WO2019161582A1

WO2019161582A1 - Mobile storage device and encryption method and apparatus therefor

Info

Publication number: WO2019161582A1
Application number: PCT/CN2018/078818
Authority: WO
Inventors: 李志雄; 覃敏; 钱俊光
Original assignee: 深圳市大迈科技有限公司
Priority date: 2018-02-24
Filing date: 2018-03-13
Publication date: 2019-08-29
Also published as: CN108376224A

Abstract

An encryption method for a mobile storage device, the mobile storage device being provided with a wireless communication circuit. Said method comprising: acquiring a device identifier of a wireless communication device when a mobile storage device establishes a wireless communication connection with the wireless communication device; determining whether the acquired device identifier is the device identifier which is preset in the mobile storage device and bound to the mobile storage device; and if the acquired device identifier is the device identifier which is preset in the mobile storage device and bound to the mobile storage device, permitting reading and writing of an encrypted data storage area in the mobile storage device. As long as the wireless communication device is within the communication range of the mobile storage device, no additional operation is needed, that is, a read/write operation can be performed on the mobile storage device effectively, being beneficial to improving the convenience of user operations.

Description

Mobile storage device and encryption method and device thereof

Technical field

The present invention belongs to the field of data security, and in particular, to a mobile storage device and an encryption method and apparatus thereof.

Background technique

The mobile storage device includes a USB flash drive, etc., wherein the Chinese name of the USB flash drive is fully referred to as a USB flash drive, and the English full name is "USB flash disk". The mobile storage device is a micro-high-capacity mobile storage product that uses a USB interface and does not require a physical drive. It is connected to a computer and the like through a USB interface to realize plug and play.

The data can be read and written conveniently by the mobile storage device, which brings great convenience to the user. Moreover, in order to improve the security of the data in the mobile storage device, the data in the mobile storage device can be encrypted by the encryption software running on the PC, so that the data in the mobile storage device can be prevented from being stolen by others. However, when the data in the mobile storage device is protected by the encryption software on the PC side, each time the user reads the data in the mobile storage device, the user needs to use the encryption software frequently, which is troublesome and is not conducive to improving the read data. The convenience of use.

technical problem

In view of this, the embodiments of the present invention provide a method, an apparatus, and a device for encrypting a mobile storage device, so as to solve the problem that the operation encryption software required for the mobile storage device to perform encryption in the prior art is cumbersome to use.

Technical solution

A first aspect of the embodiments of the present invention provides a method for encrypting a mobile storage device, where the mobile storage device is provided with a wireless communication circuit, and the method for encrypting the mobile storage device includes:

Obtaining a device identifier of the wireless communication device when the mobile storage device establishes a wireless communication connection with the wireless communication device;

Determining whether the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device;

And if the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device, allowing the encrypted data storage area in the mobile storage device to be read and written.

With reference to the first aspect, in a first possible implementation manner of the first aspect, before the step of acquiring the device identifier of the wireless communication device, the method further includes:

Determining whether the mobile storage device stores a device identifier bound to the mobile storage device;

If the device identification bound to the mobile storage device is not stored, the device identification of the currently connected wireless communication device is bound to the mobile storage device.

With the first possible implementation of the first aspect, in a second possible implementation manner of the first aspect, if the device identifier that is bound to the mobile storage device is not stored, the method further includes:

Sending information that does not store the device identifier bound to the mobile storage device to the master device directly connected to the mobile storage device, so that the master device sets first authentication information, where the first identity verification information is used to update and modify the mobile storage The device ID to which the device is bound.

In conjunction with the first aspect, in a third possible implementation manner of the first aspect, the method further includes:

Receiving the unbind request sent by the wireless communication device, deleting the device identifier bound by the mobile storage device according to the unbinding request, where the wireless communication device is the wireless communication device verified by the first identity verification information.

