TW201117040A - Method of password management and identification adapted for trusted platform module - Google Patents

Abstract

A method of password management and identification adapted for TPM is provided. An identification code can be automatically generated according to a TPM password and saves the identification code to an identifying device selected by a user. The identifying device having the identification code can directly used to be an electronic key for the TPM. The user can open a data or hard disk encrypted by the TPM on condition that the user connects the storage device to an electronic device directly and therefore it is very convenient for the user.

Description

201117040 TW98023GB 32297twf.doc/n VI. Description of the Invention: [Technical Field of the Invention] The present invention relates to a method for managing and verifying passwords, and relates to a module having a trusted security platform (Τ'·: Platform) Moduie (TPM) is the password management and verification of electronic devices. [Prior Art] With the popularity of computers and networks, tools that are indispensable in the life of various computer systems are also the main tools at work. In data storage, HardDisk (HD) is the storage device with the largest capacity in the current storage device, and it is also the most important storage storage. Therefore, data security is becoming more and more important for computer users. As more and more hackers invade and Trojan horse programs, the risk of computer data leakage is getting higher and higher, and notebook computers are easy to carry, high unit price, and easy. Realizing, • It is also often the best target for thieves to get started. Once the data is outflowed, the damage is often unpredictable and unrecoverable. At present, the most important information protection technology specification is TPM promoted by Trusted Computing Group (TCG), including TCG.

Information vendors such as Intel, Acer, LBM, HP, AMD, Sony, Sun Micro, and Microsoft all support this agreement. TpM can directly encrypt hard drives or educational clips. In addition to passwords, encrypted files are required. In addition, the TPM chip is required for decryption 'so that even if the user's password is stolen by the hacker', since the hacker's computer does not have a corresponding TPM chip, it is impossible to steal the encrypted data from 201117040 TW98023GB 32297twf.doc/n. The slot 2 encryption of the TM 2 TM chip will require the user to manually enter the password after 2 pairs of public jobs for the user to use, and to achieve operational authority and use =, (four) and so on. However, the loss of the material is not remembered. Once the code is left, the reading cannot be recovered, which will cause considerable trouble to the user. [Summary of the Invention] This is an electronic device for the - code tube test = this method can be automatically generated according to the material - the set of flash drive or the device that the Zhuang bud wears, such as a toothless garment, 4 flash drive Become the key of Tm. ==Recall passwords. Just connect the flash drive or Bluetooth to the electronic device = you can open the encrypted folder or hard drive, which is quite convenient. f ^ ^ ^ ^ W 'i ^ ^ ^, which can be used to store the flash drive, etc.: = = = The device is set to the e-mail encrypted folder or the hard disk Bluetooth device to open With = and verification method 'applicable column, the business, the password management and verification methods include the following 4: Take It: the above-mentioned electronic device connected - verification device; other code and password generated - test = hard The second verification device or the electronic verification code is stored in the device, so that the upper verification device becomes a 201117040 TW98023GB 32297twf.doc/n subkey; when the verification device is connected to the electronic device, the above verification is automatically verified. If the verification code is correct, if the verification code is correct, one of the folders or a hard disk encrypted by the electronic device is automatically decrypted for use by the user. In an embodiment of the invention, the verification device comprises a Universal Serial Bus (USB) flash drive or a Bluetooth device or a mobile hard disk. The above hardware identification code includes product serial number or media

