TW201117041A - Mutual authentication method of external storage devices - Google Patents

Abstract

A mutual authentication method of external storage devices effectively control the data transmission of a transmission interface according to a password-based user authentication protocol so that all files to be transmitted via the transmission interface are limited. Assuming that a user wants to transmit a file to a storage device via the transmission interface, the system will not open the transmission interface for the user unless it is verified by a remote server. All files transmitted to the storage device via the transmission interface are encrypted by a negotiation key. The negotiation key is established according to the file name and the user identity so the negotiation keys generated by any user or any file are different. The server records the files transmitted by each user via the transmission interface in a database of the server to monitor and manage confidential files. Further, when the user wants to decrypt the encrypted file, a same verification process must be passed and the same negotiation key must be obtained in order to successfully decrypt the file. The system will delete the negotiation key temporarily stored at the user end after each encryption or decryption process is completed to ensure the safety of the system.

Description

201117041 λ · • 6. Description of the invention: [Technical field of the invention] The present invention relates to a method for mutual authentication of external storage devices, in particular to use an effective (four) authentication protocol to monitor and manage the transmission interface to prevent The data is leaked through the external storage device, even if the external storage device is stolen, it is difficult for the pirate to read (4) the information stored, and the transmission interface authentication method for providing appropriate protection for the information security of the enterprise or the government agency. • [Prior Art] In recent years, with the rapid development of computers and information products (four), various new peripheral devices can be easily connected to PC^Noteb〇〇k and other enterprise computer terminals, including Internet and external storage devices. These new connecting devices, although (iv) humans bring efficiency and convenience, but also pose a great threat to the confidentiality and security of data. In terms of control, the Internet is relatively easy to manage, and enterprises will deploy various functions of the security device on the network gateway side. The device is like an email (audit) or an instant messaging device. In addition to anti-mug mail, viruses and other data containing inappropriate content into the user's computer caused damage, it can also record all messages entering and leaving the network. When an existing enterprise or organization constructs an internal storage network, it usually selects a general computer host and an external DAS, NAS, and SAN as the storage device connection method: 201117041

i I ' ' 1. DAS (Direct Attached Storage) is a so-called direct connection. Since DAS connects the storage device directly to the server, this design provides high security. 2. NAS (Network Attached Storage) connects the storage system directly to the local area network through a special dedicated file server. It is designed in an environment that needs to capture and share a large number of file data systems. 3. SAN (Storage Area Network) is to separate many storage devices from the regional network into another network. The biggest feature is that it can realize the many-to-many high-speed connection between the server and the storage device. Centralized management of data. Universal Serial Bus (USB) is one of the most common connection interfaces. It emphasizes plug-and-play (Plug-and-Play) and automatically detects and configures system resources. . As a result, many peripheral applications have followed, with USB as the storage interface for storage. • Devices are more popular, which makes data transmission faster and more convenient. But unfortunately, the monitoring and management system for the transmission interface is not common, and it also causes a lot of loopholes in information security. The National Aeronautics and Space Administration (NASA) has previously issued a ban on the use of external storage devices to prevent premise due to the leakage of data from internal computers via external storage devices and virus infection. f security loopholes, some units/enterprise remove the transmission interface, and also use the software to block the transmission interface, but as 201117041

I- I ’ ‘this—com, the convenience of external storage is greatly reduced. In contrast, the storage device with USB as the connection bee is difficult to manage effectively, and it also poses a great risk to the security of various confidential data; therefore, how to effectively control these instant access storage devices has become a modern An important issue of information security is β. [Invention] The purpose of the present invention is to provide an external authentication method for external authentication, which proposes an efficient authentication protocol to monitor and manage the transmission interface, hoping to retain The advantages brought by the external storage device can prevent the security problems derived from the external storage device. The mutual authentication method of the external storage device can be achieved for the above purpose, and the user must achieve mutual authentication through the pass code and the remote (four) device, and obtain the use of the business registration! 4 The operation of encrypting and decrypting the transmission of the gold interface to the transmission interface.

