200805084 九、發明說明： 【發明所屬之技術領域】 一種資料備份裝置、系統及其方法，特別是指—種可將電腦 中欲備份之資料進行加密，並儲存於磁碟陣列上之資料備份裝 置、系統及其方法。 【先前技術】 隨著資訊時代的蓬勃發展，數位化資料的重要性不可言喻， 因此如何保護資料就是-個相當重要的課題，各大薇商也在這樣 的情況下紛紛推出了各種儲存方式以滿足保護資料的需要，最常 見的方式為使用多顆硬碟組成的磁碟陣列，不過大部分的磁碟陣 列都需要與娜目結合之後柯叫作，因__所保存的 育料只要透過電腦便毫無_的可料行存取，而在現今如此發 達的網路诚巾，有著無數的惡意财純腦病毒，可以在入侵 電腦後㈣的將猶_巾㈣料破轉，如此，_磾陣列保 存的貧料便失去了使用磁碟陣列的所獲得的保障。 另外，各大朗還有推_立在電腦之外的儲雜置，比如 2=硬碟的外接式儲錢置，可以在烟者有備份需要的時候 才跟笔腦連接，雖朗帶方便，但是卻存在著幾_題，第_、 i，蝴鱗，硬射保存的資 切目Γ賴輪生錯誤甚至無法讀出，尤其是因為外接 夕trr子，設置於其中的硬碟更容易在攜帶中發生意 於舍生上述之情況；第二、因為館存裝置方便攜帶，因此 200805084 也容易在攜帶的過程中遺失，又或是像借給其他使用者，使得其 他使用者取得外接式儲練置時，保存在硬射的資料便可被取 得儲存裝置的使用者任意存取，換句話說，保存在外接式儲存裝 置中的·非_被他人讀取，更甚至猶，完全無法保護個 人隱私以及贿資料的完整性；第三、轉儲存裝置的備份方式 都是需要使㈣腦選擇欲備份的目錄或是複製到儲存 裝置在電腦上產生的磁碟區中，才完成備份到儲存裝置的動作， 使用起來稍嫌複雜，尤其㈣於不熟錢腦的使用者而言，要找 作電腦進行資料的備份也是相當困難的。 【發明内容】 « 繼要目的在於提供—種資料備份 腦上儲存之欲備份的㈣進行加密， ===後儲存至與電腦有外部連接之具有磁碟陣列之資料 備伤衣置、及請備份系統及其方法，透過本發明，使可 更有保障的保存數位化的資料，避免因為駭 造成的資料損失，同時因為有 次扃势破壞而 列，因此可降低因為硬Μ 勒=肅㈣陶轉，蝴恤密，所！1 一併最顧了個人資料的隱密性。 所以也 資料===:Γ.種具有單鍵自動備份 衣置μ及方法，讓使用者更容易 為達上述目的，本發明所揭霖之 控制單元、-_存單元、細、^ ^ ·觸發單元、 I面早疋，而本發明所揭露之 6 200805084 系、、先包括有.控制模組、貧料儲存模組、資料傳輸界面、處理 模組。 本發明所揭露之方法，包括有下列步I首先要連接電腦與 儲存裝置；接著儲存裝置會發出控制訊號至電腦；電腦收到控制 訊號後將資料進行加密並傳送至儲存裝置；儲存装置在接收到資 料後將之儲存。 、 有關本發_特徵與實作1配合圖示作最佳實補詳細說 明如下。 【實施方式】 以下先以「第]圖」本發明之資料備份農置之系統架構圖來 :月本發明的系統運作。如圖所示，本發鴨提之資料備份裝置 Γ包含有觸發單元110、控制單元120、資料儲存單元130、輸 面Γ140。其中觸發單元110負責產生第一控制訊號； 負責在接收到觸發單元湖產生的第-控制訊號 弟一控制訊號，並經由輸出/入介面單元140傳送至外部 =3貞_出w140所接收的資料進行加密 產生之1 介面單元140負責接收控制單元12〇 生之，制訊號，以接收由_傳來之資料。 所接—來解說本發_運作純與方法。本發明 ==鶴接之方式可嫩㈣式編加技術(Εχί_Ι danced Te〇hnologyAt^^ 7 200805084 流排（Un丨Versal Serial Bus, USB)、火線（Firewire，IEEE 1394) 等方式，但不以此為限，以USB為例，使用者將本發明所提之資 料備份裝置100以USB線與電腦相連接，並使用資料備份裝置 100上之觸發單元11〇產生控制訊號，例如按下一個按鍵，但本 發明所提之觸發單元110並不僅限於按鍵，於是被產生的控制訊 遽會經由USB線傳送至電腦，電腦在收到控制訊號之後，便會將 硬碟中的特定資料（例如全部硬碟的資料，或是c:\Backup\目錄 _ 下的所有資料，又或是特定一個或幾個檀案視為欲備份之資料） 經由USB線傳送至資料備份裝置1〇〇,資料備份裝置1〇〇在接收 到貧料之後，控制單元120將會對資料以3 DES'128 bjts的RC2 等演算法加密，但加密的演算法並不侷限於上述兩種，加密後的 貝料會以「0604131700.sbk」的檔案名稱儲存到具有磁碟陣列技 術之資_份裝置100中，資料儲存至具有磁碟陣顺術之資料 備份裝置100中可以增加備份的可靠度。 ⑩ 若使用者欲從電腦上讀出已備份至資料備份裝置100的資 料’但卻欲透過資料備份裝i ) 〇〇在電腦上產生的磁碟區直接續 取資料，控制料120會禁止這個存取的操作，例如開啟資料備 份裝置100在電腦上產生的磁碟區，點選備份後產生的檀案 「〇604131700為’則會產生無法檔案開啟的錯誤訊息，但二 止存取的操作並不以上述產生錯誤訊息的方式為限，除非使用: 透過控制單元120來進行操作，例如可長塵進行備份的按鍵，如 此控制單元120便會將已備份的資料讀出，並進行相對應於加密 8 200805084 % 演算法的解密（decryptk)n)處理，最後再將解密後之資料經由輸 出/入介面單元14〇傳送至電腦中之原先進行備份時所儲存的位 置儲存’如C:\Backup\。 另外’為了節省資料備份裝置1〇〇的儲存空間，控制單元12〇 更可以在資料加密之前或之後進行壓縮（c〇mp「essj〇n)的處理， 處理το成之後再儲存至資料儲存單元no，如此在資料回存至電 腦中時，會需要將資料進行解壓縮（dec〇mpressj〇n)與解密的 • 2 ’比如資料儲存至該資料備份裝置時，先壓縮再加密，則此 N·需要先解密再解壓縮，反之則要先解_再解密，當資料經過 解在與解壓縮之處理後，才可以透過輸出/人介面單元彻傳送至 電腦儲存。 ’ 再看到「第2圖」本發明之資料備份系、统之系統架構圖來說 明本發明的系統運作。如圖所示，本發明所提之資料備份系統包 含有儲存裝置200與電腦201，其中儲存裝置2〇〇包含有控制模 • 組210 1料儲存模、组220、資料傳輸界面23〇，而電腦2〇1包 含有處理模組290。控制模組210負責發出控制訊號，並經由資 料傳輸界面230傳送至處理模組290 ;資料儲存模組22〇設有磁 碟陣列以增加保存資料的能力，並負責儲存處理模組四 — 成並透過資料傳輸界面23〇傳來之資料；資料傳輸界面連接 了儲存裝置200與電腦201，負責將控制模組21〇發出之控制訊 號傳送至處理模組29Q，並負責傳送由處理模組傳來之資 料；處理模組290負責在接收到由控制模組21〇所發出的控制訊 9 200805084 號之後，將資料加密，並於加密完成後，將加密後之資料透過資 料傳輸界面230傳送至控制模組21〇。另外本發日月於儲存裝置咖 中更可以包含有輸入模組25〇 ’負責觸發控麵、址21〇發出控制 讲,。 按者冉以第 「 ，·貫施例來解說本發明的運作系統與方法，並表 照「第3圖」本料之雜方法之方絲糊。本實施_ &SATA連接細妾電腦2〇1與外接式之儲存妓勘，在使用 者使用E-SATA連接線連接電腦2〇1與外接式之儲存裝置 驟310)後，即形成本實施例之資料傳輪界面2加，此時外接式 2之1物隐㈣咖她辑至電腦 上的處理模組290 (铸322)，或是當使用者按 儲存裝置·外殼上之按鍵，此按鍵即為輸入模组25 = =_出控制訊號（步驟321)並_料_面= $至處理模組29〇後（步驟322)，處理模組2如 D^PHes^txt) ? ^ # ^ * W 為人備^刀的貝料，並將之加密後向外接式 之儲存裝置2GG傳送（步驟33Q)， 加_之資料儲存。為了節省 工子衣置〇〇會將 叮” ♦ 1包月自201在加密資料之前後， =:進彳懷_處理，當加密與_均完成之後再透過Η顧 t =〇例所提之外接式之物置㈣除了是使用且有 磁碟陣列敝兩顆以上的硬碟之外，也可以將 舰 10 200805084 關閉（disable)，使形成磁碟陣列之各顆硬碟可以獨立操作，亦可 以為-般使㈣單硬碟的儲存裝置，賴上述之儲存裝置略有不 同’但將資料加松後再儲存的過程並不會有任何的改變。 