WO2009082963A1 - Dispositif de mémoire amovible et son système antivirus pour empêcher les virus informatiques - Google Patents

Dispositif de mémoire amovible et son système antivirus pour empêcher les virus informatiques Download PDF

Info

Publication number
WO2009082963A1
WO2009082963A1 PCT/CN2008/073742 CN2008073742W WO2009082963A1 WO 2009082963 A1 WO2009082963 A1 WO 2009082963A1 CN 2008073742 W CN2008073742 W CN 2008073742W WO 2009082963 A1 WO2009082963 A1 WO 2009082963A1
Authority
WO
WIPO (PCT)
Prior art keywords
virus
storage device
mobile storage
module
electronic device
Prior art date
Application number
PCT/CN2008/073742
Other languages
English (en)
Chinese (zh)
Inventor
Ligang Li
Tingliang Yao
Original Assignee
Beijing Huaqi Information Digital Technology Co., Ltd.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from CNA2007103045502A external-priority patent/CN101470780A/zh
Priority claimed from CN2007103045517A external-priority patent/CN101470673B/zh
Priority claimed from CN200710304549XA external-priority patent/CN101470672B/zh
Application filed by Beijing Huaqi Information Digital Technology Co., Ltd. filed Critical Beijing Huaqi Information Digital Technology Co., Ltd.
Publication of WO2009082963A1 publication Critical patent/WO2009082963A1/fr

