TWM492580U - Wireless processing system for file encryption / decryption - Google Patents

Description

File encryption/decryption wireless processing system

An encryption/decryption system, in particular, relates to a wireless processing system for file encryption/decryption.

With the popularity of computers, it also drives the rapid transmission of information. Since the user does not protect the access to the file, the person who is interested can obtain the file through improper means. Although it is possible to increase the security of accessing files through passwords or encryption procedures. In order to access the file, it is necessary to additionally select or execute other programs, such an operation is an additional burden for the user. And the length of the password will also affect the user's usage habits. Too many or too long password lengths can cause inconvenience to the user.

Although the file can be protected in the manner described above, the device storing the file itself has no corresponding protection. Therefore, people who are interested can obtain files directly from the storage device through illegal means. For example: Unplug the hard drive from the target computer and mount the hard drive to another computer. Therefore, the storage device itself needs protection.

In addition, in a public place, the user does not lock the notebook to a fixed point. When the user leaves the notebook, the notebook is easily stolen by the thief. Therefore, the body of the computer device also needs to provide anti-theft measures.

The invention provides a wireless processing system for file encryption/decryption, which is applied to file access and protection processing when the host end is too far or too long, and encrypts or decrypts the file.

The wireless processing system of the present invention comprises: a first host end, a second host end, and a wireless device. The first host end has a first transmission unit, a first processing unit, a first storage unit and a first warning unit, the first processing unit is connected to the first transmission unit, the first storage unit and the first warning unit; a second transmission unit, a second processing unit, and a second storage unit a second warning unit, the second processing unit is connected to the second transmission unit, the second storage unit and the second warning unit; the wireless device has a control component, a communication component and a third storage unit, and the control component is electrically connected to the communication component and the third a storage unit, the wireless device is connected to the first host end and the second host end in turn, the control component drives the communication component to send the survival information and the identification information, or the communication component receives the confirmation information; if the first time passes and the first host detects Connected to the wireless device, the first host end encrypts the first plaintext file in the first storage unit and drives the first alert unit; if the first time passes and the second host detects that the wireless device is not connected, The second host encrypts the second plaintext file in the second storage unit and drives the second alert unit.

The wireless file processing/decryption wireless processing system of the present invention and its method provide corresponding processing of encryption or decryption in the file access process. Moreover, the host side determines whether to start the encryption and decryption process according to whether the wireless device is connected or the wireless device is correct or not. Therefore, the user can access the file only if the wireless device is properly connected to the host.

The features and implementations of the present invention are described in detail below with reference to the drawings.

100‧‧‧Wireless Processing System

110‧‧‧First host

111‧‧‧First transmission unit

112‧‧‧First Processing Unit

113‧‧‧First storage unit

114‧‧‧First warning unit

120‧‧‧second host

121‧‧‧Second transmission unit

122‧‧‧Second processing unit

123‧‧‧Second storage unit

124‧‧‧Second warning unit

130‧‧‧Wireless equipment

131‧‧‧ physical interface

132‧‧‧Control elements

133‧‧‧Communication components

134‧‧‧ third storage unit

135‧‧‧3rd warning unit

151‧‧‧First normal division

152‧‧‧First encrypted partition

210‧‧‧main host

Figure 1A is a schematic diagram of the new architecture.

Figure 1B is a schematic diagram of each partition of the first storage unit of the present invention.

The 1C figure is a schematic diagram of the first normal partition and the first encrypted area of the new type.

Figure 2 is a schematic diagram of the new set process.

Figure 3 is a schematic diagram of the operation of the new model.

Figure 4A is a schematic diagram of the connection of the new type of equipment at each second time.

Figure 4B is a schematic diagram of the connection of the device at the first time.

Figure 4C is a schematic diagram of the operation of the new wireless device when it is connected.

The 4D figure is a schematic diagram of the operation of the new wireless device when the line is broken.

Please refer to Figure 1A for a schematic diagram of the new architecture. The wireless file processing system 100 of the present invention includes: a first host end 110, a second host end 120, and a wireless device 130. The first host end 110 or the second host end 120 may be a personal computer (personal computer), notebook (notebook), smart phone (smart phone) or tablet (tablet). The first host end 110 and the second host end 120 can be two different types of computers.

