TW202117571A - Structure and method for encrypting digital data memory card being provided with a memory in a memory card - Google Patents

Abstract

This invention relates to a structure and method for encrypting a digital data memory card. A main body is provided with a memory in a memory card. The memory is provided with a reading controller matched with a reader and a protection area and is additionally partitioned into a hard disk partition table area and a file area. A protected portable storage ID (PSID) is written into any one of all the areas by an application programming interface (API). Before the protected PSID is written by the API, the API provides the reading controller a secret key completed by encryption and decryption logics, the reading controller firstly dencrypts the secret key and transmits a result to the API. Therefore, the safety is further improved.

Description

Structure and method of digital data memory card encryption

The present invention relates to a structure and method for encrypting a digital data memory card, in particular to a protection management mechanism (DRM, Digital Rights Management) that loads the digital data that needs to be obtained before access to the memory card into the memory card and encrypts it.

Due to the advancement of computer and digital technology, the content of many creations and works (such as movie or music content) are converted into digital audio-visual compressed files, which are then burned on CD, DVD and other audio-visual media for general consumption者用。 Used by. The content of the creation and work, in addition to movies or music, even extends to lectures, teaching videos, stage plays, etc., can be converted into digital audio-visual compressed files (hereinafter collectively referred to as [digital data]). However, due to the proficiency of compression and copying technology, the aforementioned digital data, regardless of movie or music content, can easily be formed into various file formats and reproduced through various copying, burning and other technologies. It is even more disseminated by the Internet. The media provides a wider range of uploads and downloads, so that the copied content can be transmitted and spread farther. As a result, the production efforts of digital materials (especially music or movies) and the content of the works are easily breached by the environment provided by technology without defense. It has also led to the low creative intentions of many authors. It is a great obstacle to the development of today's civilized society that values intellectual property rights. Therefore, how to use technological protection mechanisms to form an obstacle to the copying of the content of the work, and the protection of the content, is for many audiovisual publications. , Publishers, or even entertainers and words The music creators attach great importance to it, which is more in line with the legislative intentions of the Basic Law of Science and Technology of my country and related science and technology laws. Furthermore, the aforementioned carriers, generally CDs, DVDs, and other optical discs are currently the mainstream in the market, but due to their repeated use technology, except for a few rewritable optical discs that can be burned multiple times, they are burned repeatedly. The type of recording has not formed the popularity of early audio tapes, and due to the large size, many current playback equipment (such as MP3 players), etc., cannot be used simultaneously. Instead, the digital data is retrieved from the aforementioned carrier and copied to a memory card such as a so-called SD card for use. Click, the current memory card is mainly used for the storage of digital file data (the purpose is the same as the floppy disk, etc.). If it can actively form a carrier of digital data, and at the same time cooperate with the secure digital characteristics and small size of Secured Digital Card (SD) (secure digital memory card), it will be able to further form a better digital data carrier and have A security protection mechanism with high portability and wide applicability. Especially the SD memory cards currently on the market, in addition to the transmission speed and capacity have been greatly increased, and the mature technology has led to the product price can be widely accepted. The conditions for the memory card to form a better digital data carrier are more mature.

Although there is already a DRM mechanism (DRM, the so-called Digital Right Management) included in the personal computer (PC) player for music downloaded from the Internet, it can provide users with appropriate consideration (paid) Under the circumstances, a corresponding security protection mechanism can be provided, so that the digital data transmitted on the information can be prevented from being illegally copied and distributed by interested persons. Or by limiting the downloader's identity, number of times, limited time, and limited number of copies, but there is no proper protection mechanism for the carrier itself (especially the memory card).

In view of this, the inventor once invented and filed an application for "Digital Data Memory Card Encryption Structure and Method", and obtained invention patent No. I507993. Although it can achieve the expected effect, after years, the cracking method has been more renovated. , The inventor believes that for the encryption of the memory card itself and For decryption, more rigorous steps should be taken.

