WO2011124148A1

WO2011124148A1 - Flash data protection method and apparatus thereof

Info

Publication number: WO2011124148A1
Application number: PCT/CN2011/072537
Authority: WO
Inventors: 王文宜
Original assignee: 华为终端有限公司
Priority date: 2010-04-08
Filing date: 2011-04-08
Publication date: 2011-10-13
Also published as: CN101799858A

Abstract

A FLASH data protection method and an apparatus thereof are disclosed, relating to the field of information security. The method mainly involves: receiving an application for operating a FLASH from an application program, wherein the application includes operation contents of the application, operation limits of the application and the FLASH target addresses corresponding to the operation of the application (101); reading authentication information corresponding to the FLASH target addresses, and determining whether the operation limits of the application satisfy the requirements of the authentication information (102); if they do, permitting the application program to carry out the operation contents of the application at the FLASH target addresses (103). The solutions are mainly used to protect data security, and resolve the problem in the prior art that the security is low while a FLASH is being operated.

Description

FLASH data protection method and device The present application claims to be filed on April 8, 2010, the Chinese Patent Office, the application number is CN 201010141963. 5, the Chinese patent application entitled "FLASH data protection method and device" priority, all The content is incorporated herein by reference. TECHNICAL FIELD The present invention relates to the field of information security, and in particular, to a method, device, and system for protecting data in FLASH. BACKGROUND OF THE INVENTION NAND flash memory (NAND FLASH), ONE NAND FLASH, etc. are currently a popular FLASH format. They are all composed of blocks (BLOCK), which have the advantages of fast access speed and short erase time. Take a model of NAND FLASH as an example: The NAND FLASH has 1024 BLOCKs, each BLOCK has 64 pages, and each page has 2048 bytes and some free areas. All operations on the NAND flash are performed by manipulating the page, that is, reading and writing to it is performed on a page-by-page basis. So the NAND FLASH capacity is 1024 X 64 X 2048 = 128 Mbyte. Among them, the free area on each page is usually used for error correction code (ECC), wear leveling and other functions.

In the process of using FLASH to store data in these formats, the inventors found that at least the following problems exist in the prior art: After storing data into the FLASH, the application can arbitrarily read, modify, and erase data in any position in the FLASH. Therefore, the data is easily modified by mistakes, especially the technical problems such as data being maliciously modified and stolen by hackers. Summary of the invention

Embodiments of the present invention provide a FLASH data protection method and apparatus to improve the security of FLASH stored data. In order to achieve the above object, the embodiment of the present invention adopts the following technical solutions:

A FLASH data protection method includes:

Receiving an operation request of the application for the FLASH, where the operation request includes an operation content of the application, an operation authority of the application, and a FLASH target address corresponding to the operation of the application;

Reading the authentication information corresponding to the FLASH target address, and determining whether the operation authority of the application satisfies the requirement of the authentication information; If so, the application is allowed to execute the operational content of the application at the FLASH target address. A FLASH data protection device includes:

a receiving unit, configured to receive an operation request of the application for the FLASH, where the operation request includes an operation content of the application, an operation authority of the application, and a FLASH target address corresponding to the operation of the application;

An authentication unit, configured to read authentication information corresponding to the FLASH target address, and determine whether the operation authority of the application satisfies the requirement of the authentication information;

And an execution unit, configured to allow the application to execute the operation content of the application at the FLASH target address if the result representation of the authentication unit is satisfied.

The solution provided by the embodiment of the present invention has the following beneficial effects: The application can perform the operation content of the application in the FLASH after satisfying the requirements of the authentication information, thereby reducing the possibility of data being modified by mistake, and preventing the data from being maliciously modified by the hacker. Stealing, improving the security of FLASH storage data. BRIEF DESCRIPTION OF THE DRAWINGS In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings to be used in the embodiments or the description of the prior art will be briefly described below, and obviously, in the following description The drawings are only some of the embodiments of the present invention, and other drawings may be obtained from those skilled in the art without departing from the drawings.

1 is a schematic flowchart of a FLASH data protection method according to Embodiment 1 of the present invention;

2 is a schematic diagram of an implementation manner for determining whether an operation authority of an application satisfies an authentication information requirement according to Embodiment 1 of the present invention;

3 is a schematic diagram of application of NAND FLASH hardware in Embodiment 1 of the present invention;

4 is a schematic diagram of another implementation manner of determining whether an operation authority of an application satisfies an authentication information requirement according to Embodiment 1 of the present invention;

FIG. 5 is a schematic structural diagram of a FLASH data protection apparatus according to Embodiment 2 of the present invention; FIG.

