WO2018086171A1

WO2018086171A1 - Pcie interface-based solid-state hard disk security system and method

Info

Publication number: WO2018086171A1
Application number: PCT/CN2016/108179
Authority: WO
Inventors: 白琮
Original assignee: 苏州韦科韬信息技术有限公司
Priority date: 2016-11-10
Filing date: 2016-12-01
Publication date: 2018-05-17
Also published as: CN108073833A

Abstract

A PCIE interface-based solid-state hard disk security system and method, the system comprising an antenna (101), a GSM module (102), an MCU module (103), a PCIE/SATA protocol converter (105), a PCIE interface (104), power source modules (106, 109), SATA controllers (107, 110) and flash arrays (108, 111). After a solid-state hard disk storing important data is lost, operations such as erasing and locking can be performed on the data stored within the solid-state hard disk via a GSM network, thereby effectively ensuring the security of the confidential data stored on the solid-state hard disk by a user, and preventing the important data on the solid-state hard disk from being leaked and causing losses to the user.

Description

Solid state hard disk security system and method based on PCIE interface

[0001] The present invention relates to the field of solid state hard disk data security, and in particular, to a solid state hard disk confidentiality system and method based on a PCIE interface.

Background technique

[0002] Solid state disk (SSD) is a hard disk composed of a control unit and a solid state storage unit (FLASH chip). SSD has the advantages of high read/write performance, strong seismic resistance, and small power supply sales. Due to the above characteristics of SSDs, it is widely used in military, automotive, industrial control, video surveillance, network monitoring, power, medical, aviation and other fields. In these special areas, data security is an important measure.

technical problem

[0003] At present, effective prevention of data leakage in SSDs, while strengthening the anti-theft measures of computer hardware, mainly through the way of encrypting data to prevent the leakage of sensitive data. However, any encryption algorithm has its relative nature. On the basis of being able to completely acquire all the data in the hard disk, with the development of the cracking algorithm and technology, there is always a hidden danger of sensitive data leakage.

[0004] In order to improve the security of data stored in a solid state hard disk, a hard disk remote erasing security system and method are disclosed in the prior art, Chinese Patent Application No. 200910 221798.1. The system has a customer platform and a control execution platform, and the client terminal platform is composed of a customized USB flash drive and a user mobile phone; the control execution platform is composed of a GSM module and an FPGA module. The mobile terminal short message and the client terminal of the computer platform are set to turn on and off the hard disk anti-missing function and various parameters; the client terminal of the computer platform is stored in the customized U disk matched with the hard disk; various parameters are saved in the memory of the FPGA module. . The system adopts a remote anti-theft design based on GSM network, which is convenient for users to set the system and implement erasure, and has high flexibility. The implementation of this invention must be accompanied by a customized USB flash drive to achieve its use.

[0005] The above prior art only involves data erasure of a single disc, in the case of a solid state hard disk loss, only a method of erasing data to ensure data security. Then even if the solid state drive is lost, the user can't find it. Back erased data. The present invention will select whether to erase the SSD data, or to use the spare part of the hard disk, confuse the thief, or perform the above two methods to ensure the security of the data.

Problem solution

Technical solution

[0006] The present invention provides a solid state hard disk security system and method based on a PCIE interface. When a solid state hard disk storing important data is lost, the data stored in the solid state hard disk can be locked, erased, and erased through the GSM network. Lock operation ensures the security of confidential data stored by users on SSDs. Prevent important data leakage on the SSD and cause loss to the user.

[0007] The present invention provides a solid state hard disk security system and method based on a PCIE interface. The system consists of an antenna 101, a GS M module 102, an MCU module 103, a PCIE/SATA protocol converter 104, a PCIE interface 105, and a power module A106, 8 Eight controllers eight 107, Flash array A 108, power module B 109, SAT A controller B 11 0, and Flash array B 111.

[0008] The function of the antenna 101 module is that the receiving user's mobile phone sends the short message signal through the wireless base station and the transmitting GSM module 102 sends the short message signal.

The GSM module 102 is responsible for receiving and transmitting short messages. As we all know, CDMA2000 module, TD-CDM

The A module and the WCDMA module are also applicable to the present invention, and can also perform the function of receiving and transmitting information.

