WO2016070537A1

WO2016070537A1 - Disk validity detection method, authentication method and related device

Info

Publication number: WO2016070537A1
Application number: PCT/CN2015/074029
Authority: WO
Inventors: 郭伟
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-11-04
Filing date: 2015-03-11
Publication date: 2016-05-12
Also published as: CN105631304A

Abstract

A disk validity detection method, applied to a computer system, the method comprising: calculating a disk authentication code according to disk serial number information and disk volume information; acquiring disk authentication information; matching the authentication information with the disk authentication code, and determining the validity of the disk according to a matching result. The invention assigns a disk authentication code to a reliable disk authenticated by a computer storage system manufacturer and, when running, the computer storage system can recognize via the disk authentication code whether the disk has been authenticated by the computer storage system manufacturer, thus improving safety and reliability.

Description

Disk validity detecting method, authentication method and corresponding device

Technical field

The present invention relates to the field of computer storage, and in particular to a method for detecting validity of a disk, an authentication method, and a corresponding device.

Background technique

The computer storage system products currently on the market are compatible with the disk interface type that the product cabinet (box) is adapted to, and in principle, any disk can be used. However, in practical applications, considering the overall performance and reliability of the product, as well as the large loss of computer storage system products from the disk, the disk will be based on different indicators to meet the corresponding quality requirements, and the computer storage system is shipped from the factory. The disk is "marked" and the device also does not allow the insertion of a "tag" disk. The hard disk required on many computer storage systems is a highly reliable hard disk. If the user purchases an ordinary hard disk, the anti-vibration performance and high temperature resistance are poor, which may cause frequent links to the link and even drop the disk. In addition, even if the user uses a self-purchased high-reliability hard disk, if the model and the firmware are not compatible with the SAS (Serial Attached SCSI) link parameters configured by the computer storage system itself, A lot of errors and other issues. Therefore, the reliability of the computer storage system product to detect the disk before using the disk is of great significance in the actual work of the computer storage system product.

Summary of the invention

The embodiment of the invention provides a method for detecting the validity of a disk, an authentication method and a corresponding device, so as to determine whether the computer storage system is verified by the computer storage system during operation, and provides security and reliability.

In order to solve the above technical problem, an embodiment of the present invention provides a method for detecting validity of a disk, which is applied to a computer system, and the method includes:

Calculate the disk authentication code according to the disk serial number information and the disk capacity information;

Obtaining the authentication information stored by the disk;

Matching the authentication information and the disk authentication code, and determining the validity of the disk according to the matching result.

Optionally, the authentication information includes first authentication information and second authentication information;

The first authentication information is stored in a first authentication code storage area of the disk, and the second authentication information is stored in a second authentication code storage area of the disk.

Optionally, the authentication information is matched with the disk authentication code, and determining the validity of the disk according to the matching result includes:

When one of the first authentication information and the second authentication information is legal, the authentication code to be verified is obtained from the legal authentication information;

If the authentication code to be verified matches the disk authentication code, the disk is considered to be valid, and the disk authentication code is copied to a storage area of the illegal authentication information of the disk; if the authentication code to be verified is If the disk authentication code does not match, the disk is considered invalid.

When the first authentication information and the second authentication information are both valid, the first to-be-verified authentication code is obtained from the first authentication information, and the second to-be-verified authentication code is obtained from the second authentication information. ;

If the first to-be-verified authentication code and the second to-be-verified authentication code both match the disk authentication code, the disk is considered to be valid; if the first to-be-verified authentication code and the second to-be-verified If one of the authentication codes matches the disk authentication code, the disk is considered to be valid, and the disk authentication code is copied to a storage area of the disk that does not match the authentication information; if the first to-be-verified authentication is performed If the code and the second to-be-verified authentication code do not match the disk authentication code, the disk is considered invalid.

Optionally, calculating the disk authentication code according to the disk serial number information and the disk capacity information includes:

Generating the disk serial number and the disk capacity by using the information-digest algorithm MD5 to generate a disk authentication code;

The disk authentication code = MD5 (MD5 (serial number of the disk) + MD5 (disk capacity)).