The first host end 110 has a first transmission unit 111, a first processing unit 112, a first storage unit 113, and a first alert unit 114. The first processing unit 112 is connected to the first transmission unit 111, the first storage unit 113, and the first warning unit 114. The first transmission unit 111 is configured to receive information from the wireless device 130 or to transmit information to the wireless device 130. The type of the first alert unit 114 may be, but is not limited to, a buzzer or a light emitting diode (LED). The first processing unit 112 sends a related prompt message to the user through the first alert unit 114. The first processing unit 112 executes a first agent process in the first storage unit 113. The first agent is for identifying whether the wireless device 130 is connected to the first host 110 and verifying whether the connected wireless device 130 is legitimate. The law in the present invention refers to the correct identification of the wireless device 130 by the host. If the host detects that the unpaired wireless device 130 (that is, the illegal wireless device 130) is approaching, the host does not perform connection and encryption related processing on the wireless device.

The second host end 120 has a second transmission unit 121, a second processing unit 122, a second storage unit 123, and a second alert unit 124. The second processing unit 122 is connected to the second transmission unit 121, the second storage unit 123, and the second warning unit 124. The second transmission unit 121 is configured to receive information from the wireless device 130 or transmit information to the wireless device 130. The type of the second warning unit 124 may be, but not limited to, a buzzer or a light emitting diode. The second processing unit 122 sends a related prompt message to the user through the second alert unit 124. The second processing unit 122 executes the second agent in the second storage unit 123. The second agent is for identifying whether the wireless device 130 is connected to the second host 120 and verifying whether the connected wireless device 130 is legitimate.

Please refer to FIG. 1B, which is a schematic diagram of each partition of the first storage unit of the present invention. At least one encryption partition is defined in the first storage unit 113 (or the second storage unit 123) of the present invention, and the disk space outside the encrypted partition is defined as a normal partition. Similarly, the setting of the encrypted partition and the normal partition of the second storage unit 123 is also similar to that of the first storage unit 113.

For clarity of explanation, the first storage unit 113 is divided into a first normal partition 151 and a first encrypted partition 152. The first operating system and the plurality of first plaintext files are stored in the first normal partition 151, please refer to FIG. 1C. A plurality of first encrypted files are stored in the first encrypted partition 152. The second storage unit 123 of the present invention is divided into a second normal partition and a second encrypted partition. The second operating system and the plurality of second plaintext files are stored in the second normal partition. A plurality of second encrypted files are stored in the second encrypted partition.

In general, the first host end 110 (or the second host end 120) can manage the partition space of the first storage unit 113 through a disk management process. The operating systems are all stored in a normal partition of the respective storage unit. The encrypted partition is used to store the encrypted file. In the present invention, unencrypted files are collectively referred to as plaintext files. The encrypted file is defined as an encrypted file.

The wireless device 130 has a physical interface 131, a control element 132, a communication component 133, a third storage unit 134, and a third alert unit 135. The control component 132 is electrically connected to the physical interface 131, the communication component 133, the third storage unit 134, and the third alert unit 135. The physical interface 131 is used to transmit configuration data to the wireless device 130. The type of the physical interface 131 may be, but not limited to, a Universal Serial Bus (USB).

The communication component 133 is configured to communicate with the first transmission unit 111 or the second transmission unit 121. In other words, the communication protocol employed by the communication component 133 is the same as the communication protocol of the first transmission unit 111 (second transmission unit 121). The control component 132 drives the communication component 133 to transmit survival information and identification information, or the communication component 133 receives confirmation information from the first host terminal 110 (or the second host terminal 120). The wireless device 130 uses the survival information to indicate whether the host is still in the connected state. The host device returns a confirmation message, so that the wireless device 130 can know whether the host terminal maintains the connection. Survival information can be sent periodically via a heart beat.

The communication component 133 of the present invention may be a wireless interface. The type of the wireless transmission interface may be, but not limited to, a Bluetooth wireless transmission protocol, a wireless network protocol, a ZigBee, a Radio Frequency Identification (RFID), or a Near Field Communication (NFC).

The third storage unit 134 of the wireless device 130 is configured to store identification information. The content of the identification information may be related information according to the user (or manufacturer), or may be related information of the first host end 110 or the second host end 120. For example, the first host end 110 has a physical address (MAC address) or a network address (IP address). The third alert unit 135 is configured to send a related prompt message to the user.

