KR20110011781A - Security usb memory using mac address and security method using thereof - Google Patents

Abstract

PURPOSE: A USB security USB memory using a MAC address and a security method using the same are provided to give access right about stored data only if the MAC address about the same terminal with a preset terminal coincides. CONSTITUTION: A storage unit(190) stores data, preset password and a preset MAC address stored by a user setup. A control unit(150) cancels the first security if the password inputted through an input unit(110) and a preset password coincides. If a MAC address of a terminal currently connected through a USB interface(130) coincides with the preset MAC address, the control unit cancels the second security.

Description

Security USB memory using MAC address and security method using same {Security USB memory using MAC address and Security method using equivalent}

The present invention relates to a security technology, and more specifically, to enhance security by granting access rights to stored data only when the first security by password and the MCA address for the same terminal as the preset terminal match. The present invention relates to a secure USB memory using a MAC address and a security method using the same.

With the development of semiconductor and computing technology, memory means for data storage management have been developed in various forms, and from conventional hard disk drives (HDD) to external memory means CD, DVD, memory sticks (cards), etc. It is being commercialized in various ways from the capacity of hard disk drives to high capacity external memory devices.

Among them, in recent years, small-size and convenient to carry, USB memory that can be easily plugged into a USB port of a PC is widely used.

USB refers to a universal serial bus, and refers to a bus standard for connecting a personal computer (PC) and a peripheral device. In general, USB is simply referred to as an interface means with an external memory device.

USB is a device that allows you to easily connect your device to your computer without opening your PC.

USB uses standard port and plug combinations to connect printers, modems, scanners, and digital camera devices. The advantage of this bus is that it provides the ability to easily add, delete, or move devices. With the USB port, the built-in interface between each device needed to connect a keyboard, joystick, scanner, modem, etc. By doing so, the additional cost may reduce the manufacturing cost of the PC, it is easy to connect new devices, it is easy to solve the hardware compatibility problem, it is generally used.

The external memory means used by connecting to a PC using such a USB is a USB memory stick, which is simply referred to as USB or USB memory.

Recently, due to the development of semiconductor technology, a high capacity USB memory stick has been provided.

Therefore, considering the USB memory means that can easily move data as well as large files, it is necessary to consider serious security issues inside the enterprise.

However, the existing USB memory has a serious problem in security when the company's confidential data is stored by maintaining security by setting a password using a terminal application such as a PC.

Accordingly, there is a demand for technology development in the technical field to enhance security of USB memory.

Technical problem of the present invention devised to improve the above problems is to strengthen the security by granting access to the stored data only when the first security by the password and the MAC address for the same terminal as the preset terminal is strengthened An object of the present invention is to provide a secure USB memory using a MAC address and a security method using the same.

According to an embodiment of the present invention, it is possible to change the password through its own input unit rather than the application program of the terminal to provide a secure USB memory using a convenient MAC address and a security method using the same.

According to an embodiment of the present invention, an object of the present invention is to provide a secure USB memory using a MAC address and a security method using the same to prevent misuse and abuse of data owned by a leak of a password.

However, the objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

Security USB memory using a MAC address according to an embodiment of the present invention, the input unit including a plurality of input keys; A USB interface for data input and output with an external terminal; A storage unit for storing data stored by a user setting, a preset password, and a preset MAC address; And receiving a password input through the input unit when the terminal is connected to the terminal through the USB interface to release the first security if the password is matched with the preset password, and release the MAC address of the terminal currently connected through the USB interface. A control unit for receiving a second security when comparing with the preset MAC address; It includes.

The control unit may include: a password module configured to receive the passwords through the input unit and to store the preset passwords in the storage unit when the first security terminal is connected to the terminal through the USB interface; And receiving the MAC address of the terminal through the USB interface to perform the second security by inputting a specific key among a plurality of keys of the input unit or a DOS prompt or execution command on the terminal. A MAC address module for storing in the storage unit at an address; It may include.

The password module releases the first security when the passwords inputted through the input unit are received and matched with the preset passwords stored in the storage unit after the preset password setting is completed. When a request signal for changing the preset password is received through the unit, a new password may be received from the input unit and stored in the storage unit.

The MAC address module compares the predetermined MAC address with the received MAC address from the currently connected terminal through the USB interface and releases the second security to match the user setting stored in the storage unit. Can allow access to data stored by it.