The embodiment of the invention further provides a method for authenticating a disk, which is applied to a computer system, the party The law includes:

Obtain disk serial number information and disk capacity information;

Generating a disk authentication code according to the disk serial number information and the disk capacity information;

The disk authentication code is stored in an authentication code storage area of the disk.

Optionally, generating the disk authentication code according to the disk serial number information and the disk capacity information includes:

Optionally, storing the disk authentication code in the authentication code storage area of the disk includes:

The authentication code storage area includes a first authentication code storage area and a second authentication code storage area;

The disk authentication code is simultaneously stored in the first authentication code storage area and the second authentication code storage area.

The embodiment of the invention further provides a device for detecting the validity of a disk, which is applied to a computer system, and the device comprises:

a calculation module configured to calculate a disk authentication code according to the disk serial number information and the disk capacity information;

a search module, configured to obtain authentication information stored by the disk;

The determining module is configured to match the authentication information and the disk authentication code, and determine the validity of the disk according to the matching result.

Optionally, the judging module is set to:

If the first to-be-verified authentication code and the second to-be-verified authentication code both match the disk authentication code, the disk is considered to be valid; if the first to-be-verified authentication code and the second to-be-verified If one of the authentication codes matches the disk authentication code, the disk is considered to be valid, and the disk authentication code is copied to a storage area of the unmatched authentication information; if the first to-be-verified authentication code and the If the second to-be-verified authentication code does not match the disk authentication code, the disk is considered invalid.

Optionally, the computing module is configured to:

The embodiment of the invention further provides a disk authentication device, which is applied to a computer system, and the device includes:

An information acquisition module, configured to obtain disk serial number information and disk capacity information;

a calculating module, configured to generate a disk authentication code according to the disk serial number information and the disk capacity information;

And a storage module configured to store the disk authentication code in an authentication code storage area of the disk.

Optionally, the computing module is configured to:

Optionally, the storage module is configured to:

And storing the disk authentication code in the first authentication code storage area and the second authentication code storage area of the authentication code storage area of the disk.

The embodiment of the present invention further provides a computer readable storage medium, where the storage medium stores a computer program, the computer program includes program instructions, when the program instruction is executed by the computer system device, enabling the device to execute the above-mentioned disk effective Sexual detection method.

The embodiment of the present invention further provides a computer readable storage medium, where the storage medium stores a computer program, the computer program includes program instructions, when the program instruction is executed by the computer system device, enabling the device to execute the disk. Authentication method.

The above solution adds a disk authentication code to a reliable disk that has passed the certification of the computer storage system manufacturer. The computer storage system can identify whether the disk is verified by the computer storage system manufacturer through the disk authentication code during operation, and prohibits the use of the computer storage system without passing through the computer storage system. Vendor-verified unreliable disks provide security and reliability.

BRIEF abstract

1 is a schematic structural diagram of a computer system according to Embodiment 1 of the present invention;

2 is a flowchart of a method for detecting validity of a disk in Embodiment 1 of the present invention;

3 is a flowchart of a method for disk authentication in Embodiment 1 of the present invention;

4 is a schematic structural diagram of a device for detecting validity of a disk according to Embodiment 1 of the present invention;

FIG. 5 is a schematic structural diagram of an apparatus for disk authentication according to Embodiment 1 of the present invention; FIG.

6 is another flowchart of a method for disk authentication in Embodiment 2 of the present invention;

7 is a schematic diagram of storage of a disk authentication code in Embodiment 2 of the present invention;

FIG. 8 is another flow chart of a method for detecting validity of a disk in Embodiment 3 of the present invention.

Preferred embodiment of the invention

Embodiments of the present application will be described in detail below with reference to the accompanying drawings. It should be noted that In the case of no conflict, the embodiments in the present application and the features in the embodiments may be arbitrarily combined with each other.

Embodiment 1

The invention provides a method for detecting the validity of a disk and an authentication method applied to a computer system. FIG. 1 is a schematic structural diagram of a computer system including: a disk, a disk drive unit, a disk management unit, a disk intelligent detection unit, a RAID (Redundant Arrays of independent Disks) controller unit, and a NAS. (Network Attached Storage) controller unit, SAN (Storage Area Network) controller unit, and magnetic array controller unit.

