TW588244B - Data protection method and system for storage unit - Google Patents

Abstract

The present invention provides a data protection method and system for a storage unit, which includes the following steps: first making the user installing an user recognition module into a memory unit under normal operation system on a data processing device; next, making the user recognition module to encode and encrypt the identification code configured by the user, and store in a storage unit; then, making the user recognition module to encode and encrypt the data of partition table, and store in a specified position of the storage unit; next, making the user recognition module to delete the data of partition table; finally, making the user recognition module to determine if the identification code inputted by the user is correct when the user turn on the power again of the data processing device; if so, decoding and recovering the encoded and encrypted partition table data and overwriting to the correct position of partition table for conducting the normal booting operation; if not, stopping the normal booting operation procedure.

Description

588244 V. Description of the invention [The invention belongs to the (1) technology department has a method [the first type of writing power, the body of the broadcast line of the media is willing to put the news quickly, keep it confidential, and store the audio and video about the system Foreword, as the brain and other parts of the implementation as an introduction, editing network accumulation. Through the rapid acceptance of data, the current field of equipment, etc., a storage unit data protection method and system, and more specifically, a system applied to a data processing device with a hard disk storage unit. Technology] Electronic Information Office. The use of simple sound, in other words production and communication loops, is lighter and easier. Based on the above-mentioned searches, it is safe and easy to use because the relevant information has been filed with one of its information technology devices. The processing of images or sounds, and the need for users to play and work are becoming increasingly thin and short, and all kinds of objective network links can be found and obtained. Although we can benefit, but in terms of problems, compared to the previous paper processing device, it can provide a medium. Although it is a thousand miles for us to pass through this, the complex image is transmitted through the other. It is convenient to make environmental factors and data. In terms of data sources, such as regular data, through the combination of the user and the user, the powerful multimedia devices used in the transmission of personal electrical activities are also used by the users. Or note is indispensable to carry out the calculation of program data. Multi-media wired and non-processing devices are also more informative in terms of information processing equipment. Enjoy data through this data processing device. On the other hand, users who have to worry about it must go further. The information about the last working period of the information is recorded in the written form, such as a hard disk. The user records a large amount of text, images, or frames, which reduces the size of the file.

111

I1L 11 1111 17112. ptd Page 5 588244 5. The description of the invention (2) also increases the ease of data stealing and copying. For example, a third party can reproduce or transfer the required data through simple 'file copying steps' such as flash disks, CD burning, and even network transmission. The data protection technology of the conventional data processing device includes the following: through the security function provided in the basic input / output system (B10 S), an identification code (password) is set, and the user performs the data processing During the power-on process of the device, the basic input / output system will require the user to enter an identification code, and whether the user with the content of the identification code has the right to use the data processing device. If so, the basic input system will Continue to the subsequent boot process. Another form is that after entering the operating system, the user defines an identification code based on the operating environment or stored data set by the individual, and the operating system opens the operating environment or stored data corresponding to the identification code according to the identification codes entered by different users. For users. The method of protecting the basic access of basic vehicles, the third party only needs to put the mountain on the motherboard /

η ^ τ ^ Basic I / O system reset jumper (B10S

Reset Jumper) 4¾ ^ Taxi 〇 After that, I really recognize the way, or when I remove the battery on the motherboard for a while. And the% water head reached the level of the basic wheel access system setting spoon. And the latter through & such as floppy disks or optical discs: a way to protect the industry ’s user ’s gujun j machine for users, can still read the data in the hard disk. [Summary of the invention]. Sentences fail to achieve the desired purpose of protection. • In order to solve the above-mentioned problem 4 η, and provide a storage technology shortcoming ’the main purpose of the present invention is to protect the method and system of the early and poor materials, through the division

588244 V. Description of the invention (3) The mechanism of table encryption and hiding, to prevent improper users from entering the operating system for poor material access. Another object of the present invention is to provide a storage unit data protection method and system, which can achieve the purpose of protecting the storage unit data only through a software or firmware program control mechanism, namely jT. In order to achieve the above-mentioned object, the storage unit data protection system of the present invention includes: a central processing unit for providing the storage unit data protection system with functions of capturing signals, encoding, decoding, and executing instructions; and a processing unit for storing the data. A memory unit for the basic input / output system of the device and other software routines; a storage unit for providing the data processing device to store operating system programs and other programs or data; a resident in the memory unit for storing user information The identification code is set to be encoded and encrypted and stored in a specific location in the storage unit; in addition, the data of the partition table is encrypted and stored in a specific location in the storage unit, and when the user restarts and inputs the correct identification code , Taking out the partition table data from the storage unit, decoding and restoring it to cover the correct position of the partition table, and processing it for the data) The device continues the user identification module of the normal booting process. Through the foregoing storage unit data protection system, the storage unit data protection method is implemented by installing the user identification module into the memory unit in advance, and then performing the following steps: First, the user identification module is configured to set the user The identification code is encoded and encrypted and stored in a specific location of the storage unit; second, the user identification module is configured to encode and store the partition table data into a specified storage unit location; further, make the user The identification module deletes the partition table data; finally, the user

