This application claims priority from Taiwan Patent Application No. 104135519, filed on Oct. 29, 2015, in the Taiwan Intellectual Property Office, the content of which is hereby incorporated by reference in their entirety for all purposes.
1. Field of the Invention
This application relates to a hard drive management system and a method thereof with network authentication function, and more particularly, to a hard drive management system and a method thereof with network authentication function applying the internet to transmit a key to encrypt and decrypt the data stored in the hard drive.
2. Description of the Related Art
Currently, the AES encryption of the solid-state drive is to arrange the AES key in the controller of the flash memory. When the solid-state drive is powered on, the AES key of the controller is applied to encrypt the data, so that the data stored in the flash memory can be encrypted by the AES key. However, such manner can only protect the data from being decrypted and accessed by the key of the controller when the flash memory of the solid-state drive is taken.
Another data encryption of the solid-state drive is to place the key in the computer host connected with the solid-state drive. When the data is written into the flash memory through the computer host, the data are encrypted by the key of the computer host, enabling the data stored in the computer host to form the encrypted data. However, utilizing a computer host to store the key cannot promote the data security because the data stored in the flash memory may still be misappropriated intentionally once the computer host and the solid-state drive are stolen together.
Therefore, the foregoing technical problems may be resolved by a hard drive management system and a method thereof with network authentication function provided by the inventor.
In view of the foregoing technical problems, one objective of a hard drive management system and a method thereof with network authentication function of the present disclosure is to resolve the shortcomings of the data security concerning that the key is only stored in the controller.
In view of the foregoing technical problems, another objective of a hard drive management system and a method thereof with network authentication function of the present disclosure is to resolve the shortcomings of the data security concerning that the key is only stored in the computer host.
In accordance with aforementioned objective, the present disclosure provides a hard drive management system with network authentication function which may include a wireless router and a solid-state drive. The wireless router may store a key. The solid-state drive may include a storage module, a wireless network module and a control module. The storage module may store encrypted data. The wireless network module may connect with the wireless router, and the wireless router may receive the key. The control module may electrically connect with the storage module and the wireless network module. The control module may encrypt source data to form encrypted data according to the key of the wireless network module, and may store the encrypted data in the storage module. Alternatively, the control module may read the encrypted data from the storage module and then may restore the encrypted data to form the source data according to the key.
In accordance with aforementioned objective, the present disclosure provides a method with network authentication function adapted to a solid-stated hard drive. The solid-state drive may include a storage module, a wireless network module and a control module. The method with network authentication function may include the following steps: logging in the wireless router by the wireless network module; receiving the key from the wireless router and transmitting the key to the control module; and encrypting source data to form encrypted data according to the key and storing the encrypted data in the storage module, or reading the encrypted data in the storage module and restoring the encrypted data to form the source data according to the key.
As mentioned previously, a hard drive management system and a method thereof with network authentication function of the present disclosure may have one or more advantages as follows.
1. The flash memory of the solid-state drive cannot be decrypted only by the key of the controller, so that the data security of the solid-state drive is hereby strengthened.
2. Once the solid-state drive is accessed in an unallowable period, the electronic device applied in the present disclosure immediately transmits a stop signal to the control module, disabling the control module to encrypt and decrypt data. As a consequence, the data stored in the solid-state drive can avoid being accessed illegally.
Please refer to
The solid-state drive 20 includes a storage module 21, a wireless network module 22 and a control module 23. The storage module 21 includes a NAND flash memory and a DDR memory which are applied to store encrypted data 211. The wireless network module 22 includes a wireless networking chip which is applied to connect with the wireless router 10 and to receive the key 11 from the wireless router 10.
The control module 23 is a controller which is electrically connected to the storage module 21 and the wireless network module 22. The control module 23 integrates the central processor, memory, timer/counter and input/output interfaces. In the present embodiment, the control module 23 is electrically connected with the wireless network module 22 to receive the key 11. The key 11 is applied to encrypt source data 231 to form encrypted data 211 and to store the encrypted data 211 in the storage module 21. Alternatively, the key 11 is applied to restore the encrypted data 211 retrieved from the storage module 21 to form the source data 231.
