KR20000030767A - A personal computer which prevents hacking and virus infection - Google Patents

Abstract

PURPOSE: A personal computer having a hacking interruption function and a virus infection prevention function is provided to interrupt the leakage and loss of data caused by hacking or virus in on-line or off-line state, by controlling the operation of a data storage hard disk to be in pause state. CONSTITUTION: A first hard disk(2) contains a software essential for operating a computer with a data storage folder(21). A second hard disk(6) copies and stores the data inside of the data storage folder(21) of the first hard disk(2). The external hacking and virus infection to the second hard disk(6) are interrupted previously, by stopping the operation of the second hard disk(6) in on-line state. In off-line state, the data stored inside of the data storage folder(21) of the first hard disk(2) is checked for virus infection, and copied to the corresponding folder of the second hard disk(6) only in case that there is no abnormal condition.

Description

Personal computer which prevents hacking and virus infection

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal computer having a hacking blocking function and a virus infection prevention function, and in particular, by controlling the operation state of a data storage hard disk during computer communication, main data (hereinafter, small data and large data) from hacking or computer virus are controlled. And various files, etc., collectively referred to as "data", and a personal computer that can block hacking while offline.

In recent years, as the information and communication environment has developed such as the Internet, computer users have been able to access various information easily and quickly, while negative factors such as hacking technology and computer virus have also developed and become a big problem. have.

In order to cope with these negative factors, resistance measures such as firewalls and antivirus software are widely used. First, antivirus software does not have a function to block hacking, and in the case of a firewall, the construction cost is high. As it is expensive, it is widely adopted in large computers such as servers, while it is difficult to install in general personal computers, such as notebook computers or desktop computers.

The present invention has been made in view of the above problems, and when an online connection is made during computer communication, the operation of the data storage hard disk is controlled to make it in a stopped state. The purpose is to provide a personal computer that can be blocked at the source, as well as blocking off-line hacking.

1 is a block diagram showing the configuration of an embodiment of the present invention;

FIG. 2 is a flowchart for describing an operation of the embodiment illustrated in FIG. 1.

<Description of Drawing>

1-CPU 2-First Hard Disk

3-Hard Disk Controller 4-Modem

5-Communication port 6-Second hard disk

7-Communication detection part 8-Second hard disk power control part

9-Data copy indicator 10-Data delete indicator

11-Passcode code register 12-Passcode code authenticator

13-Virus monitor 21-Folder for data storage

The personal computer of the present invention for achieving the above object,

In a typical personal computer having a CPU, a first hard disk, a hard disk controller, a modem, a communication port, etc.,

A second hard disk for data storage installed in parallel with the first hard disk;

Communication detection unit that checks the operation status of the modem and notifies the CPU whether it is online

A virus monitoring unit that monitors the penetration of viruses,

A second hard disk power control unit which receives a command from a CPU and controls a power supply of the second hard disk to stop the second hard disk when the communication detecting unit detects an online connection state;

When the virus monitoring unit determines that the virus has not been infiltrated while the CPU is informed that the CPU is offline, the data stored in the data storage folder of the first hard disk is stored in the corresponding folder of the second hard disk. A data copy instruction unit for instructing the hard disk controller to copy a command to the computer;

When data stored in the data storage folder of the first hard disk is copied to a corresponding folder of the second hard disk according to the command of the data copy indicating unit, a command to delete data in the data storage folder of the first hard disk is provided. A data deletion instruction unit instructing the hard disk controller;

When storing data on the first hard disk or the second hard disk, a password that synthesizes a password arbitrarily selected and input by a user and a specific code combination system of the user and writes an encryption code to the corresponding data through the CPU. Code log,

When data is read from the first hard disk or the second hard disk, the encryption code according to the password input by the user and the encryption code added to the data to be read are compared with each other, and only when the two are identical. And an encryption code authentication unit for outputting an authentication signal to the CPU to read data.

In the present invention having the above-described configuration, the second hard disk is preferably detachably installed.

In addition, the communication detection unit and the second hard disk power control unit, data copy instruction unit, data deletion instruction unit, encryption code recording unit, encryption code authentication unit, virus monitoring unit may be implemented in software as well as hardware.

<Example>

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing the configuration of one embodiment of the present invention, and FIG. 2 is a flowchart for explaining a series of operations of the embodiment, wherein the CPU 1, the first hard disk 2, and the hard disk controller ( 3) The configuration of the modem 4, the communication port 5 and the like is the same as in the case of a normal personal computer.

The present invention further includes a second hard disk 6 in addition to the above-described general configuration, which copies data stored in a specific folder of the first hard disk 2. It is used for storing.

Specifically, the first hard disk 2 stores software necessary for operating a computer (for example, Windows 98 and an Internet web browser, dial-up networking software, application software such as a word processor or a DBMS), A folder 21 for storing data (for example, a "My Documents" folder in Windows 98, or a folder with a specific name created by a user) is provided.