17112.ptd Page 7 588244 V. Description of the invention (4) When the user turns on the data processing device again, the identification module judges whether the identification code entered by the user is correct. If so, the code is encrypted and divided. The table data is decoded, restored and overwritten to the correct allocation table position, and the normal boot operation is performed; if not, the normal boot operation procedure is suspended. Compared with the conventional storage unit data protection method and system, the storage unit data protection method and system of the present invention are used to provide users with a user identification mechanism implemented only during a boot process, thereby preventing users from having no use rights. The user arbitrarily opens the data processing device and accesses data in the storage unit. ιΛ approach] Please participate in Figure 1. In the following embodiments, the storage unit data protection method and system 100 of the present invention are applied to a conventional personal computer 200 architecture. The following is only related to the present invention. The storage unit data protection method and system 100 related units and modules will be explained. As for other input units such as keyboards or mice, and display units such as screens, they are not described in detail here. Please refer to FIG. 2. The storage unit data protection system 1 0 0 includes a central processing unit 1 1 0, a memory unit 1 2 0, a storage unit 1 3 0, and a user identification module 1 4 0. . _The central processing unit 110 is used to provide data protection for the storage unit._System 100 captures signals, encodes, decodes, and executes instructions, and can pass data transmission paths such as buses to transfer from other resources. And receive information. The memory unit 120 is used to provide a data protection system for the storage unit.

17112. ptd Page 8 588244 V. Description of the invention (5) 1 0 0 Storage includes the basic input / output system and other software programs and / or memory units which are generally non-volatile in nature, that is, in this work. After the working power of the brain 200 is turned off, the data stored in the memory unit will disappear, and the user will start the working power of the personal computer 200; the original # will not perform such basic routines as the basic input / output system. To complete the personal computer's boot process like 2000. In addition, the memory unit 12 may be an electronic corinable, 4 j, and π programmable electric read-only memory (EEPROM) or a flash memory. Because the foregoing memories have the characteristics of being programmable and overwritable, users may be required to provide more program data content such as basic input / output systems according to the actual situation. The storage unit 130 is used to provide the personal computer 2000 with storage including operating system programs and other programs or data. In this embodiment, the storage unit 130 is a hard disk, and the function and structure of the storage unit i30 are known, so they will not be described in detail. The user identification module 1 40 is a software program resident in the memory unit, and is used to encode and store the identification code set by the user through the central processing unit 110 and store in the storage unit 丨 3 〇 In addition, FOUND encodes and encrypts the partition table data through the central processing unit ii 0 and stores it in a specific location of the storage unit i30; and when the user turns on the working power of the personal computer 2000 again, executes When the correct identification code is input during the boot process, the partition table data is taken out from the storage unit 13 and decoded and restored by the central processing unit 110 to cover the correct position of the partition table for the personal computer 2000 to continue. Perform a normal boot