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements

Definitions

  • the present invention relates to a mobile storage device, and more particularly to an anti-virus mobile storage device and an anti-virus system for the mobile storage device. Background technique
  • the existing mobile storage device has most measures for preventing such a virus, so that most mobile storage devices are Unable to prevent the infection of this type of virus, causing the virus in the computer to infect the data in the mobile storage device connected to it, causing the mobile storage device to be infected with the virus and the mobile storage device on multiple computers.
  • mobile storage devices Using further infections of other computers, mobile storage devices have become one of the main ways of spreading viruses, causing a lot of trouble for people's daily work and life, and even causing irreparable and significant losses in severe cases. Summary of the invention
  • a computer virus-resistant mobile storage device includes a USB interface, a controller connected to the USB interface, a storage module connected to the controller, and a micro-processor connected to the controller Modules, and antivirus modules that are connected to the microprocessor module to prevent virus intrusion.
  • An anti-virus system for a mobile storage device comprising a mobile storage device for connecting to an electronic device, the mobile storage device comprising a USB interface, a controller connected to the USB interface, a storage module connected to the controller, and a control
  • the storage module of the mobile storage device stores information for preventing virus infection.
  • the system of the electronic device invokes the information of the anti-virus infection.
  • the mobile storage device establishes an interface interface that is identifiable by the system of the electronic device, and the mobile storage device and the electronic device perform data operation/transmission through the interface interface.
  • an anti-virus interface corresponding thereto is established on the electronic device connected thereto, thereby ensuring data security and avoiding the user using the mobile storage.
  • the device is infected by an auto-replicating virus and further avoids the possibility of infecting the electronic device to which it is connected.
  • 1 is a block diagram of a first embodiment of a computer virus-resistant mobile storage device of the present invention.
  • 2 is a block diagram of a second embodiment of a computer virus-resistant mobile storage device of the present invention.
  • 3 is a block diagram of a third embodiment of a computer virus-resistant mobile storage device of the present invention.
  • 4 is a flow chart showing a method for implementing an anti-virus method when the anti-virus system of the mobile storage device of the present invention does not have a detection module.
  • FIG. 5 is a flow chart of a method for implementing an antivirus method when an antivirus system of the mobile storage device of the present invention has a detection module.
  • FIG. 6 is an initialization process of an antivirus system for implementing an antivirus system of the mobile storage device of the present invention The process block diagram of the steps. detailed description
  • the electronic device is a computer, but is not limited to a computer.
  • the mobile storage device is a flash disk (U disk), and the USB disk includes: a USB interface for data interaction, a controller connected to the USB interface, a micro processing module (MPU) and a storage module connected to the controller, and an antivirus module and a detection module fixed in the micro processing module, the detection module is used for The operation of detecting whether the U disk is connected to the computer and performing data interaction is performed. When the operation of data interaction is detected, the detection module reports to the MPU.
  • U disk flash disk
  • MPU micro processing module
  • the detecting module scans the USB interface and the controller after booting, and reports the result of scanning the data interaction to the MPU of the mobile storage device when there is data to be exchanged.
  • the relevant processing unit in the MPU sends the information sent by the received detection module to the antivirus module, and the antivirus module generates an antivirus command, and sends the antivirus command to the controller of the U disk through the MPU, according to the antivirus
  • the instruction calls the data information of the anti-virus command in the parameter area of the storage module.
  • the second embodiment lacks a detection module, and other structures are the same as the first embodiment, that is, when working in a specific manner.
  • the MPU directly receives the connection information sent by the electronic device through the USB interface and sends the connection information to the antivirus module, and the antivirus module generates an antivirus command, and sends the antivirus command to the controller of the U disk through the MPU, according to the controller
  • the anti-virus command further calls the anti-virus data information in the parameter area of the corresponding storage module.
  • the storage module in the first and second embodiments is a flash memory (Flash MEMORY) chip, and the flash memory is divided into a parameter area and a data storage area.
  • the flash parameter area stores data information for antivirus.
  • the USB interface is initialized in the computer system, and an interface interface for data interaction with the computer is formed in the computer system, and the interface interface is the only channel through which the system performs read/write operations on the USB disk, that is, only through The interface interface can perform related read/write operations on the data in the U disk and the computer system.
  • the storage module of the U disk is provided with information for preventing virus infection as needed.
  • the information about the antivirus infection is established in the computer system.
  • the information about the anti-virus infection is called by the system of the computer to send data interaction information to the U disk, and the U disk receives the information through the USB interface, and sends the information to the micro-processing module of the U disk through the controller.
  • the micro-processing module generates an anti-virus command or generates an anti-virus command by the anti-virus module.
  • the storage module sends the anti-virus infection information to the controller according to the anti-virus command, and sends the information to the electronic device through the USB interface.
  • the mobile storage device is a mobile hard disk, and includes a USB interface connected to other electronic devices such as a handheld computer/computer, and a controller connected to the USB interface.
  • the storage module connected to the controller and the anti-virus module connected to the controller and the MPU are different from the first embodiment and the second embodiment in that the detection module and the anti-virus module are not fixed in the MPU.
  • the MPU is connected as a separate module, and the detection module can also be used to detect data interaction between the USB interface and the controller.
  • the working process of the system is as follows:
  • the mobile hard disk is connected to the handheld computer.
  • the detecting module finds that data is to be read/written
  • the MPU sends data information to the MPU
  • the MPU receives the information and sends the information to the antivirus module.
  • the antivirus module generates an antivirus command according to the information, and operates through the antivirus infection data information in the parameter area in the storage module.
  • sent to the connected handheld computer establish an interface interface that can be recognized by the system of the handheld computer, and perform read/write operations on the data stored in the data storage area of the mobile hard disk through the interface interface.
  • Work In particular, the system of the handheld computer can recognize the data in the mobile hard disk only through the interface interface.
  • the hard disk of the mobile hard disk is divided into two parts: a parameter area and a data area.
  • the content in the data area is encrypted, offset, or otherwise made such that the system of the handheld computer cannot recognize its file system format, thereby rendering the system of the handheld computer unable to write files or read data areas to the data area.
  • the file in Therefore, the system that prevents the virus from infecting the mobile hard disk or the handheld computer from automatically running the virus file in the mobile hard disk causes the system to be infected by the virus.
  • An anti-virus program interface is placed in the parameter area, through which the user can access files (including writing, reading, deleting, renaming, etc.) in the data area.
  • the specific implementation is as follows: First, two logical devices - an optical drive and a hard disk - are simulated on the mobile hard disk by the main control chip of the mobile hard disk.
  • the program interface and the AUT0RUN file are encapsulated in a read-only disc image, and then the image is placed in the simulated CD-ROM to implement the parameter area. Filling the Q sector of the hard disk, so that the system of the handheld computer cannot partition or format the hard disk, and the handheld computer system cannot recognize the partition format on the hard disk, so that the handheld computer system cannot access the portable computer system.
  • the effect of the files on the hard disk The program interface analyzes the contents of the hard disk sector by directly reading the data on the hard disk sector to implement operations on the files on the hard disk.
  • FIG. 4 it is a flow chart of implementing an anti-virus method when the anti-virus system of the mobile storage device of the present invention does not have a detection module.
  • the following is a detailed description of the method for implementing the anti-virus of the mobile storage device of the present invention in conjunction with the flow block diagram:
  • the mobile storage device is connected to an external electronic device
  • step 3 2) determining whether the electronic device has established an interface interface corresponding to the mobile storage device; if it has been established, proceeding to step 3); if the interface interface is not established, performing an initialization operation;
  • the electronic device identifies the data in the data storage area of the mobile storage device storage module through the interface interface obtained by the initialization, and completes the read/write operation.
  • the antivirus system of the mobile storage device of the present invention has a detection mode.
  • the block diagram of the anti-virus method is implemented in the block, the mobile storage device further includes a detecting module for detecting data interaction between the mobile storage device and the electronic device, where the detecting module is connected to the micro processing module of the mobile storage device, Step 1) further includes: 1. 1), the detecting module detects the interface controller, determines whether data needs to perform data interaction, and if there is data interaction, proceeds to step 2).
  • the initialization operation in step 2) further includes:
  • the system of the electronic device sends data interaction information to the mobile storage device, and the mobile storage device receives the information through the USB interface;
  • the received information is sent to the micro processing module of the mobile storage device through the USB controller, the micro processing module generates an antivirus command or generates an antivirus command by the antivirus module;
  • the storage module sends the anti-virus infection information to the USB controller according to the anti-virus command;
  • the electronic device sends to the electronic device via the USB interface, the electronic device establishes an interface interface according to the received information.
  • the mobile storage device in the present invention may also be a removable storage device such as a voice recorder, an audio/video player, a personal digital assistant, etc.
  • the electronic device may also be an electronic device such as a personal digital assistant or an audio/video player. .

