WO2020082811A1 - Storage method and apparatus having hidden partition, and host device - Google Patents

Abstract

A storage method and an apparatus having a hidden partition, and a host device. The storage apparatus is divided into a commonly shown partition and a hidden partition. When an ordinary user visits the storage apparatus by means of the host, the storage apparatus only shows the commonly shown partition. When an authorized user visits the storage apparatus by means of the host, the storage apparatus shows the commonly shown partition and the hidden partition. A storage apparatus management tool of the host performs identity verification on the authorized user, and on the basis of successfully verified user identity information, notifies the storage apparatus to show the corresponding hidden partition of the storage apparatus. A commonly shown partition and a hidden partition can be implemented on one storage apparatus, facilitating use by a user.

Description

Storage method and device with hidden partition and host-side equipment

This application requires the priority of the Chinese patent application filed on October 26, 2018 to the Chinese Patent Office, with the application number 201811261721.2 and the invention titled "Storage Method, Device and Host-End Device with Hidden Partition", all of its content Incorporated by reference in this application.

Technical field

The invention relates to a storage method, device and host device with hidden partitions.

Background technique

After the operating system on the host side is powered on, it scans the storage device, obtains the storage device parameters, and displays the partition of the storage device. In the prior art, the system storage device and the hidden storage device are physically two storage devices, so that users cannot use the hidden partition when only the system disk is available; to use the hidden partition, you need to purchase another one with a hidden function Storage device. Moreover, the existing hidden storage devices usually require the support of special hardware, and the use cost and complexity are high.

Summary of the invention

The purpose of the invention of the present invention is to provide a storage method, device and host device with hidden partitions, which can realize common display partitions and hidden partitions on one storage device, which is more convenient for users to use.

Based on the same inventive concept, the present invention has three independent technical solutions:

1. A storage method with a hidden partition, which divides the storage device into an ordinary display partition and a hidden partition;

When ordinary users access the storage device through the host, the storage device only displays the ordinary display partition;

When an authorized user accesses the storage device through the host, the storage device displays the normal display partition and the hidden partition

The storage device management tool on the host side authenticates the authorized user, and notifies the storage device to reveal the corresponding hidden partition of the storage device according to the authenticated user identity information.

Further, the storage device management tool on the host side authenticates the authorized user, rescans the storage device according to the verified user identity information, and updates the storage device information to allow the user to access and / or operate the corresponding hidden partition.

Further, the method is implemented in the form of software or firmware.

Further, when the user identity is an authorized user with administrator authority, the user is allowed to re-divide the ratio between the ordinary display partition and the hidden partition of the storage device.

Further, a unique key pair between the host-side storage device management tool and the storage device is generated based on the digital signature algorithm, and the host-side storage device management tool holds the private key, and the storage device holds the public key; when the user passes the host After the identity verification of the end storage device management tool, the host end storage device management tool uses the corresponding private key to digitally sign the access command according to the different identities of the users, and informs the storage device to reveal the corresponding partitioned storage device of the storage device. 'S public key verifies the access commands of the host-side storage device management tool.

Further, when the storage device is initially powered on, the default state is that only the normal display partition is displayed.

2. A storage device with a hidden partition, the storage device includes:

The partition display module is used to display the corresponding partition of the storage device according to the different identities of the user. When the ordinary user accesses the storage device through the host, the storage device displays only the ordinary display partition; when the authorized user accesses the storage device through the host, the storage The device displays the normal display partition and the hidden partition; the storage device management tool on the host side authenticates the authorized user, and notifies the storage device to display the corresponding hidden partition of the storage device according to the user identity information after the verification.

Further, when the user identity is an authorized user with administrator authority, the user is allowed to re-divide the ratio between the ordinary display partition and the hidden partition of the storage device.

Further, the storage device presets the division ratio between the ordinary display partition and the hidden partition.

Further, when the storage device is initially powered on, the default state is that only the normal display partition is displayed.

3. A host-side device, including:

One or more processors;

The storage unit is used to store a program for managing the storage device;

The above method is executed by one or more processors.

The beneficial effects of the present invention:

The present invention divides the storage device into an ordinary display partition and a hidden partition; when a user accesses the storage device through the host side, the host-side storage device management tool authenticates the user to identify the user's identity, and displays the storage device accordingly according to the different identities of the user For ordinary users, the storage device shows only the ordinary display partition; for authorized users, the storage device shows the ordinary display partition and the hidden partition, the host side rescans the storage device, and updates the storage device information to allow the user to access and / or operate the hidden Partition. The invention realizes the common display partition and hidden partition on a storage device, which is more convenient for users, effectively reduces the use cost and complexity of hidden devices, and is convenient for promotion. At the same time, through the use of pure software and firmware solutions, you can further reduce costs and improve ease of use; you can even install software and update firmware to make storage devices that do not have hidden functions have hidden functions. Market promotion.