In conjunction with the first aspect, in a fourth possible implementation manner of the first aspect, the method further includes:

And when the first identity verification information sent by the upper computer of the wired connection of the mobile storage device is received, the upper computer is allowed to read and write the encrypted data storage area in the mobile storage device.

In conjunction with the first aspect, in a fifth possible implementation manner of the first aspect, the method further includes:

The primary controller of the mobile storage device is bound to the encrypted storage area. When detecting that the primary controller bound to the encrypted storage area is replaced, the data of the encrypted storage area is prohibited from being read or written.

In a second aspect, an embodiment of the present invention provides a mobile storage device encryption method, where the mobile storage device encryption method includes:

Establishing, by the wireless communication device, a wireless connection with the mobile storage device, and acquiring a device identifier of the wireless communication device;

Sending the device identification of the wireless communication device to the mobile storage device such that the mobile storage device determines whether to allow reading and writing of the encrypted data storage area in the mobile storage device based on the received device identification.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the method further includes:

If the device identification bound to the mobile storage device is not stored, the device identification of the wireless communication device is transmitted to the mobile storage device such that the mobile storage device is bound to the device identification sent by the wireless communication device.

With reference to the second aspect, in a second possible implementation manner of the second aspect, the method further includes:

Receiving a request to replace the first authentication information, or receiving a request to release the binding with the mobile storage device;

When the wireless communication device is the wireless communication device verified by the first identity verification information, or the device identifier of the wireless communication device has been bound to the mobile storage device, allowing the first identity verification information to be replaced, Or unbinding the device identification of the wireless communication device with the mobile storage device.

With reference to the second aspect, the first possible implementation manner of the second aspect, or the second possible implementation manner of the second aspect, in a third possible implementation manner of the second aspect, the wireless communication device is automatically scanned Find and connect to a mobile storage device that has established a wireless connection;

Alternatively, the wireless communication device establishes a connection with the mobile storage device by inputting the encrypted information.

In a third aspect, an embodiment of the present invention provides a mobile storage device encryption device, where the mobile storage device is provided with a wireless communication circuit, and the mobile storage device encryption device includes:

a device identifier obtaining unit, configured to acquire a device identifier of the wireless communication device when the mobile storage device establishes a wireless communication connection with the wireless communication device;

a device identifier determining unit, configured to determine whether the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device;

The privilege acquisition unit is configured to allow reading and writing of the encrypted data storage area in the mobile storage device if the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device.

In conjunction with the third aspect, in a first possible implementation manner of the third aspect, the device further includes:

a storage determining unit, configured to determine whether the mobile storage device stores a device identifier bound to the mobile storage device;

And a binding unit, configured to bind the device identifier of the currently connected wireless communication device to the mobile storage device if the device identifier bound to the mobile storage device is not stored.

In a fourth aspect, an embodiment of the present invention provides a mobile storage device encryption device, where the mobile storage device encryption device includes:

a device identifier obtaining module, when the wireless communication device establishes a wireless connection with the mobile storage device, and acquires a device identifier of the wireless communication device;

And a device identifier sending module, configured to send the device identifier of the wireless communication device to the mobile storage device, so that the mobile storage device determines whether to allow reading and writing of the encrypted data storage area in the mobile storage device according to the received device identifier.

A fifth aspect of an embodiment of the present invention provides a mobile storage device including a memory, a processor, and a computer program stored in the memory and operable on the processor, wherein the processor executes The computer program implements the steps of the method of any of the first aspects.

A sixth aspect of the embodiments of the present invention provides a computer readable storage medium storing a computer program, wherein the computer program is executed by a processor to implement any of the first aspects The steps of the method described.