[0010] The MCU module 103 is a core module of the present invention, and is responsible for processing various operation instructions of the user, and transmitting an erasure signal and a lock signal according to the user instruction, so as to implement the locking function, the erasing function, and the erasing function of the present invention. Lock function.

[0011] Specifically, when the user sends a lock command, the MCU module 103 reads the lock command sent by the user from the GSM module 102, and the MCU module 103 sets the lock signal A to the disable state, and simultaneously sets the lock signal B. In order to enable the state, the SATA controller 107 and the flash array 108 powered by the power module A106 are in a power-off state. For the user, the data stored on the Flash array Ij l08 is invisible, instead, The SATA controller 110 and the flash array 111 powered by the power module A109 are in a power supply state. For the user, the data pre-stored on the flash array 111 is visible, thus ensuring the security of the confidential data; when the user sends the erasure The command 吋, the MCU module 103 reads from the GSM module 102 to the user. The erase command sent, the MCU module 103 maintains the lock signal A unchanged in the original enable state, the erase signal A is asserted, triggers the erase function of the SATA controller A 107, and the SATA controller A 107 executes the flash array 108. The erase operation cannot be restored to ensure the security of the data. Of course, the erase is unrecoverable. Even if the user retrieves the disk again, the data cannot be recovered. When the user sends the erase and relock command, the MCU The module 103 reads the erase relock command sent by the user from the GSM module 102, and the MCU module 103 maintains the lock signal A unchanged in the original enable state, and the erase signal A is asserted to trigger the erase function of the SATA controller A107. The SATA controller A107 will perform a non-recoverable erase operation on the Flash array Ij l08, and then the MCU module 103 sets the lock signal A to the disable state, and simultaneously sets the lock signal B to the enable state. The SATA controller 107 and the Flash array Ij l08 powered by the power module A106 are in a power-off state. For the user, the data stored on the Flash array Ij l08 is invisible, and instead, the power module A109 is powered. Flash SATA controller 110 and array 111 is electrically powered state for the user, the data previously stored in the Flash array 111 is visible, double security can better ensure the operation of the user data. Preferably, the SATA controller of the present invention is the Barefoot ECO controller of INDILINX Corporation.

[0012] The PCIE interface 104 is responsible for connecting the secure solid state hard disk of the present invention to various types of computer motherboards to achieve connection of individual signal lines.

[0013] The PCIE/SATA protocol converter 105 is responsible for converting the motherboard's PCIE signal into a SATA controller A and SAT.

A controller B can identify and process the SATA signal, and cooperate with the selection of the power module to achieve signal bridging.

Advantageous effects of the invention

Beneficial effect

[0014] With the above technical solution of the present invention, the data stored in the solid state hard disk is locked, erased, and erased, thereby ensuring the security of the confidential data stored by the user on the solid state hard disk.

Brief description of the drawing

DRAWINGS

1 is a block diagram showing the structure of the system of the present invention;

2 is a schematic diagram of an activation process of the present invention;

3 is a schematic diagram of the process of erasing and locking according to the present invention. Embodiments of the invention

1 is a block diagram showing the structure of a system of the present invention. It is a solid state hard disk security system and method based on PCIE interface. A technical solution is provided for the defects of the prior art: The system consists of an antenna 101, a GSM module 102, an MCU module 103, a PCIE interface 104, a PCIE/SATA protocol converter 105, a power module A1 06, and an eight-eighth eight controller. Eight 107, Flash Array A108, Power Module B 109, SAT A Controller B 110, and F lash Array B111.

[0019] The function of the antenna 101 module is to receive the short message sent by the user's mobile phone through the wireless base station and transmit the short message signal to the transmitting GSM module 102.

[0020] The GSM module 102 is responsible for receiving and transmitting short messages. As we all know, CDMA2000 module, TD-CDM

[0021] The MCU module 103 is a core module of the present invention, and is responsible for processing various operation instructions of the user, and transmitting an erasing signal and a lock signal according to the user instruction, so as to implement the locking function, the erasing function, and the erasing function of the present invention. Lock function.

