TW200411392A - Data protection method and system for storage unit - Google Patents

Abstract

The present invention provides a data protection method and system for a storage unit, which includes the following steps: first making the user installing an user recognition module into a memory unit under normal operation system on a data processing device; next, making the user recognition module to encode and encrypt the identification code configured by the user, and store in a storage unit; then, making the user recognition module to encode and encrypt the data of partition table, and store in a specified position of the storage unit; next making the user recognition module to delete the data of partition table; finally, making the user recognition module to determine if the identification code inputted by the user is correct when the user turn on the power again of the data processing device; if so, decoding and recovering the encoded and encrypted partition table data and overwriting to the correct position of partition table for conducting the normal booting operation; if not, stopping the normal booting operation procedure.

Description

200411392 V. Description of the invention (〗) [Technical field to which the invention belongs] A method for protecting data of a storage unit relates to a method and a system for applying to a system. Early Yuan's data is based on the prior technology] Data processing devices such as computers, which are one of the thousands of miles of electronic information technology, have become a part of the personal computer. In addition to the user's 2 live j: remember to write and execute and simple data processing stomach processing device or lack of energy, as sound, video or sound Li Dan is I through a powerful broadcast media, in other words, make: combine, etc. Editing, production and playback of multimedia 2 computing power. The other side: Office: Device implementation :: The increasingly mature network communication environment, plus ^ As the volume of wired helmets is getting lighter and thinner, it is more convenient for users; til the acquisition of data processing devices. Based on various objective environmental factors, we can :: carry out information in the middle of the network. Those who are willing to use the Internet link and data transmission wheel 5 will also set up a search and obtain information. The offender ’s data processing contract stated earlier, “Although we can facilitate the rapid circulation of the information through the information, the European Union”, but on the other hand, it is the data security problem that does not benefit from the data, and the user must advance—Niu Er = use Those who are concerned about confidentiality, ^ " handed in ^ master papers during the work period to consider information on the current information processing to restore their possessions such as; 2 recorded in the written storage device, has been provided, can provide users in the form of audio and video Wait for the case in which 'Although the text has been greatly reduced; 2J, image or

Wll2.ptd The 5th magic product, but relative to 200411392 V. Invention Description (2) The data stealing is also increased to learn the data through the file copying steps such as the soft magnetic sheet. The basic output (Security) function is used to execute the The data processing and loading input / output system will ask the user to determine whether there is an input / output system before the user defines an input identification code for the user's input data stored in the operation. Among them, you only need to reset the jumper on the motherboard before you pass it. And the latter through him such as floppy disks or optical discs for users [Inventive Content] To solve the above-mentioned habits, a storage unit and a copy of the discs and optical discs are provided. After the system identification code can be sent to the third party to identify the way. The following data are available to all users, and the basic form of the horse's content is the business environment or the information provided by the user to make it easy. For example, the data protection technology to rewrite or transfer the required data during disc burning or even network transmission is nothing more than the password provided in the BIOS and Power-on process. Enter the identification code to identify the data processing device, if it is a subsequent boot process. In addition, according to the method set by the individual, the method of protecting the basic input / output system by the operating system according to the operating environment of different codes or storing the basic input / output system, the third party resets the basic input / output system (BI 〇s Road). Or remove the battery on the motherboard for a while to reach the basic input / output system settings ^: The operating system protection method, users can still read the data in the hard disk after they boot through it. To achieve the ideal protection purpose. Knowing the disadvantages of the technology, the main purpose of the present invention is the data protection method and system.

17112. ptd page 6 Description of the invention The mechanism of table encryption and concealment prevents unauthorized access to data. Entering the operating system to enter another object of the present invention is to provide a method and a system that can protect the data of the storage unit only through a software or data protection method. < The program control mechanism can be achieved to achieve the system including: No., encoding and decoding the data processing unit; one and other programs to store the specific user's element in the correct knowledge to decode and restore the device before continuing through In the material protection method, the user enters a specific location to encode the user ’s identification. One of the above-mentioned devices is used to provide and execute the basic setting of the device to provide the identification location. When the code is written, the storage note covering the line from the normal opening is the identification code of the line in the following steps in advance; secondly, make and save to a module for this purpose, and issue the function of the storage unit The storage unit of the central input / output system material processing device, the code is encoded, and the specific location will be divided. The storage unit partition table is correct. The operating procedure metadata protects the user's identification. First, the 4 code is used to encrypt the 5 user. Identification of the specified storage cut-off table data deletion storage data protection system processing unit; and other software storage The storage includes resident in the record, encryption and storage of the cut table data, and taking out the sub-location from the user, providing the user with the identification system, executing the module installation to make the user save to the identification module Location of sub-units; except; finally, the metadata protection system captures a message for storing the routine memory system system program memory unit for the storage order to encode and restart the cut-off table data plus the data processing module . Storage unit information The memory unit identification module enters the cut-table data of the storage unit into # 者 ’order the order the user

