CN105989392A - Mobile storage system, access control method thereof and manufacturing method thereof - Google Patents

Abstract

The invention provides a mobile storage system whose appearance meets ISO7810 standards. The system comprises a universal serial bus (USB) transmission control module, a flash memory module and a microprocessor module. The invention also provides an access control method for the above mobile storage system and a manufacturing method for realizing the appearance of the mobile storage system meets the ISO7810 standards. Compared with the existing storage system such as a U disc, the mobile storage system provided by the invention can be applied to a cassette unit and can be put in a wallet of the user, carrying is facilitated, and safety storage can be ensured on the premise of convenient use by the user.

Description

A mobile storage system, its access control method and its manufacturing method

technical field

The invention relates to mobile storage technology, in particular to a mobile storage system, its access control method and its manufacturing method.

Background technique

In the field of mobile storage technology, mobile storage devices with a universal serial bus (USB) interface are increasingly favored due to their high-speed data transmission speed. The function of the USB mobile storage device is completed by its internal mobile storage system. At present, there are more and more researches on the safe storage of the mobile storage system inside the USB mobile storage device, mainly focusing on the research on the mobile storage system in the U disk.

In order to realize the safe storage of the mobile storage system in the U disk, two methods of disk lock encryption and data encryption are mainly used at present.

Among them, the data encryption method is used to encrypt the data stored in the mobile storage system itself. The encryption is completed by the computer. When reading the data, it needs to be decrypted and then sent back to the user. The storage area in the mobile storage system is generally divided into two partitions. The encrypted partition cannot be accessed before decryption, while the unencrypted or decrypted encrypted partition can be accessed, and the access attributes of each partition are fixed. The user needs to perform a decryption process every time the data is used, which brings inconvenience to the user.

Using the disk lock encryption method, the user needs to input the disk lock password before using it. If the input is incorrect, you can re-enter it until it is correct. Since the U disk is usually connected to the computer, it is easy to crack the disk lock through software using exhaustive methods. In order to solve the above defects, some U disks need to input a user password before the user uses it. If the input is incorrect, the user will not be able to see any content in the U disk, and in order to prevent malicious password cracking, the mobile storage system in the U disk It stores the maximum number of times the user is allowed to enter the password. When the number of times the user enters the password is greater than the stored number, the U disk is locked and the user needs to go to the manufacturer to unlock it again, or the data in the U disk will be automatically cleared. Although this method solves the problem of maliciously cracking passwords, it also brings inconvenience to users, because once the number of retries is accidentally exceeded, it is necessary to go to the manufacturer to decrypt, or the data will be completely lost.

At present, the mobile storage system for the above two ways of ensuring safe storage has an appearance that conforms to the size of the U disk, and the package is easier to disassemble. Safety cannot be guaranteed.

In the Chinese patent application with the application number 200520109901.0, a card-type device with the shape of an integrated circuit (IC) card and a magnetic card is disclosed, which communicates with external devices through a USB interface. The shape of the card-type device complies with the ISO7810 standard, and the length , width and height are 86.5 millimeters, 53.98 millimeters and 0.75 millimeters respectively, Fig. 1 has shown the appearance of the card device with USB interface in the prior art. Compared with ordinary USB mobile storage devices such as U disks, the USB card-type device has the advantage of being more portable, but there is no mobile storage system that conforms to the shape of the card-type device and realizes safe storage. It can be seen from the above introduction that the currently existing mobile storage systems conform to the shape of larger USB mobile storage devices such as U disks, and cannot be directly applied to USB card devices, and the existing mobile storage systems that conform to the shape of U disks The mobile storage system also has certain defects in safe storage, and cannot guarantee safe storage under the premise of user convenience.

Contents of the invention

In view of this, the present invention provides a mobile storage system, the appearance of which conforms to the ISO7810 standard, and can ensure safe storage under the premise of user convenience; for this reason, the present invention also provides a method for manufacturing the mobile storage system and the An access control method for a mobile storage system.

