TWI501103B - Sequential data safekeeping system - Google Patents

Description

Continuous data maintenance system

This disclosure relates to the processing of continuous data.

The network environment within a company or organization, at the extreme, is to prevent the insertion of any unauthorized flash drives, mobile phones, tablets or laptops, and only allows employees to use the company's allotted equipment to a limited extent. Even these devices are just desktop delivery devices, and confidential information is concentrated in the computer room or in the cloud. At the other extreme, companies encourage employees to bring their own smart devices to work (Bring Your Own Device, BYOD) to capture the procurement and operating expenses of information technology. Although the former is safe, it makes the organizational process complex and rigid, affecting productivity; the latter requires the external device to access the internal network resources, and it is tantamount to lead the wolf into the room.

The continuous data maintenance system provided by the disclosure comprises a continuous data storage device, which further comprises a storage module, a voucher generation module, a first communication module and a first control module. The storage module is configured to store a public key and continuity data associated with an computing device. The data in the storage module can only be read by the reading device. The first communication module is used to transmit the serial number And the public key to the computing device, and is used to receive a log entry associated with the computing device. The first control module is configured to determine whether the record item includes the current serial number; when the record item includes the current serial number, the control module is further configured to attach the record item to the continuity data.

In one embodiment, the continuum data maintenance system provided by the present disclosure further includes a computer readable medium having a computer program code for causing a processor of the aforementioned computing device to execute a plurality of instructions. The instruction includes: receiving a public key from the continuous data storage device and the Nth serial number generated therefrom; generating an Nth event message according to the trigger signal; obtaining the N-1th serial number and the Nth associated with the N-1 event message -1 verification code; generating Nth plaintext data according to the N-1th serial number, the N-1th verification code, and the Nth event message; encrypting the Nth plaintext data according to the public key to generate the Nth ciphertext data, the Nth serial number Forming an Nth entry with the Nth ciphertext data; and transmitting the Nth entry to the continuous data storage device.

In an embodiment, the continuous data maintenance system provided by the disclosure further includes a continuous data reading device, which includes a second communication module and a second control module. The second communication module is configured to obtain the serial number from the continuous data storage device, and to obtain the Mth record including the Mth serial number from the continuous data storage device. The second control module is configured to generate an instruction access continuity data storage device, and is configured to determine whether the serial number contains the Mth serial number.

The above description of the disclosure and the following embodiments are intended to illustrate and explain the spirit and principles of the disclosure, and to provide further explanation of the scope of the disclosure.

1‧‧‧Agent

2‧‧‧Continuous data storage device

3‧‧‧Continuous data reading device

FIG. 1 is an interaction diagram of an agent and a continuous data saving device according to an embodiment of the present disclosure.

2 is an interaction diagram of a continuous data reading device and a continuous data storage device according to an embodiment of the present disclosure.

Figure 3 is an interaction diagram of a continuous data reading device and a continuous data storage device in accordance with an embodiment of the present disclosure.

The detailed features and advantages of the present disclosure are described in detail in the following detailed description of the embodiments of the disclosure, and the disclosure of The objects and advantages associated with the present disclosure can be readily understood by those skilled in the art. The following examples are intended to further illustrate the present disclosure, but are not intended to limit the scope of the disclosure.

In an embodiment, the code in the computer readable medium of the present disclosure is implemented by an employee-held device in the form of an application software (applicable as an app) installed on a computer or a smart phone. It is used to monitor the related operations of employees on their own devices. In general, devices or software (hereinafter referred to as agents) that are implemented or have the aforementioned code are included in the enterprise information security policy and must be provided and implemented by the enterprise. Continuous data storage device (hereinafter referred to as storage device) Often a small hardware key (Hardware Key or dongle), the size is not affected by the normal operation of the self-contained device, USB On-The-Go (completion of the Universal Serial Bus) Audio terminal (Audio Jack or Phone Connector, which can be used for signal transmission other than audio, such as portable credit card machine) or other peripheral interface wired externally connected device, or wireless personal area network such as Bluetooth or ZigBee (Wireless Personal Area Network, WPAN for short) technology and self-carrying devices. Briefly, in one embodiment, the agent is installed in the employee self-carrying device. When the employee arrives at the company, the employee needs to obtain the storage device at the access control. The two devices are successfully connected, and the agent can monitor the status of the self-carrying device to generate a record and Released when saving to the save device.