Beneficial effect

The beneficial effects of the embodiment of the present invention compared with the prior art are: by setting a wireless communication circuit in the mobile storage device, when the wireless communication circuit in the mobile storage device establishes a connection with the wireless communication device, the mobile storage device acquires the The device identifier of the wireless communication device determines whether the device identifier is bound to the mobile storage device, and if the acquired device identifier is the device identifier bound to the mobile storage device, the encrypted data in the mobile storage device is allowed to be read and written. a storage area, so that as long as the wireless communication device is within the communication range of the mobile storage device, no additional operations are required, that is, the mobile storage device can be effectively read and written, and when the wireless communication device is away from the communication range, The mobile storage device cannot be read or written, and the security of the data of the mobile storage device is ensured, and the convenience of the user operation is improved.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the embodiments or the description of the prior art will be briefly described below. It is obvious that the drawings in the following description are only the present invention. For some embodiments, other drawings may be obtained from those of ordinary skill in the art in light of the inventive workability.

1 is a schematic structural diagram of a system for encrypting a mobile storage device according to an embodiment of the present invention;

2 is a schematic flowchart of an implementation method of a method for encrypting a mobile storage device according to an embodiment of the present invention;

FIG. 3 is a schematic diagram of an implementation process of another method for encrypting a mobile storage device according to an embodiment of the present invention; FIG.

4 is a schematic diagram of a mobile storage device encryption apparatus according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of an apparatus for encrypting a mobile storage device according to an embodiment of the present invention; FIG.

FIG. 6 is a schematic diagram of a mobile storage device according to an embodiment of the present invention.

Embodiments of the invention

In the following description, for purposes of illustration and description However, it will be apparent to those skilled in the art that the present invention may be practiced in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the invention.

In order to explain the technical solution described in the present invention, the following description will be made by way of specific embodiments.

As shown in FIG. 1 , the mobile storage device encryption system according to the embodiment of the present application includes a wireless communication device 1 and a mobile storage device 2 , wherein the mobile storage device 2 includes a wireless communication circuit 21 and a mobile storage device controller 22 . The wireless communication device 1 may be a smart phone, a tablet computer, a notebook computer, a wearable device, or the like. The wireless communication circuit provided in the wireless communication device 1 may be a Bluetooth communication circuit. Of course, it is not limited thereto, and may be a WIFI communication circuit or the like. The mobile storage device 2 is provided with a wireless communication circuit and a mobile storage device controller 22, and the mobile storage device controller 22 is configured to detect whether the mobile storage device is connected to a device such as a computer, and is received by a wireless communication circuit. The device identifier is received, and the device identifier is compared and analyzed. When the received device identifier meets the preset permission requirement, the computer or the like is allowed to perform data read and write operations on the mobile storage device. The mobile storage device controller may detect whether the device identifier of the wireless communication device currently connected to the mobile storage device is legal according to a predetermined period, and if not, disable data read and write operations on the mobile storage device. In addition, in order to further ensure the security of data in the mobile storage device, when the mobile storage device controller is destroyed, data stored in the mobile storage device may be erased or the like.

FIG. 2 is a schematic flowchart of an implementation method of a method for encrypting a mobile storage device according to an embodiment of the present disclosure, which is as follows:

In step S201, when the mobile storage device establishes a wireless communication connection with the wireless communication device, acquiring a device identifier of the wireless communication device;

Specifically, the mobile storage device may be a storage device such as a USB flash drive, an SD card, a solid state drive SSD, or an embedded memory card.

The mobile storage device establishes a connection with the wireless communication device, and generally, when the mobile storage device is inserted into a device such as a computer, after the wireless communication circuit in the mobile storage device is powered on, the wireless environment of the mobile storage device is started to be wireless. Detection and pairing of communication devices. When the mobile storage device is not connected to a device such as a computer, since the mobile storage device itself generally does not provide a power source such as a battery, when the mobile storage device is not connected to a device such as a computer, the mobile storage device does not detect whether there is any environment in the environment. Other wireless communication devices.

After the mobile storage device is successfully paired with the wireless communication device, the paired mobile storage device can be recorded by the wireless communication device. When the wireless communication device detects a wireless signal of the paired mobile storage device, such as a Bluetooth signal, a wireless communication connection between the wireless communication device and the mobile storage device is automatically established.