又使用者認為備份的結果孙纖，則使用者可以執行資料 儲存核組22G上儲存之設定程式，來變更處理模組29〇處理欲備 份的資料的參數’設定程式執行之後的介面如「第4圖」所示， m周正的减包含但不限於加密之演算法與長度等屬性彻、 塵縮的類型與_比等參數42Q、以及欲備份之資料之路徑、舊 的備知貝料疋否保留、進行備份之時_備份參數，如此使 =者即可以自行調整，如「第4圖」所示之奴結果，壓縮演算 /改為RAR，壓縮比為虔縮最佳，備份時間為每日凌晨三點半， 備份_徑為D:磁碟槽與錄等，電腦2〇1便會於每 ^凌辰三點半_進行資料備份，將資料以3 DES 128 bits加穷 嶋最佳袼式進行壓縮，再傳送至外接式之職 μ子又或者使用者想要在無法接觸到外接式之儲存裝置 =下備份資料同樣可以按下如「第4圖」之備 進仃貧料的備份。 進入A成之後，使用者欲直接讀取備份㈣料，例如直接 進入外接式之儲存裝置2〇〇於 產生的G磁碟機221,並 备不讓二 〇 工、之儲存裝置2QG上的控制模組210 轉細除祕槪息給使用 5本K的在G磁碟機中想要讀取已備 11 200805084 伤的貝料’則控制模組21〇會禁 例所描述的狀況相同，使用者會得到一二:與=貫施 份的檔案，除非 簡㈣息而熟法存取備 按下「第4 ^ 過處理模、组290讀取備份的資料，例如 =以圖」所顯示的介面中之回存紐祕，如此 存^^驗⑽，_組21Q便會讀出且 230^1TM22° ^ L里模組29G (步驟3叫處理模組 =:21。所傳來之已備份的資料後，進行解密之處理= 物嘯繼（烟叫麵嫩入儲存 二2則理模組290有壓縮過，如此使用者在回復已備 々貝撕，電腦201就會在進㈣密之處理時，-併進行解壓 鈿的處理，才存回電腦201中。 〜另外，儲存裝置可贿科同_存舰分職存加密後的 貝料與叹讀式，如「第5圖」所示，並延續第二實施例，外接 式之儲存裝置200可以使用在電腦洲上以G磁碟機221顯示 的磁碟陣列儲存加密後的資料，以及使用在_ 2〇1上以Η磁碟 機222顯示的快閃記憶體⑺姑Mem〇%心…來儲存設定程 式。 雖;、、<、本每明以别述之較佳實施例揭露如上，然其並非用以限 疋本發明，任何熟習相像技藝者，在不脫離本發明之精神和範圍 内，*可作些許之更動與潤飾，因此本發明之專利保護範圍須視 本說明書所附之申請專利範圍所界定者為準。 12 200805084 【圖式簡單說明】 第1圖係|發0_提之資料備份裝置之系統架構圖。 第2圖係本發明所提之資料備份系統之系統架構圖。 第3 ϋ係本發騎提之㈣備份方法之方法流程圖。 弟4圖係本發明實施例所提之資料備份參數之示意圖。 存設==^__饱恤_存媒體儲 【主要元件符號說明】 100 資料儲存裝置 110 觸發單元 120 控制單元 130 資料儲存單元 140 輪出/入介面單元 200 儲存裝置 201 電腦 210 控制模組 220 資料儲存模組 221 G磁碟區 222 Η磁碟區 230 資料傳輸界面 250 輸入模組 290 處理模組 13 200805084 410 加密屬性 420 壓縮屬性 430 備份屬性 441 備份 442 回存 443 儲存設定 步驟310連接電腦與儲存裝置 步驟321輸入觸發訊號 步驟322儲存裝置發出控制訊號至電腦 步驟330電腦處理資料並傳送 步驟340儲存裝置儲存資料 步驟380儲存裝置傳送資料至電腦 步驟390電腦處理資料200805084 IX. Description of the invention: [Technical field of invention] A data backup device, system and method thereof, in particular, a data backup device capable of encrypting data to be backed up in a computer and storing it on a disk array , systems and methods. [Prior Art] With the vigorous development of the information age, the importance of digital data is inexplicable. Therefore, how to protect data is a very important topic. Under such circumstances, the major Weis have introduced various storage methods. To meet the needs of protecting data, the most common way is to use a disk array composed of multiple hard disks. However, most of the disk arrays need to be combined with Namu, so that the cultivating materials are only The computer has no _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ The poor material stored in the array loses the protection obtained by using the disk array. In addition, each of the Dalang has a storage gimmick outside the computer, such as 2 = hard disk external storage bank, can be connected to the pen when the smoker needs backup, although easy to bring However, there are a few _ questions, the first _, i, the scales, the hard-cut preservation of the money depends on the rotation error or even can not read, especially because of the external eve trr, the hard disk set in it is easier In the case of carrying, it is intended to give birth to the above situation; secondly, because the storage device is convenient to carry, the 200805084 is also easy to be lost in the process of carrying, or it is like lending to other users, so that other users can obtain external storage. When practicing, the data stored in the hard shot can be arbitrarily accessed by the user who obtained the storage device. In other words, the non-_ stored in the external storage device is read by others, and