WO2020073916A1

WO2020073916A1 - Encryption method and apparatus for storage device, and storage medium

Info

Publication number: WO2020073916A1
Application number: PCT/CN2019/110104
Authority: WO
Inventors: 刘维维; 胡伟
Original assignee: 中兴通讯股份有限公司
Priority date: 2018-10-09
Filing date: 2019-10-09
Publication date: 2020-04-16
Also published as: CN111027077A; CN111027077B

Abstract

An encryption method for a storage device, applied to a near-field communication (NFC) storage device, the method comprising: acquiring a state indication of an NFC storage device (101); when the state indication indicates that the NFC storage device is in an encrypted state, controlling, on the basis of decryption information sent by the NFC terminal device, the NFC storage device to enter a decrypted state; the decryption information at least including an identity identifier of the NFC terminal device (102); when the state indication indicates that the NFC storage device is in the decrypted state, controlling, on the basis of the encrypted information sent by the NFC terminal device, the NFC storage device to enter the encrypted state; the encryption information at least including the identity identifier of the NFC terminal device (103). Further disclosed are an encryption apparatus for a storage device, and a storage medium.

Description

Encryption method, device and storage medium of storage equipment

cross reference

The present invention requires the priority of the Chinese patent application filed on October 9, 2018 in the Chinese Patent Office with the application number 201811172068.2 and the invention titled "A storage device encryption method, device and storage medium". The content is incorporated into the present invention by reference.

Technical field

The invention relates to communication technology, in particular to an encryption method, device and storage medium of a storage device.

Background technique

Encrypted U disk refers to the U disk that implements encryption and decryption protection on the contents of the U disk. At present, there are three main encryption methods for encrypted U disks on the market: A. Fake encryption, which is just to hide files, set a password, and only verify identity, there is no change in actual storage content. B. Soft encryption, built-in or attached software to encrypt data, generally use AES (Advanced Encryption Standard, Chinese name advanced encryption standard) encryption algorithm, can also be divided into encrypted area and non-encrypted area. C. Hardware encryption, built-in hardware encryption, transparent encryption, invisible, complete encryption, verification when reading, and some have some special functions, such as applying encryption to the hard disk, inserting the U disk to display the clear code, unplugging the display is encryption information.

The above three encryption methods have the following disadvantages: A. Fake encryption, without real encryption, you can read the files on the original U disk through a password cracking tool or install flash on other PCB boards, and the security is poor . B. Soft encryption, because the encryption process is completed on the PC side, there are still certain hidden security risks. C. Hardware encryption, the entire encryption process is completed inside the U disk, and the encrypted U disk is black boxed. Although this method has a high security level, it requires a special hardware encryption and decryption chip for encryption, and the encryption and decryption speed should reach 25MB / S or more The hardware cost is slightly higher than soft encryption.

U disks that use hardware encryption technology have the highest security, and need to implement encryption and decryption functions through physical methods. Currently, U disks that use hardware encryption are mainly divided into two categories:

Fingerprint encryption U disk; built-in fingerprint collection / recognizer, everyone's fingerprint is unique and unchanged for life. Relying on this uniqueness and stability, a person can be matched with his fingerprint to verify his true identity, and data encryption and decryption functions can be realized by this method. The advantage is that the security level is very high, and the encryption / decryption speed is fast; the disadvantage is that some people or certain groups have few fingerprint characteristics, which is difficult to image.

Key encryption U disk; built-in physical number / letter keys, realize the encryption / decryption function by manually inputting the preset password. The password is stored in the encryption chip, which can realize the data decryption from the computer, and supports multiple accounts (management Staff, ordinary users), multiple permissions (read and write, read-only) and other functions. The advantage is that the security level is high, and data can also be encrypted / decrypted in real time. The disadvantage is that you must always remember the password, because once you forget the password, you cannot retrieve the data through other methods, and the key structure is complex, large, and costly.

Summary of the invention

To solve the above technical problems, an embodiment of the present invention provides an encryption method for a storage device, which is applied to an NFC storage device for short-range communication. The method includes: obtaining a status indication of the NFC storage device; When the NFC storage device is in an encrypted state, based on the decryption information sent by the NFC terminal device, the NFC storage device is controlled to enter a decryption state; wherein, the decryption information includes at least the identity of the NFC terminal device; When the NFC storage device is in the decrypted state, the NFC storage device is controlled to enter the encrypted state based on the encrypted information sent by the NFC terminal device; wherein the encrypted information includes at least the identity of the NFC terminal device.