Alternatively, the wireless communication device may also establish a connection with the mobile storage device through a private channel, by manually inputting a connection password, or by clicking and logging in by an APP application in the wireless communication device, and the wireless communication device will MAC address, etc. The device identification of the wireless communication device is sent to the mobile storage device.

That is, the access request sent by the wireless communication device may be received by the main controller in the mobile storage device, and the access request may include a device identifier of the wireless communication device, such as a MAC address or the like. If the received device identifier is consistent with the device identifier stored in the primary controller in the mobile storage device, the encrypted data storage area of the mobile storage device is allowed to be read and written.

In step S202, it is determined whether the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device;

The present application includes two implementation scenarios. The first implementation scenario is that the device identifier that is bound to the mobile storage device is not stored in the mobile storage device. This scenario will be specifically described in the corresponding embodiment of FIG. 3 .

The second implementation scenario is that the mobile storage device stores a device identifier bound to the mobile storage device. When the mobile storage device receives the device identifier of the wireless communication device, the received device identifier is compared with the stored device identifier bound to the mobile storage device.

The mobile storage device may internally store one or more device identifiers bound to the mobile storage device, that is, the mobile storage device may be in any one of the plurality of wireless communication devices having the set device identifier and the mobile When the wireless communication circuits in the storage device are connected, the mobile storage device can be effectively determined to be in a readable and writable state.

Additionally, the wireless communication device can communicate with the mobile storage device by installing an application. When the device bound to the mobile storage device is lost, in order to continue to use the mobile storage device, first identity verification information for modifying the device identifier bound to the mobile storage device may be set, The first authentication information may be a text password or a fingerprint password. The first authentication information may be saved on the server, or the first authentication information may be saved in the mobile storage device.

When the user needs to release the device identifier bound to the mobile storage device, the first identity verification information and the mobile storage device identifier may be sent to the server or the mobile storage device, where the first identity verification information may be a verification password. When the first authentication information is authenticated by the server or the mobile storage device, the wireless communication device sends an unbinding request to the mobile storage device, requesting to release the binding of the mobile storage device and the wireless communication device, that is, deleting the mobile storage The device identification of the wireless communication device stored in the device. Obtaining the unbinding right, the device identifier bound to the mobile storage device can be released. Alternatively, when the device identifier of the mobile communication device is the same as the device identifier in the mobile storage device, the unbinding permission may also be obtained, and the device identifier bound to the mobile storage device may be released.

Further, the device identifier of the currently used wireless communication device may be sent to the mobile storage device as the device identifier bound to the mobile storage device.

Similarly, when the wireless communication device is a verified wireless communication device, such as the wireless communication device is verified by the first identity verification information, or the device identifier of the wireless communication device is tied to the mobile storage device If yes, the right to modify the first authentication information can be obtained, and the modification of the first authentication information is completed.

In step S203, if the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device, the encrypted data storage area in the mobile storage device is allowed to be read and written.

If the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device, allowing read and write operations on the mobile storage device, if the acquired device identifier is not the The device identifier bound to the mobile storage device preset in the mobile storage device prohibits reading and writing the mobile storage device, thereby facilitating protection of the encrypted data storage area in the mobile storage device.

In addition, when the mobile storage device is directly connected to the upper computer, it can also receive first identity verification information, such as a password, input by the user on the upper computer. When the first authentication information is verified, the encrypted data storage area of the mobile storage device is allowed to be read and written. For example, when the mobile storage device is a USB flash drive, the USB flash drive can be connected to the computer. You can read and write the encrypted data storage area of the USB flash drive by directly entering the password on the computer.

When the wireless communication device bound to the mobile storage device is lost, and the user forgets the first authentication information, the mobile storage device may be restored to the factory settings by performing an initial operation on the mobile storage device, and the storage in the mobile storage device is deleted. data.

