CN1285039C - Method for encrypting hidden data with virtual space - Google Patents

Abstract

The invention relates to a method for encrypting and hiding data with virtual space, which is applied to an embedded information storage device, protects files through an encryption program, and hides the data in the embedded information storage device and an information processing device, and comprises the following steps: installing the embedded information storage device in an information processing device; establishing a virtual database in the information processing device; setting the virtual database through a user terminal; storing a file in the virtual database, and encrypting data of the file through an encryption mechanism; continuously and repeatedly detecting whether the embedded information storage device is still installed in the information processing device or not until a positive result is detected, continuing normal operation of the information processing device, and ending the process. The invention uses double security to increase the security and confidentiality of data, so as to achieve the purpose of information security management.

Description

Method for encrypting hidden data with virtual space

technical field

The invention relates to an embedded information storage device, in particular to a method applied to the embedded information storage device and having virtual space encryption to hide data.

Background technique

Today, with the rapid development of science and technology, information processing devices have been widely used in every field. With the continuous development of science and technology, the functions of information processing devices are becoming more and more diversified. The device not only needs various functions for users to manage information, but also needs enough space to store huge information.

It can be seen from the above situation that in order to cooperate with the mobile communication era, the portable information storage device has become an indispensable equipment in the information processing device, because the portable information storage device has convenient portability, but its disadvantages are The reason is that the capacity is too small to store a large amount of information. For example, the floppy disk (Floppy Disk) has faced the dilemma of insufficient capacity and has been gradually eliminated by the market. Fast memory card (Memory Stick; MS)... etc., to achieve the storage function, but it has not seen a significant effect on data protection, and the following table illustrates the general existing file security system, from the table. There are still many disadvantages in many confidential systems. Many important confidential data and files in individuals and enterprises also need to be kept secret. The functions are achieved through external hardware devices, which is actually a technical issue yet to be solved.

Classification typical procedure Operation description shortcoming Confidential Cabinet (Confidential Directory) Security disk, i-key Drag the file into a specific directory to encrypt it, otherwise drag it out to decrypt it  If you cannot execute programs or files in the encrypted directory, you must drag the files out first. After the operation, you must remember to drag them in and delete the plaintext files outside. Encrypt a file into another file WinZip, etc., will change the file name Usually designed to encrypt and decrypt files with the right mouse button Same as above, but more inconvenient to operate The system can encrypt the files generated by itself Word, Excel, etc. Password will be asked when opening the file Only specific (self-generated) files can be encrypted, and there are many cracking programs Transparent encryption and decryption GoodLock After encrypting the file, the original file name can be maintained. If the smart card exists, the operation is the same as the general file operation, otherwise the file cannot be interpreted. Only data can be encrypted, but encrypted data can be stored anywhere on the hard disk

Contents of the invention

In view of this, the purpose of the present invention is to overcome the deficiencies and defects of the prior art, and provide a method for encrypting and hiding data in virtual space, the main purpose of which is to install user confidential data files, files and application programs in information processing The virtual database provided by the device or embedded information storage device hides the used path, information and process through detection, copying, moving, deleting, etc., so as to avoid the theft and use of malicious people. In addition, through a virtual hard disk Encryption technology (On-the-fly Encryption) encrypts all data stored in information processing devices or embedded information storage devices. Only when the data is needed, can the plaintext be read without decryption, and the data will always be encrypted. text, and each different embedded information storage device has a different password, which does not have any relevance, and the decryption device of the present invention is an embedded information storage device, only the embedded information storage device is installed on its belonging information Only in the processing device can it be decrypted, that is, an embedded information storage device can only correspond to its specific information processing device.

In order to achieve the above purpose, the present invention provides a method for encrypting hidden data in a virtual space, which is applied to an embedded information storage device, protects files through an encryption program, and hides the data in the embedded information storage device and information processing device , the method includes the following steps:

installing the embedded information storage device in an information processing device;

Establish a virtual database on the information processing device, cut an area through a storage space provided by the information processing device, and establish a target path of the virtual database in the area; or establish a virtual database on the embedded information storage device cutting an area through a storage space provided by the embedded information storage device, and establishing a target path of the virtual database in the area;

configuring the virtual database through a client;

storing a file in the virtual database, encrypting the data of the file through an encryption mechanism; copying a specific path through the virtual database, the specific path refers to any information and history of the file stored in the information processing device; After copying, move the specific path to the storage space;

Detect whether the embedded information storage device is still installed in the information processing device, if the embedded information storage device is not installed in the information processing device, delete the specific path stored in the storage space, and then return to Detecting whether the embedded information storage device is still installed in the information processing device, and continuously repeating the detection until finally reaching the next step;

If the embedded information storage device is still installed in the information processing device, the information processing device continues to operate normally, and this process ends.