In order to clarify the process of setting and using the present invention, the two processes are listed below. In the process of setting the wireless device 130, another host end that is different from the first host and the second host 120 is used as a description, and the host is defined as the main host 210. In practice, however, the primary host side 210 can also be executed by the first host end 110 (or the second host side 120). Please refer to Figure 2, which is a schematic diagram of the new process. The installation process of the present invention includes the following steps: Step S210: the wireless device is connected to the main host, and the main host is connected to the wireless device; Step S220: the primary host requires the wireless device to pair the first host or the second host; Step S230: continuously monitoring whether the wireless device is connected to the primary host end; step S240: if the wireless device is not connected to the primary host, the wireless device terminates the pairing procedure; and step S250: the wireless device records the first host that has completed pairing or The second host.

The user can operate the primary host side 210 and make settings for the wireless device 130. The user can select that the wireless device 130 is to be paired with the first host end 110 or the second host end 120. The following description is based on the first host end 110. First, the wireless device 130 is connected to the primary host 210 via the physical interface 131. The main host end 210 is connected to the first host end 110, and the connection manner can be through a physical cable (cable) or a wireless network. The main host end 210 obtains the identification information of the first host end 110 and transmits the identification information to the wireless device 130. The wireless device 130 can communicate with the first host 110 according to the identification information and identify whether the connected host is legal.

After completing the setting of the wireless device 130 and the first host end 110 (or the second host end 120), the wireless device 130 can perform the following operations with the first host end 110 (or the second host end 120). Please refer to Figure 3, which is a schematic diagram of the new operational process. This new The operation process includes the following steps: Step S310: The wireless device connects the first host end and the second host end in turn; Step S320: If the wireless device is connected to the first host end, the first host end is in the first time, The first host end does not detect the connection with the wireless device, and the first host end encrypts the first plaintext file in the first storage unit and outputs the first encrypted file, and drives the first warning unit of the first host end and the wireless device. a third alert unit of the device; and step S330: if the wireless device is connected to the second host, the second host is not detected to be connected to the wireless device in the first time, and the second host is The second plaintext file in the second storage unit is encrypted and output as the second encrypted file, and drives the second alert unit of the second host end and the third alert unit of the wireless device.

The wireless device 130 of the present invention connects the first host end 110 and the second host end 120 in turn, as shown in Figures 4A and 4B. When the wireless device 130 records only one host, the wireless device 130 is continuously connected to the host until the second host is connected to the wireless device 130. In the present invention, after the second time of the wireless device 130, the wireless device 130 will switch from the currently connected host to another host. For example, the wireless device 130 is being connected to the first host end 110. After the second time, the wireless device 130 first disconnects the first host 110 and connects to the second host 120. After the second time, the wireless device 130 is reconnected from the second host 120 to the first host 110.

When the host end is connected to the wireless device 130, the host end continuously detects whether the wireless device 130 is disconnected (or offline) for a first time. Taking the first host end 110 as an example, the first host end 110 is connected to the wireless device 130. The first host end 110 can encrypt or access the first plaintext file, and can also decrypt the encrypted file. Please refer to FIG. 4C. During this period, the first host 110 continuously detects whether the wireless device 130 is connected for the first time. In order to avoid the occurrence of false detection during the switching process, the host terminal of the present invention can add the buffering preparation time when detecting the disconnection.

If the wireless device 130 detects that the first host 110 is disconnected from the first host 110, the first processing unit 112 detects whether it has been connected to the wireless device 130 after a preliminary time. Restore the connection. If the first host terminal 110 is not connected to the wireless device 130 after the standby time, the first processing unit 112 encrypts the first plaintext file in the first storage unit 113 and outputs the first file. Encrypted file. And the first processing unit 112 drives the first alert unit 114 to issue an alarm to notify the user that the wireless device 130 is offline. At the same time, the first host end 110 encrypts the first plaintext file in operation, as shown in FIG. 4D.

When the first host end 110 is connected to the wireless device 130, the first processing unit 112 confirms whether the identification information is correct. If the identification information is correct, the first processing unit 112 mounts the first encrypted partition 152 to the first operating system. When the first encrypted partition 152 is mounted on the first operating system, the first processing unit 112 encrypts the first plaintext file written to the first encrypted partition 152 into the first encrypted file, or obtains from the first encrypted partition 152. For any of the first encrypted files, the first processing unit 112 decrypts the first encrypted file and outputs the first plaintext file.