As for the negotiation key, the invention uses the gold exchange agreement proposed by Diffie and Heilman in 1976. The purpose of this agreement is that when both parties on the network need (4), they only need to share some (four) secret information. The operation of the modulus index allows both parties to obtain the same negotiation margin and use this key to encrypt the message that they want to transmit. However, the above-mentioned agreement is vulnerable to man-in-the-middle attacks. Suppose there is an attacker between the transmitting end and the receiving end. If the attacker sends a false call to the recipient, the recipient will be short of the material. Unable to distinguish this news 201117041 Many scholars have confirmed the method of identity of the problem party by the sender. Therefore, in recent years, it has been proposed to solve the problem that (4) the line code is the most widely used. ...: The proposed method in the present invention _ not only can effectively control the transmission and can also meet the following characteristics in the remote authentication protocol: The communication parties can reach the interaction in the most limited number of communication times. verification. • 2. The present invention is able to withstand some common attacks. 3. The negotiation key is built on the problem of solving Diffie_HeU_. [Embodiment] FIG. 2 and FIG. 2 are a schematic diagram of a system flow diagram of a mutual authentication method for an external storage device according to the present invention, and a schematic diagram of a process of verifying and encrypting data in the process of 'encryption of the data. Slots that pass through the standard transport interface are restricted. The transmission interface can be USB SuperSpeed USB, ultra-wideband (uitl*awideband) wireless USB, eSATA FireWire, PCI Express, optical transmission external interface standard (Light Peak), infrared, Bluetooth and other interfaces. It is assumed that the user 2 wants the external storage device 3 to transmit the file to the storage device through the computer transmission interface, and the system must first open the transmission interface to the user 2 through the authentication of the remote server. All files transmitted to the storage device through the transmission interface are encrypted using a negotiation key. The key is created based on the file name and user 2, so 201117041 any user 2 or (4) generated the negotiation record. Different, and the server 1 will transfer each user 2 through the transmission interface (4) The data recorded in the server 1 'has reached the machine money (four) inspection and management, in addition, if the user 2 wants to encrypt this The decryption of the Tan case must also pass the same verification procedure and obtain the same (4) commercial gold can be successfully decrypted, and the conference will delete the temporary negotiation of the user 2 after each A decryption to ensure the security of the system. The material storage device 3 can be an external portable hard disk, an external hard disk, and an external burning storage device. The following is a description of the agreed method of the present invention, the relevant parameters and symbols are defined as follows: P: is a large prime number. g: the original root selected by <. Id : The user's account number. W: User's password. (U): the server's public key and key, and r = ym £) dp λ (·): no touch one-way hash function.丨丨: String concatenation operands. Ruler. The secret conversation of the user's communication with the server. The name of the file to be encrypted. F: The file to be encrypted. Heart []: Symmetrical encryption with a ruler of gold.

Art]: Λ" is the symmetric decryption of the golden record. 201117041

i I ’ • Registration stage: In the registration stage, the user 2 first selects a set of reading π to transmit to the server! Make a registration action, feed the device! After receiving the Mimar, the account and password are first processed through the collision-free one-way hash function, and then encrypted using the secret key X, and the verification table is stored in the database towel of the feeder 1. At the end of the day, the password is deleted from the file and the registration phase is completed. This registration phase is transmitted under the secure channel ^ Communication. ※ Verification and data encryption phase: When user 2 is directed to the server! After the registration is completed, if the user 2 wants to use the instant access function of the external storage device 3, it must reach an interactive authentication with the word service device, and establish a negotiation key, especially = g〇m〇d^ The process is described in detail in four steps: • Step 1: First, the user 2 first inserts the external storage device 3 into the computer through the normal program, and inputs the correct w and π, and the system selects a current time. Poke Γ „ and randomly select a random number of corpses, and calculate = grmodp and 6 = / ^ 丨丨 / ^), and then use the public key y of server 1 to calculate 0T6m 〇 dp and verify message secretion = 丨丨ό丨丨 丨丨ό丨丨 丨丨 丨丨, then the calculated message {ς, Μ 4 ς, 竑 7;} and the file name to be encrypted ^ to the server 1 ° Step 2: When the server i received Message U and file name K, 201117041