In the present invention, when the user identity is an authorized user with administrator authority, the user is allowed to re-divide the ratio between the ordinary display partition and the hidden partition of the storage device, which is more convenient for the user.

The storage device of the present invention includes a partition display module for displaying the corresponding partition of the storage device according to different identities of users. When an ordinary user accesses the storage device through the host side, the storage device displays only the ordinary display partition; The storage device displays the ordinary display partition and the hidden partition; the storage device management tool on the host side authenticates the authorized user, and notifies the storage device to display the corresponding hidden partition of the storage device according to the user identity information after the verification. . The invention provides a solution integrating firmware and software without additional hardware support, which effectively reduces the complexity and cost of using the hidden function of the storage device.

BRIEF DESCRIPTION

Figure 1 is a block diagram of the method of the present invention;

2 is a schematic diagram of the hardware structure of the storage device of the present invention;

3 is a flow chart of the administrator user of the present invention to modify the storage partition ratio;

4 is a system program architecture diagram of the present invention;

5 is an architecture diagram of an interface program of the storage device of the present invention;

6 is a schematic diagram showing the partitioning of the storage device of the present invention;

7 is a schematic diagram of the process of signing and de-signing in a digital signature.

detailed description

For ease of understanding, the concepts involved in the embodiments of the present invention are first described:

digital signature:

As shown in FIG. 7, the digest algorithm is a Hash algorithm as an example for illustration here. FIG. 7 is a schematic diagram of the process of signature and de-signature verification in a digital signature.

Digital signature is a comprehensive application of asymmetric encryption technology and digital digest technology. The sender uses a digest algorithm (such as the Hash algorithm) to generate a message digest corresponding to the original text, and uses the sender's private key to sign the communication information digest. The signed signature information is transmitted to the receiving end together with the original text. The receiving end uses the same Hash algorithm as the sending end to generate the message digest 1 in the same manner as the received original text, and obtains it by decoding the signed signature information using the public key. Information Digest 2, will be compared with the above Information Digest 1 and Information Digest 2, if the same, it means that the original text received by the receiving end is complete, and has not been tampered with by a third party during the transmission process, otherwise, the original text has been Tripartite modification. The above original text refers to the unencrypted original information that the sending end needs to send to the receiving end.

It should be noted that the above private key and public key are obtained by an asymmetric encryption algorithm, that is to say, the private key and the key exist in pairs, specifically, in the embodiment of the present invention, the private key may be any A character string, schematically, can be a 256-bit random number as the private key, and the public key is the public key corresponding to the private key generated by the asymmetric encryption algorithm, which is not specifically limited here. In addition, it should be noted that in the embodiment of the present invention, the asymmetric encryption algorithm may include, but is not limited to the ed25519 algorithm, RSA algorithm, DSA algorithm, Diffie-Hellman, and ECC algorithm, and the specific embodiments of the present invention are not limited.

It can be seen that in the digital signature, for each sender, there is a unique private key, which is kept secret from the outside world, and the relevant information signed by the private key can only be obtained through its corresponding public key. Key to decode. Therefore, the private key can represent the identity of the private key holder, and the identity of the private key owner can be verified by the public key corresponding to the private key. Through digital signature, you can confirm that the communication content is signed and sent by the sender of the message, because other devices can not fake the signature of the sender of the message, and different communication content, the summary information is very different, through the digest algorithm, you can also ensure the integrity of the communication content If the content of the communication is tampered with in the middle, the corresponding digital signature will also change. Therefore, the digital signature can verify the integrity of the communication content and the identity of the sender.

Example one:

Storage method with hidden partition:

The storage device is divided into ordinary display partitions and hidden partitions; when a user accesses the storage device through the host side, the host-side storage device management tool authenticates the user to identify the user, and displays the corresponding partition of the storage device according to the user's different identities For ordinary users, the storage device displays only the ordinary display partition; for authorized users, the storage device displays the ordinary display partition and the hidden partition, the host side rescans the storage device, and updates the storage device information to allow the user to access and / or operate the hidden partition.

As shown in Figure 1, when the user's identity is an authorized user, the storage device is accessed through the host-side storage device management tool (APP) on the host side. After identity verification, the host side rescans the storage device to obtain new device parameters and display storage The device's normal display partition and hidden partition.