According to the method disclosed in the present invention, the important data of the user is protected by a double security mode, even if the embedded information storage device is lost, others cannot use it in other information processing devices, so as to achieve the function of keeping personal data confidential. The present invention at least includes the following steps: installing an embedded information storage device in the information processing device and establishing at least one virtual database in the information processing device, then setting the virtual database through the user terminal, and storing files in the virtual database, and then detecting It is tested whether the embedded information storage device is still installed in the information processing device, and finally the hidden file is displayed in a specific path in the information processing device.

Description of drawings

Fig. 1 is a schematic diagram of the present invention having a method for encrypting and hiding data in a virtual space;

Fig. 2-a, Fig. 2-b and Fig. 2-c are flowcharts of the method for encrypting and hiding data in virtual space according to the present invention;

FIG. 3-a and FIG. 3-b are user interface diagrams of the present invention having a method for encrypting and hiding data in a virtual space;

Fig. 4-a, Fig. 4-b, Fig. 4-c, and Fig. 4-d are implementation diagrams of the method for encrypting and hiding data in a virtual space according to the present invention.

Explanation of symbols in the figure

10 virtual database

20 files

30 information processing device

Step 100 Install an embedded information storage device in an information processing device

Step 110 Establish at least one virtual database on the information processing device

Step 112 Cut a region through a storage space provided by the information processing device

Step 114 Establish a target path of the virtual database in the area

Step 116 Cut a region through a storage space provided by the embedded information storage device

Step 118 Establish a target path of the virtual database in the area

Step 120 Set up the virtual database through a client

Step 130 Store a file in the virtual database

Step 132 The file encrypts the data through an encryption mechanism

Step 134 Copy the specific path through the virtual database

Step 136 Move the specific path to the storage space

Step 140 Detect whether the embedded information storage device is still installed in the information processing device

Step 150 The information processing device continues to operate normally

Step 160 Hide the file displayed in a specific path in the information processing device

Step 162 Delete the specific path stored in the storage space

Detailed ways

The present invention is a method for encrypting and hiding data in a virtual space. Please refer to FIG. 1 , which is a schematic diagram of the method for encrypting and hiding data in a virtual space according to the present invention. The description is as follows:

In the present invention, the embedded information storage device is firstly installed on the information processing device 30, and then activated, and both the information processing device 30 and the embedded information storage device can provide a virtual database 10 for keeping files and important data , when the user stores the file 20 in the virtual database 10, the virtual database 10 will encrypt the file 20 according to an encryption technology, only in the process of reading, the user can see the plain text, and the path of the file When the process is back stored in the information processing device 30, the virtual database 10 will capture and record its characteristic state. When the embedded information storage device is removed, all information will be hidden to avoid the use of interested people. However, as shown in the figure, it can be set up A plurality of virtual databases 10 (called virtual disks) store different data and can be managed through different setting modes; and the file 20 can be used for an application program to handle specific matters.

The above-mentioned embedded information storage device is connected with the information processing device 30 through a connection interface, and the connection interface can be a high-density transmission connection interface (IEEE1394), and can also be a universal serial bus interface (USB interface), but the information The processing device 30 may be any one of a desktop computer, a notebook computer (NB), a personal digital assistant (PDA), a mobile phone, or a palm-sized information processing device. In addition, the embedded information storage device can be any kind of mobile memory, integrated circuit card (IC CARD) and smart card (SMART CARD).

Please refer to Fig. 2-a, Fig. 2-a is a flow chart of the method for encrypting and hiding data in a virtual space according to the present invention, which is described as follows:

First install an embedded information storage device in an information processing device 30 (step 100), after the installation is completed, then create at least one virtual database 10 in the information processing device or embedded information storage device (step 110), establish After the program of the virtual database 10 is finished, the virtual database 10 is set through a user terminal (step 120). The setting is divided into four modes, which will be explained in detail after the flow is finished. After the setting is completed, it will be stored in a file 20 in the virtual database 10 (step 130), then detect whether the embedded information storage device is still installed in the information processing device 30 (step 140), if the embedded information storage device is still installed in the information processing device 30 , then the information processing device 30 continues to operate normally (step 150), and ends this process; if the embedded information storage device is not installed in the information processing device 30, the file 20 is hidden and displayed in the information processing device 30 A specific path, and then return to step 140, continue to detect and repeat the above process, and complete this process.

The above four modes can be divided into mount/disable mode, space management mode, password mode and backup/restore mode, which are described as follows:

1. Mounting/disabling mode: refers to enabling (enable)/disabling (disable) the specific virtual database of the client; the user can generate an unlimited number of virtual databases 10 in the information processing device 30, But there is a limit to the number of simultaneous mounts. And a virtual database 10 can only be used in the mounted state.