When employees leave their jobs, they need to pass the door again. At this time, the storage device is removed or disconnected, and sent to the continuous data reading device (hereinafter referred to as the reading device) for verification. The reading device also has the ability to store the device by wire or wireless connection, and can be a special device or a general server or a computer. The reading device examines the continuity data stored in the storage device and issues a warning when there is a suspicious record (as defined by the organization's security policy), and the access control may detain the employee for further investigation according to the warning. In other embodiments that are not recorded on the self-contained device as described above, the storage device has a networking interface, and the reading device can instantly verify the recorded items, so that the enterprise can grasp the abnormal operation behavior of the employee at the first time.

Please refer to Figure 1 for details of the above embodiment. 1 is an agent 1 and a saving device having the aforementioned code according to an embodiment of the present disclosure. 2 interactive diagram. Assuming that the agent 1 is successfully connected to the saving device 2, the agent 1 immediately obtains the public key and the first serial number from the saving device 2. As shown in FIG. 1, in step S101, the agent 1 generates an Nth event message according to a certain trigger signal. In an embodiment, the trigger signal can be divided into periodic and conditional. The periodic trigger signal causes the agent 1 to periodically observe the hardware status of the self-contained device, such as Bluetooth, wireless local area network (Wi-Fi), universal serial bus, photographic lens, etc. Whether other devices are turned on or connected, and whether the storage device 2 is still connected to the self-carrying device, and an event message is generated when an abnormality is found. The conditional trigger signal causes the agent 1 to generate an event message when a certain condition occurs, such as the self-carrying device accessing the illegally authorized web address, downloading the file, restarting or changing its operating system. The N-1th event message is essentially the same as the Nth event message, which is generated when the step S101 is performed another time earlier. In step S102, the agent 1 generates the Nth plaintext data according to the N-1th number, the N-1th verification code, and the Nth event message. The agent 1 records the N-1th serial number and the N-1th verification code associated with the N-1th event message. The number N-1 is obtained from the storage device 2. The N-1 verification code is a message authentication code of the N-1 event message, and is generally a hash function such as MD5, SHA-1, Whirlpool, etc., for the Nth -1 Hash Value of the event message operation.

At the same time, the agent 1 has obtained the Nth serial number from the saving device 2. In Asymmetric Cryptography, The keys used for encryption and decryption exist in pairs, called Public Key and Private Key. Encryption with a public key requires decryption with a private key. In step S103, the agent 1 encrypts the Nth plaintext data according to the received public key to generate the Nth ciphertext data, and in step S104, the Nth ciphertext data and the obtained Nth serial number are used as the Nth entry. It is also transmitted to the storage device 2. When the saving device 2 determines in step S201 that the Nth record contains the Nth number that was previously generated and given to the agent 1, the saving device 2 considers that the Nth entry is in the normal procedure and attaches it to the step S202. Keep a continuous piece of data for all entries. The continuous data can be, for example, a text file, a small database, or a dedicated storage block on the flash memory, and can accommodate a plurality of records. Note that the storage device 2 does not hold the private key that matches the aforementioned public key, and therefore cannot know anything other than the serial number in the recorded item. In step S202, the saving device 2 may also selectively append the Nth serial number to a serial number stored therein. When the saving device 2 determines that the Nth record does not include the Nth sequence number, the Nth record item may be directly discarded, or the Nth record item may still be attached to another continuity storage target. In step S203, the saving device 2 selectively transmits a confirmation signal to the self-contained device. If the save device 2 does not find any abnormality, the confirmation signal may indicate that the Nth record containing the Nth serial number is successfully stored, and causes the agent 1 to generate the Nth event message according to the same hash function as described above in step S106. The Nth verification code is used in conjunction with the Nth serial number for generating the N+1th entry. In step S204, when the Nth record and the Nth serial number have been successfully added, the saving device 2 immediately generates the N+1th serial number. The agent 1 is notified in step S205. In step S107, the agent 1 also saves the N+1th serial number.