Unlike the first hard disk 2 described above, the second hard disk 6 mainly serves to copy and store data stored in the data storage folder 21 of the first hard disk 2. In this case, the second hard disk 6 may be detachably installed through a mounting device such as a hard rack.

In the installation and use of the second hard disk 6 as described above, if the operation of the second hard disk 6 is stopped at the time of communication connection (online), an outsider hacks on the second hard disk 6. And viral infection at its source. In addition, after the communication is finished, it is determined whether the virus has infiltrated, and only when there is no abnormality, data stored in the data storage folder 21 of the first hard disk 2 (as data stored in the communication connection state, For example, data downloaded from the Internet, data uploaded to a server, data exchanged with a counterpart via PC communication, data and files stored while working on a PC in an offline state, and the like. If you make a copy of it, the data will be protected from viruses.

As described above, after safely copying the data in the data storage folder 21 of the first hard disk 2 to the corresponding folder in the second hard disk 6, the data storage folder of the first hard disk 2 The data in (21) is deleted to prevent the main data from leaking even if the data storage folder 21 of the first hard disk 2 is hacked at a later communication connection.

Hereinafter, detailed operations of the present embodiment will be described in detail with reference to the flowchart shown in FIG. 2.

First, the CPU 1 checks the communication state through the communication detecting unit 7 which monitors the operation state of the modem 4 connected to the communication port 5 to determine whether computer communication has been started (step S1).

When the computer communication is started in step S1 and determined to be online, the CPU 1 issues a power control command to the second hard disk power control unit 8 to control the power supply of the second hard disk 6. (Step S2). Such a method of controlling the power may be, for example, a method of completely cutting off the power supplied to the second hard disk 6 or a method of forcibly switching the second hard disk 6 to the sleep mode or the idle mode. Can be.

After the step S2, the CPU 1 continuously monitors whether the computer communication is terminated through the communication sensing unit 7 (step S3). In step S3, the CPU 1 detects that the computer communication is terminated and goes offline. In this case, the CPU 1 proceeds to step S4 in which the virus monitoring unit 13 is operated to check whether the virus has infiltrated during the online connection state, and it is determined that the computer communication has not been terminated yet. In the case, the step S2 is repeated.

The virus monitoring unit 13 operating in the step S4 may be implemented by software, for example, a "V3" vaccine program or "Norton Anti-Virus" currently available on the market.

When it is determined that the virus has penetrated at step S4, the CPU 1 notifies the user of the fact through the computer monitor and the speaker (S5), and when it is determined that the virus has not penetrated. In the following, the data copy operation of step S7 will be performed.

When the user is notified of the infiltration of the virus in step S5, the virus program or data recovery software is operated to heal data damaged by the virus, and the CPU 1 heals the virus through the virus monitoring unit 13 in step S6. Check if it is

When it is confirmed in step S6 that the virus has been cured, the CPU 1 executes the data copy operation in step S7, that is, the second hard disk power control unit 8 controls the second hard disk ( By supplying power to 6), the second hard disk 6 is made in an operable state and notified to the data copy instructing section 9 that data copying is possible. Accordingly, the data copy instruction unit 9 issues a copy command to the hard disk controller 3 so as to correspond to the data stored in the data storage folder 21 of the first hard disk 2 in the second hard disk 6. Make it copy to a folder.

When the data copy operation of step S7 ends, the CPU 1 notifies the data deletion instruction unit 10 that data deletion is possible. Accordingly, the data deletion instruction unit 10 issues a delete command to the hard disk controller 3 to delete data stored in the data storage folder 21 of the first hard disk 2 (step S8).

The reason for deleting the data in step S8 is to prevent leakage of the main data even if the data storage folder 21 of the first hard disk 2 is hacked by a hacker during the later computer communication. In this case, the operation of step S8 may be omitted according to a user's need.

Meanwhile, even when the antivirus program or the data recovery software is operated in step S6, the malicious virus may not be cured. In this case, in order to protect the existing data of the second hard disk 6, the data copy of the step S7 is copied. The job is terminated without the job and the data deletion in step S8. When the operation is completed, the user later repairs the damaged data in the first hard disk 2 using another type of antivirus program or data recovery software. After such repair work, if the data in the data storage folder 21 is in a normal state, the user will arbitrarily manually perform a data copying operation on the second hard disk 6.

As described above, in the present invention, the second hard disk 6 is additionally installed and the operation thereof is controlled when the computer communication is connected online. Thus, the first hard disk 2 is controlled by the hacker in the online connection state. Even if hacked or infected by a virus, the second hard disk 6 for storing the main data is in an off state, so that hacking and virus infection on the main data can be fundamentally blocked.