A mobile storage system, the system appearance conforms to the ISO7810 standard, the system includes: a universal serial bus USB transmission control module, a flash memory module and a microprocessor module;

The USB transmission control module is used to transmit the input password of the external device to the microprocessor module; under the control of the microprocessor module, the external device accesses the corresponding user data storage partition in the flash memory module; under the control of the microprocessor module , rejecting all communication with external devices;

The flash memory module includes more than one user data storage partition and password storage area; the user data storage partition has different access attributes corresponding to different preset passwords, and is used to store user data; the password storage area is used for Store preset passwords corresponding to different access attributes of the data storage partition;

The microprocessor module is used to receive the input password transmitted by the USB transmission control module; when the preset password matching the input password is found in the flash memory module, the USB transmission control module is controlled, and the external device corresponds to the user according to the preset password The access attribute of the data storage partition accesses the corresponding user data storage partition in the flash memory module; when the preset password matching the input password is not found in the flash memory module, the USB transmission control module is controlled to reject all communications with external devices.

The password storage area in the flash memory module is further used to store the corresponding relationship between the preset password and the access attribute of the user data storage partition, for the microprocessor module to read the corresponding relationship.

The microprocessor module includes an access control module and an access attribute control module;

The access control module is used to receive the input password transmitted by the USB transmission control module; when the preset password matching the input password is found in the flash memory module, the input password is provided to the access attribute control module to trigger the access attribute control The module receives the access attribute control information sent by the access attribute control module, controls the USB transmission control module, and the external device accesses the corresponding user data storage partition in the flash memory module according to the content of the access attribute control information; in the flash memory module When no preset password matching the input password is found, the USB transmission control module is controlled to refuse all communications with the external device;

The access attribute control module is used to read the corresponding relationship between the preset password and the access attributes of each storage partition from the password storage area of the flash memory module according to the input password provided by the access control module, and generate a corresponding password carrying the input password. The storage attribute control information of the access attribute of the user data storage partition is provided to the access control module.

An access control method, characterized in that the method comprises: each time the mobile storage system is powered on:

A, the microprocessing module receives the input password through the USB transmission control module;

B. The microprocessor module searches for a preset password matching the input password in the flash memory module, and executes step C when found, and executes step D when not found;

C, the microprocessing module controls the USB transmission control module, and the external device accesses the corresponding user data storage partition in the flash memory module according to the access attribute of the preset password corresponding to the user data storage partition;

D. The microprocessor module controls the USB transmission control module and rejects all communications with external devices.

The access attributes include: read-only, read-write and invisible.

A method for manufacturing a mobile storage system, the method comprising: using a bare chip and a peripheral circuit formed by peripheral devices to form a module in the mobile storage system; encapsulating the module with epoxy resin based on an outline conforming to the ISO7810 standard; The following steps construct the module:

A. Paste the bare chip and peripheral devices on the metal carrier tape with contacts, and cure after the pasting is completed;

B. Using wire bonding technology to bridge the peripheral devices with gold wires to form a peripheral circuit; bridge the bare chip and the contact on the metal carrier tape, and the bare chip and the peripheral circuit;

C. Use sealant to cover the leads formed after bridging in step B, and let stand at a constant temperature.

The wire bonding technology described in step B is a wire bonding technology using a thermosonic process, and the height of the formed wire loop is 0.1 mm.

It can be seen from the above technical solutions that the mobile storage system provided by the present invention conforms to the ISO7810 standard in appearance. Compared with existing storage systems such as U disks, it can be applied to card-type devices and put into users' wallets, which is convenient Portable, and can be safely stored under the premise of user convenience.

In the mobile storage system and its access control method of the present invention, when a preset password matching the input password is found in the system, the external device can access the corresponding user data according to the access attribute in the user data storage partition corresponding to the preset password Storage partitions, so that multiple users can use the same mobile storage system without affecting the storage security of each user. When no preset password matching the input password is found in the system, all communications between the user and the mobile storage system will be rejected until The mobile storage system is powered on again, so as to ensure safe storage under the premise of user-friendly operation.

The manufacturing method of the mobile storage system of the present invention uses bare chips in the modules of the mobile storage system, and uses wire bonding technology for the manufacture of the modules, so that the volume of each module in the mobile storage system is relatively small, and these modules are based on The appearance conforming to the ISO7810 standard is encapsulated with epoxy resin to complete the manufacture of the mobile storage system. The appearance of the manufactured mobile storage system conforms to the ISO7810 standard and can be used in a USB card device.

Description of drawings

FIG. 1 is a schematic diagram of the appearance of a card device with a USB interface in the prior art;

Fig. 2 is the functional block diagram of the mobile storage system provided by the present invention;

FIG. 3 is a flow chart of the access control method of the mobile storage system of the present invention.

detailed description

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the embodiments and accompanying drawings.

