CN107180206B - Solid state disk safety control method and device based on CDMA - Google Patents

Abstract

The present invention provides a CDMA-based solid-state hard disk security control method and device. The method includes: assigning a first security control code pseudo-random sequence to a solid-state hard disk storage array; Perform spread spectrum coding on the user security control bytes in the window; send the spread spectrum coding of the user security control bytes in the observation time window to the CDMA security control module of the solid-state hard disk system through a computer network channel; The received data stream is subjected to despreading processing and integration processing in sequence; the output signal after integration processing is subjected to security judgment to determine whether to perform the read and write operation of the solid-state hard disk. The invention can effectively reduce the computational complexity and circuit design cost, overcome the security risks that the solid-state hard disk data is not easy to be erased and data fragments may be read by illegal users, thereby enhancing the solid-state hard disk system security.

Description

A CDMA-based solid-state hard disk security control method and device

technical field

The present invention relates to the technical field of network information security, and in particular, to a method and device for security control of a solid-state hard disk based on CDMA (Code Division Multiple Access, code division multiple access).

Background technique

With the development of networking and informatization, the competition in cyberspace has intensified, and developed countries have carried out the construction of cyber ranges to support cyberspace security technology demonstration and verification, network equipment development and testing, large-scale network reproduction, cyber risk assessment, and attack and defense. Adversarial training. At present, the internationally advanced network range can support 20 large-scale independent network tests at the same time, so the resources of the completed test tasks are effectively released, and the non-volatile storage data is erased after the test to ensure the important test data. Not being illegally obtained is an important guarantee for realizing various functions of the network shooting range.

Non-volatile storage resources, such as solid-state drives, are increasingly used by high-end users such as enterprises and the military because of their large capacity, high speed, low energy consumption, and low cost. Solid-state drives mainly use NAND Flash (NotAndFlash, storage-type flash memory) chips as storage media. Although storage-type flash memory-based solid-state disks have many advantages, there are also some bottlenecks. On the one hand, read and write operations The unit is performed by page, the minimum unit of the erase operation is block, and the unit block to be erased is larger than the page, which leads to the need to erase the entire block to update part of the content of the block, which makes the update and write inefficient and increases the erasure number of operations. On the other hand, solid-state drives have a limited number of erasures, and once the erasure threshold is exceeded, the storage-type flash memory storage units will be damaged. More importantly, when deleting data, only the logical block address is deleted, while the actual physical page remains, which makes it difficult to safely delete the data in the SSD. At the same time, the solid-state drive is not composed of magnetic media. When data is deleted, the logical address does not match the actual physical page, resulting in an ATA (Advanced Technology Attachment, hard disk interface) or SCSI (Small Computer System Interface, small computer system interface) drive scan error, easy to Generate data fragmentation.

SUMMARY OF THE INVENTION

The technical problem to be solved by the present invention is to provide a CDMA-based solid-state hard disk security control method and device, so as to overcome the potential safety hazards brought about by the characteristics of the solid-state hard disk being difficult to erase and prone to data fragmentation, etc. Hard disk write and erase operations.

The technical solution adopted in the present invention is that the CDMA-based solid-state hard disk security control method includes:

Step 1: Allocate the first security control code pseudo-random sequence to the solid-state hard disk storage array;

Step 2, performing spread spectrum coding on the user security control bytes in the observation time window through the first security control coding pseudo-random sequence;

Step 3, send the spread spectrum code of the user safety control byte in the observation time window to the CDMA safety control module of the solid-state hard disk system through the computer network channel;

Step 4, sequentially perform despreading processing and integral processing on the data stream received by the CDMA security control module;

Step 5: Make a safety judgment on the output signal after the integral processing, so as to judge whether to perform the read/write operation of the solid-state hard disk.

Further, the first step includes: assigning the first security control code pseudo-random sequence to the solid-state disk storage array by using an m sequence or a Gold sequence.

Further, in step 2, the spread spectrum code is obtained by modulating the pseudo-random sequence of the first security control code by the user security control byte.