17112. ptd 588244 5. Description of the invention (6) Operating procedures. *, Don't specify I 'in this embodiment, the partition table refers to the storage table of ^ 3 0, which is a hard disk partition table, and the conventional hard disk system consists of a plurality of clusters, heads, and heads. And magnetic field (sector), and the capacity of each magnetic field is 512 bytes. Among them, the 1st magnetic field of the 0th magnetic head of the ϊ 1 zi column is defined as the partitioned magnetic field, where the magnetic head = p / · stores the master boot program ('Master Boot Program;' the back end is used to store the partition table data) The boot process of Lu 1, human β Hai personal computer 2000 is roughly as follows: It starts from the memory address 0FFFF0H of the ti120, that is, the program at (CS = FFFF, IP = 0000 0FFFF0H address: $ computer The basic input / output system is as follows: "FFFF〇: JMP " 疋 START" After jumping to START, _ (ROM BIOS) will first do "Xthis \ heart early Wu I20 basic input / input system access memory, The keyboard,:; the initial inspection work, such as checking the follow-up program, basic output A / curtain, disk drive, etc. Then it will be read into the master and continue to execute. To the ancient ',, first give control to the master After starting the program, the computer can be divided into the following steps when the computer is turned on: Unit 1 3 0 The main part of the first magnetic field is entered into the system this round, and the stored MBR is written into the random access record. Record (Master Boot Record; code. 3 'then transfer control to the master boot -2 · The main boot recorder program places the first partition on the main partition to describe the entire main disk partition table, and marks the partition at ~ (f 1 ag). 5. Description of the invention (7) is bootable Then write the code to access the memory with the code in the two partitions, and transfer the control right to the system file (such as MS —D0 ^) in the ▲ disc via the startup program SYS and MSDOS · SYS). Ι〇 · Load the loaded system file. Enter the tunnel to access the memory, and then transfer control to the above-mentioned 'party ~ #' The table data is not available; during the boot process of the computer 200, the partition cannot be known The storage unit is essential. Without the partition table data, the partition status of the system window XP or L · I NUX as the filial piety # cannot be known, such as the visual boot process. Of course, the storage location of the system cannot be completed successfully. ，; Delete means based on ... to complete the boot process, to achieve the purpose of companion = users who have no doubt about the use of stored data ^ personal computer storage unit & 凊 Refer to Figure 3 (Α), j: S1 ;; Fang; = line storage unit; 3, 7 users in the personal computer 2000乂 ". In advance, the user identification module〗 40 to the memory unit 12 / With 'An Sang should make S301 〇r, then proceed to step m step 5301 to make the user identify the module 14 疋 identification After the code is encoded and encrypted, the user sets the location *. In this embodiment, in the user: $ :, 〇Special smart unit _, the user identification module = 0 is installed to the first identification code as the identity identification For identification purposes, the identification code 彳 _; ί ί The user's setting on the horse includes any number 588244 t V. Description of the invention (8) A combination of words, words and symbols. After the user completes the identification code setting, the user identification module 140 then encrypts and backs up the identification code to a specific location in the storage unit 130, and then proceeds to step S302. In step S302, the user identification module 140 is caused to encode and divide the segment table data into a designated storage unit 130 position. In this embodiment, after the user identification module 140 executes the step of encrypting and backing up the identification code, it immediately knows that the partition table data in the partitioned magnetic disk is -encoded and encrypted, and after the encoding and encryption is completed, The encrypted data is stored in another designated location in the storage unit 130, and then step S303 is performed. In step S303, the user identification module 140 is caused to delete the segment table data. In this embodiment, after the user identification module 140 completes the steps of encrypting and storing the allocation table data, the allocation table data is then deleted from the memory unit 120. Since the data of the allocation table has been deleted from the memory unit ί 20, if the user re-opens the working power of the personal computer 200 and executes the boot process, if the correct identification code cannot be entered, then The user identification module 140 does not restore the allocation table data to the correct allocation table magnetic area, and the personal computer 200 cannot complete the normal boot process to enter the operating system. The actual operation steps are as follows: It is shown in Figure 3 (B), which shows that when the data protection setting is completed, the personal computer 2 of the program is turned on and the power is turned on again for a user to perform the verification protection phase. Process steps. ^ In step S 3 11, the user identification module 1 40 is required to ask the user to input an identification code in the booting process, and then step S 3 1 2 is performed.

17112. ptd Page 12 588244-^ ____ V. Description of the invention (9) — ----- This round makes the user identification module 14 ° judge that the user is the same ^ ^ is not stored in the storage unit for 1 second The identification code goes to step S313; otherwise, go to step S315. Storage = 1 2nd, so that the Λ user identification module 140 will be stored in the table: i read the material *, and overwrite it to the correct score to the magnetic file £ ′, and then proceed to step S 3 1 4. °] In step S314, the personal computer 22 is made to enter the operating system, and is provided with the authority to access the data during the boot process of the data. Entered into the storage unit 130. In step S315, because the old and the opposite are used, the magnetic division in the storage unit 130 is equal to the step of the complex, which is retrieved by the startup program. Therefore, the helmet σ1 operating system resources & procedure, to prevent unauthorized use; save the boot operation: materials. In the storage unit 130 of the Haihai, as shown above, the storage unit system of the present invention is used to provide users with only the "U method and the identification mechanism, to prevent the user from having no right to use: In the implementation, the personal computer 2000 and the storage unit 1330 are opened by the user. J storage unit 1 30 is used for access without knowing the identification code. Even if 鸪 = his computer device The access to data can not be achieved through demolition. "It is true that the data described above is only for the storage of the present invention._ A unified and preferred embodiment, not a material technology used to limit the protection of shell materials. Content J