Media Access Control address (MAC • addreSS). The above electronic device includes a notebook computer or a desktop computer or a mobile phone. In an embodiment of the invention, after detecting the step of the above-mentioned electronic device connected to the authentication device, the method further includes asking the user whether to set the verification device as the electronic key. In an embodiment of the invention, the step of encoding the hardware identification code and the user password into the verification code further comprises requiring the user to enter the user password. In the embodiment of the present invention, wherein the step of automatically verifying that the verification code is f positively includes verifying that the hardware of the verification device matches the verification code. In an embodiment of the present invention, the password management and verification method is further When the verification device is removed from the electronic device, the folder or hard disk encrypted by the electronic device is turned off. In an embodiment of the invention, the automatic verification of the verification code further includes re-verifying the verification code when the electronic device recovers from a sleep state to a normal state. 201117040 TW98023GB 32297twf.doc/n In the present invention - the real complement t, the step of self-verification whether the above-mentioned verification code is correct includes whether the TPM is turned on or not, and if the τρΜ is not turned on, the above verification code is ignored. In the present invention, the step of generating the verification code according to the hardware identification code and the user password described above further includes encrypting the verification code. In an embodiment of the invention, wherein the electron concentrating system utilizes τρΜ to scream or test the hard surface of the data line. The above user password is a TPM password. A seven-beta method is also used to verify the security of the platform (TfUSted Platf_M_ie> _ τρΜ), and the sub-device's password verification method includes the following steps: First, check whether the TPM is turned on; If the TPM is turned on, the above-mentioned electronic device is detected; automatically check whether the verification code in the connected device is correct. 4 The verification code is automatically encrypted and encrypted - the resource is used or the hard disk is used for eight months. {£{ kinds of computer program products, including at least one program refers to the L program command for manned - electronic device to perform the following steps: setting the device connected to the verification device; reading the above verification device «identification code, according to the above hard The physical identification verification code is stored in the above verification device or the above verification verification device becomes an electronic key; when the above-mentioned vertical connection is connected to the upper electronic device, the verification code is automatically verified as 201117040 TW98023GB 32297twf.doc /nf is correct, if the verification code is correct, one of the folders or a hard disk encrypted by the electronic device is automatically decrypted for the user to use. A computer program product, comprising at least one program for loading the electronic device to load an electronic device to perform the following steps: checking whether the TPM is enabled; and detecting whether a verification device is connected to the electronic device if the TPM is enabled; Automatically checking whether the verification code of one of the above verification devices or electronic devices is correct; if the verification code is correct, the L domain encrypted by the TPM is automatically decrypted for use by the user. Based on the above, the present invention utilizes the flash drive. Or the blue key device as the electronic key, the user can decide the favorite verification device as the electronic key. After the setting is completed, the user can directly open the TPM encrypted data by using the set flash drive or the Bluetooth device. It is quite convenient to gamble without remembering the password. In addition, the present invention determines whether the electronic key used by the user is correct according to the hardware identification code of the flash drive or the Bluetooth device to prevent the flash drive or the Bluetooth device. The verification code is stolen, and the safety of the step-by-step is detailed. a. To make the above features and advantages of the present invention more obvious, the following The embodiment is described in detail below with reference to the accompanying drawings. [Embodiment] The first embodiment provides a password management and verification method, which can be set as a TPM according to the user's favorite (4) verification device. Electronic riding, let <201117040 TW98023GB 32297twf.doc/n

The TPM-encrypted folder or hard drive can be opened directly by the verification device. The user does not need to memorize the set TPM password, and only needs to connect the verification device to the electronic device such as a notebook computer or a desktop computer or a mobile phone, and the electronic device automatically recognizes whether the connected verification device is correct, and then automatically It is quite convenient to open the TPM encrypted folder or hard disk for the user. In other words, the present invention replaces the manual entry of a password, allowing the system to automatically verify and automatically enter the TPM password to decrypt the encrypted material. The verification device that can be set as an electronic key is, for example, a USB flash drive, a Bluetooth device or a mobile hard disk, or a mobile phone having a storage function, but the embodiment is not limited thereto. For example, please refer to FIG. 1. FIG. 1 is a flowchart of a password management and verification method according to a first embodiment of the present invention. First, a verification device connected to an electronic device 1 is detected (step s110), and the connection manner includes wired. Or wireless, this embodiment is not limited. Further, in step S110, it is also possible to check whether the user sets the verification device as an electronic key. Then, the hardware identification code of the verification device is read (step sl2). In step S120, a list of all verification devices that can be set as an electronic key can be provided for the user to select and ask the user to set a user password, such as a TPM password. Then, according to the hardware identification code and the user password, the verification code Y is step S130), and then the verification code is automatically stored in the connected verification device=electronic device; the middle is made, so that the verification device becomes an electronic record. Spoon (step Si^o). The verification code can also be stored in the verification device after being encrypted. The algorithm for the start of the addition is not limited. Then, when the verification device is connected to the electronic device, it is automatically verified whether the verification code in the 5_s_ verification device or the electronic device is positive 201117040

Decrypted algorithm or device. Ding Zhan's encrypted folder or '. The electronic device can utilize the TPM pair, but the embodiment is not limited to

Consistent, if it is inconsistent, it will not be decrypted. This verification method can prevent verification.

