CN100449559C - Data protection system for controlling and managing data entry point - Google Patents

Abstract

In the data protection system for controlling data entry points of the present invention, the storage unit for accessing data includes a data entry point region and a data region for actually storing data, and a plurality of data entry points in the data entry point region respectively point to a specific sector in the data region as an entry point. Therefore, if the unauthorized person cannot know the location of the data entry point, it is needless to say that the data cannot be captured from the data area. Therefore, the system provides the corresponding data entry point to allow the corresponding computing device to access the data stored in the system only by unlocking the contactless card similar to a key. Otherwise, the data access is not allowed after the locking, thereby achieving the purpose of protecting the data.

Description

Data protection systems governing data entry points

technical field

The invention relates to a data protection system, in particular to a data protection system for controlling and managing data entry points.

Background technique

General computer operating systems use account/password verification as a means of data protection. Although the accounts/passwords of some operating systems are not easily cracked, once a data processing device such as a hard drive is detached from a computer, another computer can be used to easily read the data stored therein.

In order to overcome this problem, the patent of "Taiwan, China" No. 550459 Bulletin No. provides a "computer data protection device" to expect to solve this problem. In short, the technical means used is to add this "computer data protection device" between the host computer (or the CPU of the computer) and the hard disk drive, and when writing/reading data from the hard drive, , to achieve the purpose of data protection through encryption/decryption.

However, if someone detaches the hard disk drive together with this "computer data protection device" from the computer, the data stored in it can still be successfully decrypted by means of its built-in decryption mechanism, so it is still impossible to effectively access the data. purpose of protection.

The "Taiwan of China" patent No. 591630 patent "data protection device and data security method for storage media" overcomes the problem of the No. 550459 patent by "password checking unit". Judging from the technology disclosed in "Data Protection Device for Storage Media and Data Security Method", although it is possible to decide whether to allow the decryption mechanism to start the process of data decryption by checking whether the password is correct, it is possible to avoid accidents caused by the protection device itself. The purpose of data protection cannot be achieved if the hard disk is taken away together. However, this artificial password setting still has the possibility of being cracked.

Furthermore, as a data processing device that the optical disc can be easily detached from the optical drive, for example: a floppy disk drive, a flash memory reader, a ZIP disk drive, a JAZ disk drive, a magnetic tape device, and the like. Compared with the hard disk drive, this kind of data processing device is more likely to be taken away by the storage medium used for storing data. Therefore, a complete data protection mechanism is required.

In addition, in recent years, the rapid development of optical disc burning technology makes the optical disc used to store multimedia, games, application programs, etc., no matter what data protection method is adopted, it is still cracked in the end. This also means that the means of data protection must have a breakthrough approach in order to successfully overcome the above-mentioned problems.

Contents of the invention

The main purpose of the present invention is to provide a data protection system that controls the data entry point. By controlling the data entry point (used to point to a specific sector in the data area as the entry point), it is confirmed as legal without identification. During the access operation, the data entry point cannot be obtained and the data cannot be read or written from the data area, thereby achieving the purpose of data protection.

Based on the above purpose, in the data protection system for controlling data entry points of the present invention, the storage unit used to access data includes a data entry point area, a data area for actually storing data, and a plurality of data entry points in the data entry point area It will point to a specific sector in the data area as the entry point. Therefore, if the illegal person cannot know the location of the data entry point, of course, the data cannot be grabbed from the data area. Therefore, it is necessary to use a non-contact card similar to a key to unlock, and the system will provide a relative data entry point, allowing the corresponding computing device to access the storage unit in the system for data access. On the contrary, after locking, data access is no longer allowed, so as to achieve the purpose of data protection.

Description of drawings

1A-1B are schematic diagrams of a data protection system for controlling data entry points according to the present invention.

FIG. 2 is a schematic diagram of a storage unit of the present invention.

Explanation of main component symbols in the figure

5 Data protection systems that control data entry points

10 data protection device

12 computing device

13 bus

14 contactless card

16 control unit

18 identification units

20 backup units

22 storage units

22a Data entry point area

22b data area

24a, 24b data entry point

26a, 26b data

Detailed ways

Please refer to FIGS. 1A-1B . FIGS. 1A-1B are schematic diagrams of a data protection system for controlling data entry points according to the present invention. As shown in FIG. 1A , the data protection system 5 for controlling data entry points of the present invention mainly consists of a data protection device 10 , a contactless card 14 belonging to the user, and a computing device 12 (such as a PDA that can store and process data).

In short, if the user needs to capture or write data from the data protection system 5, in addition to electrically connecting the computing device 12 to the bus 13 (such as USB, IDE, ATA, etc.) Only after unlocking through the contactless card 14 , which is legal as a key, can the user grab or write data from the data protection system 5 through the computing device 12 . In the system of the present invention, the identification code that can be stored in the RFID non-contact card 14 can replace the account number and password used for identification in the past, because it will automatically start when the non-contact card 14 is close to the data protection device 10. If the identification program is legal, it can unlock and lock without requiring the user to input an account number or password, so this is a very convenient identification method for the user. The so-called locking means that when the control unit 16 as shown in FIG. 1B locks the identification code of a specific contactless card 14 , the corresponding computing device 12 cannot access the storage unit 22 for data.