Page 13 17112. ptd 588244 • Fifth, the invention description (ίο), other similar to personal computers, such as notebook computers, servers and workstations, etc., and have storage units are applicable to the present invention. The essential technical content of the storage unit data protection method and system of the present invention is broadly defined: In the scope of the following patent application, any technical entity or method completed by another person is completely the same as defined in the scope of the patent application below Changes that are the same or equivalent are considered to be covered by this patent.

Page 14 17112. ptd 588244 Brief description of the drawings [Simplified description of the drawings] Figure 1 is a schematic diagram of an application architecture, which is used to show the system architecture of a storage unit data protection system that implements the present invention applied to a personal computer; Figure 2 It is a block diagram showing the relationship between units and modules in the storage unit data protection system of the present invention; and Figures 3 (A) and 3 (B) are flowcharts showing the storage for implementing the present invention Process steps of the unit data protection method. 1 〇 〇 Storage unit data protection system 110 Central processing unit 120 Memory unit 1 3 0 Storage unit 1 4 0 User identification module 2 0 0 Personal computer

17112.ptd Page 15

Claims (1)

588244 6. Scope of patent application 1. A storage unit data protection method, which is applied to a data processing device having a storage unit. The storage unit data protection method includes: Instruct a user identification module to set a user The identification code is encoded and stored in a specific location of the storage unit; the user identification module is used to encode and store the partition table data in a specified storage unit location; the user identification module is stored in Memory cell partition table 2 'data deletion; and making the user identification module judge whether the identification code input by the user is correct when the user turns on the data processing device again, and if so, decode and restore the encrypted encrypted table data and overwrite it Go to the correct allocation table position, and then carry out the normal booting operation; if not, suspend the normal booting procedure. For example, the method of applying for the scope of the patent, wherein the storage unit may be any one of a built-in hard disk, an external hard disk, and a removable hard disk. 3. The method of applying for the scope of the patent, wherein The data processing device can be any one of a personal computer, a notebook computer, a tablet computer, an LCD computer, a server, and a workstation. 4. For the method of applying for the first item of the patent scope, wherein the user identification module is a software program, which is resident in the-memory unit after being installed in the memory unit, and when the data processing device executes a boot process Perform user identification. 17112. ptd Page 16 588244 6. Application for patent scope 5. For the method of applying for the scope of patent application item 1, the memory unit can be an electronically erasable programmable read-only memory and flash memory. One. 6. The method according to item 1 of the scope of patent application, wherein the identification mark is composed of any one of words, numbers, symbols, words and numbers, words and symbols, symbols and numbers and words, symbols and numbers . 7. A storage unit data protection system, which is applied to a data processing device with a storage unit. The storage unit data protection system includes a central processing unit that is used to provide the storage unit data protection system capture. Signal, codec, and execute command functions; a memory unit, which is used to store the basic input / output system and other software programs of the data processing device; the storage unit, which is used to provide the data processing device storage including operating system programs And other programs or data; and a user identification module, which resides in the memory unit to encode and encrypt the identification code set by the user and stores it in a specific location in the storage unit; The partition table data is encoded and encrypted and stored in a specific location of the storage unit, and when the user restarts and enters the correct identification code, the partition table data is taken out from the storage unit and decoded and restored to cover the partition table correctly. position. 8. If the system of claim 7 is applied for, the storage unit may be any one of a built-in hard disk, an external hard disk, and a removable hard disk. 17112. ptd, page 17, 588244, VI. Patent application scope 0 9. If the system of patent application item 7 is used, the data processing device may be a personal computer, a notebook computer, a tablet computer, an LCD computer, a server and Any of the workstations. 10. The system according to item 7 of the scope of patent application, wherein the user identification module is a software program that resides in the memory unit after being installed in the memory unit and executes a boot process on the data processing device. Perform ~ user identification at any time. 1. The system according to item 7 of the scope of patent application, wherein the memory unit may be any one of an electronically erasable programmable read-only memory and a flash memory. 1 2. The system according to item 7 of the scope of patent application, wherein the identification mark is composed of any one of words, numbers, symbols, words and numbers, words and symbols, symbols and numbers and words, symbols and numbers content. 17112.ptd Page 18