The security method using the secure USB memory using the MAC address according to an embodiment of the present invention, when the secure USB memory is connected to an external terminal by comparing the preset password and the input password when the first security to release the first security; Stage 1; And a second step of, when the first security is released, receiving the MAC address of the currently connected terminal and releasing the second security when the secure USB memory matches the preset MAC address. It includes.

In the security method using the secure USB memory using the MAC address, when the secure USB memory performed before the first step is connected to the terminal to perform the first security, the predetermined password is input to its input unit. Receiving and storing; It may further include.

In the secure method using the secure USB memory using the MAC address, the secure memory performed between the first step and the second step is inputted through a specific key among a plurality of keys of the input unit or a DOS prompt or the like. Receiving and storing the predetermined MAC address from the terminal according to an input of an execution command; It may further include.

In the security method using the secure USB memory using the MAC address, the secure USB memory performed in the first step receives a new password when the request signal for changing the preset password is received through the input unit. Can be received from and stored.

The secure USB memory using the MAC address and the security method using the same according to the present invention provide security by granting the access right to the stored data only when the first security based on the password matches the MAC address of the same terminal as the preset terminal. Provides a strengthening effect.

In addition, according to the present invention, by inputting the password through its own input unit rather than the application program of the terminal, it provides a convenient effect in changing the password.

In addition, according to the present invention, the change of the password can be easily changed at any time through the input unit and the storage unit of the secure USB memory itself, rather than setting the password for the folder or file by the terminal, and the misuse of confidential data due to the password leakage and Provides the effect of preventing abuse.

Hereinafter, a detailed description of a preferred embodiment of the present invention will be described with reference to the accompanying drawings. In the following description of the present invention, detailed descriptions of well-known functions or configurations will be omitted when it is deemed that they may unnecessarily obscure the subject matter of the present invention.

In the present specification, when one component 'transmits' data or a signal to another component, any one component may directly transmit data or a signal to another component, and at least one other component. This means that data or a signal can be transmitted to other components through the APC.

1 is a diagram illustrating a state in which a secure USB memory 100 using a MAC address is used according to an embodiment of the present invention. Referring to FIG. 1, a secure USB memory 100 using a MAC address is inserted into the terminal 200 and recognized and used by Plug & Play.

The terminal 200 is a broad concept including a wired terminal or a wireless terminal, and includes a personal computer (PC), an IP television (Internet Protocol Television), a notebook-sized personal computer, a personal digital assistant (PDA), and a smart terminal. Phone, International Mobile Telecommunication 2000 (IMT-2000) phone, Global System for Mobile Communication (GSM) phone, General Packet Radio Service (GPRS) phone, Wideband Code Division Multiple Access (WCDMA) phone, Universal Mobile Telecommunication Service (UMTS) phone And a mobile broadband system (MBS) phone, and the like may be connected to a USB interface of the secure USB memory 100 using an AC address and its USB bus to transmit and receive data.

By transmitting its MAC address to the secure USB memory 100, the terminal 200 may acquire an access right to the secure USB memory 100 through two levels of security to be described later. That is, the security of the first stage with respect to the password set by the user of the secure USB memory 100 and the security of the second stage by initial setting of the MAC address of the terminal 100 set in the secure USB memory 100 are performed. Can be.

2 is a block diagram showing the configuration of the secure USB memory 100 using the MAC address of FIG. 3 is a block diagram illustrating a detailed configuration of the controller 150 of FIG. 2. 1 to 3, the secure USB memory 100 using the MAC address may include an input unit 110, a USB interface 130, a controller 150, an output unit 170, and a storage unit 190. Can be.

The input unit 110 includes the enter key 110a, the cancel key 110b, the first key 110c, the second key 110d, the third key 110e, the fourth key 110f, the fifth key 110g, and the sixth key ( 110h), a seventh key 110i, an eighth key 110j, a nineth key 110k, and a keypad including a plurality of input keys, such as a zeroth key 110l, may be formed of one of the touch pads.

When the enter key 110a is input for more than a preset time, a password control signal for initial setting of a password is generated and transmitted to the controller 150. Hereinafter, in one embodiment of the present invention, all of the preset time may be 30ms.

In addition, when the enter key 110a is input for less than a preset time after the initial setting of the password, a password input signal for password input is generated and transmitted to the controller 150.