In addition, in order to effectively ensure the security of the encrypted data storage area, the main controller of the mobile storage device is bound to the encrypted data storage area. When the main controller is replaced, the read and write operations on the encrypted data storage area are prohibited, so that the security of the data can be further ensured.

FIG. 3 is a schematic flowchart of another implementation method of a method for encrypting a mobile storage device according to an embodiment of the present disclosure, which is as follows:

In step S301, when the mobile storage device establishes a wireless communication connection with the wireless communication device, determining whether the mobile storage device stores a device identifier bound to the mobile storage device;

Specifically, when the mobile storage device is used for the first time, the device identifier bound to the wireless communication device may not be set. The determining of the device identifier bound by the mobile storage device may be detected by a mobile storage device controller in the mobile storage device, and the detection result may be sent to a wireless communication device that establishes a wireless connection with the mobile storage device. The mobile storage device controller may determine, by way of setting the identifier bit, a determination message sent by the mobile storage device determined by the mobile storage device, where the determination message is determined by the mobile storage device whether the storage is stored The device ID bound to the storage device. For example, the identifier content "0" can be used to indicate the device identifier that is not currently bound. The identifier content "1" indicates that the number of device identifiers currently bound is one, and the identifier content "2" indicates the number of device identifiers currently bound. It is two.

In step S302, if the device identifier bound to the mobile storage device is not stored, the device identifier of the currently connected wireless communication device is bound to the mobile storage device;

When the wireless communication device sends the device identifier, different transmission modes may be selected according to the specific type of the wireless communication device. For example, when the wireless communication device is a mobile phone of the Android system, the MAC address may be actively sent. The device identifier, when the wireless communication device is a mobile phone of the IOS system, needs to acquire the device identifier of the wireless communication device by means of the mobile storage device.

When the device identifier bound to the mobile storage device is not stored in the mobile storage device, the device identifier bound in the mobile storage device needs to be initialized. In the embodiment of the present application, the initialized device identifier bound by the mobile storage device is a device identifier of a wireless communication device that establishes a wireless connection with the mobile storage device for the first time.

In a preferred embodiment, the method further includes the step S303, sending, to the master device directly connected to the mobile storage device, the information that is not stored by the mobile storage device, so that the master device sets the first identity verification information, The first authentication information is used to update and modify the device identifier bound to the mobile storage device;

In order to facilitate management of the device identifier bound to the mobile storage device, the present application may also connect the primary device (such as a desktop computer or a notebook directly connected to the mobile storage device when the mobile storage device establishes a connection with the wireless communication device for the first time). a prompt message is sent in the computer for prompting the user to input the first authentication information, where the first authentication information is used to update and modify the device identifier bound to the mobile storage device, so as to prevent the wireless communication device of the user from being lost. And resetting, by using the first identity verification information, a new device identifier bound to the mobile storage device, so that the mobile storage device can continue to be used.

After receiving the first identity verification information, the wireless communication device may send the first identity verification information to the mobile storage device device, or may send the message to the server for saving, when it is required to change the binding in the mobile storage device. When the device is identified, the right is verified to the mobile storage device or the server.

In addition, after the mobile storage device is powered on, the wireless communication circuit in the mobile storage device is in a connectable state, and when the wireless communication device confirms the connection, the wireless communication device can establish a connection. In a preferred embodiment, a connection may be established with the mobile storage device by using an application, and the device identifier of the wireless communication device is used as a device identifier bound to the mobile storage device.

In step S304, if a device identifier bound to the mobile storage device is stored, acquiring a device identifier of the wireless communication device;

In step S305, it is determined whether the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device;

In step S306, if the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device, the encrypted data storage area in the mobile storage device is allowed to be read and written.

Steps S304-S306 are substantially the same as steps S201-S203 described in FIG. 2, and are not described herein again.