[0022] Specifically, when the user sends a lock command, the MCU module 103 reads the lock command sent by the user from the GSM module 102, and the MCU module 103 sets the lock signal A to the disable state, and simultaneously sets the lock signal B. In order to enable the state, the SATA controller 107 and the flash array 108 powered by the power module A106 are in a power-off state. For the user, the data stored on the Flash array Ij l08 is invisible, instead, The SATA controller 110 and the flash array 111 powered by the power module A109 are in a power supply state. For the user, the data pre-stored on the flash array 111 is visible, thereby ensuring the security of the user data; when the user sends the erasure After the command, the MCU module 103 reads the erase command sent by the user from the GSM module 102, and the MCU module 103 maintains the lock signal A in the original enable state, and the erase signal A is asserted, triggering the wipe of the SATA controller A107. In addition to the function, the SATA controller A107 will perform an unrecoverable to erase operation on the flash array 108 to ensure data security. When the SATA controller completes the erase operation, it will wipe. Except that the completion signal A is asserted, the MCU detects that the erase completion signal A is valid, indicating that the SATA controller A107 has completed the erase operation. Of course, the erase is unrecoverable, and even if the user retrieves the disk again, the recovery cannot be resumed. Data; when the user sends an erase relock command, the MCU module 103 is from G The SM module 102 reads the erase relock command sent by the user, and the MCU module 103 maintains the lock signal A unchanged in the original enable state, and the erase signal A is asserted, triggering the erase function of the SATA controller A 107, SA TA The controller A107 will perform an unrecoverable to erase operation on the Flash array ij 108, and then the MCU module 103 sets the lock signal A to the disable state, and simultaneously sets the lock signal B to the enable state. The SATA controller 107 and the flash array Ij l08 powered by the module A106 are in a power-off state. For the user, the data stored on the flash array Ij l08 is invisible. On the contrary, the SAT A control powered by the power module A109 is controlled. The device 110 and the flash array 111 are in a power supply state. For the user, the data pre-stored on the flash array 111 is visible, and the dual operation can better ensure the security of the user data. Preferably, the SATA controller of the present invention is the Barefoot ECO controller of INDILINX Corporation.

[0023] The PCIE interface 104 is responsible for connecting the secure solid state hard disk of the present invention to various types of computer motherboards to achieve connection of individual signal lines.

[0024] The PCIE/SATA protocol converter 105 is responsible for converting the motherboard's PCIE signal into a SATA controller A and SAT.

2 is a schematic diagram of a process of first registering a user or replacing a SIM card according to the present invention. Step 201, waiting for the user to register or replace the SIM card program execution, proceed to step 202;

[0026] Step 202, detecting whether there is currently a SIM card in place, if not, proceeding to step 203, and if so, proceeding to step 204;

[0027] Step 203: directly execute the lock command without waiting for the user instruction;

[0028] Step 204: Read IMSI information of the SIM card. IMSI (international Mobile Subscriber

Identity, International Mobile Subscriber Identity) A number assigned internationally to uniquely identify a mobile subscriber. That is: each SIM card has unique IMSI information, proceeds to step 205;

[0029] Step 205: The MCU reads the IMSI information of the SIM card and the IM stored in the flash of the MCU.

SI information comparison, proceeds to step 206;

[0030] Step 206: The MCU reads the IMSI information in the flash. If the part of the information is empty, it determines that the card is inserted for the first time, and proceeds to step 211. If the IMSI information in the flash is not empty, and the IMSI information does not match, it is determined to be changed. card

, proceed to step 207;

[0031] Step 207: The MCU sends a wait for card verification information to the user mobile phone stored in the flash, and the same message Knowing that the user's mobile phone will change the card number of the card, so that the user can verify the information, and proceeds to step 208;

[0032] Step 208, the user sends information to the card change number, to verify, if correct, then proceeds to step 210, if not, proceeds to step 209;

[0033] Step 209, the MCU counts the number of verifications to 3 times, and if so, proceeds to step 203, and if not, proceeds to step 207;

[0034] Step 210: The MCU writes the IMSI information of the SIM card to the internal flash, and binds the SIM card.

