TWI665579B - Active network backup - Google Patents

Abstract

An active network backup device of the present invention mainly includes at least one computer host and hardware components. The computer host and other network devices cannot log in, set, and access data on the hardware components, thereby enabling hardware This software prevents and blocks viruses, kidnapping software, and hackers; not only that, it also has a physical security switch that controls the opening and closing of the port. You must use artificial operations to turn on the physical security switch to use independent outputs. Enter the port to confirm that the management personnel act on the fly to prevent robot programs from hacking. The most important thing is that the hardware cannot execute destructive instructions. The virus cannot execute or operate in the hardware. It can also avoid setting errors. Accidents such as accidental deletion, or abducted software or malicious programs disguised as setting programs are downloaded and executed by careless users to destroy files.

Description

   Active Network Backup   

An active network backup device of the present invention refers to a technology applied to the field of network security in detail, and the main technical focus lies in the design of independent storage of hardware space without any Internet connection to enable security management Users can accurately back up data without being damaged. More importantly, through various software and hardware methods and considerations of human factors, layer-by-layer protection to enhance file security. And after the setting is completed, it will be automatically executed without human intervention, avoiding human factors such as laziness and forgetting to affect the security of the file, which is a very practical invention.

Under the current vigorous development of technology, information is transmitted through wireless networks to save time and shorten the distance between people. However, for data security, data is generally encrypted. Or it is placed in the cloud, so that the data can only be opened or downloaded by the user. However, the Internet is full of fishy, ridiculous, colorful, and a bunch of illegal people (called hackers) will Some websites conduct illegal activities such as attacking and abducting materials, and severe cases will also perform network paralysis and virus throwing. This is a headache for people who need confidentiality and company names. However, relevant industry players on the market are afraid of What the guest has done further develops so-called security devices, firewalls, etc. Although viruses, attacks, etc. can be blocked or even isolated in a short period of time as expected, the hacker's self-proclaimed is the superb means, in the long run it will Breaking the restrictions of security devices and firewalls has led to repeated occurrences.

There are also many specialized company accounts on the market today, which mainly provide company account numbers and users' data storage to avoid internal data loss and damage caused by hackers. Otherwise, otherwise The user's negligence in operation has resulted in data loss or damage that cannot be rescued. Such a company line is set up to solve the above problems, but this type of security company uses data backup. The means of data transmission can only be achieved through the Internet connection settings. This is nothing more than a hackable channel for hackers, so the backup methods of security companies still exist to a certain extent. Defects.

In view of the above circumstances, the inventor has invested a lot of time in researching related knowledge, comparing various advantages and disadvantages, conducting research and development of related products, and undergoing many experiments and tests, and finally launched an "active network backup device" "Improve the above-mentioned shortcomings to meet the needs of the public.

The main purpose of the present invention is to provide absolute security in the backup of data, and to facilitate easy and fast classification, compression, encryption, etc., thereby protecting the data to be stored. The entire backup and restore process is performed by hardware CPU Actively do the work of accessing data, not to occupy the resources and space of the original computer or network storage device. Its improved conventional technology is used for data backup because its computer host or network storage device will be connected to the Internet. Internet, making it vulnerable to hackers, viruses, damage and kidnapping. Therefore, in order to achieve the above-mentioned object and effect, the present invention has three implementation modes. The first is an active network backup device, which includes: at least one computer host (such as SERVER, PC, NB, NAS, or other network). Storage device, etc., hereinafter referred to as a computer host), which has a permission unit; a hardware piece that is connected to at least one computer host by direct connection or by wired or wireless LAN connection, and An access space is provided in the hardware to access the data copied by at least one computer host, and the authority unit of the at least one computer host is open to read permission to the hardware to actively perform data capture and copy in one direction, and When the backup data needs to be restored, the permission unit opens the write permission to write data to the hardware in a single direction, restore the backed up data to the computer host, and the hardware has a built-in integration unit to perform data in the access space. Organize, arrange, compress, encrypt, etc., as well as a built-in control unit to control the hardware to read and write data to the host computer, and the operation of the hardware; , Computer hosts and other network devices cannot log in, set up, or access data to the hardware. This allows the hardware to reliably prevent and block attacks from viruses, kidnapping software, and hackers.