An embodiment of the present invention also provides an encryption device for a storage device, which is applied to an NFC storage device. The encryption device includes: a processor and a memory; wherein the processor is used to execute a program stored in the memory, to The following steps are implemented: obtaining a status indication of the NFC storage device; when the status indication indicates that the NFC storage device is in an encrypted state, based on the decryption information sent by the NFC terminal device, controlling the NFC storage device to enter the decryption state; wherein, The decryption information includes at least the identity of the NFC terminal device; when the status indication characterizes that the NFC storage device is in the decrypted state, based on the encrypted information sent by the NFC terminal device, the NFC storage device is controlled to enter the encrypted state; wherein, The encrypted information includes at least the identity of the NFC terminal device.

An embodiment of the present invention also provides an electronic device, including: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor , The instruction is executed by the at least one processor, so that the at least one processor executes the method described in the above aspects.

An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the steps of any one of the methods described above are implemented.

An embodiment of the present invention also provides a computer program product. The computer program product includes a computer program stored on a non-transitory computer-readable storage medium. The computer program includes program instructions. When the program instructions are executed by a computer When the computer is made to execute the method described in the above aspects.

BRIEF DESCRIPTION

1 is a schematic flowchart of an encryption method of a storage device in an embodiment of the present invention;

Figure 2 is a schematic diagram of the structure of a U disk in the prior art;

3 is a schematic diagram of the improved structure of the U disk in the embodiment of the present invention;

4 is a schematic flowchart of a decryption process in an embodiment of the present invention;

FIG. 5 is a schematic diagram of an improved structure of a U-disk I / O interface in an embodiment of the present invention;

6 is a first interaction schematic diagram of decryption processing in an embodiment of the present invention;

7A is a second interaction schematic diagram of decryption processing in an embodiment of the present invention;

7B is a third interaction schematic diagram of decryption processing in an embodiment of the present invention;

8 is a schematic flowchart of an encryption process in an embodiment of the present invention;

9 is a first interaction schematic diagram of encryption processing in an embodiment of the present invention;

10A is a second interaction schematic diagram of encryption processing in an embodiment of the present invention;

10B is a third interaction schematic diagram of encryption processing in an embodiment of the present invention;

FIG. 11 is a schematic structural diagram of an encryption device of a storage device in an embodiment of the present invention.

12 is a schematic diagram of a hardware structure of an electronic device that executes an encryption method of a storage device according to an embodiment of the present invention.

detailed description

In order to understand the features and technical contents of the embodiments of the present invention in more detail, the following describes the implementation of the embodiments of the present invention in detail with reference to the drawings. The accompanying drawings are for reference only and are not intended to limit the embodiments of the present invention.

Example one

As shown in FIG. 1, the encryption method of the storage device includes: Step 101: Obtain the status indication of the NFC storage device; Step 102: When the status indication indicates that the NFC storage device is in an encrypted state, control NFC based on the decryption information sent by the NFC terminal The storage device enters the decryption state; wherein the decryption information includes at least the identity of the NFC terminal device; Step 103: When the status indication characterizes that the NFC storage device is in the decryption state, the NFC storage device is controlled to enter the encryption state based on the encrypted information sent by the NFC terminal device ; Wherein the encrypted information includes at least the identity of the NFC terminal device.

Here, the execution subject of step 101 to step 103 may be the processor of the NFC storage device. The NFC storage device may be a U disk with NFC function, and the NFC terminal device may be a mobile phone, tablet computer, notebook computer, personal computer, etc. with NFC function.

The structure of the existing U disk is shown in Figure 2. The USB interface in the U disk includes: 1. The VBUS Red (red line) power supply is positive 5V; 2. The D-White (white line) data line is negative; 3. D + Green ( Green wire) The data wire is positive; 4. IDnone (empty end) is divided into two interfaces, A and B. A: connected to the ground wire B: not connected to the ground wire; 5. GNDBlack (black wire) signal ground wire.

The NFC storage device provided in the embodiment of the present invention includes at least an NFC chip, and the NFC chip is used to implement transmission of NFC signals with an NFC terminal device. As shown in Figure 3, the U disk is provided with an NFC chip, and the USB interface structure in the U disk is the same as a general U disk. In the existing U disk structure, only the NFC chip needs to be added, and there is no need to do other things for the U disk structure. Changes, easy to implement.