even more, it is completely impossible to protect. Personal privacy and the integrity of the bribe data; Third, the backup method of the storage device is required to make (4) the brain to select the directory to be backed up or copy it to the storage device on the computer to generate the disk to complete the backup to storage. Loading The action of setting is a bit more complicated to use, especially (4) for users who are not familiar with the brain, it is quite difficult to find a computer to back up the data. [Summary of the Invention] « The purpose of the next step is to provide a backup of the data stored in the brain for backup (4) for encryption, and then store the information to the disk array with external connection to the computer. The backup system and the method thereof, through the invention, can save the digitalized data more securely, avoid the data loss caused by the sputum, and at the same time, because of the secondary catastrophic destruction, it can be reduced because the hard 勒 = = ( (4) Pottery turn, sweetheart, and! 1 Take care of the privacy of personal data. Therefore, the data ===: Γ. There is a single-button automatic backup clothing and method, so that the user can more easily achieve the above purpose, the control unit of the invention, -_ storage unit, fine, ^ ^ The triggering unit and the first surface are early, and the invention disclosed in the present invention includes the control module, the lean storage module, the data transmission interface, and the processing module. The method disclosed in the present invention comprises the following steps: First, the computer and the storage device are connected; then the storage device sends a control signal to the computer; after receiving the control signal, the computer encrypts and transmits the data to the storage device; the storage device receives the data. Store it after you have the information. The details of the best stipulations in this _ feature and implementation 1 are shown below. [Embodiment] Hereinafter, the system architecture diagram of the farm data is backed up by the "first" diagram of the present invention: The system of the present invention operates. As shown in the figure, the data backup device 本 of the present invention includes a trigger unit 110, a control unit 120, a data storage unit 130, and a transport port 140. The trigger unit 110 is responsible for generating the first control signal; and is responsible for receiving the first control signal generated by the trigger unit lake, and transmitting the data to the external=3贞_output w140 via the output/input interface unit 140. The interface unit 140 that performs the encryption generation is responsible for receiving the signal generated by the control unit 12 to receive the data transmitted by the _. Connected - to explain the hair _ operation pure and method. The invention==the way of the crane connection can be tender (four) type editing technology (Εχί_Ι danced Te〇hnologyAt^^ 7 200805084 (Un丨Versal Serial Bus, USB), Firewire (Firewire, IEEE 1394), etc., but not For example, in the case of USB, the user connects the data backup device 100 of the present invention to the computer via a USB cable, and uses the trigger unit 11 on the data backup device 100 to generate a control signal, such as pressing a button. However, the trigger unit 110 of the present