According to the foregoing description and definition, the present invention is further technically characterized in that the hardware can only perform backup and restore related operations in the above direct connection or using a wired or wireless LAN, because it does not have a connection The function of the Internet can avoid being invaded by malicious programs on the Internet.

According to the foregoing description and definition, the present invention is further technically characterized in that the hardware further includes a setting unit and an independent wired or wireless port, and the setting unit can set the data of the hardware to the host computer. Backup and restore program settings. The setting unit must be connected to external devices (such as mobile devices, keyboards, mice, or monitors) through independent wired or wireless input and output ports of the hardware. The connection between the external equipment and the hardware is independent of the connection between the hardware and the host computer, and is isolated from each other. Because the hardware settings and operations cannot be performed through the host computer, viruses, The abduction software and hackers invaded the hardware through the host computer connection.

According to the foregoing description and definition, the present invention is further technically characterized in that the hardware further has a detection warning unit built in, and the detection warning unit mainly detects the data copied in the access space and the data to be copied. If the data in the host computer is abnormal, the alarm unit is detected and further controlled by a warning component of the hardware to generate a warning message reminder; and the warning component is a horn, a buzzer, a flashing light, or an acousto-optic component. The computer host installs an application with a warning function, and through the connection with the computer host, notifies the computer host to use a sound and light, text message, mail and other methods to raise a warning message to notify the user.

According to the invention, according to the foregoing description and definition, its further technical feature is that the hardware is further provided with a switch, and the switch-on relationship can forcibly close the connection between the hardware and the computer host, which can be used for system proposal. Automatic or manual disconnection of hardware from the host computer when a virus or hacking alert occurs.

According to the invention, according to the foregoing description and definition, a further technical feature is that the hardware can be installed in at least one computer host or separated.

The second type of the present invention is an active network backup device with a physical security switch, which includes: at least one computer host having a permission unit; and a hardware component directly connected to the at least one computer host. Connected or wired or wireless LAN connections are interconnected, and an access space is provided in the hardware to access data copied by at least one computer host, and the authority unit of the at least one computer host is open for reading The permission is given to the hardware to actively perform data capture and copy in a single direction, and when the backup data needs to be restored, the permission unit opens the write permission to the hardware to write data in a single direction and restore the backup data to the computer host; The hardware piece has a physical safety switch which controls the opening and closing of at least one wired or wireless independent input / output port of the hardware piece, and the independent input / output port is used to connect external input The device is used to configure the backup and restore program settings of the hardware. The physical security switch is composed of at least one manual switch or lock or fingerprint recognition or iris recognition. Among them, before the administrator needs to make or change the hardware settings of the computer host, it must be manually operated to turn on the physical security. The switch can use independent I / O ports for hardware settings to confirm that the management personnel acted on the fly to prevent robot programs from hacking.

According to the description and definition of the second implementation form, the present invention further has the technical feature that the hardware is provided with an identity recognition unit. When the physical security switch is turned on by personnel, if it is not fingerprint recognition or iris recognition, Then the manager must enter the password, voice recognition and other identity verification procedures to log in and operate the hardware to ensure that the manager is operating on the fly.

According to the description and definition of the second implementation mode, the present invention further has the technical feature that the physical safety switch has an automatic timing off. If the correct setting message is received within the valid timing period, it will be re-timed. , Delay the automatic closing of the connection function, to prevent the management personnel on the fly from forgetting to close the independent input and output ports of the hardware and the keyboard, mouse, screen, mobile phone, portable device, etc. that must be used when setting the hardware Wait for the connection between external input and output devices.

According to the description and definition of the second implementation mode, the present invention further has the technical feature that the automatic timer closing structure will first warn that the connection will be closed after the closing condition is reached, and the user only needs to operate the entity again. The safety switch or entering the correct setting message can delay the auto-off function again.

The third embodiment of the present invention is an active network backup device with a function of eliminating instructions for destroying files, which includes: at least one computer host having a permission unit; a hardware component and at least one computer host They are connected to each other by a direct connection or a wired or wireless LAN connection, and the hardware has an access space to access the data copied by at least one computer host, and the authority unit of the at least one computer host The open read permission gives hardware hardware a single direction of data grabbing and copying, and when the backup data needs to be restored, the permission unit opens the write permission to the hardware to write data in a single direction and restore the backup data back to the computer host. Among them, for the safety of backup files, this hardware cannot execute destructive instructions, such as delete, modify, open files (execute files), etc., which will destroy or change files, only non-destructive instructions such as create, move , Copy, backup, restore, etc., when the hardware is unfortunately backed up to the virus-infected data later, because the virus cannot be executed inside the hardware Or operations, it can not be destroyed before the backup data has been completed, the set also prevent accidental deletion and other unexpected errors occur, or abducted or malware disguised as soft setup program, and undermine the implementation of the file to be downloaded after careless users.