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)

Abstract

Dispositif de mémoire amovible et son système antivirus pour empêcher les virus informatiques, comprenant principalement : une interface USB ; une unité de commande couplée à l'interface USB ; un module de mémoire couplé à l'unité de commande et un module de microprocessus couplé à l'unité de commande et comprenant également un module antivirus couplé au module de microprocessus pour empêcher les virus. Le module de mémoire du dispositif de mémoire amovible stocke les informations d'antivirus.
PCT/CN2008/073742 2007-12-28 2008-12-26 Dispositif de mémoire amovible et son système antivirus pour empêcher les virus informatiques WO2009082963A1 (fr)

Applications Claiming Priority (6)

Application Number Priority Date Filing Date Title
CNA2007103045502A CN101470780A (zh) 2007-12-28 2007-12-28 移动存储设备的防病毒系统
CN200710304550.2 2007-12-28
CN2007103045517A CN101470673B (zh) 2007-12-28 2007-12-28 一种移动存储设备的实现防病毒的方法
CN200710304549XA CN101470672B (zh) 2007-12-28 2007-12-28 防计算机病毒的移动存储设备
CN200710304549.X 2007-12-28
CN200710304551.7 2007-12-28

Publications (1)

Publication Number Publication Date
WO2009082963A1 true WO2009082963A1 (fr) 2009-07-09

Family

ID=40823785

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2008/073742 WO2009082963A1 (fr) 2007-12-28 2008-12-26 Dispositif de mémoire amovible et son système antivirus pour empêcher les virus informatiques

Country Status (1)