Similarly, for the second host end 120, the connection and disconnection processing of the wireless device 130 is also the same as the first host end 110. When the second host 120 is connected to the wireless device 130, the second processing unit 122 confirms whether the identification information is correct. If the identification information is correct, the second processing unit 122 mounts the second encrypted partition to the second operating system. When the second encrypted partition is mounted on the second operating system, the second processing unit 122 encrypts the second plaintext file written in the second encrypted partition into the second encrypted file, or obtains any number from the second encrypted partition. The second encrypted unit deletes the second encrypted file and outputs the second plaintext file.

If the second host 120 is not connected to the wireless device 130 after the first time, the second processing unit 122 encrypts and outputs the second plaintext file in the second storage unit 123 to the second host 120. Two encrypted files. And the second processing unit 122 drives the second alert unit 124 to issue an alarm.

The wireless file processing/decryption wireless processing system 100 of the present invention and its method provide corresponding processing of encryption or decryption in the process of performing file access. The host side determines whether to activate the encryption and decryption process according to the correctness of the wireless device 130. Therefore, the user can access the file only if the user connects the correct wireless device 130 to the host.

Although the present invention has been described above in terms of the preferred embodiments thereof, it is not intended to limit the present invention, and those skilled in the art can, without departing from the spirit and scope of the present invention, In the case of a certain change and refinement, the scope of patent protection of this new type shall be subject to the definition of the scope of the patent application attached to this specification.

100‧‧‧Wireless Processing System

110‧‧‧First host

111‧‧‧First transmission unit

112‧‧‧First Processing Unit

113‧‧‧First storage unit

114‧‧‧First warning unit

120‧‧‧second host

121‧‧‧Second transmission unit

122‧‧‧Second processing unit

123‧‧‧Second storage unit

124‧‧‧Second warning unit

130‧‧‧Wireless equipment

131‧‧‧ physical interface

132‧‧‧Control elements

133‧‧‧Communication components

134‧‧‧ third storage unit

135‧‧‧3rd warning unit

Claims (7)

A file processing/decryption wireless processing system is applied to a file access and a warning process when the host end is too far or too long. The file encryption/decryption wireless processing system comprises: a first host end having a first a transmission unit, a first processing unit, a first storage unit and a first warning unit, the first processing unit is connected to the first transmission unit, the first storage unit and the first warning unit; and a second host end Having a second transmission unit, a second processing unit, a second storage unit and a second warning unit, the second processing unit is connected to the second transmission unit, the second storage unit and the second warning unit; And a wireless device having a control component, a communication component, and a third storage unit, the control component being electrically connected to the communication component and the third storage unit, wherein the wireless device alternately connects the first host end and the first The second host end, the control component drives the communication component to send a survival information and an identification information, or the communication component receives a confirmation message; wherein, after a first time And the first host end detects that the wireless device is not connected, the first host end encrypts a first plaintext file in the first storage unit and drives the first alert unit; And the second host detects that the second device does not connect to the wireless device, and the second host encrypts a second plaintext file in the second storage unit and drives the second alert unit. The wireless processing system for file encryption/decryption according to claim 1, wherein the first processing unit confirms the identification information and then mounts a first encrypted partition to a first operating system, when the first encrypted partition is hung When the first operating system is loaded, the first processing unit encrypts a first plaintext file written in the first encrypted partition into a first encrypted file, or obtains any first one from the first encrypted partition. The file is encrypted, and the first processing unit decrypts the first encrypted file and outputs the first plaintext file. The wireless processing system for file encryption/decryption according to claim 2, wherein the first storage unit further divides a first normal partition outside the first encrypted partition, and the first normal partition stores the first operating system. With the first plaintext file. The wireless processing system for file encryption/decryption according to claim 1, wherein the second processing unit confirms the identification information and then mounts a second encrypted partition to a second operating system, when the second adding When the secret partition is mounted on the second operating system, the second processing unit encrypts a second plaintext file written in the second encrypted partition into a second encrypted file, or obtains from the second encrypted partition. a second encrypted file, the second processing unit decrypting the second encrypted file and outputting the second plaintext file The wireless processing system for file encryption/decryption according to claim 4, wherein the second storage unit further divides a second normal partition outside the second encrypted partition, and the second normal partition stores the second operating system. With the second plaintext file. The wireless processing system for file encryption/decryption according to claim 1, wherein the wireless device switches from the connected first host end to the second host end after the second time passes by the wireless device, or The wireless device switches from the connected second host to the first host. The wireless processing system for file encryption/decryption according to claim 1, wherein the wireless device further comprises a third alert unit, wherein the first alert unit or the second alert unit is driven and simultaneously drives the third alert unit.