V. Description of the invention (4) ___ When the identification module re-opens the data processing by the user, is the identification code entered by the user correct? If yes, when ^ Maoyuan, judge the data of the partition table to decode and restore it and cover it to the correct, 2 The normal booting operation of the coded encryption is f; if not, the operation is aborted: J is set to 俾 to compare the storage unit data protection method business procedure with Xi =. Method and system for protecting the lean material of the storage unit using the system, the system uses a user identification machine which is executed in the booting process for the user to only open the data if the user has the right to use it to prevent the data in the unit from being stored Access. Putting the wrong things together [Implementation] Please participate in Figure 1. In the following embodiment, the data protection method and system 100 of the present invention are applied to the storage unit 2 0 0 in the 22 architecture. Invention, D's personal computer and department. The unit and module of the coffee gate plus SC; material protection method The input unit such as the keyboard or mouse and the screen are displayed in other details, which will be described first. No shame is a word: refer to Figure 2, the data protection of this storage unit-user identification module.财 子 单 y 乂 and ^ The central processing unit uo is used to provide the data protection of the storage unit ^ System 1 00 functions of capturing signals, encoding and decoding, and executing instructions, and can travel through data transmission paths such as buses, etc. Other resources pass and receive information. ， '， 处 · The Tongjiji unit 1 2 0 is used to provide the asset protection system of the storage unit.

17112 · ptd Page 8 200411392 V. Description of the Invention (5) 1 0 0 Storage includes the basic input / output system and other software programs and / or routines. It is a non-volatile memory unit in nature, that is, after the power of the personal computer 2000 is cut off, the data stored in the memory unit will not disappear, and the user starts the personal computer 2 00. When operating the power supply, such basic input / output system routines must be executed to complete the boot process of the personal computer 2000. In addition, the memory unit 12 may be an electronically erasable programmable read-only memory (Electrically Erasable

Programmable Read Only Memory; EEPROM) or a flash

Memories (F 1 a s h Me m o r y). Since the foregoing memories have the characteristics of being programmable and overwritable ', users may be required to update the content of program data such as the basic input / output system according to the actual situation. The storage unit 130 is used to provide the personal computer 2000 with storage including operating system programs and other programs or data. In this embodiment, the storage unit 1 30 is a hard disk, and the function and structure of the storage unit i 30 are conventional, so they are not described in detail. The user identification module 1 40 is a software program resident in the memory unit, and is used to encode and encrypt the identification code set by the user through the central processing unit 1 10 and store in the storage unit 1 3 0 In addition, it retrieves the partition table data through the central processing unit 110 and stores it in a specific location in the storage unit 130. The user then re-opens the personal computer 2000 to work. When the power supply executes the correct identification code entered during the boot process, the data of the partition table is taken out from the storage unit 130, decoded and restored by the central processing unit 110, and overwritten to the correct position of the partition table for the individual Computer 2 0 0 continues normal boot

17112. ptd page 9 200411392 V. Description of invention (6) ---- one by one operation procedures. Six bets and another π] ° Ming Ming 'is in this embodiment, the partition table refers to the storage: that is, the hard disk partition table, and the conventional hard disk is composed of a plurality of, the main two 1 USter ), Magnetic head (head) and magnetic sector (sector), and the capacity of the mother-in-law area is 512 bytes (byte). Among them, the first magnetic zone of the "0th magnetic column" and the 0th magnetic head is defined as a divided magnetic zone. In this magnetic zone, a master boot program (MBP) is stored on the end, and a partition is stored on the back end. Table information. Li Zhong's second 'the boot process of the personal computer 2000 is roughly as follows: It is executed from the memory address 0FFFF0H of the memory unit 120, that is, (CS =: FFFF, bu 0 0 0 0 0). The content of the program of the basic input / output system of the personal computer at the address 0FFFF0H is: “FFFF 0: JMP START” After jumping to START, the basic input / output system (ROM β I 0S) of the memory unit 1 20 will first do Some initial inspections, such as checking random access memory, keyboards, screens, drives, etc. Then it will read in the main startup program, and the basic input / output system will transfer control to the main startup program to continue execution. To sum up, it can be divided into the following steps: 1. When the computer is turned on, first execute the basic input and output system, and write the master boot record (MBR) of the first sector of the storage unit 130 into the random storage. Take the code in memory and transfer control to the master boot record. 2 · The master boot record code scans the entire master disk partition table, places a flag (f 1 ag) on the first partition, and marks the partition