According to the description and definition of the third embodiment, the present invention is further technically characterized in that the hardware is provided with a serial port dedicated to external backup media, and the serial port is used to connect to a storage medium for moving storage. Take the old and expired backup data in the space to save space. When the move instruction is executed, if the external media is not inserted, the move instruction cannot be completed and stopped.

Therefore, the present invention can be said to be a very practical and progressive invention, which is worthy of being promoted by the industry and being made public.

(1) ‧‧‧Computer host

(11) ‧‧‧Authority unit

(2) ‧‧‧hardware

(21) ‧‧‧Access Space

(22) ‧‧‧Consolidation Unit

(23) ‧‧‧Control unit

(24) ‧‧‧Setting unit

(25) ‧‧‧Port

(26) ‧‧‧Detection and warning unit

(27) ‧‧‧Identification Unit

(28) ‧‧‧Port

(3) ‧‧‧Warning kit

(4) ‧‧‧Switch

(5) ‧‧‧Physical safety switch

(52) ‧‧‧Automatic timing switch

The first figure is a block diagram of the present invention.

In order to clearly illustrate the above-mentioned objects and effects that the present invention can achieve, the features and effects of the embodiments of the present invention will be described in detail with reference to the drawings. Please refer to the first diagram to the third diagram. The present invention has three implementation forms. First, the first implementation form is an active network backup device, which includes: at least a computer host (1), which has a Authority unit (11); a hardware piece (2), which is connected to at least one computer host (1) by direct connection or wired or wireless LAN connection, and is connected to the hardware piece ( 2) An access space (21) is provided internally or externally to access the data copied by at least one computer host (1), and the authority unit (11) of the at least one computer host (1) is open to read hardware to the hardware (2) actively grab and copy data in a single direction, and when the backup data needs to be restored, the permission unit (11) opens the write permission to the hardware (2) to write data in a single direction and restore the backup data back The computer host (1) and the hardware (2) have a built-in integration unit (22) to organize and arrange the data in the access space (21), and a built-in control unit (23) to control the hardware (2) Read data, write data to the host computer (1), and operate the hardware (2); Machine (1) and other network equipment cannot log in, set, and access the hardware (2), so that the hardware (2) can have at least one secure and independent backup data to prevent and prevent Blocks attacks by viruses, kidnapping software, and hackers (the foregoing is the main technical feature of the main embodiment of the present invention, which corresponds to the content of the first item of the scope of the patent application for this case, and the purpose and implementation mode of the present invention can be known in detail, and The technical features described in the patent application scope of the subsidiary application are detailed or additional technical features of the first content of the patent application scope, rather than limiting the scope of the first patent application scope. Items do not necessarily include the technical features described in the scope of the remaining subsidiary application patents).

Ordinary company names or highly confidential files are most afraid of intrusions, infections, and attacks by malware, kidnapping software, viruses, and hackers. Because of the Internet connection, viruses, The above problems, such as malware, are most likely to flow around through the Internet connection, causing all kinds of data, files, software, etc. in the computer host to be poisoned and abducted, so that the hard-made files and data are put to waste, although There are so-called firewalls and the assistance of anti-virus and anti-theft software in the market, but their capabilities and effects are really limited. According to the advancement of science and technology and the malicious intentions of the people, there are still loopholes in high-performance firewalls and security software. The loss can be reduced only by continuous and continuous backup. Therefore, the present invention allows the hardware (2) to become independent independently through the non-internet connection between the hardware (2) and the computer host (1). Components, and the relationship between the hardware (2) and the host computer (1) is only the authority unit (11) has the authority to open and transfer between the hardware (2), and It can limit the single-direction grabbing of the hardware (2), backup the data in the computer host (1) and store it in the access space (21), and then through the integration unit (22) in the hardware (2) Sort and classify the data copied into the access space (21). This method does not require the use of the Internet at all, which greatly reduces viruses, kidnapping software, and hackers' attacks and intrusions via the Internet. In addition, when When the company line number is lost due to the loss of data in the computer host (1), the original data can be retrieved through the backup of the hardware (2), but the data in the hardware (2) must be restored to the computer ( 1), only through the computer host (1) to the hardware (2) to open the permissions, so that the original uninfected (undamaged) data in the access space (21) can be restored back to the computer host (1 ), In this way, users can continue to work from the original process, without causing the loss of files and must be re-created to spend more mental and physical energy.