FIG. 6 is a schematic structural diagram of a FLASH data protection apparatus according to Embodiment 2 of the present invention. The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of them. Example. Based on the embodiments of the present invention, those obtained by those of ordinary skill in the art without creative efforts Other embodiments are within the scope of the invention. Moreover, the following embodiments are all optional of the present invention, and the order of the embodiments and the number of the embodiments are independent of the preferred execution order. Example 1

This embodiment provides a FLASH data protection method. As shown in FIG. 1, the method mainly includes:

101. The operating system receives an operation request of the application for the FLASH, where the application includes an operation content of the application, an operation permission of the application, and a FLASH target address corresponding to the operation of the application;

Specifically, the 101 may be: the operating system receives an operation request of the application 1 for the FLASH, and the operation request includes: applying for a write operation, operating permission when applying for a write operation, and a FLASH target address written by the write operation .

In addition, after the present embodiment, the method may further include: the operating system determining whether the operation authority of the application meets the permission requirement of the application 1; wherein the permission requirement of the application 1 is: the application 1 If the operation authority of the application satisfies the operation permission requirement of the application 1, the following 102 is further performed; if the operation authority of the application does not satisfy the operation permission requirement of the application 1, the operation is returned. Failure information.

It should be noted that, in the embodiment, the application 1 is preset with a corresponding operation permission range. The scope of the operation authority can be set by the user, or the operator can set the default scope of operation authority for the application 1. In addition, in the prior art, some applications have been set with a range of operation rights. Therefore, the specific setting method in this embodiment may also refer to the prior art, and details are not described herein.

For example: the FLASH driver of the operating system determines whether the operation permission of the application 1 to perform the write operation is within the scope of the operation authority set by the application 1 (in the embodiment, the operation permission range of the application 1 is read, write, Execution), since the operation authority of the write operation requested by the application 1 is within the operation authority set by the application 1, the FLASH driver determines that the application 1 can continue to execute the following 102.

102. Read the authentication information corresponding to the FLASH target address, and determine whether the operation authority of the application satisfies the requirement of the authentication information; if yes, execute 103; otherwise, execute 104.

This step 102 can specifically have the following two implementations:

The first implementation: in the case where the authentication information is an operation authority. This first implementation will be described in conjunction with Figure 2. As can be seen from the illustration in FIG. 2, in the FLASH (the FLASH address table sets the address in the page of the FLASH addressing, that is, each page corresponds to one address), the data area corresponding to the corresponding FLASH address is added. Operation permission, SP: Each address corresponds to the operation permission of a data area. Therefore, an application that wants to execute the operation content of the application at a certain address needs to execute the operation content of the application at the address only if the operation authority range of the application is smaller than the operation authority of the data area at the address. It should be noted that: FIG. 2 is only used to indicate that each address corresponds to an operation right set with a data area, and the operation authority is not stored in the FLASH address table. Actually, since FLASH has a spare area in each page, Therefore, the operation authority of the data area added in this embodiment may be stored in the spare area of the corresponding page. For example: When the FLASH is NAND FLASH hardware, and the FLASH specification is 512 bytes per page, 16 bytes of which are reserved, the operation authority of the data area can be stored by using the ΒΥΠ 1-ΒΥΠ5 part as shown in FIG. 3 . Therefore, in this implementation manner, the operation authority of the data area may be set in advance for the spare area corresponding to each address in the FLASH address table, and the setting may be completed by the user, or may be set by the operator at the factory. level.

Correspondingly, the specific execution manner of the current mode 102 includes: determining whether the operation authority of the application is within the operation authority of the data area; if the operation authority of the application is within the operation authority of the data area, The operation authority of the application satisfies the requirement of the authentication information, and executes 103; if the operation authority of the application is not within the operation authority of the data area, the operation authority of the application does not satisfy the authentication The request for information is turned to 104 for execution. For example: setting the operation right of the data area corresponding to the FLASH target address is read and execute, and the application 1 carries the operation authority for requesting the write operation; the FLASH driver determines that the operation authority of the write operation of the application is not corresponding to the FLASH target address of the application. Within the scope of the operating rights of the data area, therefore, the application 1 does not satisfy the requirements of the operating authority of the data area, and thus executes 104.