17112. ptd page 10 200411392 V. Description of invention (7) is bootable. Then write the code randomly in & ^, # partitions. To access the carcass, ^ control is passed to this 3. Load the system files in the disk (such as ι〇 · SYS and MSDOS. SYS of ms d0s) into the random access memory through the startup program, and then control Rights are transferred to the loaded system file. As mentioned above, in the boot process of the personal computer 2000, the partition table data is indispensable. Without the partition table data, the system cannot know the partition status of the storage unit 130. It is also impossible to know the storage location of operating systems such as Windows XP or LI NUX, and of course the boot process cannot be successfully completed. Therefore, the user identification module 140 is based on the characteristics of the aforementioned partition table 'by deleting the partition table data to block users who do not have permission to complete the boot process, thereby protecting the personal computer 2000 storage Purpose of storing data. Please refer to FIG. 3 (A), which shows the steps of protecting the storage unit secondary material according to the present invention in the process of performing data protection of the storage unit 130. Beishen instructed the user to identify the module 140 to the memory unit 120 under the normal operating system of the personal computer 2000, and then proceeded to " S301.疋 仃 Step In step S3 01, the identification code determined by the user identification module 1 is encoded and encrypted, and then stored in the storage unit, or = location. In this embodiment, the memory unit 12 is distinguished by the user. After that, the user identification module two; = installed to a fixed identification code for identity identification, the identification code ^ ^ = user set, including any number

200411392 V. Description of the invention (8) Combination of words, characters and symbols. After the user completes the setting of the identification code, the user identification module 140 then encrypts and backs up the identification code to a specific location in the storage unit 130, and then proceeds to step S302. In step S302, the user identification module 140 is configured to encode and encrypt the segment table data and store it in a designated storage unit 130 position. In this embodiment, after the user identification module 140 performs the steps of encrypting and backing up the identification code, the partition table data is then encoded and encrypted, and after the encoding and encryption is completed, the user identification module 140 The encrypted data is stored in another designated location in the storage unit 130, and then step S303 is performed. In step S303, the user identification module 140 is caused to delete the partition table data. In this embodiment, after the user identification module 140 completes the steps of encrypting and storing the allocation table data, the allocation table data is then deleted from the memory unit 120. Since the data of the allocation table has been deleted from the memory unit 120, when the user restarts the working power of the personal computer 2000 and executes the boot process, if the correct identification code cannot be entered, the The user identification module 140 will not restore the allocation table data to the correct allocation table magnetic area, and the personal computer 200 will not be able to complete the normal boot process to enter the operating system. The actual operation steps are described below. Please refer to Fig. 3 (B), which shows that when the personal computer 2000 that completes the data protection setting procedure is turned on, the working power is turned on again for a user to perform the process steps of the authentication protection phase. In step S 3 11, the user identification module 1 40 is required to ask the user to input an identification code during the booting process, and then step S 3 1 2 is performed.

Page 12 17112. ptd 200411392 V. Description of the invention (9) In step S312, the user identification module 14 is caused to judge whether the identification code rotated in is the same as the use test stored in the storage unit 13, If yes, proceed to step S313; otherwise, proceed to step code in step S313, so that the user identification module 14 reads out the partition table data stored in the bill ★ 13 ° and overwrites it to the correct: 乂 :: The surface is lean, and steps s 3 1 4 are performed. In step S314, the knife edge allows the personal computer 200 to enter the operating system according to the normal 2 and is provided for access by authorized users. 疋 仃 忒 Save early 1130 In step S3! 5, due to use The user cannot turn in the correct 5 user identification module 1 4 0 will not execute the M identification code this time, then, the storage unit 13 steps to retrieve for the startup program, so it cannot be executed It is not orderly enough to prevent the unauthorized users from accessing the booting process. According to the above description, the storage unit data of the present invention is error-proof. Provide the user only through one-on-c system: another mechanism, that is to prevent the user from having the right to use the computer 2 0 0 and store the data in the unit 1 gq Rensi open the storage unit 1 3 0 is unknown The user of the identification code dismantles and accesses it. Even if the computer device storing the data accesses it, it cannot pass through its purpose. Only 70 methods of data protection for data protection and the essential technical content of the month The above description is only for the invention The preferred embodiment of the deposit system 'not intended to limit the invention