When an ordinary user accesses the storage device through the host side or the authorized user fails to pass the identity verification, the storage device only displays the ordinary display partition. Ordinary users can access the storage device through the host-side operating system, and can also access the storage device through the host-side storage device management tool.

The storage device presets the division ratio between the ordinary display partition and the hidden partition. When the storage device is initially powered on, the default state is to display only the normal display partition.

As shown in FIG. 2, the storage device includes a control unit and a storage unit, wherein the control unit is a chip DPU, and the storage unit includes FLASH and DRAM.

DPU: It can be used for data storage control, management and optimization.

FLASH: It is a flash memory array and a basic storage medium.

DRAM: It is a memory particle, an important module in the system, a stored program module, and a management data interface.

PCIE 3.0 x4 port 0 and port 1: dual ports that interface with the host.

Users supported by the system include ordinary users and authorized users. The authorized users include general authorized users and administrator users. The above users can access the storage device through the host-side storage device management tool installed on the host side, or only through the host's operating system Access storage devices. The logical separation of the two areas between the normal display partition and the hidden partition of the storage device is implemented by an algorithm in the flash memory controller (control unit) of the storage device (for example, it can be through a flash conversion layer, flash translation layer, or FTL to fulfill).

Generate a unique key pair between the host-side storage device management tool and the storage device based on the digital signature algorithm, and the host-side storage device management tool holds the private key, and the storage device holds the public key; when the user passes the host-side storage device After the identity verification of the management tool, the host-side storage device management tool uses the corresponding private key to digitally sign the access command according to the different identities of the user, and informs the storage device to reveal the corresponding partitioned storage device of the storage device, and the storage device uses the corresponding public key Verify the access commands of the host-side storage device management tool.

You can get the user's physical and biometric information through peripherals. Use the physical and biometric information as seeds to generate a private key based on a one-way cryptographic hash function (cryptographic hash); based on digital signature technology, generate a public key corresponding to the private key Key and load the public key to the storage device. The physical information includes spatial index, distance, temperature, light, sound, humidity, magnetic force, pressure, electric field, magnetic field, etc .; biometric information includes sound, smell, color, behavior, face, fingerprint, palm print, etc.

Example 2:

Storage method with hidden partition:

As shown in FIG. 3, when the user identity is an authorized user with administrator authority, the user is allowed to re-divide the ratio between the ordinary display partition and the hidden partition of the storage device.

When an authorized user with administrator authority passes the identity verification of the host-side storage device management tool, it is allowed to issue a ratio command between the normal display partition and the hidden partition of the storage device through the storage device management tool, and the storage device performs the reset Partition ratio command.

The rest of the workflow of the second embodiment is the same as the first implementation.

Example three:

Storage device with hidden partition:

As shown in FIG. 2, the storage device includes a control unit and a storage unit, wherein the control unit is a chip DPU, and the storage unit includes FLASH and DRAM.

DPU: It can be used for data storage control, management and optimization.

FLASH: It is a flash memory array and a basic storage medium.

DRAM: It is a memory particle, an important module in the system, a stored program module, and a management data interface.

PCIE 3.0 x4 port 0 and port 1: dual ports that interface with the host.

The storage unit includes the following program modules, which are run by the control unit.

Partition display module, the partition display module is used to display the corresponding partition of the storage device according to the different identities of the user, when the user identity is an ordinary user, the storage device only shows the ordinary display partition; when the user identity is an authorized user, the storage device is shown Normally display partitions and hidden partitions, and trigger the host side to rescan storage devices and update storage device information to allow users to access and / or operate hidden partitions.

The interface program module and the interface program module (FTL mapping layer) are used to communicate with the host-side operating system and the host-side storage device management tool.

When the user's identity is an authorized user, the storage device is accessed through the host-side storage device management tool on the host side. After the identity verification, the host side rescans the storage device to obtain new device parameters, showing the normal display partition and hidden partition of the storage device. When an ordinary user accesses the storage device through the host side or the authorized user fails to pass the identity verification, the storage device only displays the ordinary display partition. Ordinary users can access the storage device through the host-side operating system, and can also access the storage device through the host-side storage device management tool.

The storage device presets the division ratio between the ordinary display partition and the hidden partition. When the storage device is initially powered on, the default state is to display only the normal display partition.

Users supported by the system include ordinary users and authorized users. The authorized users include general authorized users and administrator users. The above users can access the storage device through the host-side storage device management tool installed on the host side, or only through the host's operating system Access storage devices. The logical separation of the two areas between the normal display partition and the hidden partition of the storage device is implemented by an algorithm in the flash memory controller (control unit) of the storage device (for example, it can be through a flash conversion layer, flash translation layer, or FTL to fulfill).

