unit supporting an interface between the cloud storage-based memory device and the host device;
A cloud authentication procedure and metadata transmission / reception processing, virtual FAT configuration, block caching, and file caching during read / write operations, and all information is deleted when the cloud storage-based memory device is removed from the host device; Authentication and data processing;
Copy the information of the first authentication and data processing unit, according to the user's security level setting, the cloud storage based on the enhanced security, characterized in that it comprises a second authentication and data processing unit for supporting the performance improvement at a low security level Memory device. (S1) when the cloud storage-based memory device which does not store the file and the cloud authentication information to be protected is connected to the host device, (S2) informing the smart device;
(S3) the host device performing a file system check;
(S4) When a security authentication request is made to the smart device from the cloud storage-based memory device, (S5) setting a security step on the smart device and providing authentication data (ID / PWD) to the cloud storage-based memory device. ;
(S6) attempting authentication with cloud storage from a cloud storage-based memory device that has received authentication data (ID / PWD);
(S7) when the security authentication is completed in the cloud storage, (S8) transmitting file system identification information from the cloud storage-based memory device to the host device;
(S9) the cloud storage-based memory device requests metadata reference to the cloud storage, (S10) receiving the highest metadata, and (S11) forming a secure virtual cloud comprising the initial virtual FAT; Authentication control method for storage-based memory devices. 10. The method of claim 9, wherein the metadata is file management information including a file allocation table (FAT). 10. The method of claim 9, wherein the authentication procedure of (S1) to (S11) is performed whenever the cloud storage-based memory device is physically connected to the host device. 10. The method of claim 9, wherein only the user who has been authenticated (S1) to (S11) through the smart device can access the cloud storage, and sets the desired security level through the smart device. Authentication control method for enhanced cloud storage based memory devices. The method of claim 12, wherein the security level is:
File cache of encrypted cloud ID and PWD, encrypted authentication information, metadata, and read / write file data is stored in the cloud storage-based memory device and supports automatic login;
A first step in which a file cache of encrypted authentication information, metadata, and read / write file data is stored in the cloud storage-based memory device and supports automatic login during the validity period of the authentication information;
File cache of metadata, read / write file data is stored in cloud storage based memory device, and file and metadata are encrypted.
3 steps in which block cache of metadata and read / write file data are stored in the cloud storage based memory device, and File, Block and Meta Data encryption are performed.
Block cache of read and write file data is stored in the cloud storage based memory device and Block Data encryption is performed;
The authentication control method of the cloud storage-based memory device with enhanced safety, characterized in that the setting in five steps that leave no information on the cloud storage-based memory device. The method of claim 9, wherein the authentication procedure of (S1) to (S11) is made to read the data of the cloud storage,
(R1) performing read access at the host device to request a file data reference to the cloud storage-based memory device;
(R2) making a file data reference request from the cloud storage-based memory device to cloud storage, and (R3) configuring a virtual FAT;
(R4) the cloud storage transmitting the file data to the cloud storage based memory device in a block stream;
(R5) the cloud storage based memory device performs block caching, (R6) providing file data to the host device, and (R7) performing file caching in the cloud storage based memory device; Authentication control method for enhanced cloud storage based memory devices. The method of claim 9, wherein when the authentication procedure of (S1) to (S11) is performed, to write the data of the cloud storage,
(W1) requesting file list generation to a cloud storage-based memory device by writing access to the host device;
(W2) the cloud storage based memory device configuring a virtual FAT;
(W3) a virtual FAT configuration, the host device writes file data, and (W4) the cloud storage based memory device performs block caching;
(W5) the host device writing FAT data, and (W6) the cloud storage-based memory device writing block data to cloud storage;
(W7) when the host device requests to finish writing the file, (W8) the cloud storage-based memory device caches the file, and (W9) writing the file data to the cloud storage. Authentication control method for cloud storage based memory devices. 16. The method of claim 15, wherein the host device writes file data (W3), and the cloud storage-based memory device repeats block caching (W4),
When the space of the cloud storage-based memory device is insufficient, the intermediate storage is stored in the cloud storage, and then the cloud storage-based memory device with enhanced safety, characterized in that the assembly in the step (W8) the cloud storage-based memory device file caching. Authentication control method.

Images