The second implementation manner is when the authentication information is a hardware password of a data area corresponding to the FLASH target address. This second implementation will be described in conjunction with FIG. It can be seen from FIG. 4 that a hard disk password corresponding to different FLASH address blocks is added to the FLASH, and SP: each address block is correspondingly provided with a hard disk password (in the FLASH partition table, the address is recorded in units of BLOCK). , that is, each BLOCK is recorded as an address, and each address ultimately corresponds to a page). Therefore, an application that wants to execute the operation content of the application at a certain address can execute the application in the address block only if the operation password input by the user who initiated the application matches the hardware password of the address block. The content of the operation. Among them, it should be said that: Figure 4 is only used to indicate the operation permission of each address corresponding to the data area. In fact, the operation authority is not stored in the FLASH partition table, because FLASH has a spare area in each page. Therefore, the hard disk password added in this embodiment can be stored in the spare area of the corresponding page of the address block. For example: When the FLASH is NAND FLASH hardware, and the FLASH specification is 512 bytes per page, 16 bytes of which are reserved, the hard disk password can also be stored by using the ΒΥΠ 1-ΒΥΠ5 part as shown in FIG. 3 . Therefore, in this implementation manner, a hard disk password may be set corresponding to at least one address block in the FLASH partition table, and the setting may be completed by the user, or the default hard disk password may be set by the operator at the factory. code.

Correspondingly, the specific execution manner of the method includes: starting a password input procedure, and determining, after the user inputs the operation password according to the prompt, whether the operation password is consistent with the hardware password; if the operation password is consistent with the hardware password, The operation authority of the application satisfies the requirement of the authentication information, and executes 103; if the operation password is inconsistent with the hardware password, the operation authority of the application does not satisfy the requirement of the authentication information, and turns to 104 execution. For example: When the user runs the application 1 to perform a read operation to the FLASH, the FLASH driver initiates an instruction to input an operation password, and the user can input an operation password according to the instruction; after receiving the input password, the FLASH driver compares the input. Whether the operation password is consistent with the hard disk password corresponding to the FLASH target address block; if the two are consistent, the content representing the user having the right to perform the write operation in the target address block continues 103; otherwise, the user authority is insufficient , turn to 104 to execute.

In addition, since the above-mentioned authentication information stored in the spare area can be set and updated by the user according to the needs of the user, the security of the FLASH data information can be improved.

103. Allow the application to execute the operation content of the application at the FLASH target address.

The operational content of the application may include: one or a combination of one of read, write, delete, and execute. 104, return information that the operation failed.

The method provided in this embodiment has the following beneficial effects: the application applying for the operation can write the operation content of the application to the FLASH target address by means of the operation authority provided by the user or the operation password of the user, thereby ensuring data security stored in the FLASH, and After the data is stored in the FLASH, the application still needs to read, modify and erase the data in the corresponding position in the FLASH by virtue of the operation authority or operation password held, which can reduce the possibility of data being modified by mistake and prevent data. It is maliciously modified and stolen by hackers, which improves the security of FLASH storage data. Moreover, the existing backup area is used to store the added authentication information, and no additional code is needed for security verification, so as to ensure security. At the same time, the complexity of the implementation is reduced. Example 2

The embodiment provides a FLASH data protection device. As shown in FIG. 5, the device includes: a receiving unit 51, an authentication unit 52, and an executing unit 53.

The receiving unit 51 is configured to receive an operation request of the application for the FLASH, where the operation request includes an operation content of the application, an operation authority of the application, and a FLASH target address corresponding to the operation of the application; and an authentication unit 52, configured to read the The authentication information corresponding to the FLASH target address, and determining whether the operation authority of the application satisfies the requirement of the authentication information; the executing unit 53 is configured to: if the judgment result of the authentication unit 52 is that the authentication information is satisfied Requiring, the application is allowed to execute the operation content of the application at the FLASH target address.

The authentication information may be an operation permission of a data area corresponding to a FLASH target address, or may be

The hardware password of the data area corresponding to the FLASH target address, and when it is the latter, the operation authority is the operation password. Accordingly, as shown in FIG. 6, the authentication unit 52 includes:

The permission module 521 is configured to determine whether the operation authority of the application is within the operation authority of the data area; if the operation authority of the application is within the operation authority of the data area, the operation permission of the application Satisfying the requirement of the authentication information; if the operation authority of the application is not within the operation authority of the data area, the operation authority of the application does not satisfy the requirement of the authentication information; and/or

The cryptographic module 522 is configured to determine whether the operation password is consistent with the hardware password after inputting the operation password according to the prompt; if the operation password is consistent with the hardware password, the operation authority of the application satisfies the The request for the right information; if the operation password is inconsistent with the hardware password, the operation authority of the application does not satisfy the requirement of the authentication information.

In addition, as shown in FIG. 6, in the embodiment, the apparatus may further include the following optional units: a program authority unit.

54, storage unit 55.