Cancel key 110b is the first key 110c, the second key (110d), the third key (110e), the fourth key (110f), the fifth key (110g), the sixth key (110h), the seventh key ( 110i), the 8th key (110j), the 9th key (110k), 0 key (110l) in the middle of entering the wrong number, the key to set the last input number or input state to the null (Null) state. When the cancel key 110b is input, a cancel signal for the last entered number or the whole is generated and transmitted to the controller 150.

In addition, the cancel key 110b is a password for checking whether or not matching with the predetermined password is input, and if it is input for more than a predetermined time is generated a change control signal for changing the secret is generated and transmitted to the controller 150 .

Here, the password control signal, the password input signal, the change control signal, the last input number or the cancellation signal for the whole may be a signal generated by pressing or touching the keypad or touch pad by the user of the USB memory 100.

The USB interface 130 connects with the terminal 200 and transmits and receives data with the connected terminal 200. The USB interface 130 is an interface using USB for compatibility with a PC or a mobile phone corresponding to the terminal 200. That is, the USB interface 130 may provide an interface for receiving content from the terminal 200 by connecting to a USB bus provided by the terminal 200 according to the USB standard, and may transmit the received content to the controller 150. have. The USB interface 130 receives the MAC address of the connected terminal 200 and transmits it to the controller 150.

The controller 150 includes a password module 151 and a MAC address module 153. Meanwhile, throughout the specification, a module may mean a functional and structural combination of hardware for performing the technical idea of the present invention and software for driving the hardware. For example, a module may mean a logical unit of a predetermined code and a hardware resource for performing the predetermined code, and means a code that is not necessarily physically connected or does not mean a kind of hardware. It can be easily inferred by the average expert in the art. When the controller 150 is connected to the terminal 200 through the USB interface 130, the controller 150 executes the password module 151 by plug and play. The controller 150 sequentially executes the MAC address module 153 when the execution by the password module 151 is completed.

In the case of setting a password, the password module 151 outputs an optical signal for periodic blinking to the red LED 171 of the output unit 170 when connected to the terminal 200 through the USB interface 130. When the enter key 110a is input for more than a preset time and a password control signal is received, the password module 151 outputs an optical signal for turning on the red LED 171 of the output unit 170. Thereafter, the password module 151 receives each of the four-digit passwords input through the input unit 110 and stores them in the storage unit 190. At this time, the password module 151 outputs an optical signal for blinking with the green LED 173 whenever a number corresponding to each password is input through the input unit 110. After that, when the enter key 110a is input for more than a preset time, the password module 151 determines that the password is set and outputs an optical signal to the green LED 173.

In the case of inputting the password, the password module 151 is a light for the red LED 171 of the output unit 170 is turned on (ON) when connected to the terminal 200 through the USB interface 130 after the password setting is completed Output the signal. Thereafter, the password module 151 determines whether the four digits of the password input through the input unit 110 are received and matched with the preset password stored in the storage 190. At this time, the password module 151 outputs an optical signal for blinking with the green LED 173 whenever a number corresponding to each password is input through the input unit 110. After that, when the enter key 110a is input for less than a preset time, the password module 151 determines whether the input number matches the preset password according to the completion of the password input, and if it is matched with the light signal to the green LED 173. If it does not match, and outputs an optical signal to the red LED (171). When the enter key 110a is input for less than a predetermined time, the password module 151 may control to repeatedly input the password and re-perform the comparison determination.

In the case of changing the password, the password module 151 is matched according to the password input, and when the cancel key 110b is input for more than a preset time and a change control signal is received, the red LED 171 of the output unit 170. Outputs an optical signal for blinking. Thereafter, the password module 151 outputs an optical signal for turning on the red LED 171 when the enter key 110a of the input unit 110 is input for more than a predetermined time. Thereafter, the password module 151 receives four new passwords from the input unit 110 and stores them in the storage unit 190. Thereafter, the password module 151 determines that the password change is completed when the enter key 110a is input for more than a preset time.

The MAC address module 153 performs the second security by the MAC address after the first security until the above by the password input is performed.

The MAC address module 153 performs the first security, and performs the MAC address initial setting through the connection with the currently connected terminal 200 when a password matching the preset password is input. The MAC address initialization may be performed by inputting specific keys 100a to 100l of the input unit 100, and may be performed by inputting a specific command such as a DOS prompt or an execution command on the terminal 200.