In practical applications, step 101 specifically includes: obtaining the circuit state of the control circuit of the NFC storage device; wherein, when the circuit state is an open state, it indicates that the NFC storage device is in an encrypted state, and when the circuit state is a path state, it indicates that the NFC storage device is in a decrypted state. In other words, the control circuit is used to control the on-off of the data line of the NFC storage device. When the data line is turned on, it can read and write normal data to the storage device, and when the data line is disconnected, the external device cannot read the storage device normally. Write, it can be considered that the storage device is in an encrypted state, the storage device does not work, even if the storage device is connected to an external device, there is no reaction, and illegal users cannot send USB commands to the storage device to read and write data through the USB bus debugging tool, and steal the internal data of the device .

Further, controlling the NFC storage device to enter a decryption state includes: controlling the control circuit of the NFC storage device to be in a pass state; controlling the NFC storage device to enter an encryption state, including controlling the control circuit of the NFC storage device to be in an open state.

In practical applications, the method further includes: receiving the identity of at least one NFC terminal device in advance; and using the identity of the at least one NFC terminal device to establish an identity set. Here, the identity set is used as the basis for decrypting the NFC storage device. Since each terminal device has its own unique identity, for example, the ID of the mobile phone, IMEI code (International Mobile Equipment Identity, Chinese name international mobile device identification code), you can Use identification to distinguish between different terminal devices.

Further, step 102 specifically includes: matching the identity identification in the decryption information with the identity identification set; when the matching is successful, controlling the NFC storage device to enter the decryption state; when the matching is unsuccessful, the NFC storage device maintains the encryption state.

In other words, the identity of the terminal device serves as the basis for decryption of the storage device. For example, when the user decrypts the U disk through the mobile phone, the mobile phone is close to the U disk, the U disk will receive the identity sent by the mobile phone, and the U disk's processor matches the received identity with the identity stored by itself. After successful matching, the U disk decryption operation can be performed, and the U disk can be read and written normally; if the matching is unsuccessful, the U disk is still in the encrypted state and cannot be used.

Further, step 103 specifically includes: controlling the NFC storage device to enter an encrypted state, and storing the identity identification in the encrypted information in the identity identification set.

That is to say, when the terminal device encrypts the storage device, it is necessary to use the terminal device's identity tag to establish an identity tag set, so that the identity tag set serves as a basis for the decryption of the storage device later. For example, when a user encrypts a USB flash drive through a mobile phone, move the mobile phone closer to the USB flash drive, and the USB flash drive receives the identity sent by the mobile phone. The processor of the USB flash drive controls the NFC storage device to enter the encrypted state, and stores the mobile phone's identity to In the identity set, the mobile phone can be used to decrypt the U disk later.

In some embodiments, when the status indication represents that the NFC storage device is in an encrypted state, a first prompt message is generated to prompt the user to perform a decryption process; when the status indication represents that the NFC storage device is in a decrypted state, a first prompt message is generated to prompt the user to perform Encrypted second prompt message. The first prompt message and the second prompt message can be displayed on the NFC terminal device held by the user, which increases the user's flexibility in encryption / decryption control of the storage device.

Here, the NFC terminal device supplies power to the NFC storage device through the NFC function, so that the NFC storage device can also realize encryption and decryption operations in a passive case.

The encryption method of a storage device provided by an embodiment of the present invention is applied to a NFC storage device for short-range communication. The method includes: acquiring a status indication of the NFC storage device; when the status indication indicates that the NFC storage device is in an encrypted state, based on the NFC terminal device Send the decryption information to control the NFC storage device to enter the decryption state; where the decryption information includes at least the identity of the NFC terminal device; when the status indication indicates that the NFC storage device is in the decryption state, based on the encrypted information sent by the NFC terminal device, control the NFC storage The device enters an encrypted state; where the encrypted information includes at least the identity of the NFC terminal device.

With the above technical solution, a storage device with NFC function can be encrypted / decrypted by one or more NFC terminal devices bound to it, and the identity of the NFC terminal device is used as the only basis for encryption / decryption so that the storage device has higher security It does not require users to set or record encryption / decryption information, simplifying the encryption / decryption process.

In order to better embody the purpose of the present invention, on the basis of the foregoing embodiments of the present invention, the following application scenarios are given for further illustration.

scene one

The encryption setting is performed on the storage device. The encryption step specifically includes the following: Step 401: Obtain a status indication of the storage device.