The disk is a physical disk that is installed on the storage system as a physical storage medium when the user uses the storage system device, such as a normal hard disk or a solid state disk (SSD).

Disk drive unit, after the disk is connected to the computer storage system, the system needs to control the physical disk and read and write data through the disk drive unit.

The disk management unit abstracts the interface provided by the disk drive unit into a storage interface of the computer storage system, that is, a logical disk, and manages the interaction between the storage system and the physical disk.

The disk intelligent detection unit performs intelligent detection processing after obtaining physical disk information from the disk management unit, identifies whether the disk is a legitimate disk, and notifies the disk management unit.

The RAID controller unit is further organized into a RAID disk array by the logical disk provided by the disk management unit, and the RAID array abstraction is provided to the upper layer application for one logical volume.

The NAS controller unit manages logical volumes in the form of a local file system and provides NFS (Network File System), CIFS (Common Internet File System), and FTP (File Transfer Protocol). Protocol) and other file service functions.

The SAN controller unit divides the logical volume re-management into a logical disk to provide data storage services to the FC (Fibre Channel, Network Channel) or ISCSI (Internet Small Computer System Interface) protocol.

The magnetic array control unit provides the logical volume to the external client in the form of a logical disk through the SAS or SATA (Serial Advanced Technology Attachment) interface.

As shown in FIG. 2, the present invention provides a method for detecting the validity of a disk, which is applied to a computer system, and the method includes:

Step S101: Calculate a disk authentication code according to the disk serial number information and the disk capacity information;

Specifically, the following calculation methods can be adopted:

The disk serial number and the disk capacity are generated by the information-summary algorithm MD5 to generate a disk authentication code; the disk authentication code=MD5 (MD5 (disk serial number) + MD5 (disk capacity)).

The computer system manufacturer can verify the validity of the disk. The verification method can set the disk authentication code to the disk, and encapsulate the disk authentication code into a certain data format and store it in the storage area of the disk.

Step S102: Acquire authentication information stored on the disk.

The authentication information may include first authentication information and second authentication information; the first authentication information is stored in a first authentication code storage area of the disk, and the second authentication information is stored in a second authentication code storage area of the disk.

Step S103: Match the authentication information and the disk authentication code, and determine the validity of the disk according to the matching result.

Specifically includes the following:

When one of the first authentication information and the second authentication information is legal, the authentication code to be verified is obtained from the legal authentication information; if the verification authentication code matches the disk authentication code, the disk is considered to be valid. And copying the disk authentication code to the storage area of the illegal authentication information; if the verification authentication code does not match the disk authentication code, the disk is considered invalid.

When the first authentication information and the second authentication information are both valid, the first to-be-verified authentication code is obtained from the first authentication information, and the second to-be-verified authentication code is obtained from the second authentication information; If the second to-be-verified authentication code matches the disk authentication code, the disk is considered to be valid; if one of the first to-be-verified authentication code and the second to-be-verified authentication code matches the disk authentication code, the disk is considered to be valid, and Copying the disk authentication code to the storage area of the unmatched authentication information; if the first to-be-verified authentication code and the second to-be-verified authentication code both do not match the disk authentication code, the disk is considered invalid.

As shown in FIG. 3, the present invention further provides a method for authenticating a magnetic disk, which is applied to a computer system, and the method includes:

Step S111: Acquire disk serial number information and disk capacity information;

Step S112: Generate a disk authentication code according to the disk serial number information and the disk capacity information.

Specifically include:

Step S113: Store the disk authentication code in an authentication code storage area of the disk.

Storing the disk authentication code in the authentication code storage area of the disk includes:

The authentication code storage area may include a first authentication code storage area and a second authentication code storage area; the disk authentication code is simultaneously stored in the first authentication code storage area and the second authentication code storage area. The purpose of setting two authentication code storage areas is to prevent the correction from being verified by another location after one location is destroyed. Of course, in other embodiments, the number of authentication code storage areas may be set to one or two or more.