See Figure 2 for another aspect of this disclosure. 2 is an interaction diagram of the reading device 3 and the saving device 2 in accordance with an embodiment. In this embodiment, the interaction between the reading device 3 and the saving device 2 must be issued by the reading device 3 to the saving device 2, and the saving device 2 then makes the corresponding handling and returning result data according to the issued instructions. All instructions are accompanied by a digital signature, and the instruction can be executed after the save device 2 verifies that the digital signature is correct. As shown in Fig. 2, the reading device 3 generates an instruction in step S301 and generates a digital signature associated with the instruction based on a private key, and transmits the instruction and the digital signature to the saving device 2 in step S302. The private key is not necessarily paired with the public key of the encrypted entry; if it is not paired, it is obvious that the save device 2 also needs to hold the public key paired with the private key. For the sake of brevity, the disclosure does not carefully distinguish which public-private key pairs are used. Anyone with ordinary knowledge in the field of disclosure should be able to easily introduce various implementations using different public-private keys for different purposes. In step S401, the saving device 2 verifies the digital signature according to a public key corresponding to the aforementioned private key. If the digital signature can be successfully verified with the public key, it means that the delivery commander is indeed an authorized reading device. Accordingly, in step S402, the saving device 2 executes the instruction, and in step S403, transmits the instruction execution result and the material associated with the instruction to the reading device 3.

Please refer to Figure 3 in conjunction with Figure 2. Fig. 3 is an interaction diagram of the reading device 3 with the saving device 2 when verifying the continuity data. Assume an M record The item contains the Mth and Mth ciphertext data. In step S501, the reading device 3 issues an instruction to read the Mth entry to the saving device 2, and the saving device 2 verifies that the read command is legal, and returns the M record to the read in step S601. Device 3. The reading device 3 preliminarily verifies in step S502 that the Mth serial number exists after the serial number, and decrypts in the step S503 according to the private key paired with the public key provided by the saving device 2 to the agent 1 for encrypting the plaintext data. Ciphertext data to produce the Mth plaintext material. The Mth plaintext data includes the Mth event message and the M-1th number and the M-1th verification code. If the reading device 3 is to determine whether the Mth and M-1th entries are indeed continuous, it is determined in step S504 whether the M-1 number of the Mth plaintext data is recorded in the serial number field of the M-1 record. And in step S505, it is determined whether the M-1 verification code is associated with the M-1 event message in the M-1 record item, that is, if the M-1 event message is hashed, whether it can be generated and the Mth -1 verification code with the same verification code. In steps S504 and S505, if any negative determination occurs, the reading device 3 should issue a warning. After confirming the continuity and validity of the continuous data, the reading device 3 can further check whether the operation of the self-carrying device between the entry and exit of the employee is in accordance with the policy set by the enterprise for the decrypted event message, and whether the leak is confidential. After that.

In summary, the method of externally connecting the hardware keys allows for full monitoring while allowing BYOD. The instructions in the computer readable medium provided by the disclosure are executed on the device carried by the employee, and the continuous data storage device provided by the disclosure can be properly established according to the information security requirements of the enterprise. Continuity data, including encrypted records and the confidentiality and continuity of records by the serial number mechanism. The continuous data storage device in conjunction with the continuous data reading device provided by the present disclosure ensures that the monitoring record is authorized to be read, decrypted and verified for continuity and validity.

Although the disclosure is disclosed above in the foregoing embodiments, it is not intended to limit the disclosure. All changes and refinements are beyond the scope of this disclosure. Please refer to the attached patent application for the scope of protection defined by this disclosure.