#码失斜, the material to avoid the test of Lai Cunzhi · to open the situation of the Kaohsiung case. Even if the verification code is stolen, as long as the authentication device used is not correct, the encrypted standard cannot be opened, which provides a double guarantee for the encryption. It should be noted that the hardware identification code is unique to an electronic product such as a product serial number encoding or a media access control address (Media a (3) Ccmtrol address, abbreviated as MAC address), and the present invention can be based on the user. The selected verification device and its user password are used to generate an electronic key. This way, the user can more easily use the TPM encryption mechanism without worrying about forgetting the password. In addition, the embodiment can also be applied to a general encryption system, so that the user can easily create a personalized electronic key with a flash drive or a Bluetooth device, which is quite convenient. In addition, it is worth noting that the verification code can be automatically verified by being stored in the connected verification device or the electronic device according to the user setting, and can also be stored in the verification device or the electronic device at the same time. Not limited. The invention further provides a computer program product, which comprises a program instruction 201117040 TW98023GB 32297twf.doc/n for executing the password management and verification method of the above figure 1. The program product is basically composed of a plurality of code segments; = Ξ organization Figure code segment, sign-off form program chip 』 = segment, and deployment code segment), and these =: r after 'can complete the above electronic = first' embodiment Step S150 of Figure 1 above mainly describes the verification test The process of whether the county is the correct electronic key, if it is applied to the electronic device of the TPM, the implementation method can be further explained as follows. Referring to FIG. 2, FIG. 2 is a flowchart of a password verification method according to a second embodiment of the present invention. First, check if TfM is turned on. ‘If the process ends otherwise, no password is required. Right TEV [When turned on, it is further detected whether or not a verification device is connected to the electronic device (step S220). If yes, it will automatically check whether the verification code in the verification device or the electronic device is correct, including checking whether the TpM password (ie, user, code) and the hardware identification code are correct (step S23 is wide and then, check system, 疋, The normal state is being restored from the suspend state (S3), and if so, the scan is re-scanned, that is, steps S21〇 to S23 are re-executed to avoid system misjudgment (step S240). If the system is in a normal state, the PM is automatically decrypted. The encrypted folder or hard disk is used by the user (step S250). It is worth noting that the above step S240 is mainly used to prevent the system from being set up when the system is not stable after the system is not stable. This step S240 can be added or removed according to user design requirements, and the embodiment is not limited, and does not affect the efficacy of the embodiment. 201117040 TW98023GB 32297twf.doc/n According to the description of FIG. 2 above, the present invention Further provided is a product, which comprises program instructions for performing the steps of FIG. 2 above, and the computer program product is basically composed of a plurality of pieces: a two-text code segment Sign-form programming II, paragraph 5 and Piece Goods private type code fragments, as well as the deployment of a code snippet) snippet and after the implementation of the manned electronic device, the electronic key to ^ establish and password authentication. In the third embodiment, in the process of setting the electronic key, the user interface can be assisted by the visual user interface, and the interface is set to be _not ^ with = to 'flow chart (4) The method of setting the f-cut key is described with reference to Fig. 3, which is a diagram of the electronic spare key according to the third embodiment of the present invention. All the connected verification devices (steps) °, for the electronic key registration device for the user to choose (steps the tester selected by the tester (four) hardware identification card',: technology to say the code generation a verification code (step S33〇), and then the encryption verification ''·, sub:: the code is stored in the verification device selected by the user, and the electronic device is placed (step S3, the hard device storing the verification code can be used as τ; Μ The electronic key, as long as connected to the electronic device, can be decrypted by τρΜ, thereby replacing the square wire of the human ΤΡΜ output ΤΡΜ password for password management and verification a to increase user convenience. About the verification in this embodiment For the details of the code and the rest of the details, please refer to the above-mentioned implementations. The description will not be repeated here. The fourth embodiment, please refer to FIG. 4, and FIG. 4 is a diagram of the hardware installation 201117040 TW98023GB 32297twf.doc/n according to the fourth embodiment of the present invention. As shown in FIG. 4, the notebook computer 410 has a TPM. When the USB flash drive 420 is inserted into the USB slot of the notebook computer 410, the notebook computer 410 automatically verifies whether the correct verification code is present in the flash drive 420. The code is correct and it will open automatically. The TPM encrypted file is used by the user. If the USB flash drive 420 does not have a verification code, the user can set the electronic key through the user interface, and the setting manner is as described in the third embodiment above, and is not added here. In addition, it should be noted that although the above embodiment is described by way of example, the present invention is not limited to the system of ΤΡΜ, and can also be applied to other data encryption methods. The disc or the blue device replaces the manual input of the password to increase the user's convenience. According to the description of the above embodiment, those skilled in the art should be able to easily infer other application modes without any ambiguity. As described above, the present invention utilizes a flash drive or a Bluetooth device as an electronic input key to replace the manual input password, so that the system can open the encrypted (4) case. At the same time, the present invention provides the user to set the electronic record. The thief means that the secret user can kiss the personal record and combine it with the hardware to solve the problem with the user as the verification code of the electronic ^, so that the user's sage can get double PRODUCTION OF PRODUCTION] While the present invention has been disclosed in the above embodiments, the present invention, which is generally within the spirit and scope of the present invention, may be protected without departing from the invention. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a flow chart of a method for managing and verifying a mom according to a first embodiment of the present invention. FIG. 2 is a second embodiment of the present invention. Example of a password verification method flowchart. / / j Figure 3 is an electronic key sound according to a third embodiment of the present invention.