Firstly, the mobile storage system provided by the present invention is introduced. The appearance of the system conforms to the ISO7810 standard and can be used in the USB card device shown in FIG. 1 . As shown in Figure 1, the USB card device has four electrode contacts on the surface of its USB interface, and the external device forms an electrical connection with these four electrode contacts, thereby powering on the storage system in the card device. For example, use the above-mentioned card device in conjunction with a card reader and other reading and writing devices, and then connect the card reader to a computer, and the computer can power on the card device through the USB electrode contacts on the card device, and then the computer can Communicate with the card device.

Fig. 2 shows a functional block diagram of the mobile storage system provided by the present invention, the mobile storage system includes: a USB transmission control module, a flash memory module and a microprocessor module.

The USB transmission control module is connected to the USB interface on the USB card device through a signal line, so as to realize data transmission with external equipment. The USB transmission control module is used to receive the prompt input password command sent by the microprocessor module, receive the input password sent by the external device, and transmit it to the microprocessor module; under the control of the microprocessor module, the external device accesses the flash memory module Corresponding user data storage partition in; under the control of the microprocessor module, reject all communication with external equipment, the communication here can include all communication such as external equipment wants to retry input password or visit flash memory module.

The flash memory module includes more than one user data storage partition and password storage area; the user data storage partition has different access attributes corresponding to different preset passwords, and is used to store user data; the password storage area is used to store Preset passwords corresponding to the access attributes of different user data storage partitions.

The microprocessor module is used to send a command prompting the input password to the USB transmission control module, and receives the input password transmitted by the USB transmission control module; when finding a preset password matching the input password in the flash memory module, control the USB transmission The control module, the external device accesses the corresponding user data storage partition in the flash memory module according to the access attribute of the preset password corresponding to the user data storage partition; when no preset password matching the input password is found in the flash memory module, the control The USB transmission control module rejects all communication between the external device and the mobile storage system.

Compared with existing storage systems such as U disks, the mobile storage system provided by the present invention conforms to the ISO7810 standard and can be used in card-type devices and put into users' wallets, which is easy to carry and can be used on the premise of user convenience. Next, secure storage is ensured. Specifically, it can be used in the USB card device shown in Figure 1; when the password is entered correctly, the external device accesses the corresponding user data storage partition in accordance with the preset password. The user data storage partition realizes that multiple users do not affect each other when using the same mobile storage system; when the password is entered incorrectly, all communication between the external device and the mobile storage system is rejected until the mobile storage system is powered on again.

In the above-mentioned mobile storage system of the present invention, the password storage area of the flash memory module can be further used to store the correspondence between preset passwords and user data storage partition access attributes, and the preset passwords can include multiple common user passwords and an administrator password , where the administrator password is used to access the mobile storage system, and the ordinary user password can be modified or added or deleted. The corresponding relationship between the preset password and the access attributes of each storage partition specifically defines the different access rights that different preset passwords have when corresponding to different user data storage partitions. The access attributes of each storage partition can include readable and writable , only readable and invisible. A simple example is used to illustrate the correspondence between preset passwords and access attributes of each storage partition.

password zone 1 Zone 2 Zone 3 administrator password readable and writable readable and writable readable and writable Pin1 readable and writable Invisible read only Pin2 read only read only read only

Pin3 Invisible readable and writable read only Pin4 read only Invisible readable and writable ... ... ... ...

Table I

As shown in Table 1, the mobile storage system is provided with four preset passwords Pin1-Pin4, and the flash memory module in the mobile storage system is divided into three user data storage partitions. Assuming that the user password used by user A is Pin1, according to the corresponding relationship shown in Table 1, user A uses the Pin1 password to access the mobile storage system, and can read and write the data in area 1, but cannot see the data in area 2, that is User A cannot see the data in zone 2 at all, and can only read the data in zone 3. The process is the same as that of user A above, assuming that user B uses the user password Pin2, after user B accesses the mobile storage system, the data in area 1 to area 3 can only be read. And the administrator password can read and write the data in the 1st area to 3rd area. Therefore, the user data storage partitions in the flash memory module may have different access attributes corresponding to different preset passwords.

Of course, according to actual needs, some user data storage partitions do not need to be encrypted and can be used as public storage areas.

After further storing the correspondence between the preset password and the access attribute of each user data storage partition in the password storage area of the flash memory module, the microprocessor module may include: an access control module and an access attribute control module.