Further, in step 4, the data stream received by the CDMA security control module of the solid-state hard disk system includes the security control byte spread spectrum coding and the white Gaussian noise of the computer network channel;

The despreading process is to multiply the data stream received by the CDMA security control module through the second security control code pseudo-random sequence to obtain the despread data stream;

The second security control coding pseudo-random sequence is exactly the same as the transmitting end security control coding sequence and is precisely synchronized.

Further, step 5 specifically includes:

If the output signal is consistent with the security control byte, execute the solid-state hard disk read and write operation requested by the user;

If the output signal is inconsistent with the security control byte, the user-requested read/write operation of the solid-state hard disk is not performed, and an alarm signal is triggered at the same time.

The present invention also provides a CDMA-based solid-state hard disk security control device, comprising:

an allocation module, used for allocating the first security control code pseudo-random sequence to the solid-state hard disk storage array;

a spread spectrum module, configured to spread the user security control bytes in the observation time window by using the first security control code pseudo-random sequence to obtain a spread spectrum code;

a transmission module for sending the spread spectrum code to the CDMA security control module of the solid-state hard disk system;

The CDMA security control module is used to sequentially perform despreading and integration processing on the data stream received by the CDMA security control module, and make a security judgment on the output signal after integration processing, so as to determine whether to perform the solid-state hard disk read and write operations.

Further, the CDMA security control module of the SSD system includes:

The despreading module is used to despread the data stream received by the CDMA security control module of the solid-state hard disk system;

The integration module is used to integrate the despread data stream;

The judgment module is used to make a safety judgment on the output signal of the integration module, so as to judge whether to execute the read/write operation of the solid-state hard disk.

Further, the despreading module is specifically configured to: multiply the data stream received by the receiving end of the CDMA security control module by multiplying the second security control code pseudorandom sequence to obtain the despread data stream;

The second security control coding pseudo-random sequence is exactly the same as the transmitting end security control coding sequence and is precisely synchronized.

Further, the judging module is configured to perform a solid-state hard disk read and write operation when the output signal of the integration module is consistent with the user safety control byte;

When the output signal of the integration module is inconsistent with the user security control byte, the solid-state hard disk read and write operations are not performed, and an alarm signal is triggered at the same time.

Adopting the above-mentioned technical scheme, the present invention has at least the following advantages:

The CDMA-based solid-state hard disk security control method of the present invention designs a solid-state hard disk system CDMA security control module in the solid-state hard disk system, and sets a security control signal for each memory chip in the solid-state hard disk to ensure that only the verification bytes of the access user are accessed. After being decoded correctly, the SSD can be read and written. It can effectively reduce the computational complexity and circuit design cost, overcome the security risks that the solid-state hard disk data is not easy to be erased and data fragments may be read by illegal users, thereby enhancing the security of the solid-state hard disk system.

Description of drawings

FIG. 1 is a flowchart of a CDMA-based solid-state hard disk security control method according to the first embodiment of the present invention;

FIG. 2 is a schematic structural diagram of the composition of a CDMA-based solid-state hard disk security control device according to a second embodiment of the present invention;

FIG. 3 is a schematic diagram of a specific flow of the CDMA-based solid-state hard disk security control according to the third embodiment of the present invention.

Detailed ways

In order to further illustrate the technical means and effects adopted by the present invention to achieve the predetermined purpose, the present invention will be described in detail below with reference to the accompanying drawings and preferred embodiments.

The first embodiment of the present invention, a CDMA-based solid-state hard disk security control method, as shown in FIG. 1 , includes the following specific steps:

Step S101 , assigning a first security control code pseudo-random sequence to the solid-state disk storage array.

Specifically, step S101 includes: generating a first security control code pseudo-random sequence PN for the solid-state hard disk storage array through an m sequence or a Gold sequence; the m sequence refers to the longest linear shift register sequence.

Step S102, spread spectrum coding is performed on the user security control bytes in the observation time window T.

Specifically, step S102 includes: performing spread-spectrum coding on the security control byte b(t) in the request instruction for requesting access to the NAND FLASH chip of the solid-state hard disk within the observation time window T, to generate the spread-spectrum code C(t);

C(t)=b(t)×PN;

Time variable t∈(0, T).