In view of the insufficient encryption and protection of the memory card in the prior art, the intellectual property rights and privacy of the digital data that can be accessed for various needs are not fully protected. Therefore, the present invention specifically proposes a structure and method of memory card encryption for the prior art, and technical means to solve the previous problems. The present invention relates to a structure and method of digital data memory card encryption, which removes the memory in a memory card. It has a read control terminal (Controller) and a protection area (Protection Area), and is divided into a hard disk partition table area (Partition Table Area) and a file area (File Area), and uses an application program interface ( API, Application Programming Interface), select any area in the front area, write a protected storage device identification code (PSID), and when the file area (File Area) in the memory card contains the right object (Right Object) (Need to have the right to obtain digital data), when reading by various readers, the protected storage device identification code (PSID) can be used as an encryption mechanism for identification and reading, and the protection and management mechanism for the digital data of the memory card is added ( DRM, Digital Rights Management) security. And before the application program interface writes the protected storage device identification code, the application program interface gives the read control terminal a key command completed through encryption and decryption logic, and the read control terminal first decrypts the key command , And send the result to the application interface. Therefore, there are 4 areas in the memory card: read control terminal (Controller), protection area (Protection Area), hard disk partition table area (Partition Table Area) and file area (File Area). The PSID (Portable Storage ID) can be inserted into the memory card in one of the following ways:

1. To change the protected storage device identification code (PSID) (Portable Storage ID) is inserted into the reading control terminal (Controller) in the memory of the memory card, you can use general memory card readers (such as SD Reader) and applications developed for the reading control terminal (Controller) in the memory of the memory card Interface (API) is fine, which is more secure.

2. If you want to put the protected storage device identification code (PSID) in the protection area of the memory card, you can use a special jig to cut the protection area of the memory card, or use ordinary SD Reader and Application Programming Interface (API) developed for the Protection Area in the memory of the memory card.

3. If the protected storage device identification code (PSID) is to be placed in the partition table area of the hard disk (Partition Table Area), the user can generate this area after formatting with Windows or other OS.

4. If the protected storage device identification code (PSID) is to be placed in the File Area, the user can generate this area after formatting with Windows or other OS.

Further, before writing the protected storage device identification code in the application program interface, the application program interface gives the read control terminal a key command completed through encryption and decryption logic, and the control terminal first commands the key Decrypt and send the result to the application program interface. In this way, there is no need to be afraid of hackers intercepting and cracking midway, in order to increase the difficulty of hackers intercepting and cracking midway and increase encryption agility.

(1)‧‧‧Memory Card

(11)‧‧‧Memory

(111)‧‧‧Read control terminal

(112)‧‧‧Protection Area

(113)‧‧‧Hard Disk Partition Table Area

(114)‧‧‧Archive Area

(115)‧‧‧Protected Storage Device Identification Number (PSID)

(116)‧‧‧Object of Rights

(117)‧‧‧Public Key Facilities (PKI)

(118)‧‧‧Application Programming Interface (API)

The first figure is a schematic diagram of the memory card structure of the present invention

The second figure is the operation flow chart of the present invention

The third figure is a schematic diagram of the pre-encryption and decryption between the reading control terminal and the application program interface of the present invention

The content, features, and embodiments of the present invention will be described in the following diagrams, so that your reviewer has a better understanding of the case.

Please refer to the first figure, the present invention relates to a digital data memory card encryption structure, including:

A memory card (1), the memory card (1) is provided with a memory (11) inside, and the memory (11) is provided with a reading control terminal (Controller) (111) matched with a reader and a In addition to the Protection Area (112), it is divided into a Partition Table Area (113) and a File Area (114), and uses the API (Application Programming Interface) Interface) (118), select any area in the front opening area to write a protected storage device identification code (PSID) (115), and when the file area (114) in the memory card (1) is loaded When there is a right object (116) (need to have the digital data obtained by the right), when reading by various readers, the protected storage device identification code (PSID) (115) can be used to identify and read The encryption mechanism increases the security of the digital data protection management mechanism (DRM, Digital Rights Management) of the memory card (1).

As shown in the second figure, the memory card (1) reading control terminal (Controller) (111) manufacturer should strictly keep the application programming interface (API) secret, otherwise others can use this application programming interface (API) to obtain In the present invention, the protected storage device identification code (PSID) (115) placed in the memory (11), such as the program and the protected storage device identification code (PSID) set in the protection area (112) )(115).

However, in order to further ensure the protected storage device identification code (PSID) (115) of the memory card (1), the present invention can set the memory card (1) as a kind of PSD (Personal Storage Disc), which integrates the USB function with the memory card through one-piece molding, so that users can transfer data through the USB interface of the computer without using a card reader and a transmission cable, and it can also eliminate the need for people to easily disassemble the memory The internal memory is obtained from the card, and even cracked.