Step 402: Determine that the storage device is in an encrypted state according to the status indication, and generate first prompt information.

Here, when judging that the storage device is in the decrypted state according to the status indication, ignoring the following encryption steps, an encryption process can be performed on the storage device.

Here, the circuit state of the control circuit of the NFC storage device is obtained; wherein, when the circuit state is the open state, the NFC storage device is in the encrypted state, and when the circuit state is the path state, the NFC storage device is in the decrypted state. In other words, the control circuit is used to control the on-off of the data line of the NFC storage device. When the data line is turned on, it can read and write normal data to the storage device, and when the data line is disconnected, the external device cannot read the storage device normally. Write, you can think that the storage device is in an encrypted state.

Specifically, the control circuit may be a switch control circuit. As shown in FIG. 5, a switch 42 is provided on the data line between the pin 2 pin connected to the USB chip 41 and the USB interface 43. From a hardware concept point of view, when the USB data line is routed, the VI- The ID tab will automatically change to the Enable state, that is, the decryption state. At this time, the pin2 pin connected to the NFC chip will trigger a state indication indicating the state of the channel; when the USB data line is disconnected, then the VI in the setting item -The ID tab will automatically change to the Disabled state, that is, the encrypted state. At this time, the pin2 pin connected to the NFC chip will trigger a state indication indicating the disconnection state.

Step 403: Control the mobile phone and / or computer to display the first prompt message.

Step 404: Based on the first prompt message, determine whether a decryption instruction is detected; if yes, perform step 405; if no, perform step 408.

Here, the first prompt message is used to prompt the user to perform the decryption process. After seeing the first prompt message, the user can perform the decryption process through the mobile phone.

As shown in Figure 6, when the U disk arrives at the insertion point, by identifying that the USB pin 2 is in the power-off state, that is, the data line is disconnected, the U-disk is in the encrypted state; the first prompt message is displayed on the computer, such as " U disk is connected, please perform identity authentication "to remind users to decrypt.

As shown in FIG. 7A, the first prompt message may also be displayed on the user ’s mobile phone or other mobile terminal, such as “whether to perform U disk decryption”, and perform the next decryption step by detecting the decryption instruction. Here, the user can instruct to execute or refuse to execute the decryption process through different keys. As shown in FIG. 7B, when the U disk is successfully decrypted, the U disk can also return a "decryption successful" message to the mobile phone.

In some embodiments, the decryption information includes a decryption instruction and the identity of the NFC terminal device; wherein the decryption instruction is used to instruct the storage device to perform the decryption process, and the identity is used as the basis for the current decryption process.

Specifically, after seeing the first prompt message, the user sends a decryption instruction to the storage device through the NFC function of the terminal device; when the storage device detects the decryption instruction, it obtains the identity of the mobile phone to perform the decryption process.

Step 405: Obtain the identity of the mobile phone.

Step 406: Match the identity of the mobile phone with the identity set stored by itself, and determine whether the identity verification is successful according to the matching result; if yes, perform step 407; if no, perform step 408.

Step 407: Decrypt the storage device.

Step 408: Refuse to respond to data read and write instructions.

In other words, the storage device cannot be used.

In the embodiment of the present invention, the identification of the user's identity is completely controlled by the NFC signal command on the mobile phone, and is separated from the U disk, and the U disk does not need to install any driver program and user identity authentication software on the host, and is not subject to the software running on the USB host. The intervention of the user's identity information and key information constitutes strong anti-software cracking protection.

Generally speaking, the complexity of the product structure is directly proportional to the security. By dividing the USB flash drive into two, even if the USB flash drive is lost or stolen, others cannot access the data in the USB flash drive. information security. The user only performs one more decryption operation than the ordinary U disk when using it, which has no other impact on the user, so the user's ease of use is also guaranteed.

Scene two

The storage device (the storage device mentioned in the embodiment of the present invention is an NFC storage device) is encrypted, and the encryption step specifically includes the following:

Step 801: Obtain a status indication of the storage device.

Step 802: Determine that the storage device is in a decrypted state according to the status indication, and generate second prompt information.

Here, when it is judged that the storage device is in an encrypted state according to the status indication, the following encryption steps are ignored, and the storage device can be decrypted.

Step 803: Control the mobile phone and / or computer to display the second prompt message.