In step S103, the spread spectrum code of the security control byte in the observation time window T is sent to the CDMA security control module of the solid-state hard disk system through the computer network channel.

Specifically, step S103 includes: sending the security control byte spread spectrum code C(t) in the observation time window T to the CDMA security control module of the solid-state hard disk system through a computer network channel, and the data stream received by the CDMA security control module of the solid-state hard disk system is Y(t);

Y(t)=C(t)+n(t);

Among them, n(t) is the Gaussian white noise of the computer network channel.

Step S104, performing despreading processing on the data stream received by the CDMA security control module of the solid-state hard disk system.

Specifically, step S104 includes, despreading the data stream Y(t) received by the CDMA security control module of the solid-state hard disk system through the second security control code pseudo-random sequence PN', to obtain the despread signal V(t);

V(t)=Y(t)×PN';

The second safety control code PN' sequence is exactly the same as the first safety control code PN sequence;

The second security control code PN' sequence is exactly synchronized with the first security control code PN sequence.

Step S105, performing integration processing on the despread signal.

Specifically, step S105 includes integrating the despread signal V(t) to obtain an output signal b'(t).

In step S106, a safety judgment is performed on the output signal of the integrator to determine whether to perform a read and write operation of the solid state disk.

If the output signal b'(t) of the integrator is consistent with the security control byte b(t), the user-requested read and write operation of the SSD is executed;

If the output signal b'(t) of the integrator is inconsistent with the security control byte b(t), the user-requested read/write operation of the SSD will not be performed, and an alarm signal will be triggered at the same time.

The second embodiment of the present invention, corresponding to the first embodiment, introduces a CDMA-based solid-state hard disk security control device, as shown in FIG. 2 , which includes the following components:

1) The allocation module 100 is configured to allocate the first security control code pseudo-random sequence to the solid state disk storage array.

Specifically, the allocation module 100 generates the first security control code pseudo-random sequence PN for the solid-state disk storage array through the m sequence or the Gold sequence.

2) a spread spectrum module 200, for performing spread spectrum processing on the security control bytes requesting access to the solid-state hard disk NAND FLASH chip within the observation time window T, to generate a spread spectrum code;

Specifically, the spread spectrum module 200 performs spread spectrum processing on the security control byte b(t) requesting access to the NAND FLASH chip of the solid-state disk within the observation time window T, and generates a spread spectrum code C(t);

C(t)=b(t)×PN.

3) The transmission module 300 is configured to send the spread spectrum code of the security control bytes in the observation time window T to the CDMA security control module 400 of the solid-state hard disk system through a computer network channel.

Specifically, the transmission module 300 sends the security control byte spread spectrum code C(t) within the observation time window T to the CDMA security control module 400 of the solid-state hard disk system through the computer network channel, and the data received by the CDMA security control module 400 of the solid-state hard disk system stream is Y(t);

Y(t)=C(t)+n(t);

Among them, n(t) is the Gaussian white noise of the computer network channel.

4) The CDMA security control module 400 is composed of three parts: a despreading module 401 , an integrating module 402 and a judging module 403 .

Specifically, the CDMA security control module 400 is configured to perform signal processing on the received data stream Y(t), and perform security judgment on the processed signal b'(t) to determine whether to perform a solid-state hard disk read and write operation.

A. The despreading module 401 is used to despread the data stream received by the CDMA security control module 400 of the solid state disk system;

Specifically, the despreading module 401 despreads the data stream Y(t) received by the receiving end of the solid-state hard disk system through the second security control code pseudo-random sequence PN', and obtains the despread signal V(t);

V(t)=Y(t)×PN';

The second safety control code PN' sequence is exactly the same as the first safety control code PN sequence;

The second security control code PN' sequence is exactly synchronized with the first security control code PN sequence.

B. The integration module 402 is configured to perform integration processing on the despread signal.

Specifically, the data stream integration module 402 performs integration processing on the despread data stream V(t) to obtain the output signal b'(t).

C. The judging module 403 is used to make a safety judgment on the output signal of the integrator to judge whether to perform a read-write operation.