The memory (11) used in the present invention can be a flash memory (Flash Memory), or an electrically erasable programmable read-only memory (EEPROM) (Electrically Erasable Programmable Read-Only Memory).

1. To put the PSID (Portable Storage ID) (115) of the protected storage device identification code (PSID) (Portable Storage ID) (115) into the reading control terminal (Controller) (111) in the memory (11) of the memory card (1), that is It can be read or written by using a general memory card reader (such as SD Reader) and an application programming interface (API) developed for the reading control terminal (Controller) in the memory of the memory card, which is safer. Please refer to the third figure, the encryption and decryption logic between the controller (111) and the application programming interface (API, Application Programming Interface) (118) is the PKI Public Key Infrastructure (PKI Public Key Infrastructure) (117) As the encryption and decryption logic between the encryption system server and the decryption program. Its Public Key Infrastructure (PKI Public Key Infrastructure) is recognized as the most rigorous standard encryption and decryption logic.

2. If you want to put the protected storage device identification code (PSID) (115) into the protection area (112) of the memory card (1), you can use a special jig to perform the protection Area) (112) size cutting can also be read or written using a general SD Reader and an application programming interface (API) developed for the protection area (Protection Area) of the memory card.

3. To put the protected storage device identification number (PSID) (115) into the hard disk partition table area (Partition Table Area) (113), the user uses Windows or other OS to do This area can be generated after Format.

4. To put the protected storage device identification code (PSID) (115) into the file area (114), the user can generate this area after formatting using Windows or other OS.

No matter where the protected storage device identification code (PSID) (115) exists, the right object (116) needs to obtain the right to access the digital data. When various devices such as personal computers (PC), mobile phones or various playback devices (collectively referred to as readers) want to read the corresponding Right Object (116) files, the read control terminal (Controller) (111) ) Will use the program stored in the firmware or protection area (112) of the controller (111) to decrypt the right object (116) file and decrypt the right object (Right Object) (116) The corresponding protected storage device identification code (PSID) (115) is obtained from the file, and then stored in the protection area (Protection Area) (112) (take the protection area as an example, but not limited to) The protected storage device identification code (PSID) (115) of the protected area is compared. If the comparison is successful, the right object (116) file is provided to the playback device. If the comparison is unsuccessful, the playback device is notified that the file is unreadable.

A unique protected storage device identification number (PSID) (115) is built in the controller (111) or protection area (112), regardless of whether it is a unique read-only The device (Unique Device) ID or the protected storage device identification code (PSID) (115) generated by the Random Number Generator and once-time programming is not allowed to be copied by others. The ID of the right object (116) and the protected storage device identification (PSID) (115) can be compared by the reading control terminal (Controller) (111) or the decryption application program interface (API) of the playback platform (118) Come on, when The right object (116) and the protected storage device identification (PSID) (115) of the memory card can only be decrypted and played.

Before the application program interface (118) writes the protected storage device identification code (PSID) (115), the application program interface (118) gives the read control terminal (111) a key command completed through encryption and decryption logic , The reading control terminal (111) first decrypts the key command, and sends the result to the application program interface (118), which is the decryption of the memory card reading control terminal (Controller) (111) and the playback platform Before the data between the application programming interface (API) (118) is encrypted data (that is, the application programming interface (API) (118) wants to read or write the plaintext data of the Protection Area (112)), the application The programming interface (API) (118) needs to use the key encryption command that both the application programming interface (API) and the reading control terminal (Controller) (111) have agreed to obtain before sending it to the reading control terminal (Controller) (111). ) (111), and the read control terminal (Controller) (111) first decrypts the command, interprets the command, executes the command, and then sends the result (command response or data) to the application programming interface (API) (118) ) And the reading control terminal (Controller) (111) have agreed to obtain the key encryption command, and then sent to the application programming interface (API) (118), and the application programming interface (API) (118) then Use the key decryption result (command response or data) that both the application programming interface (API) and the controller (111) have agreed to obtain. In this way, you don’t have to be afraid of hackers intercepting and cracking it in the middle. Increase the difficulty of interception and cracking by hackers and increase the agility of encryption.

Only the corresponding memory card reading control terminal (Controller) (111) and the decryption application program interface (API) (118) of the playback platform (as shown in the third figure) can decrypt, so as to prevent others from passing through the memory card reader ( SD Card Reader) interface to intercept data.