On the other hand, if the initial MAC address is not set, the MAC address module 153 automatically executes MAC address initial setting. Accordingly, the MAC address module 153 receives the MAC address of the terminal 200 to which the secure USB memory 100 is currently connected through the USB interface 130 and stores the MAC address in the storage 190.

Thereafter, the MAC address module 153 compares the MAC address pre-stored in the storage unit 190 with the MAC address of the currently connected unspecified terminal 200 when the connection to the unspecified terminal 200 after a predetermined time matches. .

If a match is found, the MAC address module 153 passes the second security to allow access of the terminal 200 to the secure USB memory 100. On the other hand, if there is no match, the MAC address module 153 connects the terminal 200 with the matching terminal 200 to secure the second security until the MAC address of the terminal 200 connected to that stored in the secure USB memory 100 is matched. Rerun

The output unit 170 may include a red LED 171 and a green LED 173. The red LED 171 and the green LED 173, which are output units 170, receive an optical signal under the control of the controller 150 and emit light according to the optical signal to display a preset state to the user of the USB memory 100. Can be.

The storage unit 190 is a non-volatile memory (NVM). Even though power is not supplied, the storage unit 190 maintains the stored data and is not deleted. The storage unit 190 is NAND flash memory, magnetic random access memory (MRAM), Phase-change random access memory (PRAM), ferroelectric RAM (FRAM) and the like. The storage unit 190 stores the password by the initial setting and the MAC address by the initial setting from the terminal 200 under the control of the controller 150. In addition, the storage unit 190 stores data stored by user setting. On the other hand, when the first security and the second security are released by the controller 150, access to the storage 190 is allowed, thereby granting access to the data stored by the user setting.

4 is a flowchart illustrating a security method using a secure USB memory 100 using a MAC address according to an embodiment of the present invention. 1 to 4, when the secure USB memory 100 is connected to the terminal 200, the secure USB memory 100 executes the password module 151 to perform first security, which is security by a password (S301).

The secure USB memory 100 determines whether a password is initially set for whether or not a predetermined password exists (S303).

That is, when it is determined that there is no preset password by searching whether there is a preset password stored in its storage unit 190, the secure USB memory 100 inputs a password control signal for initial setting of a password through the input unit 110. After receiving the password through the input unit 110 receives and sets the password to store in the storage unit 190 (S305).

On the other hand, the secure USB memory 100 has a preset and stored password, or set the password by the step (S305) and go to step (S307) when the reconnection after the connection to the terminal 200 receives the password It is determined whether or not matching with the set password (S307).

As a result of the determination in step S307, when the input password matches the preset password, the secure USB memory 100 passes the first security (S309). On the other hand, if the input password does not match the preset password, the secure USB memory 100 returns to step S307 and receives the password again and continuously determines whether matching with the preset password is matched.

When the first security of step S309 is completed, the secure USB memory 100 determines whether the password is changed (S311). That is, the secure USB memory 100 determines whether a change control signal for changing a preset password is input through the input unit 110.

If it is determined in step S311 that the change control signal is input through the input unit 100, the secure USB memory 100 receives a new password through the four-digit numeric keys 100c to 100l of the input unit 110. Save (S313).

On the other hand, after determining that the change control signal is not input through the input unit 100 as a result of the determination in step S311 or after changing the password in step S313, the secure USB memory 100 is the MAC address of the terminal 200. The MAC address module 153, which is the second security by matching, is executed (S315). That is, the secure USB memory 100 determines whether to initially set the MAC address through association with the currently connected terminal 200 (S317).

As a result of the determination in step S317, if the initial MAC address is not set, the secure USB memory 100 automatically executes MAC address initial setting. Therefore, the secure USB memory 100 receives the MAC address of the terminal 100 through the USB interface 130 and stores it in the storage unit 190 (S319).

On the other hand, as a result of the determination of step S317, the initial MAC address is set, or after the MAC address of step S319 is set, the secure USB memory 100 is disconnected from the terminal 200 and reconnected. In operation S321, the secure USB memory 100 may determine whether the MAC address of the terminal 200 connected to the terminal 200 and the MAC address currently connected thereto are matched with the MAC address previously stored or stored in operation S319.

If the result of the determination in step S321 is matched, the secure USB memory 100 passes the second security to release the lock to allow the terminal 200 to access itself.