The embodiment of the present application determines the device identifier in the mobile storage device, and if the device identifier bound to the mobile storage device is not stored, the device identifier of the wireless communication device that establishes the wireless connection for the first time is used as the The device identifier bound to the mobile storage device can be used to carry the wireless communication device when the user uses the mobile storage device, and does not require other frequent operations, which is beneficial to improving the convenience of the user.

It should be understood that the size of the sequence of the steps in the above embodiments does not imply a sequence of executions, and the order of execution of the processes should be determined by its function and internal logic, and should not be construed as limiting the implementation of the embodiments of the present invention.

FIG. 4 is a schematic structural diagram of a device for encrypting a mobile storage device according to an embodiment of the present disclosure. As shown in FIG. 4, the device for encrypting a mobile storage device includes:

The device identifier obtaining unit 401 is configured to acquire a device identifier of the wireless communication device when the mobile storage device establishes a wireless communication connection with the wireless communication device;

The device identifier determining unit 402 is configured to determine whether the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device;

The permission obtaining unit 403 is configured to allow reading and writing of the encrypted data storage area in the mobile storage device if the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device. .

Preferably, the device further comprises:

The mobile storage device encryption device of FIG. 4 is a mobile storage device-based encryption method corresponding device in the mobile storage device encryption method of FIG.

In addition, the present application further provides an apparatus for implementing a method for encrypting a mobile storage device based on a wireless communication device side. As shown in FIG. 5, the mobile storage device encryption device includes:

The device identifier obtaining module 501 is configured to establish a wireless connection between the wireless communication device and the mobile storage device, and obtain a device identifier of the wireless communication device;

The device identifier sending module 502 is configured to send the device identifier of the wireless communication device to the mobile storage device, so that the mobile storage device determines whether to allow reading and writing of the encrypted data storage area in the mobile storage device according to the received device identifier. .

The mobile storage device encryption device corresponds to the mobile storage device encryption method, and details are not described herein.

FIG. 6 is a schematic diagram of a mobile storage device according to an embodiment of the present invention. As shown in FIG. 6, the mobile storage device 6 of this embodiment includes a processor 60, a memory 61, and a computer program 62 stored in the memory 61 and operable on the processor 60, such as a mobile storage device encryption. program. When the processor 60 executes the computer program 62, the steps in the foregoing embodiments of the mobile storage device encryption method are implemented, such as steps 101 to 103 shown in FIG. Alternatively, when the processor 60 executes the computer program 62, the functions of the modules/units in the foregoing device embodiments are implemented, such as the functions of the modules 401 to 403 shown in FIG.

Illustratively, the computer program 62 can be partitioned into one or more modules/units that are stored in the memory 61 and executed by the processor 60 to complete this invention. The one or more modules/units may be a series of computer program instruction segments capable of performing a particular function, the instruction segments being used to describe the execution of the computer program 62 in the mobile storage device 6. For example, the computer program 62 can be divided into a device identification acquisition unit, a device identification determination unit, and a rights acquisition unit, and the specific functions of each unit are as follows:

The mobile storage device 6 can be a USB flash drive, an SD card, a solid state drive SSD, or an embedded memory card. The mobile storage device may include, but is not limited to, processor 60, memory 61. It will be understood by those skilled in the art that FIG. 6 is merely an example of the mobile storage device 6, and does not constitute a limitation of the mobile storage device 6, and may include more or less components than those illustrated, or may combine some components, or different. The components, such as the mobile storage device, may also include input and output devices, network access devices, buses, and the like.

The so-called processor 60 can be a central processing unit (Central Processing Unit, CPU), can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (Application Specific Integrated Circuit (ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware components, etc. The general purpose processor may be a microprocessor or the processor or any conventional processor or the like.