To further explain the meaning of the second figure, when the reading control terminal (Controller) (111) accepts a reader command to read data, it will first perform a specific extension (such as but not limited to ROM), when it is determined to be the extension formed by the variable of the Protection Area (112), if it is, then it will be EEPROM (Electrically Erasable Programmable Read-Only Memory) ) (Also Flash Memory), such as but not limited to the encrypted protected storage device identification code (PSID) (115) stored in its Protection Area (112), and take out the auxiliary file Under the name of a certain bit of data, then execute the memory card firmware existing in the controller (111) or the internal code (CODE) in the protection area (112). Then determine whether the extracted bit data matches the protected storage device identification code (PSID) (115), if yes, execute the path and data that the original reader can read; if not, report the bus protocal( Bus agreement). The present invention provides a digital data protection management mechanism for digital rights management (DRM). Except for the digital data of music, images and even video, it can achieve effective protection, guarantee the authorized access to the use of digital data, and not Illegal access by a third party to avoid unnecessary loss of digital assets.

To sum up, the present invention is indeed in line with industrial applicability, and has not been seen in publications or publicly used before the application, and has not been known to the public, and is non-obvious and easy to know, and meets the requirements of patentability. A patent application is filed in accordance with the law. .

However, the foregoing is a preferred embodiment in the industry of the invention, and all the equivalent changes made in accordance with the scope of the patent application of the invention belong to the scope of the claims of this case.

Claims (10)

A method for encrypting a digital data memory card is to install a memory in a memory card, and the memory itself is provided with a reading control terminal (Controller) and a protection area (Protection Area) that cooperate with the reader, and Divide it into a partition table area (Partition Table Area) and a file area (File Area), and use the API (Application Programming Interface) to select one area and write a protected storage device identification code ( PSID, Portable Storage ID), and when the file area (File Area) in the memory card contains the right object (Right Object), the protected storage device identification code (PSID) can be used when reading by various readers In order to identify and read the encryption mechanism, increase the security of the digital data protection management mechanism (DRM, Digital Rights Management) of the memory card, and the application program interface writes the protected storage device identification code (PSID) before the application The interface gives the read control terminal a key command completed through encryption and decryption logic, and the read control terminal first decrypts the key command and sends the result to the application program interface. The method for encrypting a digital data memory card as described in item 1 of the scope of the patent application is characterized in that the memory is selected from flash memory (FLASH), electrically erasable read-only memory EEPROM (( Electrically Erasable Programmable Read-Only Memory). For example, in the method for encrypting a digital data memory card described in item 1 of the scope of patent application, the application programming interface (API) uses the read control terminal (Controller) to be placed in the protected area of the memory. Such as the method for encrypting a digital data memory card described in item 1 of the scope of patent application, the application programming interface (API) is built into the hard disk partition table area using the Microsoft Windows operating system (Windows). For example, in the method for encrypting a digital data memory card described in item 1 of the scope of patent application, the application programming interface (API) is built into the file area of the memory using the Microsoft Windows operating system (Windows). The method for encrypting a digital data memory card as described in item 1 of the scope of patent application is characterized in that the memory card is integrally formed with PSD (Personal Storage Disc). A structure for encrypting a digital data memory card, the memory card includes a memory, and the memory is set: A read control terminal (Controller): A protection area (Protection Area): A hard disk partition table area (Partition Table Area), and a file area (File Area); use the API (Application Programming Interface), open each area to select one of them, and write a protected storage device identification code (PSID, Portable Storage ID), and before the application program interface writes the protected storage device identification code, the application program interface gives the read control terminal a key command completed through encryption and decryption logic, and the read control terminal Decrypt the key command first, and send the result to the application program interface. As described in item 7 of the scope of patent application, the encryption structure of a digital data memory card is characterized in that the memory is selected from flash memory (FLASH), electrically erasable read-only memory EEPROM (( Electrically Erasable Programmable Read-Only Memory). The encryption structure of the digital data memory card described in item 7 of the scope of patent application is characterized in that the memory card is integrally formed with PSD (Personal Storage Disc). For example, the digital data memory card encryption structure described in item 7 of the scope of patent application is characterized in that the encryption and decryption logic between the read control terminal (Controller) of the memory card and the application programming interface (API, Application Programming Interface) is Public Key Infrastructure (PKI Public Key Infrastructure) serves as the encryption and decryption logic between the encryption system server and the decryption program.

Images