4 is a hardware package according to a fourth embodiment of the present invention. [Main component symbol description] S110 to S150: flowchart steps S210 to S250: flowchart steps 8310 to 8340: flowchart step 410: notebook computer 420: portable dish

Claims (1)

201117040 TW98023GB 32297twf.doc/n VII. Patent application scope: 1. A password management and verification method is applicable to an electronic device having a Trusted Platform Module (TPM). The automatic verification method includes: Detecting a verification device connected to the electronic device; reading a hardware identification code of the verification device; generating a verification code according to the hardware identification code and a user password; storing the verification horse in the verification In the device or the electronic device, the verification device is made an electronic key; and when the device is connected to the electronic device, the verification code is automatically verified to be correct, and if the verification code is correct, the verification is automatically performed. One of the folders or a hard disk encrypted by the electronic device is used by the user. 2. The method for managing and verifying a password as described in claim i, wherein the verification device is a Universal SerW Bus (USB) flash drive or a blue t〇〇th device or action The method for managing and verifying a password according to the first aspect of the patent application, wherein the hardware identification code is a product serial number or a media access control address (MAC address). 4. The password management and verification method of claim 1, wherein after detecting the step of connecting the verification device to the electronic device, the method further comprises: asking the user whether the verification device is set to the Electronic key. 5. The method of password management and verification according to claim 1, wherein the step of encoding the hardware identification code and the user password into the verification 201117040 TW98023GB 32297twf.doc/n code further comprises requiring the user The domain password. 6. For the method described in the application patent (4), in which the step of automatically verifying whether the verification code is correct or not is further included in the verification device, and the hardware verification code is used to check the verification code. The password management and verification party described in item 1 of the patent scope = the quarantine clip or hard disk that is added when the electronic device is removed. The eMule method, the Mimar management and verification party mentioned in the first item, calls the muzi weaving including the type of computer or desktop computer or the method described in item i of the mobile application patent. The step of the verification code further includes, the U new check is set from the sleep surface to the - state, the heavy method, the key management and verification side of the patent range of the patent range = the state of the 2 verification of the verification Whether the code is in the positive step or not includes the detective seal and the enrollment. In the law, the password management and verification certificate user password described in item 1 of the patent scope is generated for the test and the verification code is encrypted. Mu, Ganzi, as described in the first paragraph of the patent field, said the electronic device is used to encrypt or decrypt the folder or the hard disk. 15 201117040 TW98023GB 32297twf.doc/n 13. The password management and verification method described in the scope of claim i wherein the user password is a TPM password. A method for verifying a password, which is applicable to an electronic device having a Trusted Platform Module (TPM). The password verification method includes: checking whether the TPM is enabled; and detecting whether a verification device is connected if the TPM is enabled. To the electronic device; automatically checking whether the authentication device connected to the verification device or the electronic device is correct; and if the verification code is correct, automatically decrypting one of the folders or a hard disk encrypted by the TPM for the user use. 15. The method for verifying a password according to claim 14 wherein the private device is a Universal Se丨1 bus or a Bluetooth device or a mobile hard disk. % 16. For example, the password verification method of claim 14 of the patent application scope, wherein the verification of the code version of the shirt, the jade, and the step of checking the suspect code is not related to the hardware identification code of the verification device and A τρΜ password matches. 17. The method for verifying a password according to claim 16 of the patent scope, wherein the hardware identification code is a production serial number or a media access control address (MAC address). 