Country Link
WO (1) WO2009082963A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI503698B (fr) * 2013-07-23 2015-10-11
US10380051B1 (en) 2016-08-11 2019-08-13 Kimberly-Clark Worldwide, Inc. USB baiting method and design

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20040091452A (ko) * 2003-04-22 2004-10-28 (주) 사이텍소프트 다기능 휴대용 저장장치
WO2005109302A2 (fr) * 2004-05-03 2005-11-17 Siemens Aktiengesellschaft Dispositif de memorisation de donnees portatif
CN101063959A (zh) * 2006-04-28 2007-10-31 株式会社特伦德麦克罗 具有独立反病毒能力的便携式存储设备
CN200972654Y (zh) * 2006-10-18 2007-11-07 何华科技股份有限公司 通用接口解毒装置
CN101075280A (zh) * 2007-06-26 2007-11-21 南京大学 防毒usb快闪存储器

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20040091452A (ko) * 2003-04-22 2004-10-28 (주) 사이텍소프트 다기능 휴대용 저장장치
WO2005109302A2 (fr) * 2004-05-03 2005-11-17 Siemens Aktiengesellschaft Dispositif de memorisation de donnees portatif
CN101063959A (zh) * 2006-04-28 2007-10-31 株式会社特伦德麦克罗 具有独立反病毒能力的便携式存储设备
CN200972654Y (zh) * 2006-10-18 2007-11-07 何华科技股份有限公司 通用接口解毒装置
CN101075280A (zh) * 2007-06-26 2007-11-21 南京大学 防毒usb快闪存储器

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI503698B (fr) * 2013-07-23 2015-10-11
US10380051B1 (en) 2016-08-11 2019-08-13 Kimberly-Clark Worldwide, Inc. USB baiting method and design

Similar Documents

Publication Publication Date Title
KR101289581B1 (ko) 데이터 저장 장치에 대한 원격 서버로부터의 안전한 스캔을 위한 방법 및 장치
JP5635993B2 (ja) モバイル装置とコンピュータを組み合わせ、安全な個人ごとの環境を生成する装置および方法
JP5924829B2 (ja) データトラフィックへの未認証アクセスの軽減
US7665123B1 (en) Method and apparatus for detecting hidden rootkits
US7793014B2 (en) Data storage device with multi-access capabilities
US9009816B2 (en) Removable memory storage device with multiple authentication processes
US8484736B2 (en) Storage device having an anti-malware protection
US20100241875A1 (en) External storage device and method of controlling the same
TW201020845A (en) Monitor device, monitor method and computer program product thereof for hardware
WO2012041182A1 (fr) Procédé et système pour le changement d'état
TW200817990A (en) Multi-functional storage apparatus and control method thereof
KR100494499B1 (ko) 실행중인 파일에 대한 실시간 데이터 수정 방법 및 이를이용한 바이러스 치료방법
WO2009082963A1 (fr) Dispositif de mémoire amovible et son système antivirus pour empêcher les virus informatiques
JP4767619B2 (ja) 外部記憶装置およびｓｂｃ制御方法
TWI396994B (zh) 防電腦病毒擴散的控制器及其儲存系統與方法
CN101470673A (zh) 一种移动存储设备的实现防病毒的方法
US7263468B2 (en) Method for storing access record in network communication device
CN101470780A (zh) 移动存储设备的防病毒系统
WO2013024702A1 (fr) Dispositif de stockage externe et procédé de commande de dispositif de stockage externe
US7590813B1 (en) Cache scanning system and method
JP2001109665A (ja) 記録媒体およびデータの記録読出プログラムを記録した記録媒体
CN101470672B (zh) 防计算机病毒的移动存储设备
KR970071693A (ko) 컴퓨터바이러스 방지를 위한 자기디스크 기록장치의 바이러스 백업프로그램을 자기디스크에 기록하는 방법
TW201025064A (en) Interface transformation device capable of enhance information security in a computer system
TWI446206B (zh) 防病毒裝置和方法

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08866197

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 08866197

Country of ref document: EP

Kind code of ref document: A1