2. Space management mode: means that the user side changes the capacity of the virtual database. If the capacity of the virtual database 10 is not enough, but the hard disk where it is located still has space, you can use this command to increase it.

3. Password mode: provide a rescue password to control when the user end loses the embedded information storage device, limit a specific number of rescue times and enter the read-only state of the virtual database. If the embedded information storage device is not around for a while, and the user still wants to use the virtual database 10, at this time, the virtual database 10 can be mounted by means of a rescue password. One limitation is that virtual database 10 cannot be added.

4. Backup/restore mode: refers to backing up the data required by the user terminal from the virtual database to the information processing device, and the restore mode is to restore data from the information processing device to the virtual database. A good working habit is to back up the data frequently and restore the backup data when necessary. "Backup" can compress the entire virtual database 10 into a .zip file and store it in a directory specified by the user.

"Restore" can restore the .zip file generated by "Backup" into a virtual database 10 file, which is stored in the directory we specify. The file name is the same as the file before backup.

Next, the detailed process of establishing the virtual database 10 in step A and step B of the present invention will be described. Step A refers to establishing the virtual database 10 in the information processing device 30 in step 110; step B refers to establishing the virtual database 10 in step 110. Embedded information storage device. The two steps A and B can be carried out by choosing one, and the user can customize the area created by the virtual database 10, please refer to FIG. 2-b.

After step A, then a region is divided by a storage space provided by the information processing device 30 (step 112), and the storage space can be a hard disk (Hard Disk; HD), and the region is composed of logical storage blocks ( block), after the cutting is completed, a target path of the virtual database 10 is established in the area (step 114), by which the capacity of the virtual database 10 can be changed and confidential data can be hidden.

And if the user selects step B, then a region is cut by a storage space provided by the embedded information storage device (step 116), after the cutting is completed, a target path of the virtual database 10 is established in the region (step 116). 118), the capacity size of the virtual database 10 can be changed and confidential data can be hidden by this method.

The information processing device in step 110 of establishing at least one virtual database in the information processing device can be replaced by the embedded information storage device. However, step A and step B cannot be performed at the same time.

Then, the detailed process of storing the file 20 into the virtual database 10 in step C and the specific path of hiding the file 20 in step D in the present invention will be described, please refer to FIG. 2-c.

After step C, then the file 20 encrypts the data through an encryption mechanism (step 132), this encryption mechanism is a virtual hard disk encryption technology (On-the-fly Encryption), and then replicates the specific path through the virtual database 10 (Step 134), after copying is completed, move the specific path to the storage space (Step 136).

After step D, then delete the specific path stored in the storage space (step 162), and the specific path refers to any information and history of the file stored in the information processing device, so that all information and history can be completely hidden , to achieve the purpose of the present invention.

The virtual hard disk encryption technology mentioned above means that the data is automatically decrypted before being read into the program from the hard disk. On the other hand, the program will automatically encrypt the data before storing it in the hard disk. The entire encryption and decryption operation is completely transparent, and the user does not need to memorize which files are plaintext or ciphertext. Therefore, the operation is completely the same as the general practice. To put it further: Only when the program needs the data, can the plaintext be read. The data on the hard disk is always ciphertext. The necessary and sufficient condition for decryption is that the embedded information storage device is installed on the information processing device.

Please refer to FIG. 3-a and FIG. 3-b, which are user interface diagrams of the method for encrypting and hiding data in virtual space according to the present invention. The figure illustrates the interface for the user to establish the virtual database 10 and the interface for setting the virtual database 10, and then Just can utilize various functions mentioned in the present invention to operate. Next, please refer to FIG. 4-a, FIG. 4-b, FIG. 4-c, and FIG. 4-d, which are implementation diagrams of the method for encrypting and hiding data in a virtual space according to the present invention.

The present invention will be easier to understand through the present embodiment, especially referring to the specific path mentioned in step 160. In this embodiment, this specific path refers to the necessary path for displaying under the Microsoft Windows operating system; certainly not To limit the present invention, if using under different operating systems, there must be other different paths that need to be hidden to achieve the effect of the present invention; and because the specific path is hidden; if the user wants to have the same effect on other computers, it needs to be hidden. It is necessary to have another embedded information storage device again, so an embedded information storage device is only matched with one computer.

First, select (Dr.eye 98 Yidiantong) application software to install on a virtual database. When the embedded information storage device is not removed, the software on the virtual database will be displayed in "program set, desktop, installation/removal, tool bar", etc. You will see the four locations, as shown in Figure 4-a and Figure 4-b, after the embedded information storage device is unplugged, the virtual database will disappear automatically, and the software on the virtual database can be found in "program set, desktop, install/move The data in the four locations such as "Delete, Toolbar" will disappear. After inserting the embedded information storage device back, these data will be completely restored without any impact. As mentioned above, "Programs, Desktop, Install/Remove, "Toolbar", that is, the specific path mentioned above, including all processes and information will be hidden, which will increase the confidentiality of data security.