1‧‧‧Agent

2‧‧‧Continuous data storage device

Claims (11)

A continuous data maintenance system includes a continuous data storage device, the continuous data storage device comprising: a storage module for storing a continuous data associated with an computing device and at least one public key; a module for generating a serial number; a first communication module for transmitting the serial number and the public key to the computing device, and for receiving a record associated with the computing device from the computing device; The first control module is configured to determine whether the record item includes the serial number; wherein when the record item includes the serial number, the first control module is further configured to attach the record item to the continuity data. The continuous data maintenance system of claim 1, further comprising a computer readable medium having computer code for causing a processor of the computing device to execute a plurality of instructions, The command includes: receiving the public key from the continuous data storage device and an Nth serial number generated by the continuous data storage device; generating an Nth event message according to a trigger signal; and obtaining an event associated with an N-1 event An N-1 verification code and an N-1th serial number; Generating an Nth plaintext data according to the N-1th serial number, the N-1th verification code, and the Nth event message; and encrypting the Nth plaintext data according to the public key to generate a Nth ciphertext data, The Nth serial number forms an Nth entry with the Nth ciphertext data; and transmits the Nth entry to the continuous data storage device. The continuation data maintenance system of claim 2, wherein when the Nth record item includes the Nth serial number, the first communication module is further configured to send a confirmation signal to the computing device, the confirmation signal indicating the The Nth entry is added to the continuous data, and the first control module is further configured to generate the N+1 serial number by the serial number generating module, and the first communication module is further configured to transmit the Nth +1 number to the computing device. The continuity data maintenance system of claim 3, wherein the instructions further comprise: determining, according to the confirmation signal, whether the continuous data storage device has attached the Nth entry to the continuity data; When the confirmation signal indicates that the Nth record item has been attached to the continuity data, calculate an Nth verification code associated with the Nth event message, and save the Nth serial number and the Nth verification code for the generation part A copy of the N+1 plaintext. The continuity data maintenance system of claim 2, wherein the trigger signal is generated periodically or satisfactorily. The continuum data maintenance system of claim 1, wherein the storage module is further configured to store a serial number, and when the record includes the serial number, the first control module is further configured to attach the serial number to The serial number. The continuous data maintenance system of claim 6, further comprising a continuous data reading device, the continuous data reading device comprising: a second communication module for transmitting an instruction to the continuous data storage The device, the instruction is used to instruct the continuous data storage device to transmit an M-th record of the serial number or the continuous data, the M-th record item comprising an M-th serial number and an M-th ciphertext data; The second control module is configured to generate the instruction, and is configured to determine whether the serial number includes the Mth serial number. The continuum data maintenance system of claim 7, wherein the continuous data reading device further comprises: an encryption and decryption module, configured to decrypt the Mth ciphertext data according to a private key corresponding to the public key, Generating an M-th plaintext data, the M-th plaintext data includes an M-1th sequence, an M-1th verification code, and an Mth event message; wherein the second control module is further configured to determine an M-1th Whether the No. M-1 sequence number is recorded in a serial number field of the record item, and is used to determine whether the M-1 verification code is associated with an M-1 event message in the M-1th record item; When the number of the M-1 is recorded in the sequence number field, and the M-1 verification code is associated with the M-1 event message, the second control module indicates the The M entry is consecutive to the M-1th entry. The continuation data maintenance system of claim 8, wherein the encryption and decryption module is further configured to generate a digital signature associated with the instruction according to the private key, and when the second communication module transmits the instruction, The second communication module is further configured to transmit the digital signature to the continuous data storage device. The continuum data maintenance system of claim 9, wherein the first communication module is further configured to receive the instruction and the digital signature, and the first control module is further configured to verify the digital signature according to the public key. And when the digital signature passes the verification, the continuous data saving device is configured to execute the instruction. The continuity data maintenance system of claim 7, wherein the instruction is further configured to instruct the first control module to replace the public key or reset the continuous data storage device.