In the present embodiment, the control module 23 further includes a timer 232 which is applied to produce time information about the wireless network module 22 connecting with the wireless router 10. The wireless network module 22 is automatically connected with the wireless router 10 when the solid-state drive 20 is powered on. As a result, the time information indicates each used time of the solid-state drive 20.
Please refer to
In the present embodiment, the control module 23 is stored with a predetermined login password 233 in advance, enabling the wireless module 22 to login and then to connect with the wireless router 10 according to the predetermined login password 233. When the wireless router 10 confirms the predetermined login password 233 that is correct, the key 11 is sent to the wireless network module 22 of the solid-state drive 20. Here, the key 11 may be a public key and applies the symmetric encryption algorithms to encrypt and decrypt data. After receiving the key 11, the control module 23 encrypts the source data 231 transmitted from the computer host to form the encrypted data 211 and stores the encrypted data 211 in the storage module 21. Alternatively, when the user wants to read the content of the encrypted data 211 through the computer host, the control module 23 applies the key 11 to restore the encrypted data 211 stored in the storage module 21 to form the source data 231, and then transmits the source data 231 to the computer host.
Please refer to
To be more precise, the control module 23 transmits a self-monitoring analysis and reporting technology (SMART) to the electronic device 30 through the wireless network module 22, facilitating the user to know the current condition of the solid-state drive 20 such as average reading/writing frequency, reading error rate, amount of irreparable damaged disk blocks, and track-seeing error rate, and so on. Once the condition is not good, the electronic device 30 also transmits the stop signal 31 to the wireless network module 22, immediately disabling the control module 23 to read and write the data stored in the solid-state drive 20, so that it can prevent the data stored in the solid-state drive 20 from the perpetual damage due to the damage to the storage module 30.
Please refer to
Step S11: Logging in the wireless router by the wireless network module;
Step S12: Receiving the key from the wireless router and transmitting the key to the control module; wherein, the key may be a public key having the symmetric encryption algorithms, and
Step S13: Encrypting source data to form encrypted data according to the key and storing the encrypted data in the storage module, or reading the encrypted data in the storage module and restoring the encrypted data to form the source data according to the key.
In the step S11, a predetermined login password is further stored in the control module, so that the wireless network module logins and then connects with the wireless router according to the predetermined login password. Here, the predetermined login password may be a text format password, and it may be an IP address among a specific IP range. For example, a specific IP range is 192.168.1.1-492.168.1.254 and any IP in that range is allowed to login and connect with the wireless router. In other words, when the wireless router receives the internet packet of the wireless network module which desires to login, it can determine whether the requirement for logging in and connecting is accepted according to the source IP address of the internet packet. By such manner, the solid-state drive of the present embodiment can only obtain the key from the wireless router through partial zones. For example, it can only obtain the key from the wireless router arranged in the specific office. Once the solid-state drive is not in the specific office, it cannot obtain the key to encrypt and decrypt the data stored in the solid-state drive.
Preferably, the control module further includes a timer, so that the control module can apply the time information about the wireless network module connecting with the wireless router produced by the timer. In addition, the electronic device receives the time information produced by the timer and transmits a stop signal to the wireless network module. The control module stops to restore the encrypted data to form the source data according to the stop signal. Alternatively, the electronic device transmits a stop signal to wireless network module and the control module stops to encrypt the source data to form the encrypted data according to the stop signal.
According to description mentioned previously, it can be found that the hard drive management system with network authentication function of the present embodiment is capable of providing the solid-state drive with the key through Wi-Fi, enabling that when the solid-state drive is misusing, the data security is not affected. In addition, when the solid-state drive is misusing, the present disclosure is capable of notifying the electronic device through interne, and then the electronic device transmits the stop signal to stop to encrypting and decrypting the data stored in the solid-state drive, so as to achieve the purpose of real-time monitoring.
While the means of specific embodiments in present invention has been described by reference drawings, numerous modifications and variations could be made thereto by those skilled in the art without departing from the scope and spirit of the invention set forth in the claims. The modifications and variations should in a range limited by the specification of the present invention.
Number | Date | Country | Kind |
---|---|---|---|
104135519 | Oct 2015 | TW | national |