Specifically, the judgment module 403 compares the output signal b'(t) of the integrator with the safety control byte b(t) for judgment;

If the output signal b'(t) of the integrator is consistent with the security control byte b(t), the user-requested read and write operation of the SSD is executed;

If the output signal b'(t) of the integrator is inconsistent with the security control byte b(t), the user-requested read/write operation of the SSD will not be performed, and an alarm signal will be triggered.

The third embodiment of the present invention, on the basis of the above-mentioned embodiments, takes a CDMA-based solid-state hard disk security control method as an example, and introduces an application example of the present invention with reference to FIG. 3 .

Step 1: Allocate the first security control code pseudo-random sequence to the solid-state disk storage array.

Specifically, the first step includes: generating a first security control code pseudo-random sequence PN _i for the solid-state hard disk storage array by using the m sequence or the Gold sequence;

Taking the m sequence as an example, for a solid-state hard disk system with m NAND FLASH chips, set an r-level m-sequence, where 2 ^r -1>m; the r-level m sequence contains 2 ^r -1 pseudo-random codes, M pseudo-random codes are arbitrarily selected from the 2 ^r -1 pseudo-random codes in the r-level m sequence as the first security control code pseudo-random sequence PN _i of the solid-state hard disk storage array.

i∈(1,m);

m is the number of NAND FLASH chips of the SSD;

m=n×k;

n is the number of data channels of the NAND FLASH chip of the SSD;

k is the number of NAND FLASH chips in each channel of the NAND FLASH chip data of the SSD.

In step 2, spread spectrum coding is performed on the security control bytes of all visiting users within the observation time window T.

Specifically, step 2 includes: performing spread-spectrum coding on the security control byte requesting access to the i-th NAND FLASH chip of the solid-state drive within the observation time window T, to generate a spread-spectrum code C _i (t);

For example: within the observation time window T, the first byte b _i (t) in the request command to request access to the data a _i (t) of the i-th NAND FLASH chip of the solid-state drive is the security control byte, using b _i (t ) modulates the pseudo-random sequence PN _i of the security control code to generate a spread spectrum code C _i (t).

C _i (t)= _bi (t)×PN _i ;

i∈(1,m).

In step 3, the spread spectrum code of the security control byte in the observation time window T is sent to the CDMA security control module of the solid-state hard disk system through the computer network channel.

Specifically, step 3 includes: sending the security control byte spread spectrum code C _i (t) in the observation time window T to the CDMA security control module of the solid-state hard disk system through a computer network channel, and the CDMA security control module of the solid-state hard disk system receives the The data flow is Y(t);

The n(t) is the Gaussian white noise of the computer network channel.

Step 4, despread the data stream received by the CDMA security control module of the solid-state hard disk system.

Specifically, step 4 includes: despreading the data stream Y(t) received by the CDMA security control module of the solid-state hard disk system through the second security control code pseudo-random sequence PN to obtain the despread signal V(t);

For example, taking the i-th channel as an example, the received data stream Y(t) includes the data bi(t) accessing the i-th memory chip and the data _bj (t) accessing other j memory chips, and the channel Gaussian white noise n(t);

j≠i;

j∈(1,m).

The despread data stream V(t) is obtained by multiplying the data stream Y(t) with the second security control code PN sequence and performing despreading processing;

V(t)=Y(t)×PN;

The second safety control code PN sequence is exactly the same as the first safety control code PN _i sequence;

The second safety control code PN sequence is accurately synchronized with the first safety control code PN _i sequence;

the PN _i ×PN _i =1;

For example, the despread data stream Vi(t) of the i-th received data stream Yi(t) is:

in,

If PN _i and PN are not correlated, then PN _i ×PN=0.

If PN _i is related to PN, then PN _i ×PN=1.

Step 5: Integrate the despread data stream.

Specifically, step 5 includes: integrating the despread data stream V(t) to obtain an output signal b'(t);

When the computer network channel noise n(t) is low enough, the integrator output signal is:

b'i(t)=0 or 1.

In step 6, a safety judgment is performed on the output signal of the integrator to determine whether to perform operations such as reading and writing.