Generate a unique key pair between the host-side storage device management tool and the storage device based on the digital signature algorithm, and the host-side storage device management tool holds the private key, and the storage device holds the public key; when the user passes the host-side storage device After the identity verification of the management tool, the host-side storage device management tool uses the corresponding private key to digitally sign the access command according to the different identities of the user, and informs the storage device to reveal the corresponding partitioned storage device of the storage device, and the storage device uses the corresponding public key Verify the access commands of the host-side storage device management tool.

You can get the user's physical and biometric information through peripherals. Use the physical and biometric information as seeds to generate a private key based on a one-way cryptographic hash function (cryptographic hash); based on digital signature technology, generate a public key corresponding to the private key Key and load the public key to the storage device. The physical information includes spatial index, distance, temperature, light, sound, humidity, magnetic force, pressure, electric field, magnetic field, etc .; biometric information includes sound, smell, color, behavior, face, fingerprint, palm print, etc.

Example 4:

Storage device with hidden partition:

When the user identity is an authorized user with administrator authority, the user is allowed to re-divide the ratio between the ordinary display partition and the hidden partition of the storage device.

When an authorized user with administrator authority passes the identity verification of the host-side storage device management tool, it is allowed to issue a ratio command between the normal display partition and the hidden partition of the storage device through the storage device management tool, and the storage device performs the reset Partition ratio command.

The remaining structure and working principle of the fourth embodiment are the same as those of the third embodiment.

Example 5:

Host device:

include:

One or more processors;

The storage unit is used to store a program for managing the storage device (host side storage device management tool APP);

The above method is executed by one or more processors. The storage unit is composed of a random access memory (RAM), a cache memory, and a hard disk drive.

The present invention is not limited to what is described in the specification and embodiments, so that those skilled in the art can easily realize additional advantages and modifications, so without departing from the spirit and scope of the general concept defined by the claims and equivalent scope In the case of the present invention, the present invention is not limited to specific details, representative equipment, and illustrated examples shown and described herein.

Claims (11)

A storage method with a hidden partition, which is characterized in that the storage device is divided into a common display partition and a hidden partition; When ordinary users access the storage device through the host, the storage device only displays the ordinary display partition; When an authorized user accesses the storage device through the host, the storage device displays the normal display partition and the hidden partition; The storage device management tool on the host side authenticates the authorized user, and notifies the storage device to reveal the corresponding hidden partition of the storage device according to the authenticated user identity information. The storage method with a hidden partition according to claim 1, wherein the storage device management tool on the host side authenticates the authorized user, rescans the storage device according to the verified user identity information, and updates the storage device information, To allow users to access and / or operate the corresponding hidden partition. The storage method with a hidden partition according to claim 1, wherein the method is implemented in the form of software or firmware. The storage method with a hidden partition according to claim 1, characterized in that when the user identity is an authorized user with administrator authority, the user is allowed to re-divide the ratio between the ordinary display partition and the hidden partition of the storage device. The storage method with hidden partition according to claim 4, characterized in that: a unique key pair between the host-side storage device management tool and the storage device is generated based on the digital signature algorithm, and the host-side storage device management tool Holds the private key, and the storage device holds the public key; after the user passes the identity verification of the host-side storage device management tool, the host-side storage device management tool uses the corresponding private key to digitally sign the access command according to the different identities of the user. The storage device is notified to reveal the corresponding partitioned storage device of the storage device, and the storage device verifies the access command of the host-side storage device management tool with the corresponding public key. The storage method with a hidden partition according to claim 1, wherein when the storage device is initially powered on, the default state is that only the normal display partition is displayed. A storage device with a hidden partition, characterized in that the storage device includes: The partition display module is used to display the corresponding partition of the storage device according to the different identities of the user. When the ordinary user accesses the storage device through the host, the storage device displays only the ordinary display partition; when the authorized user accesses the storage device through the host, the storage The device displays the normal display partition and the hidden partition; the storage device management tool on the host side authenticates the authorized user, and notifies the storage device to display the corresponding hidden partition of the storage device according to the user identity information after the verification. The storage device according to claim 7, characterized in that when the user identity is an authorized user with administrator authority, the user is allowed to re-divide the ratio between the ordinary display partition and the hidden partition of the storage device. The storage device according to claim 7 or 8, wherein the storage device presets a division ratio between the ordinary display partition and the hidden partition. The storage device with a hidden partition according to claim 9, wherein when the storage device is initially powered on, the default state is that only the normal display partition is displayed. A host-side device, characterized in that it includes: One or more processors; The storage unit is used to store a program for managing the storage device; The method according to any one of claims 1 to 6 is executed by the one or more processors.

Images