According to the foregoing first embodiment of the present invention, the hardware (2) and the host computer (1) must be connected directly or be implemented using a wired or wireless LAN architecture. 2) Actions related to data backup and restoration of the computer host (1), because the hardware (2) itself does not have the function of connecting to the Internet, and cannot be controlled and accessed by the computer host (1) and other equipment Data, in this way, hardware (2) can be prevented from being invaded by malicious programs, viruses, abduction software, etc., to avoid damage to the data that has been backed up; in addition, please refer to the first figure, the present invention The design of the body piece (2) further includes a setting unit (24) and an independent wired and wireless port (25). The setting unit (24) can be used for the hardware (2) to the computer. Host computer (1) data backup and restore program settings, for example, through the setting unit (24), you can set the hardware (2) to back up important data of the computer host (1), such as: data selection, backup cycle , Setting of backup address and restore date The above information is just an example and is not used to limit the type of setting. In addition, the setting unit (24) must be wired or wireless through the independent port (25) of the hardware (2). The connection allows the user to operate and set the hardware (2) through the setting unit (24), and the port (25) can be connected to an external device for user operation, and the aforementioned external device such as a mobile device , Keyboard, mouse, or display, etc., and the connection of external devices to the hardware (2) through the port (25) does not interfere and is different from the connection between the hardware (2) and the host computer (1) Connection, so the two connections are isolated from each other, which can prevent viruses, kidnapping software, and hackers from invading the hardware (2) through the host computer (1), see the first figure.

Please refer to the first figure. In order to allow the user to determine at the first time whether the backup and restore data of the computer host (1) is normal, the hardware (2) further Built-in a detection warning unit (26), the detection warning unit (26) mainly detects whether the data copied in the access space (21) and whether the data in the computer host (1) to be copied is abnormal. Detecting the warning unit (26) and further controlling one of the warning components (3) of the hardware (2) to generate a warning message reminder; and the warning component (3) is a horn, a buzzer, a flashing light or an acousto-optic element, When the hardware (2) backs up the computer host (1), if it is found that the data to be backed up has abnormal data changes, the detection and warning unit (26) is under inspection at any time, so that the detection When a problem is detected, a warning component (3) will be activated to generate an abnormal message reminder of the alarm, or the computer host or the user's portable device will be alerted, so that hardware components can be provided (2) Users quickly learn that the host computer (1) has a problem or anomaly; in addition, The installation method of the invented hardware (2) can be designed to operate independently and separate from the computer host (1), or the hardware (2) is built in at least one computer host (1) or NAS, etc. Inside the network storage device (1).

Finally, the present invention further provides a switch (4) on the design of the hardware (2), which mainly provides the user to stop the operation immediately when a problem is found. Therefore, the setting of the switch (4) You can forcibly close the connection between the hardware (2) and the computer host (1), which can be used to automatically or manually cut or stop the hardware (2) and the computer host when the system raises a virus or hacking intrusion alert (1) to ensure the internal security of the hardware (2), the host computer (1), and the integrity of the data. Please refer to the first figure.

According to the first embodiment of the present invention, the second embodiment differs from the first embodiment only in that the hardware (2) is provided with a physical safety switch (5), and the physical switch (4) ) Controls the opening and closing of a wired or wireless independent I / O port (25) of the hardware (2), and the independent I / O port (25) is used to set up a backup of the hardware (2) And restore program settings. The physical security switch (5) is composed of at least one manual switch or lock or fingerprint recognition or iris recognition. Please refer to the first picture, when the management staff needs to make or change the hardware and hardware parts (2) to the computer host Before the setting of (1), the physical security switch (5) must be turned on manually to use the independent I / O port (25) to perform the backup or restore settings of the hardware (2) to confirm the management Personnel are ad hoc operations to prevent robot programs from hacking, please refer to the first picture.