18. The method for verifying a password according to claim 14 of the patent scope further includes: when the verification device is removed from the electronic device, the electronic device 16 201117040 TW98023GB 32297twf.doc/n encrypted folder or hard disk . Lei Zi 2 = password verification method for item 14 of the patent scope, ... The password verification method of the 14th item of Yueliwei, and the new verification method. When the power is restored to the normal state, the heavy-duty 2 brain program product includes at least one program instruction. a method for loading-electronics to perform the following steps: - detecting a verification device to which the electronic device is connected; reading a hardware identification code of the verification device; determining a horse and a The user password is generated as: the verification code is stored in the verification device or the electronic device is an electronic key; and when the device is connected to the electronic device, the verification is automatically verified. If the verification code is correct, one of the folders or a hard disk encrypted by the electronic device is automatically decrypted for use by the user. 2. The computer program product of claim 21, wherein the verification device is a Universal Bus (USB) flash drive or a blue tooth device or a mobile hard disk. 23. If the computer program product mentioned in item 1 of the patent scope, the hardware code is 10 or the access control address (MAC address). 24. The computer program product of claim 21, wherein the program instructions in the method of detecting the verification device connected to the electronic device are further included in the program of 2011 2011040 TW98023GB 32297 twf.doc/n · Ask the user if the verification device is set to the electronic key. 25. The computer program product of claim 21, wherein the program instructions further comprise the step of requiring the user to input the user code to perform the step of encoding the hardware identification code and the user password into the verification code. The computer program product described in claim 21, wherein the program instructions are automatically verified to verify whether the verification code is positive or not, and the verification device is inspected to find the hard system to hinder the verification = some program instructions In addition to the computer program products, the computer program products mentioned in Item 21 of the electronic device are: the daughter brain or the desktop computer or the mobile phone. In the program, the electronic difficulty product described in the action item, the step of verifying the verification code by the electronic device further includes: newly verifying the verification code. When the transition state is restored to the normal state, the weight is 30. If the application for the patent is ordered, the program age is in the process of self-administration, and the step of detecting whether the TPM is n or not and the code is correct is If the TPM is not turned on, then ignore the computer program product described in the paragraph 201117040 TW98023GB 32297twf.doc/n, which generates the object 2 according to the hardware identification code and the user password. The step of the code further includes encrypting the verification code. Sub == the power-difficult product described in item 21 of the profit range, or i. The M is encrypted on the data line. (4) Putian t invites the computer program product described in item 21 of the patent scope, wherein the k user code is a Tpm password. A human computer program product 'includes at least a program command, the private heart locks the human-electronic device to perform the following steps: - check if the ΤΡΜ is turned on; pull if the TM is turned on _ check if a verification device is connected to the Electronic stagnation, automatically check the connected verification device or the electronic - whether the verification is correct; and if the verification code is correct, automatically decrypt one of the folders or a hard disk encrypted by the TPM for the user to use. <35. The computer program product of claim 34, wherein the verification device is a Universal seriai Bus (USB) flash drive or a blue tooth device or a mobile hard disk. In the computer program product of claim 34, wherein: the second private instruction further comprises checking whether the verification code is correct in the step of performing the automatic verification of the diagnostic verification code in the verification device connected to the verification device. It corresponds to one hardware identification code and one TPM password of the device 19 201117040 TW98023GB 32297twf.doc/n device. 37. The computer program product of claim 36, wherein the hardware identification code is a product serial number or a media access control address (Media Access Control address apos; MAC address). 3 8. The computer program product of claim 4 (4), wherein the program instructions further comprise the following steps: when the verification device is removed from the electronic device, the folder encrypted by the electronic device is turned off or hard. dish. 39. If the electronic device of the 34th item of the patent application scope is applied to the computer or the table 2, the program instructions of the 34th application of the patent scope are further included in the following steps: (5) 'When the electronic device is self-sleeping The state restores the verification code. ", positive _ state, weight 20