The memory 61 may be an internal storage unit of the mobile storage device 6, such as a hard disk or memory of the mobile storage device 6. The memory 61 may also be an external storage device of the mobile storage device 6, such as a plug-in hard disk equipped on the mobile storage device 6, a smart memory card (SMC), and a secure digital (Secure Digital, SD) card, flash card (Flash Card) and so on. Further, the memory 61 may also include both an internal storage unit of the mobile storage device 6 and an external storage device. The memory 61 is used to store the computer program and other programs and data required by the mobile storage device. The memory 61 can also be used to temporarily store data that has been output or is about to be output.

It will be apparent to those skilled in the art that, for convenience and brevity of description, only the division of each functional unit and module described above is exemplified. In practical applications, the above functions may be assigned to different functional units as needed. The module is completed by dividing the internal structure of the device into different functional units or modules to perform all or part of the functions described above. Each functional unit and module in the embodiment may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit, and the integrated unit may be hardware. Formal implementation can also be implemented in the form of software functional units. In addition, the specific names of the respective functional units and modules are only for the purpose of facilitating mutual differentiation, and are not intended to limit the scope of protection of the present application. For the specific working process of the unit and the module in the foregoing system, reference may be made to the corresponding process in the foregoing method embodiment, and details are not described herein again.

In the above embodiments, the descriptions of the various embodiments are different, and the parts that are not detailed or described in a certain embodiment can be referred to the related descriptions of other embodiments.

Those of ordinary skill in the art will appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

In the embodiments provided by the present invention, it should be understood that the disclosed apparatus/terminal device and method may be implemented in other manners. For example, the device/terminal device embodiments described above are merely illustrative. For example, the division of the modules or units is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units. Or components may be combined or integrated into another system, or some features may be omitted or not performed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated modules/units, if implemented in the form of software functional units and sold or used as separate products, may be stored in a computer readable storage medium. Based on such understanding, the present invention implements all or part of the processes in the foregoing embodiments, and may also be completed by a computer program to instruct related hardware. The computer program may be stored in a computer readable storage medium. The steps of the various method embodiments described above may be implemented when the program is executed by the processor. Wherein, the computer program comprises computer program code, which may be in the form of source code, object code form, executable file or some intermediate form. The computer readable medium may include any entity or device capable of carrying the computer program code, a recording medium, a mobile storage device, a removable hard disk, a magnetic disk, an optical disk, a computer memory, a read only memory (ROM, Read-Only Memory). ), random access memory (RAM), electrical carrier signals, telecommunications signals, and software distribution media. It should be noted that the content contained in the computer readable medium may be appropriately increased or decreased according to the requirements of legislation and patent practice in a jurisdiction, for example, in some jurisdictions, according to legislation and patent practice, computer readable media It does not include electrical carrier signals and telecommunication signals.

The embodiments described above are only for explaining the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art will understand that The technical solutions described in the examples are modified, or some of the technical features are equivalently replaced; and the modifications or substitutions do not deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in Within the scope of protection of the present invention.

Claims

A method for encrypting a mobile storage device, wherein the mobile storage device is provided with a wireless communication circuit, and the method for encrypting the mobile storage device includes:

Obtaining a device identifier of the wireless communication device when the mobile storage device establishes a wireless communication connection with the wireless communication device;

Determining whether the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device;

And if the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device, allowing the encrypted data storage area in the mobile storage device to be read and written.
The mobile storage device encryption method according to claim 1, wherein before the step of acquiring the device identifier of the wireless communication device, the method further comprises:

Determining whether the mobile storage device stores a device identifier bound to the mobile storage device;

If the device identification bound to the mobile storage device is not stored, the device identification of the currently connected wireless communication device is bound to the mobile storage device.
The mobile storage device encryption method according to claim 2, wherein if the device identifier bound to the mobile storage device is not stored, the method further includes:

Sending information that does not store the device identifier bound to the mobile storage device to the master device directly connected to the mobile storage device, so that the master device sets first authentication information, where the first identity verification information is used to update and modify the mobile storage The device ID to which the device is bound.
The method of encrypting a mobile storage device according to claim 1, wherein the method further comprises:

Receiving the unbind request sent by the wireless communication device, deleting the device identifier bound by the mobile storage device according to the unbinding request, where the wireless communication device is the wireless communication device verified by the first identity verification information.
The method of encrypting a mobile storage device according to claim 1, wherein the method further comprises:

And when the first identity verification information sent by the upper computer of the wired connection of the mobile storage device is received, the upper computer is allowed to read and write the encrypted data storage area in the mobile storage device.
The encryption method of the mobile storage device according to any one of claims 1 to 5, wherein the method further comprises:

The primary controller of the mobile storage device is bound to the encrypted storage area. When detecting that the primary controller bound to the encrypted storage area is replaced, the data of the encrypted storage area is prohibited from being read or written.
A mobile storage device encryption method, the mobile storage device encryption method includes:

Establishing, by the wireless communication device, a wireless connection with the mobile storage device, and acquiring a device identifier of the wireless communication device;

Sending the device identification of the wireless communication device to the mobile storage device such that the mobile storage device determines whether to allow reading and writing of the encrypted data storage area in the mobile storage device based on the received device identification.
The mobile storage device encryption method according to claim 7, wherein the method further comprises:

Determining whether the mobile storage device stores a device identifier bound to the mobile storage device;

If the device identification bound to the mobile storage device is not stored, the device identification of the wireless communication device is transmitted to the mobile storage device such that the mobile storage device is bound to the device identification sent by the wireless communication device.
The mobile storage device encryption method according to claim 7, wherein the method further comprises:

Receiving a request to replace the first authentication information, or receiving a request to release the binding with the mobile storage device;

When the wireless communication device is the wireless communication device verified by the first identity verification information, or the device identifier of the wireless communication device has been bound to the mobile storage device, allowing the first identity verification information to be replaced, Or unbinding the device identification of the wireless communication device with the mobile storage device.
The mobile storage device encryption method according to any one of claims 7-9, wherein the step of establishing a wireless connection between the wireless communication device and the mobile storage device comprises:

The wireless communication device searches for and connects to the mobile storage device that has established a wireless connection by means of automatic scanning;

Alternatively, the wireless communication device establishes a connection with the mobile storage device by inputting the encrypted information.
A mobile storage device encryption device, wherein the mobile storage device is provided with a wireless communication circuit, and the mobile storage device encryption device includes:

a device identifier obtaining unit, configured to acquire a device identifier of the wireless communication device when the mobile storage device establishes a wireless communication connection with the wireless communication device;

a device identifier determining unit, configured to determine whether the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device;

The privilege acquisition unit is configured to allow reading and writing of the encrypted data storage area in the mobile storage device if the acquired device identifier is a device identifier bound to the mobile storage device preset in the mobile storage device.
The mobile storage device encryption device according to claim 11, wherein the device further comprises:

a storage determining unit, configured to determine whether the mobile storage device stores a device identifier bound to the mobile storage device;

And a binding unit, configured to bind the device identifier of the currently connected wireless communication device to the mobile storage device if the device identifier bound to the mobile storage device is not stored.
A mobile storage device encryption device, wherein the mobile storage device encryption device comprises:

a device identifier acquisition module, the wireless communication device establishes a wireless connection with the mobile storage device, and acquires a device identifier of the wireless communication device;

And a device identifier sending module, configured to send the device identifier of the wireless communication device to the mobile storage device, so that the mobile storage device determines whether to allow reading and writing of the encrypted data storage area in the mobile storage device according to the received device identifier.
A mobile storage device comprising a memory, a processor, and a computer program stored in the memory and operable on the processor, wherein the processor executes the computer program as claimed in claim 1 The steps of any of the methods of any of 6.
A computer readable storage medium storing a computer program, wherein the computer program is executed by a processor to implement the steps of the method of any one of claims 1 to 6.