II Server 1 will first record the w and Q of user 2 in the database, then select a time stamp 7; and check the time stamp 7; -7; < Δ Γ is legal, if not legal, then terminate this time communication. Then the server] according to the user 2's W, find the corresponding verification table in the database; r, and use its secret key $ calculation, then use y to calculate, and verify the received message Μ 4 (71 = =ΜΛ'μ'丨|7;||F") is equal. If they are equal, it means that the user 2 of the communication is legal, otherwise the communication is interrupted; then the server uses the file name F received by # "Calculate W = /I(F"丨) with q =0,+ «)^^, and finally calculate the verification message =咐,|丨"丨丨Ό ' and will be generated. , from ^ illusion to user 2. Step 2. When User 2 receives the message %, after tender, first select a current timestamp 7: and verify the server! Whether the time stamp γ", _γ <λγ is legal, if it is legal, the heart cmod/3 is calculated, and the receiver verifies that the received message is 2 or not with the self_I]_7;) Equivalence means that the word service is the legal service device and the interaction verification is successful. Finally, the user 2 calculates less = solution (four) 丨 "') negotiation record! = machi = send "future." Step 4: When User 2 and Ship 1 complete the above verification steps, the negotiation record w can be calculated. mGd/?e assumes that User 2 wants to use the instant access function of the storage device through the transmission interface. The file F can be encrypted by using the negotiation key calculated by the feeder 1 to achieve the protection of the slot and the privacy and security of the memory using the transport interface. In the case of slot decryption, assume that the next time you want to use this storage device order 201117041

In the case of i I file, it is necessary to obtain the chat gold wheel through the same verification step [to decrypt this secret file, which is [F]]. » The present invention provides user 2 with effective security for the following various attacks. The protection is analyzed as follows: Retransmission attack: In the protocol method of the present invention, the interaction authentication between the user 2 and the server i is through the verification messages Μ4ς and M4CZ, and the verification information and the generation parameters of the quiescence q all include the current selection. Time stamp factory with ', therefore, # assuming that the attacker uses the authentication message obtained by eavesdropping and M4C2 to perform the resend attack' is difficult to achieve because timestamp 7; and 7; will be different in each verification. In the setting of such an environment, the resend attack can be defended in the agreed method of the present invention. Offline password guessing attack: Suppose an attacker wants to use the offline password guessing attack to get the user 2's Mimma. First, he can get the user 2's authentication message through the public network ring^ where®=(7r mod/ 7. If the attacker wants to guess the correct password π from it is very difficult to achieve, because the agreed method of the present invention randomly selects a random number r as verification in Ζ/>-ι in each test. Factor, attack..., the law is calculated and =〆 in the case of not knowing 〃, in the absence of the situation, the attacker can not use the guessed password to find the correct and corresponding! Or M4C, therefore, this The invented protocol method can collide with the offline password guessing attack. Stealing the table-checking attack. In the agreed method proposed by the present invention, it is assumed that the verification of the server device 1 (4) is stolen by the server. Any confidential information or verification using stolen expression is legally verified. The verification report is calculated by the one-way collision-free one-way hash function and the secret record of the feeding machine 1 (4), in Solution of discrete: the problem of 'an attacker can not obtain any information obtained in the absence of α server secret key X of the case, thus in agreement method of the present invention can withstand attacks to steal card table of test.

The mutual authentication method of the external storage device 3 provided by the present invention has the following characteristics when compared with other conventional technologies: Only the authenticated legitimate user 2 authenticates the instant access function of the physical storage device 3. Even if the external storage device 3 (4) is compromised (4), the file cannot be decrypted without a key. Suppose there is a legal slot holder maliciously leaking confidential information in the storage device, and the server database t is a record. The above detailed description is specific to one of the possible embodiments of the present invention. The examples are not intended to limit the scope of the invention, and the equivalents of the embodiments of the invention are intended to be included in the scope of the invention. In summary, this case is not only innovative in terms of technical thinking, but also able to enhance the above-mentioned multiple functions compared with the use of customary items. 'The statutory invention patent element 4 that fully meets the novelty and the progressiveness should be applied according to law. It is expected that this will be approved by your bureau. 201117041 « * Invention patent application, in order to invent invention, to the sense of virtue. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic diagram of a system flow of a mutual authentication method for an external storage device according to the present invention; and FIG. 1 is a schematic flow chart of the verification and data encryption phase of the external storage device 5/3⁄4, the verification method. [Main component symbol description] # 1Server 2 User 3 External storage device 12