[0035] Step 211, waiting for the user to send information to verify the binding of the SIM card, proceeds to step 212;

[0036] Step 212, the MCU verifies whether the information sent by the user matches the content of the information stored in the internal flash, and if so, proceeds to step 214, and if no, proceeds to step 213;

[0037] Step 213, the MCU counts the number of verifications to 3 times, and if so, proceeds to step 203, and if not, proceeds to step 211 again;

[0038] Step 214, the MCU writes the IMSI information of the SIM card to the internal flash, and the binding of the SIM card to the system is implemented, and the process proceeds to step 215;

[0039] Step 215: Send the user the SIM card number and the user password of the user waiting for the binding, and proceed to step 2

16;

[0040] Step 216, the user sends the SIM card number of the user and the specific user password to the binding SIM card by means of short message; proceed to step 217;

[0041] Step 217, the MCU determines whether the user user password is consistent with the password stored in the flash, and if so, proceeds to step 218, and if not, proceeds to step 215;

[0042] Step 218, the MCU binds the SIM card number of the user, writes its SIM card number to the internal flash, and proceeds to step 219;

[0043] Step 219, completing the first card insertion or card replacement process.

3 is a schematic diagram of a locking process of the present invention.

[0045] Step 301, the GSM module on the PCIE card receives the lock command sent by the user, and the MCU reads the lock command, and proceeds to step 302;

[0046] Step 302, the MCU compares the user SIM card number that sends the lock command with the card number stored in the internal flash, and proceeds to step 303; [0047] Step 303, the MCU determines whether the user SIM card number has the right to send a lock command, and if so, proceeds to step 305, and if not, proceeds to step 304;

[0048] Step 304: The SIM card bound to the product of the present invention sends an alarm message to the SIM card of the authorized user;

[0049] Step 305: Perform a locking function. That is, the MCU module 103 reads the lock command sent by the user from the GSM module 102, and the MCU module 103 sets the lock signal A to the disable state, and simultaneously sets the lock signal B to the enable state. Thereafter, the power module A106 is powered. The powered SATA controller 107 and the Flash array Ij l08 are in a power-off state. For the user, the data stored on the Flash array 108 is invisible. On the contrary, the SATA controller 110 and the Flash array powered by the power module A109. 111 is in a power supply state, for the user, the data pre-stored on the flash array 111 is visible, proceeds to step 306;

[0050] Step 306: After completing the lock, the MCU sends an acknowledgement message to the user SIM card number to inform the user that the lock function has been completed.

1 is a schematic diagram of an activation process of the present invention.

[0052] Step 401, the GSM module on the product of the present invention receives the activation command sent by the user, and the MCU reads the activation command, and proceeds to step 402;

[0053] Step 402, the MCU compares the user SIM card number that sends the activation command with the card number stored in the internal flash, and proceeds to step 403;

[0054] Step 403, the MCU determines whether the user SIM card number has the right to send an activation command, and if so, proceeds to step 405, and if not, proceeds to step 404;

[0055] Step 404: The SIM card bound to the product of the present invention sends an alarm message to the SIM card of the authorized user.

[0056] Step 405: Perform a locking function. That is, the MCU module 103 reads the activation command sent by the user from the GSM module 102, and the MCU module 103 sets the lock signal A to the enable state, and simultaneously sets the lock signal B to the disable state. Thereafter, the power module A106 is powered. The power supply SATA controller 107 and the flash array Ij l08 are in a power supply state, and the SATA controller 110 and the flash array 111 powered by the power module A 109 are in a power-off state. For the user, the data stored on the flash array 108 is visible. In contrast, the data on the flash array 111 is invisible, proceeds to step 406;

[0057] Step 406: After completing the activation command, the MCU sends an acknowledgement message to the user SIM card number to inform the user that the activation command has been completed.

2 is a schematic diagram of an erasing process of the present invention. [0059] Step 501, the GSM module on the product of the present invention receives the user sends an erase command, and the MCU reads the erase command, and proceeds to step 502;

[0060] Step 502, the MCU compares the user SIM card number that sends the activation command with the card number stored in the internal flash, and simultaneously compares the user SIM card to the password and the secret stored in the flash, and proceeds to step 503;

[0061] Step 503, the MCU determines whether the user SIM card number has the right to send an activation command, and if so, proceeds to step 505, and if not, proceeds to step 504;

[0062] Step 504, the SIM card bound to the product of the present invention sends an alarm message to the authorized user SIM card, and proceeds to step 514;

[0063] Step 505, it is determined whether the data disk is in the locked state, and if so, proceeds to step 506, and if not, proceeds to step 509;

[0064] Step 506: The SIM card bound to the product of the present invention sends an alarm message to the user SIM card, and informs the user that the data disk is in a locked state, and the user cannot send an activation command, and the user needs to send an activation command to proceed to step 507.