It should be noted that using the non-contact card 14 as identification is not the most important feature of the present invention. As shown in FIG. At the data entry point of the identification code (pointing to the storage location of the actual data), and through this data entry point, data transmission can be performed, that is, the required data can be captured from the storage unit 22 and transmitted to or from the computing device 12 The data is captured and written into the storage unit 22 . In other words, if the lock is unlocked without a legal contactless card 14, the control unit 16 will respond to deny access to the access request from the computing device 12, which makes it impossible for illegals to know that the data has entered Where the point is, of course, data cannot be fetched from the data area 22b (as shown in FIG. 2 ) in the storage unit 22 . Below, it will be explained in more detail how to complete the identification, under what circumstances to lock and unlock, how to grab or write data through the data entry point, and so on.

Please refer to FIG. 2 , which is a schematic diagram of the storage unit of the present invention. As shown in Figure 2, in the data protection system 5 of the present invention to control the data entry point, the storage unit 22 used to access data includes a data entry point area 22a, a data area 22b for actually storing data, and the data entry point area For example, data entry points 24a and 24b in 22a respectively point to specific sectors in the data area 22b as entry points (that is, entry points of A data 26a and B data 26b).

For example, if the contactless card 14 is close to the identification unit 18, since there are data entry points 24a corresponding to the identification code of the contactless card 14 in the backup unit 20, and each data entry point is assigned to a different or The identification code of the same non-contact card 14, so the identification unit 18 can quickly find out that the non-contact card 14 is legal, and notifies the control unit 16 of the identification result. When the identification result is legal, the control unit 16 will provide the computing device 12 with data access to the storage unit 22 based on the data entry point 24a of the backup unit 20, that is, read the A data 26a pointed to by the data entry point 24a . In addition, in order to further protect the data stored in the storage unit 22, the control unit 16 will perform encryption or decryption processing according to the identification code of the contactless card 14, and make the data access of the storage unit 22 of the data protection device 10 all encrypted or decryption processing.

The backup unit 20 will back up the data entry points in the data entry point area 22a to the backup unit 20 every time unlocking or locking occurs, and these data entry points are used for identifying and protecting data. There is an effect of protecting data because illegals will never know where the data entry point is unless it is identified.

If the execution working state relative to the identification code of the contactless card 14 belongs to unlocking (for example: through identification, and data transmission is in progress), and if the contactless card 14 is close to the identification unit 18 again, the control unit 16 will be for the relative The identification code of the contactless card 14 is locked, which will cause the data transmission to be terminated immediately or other access operations cannot be continued after the current data transmission is completed.

If the computing device 12 is withdrawn from the bus 13, causing the original legal electrical connection between the computing device 12 and the data protection device 10 to disappear (due to identification), the control unit 16 will also identify the corresponding contactless card 14. The code is locked.

If the data protection device 10 needs to be closed, the control unit 16 will lock the identification codes of all contactless cards.

As previously mentioned, if the execution status of the identification code relative to the contactless card 14 is locked, and if the contactless card 14 approaches the identification unit 18 again, the control unit 16 will release the identification code for the contactless card 14. locking.

To sum up, in the data protection system 10 of the present invention that controls and manages the data entry point, when the location of the data entry point cannot be known from the backup unit 20 without identification, it is of course impossible to obtain the location of the data entry point from the data area 22b of the storage unit 22. dedicate data. Therefore, it is necessary to use the non-contact card 14 similar to a key to unlock, and then the system will provide a relative data entry point, and then allow the corresponding computing device 12 to access the storage unit 22 in the system.

Through the above detailed description of the preferred embodiments, it is hoped that the features and spirit of the present invention can be described more clearly, and the scope of the present invention is not limited by the preferred embodiments disclosed above. On the contrary, the purpose is to cover various changes and equivalent arrangements within the scope of the patent application for the invention.

Claims (8)

1. A data protection system that controls and manages data entry points, which allows a computing device to access data after unlocking. It is characterized in that the system includes: a contactless card storing at least one identification code; and A data protection device, which provides data access, wherein the data protection device includes: a storage unit, used to include a data entry point area, a data area for actually storing data, and a plurality of data entry points in the data entry point area The points will point to the specific sector in the data area as the entry point; a backup unit, which backs up the data entry points in the data entry point area, and each data entry point is assigned to the identification of the contactless card code; an identification unit, used to inquire whether the identification code exists in the backup unit, and generate a relative identification result; and a control unit, used for when the identification result is legal, based on the backup unit’s The data entry point is used by the computing device for data access to the storage unit. 2. The data protection system for controlling and managing data entry points as claimed in claim 1, wherein when the control unit is locked for the identification code of the specific contactless card, the computing device cannot store data on the storage unit. access. 3. The data protection system for controlling and managing data entry points as claimed in claim 1, wherein if the execution status of the identification code relative to the contactless card is unlocked, and if the contactless card is unlocked again When approaching the identification unit, the control unit will lock the identification code corresponding to the non-contact card. 4. The data protection system for controlling and managing data entry points according to claim 1, wherein when the legal electrical connection between the computing device and the data protection device disappears, the control unit will target the corresponding The identification code of the contactless card is locked. 5. The data protection system for controlling and managing data entry points as claimed in claim 1, wherein if the data protection device needs to be shut down, the control unit will lock the identification codes of all contactless cards. 6. The data protection system for controlling data entry points as claimed in claim 1, wherein if the execution status of the identification code relative to the contactless card is locked, and if the contactless card approaches again When the identification unit is used, the control unit will unlock the identification code corresponding to the non-contact card. 7. The data protection system for controlling and managing data entry points as claimed in claim 1, wherein the control unit performs encryption or decryption processing according to the identification code of the contactless card, and makes the data protection device The data access of the storage unit is encrypted or decrypted. 8. The data protection system for controlling and managing data entry points as claimed in claim 1, wherein if the contactless card is not unlocked legally, for the access request from the computing device, the control unit will Response Access Denied.

Images