The access control module is used to receive the input password transmitted by the USB transmission control module. The access control module searches the flash memory module for a preset password that matches the input password, and when there are multiple preset passwords, it needs to traverse all the preset passwords in the password storage area of the flash memory module. When the access control module finds a preset password matching the input password in the flash memory module, the input password is transmitted to the access attribute control module to trigger the access attribute control module, and receives the corresponding input password sent by the access attribute control module The access attribute control information controls the USB transmission control module, and the external device accesses each user data storage partition according to the access attribute of the user data storage partition corresponding to the preset password in the access attribute control information; when the access control module is in the flash memory module When no preset password matching the input password is found, the USB transmission control module is controlled to reject all communications between the external device and the mobile storage system.

The access attribute control module is used to read out the corresponding relationship between the preset password and the access attribute of the user data storage partition from the password storage area of the flash memory module according to the input password provided by the access control module, and generate a corresponding user password carrying the input password. The control information of the access attribute of the data storage partition is provided to the access control module.

In the mobile storage system provided by the present invention, it may further include an indicator light, which can light up when the mobile storage system is powered on, and is used to inform the user that the mobile storage system is powered on successfully. Because the mobile storage system of the present invention is used in the USB card device shown in Figure 1, the above-mentioned indicator lights can be light-emitting diodes embedded in the plastic substrate of the USB card device, and can be connected with the USB interface, that is, the electrode contacts using signal lines. The device is internally connected. When the mobile storage system is powered on, the light-emitting diode can be used to obtain a bright current through the electrode contacts, thereby indicating to the user that the mobile storage system is powered on successfully.

Next, the access control method of the mobile storage system of the present invention is introduced. FIG. 3 is a flow chart of the access control method of the mobile storage system of the present invention. After each power-on of the mobile storage system, the process includes:

Step 301: The microprocessor module receives the input password through the USB transmission control module.

Step 302: The microprocessor module searches the flash memory module for a preset password matching the input password, and executes step 303 if found, and executes step 304 if not found.

Step 303: the microprocessor module controls the USB transmission control module, and the external device accesses the corresponding user data storage partition in the flash memory module according to the access attribute of the user data storage partition corresponding to the preset password.

In this step, the access attributes may include read-only, read-write and invisible.

Step 304: the microprocessor module controls the USB transmission control module, rejecting all communications between the user and the mobile storage system.

In this step, if the input password is inconsistent with the preset password, it means that the user enters a wrong password, and the microprocessor module controls the USB transmission control module to reject all communication between the user and the mobile storage system. All communications include users wanting to re-enter passwords and access removable storage systems, etc.

After steps 301 to 304, the flow of the access control method using the mobile storage system in the present invention ends. Using this flow, when the user password is input correctly, the user is allowed to access according to the preset password corresponding to the access attribute of each user data storage partition. Each user data storage partition in the flash memory module realizes that when multiple users use the same mobile storage system, their respective storage security does not affect each other. When the user enters a wrong password, all communication between the user and the mobile storage system will be rejected, and the mobile storage system will start working according to the described process until the mobile storage system is powered on again, ensuring safe storage on the premise of user convenience.

In the mobile storage system and its access control method of the present invention, it is also possible to set a threshold value for the number of times of password errors per power-on, and then set a variable for the number of times of password verification failures. When comparing the value of the updated password verification failure times variable with the value exceeding the permissible password error threshold for each power-on, all communications between the user and the mobile storage system are rejected.

Finally, the manufacturing method of the mobile storage system of the present invention is introduced. The modules in the mobile storage system include bare chips and peripheral circuits formed by peripheral devices. To manufacture the mobile storage system, the modules are first constructed according to the following steps:

A. Paste the bare chip and peripheral devices on the metal carrier tape with contacts, and cure after the pasting is completed.

In this step, the operation of pasting the bare chip and its peripheral devices on the metal carrier tape can be completed by using a mounter, and the curing can be done by putting the metal carrier tape pasted with the bare chip and its peripheral devices into a thermal cycle curing box completed.

B. Using wire bonding technology to bridge the peripheral devices with gold wires to form a peripheral circuit; bridge the bare chip and the contact on the metal carrier tape, and the bare chip and the peripheral circuit.

In this step, the thermosonic process in the wire bonding process can be used, so that the curvature of the lead wire is about 0.1 mm, and the gold wire can withstand a force greater than 4 grams. This step can be done using a wire bonding machine. After step A and step B, the bare chip and its peripheral circuits can exchange data with other components to work normally.