On the other hand, considering that the first hard disk 2 may not be repaired due to a malicious hack or a malicious virus, the second hard disk 6 may be detachably mounted using equipment such as a hard rack. The second hard disk 6 can be detached from the computer if necessary.

In addition to the above-described functions, the present invention is also capable of performing encryption code recording and encryption code authentication functions that can prevent hacking in an offline state.

That is, when the user stores the data, the user inputs his or her own password through the keyboard according to his or her choice. The encryption code recorder 11 synthesizes the specific code combination system and the password of the user. By passing the generated encryption code to the CPU 1, the encryption code unique to the user is recorded in the storage target data of the first hard disk 2 or the second hard disk 6.

When a user who wants to read, i.e., open data to which an encryption code is added among the data stored in the first hard disk 2 or the second hard disk 6, the computer user must enter a password through the keyboard. The input password is encrypted through the encryption code recorder 11 as described above, and is transmitted to the encryption code authentication unit 12. On the other hand, the CPU 1 reads out the encryption code added to the data to be read and transmits it to the encryption code authentication unit 12, and the encryption code authentication unit 12 transmits the encryption code recording unit 11 and the CPU 1; Each cipher code inputted from) is compared to determine whether they match.

In the above determination, when it is determined that both are coincident, the encryption code authentication unit 12 transmits an authentication signal to the CPU (1). As a result, the CPU 1 operates the hard disk controller 3 to read out data to be read.

On the contrary, in the case where it is determined that the two do not match, the encryption code authentication unit 12 transmits a non-authentication signal to the CPU 1, whereby the CPU 1 reports the fact through a computer monitor or a speaker. In addition to passing it to the user, the data cannot be read.

By controlling the storage and reading of the data using the encryption code recording unit 11 and the encryption code authentication unit 12 as described above, it is possible to prevent data leakage by hacking in an offline state not related to computer communication. do. Therefore, the security of data management can be improved.

The above encryption code recording and authentication operation is executed by the user's arbitrari selection at the time of storing and reading the data to the hard disks 2 and 6, and this operation is performed during the control process in the computer communication shown in FIG. It may be added to the data copy process of step S7. That is, when copying the data stored in the data copy folder 21 of the first hard disk 2 to the corresponding folder in the second hard disk 6 in step S7 of FIG. 2, the encryption code is recorded in the corresponding data. By doing so, the security at the time of reading data from the second hard disk 6 can be further enhanced.

In the above-described embodiments, the communication detection unit, the second hard disk power control unit, the data copy instruction unit, the data deletion instruction unit, the encryption code recording unit, the encryption code authentication unit, and the virus monitoring unit are not only hardware but also software. It can be implemented.

On the other hand, the present invention described above, which can be carried out in a variety of modifications within the scope without departing from the gist, in the case of such a modification, the modified configuration to perform the same function also belongs to the scope of the present invention as well to be.

As described above, according to the present invention, when the computer communication is online, even if the first hard disk storing the general computer program is hacked or infected by a virus, the second hard disk storing the main data is stopped. With security protection, you can essentially block hacking and virus infections on critical data. In addition, the present invention is further equipped with an encryption code recording and authentication function, by utilizing this function it is possible to further enhance the security of data storage and reading.

Claims (3)

In a typical personal computer having a CPU, a first hard disk, a hard disk controller, a modem, a communication port, etc., A second hard disk for data storage installed in parallel with the first hard disk; Communication detection unit that checks the operation status of the modem and notifies the CPU whether it is online A virus monitoring unit that monitors the penetration of viruses, A second hard disk power control unit which receives a command from a CPU and controls a power supply of the second hard disk to stop the second hard disk when the communication detecting unit detects an online connection state; When the virus monitoring unit determines that the virus has not been infiltrated while the CPU is informed that the CPU is offline, the data stored in the data storage folder of the first hard disk is stored in the corresponding folder of the second hard disk. A data copy instruction unit for instructing the hard disk controller to copy a command to the computer; When data stored in the data storage folder of the first hard disk is copied to a corresponding folder of the second hard disk according to the command of the data copy indicating unit, a command to delete data in the data storage folder of the first hard disk is provided. A data deletion instruction unit instructing the hard disk controller; When storing data on the first hard disk or the second hard disk, a password that synthesizes a password arbitrarily selected and input by a user and a specific code combination system of the user and writes an encryption code to the corresponding data through the CPU. Code log, When data is read from the first hard disk or the second hard disk, the encryption code according to the password input by the user and the encryption code added to the data to be read are compared with each other, and only when the two are identical. A personal computer comprising an encryption code authentication unit for outputting an authentication signal to the CPU to read data. The personal computer as claimed in claim 1, wherein the second hard disk is detachable. The personal computer according to claim 1, wherein the communication detection unit, the second hard disk power control unit, the data copy instruction unit, the data deletion instruction unit, the encryption code recorder, the encryption code authentication unit, and the virus monitoring unit are implemented by software. .