Although the present invention is disclosed above with the aforementioned preferred embodiments, it is not intended to limit the present invention. Those skilled in the art may make some changes and modifications without departing from the spirit and scope of the present invention. Therefore, this present invention The scope of protection of the invention should be defined by the scope of the claims.

Claims (16)

1. method with Virtual Space enciphering hiding data; be applied on the embedded information accumulation device, by encipheror protection archives, and the data in hiding this embedded information accumulation device and the signal conditioning package; it is characterized in that this method includes the following step:

This embedded information accumulation device is installed in a signal conditioning package;

Set up a virtual data base in this signal conditioning package, cut a zone, a destination path of this virtual data base is built on this zone by the storage area that this signal conditioning package provided; Perhaps set up a virtual data base in this embedded information accumulation device, cut a zone, a destination path of this virtual data base is built on this zone by the storage area that this embedded information accumulation device provided;

Hold this virtual data base of setting by a user;

Deposit archives in this virtual data base, archives are encrypted data by an encryption mechanism; Duplicate a particular path by this virtual data base, this particular path is meant any information and the course that retains in this signal conditioning package of these archives; Duplicate and this particular path is moved to this storage area after finishing;

Whether detect this embedded information accumulation device still is installed in this signal conditioning package, if embedded information accumulation device is not installed in this signal conditioning package, then deletion deposits this particular path in this storage area in, whether then return this embedded information accumulation device of detecting still is installed in this signal conditioning package, continue to repeat detecting, until finally reaching next step;

If embedded information accumulation device still is installed in this signal conditioning package, then this signal conditioning package continues normal operation, and process ends.

2. the method with Virtual Space enciphering hiding data as claimed in claim 1 is characterized in that, this embedded information accumulation device is connected with this signal conditioning package by a connecting interface.

3. the method with Virtual Space enciphering hiding data as claimed in claim 2 is characterized in that, this connecting interface is a high density transmission connecting interface.

4. the method with Virtual Space enciphering hiding data as claimed in claim 2 is characterized in that, this connecting interface is a universal serial interface.

5. the method with Virtual Space enciphering hiding data as claimed in claim 1, it is characterized in that this signal conditioning package can select one arbitrarily from the combination of desktop PC, laptop computer, personal digital assistant, mobile phone, hand held signal conditioning package.

6. the method with Virtual Space enciphering hiding data as claimed in claim 1 is characterized in that, this sets up a virtual data base in the step of this signal conditioning package, more comprises the following step:

Cut a zone by the storage area that this signal conditioning package provided; And

One destination path of this virtual data base is built on this zone.

7. the method with Virtual Space enciphering hiding data as claimed in claim 6 is characterized in that this storage area can be a hard disk, and should be made up of the block of logical storage area in the zone.

8. the method with Virtual Space enciphering hiding data as claimed in claim 1 is characterized in that, this sets up a virtual data base this signal conditioning package in the step of this signal conditioning package, can replace by this embedded information accumulation device.

9. the method with Virtual Space enciphering hiding data as claimed in claim 8 is characterized in that, this embedded information accumulation device can be set up a virtual data base, comprises the following step:

Cut a zone by the storage area that this embedded information accumulation device provided; And

One destination path of this virtual data base is built on this zone.

10. the method with Virtual Space enciphering hiding data as claimed in claim 1, it is characterized in that, this user holds and sets this virtual data base, comprises following setting pattern: one carry/shutdown mode, a space management pattern, a cipher mode and a backup/reduction-mode.

11. the method with Virtual Space enciphering hiding data as claimed in claim 10 is characterized in that, this carry/shutdown mode refers to this user is held this specific virtual data base of activation/decapacitation.

12. the method with Virtual Space enciphering hiding data as claimed in claim 10 is characterized in that, this space management pattern refers to that this user holds the amount of capacity of this virtual data base of change.

13. the method with Virtual Space enciphering hiding data as claimed in claim 10, it is characterized in that, this cipher mode, provide rescue password keyholed back plate in addition when this user holds this embedded information accumulation device of loss, more limit a specific rescue number of times and enter the state of read-only this virtual data base.

14. the method with Virtual Space enciphering hiding data as claimed in claim 10, it is characterized in that, this backup/reduction-mode, be with this user hold required data from this virtual data library backup in this signal conditioning package, and reduction-mode be from this signal conditioning package restoring data to this virtual data base.

15. the method with Virtual Space enciphering hiding data as claimed in claim 1 is characterized in that, these archives can be an application program and handle specific item.

16. the method with Virtual Space enciphering hiding data as claimed in claim 1 is characterized in that, this embedded information accumulation device can select one arbitrarily from the combination of portable reservoir, integrated circuit card and smart card.

Images