On the other hand, if the result of the determination in step S321 does not match, the secure USB memory 100 repeats step S321 until the MAC address preset to it matches the MAC address of the terminal 200 currently connected thereto. .

In the above example, although one example of setting a predetermined MAC address in the storage 190 of the secure USB memory 100, it is apparent to those skilled in the art that a plurality of predetermined MAC addresses can be modified.

The invention can also be embodied as computer readable code on a computer readable recording medium. Computer-readable recording media include all kinds of recording devices that store data that can be read by a computer system. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disks, optical data storage devices, and the like, which are also implemented in the form of carrier waves (eg, transmission over the Internet). It also includes.

The computer readable recording medium can also be injected onto a networked computer system so that the computer readable code is stored and executed in a distributed fashion. And functional programs, codes and code segments for implementing the present invention can be easily inferred by programmers in the art to which the present invention belongs.

Although the contents of the present invention have been described with reference to one embodiment shown in the drawings, this is merely exemplary, and those skilled in the art may realize various modifications and other equivalent embodiments therefrom. I will understand. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

According to the present invention, a secure USB memory using a MAC address and a security method using the same provide access rights to stored data only when the first security based on the password matches the MCA address for the same terminal as the preset terminal. By strengthening the security by granting, it can provide a technology that compensates for the shortcomings of the security of the USB memory, which performed only one level of security by the existing password.

1 is a view showing a state that a secure USB memory using a MAC address in accordance with an embodiment of the present invention.

2 is a block diagram showing the configuration of a secure USB memory using the MAC address of FIG.

3 is a block diagram showing a detailed configuration of a control unit of FIG.

4 is a flowchart illustrating a security method using a secure USB memory using a MAC address according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

100: secure USB memory 110: input unit

130: USB interface 150: control unit

170: output unit 190: storage unit

200: terminal

Claims (8)

An input unit including a plurality of input keys; A USB interface for data input and output with an external terminal; A storage unit for storing data stored by a user setting, a preset password, and a preset MAC address; And When connected to the terminal through the USB interface, a password inputted through the input unit is received and compared with the preset password to release the first security, and the MAC address of the terminal currently connected through the USB interface. A controller configured to cancel the second security when received and compared with the preset MAC address; Secure USB memory using a MAC address, characterized in that it comprises a. The method of claim 1, wherein the control unit, A password module for receiving the passwords through the input unit and storing the passwords in the storage unit with the preset passwords when the terminal is connected to the terminal through the USB interface to perform the first security; And The predetermined MAC is received by receiving a MAC address of the terminal through the USB interface in order to perform the second security by inputting a specific key among a plurality of keys of the input unit or a DOS prompt or execution command on the terminal. A MAC address module for storing the address in the storage unit; Secure USB memory using a MAC address including. The method of claim 2, wherein the password module, After the preset password setting is completed, when the passwords input through the input unit are received and matched with the preset password stored in the storage unit, the first security is released. When the request signal for changing the preset password is received through the input unit, a new password is received from the input unit and stored in the storage unit. The method of claim 3, wherein the MAC address module, Comparing the predetermined MAC address with the received MAC address from the currently connected terminal through the USB interface, and canceling the second security to access the data stored by the user setting stored in the storage unit. Secure USB memory using a MAC address, characterized in that allowed. A first step of releasing the first security if the secure USB memory is connected to an external terminal by comparing the preset password with the input password; And When the first security is released, the secure USB memory receives the MAC address of the currently connected terminal and compares it with the preset MAC address to release the second security to access the data stored by the user setting. A second step of allowing; USB memory security method using a MAC address, characterized in that it comprises a. The method of claim 5, wherein the step is performed before the first step, Receiving and storing the preset password through its input unit when the secure USB memory is connected to the terminal to perform the first security; USB memory security method using a MAC address, characterized in that it further comprises. The method of claim 6, wherein the step is performed between the first step and the second step, The secure memory may be configured to receive and store the predetermined MAC address from the terminal in response to input from a specific key among a plurality of keys of the input unit or input of a DOS prompt or an execution command on the terminal; USB memory security method using a MAC address, characterized in that it further comprises. The method of claim 7, wherein the step is performed in The secure USB memory is a USB memory security method using a MAC address, characterized in that for receiving a request signal for changing the predetermined password through the input unit receives a new password from the input unit.

Images