Specifically, step six includes:

When the integrator output signal b'(t) is consistent with the security control byte b(t), the user-requested solid-state disk read and write operations are performed;

When the integrator output signal b'(t) is inconsistent with the security control byte b(t), the user-requested solid-state hard disk read and write operations are not performed, and an alarm signal is triggered at the same time.

Through the description of the specific embodiments, it should be possible to have a more in-depth and specific understanding of the technical means and effects adopted by the present invention to achieve the predetermined purpose. However, the accompanying drawings are only for reference and description, not for the present invention. limit.

Claims (9)

1. A solid state disk safety control method based on code division multiple access CDMA is characterized by comprising the following steps:

distributing a first safety control coding pseudorandom sequence to a solid state disk storage array;

secondly, carrying out spread spectrum coding on the user safety control bytes in the observation time window through the first safety control coding pseudorandom sequence;

step three, the spread spectrum code of the user safety control byte in the observation time window is sent to a CDMA safety control module of the solid state disk system through a computer network channel;

step four, the data stream received by the CDMA safety control module is subjected to de-spread processing and integral processing in sequence;

and fifthly, performing safety judgment on the output signal subjected to the integration processing to judge whether to execute the read-write operation of the solid state disk.

2. The method for controlling the security of the solid state disk based on the CDMA according to claim 1, wherein the first step comprises: and allocating the first security control coding pseudo-random sequence to the solid state disk storage array through an m sequence or a Gold sequence.

3. The method according to claim 1, wherein in step two, the spread spectrum code is obtained by modulating the first security control code pseudo-random sequence by the user security control byte.

4. The method according to claim 1, wherein in step four, the data stream received by the CDMA security control module of the solid state disk system includes a spread spectrum code of a user security control byte and white gaussian noise of a computer network channel;

the de-spreading processing is to multiply the data stream received by the CDMA security control module by a second security control coding pseudorandom sequence to obtain a de-spread data stream;

the second safety control coding pseudo-random sequence is completely the same as the first safety control coding pseudo-random sequence of the sending end and is accurately synchronous.

5. The CDMA-based solid state disk security control method according to claim 1, wherein step five specifically includes:

if the output signal is consistent with the safety control byte, executing the solid state disk read-write operation requested by the user;

and if the output signal is inconsistent with the safety control byte, not executing the solid state disk read-write operation requested by the user, and triggering an alarm signal.

6. A solid state disk safety control device based on CDMA is characterized by comprising:

the allocation module is used for allocating a first safety control coding pseudorandom sequence to the solid state disk storage array;

the spread spectrum module is used for spreading the user safety control bytes in the observation time window through the first safety control code pseudorandom sequence to obtain spread spectrum codes;

the transmission module is used for transmitting the spread spectrum codes to a CDMA security control module of the solid state disk system;

and the CDMA safety control module is used for sequentially carrying out de-spreading processing and integral processing on the data stream received by the CDMA safety control module, and carrying out safety judgment on the output signal subjected to the integral processing so as to judge whether to execute the read-write operation of the solid state disk.

7. The CDMA-based solid state disk security control device of claim 6, wherein the CDMA security control module of the solid state disk system comprises:

the de-spreading module is used for de-spreading the data stream received by the CDMA security control module of the solid state disk system;

the integration module is used for carrying out integration processing on the despread data stream;

and the judging module is used for carrying out safety judgment on the output signal of the integrating module so as to judge whether to execute the read/write operation of the solid state disk.

8. The CDMA-based solid state disk security control device of claim 7, wherein the despreading module is specifically configured to: multiplying the data stream received by the receiving end of the CDMA security control module by a second security control coding pseudorandom sequence to obtain a despread data stream;

the second safety control coding pseudo-random sequence is completely the same as the first safety control coding pseudo-random sequence of the sending end and is accurately synchronous.

9. The CDMA-based solid state disk security control device of claim 7, wherein the determining module is configured to perform a solid state disk read-write operation when the output signal of the integrating module is consistent with the user security control byte;

and when the output signal of the integration module is inconsistent with the user safety control byte, the read-write operation of the solid state disk is not executed, and an alarm signal is triggered at the same time.

Images