Following the above description, in order to ensure that the operation of the hardware piece (2) is turned on by the user, the hardware piece (2) further includes an identification unit (27). When the physical security switch (5) is turned on by the personnel on the plane If it is not fingerprint recognition or iris recognition, the manager must enter the identity verification procedures such as password and voice recognition to log in and operate the hardware (2) to ensure that the manager (user) is operating on-the-fly. Refer to the first figure; and in order to completely prevent the invasion of viruses and abduction software, the user's time must be restricted. Therefore, the physical security switch (5) has an automatic timer switch (52). When the correct setting message is received within the valid time period, it will re-time and delay the automatic closing of the connection function to prevent the manager of ad hoc operation from forgetting to close the port between the hardware (2) and the setting input device (25 ) Connection, if the setting information has not been set correctly within the valid time, immediately close the independent I / O port (25) connection between the hardware (2) and the setting input device to avoid The intended virus and software invade the hardware (2) through this connected input device, and the automatic timer switch (52) will first warn that the connection will be closed after the shutdown condition is reached (time is up). By operating the physical security switch (5) once or entering the correct setting message, the automatic shutdown function can be postponed again, as shown in the first figure.

Finally, the third embodiment of the present invention is different from the first two implementations. The main point is that for the safety of backup files, the hardware (2) cannot execute destructive instructions, such as deleting, modifying, and opening files (executing Files) and other instructions that can destroy or change files. There are only non-destructive instructions, such as creating, moving, copying, backing up, restoring, etc., when the hardware is unfortunately backed up to data that was later infected by the virus, because the virus It cannot be executed or operated in hardware, so it cannot destroy previously backed up data. It can also avoid accidents such as accidental deletion due to incorrect settings, or abducted software or malicious programs disguised as setting programs and being careless users. The file is executed after downloading and destroys the file. In addition, the hardware (2) is provided with a series of ports (28) dedicated to external backup media. The series of ports (28) are used to connect storage media to move the old storage space. The old expired backup data saves space. When the move instruction is executed, if the external media is not inserted, the move instruction cannot be completed and stopped, see the first figure.

The above are only used to explain the preferred embodiments of the present invention, and are not intended to limit the present invention in any form. Therefore, any modification of the present invention made in the same spirit of the invention Or the changes, which are other forms that can be implemented and have the same effect, should still be included in the scope of the present invention.

To sum up, the "active network backup device" of the present invention is practically and cost-effectively in full compliance with the needs of industrial development, and the disclosed structural invention also has an unprecedented innovative structure, so its There should be no doubt about "newness", and the present invention can be more effective than the conventional structure, so it is also "progressive". It fully meets the requirements of the patent application requirements for invention patents in China. Application and kindly ask the Bureau to review and give affirmation.

Claims (12)