Claims (1)

201117041 < I ' · Seven, the scope of application for patents: 1 · An external storage device mutual authentication method, including the following steps: (A) users want to transfer files to the storage device through the transmission interface, must first pass the remote Server authentication, the system will open the transmission interface to the user; (B) All files transmitted to the storage device through the transmission interface will be encrypted using a negotiation key, which is based on the file name and the use of φ The identity is established, so the negotiation keys generated by any user or file are different. And the server records the files transmitted by each user through the transmission interface in the server database, and has reached the confidentiality case. Monitoring and management; (C) ; ^ Users want to decrypt this encrypted building must also pass the same verification procedure and obtain the same negotiation record to successfully decrypt, and the system will delete the temporary existence after each encryption and decryption The client side negotiates the key to ensure the security of the system. 2_ The mutual authentication method of the external storage device according to claim 1, wherein the authentication of the remote server includes at least a registration phase and a verification and data encryption phase. 3. The method for mutual authentication of an external storage device according to claim 2, wherein the registration phase comprises the following steps: (A) the user selects a set of account and password to transmit to the server for registration; 13 201117041 (B) After receiving the password, the feeding machine will first process the account and Mama via the collision-free one-way hash function, and then use the secret key to encrypt and calculate = 丨; n^modp, and the verification table; r is stored in the server's database, and (C) the server deletes the received password from the system and completes the registration phase. 4. The mutual authentication method of the external storage device as described in claim 2, wherein the verification and data encryption phase is performed after the user registers with the feeding device, if the user wants to use the external storage device For instant access, you must have an interactive authentication with the server and establish a negotiation key ii: = gWmod/7. 5. The method for mutual authentication of the external storage device as described in claim 4, wherein the communication and the data encryption phase are as follows: (A) The user first inserts the external storage device into the computer through a normal procedure. In, and enter the correct account number and password, the system will select a current timestamp 7; and randomly select a random random number 并, and calculate with 6 = W 丨 | _, and then use the server's public Key / calculation C, = (IT modp and verification message = 咐丨丨 & 丨丨 [丨丨 ^), then the calculated message {<:"^4 also;, 栻7;} and to be encrypted The file name & is sent to the server; (B) When the server receives the message ^ and the file name, the server will first record the user account and password in the database, and pick up a 201117041 II • · Timestamp and check timestamp Τ:-Γ„<ΔΓ is legal, if it is not legal, the communication is terminated, then the server finds the corresponding verification form π in the database according to the user account, and Use its secret gold record to calculate 'following Use y to calculate the corpse and verify that the received message M4C, =/ι(Λ'丨丨6'丨丨7;丨丨F") is equal. If they are equal, the user of the communication is legal, otherwise Then interrupt the communication; then the server uses the received file name to calculate "=/^丨卜) and #C2=(兄+w)mo<^, finally calculate the verification message, and will generate the {C2, M4C2,7;} is transmitted to the user; (C) When the user receives the message, first select a current timestamp 7: 'and verify the server's timestamp d<Ar is legal, if it is legal, then calculate = ( C2 -Amodp, the receiver verifies that the received message is equal to the self-generated kus K||7;), if it is equal, it means that the server is a valid server, and the interactive verification is successfully achieved; Calculate the 丨 丨 1 «, :) negotiation key AT = (wmodp; (D) When the user and the server complete the above verification steps, the negotiation key r = g~m〇dp can be calculated, assuming the user To use the instant access function of the storage device via USB, you can use this to negotiate with the server. (4) The identification of the corpse is encrypted, that is, research] to achieve the protection of the broadcast case and the privacy and security of the USB cache memory. S_如_料利_5th item is connected to the mutual authentication device The method 'where the file decryption aspect' assumes that the file in the storage device 15 201117041 1 » ' _ next time must be obtained through the same verification step to obtain the conversation key to decrypt the secret file. 16