invention is not limited to a button, and the generated control signal is transmitted to the computer via the USB cable. After receiving the control signal, the computer will display the specific data in the hard disk (for example, all). The data of the hard disk, or all the data under c:\Backup\ directory _, or the specific one or a few of the Tan files are considered to be backed up.) Transfer to the data backup device via USB cable, data backup After receiving the poor material, the control unit 120 will encrypt the data with an algorithm such as RC2 of 3 DES'128 bjts, but the encryption algorithm is not limited to the above two types, and the encrypted shell material will be With "0604131 The file name of 700.sbk" is stored in the device 100 with the disk array technology, and the data is stored in the data backup device 100 with the disk array to increase the reliability of the backup. 10 If the user wants to The data that has been backed up to the data backup device 100 is read out on the computer, but the data is directly renewed from the disk area generated on the computer, and the control material 120 prohibits the access operation, for example, Turn on the disk area generated by the data backup device 100 on the computer, and click the backup file "〇604131700" to generate an error message that the file cannot be opened, but the operation of the second access does not generate the error. The manner of the message is limited, unless it is used: through the control unit 120, for example, the button can be backed up by the dust, so that the control unit 120 will read the backed up data and perform corresponding encryption 8 200805084 % calculation The decryption of the method (n) is processed, and finally the decrypted data is transmitted to the bit stored in the computer during the original backup via the output/input interface unit 14 Set the storage 'such as C:\Backup\. In addition, in order to save the storage space of the data backup device, the control unit 12 can perform compression (c〇mp "essj〇n" processing before or after the data is encrypted. After processing το, it is stored in the data storage unit no, so when the data is restored to the computer, the data needs to be decompressed (dec〇mpressj〇n) and decrypted • 2 'such as data stored to the data backup device When compressing and then encrypting, then N· needs to be decrypted and then decompressed. Otherwise, it must be solved first and then decrypted. After the data is decomposed and decompressed, it can be transmitted to the output/human interface unit. Computer storage. The second embodiment of the present invention is a system backup system and a system architecture diagram of the present invention. As shown in the figure, the data backup system of the present invention comprises a storage device 200 and a computer 201, wherein the storage device 2 includes a control module 210, a storage module, a group 220, and a data transmission interface 23, and The computer 2〇1 includes a processing module 290. The control module 210 is responsible for issuing control signals and transmitting them to the processing module 290 via the data transmission interface 230. The data storage module 22 is provided with a disk array to increase the ability to store data, and is responsible for storing the processing modules. The data transmitted through the data