200411392 V. Description of invention (ίο). Others are similar to personal computers, such as notebook computers, servers, and workstations, and have storage units that are applicable to the present invention. The storage unit data protection method and system of the present invention are broadly defined in the following patent application scope. Any technical entity or method completed by another person is exactly the same as defined in the following patent application scope. , Or equivalent changes, will be considered to be covered by this patent.

17112. ptd Page 14 200411392 Simple illustration of the drawing [Simplified illustration of the drawing] Fig. 1 is a schematic diagram of an application architecture for showing the system architecture of the storage unit data protection system for implementing a personal computer in accordance with the present invention; Fig. 2 It is a block diagram showing the relationship between units and modules in the storage unit data protection system of the present invention; and Figures 3 (A) and 3 (B) are flowcharts showing the storage for implementing the present invention Process steps of the unit data protection method. 1 〇 〇 Storage unit data protection system 110 Central processing unit 120 Memory unit 1 3 0 Storage unit 1 4 0 User identification module 2 0 0 Personal computer

Page 15 17112.ptd

Claims (1)

200411392 VI. Application Patent Scope 1. A storage unit data protection method, which is applied to a data processing device with a storage unit. The storage unit data protection method includes: making a user identification module identify the user settings The code is encrypted and stored in a specific location of the storage unit; the user identification module is used to encode and store the partition table data in a specified storage unit location; the user identification module is stored in the memory unit Delete the partition table data; and enable the user identification module to determine whether the identification code entered by the user is correct when the user turns on the data processing device again, and if so, decode and restore the encrypted encrypted partition table data and Cover to the correct allocation table position, and perform normal boot operation; if not, abort the normal boot operation procedure. 2. If the method of the first scope of the patent application, the storage unit may be any one of a built-in hard disk, an external hard disk and a removable hard disk. Method, wherein the data processing device may be any one of a personal computer, a notebook computer, a tablet computer, an LCD computer, a server, and a workstation. 4. For the method of applying for the first item of the patent scope, wherein the user identification module is a software program, which is resident in the memory unit after being installed in the memory unit and is performed when the data processing device executes a boot process. User identification work. 17112. ptd page 16 200411392 6. Application for patent scope 5. For the method of applying for patent scope item 1, the memory unit can be an electronically erasable programmable read-only memory and flash memory. One. 6. The method according to item 1 of the scope of patent application, wherein the identification mark is composed of any one of words, numbers, symbols, words and numbers, words and symbols, symbols and numbers and words, symbols and numbers . 7. A storage unit data protection system, which is applied to a data processing device with a storage unit. The storage unit data protection system includes: a central processing unit that is used to provide the storage unit data protection system capture Signal, codec, and execute command functions; a memory unit, which is used to store the basic input / output system and other software programs of the data processing device; the storage unit, which is used to provide the data processing device storage including operating system programs And other programs or data; and a user identification module, which resides in the memory unit to encode and encrypt the identification code set by the user and stores it in a specific location in the storage unit; The partition table data is encoded and encrypted and stored in a specific location of the storage unit, and when the user restarts and enters the correct identification code, the partition table data is taken out from the storage unit and decoded and restored to cover the partition table correctly. position. 8. If the system of claim 7 is applied for, the storage unit may be any one of a built-in hard disk, an external hard disk, and a removable hard disk. 17112. ptd Page 17 200411392 VI. Application for Patent Scope 09. If the system for application for Item 7 is patented, the data processing device can be a personal computer, notebook computer, tablet computer, LCD computer, server and workstation Any of them. 10. The system according to item 7 of the scope of patent application, wherein the user identification module is a software program, which is resident in the memory unit after being installed in the memory unit and when the data processing device executes a boot process Perform user identification. 1 1. The system according to item 7 of the patent application scope, wherein the memory unit may be any one of an electronically erasable programmable read-only memory and a flash memory. 1 2. The system according to item 7 of the scope of patent application, wherein the identification horse is composed of any one of words, numbers, symbols, words and numbers, words and symbols, symbols and numbers and words, symbols and numbers content. 17112.ptd Page 18