Computer storage system manufacturers can certify their computer storage system products. For reliable disk computer storage system manufacturers that have passed vendor verification, the certification mark can be set. The computer storage system can automatically detect disk reliability by detecting the set authentication mark.

As shown in FIG. 4, the present invention further provides a device for detecting the validity of a disk, which is applied to a computer system, the device comprising a processor and a program storage device, and further comprising:

The calculating module 11 is adapted to calculate a disk authentication code according to the disk serial number information and the disk capacity information;

The searching module 12 is adapted to obtain the authentication information stored by the disk.

The determining module 13 is adapted to match the authentication information and the disk authentication code according to The matching result determines the validity of the disk.

Preferably,

The authentication information includes first authentication information and second authentication information;

Preferably,

The determining module 13 is adapted to match the authentication information and the disk authentication code, and determining, according to the matching result, the validity of the disk is:

If the verification authentication code matches the disk authentication code, the disk is considered to be valid, and the disk authentication code is copied to a storage area of the illegal authentication information; if the verification authentication code does not match the disk authentication code, The disk is considered invalid.

Preferably,

The calculating module 11 is adapted to calculate a disk according to the disk serial number information and the disk capacity information. The authentication code means:

As shown in FIG. 5, the present invention further provides a disk authentication device, which is applied to a computer system, the device includes a processor and a program storage device, and further includes:

The information obtaining module 21 is adapted to obtain the disk serial number information and the disk capacity information;

The calculating module 22 is adapted to generate a disk authentication code according to the disk serial number information and the disk capacity information;

The storage module 23 is adapted to store the disk authentication code in an authentication code storage area of the disk.

Preferably,

The calculating module is adapted to generate a disk authentication code according to the disk serial number information and the disk capacity information:

Preferably,

The storing module is adapted to store the disk authentication code in the authentication code storage area of the disk, where:

Embodiment 2

The technical solutions of the present invention are further elaborated below in conjunction with the accompanying drawings and specific embodiments.

FIG. 6 is a schematic diagram of a disk authentication method according to an embodiment of the present invention. As shown in FIG. 6, the method includes four steps of reading a disk serial number and capacity information, calculating a disk authentication code, storing an authentication code, and feeding back a disk marking result. .

Step 201: The system obtains the serial number and disk capacity of the verified disk through the software, and provides necessary parameters for generating the authentication code subsequently. If the serial number or the disk capacity fails, the system fails to mark the authentication disk.

Step 202: On the basis of obtaining the serial number and capacity of the disk in step 201, the serial number and the capacity are combined to generate an authentication code, and the serial number and the disk capacity generation authentication code algorithm are implemented by using the MD5 encryption algorithm:

For example, obtain the disk serial number: A=6SJ7B33F0000N4054THU;

The disk capacity is 2000398934016bytes and B=2000398934016;

X=MD5(A)+MD5(B);

Authentication code = MD5 (X);

According to the above disk serial number and capacity value, an authentication code can be calculated: BD2D991D38CCAFE5630B7FEB87A1AAC0. If the authentication code fails to be generated, the feedback error ends marking the disk.

Step 203, the authentication code generated in step 202 is encapsulated into a fixed data format, and respectively written into two fixed areas of the disk as the primary and backup information, so as to prevent the correction from being corrected after another place is destroyed, the specific structural form As shown in Figure 7.

Step 204: Check data of two spaces of the disk set as the authentication information storage area, and check whether the written data is correct. If the disk tag is successfully prompted to be successful, the disk is flagged with an error message if it fails.

Embodiment 3

FIG. 8 is a schematic diagram of a method for detecting validity of a disk according to an embodiment of the present invention, which specifically includes:

Step 301, obtaining a disk serial number and a disk capacity, by using the algorithm described in step 202. Calculate the disk authentication code of the disk to be authenticated;

Step 302: Read the authentication information of the two areas fixed by the disk as shown in FIG. 7, and check whether the format of the obtained two sets of authentication information is legal.

Step 303: If only one set of the obtained two sets of authentication information is legal, only the authentication code is extracted from the legal set of data (step 305 if all are legal), and the extracted authentication code and the disk authentication code obtained in step 401 are obtained. Make a match. If the match fails, the computer storage system is notified that the disk is illegal for use.