transmission interface 23; the data transmission interface is connected to the storage device 200 and the computer 201, and is responsible for transmitting the control signal sent by the control module 21 to the processing module 29Q, and is responsible for the transmission from the processing module. The processing module 290 is responsible for encrypting the data after receiving the control message 9 200805084 issued by the control module 21, and after the encryption is completed, transmitting the encrypted data to the control through the data transmission interface 230. Module 21〇. In addition, the storage device may further include an input module 25 〇 ” responsible for triggering the control surface, and an address 21 〇 issuing control. According to the above, the operation system and method of the present invention are explained by the first embodiment, and the square wire paste of the mixed method of the material of "Fig. 3" is described. This implementation _ & SATA connection fine computer 2 〇 1 and external storage storage, after the user uses the E-SATA cable to connect the computer 2 〇 1 and the external storage device 310), this implementation For example, the data transfer interface 2 is added. At this time, the external type 2 is hidden (four), and the computer is processed into the processing module 290 (cast 322) on the computer, or when the user presses the button on the storage device and the outer casing. The button is the input module 25 = = _ output control signal (step 321) and _ material _ face = $ to the processing module 29 ( (step 322), the processing module 2 such as D ^ PHes ^ txt) ? ^ # ^ * W is the beaker of the knife, and it is encrypted and transmitted to the external storage device 2GG (step 33Q), and the data is stored. In order to save the workers, the clothes will be 叮" ♦ 1 month from 201 before the encryption data, =: 彳 彳 _ processing, when the encryption and _ are completed, then through the care t = example (4) In addition to the use of a disk array with more than two hard disks, you can also disable the ship 10 200805084, so that each hard disk forming the disk array can be operated independently, or - (4) The storage device of the (4) single hard disk is slightly different from the above storage device, but the process of adding the data and then storing it does not change. The user thinks that the result of the backup is used by Sun Fiber. The configuration module stored on the data storage core group 22G can be executed to change the processing module 29 to process the parameters of the data to be backed up. The interface after the execution of the setting program is as shown in "Fig. 4", and the m-week positive subtraction includes It is not limited to the attributes such as encryption algorithm and length, the type of dust reduction and the parameter 42Q, and the path of the data to be backed up, the old spare information, whether it is reserved, and when the backup is performed. Let = Self-adjustment, such as the result of slavery shown in "Figure 4", compression calculation / changed to RAR, compression ratio is best, the backup time is 3:30 am daily, backup _ diameter is D: disk slot and Recording, etc., the computer 2〇1 will be backed up at 3:30 every ^凌辰, the data will be compressed with 3 DES 128 bits plus the best, and then transferred to the external role or Users who