Step 804: Based on the second prompt message, determine whether an encryption instruction is detected; if yes, perform step 805; if no, perform step 807.

Here, the second prompt message is used to prompt the user to perform the encryption process. After seeing the second prompt message, the user can perform the encryption process through the mobile phone.

As shown in Figure 9, when the USB flash drive arrives at the insertion point, the USB flash drive is in the decrypted state by recognizing that the USB pin 2 is in the power-on state, that is, the data line path state; the second prompt message is displayed on the computer, for example, "U disk is connected, no identity authentication is required" to remind the user that the current storage device is in the decrypted state, and the user decides whether to perform encryption processing. Or, the second prompt message is "U disk connected". After seeing the second prompt message, the user determines that the U disk has been successfully connected, and can directly perform the processing operation without identity verification.

As shown in FIG. 10A, the second prompt message may also be displayed on the user ’s mobile phone or other mobile terminal, such as “whether to perform U disk encryption setting”, and perform the next encryption step by detecting the encryption instruction. Here, the user can instruct to execute or refuse to execute the encryption process through different keys. As shown in FIG. 10B, when the U disk is successfully encrypted, the U disk may also return a "encryption successful" message to the mobile phone.

In some embodiments, the encrypted information includes an encryption instruction and an identity identification of the NFC terminal device; wherein, the encryption instruction is used to instruct the storage device to perform encryption processing, and the identity identification serves as a basis for performing decryption processing next time.

Specifically, after seeing the second prompt message, the user sends an encryption instruction to the storage device through the NFC function of the terminal device; when the storage device detects the encryption instruction, it performs an encryption process and stores the identity of the mobile phone.

Step 805: Control the storage device to enter an encrypted state, obtain and store the identity of the mobile phone.

Step 806: Encryption is complete.

Step 807: Normally respond to data read and write instructions.

Example 2

Based on the same inventive concept, an embodiment of the present invention also provides an encryption device for a storage device, which is applied to an NFC storage device. As shown in FIG. 11, the encryption device includes: a processor 111 and a memory 112, wherein,

The processor 111 is used to execute the program stored in the memory 112 to achieve the following steps: obtain a status indication of the NFC storage device; when the status indication characterizes that the NFC storage device is in an encrypted state, control the NFC storage based on the decryption information sent by the NFC terminal device The device enters the decryption state; where the decryption information includes at least the identity of the NFC terminal device; when the status indication indicates that the NFC storage device is in the decryption state, the NFC storage device is controlled to enter the encrypted state based on the encrypted information sent by the NFC terminal device; wherein, encryption The information includes at least the identity of the NFC terminal device.

In some embodiments, the processor 111 is further configured to execute a program stored in the memory 112 to implement the following steps: pre-receive the identity of at least one NFC terminal device; and use the identity of at least one NFC terminal device to establish an identity set.

In some embodiments, the processor 111 is specifically configured to execute the program stored in the memory 112 to achieve the following steps: match the identity in the decryption information with the identity set; when the match is successful, control the NFC storage device to enter decryption status.

In some embodiments, the processor 111 is specifically configured to execute the program stored in the memory 112 to implement the following steps: control the NFC storage device to enter an encrypted state, and store the identity in the encrypted information in the identity set.

In some embodiments, the processor 111 is specifically configured to execute the program stored in the memory 112 to achieve the following steps: acquiring the circuit state of the control circuit of the NFC storage device; wherein, when the circuit state is the open state, the NFC storage device is in encryption State, when the circuit state is the path state, it means that the NFC storage device is in the decrypted state.

In some embodiments, the processor 111 is specifically configured to execute the program stored in the memory 112 to achieve the following steps: the control circuit that controls the NFC storage device is in the on state; or, the control circuit that controls the NFC storage device is in the off state.

In some embodiments, the processor 111 is further configured to execute a program stored in the memory 112 to implement the following steps: when the status indication indicates that the NFC storage device is in an encrypted state, a first prompt message for prompting the user to perform decryption processing is generated When the status indication indicates that the NFC storage device is in the decrypted state, a second prompt message for prompting the user to perform encryption processing is generated.

In practical applications, the above memory may be volatile memory (volatile memory), such as random access memory (RAM, Random-Access Memory); or non-volatile memory (non-volatile memory), such as read-only memory ( ROM, Read-Only Memory), flash memory (flash memory), hard disk (HDD, Hard Disk Drive) or solid-state hard disk (SSD, Solid-State Drive); or a combination of the above types of memory, and provide instructions to the processor And data.