The program authority unit 54 is configured to determine whether the operation authority of the application meets the permission requirement of the application; wherein, the permission requirement of the application is: the operation permission range provided by the application; If the permission meets the operation permission requirement of the application, the operation is further performed by the authentication unit; if the operation authority of the application does not satisfy the operation permission requirement of the application, the information that the operation fails is returned.

The storage unit 55 is configured to store the authentication information in a spare area corresponding to a page where the FLASH target address is located.

The device provided in this embodiment utilizes the spare area of the existing FLASH, and adopts the technical means of increasing the operation authority of the FLASH data area and the password judgment, so as to protect the FLASH from being mishandled and maliciously operated, without introducing other codes. In the case, the security of the FLASH storage data is improved.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is a better implementation. the way. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a readable storage medium, such as a floppy disk of a computer. , a hard disk or an optical disk, etc., including instructions for causing a device (which may be a mobile phone or the like) to perform the methods described in various embodiments of the present invention.

The above description is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. It is to be understood that those skilled in the art are susceptible to variations and substitutions within the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Claims

Rights request

A FLASH data protection method, comprising:

Reading the authentication information corresponding to the FLASH target address, and determining whether the operation authority of the application satisfies the requirement of the authentication information;

If the operation authority of the application satisfies the requirement of the authentication information, the application is allowed to execute the operation content of the application at the FLASH target address.

2. The method according to claim 1, wherein the determining whether the operation authority of the application satisfies the authentication information comprises:

When the authentication information is an operation authority of the data area corresponding to the FLASH target address, determining whether the operation authority of the application is within the operation authority of the data area; if the operation authority of the application is in the data area Within the scope of the operation authority, the operation authority of the application satisfies the requirement of the authentication information; if the operation authority of the application is not within the operation authority of the data area, the operation authority of the application does not satisfy the Describe the requirements for authentication information; or,

When the authentication information is a hardware password of a data area corresponding to the FLASH target address, the operation authority is an operation password, and after inputting the operation password according to the prompt, determining whether the operation password is consistent with the hardware password; If the operation password is consistent with the hardware password, the operation authority of the application satisfies the requirement of the authentication information; if the operation password is inconsistent with the hardware password, the operation authority of the application does not satisfy the The request for rights information.

The method according to claim 1, wherein before the reading the authentication information corresponding to the FLASH target address, the method further includes:

Determining whether the operation authority of the application meets the permission requirement of the application; wherein, the permission requirement of the application is: the operation permission range preset by the application;

If the operation permission of the application meets the operation permission requirement of the application, the authentication information corresponding to the FLASH target address is further read; if the operation permission of the application does not satisfy the operation permission requirement of the application, the return operation fails. Information.

4. The method according to claim 1, wherein the operation content of the application comprises: reading, writing, deleting or executing.

The method according to any one of claims 1 to 4, wherein the authentication information is stored in a spare area corresponding to a page where the FLASH target address is located.

6. The method of claim 5, wherein the authentication information can be set and updated by a user.

7. A FLASH data protection device, comprising:

And an execution unit, configured to allow the application to execute the operation content of the application at the FLASH target address if the authentication unit determines that the operation authority of the application satisfies the requirement of the authentication information.

The device according to claim 7, wherein the authentication information is an operation authority of a data area corresponding to a FLASH target address; the authentication unit includes:

The permission module is configured to determine whether the operation authority of the application is within the operation authority of the data area; if the operation authority of the application is within the operation authority of the data area, the operation authority of the application is satisfied The request for the authentication information; if the operation authority of the application is not within the operation authority of the data area, the operation authority of the application does not satisfy the requirement of the authentication information.

The device according to claim 7, wherein, when the authentication information is a hardware password of a data area corresponding to a FLASH target address, the operation authority is an operation password; and the authentication unit comprises:

a password module, configured to determine, after the operation password is input according to the prompt, whether the operation password is consistent with the hardware password; if the operation password is consistent with the hardware password, the operation authority of the application satisfies the authentication The requirement of the information; if the operation password is inconsistent with the hardware password, the operation authority of the application does not satisfy the requirement of the authentication information.

The device of claim 7, wherein the device further comprises:

a program authority unit, configured to determine whether the operation authority of the application meets the permission requirement of the application; wherein, the permission requirement of the application is: the operation permission range preset by the application; If the operation permission requirement of the application is satisfied, the operation is further performed by the authentication unit; if the operation authority of the application does not satisfy the operation permission requirement of the application, the information that the operation fails is returned.

The device according to any one of claims 7 to 10, further comprising: a storage unit, configured to store the authentication information in a spare area corresponding to a page where the FLASH target address is located Inside.

12. Apparatus according to any one of claims 7 to 10, characterized in that the apparatus is a mobile phone.