[0065] Step 507, waiting for the user to send a command to activate the data disk, proceeds to step 508;

[0066] Step 508: Determine whether the data disk is activated within the specified time T1, and if yes, proceed to step 509.

If not, proceed to step 513;

[0067] Step 509, the SIM card bound to the product of the present invention sends a confirmation message to the authorized user SIM card, confirming whether the user determines to erase the data disk data, and proceeds to step 510;

[0068] Step 510: Whether the user SIM card is confirmed in the specified time T2, if not, proceeding to step 513, if yes

, then proceeds to step 511;

[0069] Step 511, executing an erase command, that is, the MCU module 103 reads the erase command sent by the user from the GSM module 102, and the MCU module 103 maintains the lock signal A unchanged in the original enable state, and the erase signal A is set to Effective, triggering the erase function of SATA controller A107, SATA controller A107 will perform non-recoverable to erase operation on Flash array Ij l08, in order to ensure data security, when the SATA controller completes the erase operation, The erase completion signal A is asserted, the MCU detects that the erase completion signal A is valid, indicating that the SATA controller A 107 has completed the erase operation, proceeds to step 512;

[0070] Step 512: After the MCU detects that the SATA controller completes the erasure signal, it sends the message to the user SIM card. Complete the erase command information to inform the user that the erase command has been completed;

[0071] Step 513, completing the erase command.

3 is a schematic diagram of an erase locking process of the present invention.

[0073] Step 601, the GSM module on the product of the present invention receives the erase lock command sent by the user, the MCU reads the erase lock command, and proceeds to step 602;

[0074] Step 602, the MCU compares the user SIM card number that sends the erase command with the card number stored in the internal flash, and proceeds to step 603;

[0075] Step 603, the MCU determines whether the user SIM card number has the right to send an erase lock command, and if so, proceeds to step 605, and if not, proceeds to step 604;

[0076] Step 604, the SIM card bound to the product of the present invention sends an alarm message to the authorized user SIM card; [0077] Step 605, executing the erase command shown in FIG. 2, proceeds to step 606;

[0078] Step 606, executing the lock command shown in Figure 3, proceeds to step 607;

[0079] Step 607: After completing the erase lock command, the MCU sends an acknowledgement message to the user SIM card number to inform the user that the erase lock command has been completed.

Sequence table free content

The present invention provides a solid state hard disk security system and method based on a PCIE interface, and the technical solution of the present invention is further described in detail. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

The specific embodiments described above are intended to describe the objects, technical solutions, and advantages of the present invention in more detail. It is to be understood that the foregoing description is only exemplary embodiments of the present invention All modifications, equivalents, improvements, etc., made within the spirit and scope of the invention are intended to be included within the scope of the invention.

Claims

Claim

The invention provides a solid state hard disk security system and method based on a PCIE interface, and the system comprises an antenna, a GSM module, an MCU module, a PCIE/SATA protocol converter, a PCIE interface, a power module, a SATA controller, and a Flash array.

The function of the antenna 101 module is to receive the short message sent by the user's mobile phone to the short message through the wireless base station and the transmitting GSM module 102.

The GSM module is responsible for receiving and transmitting short messages. The MCU module is a core module, and is responsible for processing various operation commands of the user, and sends an erase signal and a lock signal according to the user command to implement the lock function, the erase function, and the first erase and lock function of the present invention. The PCIE interface is responsible for connecting the secure solid state drive of the present invention to various types of computer main boards to achieve connection of individual signal lines.

The PCIE/SATA protocol converter is responsible for converting the PCIE signal of the motherboard into a SATA signal that the SATA controller A and the SATA controller B can recognize and process, and the signal bridge is matched with the selection of the power module.