C. Use sealant to cover the leads formed after bridging in step B, and let stand at a constant temperature.

In this step, since the position of the lead wire is suspended after the wire bonding technique is used in Step B, the lead wire is covered with sealing glue in order to fix the lead wire. Standing at constant temperature can be carried out in a thermal circulation oven.

After the modules in the mobile storage system are manufactured, these modules need to be packaged uniformly, and the modules are packaged with epoxy resin based on the shape conforming to the ISO7810 standard.

The specific embodiments described above have further described the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above descriptions are only specific embodiments of the present invention and are not intended to limit the scope of the present invention. Protection scope, within the spirit and principles of the present invention, any modification, equivalent replacement, improvement, etc., shall be included in the protection scope of the present invention.

Claims (7)

1. A mobile storage system, the system profile conforms to the ISO7810 standard, it is characterized in that the system includes: Universal Serial Bus USB transmission control module, flash memory module and microprocessor module; The USB transmission control module is used to transmit the input password of the external device to the microprocessor module; under the control of the microprocessor module, the external device accesses the corresponding user data storage partition in the flash memory module; under the control of the microprocessor module , rejecting all communication with external devices; The flash memory module includes more than one user data storage partition and password storage area; the user data storage partition has different access attributes corresponding to different preset passwords, and is used to store user data; the password storage area is used for Store preset passwords corresponding to different access attributes of the data storage partition; The microprocessor module is used to receive the input password transmitted by the USB transmission control module; when the preset password matching the input password is found in the flash memory module, the USB transmission control module is controlled, and the external device corresponds to the user according to the preset password The access attribute of the data storage partition accesses the corresponding user data storage partition in the flash memory module; when the preset password matching the input password is not found in the flash memory module, the USB transmission control module is controlled to reject all communications with external devices. 2. The mobile storage system according to claim 1, wherein the password storage area in the flash memory module is further used to store the corresponding relationship between the preset password and the user data storage partition access attributes for the microprocessor module Read the correspondence. 3. The mobile storage system according to claim 2, wherein the microprocessor module includes an access control module and an access attribute control module; The access control module is used to receive the input password transmitted by the USB transmission control module; when the preset password matching the input password is found in the flash memory module, the input password is provided to the access attribute control module to trigger the access attribute control The module receives the access attribute control information sent by the access attribute control module, controls the USB transmission control module, and the external device accesses the corresponding user data storage partition in the flash memory module according to the content of the access attribute control information; in the flash memory module When no preset password matching the input password is found, the USB transmission control module is controlled to refuse all communications with the external device; The access attribute control module is used to read the corresponding relationship between the preset password and the access attributes of each storage partition from the password storage area of the flash memory module according to the input password provided by the access control module, and generate a corresponding password carrying the input password. The storage attribute control information of the access attribute of the user data storage partition is provided to the access control module. 4. An access control method utilizing the mobile storage system according to claim 1, characterized in that, after the mobile storage system is powered on each time, the method comprises: A, the microprocessing module receives the input password through the USB transmission control module; B. The microprocessor module searches for a preset password matching the input password in the flash memory module, and executes step C when found, and executes step D when not found; C, the microprocessing module controls the USB transmission control module, and the external device accesses the corresponding user data storage partition in the flash memory module according to the access attribute of the preset password corresponding to the user data storage partition; D. The microprocessor module controls the USB transmission control module and rejects all communications with external devices. 5. The method according to claim 4, wherein the access attributes include: read-only, read-write and invisible. 6. A manufacturing method of a mobile storage system, characterized in that the method comprises: using a bare chip and peripheral circuits formed by peripheral devices to form a module in the mobile storage system; adopting a ring based on the shape of the module in compliance with the ISO7810 standard epoxy resin encapsulation; where the module is constructed as follows: A. Paste the bare chip and peripheral devices on the metal carrier tape with contacts, and cure after the pasting is completed; B. Using wire bonding technology to bridge the peripheral devices with gold wires to form a peripheral circuit; bridge the bare chip and the contact on the metal carrier tape, and the bare chip and the peripheral circuit; C. Use sealant to cover the leads formed after bridging in step B, and let stand at a constant temperature. 7. The method according to claim 6, wherein the wire bonding technique in step B is a wire bonding technique using a thermosonic process, and the height of the formed wire loop is 0.1 mm.