The above processor may be an application specific integrated circuit (ASIC, Application Integrated Circuit), a digital signal processing device (DSPD, Digital Signal Processing), a programmable logic device (PLD, Programmable Logic Device), a field programmable gate array (Field -At least one of Programmable Gate Array (FPGA), DSP, CPU, controller, microcontroller, microprocessor. Understandably, for different devices, the electronic device used to implement the above-mentioned processor function may also be other, which is not specifically limited in the embodiment of the present invention.

Any one of the above encryption devices provided in the embodiments of the present invention can be applied to a storage device to make the storage device have higher security, and the encryption / decryption process is simple.

Example Three

Based on the same inventive concept, embodiments of the present invention also provide a computer-readable storage medium, such as a memory including a computer program, which can be executed by a processor of a terminal to complete the method in one or more of the foregoing embodiments step.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer usable storage media (including but not limited to disk storage and optical storage, etc.) containing computer usable program code.

The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each flow and / or block in the flow schematic diagram and / or block diagram and a combination of the flow and / or block in the flow schematic diagram and / or block diagram may be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, special-purpose computer, embedded processing machine, or other programmable data processing device to produce a machine that enables the generation of instructions executed by the processor of the computer or other programmable data processing device A device for realizing the functions specified in one block or multiple blocks of a block diagram or a block diagram of a block diagram.

These computer program instructions may also be stored in a computer readable memory that can guide a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, the instructions The device implements the functions specified in the flow diagram one flow or multiple flows and / or the block diagram one block or multiple blocks.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operating steps are performed on the computer or other programmable device to produce computer-implemented processing, which is executed on the computer or other programmable device The instructions provide steps for implementing the functions specified in the flow diagram of a flow or flows and / or the block diagram of a block or flows of blocks.

Example 4

An embodiment of the present invention provides a computer program product. The computer program product includes a computer program stored on a non-transitory computer-readable storage medium. The computer program includes program instructions. When the program instructions are executed by a computer To make the computer execute the method in any of the above method embodiments.

Example 5

FIG. 12 is a schematic diagram of a hardware structure of an electronic device for executing a method according to an embodiment of the present invention. As shown in the figure, the device includes one or more processors 1210 and a memory 1220. Take a processor 1210 as an example. The device may also include: an input device 1230 and an output device 1240.

The processor 1210, the memory 1220, the input device 1230, and the output device 1240 may be connected through a bus or other means. In FIG. 12, connection through a bus is used as an example.

The memory 1220 is a non-transitory computer-readable storage medium that can be used to store non-transitory software programs, non-transitory computer executable programs, and modules. The processor 1210 executes non-transitory software programs, instructions, and modules stored in the memory 1220 to execute various functional applications and data processing of the electronic device, that is, to implement the processing methods of the foregoing method embodiments.

The memory 1220 may include a storage program area and a storage data area, where the storage program area may store an operating system and application programs required by at least one function; the storage data area may store data, and the like. In addition, the memory 1220 may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one magnetic disk storage device, a flash memory device, or other non-transitory solid-state storage devices. In some embodiments, the memory 1220 may optionally include memories remotely provided with respect to the processor 1210, and these remote memories may be connected to the processing device through a network. Examples of the above network include but are not limited to the Internet, intranet, local area network, mobile communication network, and combinations thereof.

The input device 1230 can receive input digital or character information, and generate signal input. The output device 1240 may include a display device such as a display screen.

The one or more modules are stored in the memory 1220, and when executed by the one or more processors 1210, execute: an encryption method of a storage device, which is applied to a NFC storage device for short-range communication. The method includes: obtaining a status indication of an NFC storage device; when the status indication indicates that the NFC storage device is in an encrypted state, based on the decryption information sent by the NFC terminal device, controlling the NFC storage device to enter a decrypted state; wherein, The decryption information includes at least the identity of the NFC terminal device; when the status indication characterizes that the NFC storage device is in the decrypted state, based on the encrypted information sent by the NFC terminal device, the NFC storage device is controlled to enter the encrypted state; wherein, The encrypted information includes at least the identity of the NFC terminal device.

The above products can execute the method provided by the embodiments of the present invention, and have corresponding function modules and beneficial effects for executing the method. For technical details that are not described in detail in this embodiment, refer to the method provided in this embodiment of the present invention.