want to back up data without being able to access the external storage device can also press the backup of the poor material as in "4". After entering A, the user wants to directly read the backup (four) materials, for example, directly into the external storage device 2, and the generated G drive 221, and is not allowed to control the 2QG of the storage device. The module 210 refines the secret message to the user who uses 5 K in the G drive and wants to read the prepared 11 200805084 injured bedding. The control module 21 is the same as the case described in the ban. You will get a file of one or two: and a copy of the file, unless you have a simple (four) interest, and you can use the interface shown in "4^ Over Processing Module, Group 290 Read Backup Data, for example, = Map". In the memory of the new secret, so check (10), _ group 21Q will read out and 230 ^ 1 TM22 ° ^ L module 29G (step 3 called processing module =: 21. The returned has been backed up After the data, the process of decryption = the object of the whistle (the smoke called the face into the storage 2 2, the management module 290 has been compressed, so the user has responded to the prepared mussel tear, the computer 201 will be in the (four) secret treatment When, - and the decompression process is processed, it is stored in the computer 201. ~ In addition, the storage device can be bribed with the same The material and the slanting type, as shown in the "figure 5", and continuing the second embodiment, the external storage device 200 can store the encrypted data using the disk array displayed on the computer 221 on the computer continent 221 And storing the setting program using the flash memory (7) displayed on the _ 2〇1 by the disk drive 222. Although, ,, <, each of the better implementations The disclosure of the present invention is not intended to limit the invention, and any skilled person can make some modifications and refinements without departing from the spirit and scope of the present invention. The definition of the scope of the patent application attached to the specification shall prevail. 12 200805084 [Simple description of the diagram] The first diagram is the system architecture diagram of the data backup device issued by 0. The second diagram is the data backup of the invention. The system architecture diagram of the system. The third method is a flowchart of the method of the backup method of the present invention. The brother 4 diagram is a schematic diagram of the data backup parameters proposed by the embodiment of the present invention. Storage ==^__ Storage media storage [main component symbol description] 100 data storage Device 110 Trigger Unit 120 Control Unit 130 Data Storage Unit 140 Wheeling/Incoming Interface Unit 200 Storage Device 201 Computer 210 Control Module 220 Data Storage Module 221 G Disk Area 222 Η Disk Area 230 Data Transfer Interface 250 Input Module 290 processing module 13 200805084 410 encryption attribute 420 compression attribute 430 backup attribute 441 backup 442 memory 443 storage setting step 310 connection computer and storage device step 321 input trigger signal step 322 storage device sends a control signal to the computer step 330 computer processing data and Transfer step 340 storage device storage data step 380 storage device transfer data to computer step 390 computer processing data
1414