Step 304: If the authentication code extracted in step 303 matches the disk authentication code, copy the disk authentication code or the legal group of authentication information to another area on the disk where the illegal authentication information is stored, and notify the system of the disk. Is an authentication disk that can be used.

Step 305: If the format of the two sets of authentication information obtained in step 302 is legal, check whether the two sets of authentication information obtained from the two areas are consistent.

Step 306, if step 305 checks that the two sets of authentication information are consistent (if not, proceed to step 307), and extract the authentication code from any of the group of authentication information. The extracted authentication code is matched with the disk authentication code obtained in step 301. If the authentication code matches correctly, notify the computer storage system that the disk is a vendor-certified authentication disk. Otherwise, notify the computer storage system that the disk is forbidden to use the illegal disk that has not been verified by the manufacturer.

Step 307: Extract two authentication codes from the two sets of authentication information, and match the two authentication codes with the disk authentication code obtained in step 301. If both authentication codes fail to match, the computer storage system is notified that the disk is not used by the manufacturer.

Step 308, if one of the two authentication codes matches correctly, copy the correct verification code or the authentication information that is extracted with the matching authentication code into another area where the error authentication information is stored, and then notify the computer storage system that the disk is A reliable disk that has been tested by the manufacturer can be used.

It should be noted that, in other embodiments, the foregoing execution steps are not limited, and it is also possible to detect whether the disk authentication code has an effect according to other execution orders.

The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Where in the spirit of the present invention Any modifications, equivalent substitutions, improvements, etc. made within the scope of the present invention are intended to be included within the scope of the present invention. One of ordinary skill in the art will appreciate that all or a portion of the steps described above can be accomplished by a program that instructs the associated hardware, such as a read-only memory, a magnetic or optical disk, and the like. Optionally, all or part of the steps of the foregoing embodiments may also be implemented by using one or more integrated circuits. Accordingly, each module/module in the foregoing embodiment may be implemented in the form of hardware, or may be implemented by using a software function module. Formal realization. This application is not limited to any specific combination of hardware and software.

Industrial applicability

The technical solution provided by the embodiment of the present invention adds a disk authentication code to a reliable disk that has passed the certification of the computer storage system manufacturer. The computer storage system can identify whether the disk is verified by the computer storage system manufacturer through the disk authentication code during operation, and provides security. And reliability.

Claims

A method for detecting disk validity is applied to a computer system, the method comprising:

Calculate the disk authentication code according to the disk serial number information and the disk capacity information;

Obtaining the authentication information stored by the disk;

Matching the authentication information and the disk authentication code, and determining the validity of the disk according to the matching result.
The method of claim 1 wherein:

The authentication information includes first authentication information and second authentication information;

The first authentication information is stored in a first authentication code storage area of the disk, and the second authentication information is stored in a second authentication code storage area of the disk.
The method of claim 2 wherein:

Matching the authentication information with the disk authentication code, and determining, according to the matching result, the validity of the disk includes:

When the one of the first authentication information and the second authentication information is legal, the authentication code to be verified is obtained from the legal authentication information;

If the authentication code to be verified matches the disk authentication code, the disk is considered to be valid, and the disk authentication code is copied to a storage area of the illegal authentication information of the disk; if the authentication code to be verified is If the disk authentication code does not match, the disk is considered invalid.
The method of claim 2 wherein:

Matching the authentication information with the disk authentication code, and determining, according to the matching result, the validity of the disk includes:

When the first authentication information and the second authentication information are both valid, the first to-be-verified authentication code is obtained from the first authentication information, and the second to-be-verified authentication code is obtained from the second authentication information. ;

If the first to-be-verified authentication code and the second to-be-verified authentication code both match the disk authentication code, the disk is considered to be valid; if the first to-be-verified authentication code and the second to-be-verified If one of the authentication codes matches the disk authentication code, the disk is considered to be valid, and the magnetic The disc authentication code is copied to the storage area of the mismatched authentication information of the disk; if the first to-be-verified authentication code and the second to-be-verified authentication code both do not match the disk authentication code, the The disk is invalid.
A method as claimed in any one of claims 1 to 4 wherein:

Calculating the disk authentication code based on the disk serial number information and the disk capacity information includes:

Generating the disk serial number and the disk capacity by using the information-digest algorithm MD5 to generate a disk authentication code;

The disk authentication code = MD5 (MD5 (serial number of the disk) + MD5 (disk capacity)).
A disk authentication method is applied to a computer system, the method comprising:

Obtain disk serial number information and disk capacity information;

Generating a disk authentication code according to the disk serial number information and the disk capacity information;

The disk authentication code is stored in an authentication code storage area of the disk.
The method of claim 6 wherein:

Generating the disk authentication code according to the disk serial number information and the disk capacity information includes:

Generating the disk serial number and the disk capacity by using the information-digest algorithm MD5 to generate a disk authentication code;

The disk authentication code = MD5 (MD5 (serial number of the disk) + MD5 (disk capacity)).
A method according to any one of claims 6 to 7, wherein:

Storing the disk authentication code in the authentication code storage area of the disk includes:

The authentication code storage area includes a first authentication code storage area and a second authentication code storage area;

The disk authentication code is simultaneously stored in the first authentication code storage area and the second authentication code storage area.
A disk validity detecting device is applied to a computer system, the device comprising:

a calculation module configured to calculate a disk authentication code according to the disk serial number information and the disk capacity information;

a search module, configured to obtain authentication information stored by the disk;

The determining module is configured to match the authentication information and the disk authentication code, and determine the validity of the disk according to the matching result.
The apparatus of claim 9 wherein:

The authentication information includes first authentication information and second authentication information;

The first authentication information is stored in a first authentication code storage area of the disk, and the second authentication information is stored in a second authentication code storage area of the disk.
The apparatus of claim 10 wherein:

The judgment module is set to:

When the one of the first authentication information and the second authentication information is legal, the authentication code to be verified is obtained from the legal authentication information;

If the authentication code to be verified matches the disk authentication code, the disk is considered to be valid, and the disk authentication code is copied to a storage area of the illegal authentication information of the disk; if the authentication code to be verified is If the disk authentication code does not match, the disk is considered invalid.
The apparatus of claim 10 wherein:

The judgment module is set to:

When the first authentication information and the second authentication information are both valid, the first to-be-verified authentication code is obtained from the first authentication information, and the second to-be-verified authentication code is obtained from the second authentication information;

If the first to-be-verified authentication code and the second to-be-verified authentication code both match the disk authentication code, the disk is considered to be valid; if the first to-be-verified authentication code and the second to-be-verified If one of the authentication codes matches the disk authentication code, the disk is considered to be valid, and the disk authentication code is copied to a storage area of the unmatched authentication information; if the first to-be-verified authentication code and the If the second to-be-verified authentication code does not match the disk authentication code, the disk is considered invalid.
A device according to any of claims 9 to 12, wherein:

The calculation module is set to:

And generating the disk serial number and the disk capacity by using the information-digest algorithm MD5 Certificate code

The disk authentication code = MD5 (MD5 (serial number of the disk) + MD5 (disk capacity)).
A disk authentication device is applied to a computer system, the device comprising:

An information acquisition module, configured to obtain disk serial number information and disk capacity information;

a calculating module, configured to generate a disk authentication code according to the disk serial number information and the disk capacity information;

And a storage module configured to store the disk authentication code in an authentication code storage area of the disk.
The apparatus of claim 14 wherein:

The calculation module is set to:

Generating the disk serial number and the disk capacity by using the information-digest algorithm MD5 to generate a disk authentication code;

The disk authentication code = MD5 (MD5 (serial number of the disk) + MD5 (disk capacity)).
A device according to any of claims 14 to 15, wherein:

The storage module is set to:

And storing the disk authentication code in the first authentication code storage area and the second authentication code storage area of the authentication code storage area of the disk.
A computer readable storage medium storing a computer program, the computer program comprising program instructions, when executed by a computer system device, causing the device to perform the method of any of claims 1-5 .
A computer readable storage medium storing a computer program, the computer program comprising program instructions, when executed by a computer system device, causing the device to perform the method of any one of claims 6-8 .