An active network backup device includes: at least one computer host having a permission unit; a hardware component that is directly connected to at least one computer host or using a wired or wireless LAN connection It is interconnected, and an access space is provided inside or outside the hardware to access the data copied by at least one computer host, and the authority unit of the at least one computer host is open to read permission to the hardware to actively perform a single direction. Data grabbing and copying, and when the backup data needs to be restored, the permission unit opens the write permission to write data to the hardware in a single direction, restore the backed up data to the computer host, and the hardware has a built-in integration unit for storage. The data in the space is sorted, arranged, compressed, encrypted, and a built-in control unit controls the hardware to read data, write data to the computer, and operate the hardware. Among them, the computer and other networks Devices cannot log in, set up, or access data on the hardware. This allows the hardware to reliably defend and block viruses, kidnapping software, and hackers. s attack. The active network backup device described in item 1 of the scope of patent application, wherein the hardware can only perform backup and restore related operations in the above-mentioned direct connection or wired and wireless LAN, and it does not have a connection The function of the Internet can avoid being invaded by malicious programs on the Internet. The active network backup device described in item 1 of the scope of patent application, wherein the hardware further includes a setting unit and an independent wired or wireless port, and the setting unit can set the hardware to the computer host. Data backup and restore procedures, the setting unit must be connected to external devices (such as mobile devices, keyboards, mice, or displays) through independent wired or wireless input and output ports of the hardware to perform hardware operation and settings. The connection between the external device and the hardware is independent of the connection between the hardware and the computer host, and is isolated from each other. Because the hardware settings and operations cannot be performed through the computer host, it can be avoided Viruses, kidnapping software, and hackers invade hardware through host computer connections. According to the active network backup device described in the first item of the patent application scope, wherein the hardware further includes a detection and warning unit, the detection and warning unit mainly detects data copied in the access space, or Whether the data in the computer host to be copied is abnormal, the detection warning unit and further controlling one of the hardware components to generate a warning message reminder; and the warning component is a horn, a buzzer, a flashing light or an acousto-optic component. It is also possible to install an application with a warning function on the computer host, and notify the computer host to notify the user by means of sound and light, text message, and mail through the connection with the computer host. According to the active network backup device described in item 1 of the scope of the patent application, the hardware is further provided with a switch, and the switch-on relationship can forcibly close the connection between the hardware and the computer host. Automatically or manually disconnect or stop the hardware connection to the computer host when the system raises a virus or hacking intrusion alert. According to the active network backup device described in item 1 of the scope of the patent application, the hardware can be installed in at least one computer host or separated. An active network backup device includes a physical security switch, which includes: at least one computer host having a permission unit; a hardware component that is directly connected to at least one computer host or wired or wireless The LAN connections are connected to each other, and an access space is provided inside or outside the hardware to access the data copied by at least one computer host, and the authority unit of the at least one computer host is open to read and give the hardware The component actively performs data grabbing and copying in a single direction, and when the backup data needs to be restored, the permission unit opens the write permission to the hardware to write data in a single direction and restore the backup data back to the computer host. In addition, the hardware The device has a physical safety switch that controls the opening and closing of at least one wired or wireless independent input / output port of the hardware, and the independent input / output port is used to connect an external input device for setting. Backup and restore program settings for hardware, the physical security switch is at least one manual switch or lock or fingerprint recognition or iris recognition Structure: Among them, before the management staff needs to make or change the hardware settings on the computer host, they must use artificial operation to turn on the physical security switch to use independent input and output ports for hardware settings to confirm. Managers are ad hoc operations to prevent robot programs from hacking. According to the active network backup device described in item 7 of the scope of the patent application, wherein the hardware is provided with an identity recognition unit, when the physical security switch is turned on by the personnel, if it is not fingerprint recognition or iris recognition, the management Personnel must enter identity verification procedures such as passwords and voice recognition before they can log in and operate the hardware to ensure that management personnel are operating on the fly. According to the active network backup device described in item 7 of the scope of patent application, wherein the physical security switch has an automatic timing off, if the correct setting message is received within the valid timing period, it will restart the timing and delay the automatic Turn off the connection function to prevent ad hoc managers from forgetting to turn off the independent input and output ports of the hardware and the keyboard, mouse, screen, mobile phone, portable device, and other external outputs that are required to set the hardware Link between devices. According to the active network backup device described in item 9 of the scope of the patent application, the automatic timer shutdown structure will first warn that the connection will be closed after the shutdown condition is reached. The user only needs to operate the physical safety switch or You can delay the auto-off function by entering the correct setting information. An active network backup device with a function of eliminating file destruction instructions includes: at least one computer host having a permission unit; a hardware component which is directly connected or wired with at least one computer host, The wireless LAN connection methods are interconnected, and an access space is provided inside or outside the hardware to access the data copied by at least one computer host, and the permission unit of the at least one computer host is open to read permissions to the hardware. The unit performs data grabbing and copying in a single direction, and when the backup data needs to be restored, this permission unit opens the write permission to the hardware to write data in a single direction and restore the backed up data to the computer host; Security, this hardware cannot execute destructive instructions, such as delete, modify, open files (execute files), which will destroy or change files, only non-destructive instructions such as create, move, copy, backup, restore, etc. , When the hardware is unfortunately backed up to data that was later infected by the virus, because the virus cannot execute or operate inside the hardware, so Backup data has been completed before the destruction method can also avoid setting errors such as accidental deletion occurs, or abducted or malware disguised as soft setup program, and undermine the implementation of the file to be downloaded after careless users. The active network backup device according to item 11 of the scope of the patent application, wherein the hardware is provided with a serial port dedicated to external backup media, and the serial port is used to connect the storage medium to move the access space. Old and expired backup data to save space. When the move command is executed, if no external media is inserted, it will stop because the move command cannot be completed.