The above are only preferred embodiments of the present invention and are not intended to limit the protection scope of the present invention.

Claims

An encryption method for a storage device, which is applied to a NFC storage device for short-range communication, the method includes:

Obtain the status indication of the NFC storage device;

When the status indication indicates that the NFC storage device is in an encrypted state, based on the decryption information sent by the NFC terminal device, the NFC storage device is controlled to enter the decryption state; wherein, the decryption information includes at least the identity of the NFC terminal device;

When the status indication indicates that the NFC storage device is in a decrypted state, the NFC storage device is controlled to enter an encrypted state based on the encrypted information sent by the NFC terminal device; wherein the encrypted information includes at least the identity of the NFC terminal device.
The method of claim 1, wherein the method further comprises:

Receive in advance the identity of at least one NFC terminal device;

An identity set is established using the identity of the at least one NFC terminal device.
The method according to claim 2, wherein the controlling the NFC storage device to be in a decrypted state includes:

Matching the identity in the decrypted information with the identity set;

When the match is successful, the NFC storage device is controlled to enter a decryption state.
The method of claim 1, wherein the controlling the NFC storage device to enter an encrypted state includes:

Control the NFC storage device to enter an encrypted state, and store the identity in the encrypted information in the identity set.
The method according to claim 1, wherein the obtaining the status indication of the NFC storage device comprises:

Get the circuit status of the control circuit of the NFC storage device;

Wherein, when the circuit state is an open state, the NFC storage device is in an encrypted state, and when the circuit state is an on state, the NFC storage device is in a decrypted state.
The method according to claim 5, wherein the controlling the NFC storage device to enter a decryption state includes: controlling a control circuit of the NFC storage device to be in a pass state;

The controlling the NFC storage device to enter an encrypted state includes controlling the control circuit of the NFC storage device to be in an open state.
The method of claim 1, wherein the method further comprises:

When the status indication indicates that the NFC storage device is in an encrypted state, a first prompt message for prompting the user to perform decryption processing is generated;

When the status indication indicates that the NFC storage device is in a decrypted state, a second prompt message for prompting the user to perform encryption processing is generated.
An encryption device for a storage device, which is applied to an NFC storage device, and the encryption device includes: a processor and a memory; wherein

The processor is used to execute the program stored in the memory to achieve the following steps:

Obtain the status indication of the NFC storage device;

When the status indication indicates that the NFC storage device is in an encrypted state, based on the decryption information sent by the NFC terminal device, the NFC storage device is controlled to enter the decryption state; wherein, the decryption information includes at least the identity of the NFC terminal device;

When the status indication indicates that the NFC storage device is in a decrypted state, the NFC storage device is controlled to enter an encrypted state based on the encrypted information sent by the NFC terminal device; wherein the encrypted information includes at least the identity of the NFC terminal device.
The apparatus according to claim 8, wherein the processor is further configured to execute the program stored in the memory to implement the following steps:

Receive in advance the identity of at least one NFC terminal device;

An identity set is established using the identity of the at least one NFC terminal device.
The apparatus according to claim 9, wherein the processor is used to execute a program stored in the memory to implement the following steps:

Matching the identity in the decrypted information with the identity set;

When the match is successful, the NFC storage device is controlled to enter a decryption state.
The apparatus according to claim 8, wherein the processor is used to execute a program stored in the memory to implement the following steps:

Control the NFC storage device to enter an encrypted state, and store the identity in the encrypted information in the identity set.
The apparatus according to claim 8, wherein the processor is used to execute a program stored in the memory to implement the following steps: acquiring the circuit state of the control circuit of the NFC storage device;

Wherein, when the circuit state is an open state, the NFC storage device is in an encrypted state, and when the circuit state is an on state, the NFC storage device is in a decrypted state.
The apparatus according to claim 12, wherein the processor is used to execute a program stored in the memory to implement the following steps:

A control circuit that controls the NFC storage device is in a path state;

Or, the control circuit controlling the NFC storage device is in an open state.
The apparatus according to claim 8, wherein the processor is further configured to execute the program stored in the memory to implement the following steps:

When the status indication indicates that the NFC storage device is in an encrypted state, a first prompt message for prompting the user to perform decryption processing is generated;

When the status indication indicates that the NFC storage device is in a decrypted state, a second prompt message for prompting the user to perform encryption processing is generated.
A computer-readable storage medium on which a computer program is stored, wherein when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.